]> git.proxmox.com Git - mirror_ubuntu-focal-kernel.git/blame - net/wireless/nl80211.c
projects / mirror_ubuntu-focal-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
ieee80211: mark 802.11 related structs as being 2-byte aligned
[mirror_ubuntu-focal-kernel.git] / net / wireless / nl80211.c
CommitLineData
55682965
JB		 1/*
2 * This is the new netlink-based wireless configuration interface.
3 *
026331c4 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
55682965
JB		 5 */
6
7#include <linux/if.h>
8#include <linux/module.h>
9#include <linux/err.h>
5a0e3ad6 10#include <linux/slab.h>
55682965
JB		 11#include <linux/list.h>
12#include <linux/if_ether.h>
13#include <linux/ieee80211.h>
14#include <linux/nl80211.h>
15#include <linux/rtnetlink.h>
16#include <linux/netlink.h>
2a519311 17#include <linux/etherdevice.h>
463d0183 18#include <net/net_namespace.h>
55682965
JB		 19#include <net/genetlink.h>
20#include <net/cfg80211.h>
463d0183 21#include <net/sock.h>
2a0e047e 22#include <net/inet_connection_sock.h>
55682965
JB		 23#include "core.h"
24#include "nl80211.h"
b2e1b302 25#include "reg.h"
e35e4d28 26#include "rdev-ops.h"
55682965 27
5fb628e9
JM		 28static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
29 struct genl_info *info,
30 struct cfg80211_crypto_settings *settings,
31 int cipher_limit);
32
4c476991
JB		 33static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
34 struct genl_info *info);
35static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
36 struct genl_info *info);
37
55682965
JB		 38/* the netlink family */
39static struct genl_family nl80211_fam = {
40 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
41 .name = "nl80211", /* have users key off the name instead */
42 .hdrsize = 0, /* no private header */
43 .version = 1, /* no particular meaning now */
44 .maxattr = NL80211_ATTR_MAX,
463d0183 45 .netnsok = true,
4c476991
JB		 46 .pre_doit = nl80211_pre_doit,
47 .post_doit = nl80211_post_doit,
55682965
JB		 48};
49
89a54e48
JB		 50/* returns ERR_PTR values */
51static struct wireless_dev *
52__cfg80211_wdev_from_attrs(struct net *netns, struct nlattr **attrs)
55682965 53{
89a54e48
JB		 54 struct cfg80211_registered_device *rdev;
55 struct wireless_dev *result = NULL;
56 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
57 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
58 u64 wdev_id;
59 int wiphy_idx = -1;
60 int ifidx = -1;
55682965 61
89a54e48 62 assert_cfg80211_lock();
55682965 63
89a54e48
JB		 64 if (!have_ifidx && !have_wdev_id)
65 return ERR_PTR(-EINVAL);
55682965 66
89a54e48
JB		 67 if (have_ifidx)
68 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
69 if (have_wdev_id) {
70 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
71 wiphy_idx = wdev_id >> 32;
55682965
JB		 72 }
73
89a54e48
JB		 74 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
75 struct wireless_dev *wdev;
76
77 if (wiphy_net(&rdev->wiphy) != netns)
78 continue;
79
80 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
81 continue;
82
83 mutex_lock(&rdev->devlist_mtx);
84 list_for_each_entry(wdev, &rdev->wdev_list, list) {
85 if (have_ifidx && wdev->netdev &&
86 wdev->netdev->ifindex == ifidx) {
87 result = wdev;
88 break;
89 }
90 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
91 result = wdev;
92 break;
93 }
94 }
95 mutex_unlock(&rdev->devlist_mtx);
96
97 if (result)
98 break;
99 }
100
101 if (result)
102 return result;
103 return ERR_PTR(-ENODEV);
55682965
JB		 104}
105
a9455408 106static struct cfg80211_registered_device *
878d9ec7 107__cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
a9455408 108{
7fee4778
JB		 109 struct cfg80211_registered_device *rdev = NULL, *tmp;
110 struct net_device *netdev;
a9455408
JB		 111
112 assert_cfg80211_lock();
113
878d9ec7 114 if (!attrs[NL80211_ATTR_WIPHY] &&
89a54e48
JB		 115 !attrs[NL80211_ATTR_IFINDEX] &&
116 !attrs[NL80211_ATTR_WDEV])
7fee4778
JB		 117 return ERR_PTR(-EINVAL);
118
878d9ec7 119 if (attrs[NL80211_ATTR_WIPHY])
7fee4778 120 rdev = cfg80211_rdev_by_wiphy_idx(
878d9ec7 121 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
a9455408 122
89a54e48
JB		 123 if (attrs[NL80211_ATTR_WDEV]) {
124 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
125 struct wireless_dev *wdev;
126 bool found = false;
127
128 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
129 if (tmp) {
130 /* make sure wdev exists */
131 mutex_lock(&tmp->devlist_mtx);
132 list_for_each_entry(wdev, &tmp->wdev_list, list) {
133 if (wdev->identifier != (u32)wdev_id)
134 continue;
135 found = true;
136 break;
137 }
138 mutex_unlock(&tmp->devlist_mtx);
139
140 if (!found)
141 tmp = NULL;
142
143 if (rdev && tmp != rdev)
144 return ERR_PTR(-EINVAL);
145 rdev = tmp;
146 }
147 }
148
878d9ec7
JB		 149 if (attrs[NL80211_ATTR_IFINDEX]) {
150 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
4f7eff10 151 netdev = dev_get_by_index(netns, ifindex);
7fee4778
JB		 152 if (netdev) {
153 if (netdev->ieee80211_ptr)
154 tmp = wiphy_to_dev(
155 netdev->ieee80211_ptr->wiphy);
156 else
157 tmp = NULL;
158
159 dev_put(netdev);
160
161 /* not wireless device -- return error */
162 if (!tmp)
163 return ERR_PTR(-EINVAL);
164
165 /* mismatch -- return error */
166 if (rdev && tmp != rdev)
167 return ERR_PTR(-EINVAL);
168
169 rdev = tmp;
a9455408 170 }
a9455408 171 }
a9455408 172
4f7eff10
JB		 173 if (!rdev)
174 return ERR_PTR(-ENODEV);
a9455408 175
4f7eff10
JB		 176 if (netns != wiphy_net(&rdev->wiphy))
177 return ERR_PTR(-ENODEV);
178
179 return rdev;
a9455408
JB		 180}
181
182/*
183 * This function returns a pointer to the driver
184 * that the genl_info item that is passed refers to.
185 * If successful, it returns non-NULL and also locks
186 * the driver's mutex!
187 *
188 * This means that you need to call cfg80211_unlock_rdev()
189 * before being allowed to acquire &cfg80211_mutex!
190 *
191 * This is necessary because we need to lock the global
192 * mutex to get an item off the list safely, and then
193 * we lock the rdev mutex so it doesn't go away under us.
194 *
195 * We don't want to keep cfg80211_mutex locked
196 * for all the time in order to allow requests on
197 * other interfaces to go through at the same time.
198 *
199 * The result of this can be a PTR_ERR and hence must
200 * be checked with IS_ERR() for errors.
201 */
202static struct cfg80211_registered_device *
4f7eff10 203cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
a9455408
JB		 204{
205 struct cfg80211_registered_device *rdev;
206
207 mutex_lock(&cfg80211_mutex);
878d9ec7 208 rdev = __cfg80211_rdev_from_attrs(netns, info->attrs);
a9455408
JB		 209
210 /* if it is not an error we grab the lock on
211 * it to assure it won't be going away while
212 * we operate on it */
213 if (!IS_ERR(rdev))
214 mutex_lock(&rdev->mtx);
215
216 mutex_unlock(&cfg80211_mutex);
217
218 return rdev;
219}
220
55682965 221/* policy for the attributes */
b54452b0 222static const struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] = {
55682965
JB		 223 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
224 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 225 .len = 20-1 },
31888487 226 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
3d9d1d66 227
72bdcf34 228 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 229 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
3d9d1d66
JB		 230 [NL80211_ATTR_CHANNEL_WIDTH] = { .type = NLA_U32 },
231 [NL80211_ATTR_CENTER_FREQ1] = { .type = NLA_U32 },
232 [NL80211_ATTR_CENTER_FREQ2] = { .type = NLA_U32 },
233
b9a5f8ca
JM		 234 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
235 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
236 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
237 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 238 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
55682965
JB		 239
240 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
241 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
242 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 243
e007b857
EP		 244 [NL80211_ATTR_MAC] = { .len = ETH_ALEN },
245 [NL80211_ATTR_PREV_BSSID] = { .len = ETH_ALEN },
41ade00f 246
b9454e83 247 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 248 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
249 .len = WLAN_MAX_KEY_LEN },
250 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
251 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
252 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 253 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
e31b8213 254 [NL80211_ATTR_KEY_TYPE] = { .type = NLA_U32 },
ed1b6cc7
JB		 255
256 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
257 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
258 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
259 .len = IEEE80211_MAX_DATA_LEN },
260 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
261 .len = IEEE80211_MAX_DATA_LEN },
5727ef1b
JB		 262 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
263 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
264 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
265 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
266 .len = NL80211_MAX_SUPP_RATES },
2ec600d6 267 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
5727ef1b 268 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 269 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6 270 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
a4f606ea 271 .len = IEEE80211_MAX_MESH_ID_LEN },
2ec600d6 272 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
9f1ba906 273
b2e1b302
LR		 274 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
275 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
276
9f1ba906
JM		 277 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
278 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
279 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 280 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
281 .len = NL80211_MAX_SUPP_RATES },
50b12f59 282 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 283
24bdd9f4 284 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 285 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 286
6c739419 287 [NL80211_ATTR_HT_CAPABILITY] = { .len = NL80211_HT_CAPABILITY_LEN },
9aed3cc1
JM		 288
289 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
290 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
291 .len = IEEE80211_MAX_DATA_LEN },
2a519311
JB		 292 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
293 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 294
295 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
296 .len = IEEE80211_MAX_SSID_LEN },
297 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
298 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 299 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 300 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
dc6382ce 301 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
eccb8e8f
JB		 302 [NL80211_ATTR_STA_FLAGS2] = {
303 .len = sizeof(struct nl80211_sta_flag_update),
304 },
3f77316c 305 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 306 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
307 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
b23aa676
SO		 308 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
309 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
310 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 311 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 312 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
67fbb16b
SO		 313 [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
314 .len = WLAN_PMKID_LEN },
9588bbd5
JM		 315 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
316 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 317 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 318 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
319 .len = IEEE80211_MAX_DATA_LEN },
320 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ffb9eb3d 321 [NL80211_ATTR_PS_STATE] = { .type = NLA_U32 },
d6dc1a38 322 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 323 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 324 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 325 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
326 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 327 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 328 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
329 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 330 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 331 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 332 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 333 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
9c3990aa 334 [NL80211_ATTR_STA_PLINK_STATE] = { .type = NLA_U8 },
bbe6ad6d 335 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 336 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 337 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
32e9de84 338 [NL80211_ATTR_HIDDEN_SSID] = { .type = NLA_U32 },
9946ecfb
JM		 339 [NL80211_ATTR_IE_PROBE_RESP] = { .type = NLA_BINARY,
340 .len = IEEE80211_MAX_DATA_LEN },
341 [NL80211_ATTR_IE_ASSOC_RESP] = { .type = NLA_BINARY,
342 .len = IEEE80211_MAX_DATA_LEN },
f4b34b55 343 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 344 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 345 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 346 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
347 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
348 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
349 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
350 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
e247bd90 351 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 352 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
353 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 354 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 355 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
356 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
357 .len = NL80211_HT_CAPABILITY_LEN
358 },
1d9d9213 359 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 360 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 361 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
89a54e48 362 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
57b5ce07 363 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
e39e5b5e 364 [NL80211_ATTR_SAE_DATA] = { .type = NLA_BINARY, },
f461be3e 365 [NL80211_ATTR_VHT_CAPABILITY] = { .len = NL80211_VHT_CAPABILITY_LEN },
ed473771 366 [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
53cabad7
JB		 367 [NL80211_ATTR_P2P_CTWINDOW] = { .type = NLA_U8 },
368 [NL80211_ATTR_P2P_OPPPS] = { .type = NLA_U8 },
77765eaf
VT		 369 [NL80211_ATTR_ACL_POLICY] = {. type = NLA_U32 },
370 [NL80211_ATTR_MAC_ADDRS] = { .type = NLA_NESTED },
9d62a986
JM		 371 [NL80211_ATTR_STA_CAPABILITY] = { .type = NLA_U16 },
372 [NL80211_ATTR_STA_EXT_CAPABILITY] = { .type = NLA_BINARY, },
3713b4e3 373 [NL80211_ATTR_SPLIT_WIPHY_DUMP] = { .type = NLA_FLAG, },
55682965
JB		 374};
375
e31b8213 376/* policy for the key attributes */
b54452b0 377static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 378 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 379 [NL80211_KEY_IDX] = { .type = NLA_U8 },
380 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 381 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 382 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
383 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
e31b8213 384 [NL80211_KEY_TYPE] = { .type = NLA_U32 },
dbd2fd65
JB		 385 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
386};
387
388/* policy for the key default flags */
389static const struct nla_policy
390nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
391 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
392 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 393};
394
ff1b6e69
JB		 395/* policy for WoWLAN attributes */
396static const struct nla_policy
397nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
398 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
399 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
400 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
401 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 402 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
403 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
404 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
405 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
2a0e047e
JB		 406 [NL80211_WOWLAN_TRIG_TCP_CONNECTION] = { .type = NLA_NESTED },
407};
408
409static const struct nla_policy
410nl80211_wowlan_tcp_policy[NUM_NL80211_WOWLAN_TCP] = {
411 [NL80211_WOWLAN_TCP_SRC_IPV4] = { .type = NLA_U32 },
412 [NL80211_WOWLAN_TCP_DST_IPV4] = { .type = NLA_U32 },
413 [NL80211_WOWLAN_TCP_DST_MAC] = { .len = ETH_ALEN },
414 [NL80211_WOWLAN_TCP_SRC_PORT] = { .type = NLA_U16 },
415 [NL80211_WOWLAN_TCP_DST_PORT] = { .type = NLA_U16 },
416 [NL80211_WOWLAN_TCP_DATA_PAYLOAD] = { .len = 1 },
417 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ] = {
418 .len = sizeof(struct nl80211_wowlan_tcp_data_seq)
419 },
420 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN] = {
421 .len = sizeof(struct nl80211_wowlan_tcp_data_token)
422 },
423 [NL80211_WOWLAN_TCP_DATA_INTERVAL] = { .type = NLA_U32 },
424 [NL80211_WOWLAN_TCP_WAKE_PAYLOAD] = { .len = 1 },
425 [NL80211_WOWLAN_TCP_WAKE_MASK] = { .len = 1 },
ff1b6e69
JB		 426};
427
e5497d76
JB		 428/* policy for GTK rekey offload attributes */
429static const struct nla_policy
430nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
431 [NL80211_REKEY_DATA_KEK] = { .len = NL80211_KEK_LEN },
432 [NL80211_REKEY_DATA_KCK] = { .len = NL80211_KCK_LEN },
433 [NL80211_REKEY_DATA_REPLAY_CTR] = { .len = NL80211_REPLAY_CTR_LEN },
434};
435
a1f1c21c
LC		 436static const struct nla_policy
437nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
4a4ab0d7 438 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
a1f1c21c 439 .len = IEEE80211_MAX_SSID_LEN },
88e920b4 440 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
a1f1c21c
LC		 441};
442
a043897a
HS		 443/* ifidx get helper */
444static int nl80211_get_ifidx(struct netlink_callback *cb)
445{
446 int res;
447
448 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
449 nl80211_fam.attrbuf, nl80211_fam.maxattr,
450 nl80211_policy);
451 if (res)
452 return res;
453
454 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
455 return -EINVAL;
456
457 res = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
458 if (!res)
459 return -EINVAL;
460 return res;
461}
462
67748893
JB		 463static int nl80211_prepare_netdev_dump(struct sk_buff *skb,
464 struct netlink_callback *cb,
465 struct cfg80211_registered_device **rdev,
466 struct net_device **dev)
467{
468 int ifidx = cb->args[0];
469 int err;
470
471 if (!ifidx)
472 ifidx = nl80211_get_ifidx(cb);
473 if (ifidx < 0)
474 return ifidx;
475
476 cb->args[0] = ifidx;
477
478 rtnl_lock();
479
480 *dev = __dev_get_by_index(sock_net(skb->sk), ifidx);
481 if (!*dev) {
482 err = -ENODEV;
483 goto out_rtnl;
484 }
485
486 *rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
3cc25e51
FF		 487 if (IS_ERR(*rdev)) {
488 err = PTR_ERR(*rdev);
67748893
JB		 489 goto out_rtnl;
490 }
491
492 return 0;
493 out_rtnl:
494 rtnl_unlock();
495 return err;
496}
497
498static void nl80211_finish_netdev_dump(struct cfg80211_registered_device *rdev)
499{
500 cfg80211_unlock_rdev(rdev);
501 rtnl_unlock();
502}
503
f4a11bb0
JB		 504/* IE validation */
505static bool is_valid_ie_attr(const struct nlattr *attr)
506{
507 const u8 *pos;
508 int len;
509
510 if (!attr)
511 return true;
512
513 pos = nla_data(attr);
514 len = nla_len(attr);
515
516 while (len) {
517 u8 elemlen;
518
519 if (len < 2)
520 return false;
521 len -= 2;
522
523 elemlen = pos[1];
524 if (elemlen > len)
525 return false;
526
527 len -= elemlen;
528 pos += 2 + elemlen;
529 }
530
531 return true;
532}
533
55682965 534/* message building helper */
15e47304 535static inline void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
55682965
JB		 536 int flags, u8 cmd)
537{
538 /* since there is no private header just add the generic one */
15e47304 539 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
55682965
JB		 540}
541
5dab3b8a 542static int nl80211_msg_put_channel(struct sk_buff *msg,
cdc89b97
JB		 543 struct ieee80211_channel *chan,
544 bool large)
5dab3b8a 545{
9360ffd1
DM		 546 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
547 chan->center_freq))
548 goto nla_put_failure;
5dab3b8a 549
9360ffd1
DM		 550 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
551 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
552 goto nla_put_failure;
553 if ((chan->flags & IEEE80211_CHAN_PASSIVE_SCAN) &&
554 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN))
555 goto nla_put_failure;
556 if ((chan->flags & IEEE80211_CHAN_NO_IBSS) &&
557 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IBSS))
558 goto nla_put_failure;
cdc89b97
JB		 559 if (chan->flags & IEEE80211_CHAN_RADAR) {
560 if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
561 goto nla_put_failure;
562 if (large) {
563 u32 time;
564
565 time = elapsed_jiffies_msecs(chan->dfs_state_entered);
566
567 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_STATE,
568 chan->dfs_state))
569 goto nla_put_failure;
570 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_TIME,
571 time))
572 goto nla_put_failure;
573 }
574 }
5dab3b8a 575
9360ffd1
DM		 576 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
577 DBM_TO_MBM(chan->max_power)))
578 goto nla_put_failure;
5dab3b8a
LR		 579
580 return 0;
581
582 nla_put_failure:
583 return -ENOBUFS;
584}
585
55682965
JB		 586/* netlink command implementations */
587
b9454e83
JB		 588struct key_parse {
589 struct key_params p;
590 int idx;
e31b8213 591 int type;
b9454e83 592 bool def, defmgmt;
dbd2fd65 593 bool def_uni, def_multi;
b9454e83
JB		 594};
595
596static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
597{
598 struct nlattr *tb[NL80211_KEY_MAX + 1];
599 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
600 nl80211_key_policy);
601 if (err)
602 return err;
603
604 k->def = !!tb[NL80211_KEY_DEFAULT];
605 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
606
dbd2fd65
JB		 607 if (k->def) {
608 k->def_uni = true;
609 k->def_multi = true;
610 }
611 if (k->defmgmt)
612 k->def_multi = true;
613
b9454e83
JB		 614 if (tb[NL80211_KEY_IDX])
615 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
616
617 if (tb[NL80211_KEY_DATA]) {
618 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
619 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
620 }
621
622 if (tb[NL80211_KEY_SEQ]) {
623 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
624 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
625 }
626
627 if (tb[NL80211_KEY_CIPHER])
628 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
629
e31b8213
JB		 630 if (tb[NL80211_KEY_TYPE]) {
631 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
632 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
633 return -EINVAL;
634 }
635
dbd2fd65
JB		 636 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
637 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
2da8f419
JB		 638 err = nla_parse_nested(kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
639 tb[NL80211_KEY_DEFAULT_TYPES],
640 nl80211_key_default_policy);
dbd2fd65
JB		 641 if (err)
642 return err;
643
644 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
645 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
646 }
647
b9454e83
JB		 648 return 0;
649}
650
651static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
652{
653 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
654 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
655 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
656 }
657
658 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
659 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
660 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
661 }
662
663 if (info->attrs[NL80211_ATTR_KEY_IDX])
664 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
665
666 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
667 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
668
669 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
670 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
671
dbd2fd65
JB		 672 if (k->def) {
673 k->def_uni = true;
674 k->def_multi = true;
675 }
676 if (k->defmgmt)
677 k->def_multi = true;
678
e31b8213
JB		 679 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
680 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
681 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
682 return -EINVAL;
683 }
684
dbd2fd65
JB		 685 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
686 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
687 int err = nla_parse_nested(
688 kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
689 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
690 nl80211_key_default_policy);
691 if (err)
692 return err;
693
694 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
695 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
696 }
697
b9454e83
JB		 698 return 0;
699}
700
701static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
702{
703 int err;
704
705 memset(k, 0, sizeof(*k));
706 k->idx = -1;
e31b8213 707 k->type = -1;
b9454e83
JB		 708
709 if (info->attrs[NL80211_ATTR_KEY])
710 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
711 else
712 err = nl80211_parse_key_old(info, k);
713
714 if (err)
715 return err;
716
717 if (k->def && k->defmgmt)
718 return -EINVAL;
719
dbd2fd65
JB		 720 if (k->defmgmt) {
721 if (k->def_uni || !k->def_multi)
722 return -EINVAL;
723 }
724
b9454e83
JB		 725 if (k->idx != -1) {
726 if (k->defmgmt) {
727 if (k->idx < 4 || k->idx > 5)
728 return -EINVAL;
729 } else if (k->def) {
730 if (k->idx < 0 || k->idx > 3)
731 return -EINVAL;
732 } else {
733 if (k->idx < 0 || k->idx > 5)
734 return -EINVAL;
735 }
736 }
737
738 return 0;
739}
740
fffd0934
JB		 741static struct cfg80211_cached_keys *
742nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
de7044ee 743 struct nlattr *keys, bool *no_ht)
fffd0934
JB		 744{
745 struct key_parse parse;
746 struct nlattr *key;
747 struct cfg80211_cached_keys *result;
748 int rem, err, def = 0;
749
750 result = kzalloc(sizeof(*result), GFP_KERNEL);
751 if (!result)
752 return ERR_PTR(-ENOMEM);
753
754 result->def = -1;
755 result->defmgmt = -1;
756
757 nla_for_each_nested(key, keys, rem) {
758 memset(&parse, 0, sizeof(parse));
759 parse.idx = -1;
760
761 err = nl80211_parse_key_new(key, &parse);
762 if (err)
763 goto error;
764 err = -EINVAL;
765 if (!parse.p.key)
766 goto error;
767 if (parse.idx < 0 || parse.idx > 4)
768 goto error;
769 if (parse.def) {
770 if (def)
771 goto error;
772 def = 1;
773 result->def = parse.idx;
dbd2fd65
JB		 774 if (!parse.def_uni || !parse.def_multi)
775 goto error;
fffd0934
JB		 776 } else if (parse.defmgmt)
777 goto error;
778 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 779 parse.idx, false, NULL);
fffd0934
JB		 780 if (err)
781 goto error;
782 result->params[parse.idx].cipher = parse.p.cipher;
783 result->params[parse.idx].key_len = parse.p.key_len;
784 result->params[parse.idx].key = result->data[parse.idx];
785 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
de7044ee
SM		 786
787 if (parse.p.cipher == WLAN_CIPHER_SUITE_WEP40 ||
788 parse.p.cipher == WLAN_CIPHER_SUITE_WEP104) {
789 if (no_ht)
790 *no_ht = true;
791 }
fffd0934
JB		 792 }
793
794 return result;
795 error:
796 kfree(result);
797 return ERR_PTR(err);
798}
799
800static int nl80211_key_allowed(struct wireless_dev *wdev)
801{
802 ASSERT_WDEV_LOCK(wdev);
803
fffd0934
JB		 804 switch (wdev->iftype) {
805 case NL80211_IFTYPE_AP:
806 case NL80211_IFTYPE_AP_VLAN:
074ac8df 807 case NL80211_IFTYPE_P2P_GO:
ff973af7 808 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 809 break;
810 case NL80211_IFTYPE_ADHOC:
811 if (!wdev->current_bss)
812 return -ENOLINK;
813 break;
814 case NL80211_IFTYPE_STATION:
074ac8df 815 case NL80211_IFTYPE_P2P_CLIENT:
fffd0934
JB		 816 if (wdev->sme_state != CFG80211_SME_CONNECTED)
817 return -ENOLINK;
818 break;
819 default:
820 return -EINVAL;
821 }
822
823 return 0;
824}
825
7527a782
JB		 826static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
827{
828 struct nlattr *nl_modes = nla_nest_start(msg, attr);
829 int i;
830
831 if (!nl_modes)
832 goto nla_put_failure;
833
834 i = 0;
835 while (ifmodes) {
9360ffd1
DM		 836 if ((ifmodes & 1) && nla_put_flag(msg, i))
837 goto nla_put_failure;
7527a782
JB		 838 ifmodes >>= 1;
839 i++;
840 }
841
842 nla_nest_end(msg, nl_modes);
843 return 0;
844
845nla_put_failure:
846 return -ENOBUFS;
847}
848
849static int nl80211_put_iface_combinations(struct wiphy *wiphy,
cdc89b97
JB		 850 struct sk_buff *msg,
851 bool large)
7527a782
JB		 852{
853 struct nlattr *nl_combis;
854 int i, j;
855
856 nl_combis = nla_nest_start(msg,
857 NL80211_ATTR_INTERFACE_COMBINATIONS);
858 if (!nl_combis)
859 goto nla_put_failure;
860
861 for (i = 0; i < wiphy->n_iface_combinations; i++) {
862 const struct ieee80211_iface_combination *c;
863 struct nlattr *nl_combi, *nl_limits;
864
865 c = &wiphy->iface_combinations[i];
866
867 nl_combi = nla_nest_start(msg, i + 1);
868 if (!nl_combi)
869 goto nla_put_failure;
870
871 nl_limits = nla_nest_start(msg, NL80211_IFACE_COMB_LIMITS);
872 if (!nl_limits)
873 goto nla_put_failure;
874
875 for (j = 0; j < c->n_limits; j++) {
876 struct nlattr *nl_limit;
877
878 nl_limit = nla_nest_start(msg, j + 1);
879 if (!nl_limit)
880 goto nla_put_failure;
9360ffd1
DM		 881 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
882 c->limits[j].max))
883 goto nla_put_failure;
7527a782
JB		 884 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
885 c->limits[j].types))
886 goto nla_put_failure;
887 nla_nest_end(msg, nl_limit);
888 }
889
890 nla_nest_end(msg, nl_limits);
891
9360ffd1
DM		 892 if (c->beacon_int_infra_match &&
893 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
894 goto nla_put_failure;
895 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
896 c->num_different_channels) ||
897 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
898 c->max_interfaces))
899 goto nla_put_failure;
cdc89b97
JB		 900 if (large &&
901 nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_WIDTHS,
902 c->radar_detect_widths))
903 goto nla_put_failure;
7527a782
JB		 904
905 nla_nest_end(msg, nl_combi);
906 }
907
908 nla_nest_end(msg, nl_combis);
909
910 return 0;
911nla_put_failure:
912 return -ENOBUFS;
913}
914
3713b4e3 915#ifdef CONFIG_PM
b56cf720
JB		 916static int nl80211_send_wowlan_tcp_caps(struct cfg80211_registered_device *rdev,
917 struct sk_buff *msg)
918{
919 const struct wiphy_wowlan_tcp_support *tcp = rdev->wiphy.wowlan.tcp;
920 struct nlattr *nl_tcp;
921
922 if (!tcp)
923 return 0;
924
925 nl_tcp = nla_nest_start(msg, NL80211_WOWLAN_TRIG_TCP_CONNECTION);
926 if (!nl_tcp)
927 return -ENOBUFS;
928
929 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
930 tcp->data_payload_max))
931 return -ENOBUFS;
932
933 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
934 tcp->data_payload_max))
935 return -ENOBUFS;
936
937 if (tcp->seq && nla_put_flag(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ))
938 return -ENOBUFS;
939
940 if (tcp->tok && nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
941 sizeof(*tcp->tok), tcp->tok))
942 return -ENOBUFS;
943
944 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
945 tcp->data_interval_max))
946 return -ENOBUFS;
947
948 if (nla_put_u32(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
949 tcp->wake_payload_max))
950 return -ENOBUFS;
951
952 nla_nest_end(msg, nl_tcp);
953 return 0;
954}
955
3713b4e3 956static int nl80211_send_wowlan(struct sk_buff *msg,
b56cf720
JB		 957 struct cfg80211_registered_device *dev,
958 bool large)
55682965 959{
3713b4e3 960 struct nlattr *nl_wowlan;
55682965 961
3713b4e3
JB		 962 if (!dev->wiphy.wowlan.flags && !dev->wiphy.wowlan.n_patterns)
963 return 0;
55682965 964
3713b4e3
JB		 965 nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
966 if (!nl_wowlan)
967 return -ENOBUFS;
9360ffd1 968
3713b4e3
JB		 969 if (((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_ANY) &&
970 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
971 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_DISCONNECT) &&
972 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
973 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_MAGIC_PKT) &&
974 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
975 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
976 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
977 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
978 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
979 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
980 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
981 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
982 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
983 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
984 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
985 return -ENOBUFS;
9360ffd1 986
3713b4e3
JB		 987 if (dev->wiphy.wowlan.n_patterns) {
988 struct nl80211_wowlan_pattern_support pat = {
989 .max_patterns = dev->wiphy.wowlan.n_patterns,
990 .min_pattern_len = dev->wiphy.wowlan.pattern_min_len,
991 .max_pattern_len = dev->wiphy.wowlan.pattern_max_len,
992 .max_pkt_offset = dev->wiphy.wowlan.max_pkt_offset,
993 };
9360ffd1 994
3713b4e3
JB		 995 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
996 sizeof(pat), &pat))
997 return -ENOBUFS;
998 }
9360ffd1 999
b56cf720
JB		 1000 if (large && nl80211_send_wowlan_tcp_caps(dev, msg))
1001 return -ENOBUFS;
1002
3713b4e3 1003 nla_nest_end(msg, nl_wowlan);
9360ffd1 1004
3713b4e3
JB		 1005 return 0;
1006}
1007#endif
9360ffd1 1008
3713b4e3
JB		 1009static int nl80211_send_band_rateinfo(struct sk_buff *msg,
1010 struct ieee80211_supported_band *sband)
1011{
1012 struct nlattr *nl_rates, *nl_rate;
1013 struct ieee80211_rate *rate;
1014 int i;
87bbbe22 1015
3713b4e3
JB		 1016 /* add HT info */
1017 if (sband->ht_cap.ht_supported &&
1018 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
1019 sizeof(sband->ht_cap.mcs),
1020 &sband->ht_cap.mcs) ||
1021 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
1022 sband->ht_cap.cap) ||
1023 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
1024 sband->ht_cap.ampdu_factor) ||
1025 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
1026 sband->ht_cap.ampdu_density)))
1027 return -ENOBUFS;
afe0cbf8 1028
3713b4e3
JB		 1029 /* add VHT info */
1030 if (sband->vht_cap.vht_supported &&
1031 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
1032 sizeof(sband->vht_cap.vht_mcs),
1033 &sband->vht_cap.vht_mcs) ||
1034 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
1035 sband->vht_cap.cap)))
1036 return -ENOBUFS;
f59ac048 1037
3713b4e3
JB		 1038 /* add bitrates */
1039 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
1040 if (!nl_rates)
1041 return -ENOBUFS;
ee688b00 1042
3713b4e3
JB		 1043 for (i = 0; i < sband->n_bitrates; i++) {
1044 nl_rate = nla_nest_start(msg, i);
1045 if (!nl_rate)
1046 return -ENOBUFS;
ee688b00 1047
3713b4e3
JB		 1048 rate = &sband->bitrates[i];
1049 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1050 rate->bitrate))
1051 return -ENOBUFS;
1052 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1053 nla_put_flag(msg,
1054 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1055 return -ENOBUFS;
ee688b00 1056
3713b4e3
JB		 1057 nla_nest_end(msg, nl_rate);
1058 }
d51626df 1059
3713b4e3 1060 nla_nest_end(msg, nl_rates);
bf0c111e 1061
3713b4e3
JB		 1062 return 0;
1063}
ee688b00 1064
3713b4e3
JB		 1065static int
1066nl80211_send_mgmt_stypes(struct sk_buff *msg,
1067 const struct ieee80211_txrx_stypes *mgmt_stypes)
1068{
1069 u16 stypes;
1070 struct nlattr *nl_ftypes, *nl_ifs;
1071 enum nl80211_iftype ift;
1072 int i;
ee688b00 1073
3713b4e3
JB		 1074 if (!mgmt_stypes)
1075 return 0;
5dab3b8a 1076
3713b4e3
JB		 1077 nl_ifs = nla_nest_start(msg, NL80211_ATTR_TX_FRAME_TYPES);
1078 if (!nl_ifs)
1079 return -ENOBUFS;
e2f367f2 1080
3713b4e3
JB		 1081 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1082 nl_ftypes = nla_nest_start(msg, ift);
1083 if (!nl_ftypes)
1084 return -ENOBUFS;
1085 i = 0;
1086 stypes = mgmt_stypes[ift].tx;
1087 while (stypes) {
1088 if ((stypes & 1) &&
1089 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1090 (i << 4) | IEEE80211_FTYPE_MGMT))
1091 return -ENOBUFS;
1092 stypes >>= 1;
1093 i++;
ee688b00 1094 }
3713b4e3
JB		 1095 nla_nest_end(msg, nl_ftypes);
1096 }
ee688b00 1097
3713b4e3 1098 nla_nest_end(msg, nl_ifs);
ee688b00 1099
3713b4e3
JB		 1100 nl_ifs = nla_nest_start(msg, NL80211_ATTR_RX_FRAME_TYPES);
1101 if (!nl_ifs)
1102 return -ENOBUFS;
ee688b00 1103
3713b4e3
JB		 1104 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1105 nl_ftypes = nla_nest_start(msg, ift);
1106 if (!nl_ftypes)
1107 return -ENOBUFS;
1108 i = 0;
1109 stypes = mgmt_stypes[ift].rx;
1110 while (stypes) {
1111 if ((stypes & 1) &&
1112 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1113 (i << 4) | IEEE80211_FTYPE_MGMT))
1114 return -ENOBUFS;
1115 stypes >>= 1;
1116 i++;
1117 }
1118 nla_nest_end(msg, nl_ftypes);
1119 }
1120 nla_nest_end(msg, nl_ifs);
ee688b00 1121
3713b4e3
JB		 1122 return 0;
1123}
ee688b00 1124
3713b4e3
JB		 1125static int nl80211_send_wiphy(struct cfg80211_registered_device *dev,
1126 struct sk_buff *msg, u32 portid, u32 seq,
1127 int flags, bool split, long *split_start,
1128 long *band_start, long *chan_start)
1129{
1130 void *hdr;
1131 struct nlattr *nl_bands, *nl_band;
1132 struct nlattr *nl_freqs, *nl_freq;
1133 struct nlattr *nl_cmds;
1134 enum ieee80211_band band;
1135 struct ieee80211_channel *chan;
1136 int i;
1137 const struct ieee80211_txrx_stypes *mgmt_stypes =
1138 dev->wiphy.mgmt_stypes;
1139 long start = 0, start_chan = 0, start_band = 0;
ee688b00 1140
3713b4e3
JB		 1141 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_WIPHY);
1142 if (!hdr)
1143 return -ENOBUFS;
ee688b00 1144
3713b4e3
JB		 1145 /* allow always using the variables */
1146 if (!split) {
1147 split_start = &start;
1148 band_start = &start_band;
1149 chan_start = &start_chan;
ee688b00 1150 }
ee688b00 1151
3713b4e3
JB		 1152 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx) ||
1153 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME,
1154 wiphy_name(&dev->wiphy)) ||
1155 nla_put_u32(msg, NL80211_ATTR_GENERATION,
1156 cfg80211_rdev_list_generation))
8fdc621d
JB		 1157 goto nla_put_failure;
1158
3713b4e3
JB		 1159 switch (*split_start) {
1160 case 0:
1161 if (nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
1162 dev->wiphy.retry_short) ||
1163 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
1164 dev->wiphy.retry_long) ||
1165 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
1166 dev->wiphy.frag_threshold) ||
1167 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
1168 dev->wiphy.rts_threshold) ||
1169 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
1170 dev->wiphy.coverage_class) ||
1171 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
1172 dev->wiphy.max_scan_ssids) ||
1173 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
1174 dev->wiphy.max_sched_scan_ssids) ||
1175 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
1176 dev->wiphy.max_scan_ie_len) ||
1177 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
1178 dev->wiphy.max_sched_scan_ie_len) ||
1179 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
1180 dev->wiphy.max_match_sets))
9360ffd1 1181 goto nla_put_failure;
3713b4e3
JB		 1182
1183 if ((dev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
1184 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
aa430da4 1185 goto nla_put_failure;
3713b4e3
JB		 1186 if ((dev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
1187 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
1188 goto nla_put_failure;
1189 if ((dev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
1190 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
1191 goto nla_put_failure;
1192 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
1193 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
1194 goto nla_put_failure;
1195 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
1196 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
1197 goto nla_put_failure;
1198 if ((dev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
1199 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
9360ffd1 1200 goto nla_put_failure;
8fdc621d 1201
3713b4e3
JB		 1202 (*split_start)++;
1203 if (split)
1204 break;
1205 case 1:
1206 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
1207 sizeof(u32) * dev->wiphy.n_cipher_suites,
1208 dev->wiphy.cipher_suites))
1209 goto nla_put_failure;
4745fc09 1210
3713b4e3
JB		 1211 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
1212 dev->wiphy.max_num_pmkids))
1213 goto nla_put_failure;
b23aa676 1214
3713b4e3
JB		 1215 if ((dev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
1216 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
9360ffd1 1217 goto nla_put_failure;
b23aa676 1218
3713b4e3
JB		 1219 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
1220 dev->wiphy.available_antennas_tx) ||
1221 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
1222 dev->wiphy.available_antennas_rx))
9360ffd1 1223 goto nla_put_failure;
b23aa676 1224
3713b4e3
JB		 1225 if ((dev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
1226 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
1227 dev->wiphy.probe_resp_offload))
1228 goto nla_put_failure;
8fdc621d 1229
3713b4e3
JB		 1230 if ((dev->wiphy.available_antennas_tx ||
1231 dev->wiphy.available_antennas_rx) &&
1232 dev->ops->get_antenna) {
1233 u32 tx_ant = 0, rx_ant = 0;
1234 int res;
1235 res = rdev_get_antenna(dev, &tx_ant, &rx_ant);
1236 if (!res) {
1237 if (nla_put_u32(msg,
1238 NL80211_ATTR_WIPHY_ANTENNA_TX,
1239 tx_ant) ||
1240 nla_put_u32(msg,
1241 NL80211_ATTR_WIPHY_ANTENNA_RX,
1242 rx_ant))
1243 goto nla_put_failure;
1244 }
1245 }
a293911d 1246
3713b4e3
JB		 1247 (*split_start)++;
1248 if (split)
1249 break;
1250 case 2:
1251 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
1252 dev->wiphy.interface_modes))
1253 goto nla_put_failure;
1254 (*split_start)++;
1255 if (split)
1256 break;
1257 case 3:
1258 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
1259 if (!nl_bands)
1260 goto nla_put_failure;
f7ca38df 1261
3713b4e3
JB		 1262 for (band = *band_start; band < IEEE80211_NUM_BANDS; band++) {
1263 struct ieee80211_supported_band *sband;
2e161f78 1264
3713b4e3 1265 sband = dev->wiphy.bands[band];
2e161f78 1266
3713b4e3
JB		 1267 if (!sband)
1268 continue;
1269
1270 nl_band = nla_nest_start(msg, band);
1271 if (!nl_band)
2e161f78 1272 goto nla_put_failure;
3713b4e3
JB		 1273
1274 switch (*chan_start) {
1275 case 0:
1276 if (nl80211_send_band_rateinfo(msg, sband))
9360ffd1 1277 goto nla_put_failure;
3713b4e3
JB		 1278 (*chan_start)++;
1279 if (split)
1280 break;
1281 default:
1282 /* add frequencies */
1283 nl_freqs = nla_nest_start(
1284 msg, NL80211_BAND_ATTR_FREQS);
1285 if (!nl_freqs)
1286 goto nla_put_failure;
1287
1288 for (i = *chan_start - 1;
1289 i < sband->n_channels;
1290 i++) {
1291 nl_freq = nla_nest_start(msg, i);
1292 if (!nl_freq)
1293 goto nla_put_failure;
1294
1295 chan = &sband->channels[i];
1296
cdc89b97
JB		 1297 if (nl80211_msg_put_channel(msg, chan,
1298 split))
3713b4e3
JB		 1299 goto nla_put_failure;
1300
1301 nla_nest_end(msg, nl_freq);
1302 if (split)
1303 break;
1304 }
1305 if (i < sband->n_channels)
1306 *chan_start = i + 2;
1307 else
1308 *chan_start = 0;
1309 nla_nest_end(msg, nl_freqs);
1310 }
1311
1312 nla_nest_end(msg, nl_band);
1313
1314 if (split) {
1315 /* start again here */
1316 if (*chan_start)
1317 band--;
1318 break;
2e161f78 1319 }
2e161f78 1320 }
3713b4e3 1321 nla_nest_end(msg, nl_bands);
2e161f78 1322
3713b4e3
JB		 1323 if (band < IEEE80211_NUM_BANDS)
1324 *band_start = band + 1;
1325 else
1326 *band_start = 0;
74b70a4e 1327
3713b4e3
JB		 1328 /* if bands & channels are done, continue outside */
1329 if (*band_start == 0 && *chan_start == 0)
1330 (*split_start)++;
1331 if (split)
1332 break;
1333 case 4:
1334 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
1335 if (!nl_cmds)
2e161f78
JB		 1336 goto nla_put_failure;
1337
3713b4e3
JB		 1338 i = 0;
1339#define CMD(op, n) \
1340 do { \
1341 if (dev->ops->op) { \
1342 i++; \
1343 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
1344 goto nla_put_failure; \
1345 } \
1346 } while (0)
1347
1348 CMD(add_virtual_intf, NEW_INTERFACE);
1349 CMD(change_virtual_intf, SET_INTERFACE);
1350 CMD(add_key, NEW_KEY);
1351 CMD(start_ap, START_AP);
1352 CMD(add_station, NEW_STATION);
1353 CMD(add_mpath, NEW_MPATH);
1354 CMD(update_mesh_config, SET_MESH_CONFIG);
1355 CMD(change_bss, SET_BSS);
1356 CMD(auth, AUTHENTICATE);
1357 CMD(assoc, ASSOCIATE);
1358 CMD(deauth, DEAUTHENTICATE);
1359 CMD(disassoc, DISASSOCIATE);
1360 CMD(join_ibss, JOIN_IBSS);
1361 CMD(join_mesh, JOIN_MESH);
1362 CMD(set_pmksa, SET_PMKSA);
1363 CMD(del_pmksa, DEL_PMKSA);
1364 CMD(flush_pmksa, FLUSH_PMKSA);
1365 if (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
1366 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
1367 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
1368 CMD(mgmt_tx, FRAME);
1369 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
1370 if (dev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
1371 i++;
1372 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
2e161f78 1373 goto nla_put_failure;
2e161f78 1374 }
3713b4e3
JB		 1375 if (dev->ops->set_monitor_channel || dev->ops->start_ap ||
1376 dev->ops->join_mesh) {
1377 i++;
1378 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
1379 goto nla_put_failure;
1380 }
1381 CMD(set_wds_peer, SET_WDS_PEER);
1382 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
1383 CMD(tdls_mgmt, TDLS_MGMT);
1384 CMD(tdls_oper, TDLS_OPER);
1385 }
1386 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
1387 CMD(sched_scan_start, START_SCHED_SCAN);
1388 CMD(probe_client, PROBE_CLIENT);
1389 CMD(set_noack_map, SET_NOACK_MAP);
1390 if (dev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
1391 i++;
1392 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
1393 goto nla_put_failure;
1394 }
1395 CMD(start_p2p_device, START_P2P_DEVICE);
1396 CMD(set_mcast_rate, SET_MCAST_RATE);
2e161f78 1397
3713b4e3
JB		 1398#ifdef CONFIG_NL80211_TESTMODE
1399 CMD(testmode_cmd, TESTMODE);
1400#endif
ff1b6e69 1401
3713b4e3 1402#undef CMD
ff1b6e69 1403
3713b4e3
JB		 1404 if (dev->ops->connect || dev->ops->auth) {
1405 i++;
1406 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
9360ffd1 1407 goto nla_put_failure;
ff1b6e69
JB		 1408 }
1409
3713b4e3
JB		 1410 if (dev->ops->disconnect || dev->ops->deauth) {
1411 i++;
1412 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
1413 goto nla_put_failure;
1414 }
1415
1416 nla_nest_end(msg, nl_cmds);
1417 (*split_start)++;
1418 if (split)
1419 break;
1420 case 5:
1421 if (dev->ops->remain_on_channel &&
1422 (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
1423 nla_put_u32(msg,
1424 NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1425 dev->wiphy.max_remain_on_channel_duration))
1426 goto nla_put_failure;
1427
1428 if ((dev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
1429 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
1430 goto nla_put_failure;
1431
1432 if (nl80211_send_mgmt_stypes(msg, mgmt_stypes))
1433 goto nla_put_failure;
1434 (*split_start)++;
1435 if (split)
1436 break;
1437 case 6:
1438#ifdef CONFIG_PM
b56cf720 1439 if (nl80211_send_wowlan(msg, dev, split))
3713b4e3
JB		 1440 goto nla_put_failure;
1441 (*split_start)++;
1442 if (split)
1443 break;
1444#else
1445 (*split_start)++;
dfb89c56 1446#endif
3713b4e3
JB		 1447 case 7:
1448 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1449 dev->wiphy.software_iftypes))
1450 goto nla_put_failure;
ff1b6e69 1451
cdc89b97 1452 if (nl80211_put_iface_combinations(&dev->wiphy, msg, split))
3713b4e3 1453 goto nla_put_failure;
7527a782 1454
3713b4e3
JB		 1455 (*split_start)++;
1456 if (split)
1457 break;
1458 case 8:
1459 if ((dev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
1460 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1461 dev->wiphy.ap_sme_capa))
1462 goto nla_put_failure;
7527a782 1463
3713b4e3
JB		 1464 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS,
1465 dev->wiphy.features))
1466 goto nla_put_failure;
562a7480 1467
3713b4e3
JB		 1468 if (dev->wiphy.ht_capa_mod_mask &&
1469 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1470 sizeof(*dev->wiphy.ht_capa_mod_mask),
1471 dev->wiphy.ht_capa_mod_mask))
1472 goto nla_put_failure;
1f074bd8 1473
3713b4e3
JB		 1474 if (dev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME &&
1475 dev->wiphy.max_acl_mac_addrs &&
1476 nla_put_u32(msg, NL80211_ATTR_MAC_ACL_MAX,
1477 dev->wiphy.max_acl_mac_addrs))
1478 goto nla_put_failure;
7e7c8926 1479
3713b4e3
JB		 1480 /*
1481 * Any information below this point is only available to
1482 * applications that can deal with it being split. This
1483 * helps ensure that newly added capabilities don't break
1484 * older tools by overrunning their buffers.
1485 *
1486 * We still increment split_start so that in the split
1487 * case we'll continue with more data in the next round,
1488 * but break unconditionally so unsplit data stops here.
1489 */
1490 (*split_start)++;
1491 break;
1492 case 9:
1493 /* placeholder */
a50df0c4 1494
3713b4e3
JB		 1495 /* done */
1496 *split_start = 0;
1497 break;
1498 }
55682965
JB		 1499 return genlmsg_end(msg, hdr);
1500
1501 nla_put_failure:
bc3ed28c
TG		 1502 genlmsg_cancel(msg, hdr);
1503 return -EMSGSIZE;
55682965
JB		 1504}
1505
1506static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
1507{
645e77de 1508 int idx = 0, ret;
55682965
JB		 1509 int start = cb->args[0];
1510 struct cfg80211_registered_device *dev;
3713b4e3
JB		 1511 s64 filter_wiphy = -1;
1512 bool split = false;
1513 struct nlattr **tb = nl80211_fam.attrbuf;
1514 int res;
55682965 1515
a1794390 1516 mutex_lock(&cfg80211_mutex);
3713b4e3
JB		 1517 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
1518 tb, nl80211_fam.maxattr, nl80211_policy);
1519 if (res == 0) {
1520 split = tb[NL80211_ATTR_SPLIT_WIPHY_DUMP];
1521 if (tb[NL80211_ATTR_WIPHY])
1522 filter_wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
1523 if (tb[NL80211_ATTR_WDEV])
1524 filter_wiphy = nla_get_u64(tb[NL80211_ATTR_WDEV]) >> 32;
1525 if (tb[NL80211_ATTR_IFINDEX]) {
1526 struct net_device *netdev;
1527 int ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
1528
1529 netdev = dev_get_by_index(sock_net(skb->sk), ifidx);
1530 if (!netdev) {
1531 mutex_unlock(&cfg80211_mutex);
1532 return -ENODEV;
1533 }
1534 if (netdev->ieee80211_ptr) {
1535 dev = wiphy_to_dev(
1536 netdev->ieee80211_ptr->wiphy);
1537 filter_wiphy = dev->wiphy_idx;
1538 }
1539 dev_put(netdev);
1540 }
1541 }
1542
79c97e97 1543 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
463d0183
JB		 1544 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
1545 continue;
b4637271 1546 if (++idx <= start)
55682965 1547 continue;
3713b4e3
JB		 1548 if (filter_wiphy != -1 && dev->wiphy_idx != filter_wiphy)
1549 continue;
1550 /* attempt to fit multiple wiphy data chunks into the skb */
1551 do {
1552 ret = nl80211_send_wiphy(dev, skb,
1553 NETLINK_CB(cb->skb).portid,
1554 cb->nlh->nlmsg_seq,
1555 NLM_F_MULTI,
1556 split, &cb->args[1],
1557 &cb->args[2],
1558 &cb->args[3]);
1559 if (ret < 0) {
1560 /*
1561 * If sending the wiphy data didn't fit (ENOBUFS
1562 * or EMSGSIZE returned), this SKB is still
1563 * empty (so it's not too big because another
1564 * wiphy dataset is already in the skb) and
1565 * we've not tried to adjust the dump allocation
1566 * yet ... then adjust the alloc size to be
1567 * bigger, and return 1 but with the empty skb.
1568 * This results in an empty message being RX'ed
1569 * in userspace, but that is ignored.
1570 *
1571 * We can then retry with the larger buffer.
1572 */
1573 if ((ret == -ENOBUFS || ret == -EMSGSIZE) &&
1574 !skb->len &&
1575 cb->min_dump_alloc < 4096) {
1576 cb->min_dump_alloc = 4096;
1577 mutex_unlock(&cfg80211_mutex);
1578 return 1;
1579 }
1580 idx--;
1581 break;
645e77de 1582 }
3713b4e3
JB		 1583 } while (cb->args[1] > 0);
1584 break;
55682965 1585 }
a1794390 1586 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1587
1588 cb->args[0] = idx;
1589
1590 return skb->len;
1591}
1592
1593static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
1594{
1595 struct sk_buff *msg;
4c476991 1596 struct cfg80211_registered_device *dev = info->user_ptr[0];
55682965 1597
645e77de 1598 msg = nlmsg_new(4096, GFP_KERNEL);
55682965 1599 if (!msg)
4c476991 1600 return -ENOMEM;
55682965 1601
3713b4e3
JB		 1602 if (nl80211_send_wiphy(dev, msg, info->snd_portid, info->snd_seq, 0,
1603 false, NULL, NULL, NULL) < 0) {
4c476991
JB		 1604 nlmsg_free(msg);
1605 return -ENOBUFS;
1606 }
55682965 1607
134e6375 1608 return genlmsg_reply(msg, info);
55682965
JB		 1609}
1610
31888487
JM		 1611static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
1612 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
1613 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
1614 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
1615 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
1616 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
1617};
1618
1619static int parse_txq_params(struct nlattr *tb[],
1620 struct ieee80211_txq_params *txq_params)
1621{
a3304b0a 1622 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 1623 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
1624 !tb[NL80211_TXQ_ATTR_AIFS])
1625 return -EINVAL;
1626
a3304b0a 1627 txq_params->ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 1628 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
1629 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
1630 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
1631 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
1632
a3304b0a
JB		 1633 if (txq_params->ac >= NL80211_NUM_ACS)
1634 return -EINVAL;
1635
31888487
JM		 1636 return 0;
1637}
1638
f444de05
JB		 1639static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
1640{
1641 /*
cc1d2806
JB		 1642 * You can only set the channel explicitly for WDS interfaces,
1643 * all others have their channel managed via their respective
1644 * "establish a connection" command (connect, join, ...)
1645 *
1646 * For AP/GO and mesh mode, the channel can be set with the
1647 * channel userspace API, but is only stored and passed to the
1648 * low-level driver when the AP starts or the mesh is joined.
1649 * This is for backward compatibility, userspace can also give
1650 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 1651 *
1652 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 1653 * whatever else is going on, so they have their own special
1654 * operation to set the monitor channel if possible.
f444de05
JB		 1655 */
1656 return !wdev ||
1657 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 1658 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 1659 wdev->iftype == NL80211_IFTYPE_MONITOR ||
1660 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 1661}
1662
683b6d3b
JB		 1663static int nl80211_parse_chandef(struct cfg80211_registered_device *rdev,
1664 struct genl_info *info,
1665 struct cfg80211_chan_def *chandef)
1666{
dbeca2ea 1667 u32 control_freq;
683b6d3b
JB		 1668
1669 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
1670 return -EINVAL;
1671
1672 control_freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
1673
1674 chandef->chan = ieee80211_get_channel(&rdev->wiphy, control_freq);
3d9d1d66
JB		 1675 chandef->width = NL80211_CHAN_WIDTH_20_NOHT;
1676 chandef->center_freq1 = control_freq;
1677 chandef->center_freq2 = 0;
683b6d3b
JB		 1678
1679 /* Primary channel not allowed */
1680 if (!chandef->chan || chandef->chan->flags & IEEE80211_CHAN_DISABLED)
1681 return -EINVAL;
1682
3d9d1d66
JB		 1683 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
1684 enum nl80211_channel_type chantype;
1685
1686 chantype = nla_get_u32(
1687 info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1688
1689 switch (chantype) {
1690 case NL80211_CHAN_NO_HT:
1691 case NL80211_CHAN_HT20:
1692 case NL80211_CHAN_HT40PLUS:
1693 case NL80211_CHAN_HT40MINUS:
1694 cfg80211_chandef_create(chandef, chandef->chan,
1695 chantype);
1696 break;
1697 default:
1698 return -EINVAL;
1699 }
1700 } else if (info->attrs[NL80211_ATTR_CHANNEL_WIDTH]) {
1701 chandef->width =
1702 nla_get_u32(info->attrs[NL80211_ATTR_CHANNEL_WIDTH]);
1703 if (info->attrs[NL80211_ATTR_CENTER_FREQ1])
1704 chandef->center_freq1 =
1705 nla_get_u32(
1706 info->attrs[NL80211_ATTR_CENTER_FREQ1]);
1707 if (info->attrs[NL80211_ATTR_CENTER_FREQ2])
1708 chandef->center_freq2 =
1709 nla_get_u32(
1710 info->attrs[NL80211_ATTR_CENTER_FREQ2]);
1711 }
1712
9f5e8f6e 1713 if (!cfg80211_chandef_valid(chandef))
3d9d1d66
JB		 1714 return -EINVAL;
1715
9f5e8f6e
JB		 1716 if (!cfg80211_chandef_usable(&rdev->wiphy, chandef,
1717 IEEE80211_CHAN_DISABLED))
3d9d1d66
JB		 1718 return -EINVAL;
1719
683b6d3b
JB		 1720 return 0;
1721}
1722
f444de05
JB		 1723static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
1724 struct wireless_dev *wdev,
1725 struct genl_info *info)
1726{
683b6d3b 1727 struct cfg80211_chan_def chandef;
f444de05 1728 int result;
e8c9bd5b
JB		 1729 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
1730
1731 if (wdev)
1732 iftype = wdev->iftype;
f444de05 1733
f444de05
JB		 1734 if (!nl80211_can_set_dev_channel(wdev))
1735 return -EOPNOTSUPP;
1736
683b6d3b
JB		 1737 result = nl80211_parse_chandef(rdev, info, &chandef);
1738 if (result)
1739 return result;
f444de05
JB		 1740
1741 mutex_lock(&rdev->devlist_mtx);
e8c9bd5b 1742 switch (iftype) {
aa430da4
JB		 1743 case NL80211_IFTYPE_AP:
1744 case NL80211_IFTYPE_P2P_GO:
1745 if (wdev->beacon_interval) {
1746 result = -EBUSY;
1747 break;
1748 }
683b6d3b 1749 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &chandef)) {
aa430da4
JB		 1750 result = -EINVAL;
1751 break;
1752 }
683b6d3b 1753 wdev->preset_chandef = chandef;
aa430da4
JB		 1754 result = 0;
1755 break;
cc1d2806 1756 case NL80211_IFTYPE_MESH_POINT:
683b6d3b 1757 result = cfg80211_set_mesh_channel(rdev, wdev, &chandef);
cc1d2806 1758 break;
e8c9bd5b 1759 case NL80211_IFTYPE_MONITOR:
683b6d3b 1760 result = cfg80211_set_monitor_channel(rdev, &chandef);
e8c9bd5b 1761 break;
aa430da4 1762 default:
e8c9bd5b 1763 result = -EINVAL;
f444de05
JB		 1764 }
1765 mutex_unlock(&rdev->devlist_mtx);
1766
1767 return result;
1768}
1769
1770static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
1771{
4c476991
JB		 1772 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1773 struct net_device *netdev = info->user_ptr[1];
f444de05 1774
4c476991 1775 return __nl80211_set_channel(rdev, netdev->ieee80211_ptr, info);
f444de05
JB		 1776}
1777
e8347eba
BJ		 1778static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
1779{
43b19952
JB		 1780 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1781 struct net_device *dev = info->user_ptr[1];
1782 struct wireless_dev *wdev = dev->ieee80211_ptr;
388ac775 1783 const u8 *bssid;
e8347eba
BJ		 1784
1785 if (!info->attrs[NL80211_ATTR_MAC])
1786 return -EINVAL;
1787
43b19952
JB		 1788 if (netif_running(dev))
1789 return -EBUSY;
e8347eba 1790
43b19952
JB		 1791 if (!rdev->ops->set_wds_peer)
1792 return -EOPNOTSUPP;
e8347eba 1793
43b19952
JB		 1794 if (wdev->iftype != NL80211_IFTYPE_WDS)
1795 return -EOPNOTSUPP;
e8347eba
BJ		 1796
1797 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
e35e4d28 1798 return rdev_set_wds_peer(rdev, dev, bssid);
e8347eba
BJ		 1799}
1800
1801
55682965
JB		 1802static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
1803{
1804 struct cfg80211_registered_device *rdev;
f444de05
JB		 1805 struct net_device *netdev = NULL;
1806 struct wireless_dev *wdev;
a1e567c8 1807 int result = 0, rem_txq_params = 0;
31888487 1808 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 1809 u32 changed;
1810 u8 retry_short = 0, retry_long = 0;
1811 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 1812 u8 coverage_class = 0;
55682965 1813
f444de05
JB		 1814 /*
1815 * Try to find the wiphy and netdev. Normally this
1816 * function shouldn't need the netdev, but this is
1817 * done for backward compatibility -- previously
1818 * setting the channel was done per wiphy, but now
1819 * it is per netdev. Previous userland like hostapd
1820 * also passed a netdev to set_wiphy, so that it is
1821 * possible to let that go to the right netdev!
1822 */
4bbf4d56
JB		 1823 mutex_lock(&cfg80211_mutex);
1824
f444de05
JB		 1825 if (info->attrs[NL80211_ATTR_IFINDEX]) {
1826 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
1827
1828 netdev = dev_get_by_index(genl_info_net(info), ifindex);
1829 if (netdev && netdev->ieee80211_ptr) {
1830 rdev = wiphy_to_dev(netdev->ieee80211_ptr->wiphy);
1831 mutex_lock(&rdev->mtx);
1832 } else
1833 netdev = NULL;
4bbf4d56
JB		 1834 }
1835
f444de05 1836 if (!netdev) {
878d9ec7
JB		 1837 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
1838 info->attrs);
f444de05
JB		 1839 if (IS_ERR(rdev)) {
1840 mutex_unlock(&cfg80211_mutex);
4c476991 1841 return PTR_ERR(rdev);
f444de05
JB		 1842 }
1843 wdev = NULL;
1844 netdev = NULL;
1845 result = 0;
1846
1847 mutex_lock(&rdev->mtx);
71fe96bf 1848 } else
f444de05 1849 wdev = netdev->ieee80211_ptr;
f444de05
JB		 1850
1851 /*
1852 * end workaround code, by now the rdev is available
1853 * and locked, and wdev may or may not be NULL.
1854 */
4bbf4d56
JB		 1855
1856 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 1857 result = cfg80211_dev_rename(
1858 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56
JB		 1859
1860 mutex_unlock(&cfg80211_mutex);
1861
1862 if (result)
1863 goto bad_res;
31888487
JM		 1864
1865 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
1866 struct ieee80211_txq_params txq_params;
1867 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
1868
1869 if (!rdev->ops->set_txq_params) {
1870 result = -EOPNOTSUPP;
1871 goto bad_res;
1872 }
1873
f70f01c2
EP		 1874 if (!netdev) {
1875 result = -EINVAL;
1876 goto bad_res;
1877 }
1878
133a3ff2
JB		 1879 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
1880 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
1881 result = -EINVAL;
1882 goto bad_res;
1883 }
1884
2b5f8b0b
JB		 1885 if (!netif_running(netdev)) {
1886 result = -ENETDOWN;
1887 goto bad_res;
1888 }
1889
31888487
JM		 1890 nla_for_each_nested(nl_txq_params,
1891 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
1892 rem_txq_params) {
1893 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
1894 nla_data(nl_txq_params),
1895 nla_len(nl_txq_params),
1896 txq_params_policy);
1897 result = parse_txq_params(tb, &txq_params);
1898 if (result)
1899 goto bad_res;
1900
e35e4d28
HG		 1901 result = rdev_set_txq_params(rdev, netdev,
1902 &txq_params);
31888487
JM		 1903 if (result)
1904 goto bad_res;
1905 }
1906 }
55682965 1907
72bdcf34 1908 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
71fe96bf
JB		 1909 result = __nl80211_set_channel(rdev,
1910 nl80211_can_set_dev_channel(wdev) ? wdev : NULL,
1911 info);
72bdcf34
JM		 1912 if (result)
1913 goto bad_res;
1914 }
1915
98d2ff8b 1916 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
c8442118 1917 struct wireless_dev *txp_wdev = wdev;
98d2ff8b
JO		 1918 enum nl80211_tx_power_setting type;
1919 int idx, mbm = 0;
1920
c8442118
JB		 1921 if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
1922 txp_wdev = NULL;
1923
98d2ff8b 1924 if (!rdev->ops->set_tx_power) {
60ea385f 1925 result = -EOPNOTSUPP;
98d2ff8b
JO		 1926 goto bad_res;
1927 }
1928
1929 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
1930 type = nla_get_u32(info->attrs[idx]);
1931
1932 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
1933 (type != NL80211_TX_POWER_AUTOMATIC)) {
1934 result = -EINVAL;
1935 goto bad_res;
1936 }
1937
1938 if (type != NL80211_TX_POWER_AUTOMATIC) {
1939 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
1940 mbm = nla_get_u32(info->attrs[idx]);
1941 }
1942
c8442118 1943 result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
98d2ff8b
JO		 1944 if (result)
1945 goto bad_res;
1946 }
1947
afe0cbf8
BR		 1948 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
1949 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
1950 u32 tx_ant, rx_ant;
7f531e03
BR		 1951 if ((!rdev->wiphy.available_antennas_tx &&
1952 !rdev->wiphy.available_antennas_rx) ||
1953 !rdev->ops->set_antenna) {
afe0cbf8
BR		 1954 result = -EOPNOTSUPP;
1955 goto bad_res;
1956 }
1957
1958 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
1959 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
1960
a7ffac95 1961 /* reject antenna configurations which don't match the
7f531e03
BR		 1962 * available antenna masks, except for the "all" mask */
1963 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
1964 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
a7ffac95
BR		 1965 result = -EINVAL;
1966 goto bad_res;
1967 }
1968
7f531e03
BR		 1969 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
1970 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 1971
e35e4d28 1972 result = rdev_set_antenna(rdev, tx_ant, rx_ant);
afe0cbf8
BR		 1973 if (result)
1974 goto bad_res;
1975 }
1976
b9a5f8ca
JM		 1977 changed = 0;
1978
1979 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
1980 retry_short = nla_get_u8(
1981 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
1982 if (retry_short == 0) {
1983 result = -EINVAL;
1984 goto bad_res;
1985 }
1986 changed |= WIPHY_PARAM_RETRY_SHORT;
1987 }
1988
1989 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
1990 retry_long = nla_get_u8(
1991 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
1992 if (retry_long == 0) {
1993 result = -EINVAL;
1994 goto bad_res;
1995 }
1996 changed |= WIPHY_PARAM_RETRY_LONG;
1997 }
1998
1999 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
2000 frag_threshold = nla_get_u32(
2001 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
2002 if (frag_threshold < 256) {
2003 result = -EINVAL;
2004 goto bad_res;
2005 }
2006 if (frag_threshold != (u32) -1) {
2007 /*
2008 * Fragments (apart from the last one) are required to
2009 * have even length. Make the fragmentation code
2010 * simpler by stripping LSB should someone try to use
2011 * odd threshold value.
2012 */
2013 frag_threshold &= ~0x1;
2014 }
2015 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
2016 }
2017
2018 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
2019 rts_threshold = nla_get_u32(
2020 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
2021 changed |= WIPHY_PARAM_RTS_THRESHOLD;
2022 }
2023
81077e82
LT		 2024 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
2025 coverage_class = nla_get_u8(
2026 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
2027 changed |= WIPHY_PARAM_COVERAGE_CLASS;
2028 }
2029
b9a5f8ca
JM		 2030 if (changed) {
2031 u8 old_retry_short, old_retry_long;
2032 u32 old_frag_threshold, old_rts_threshold;
81077e82 2033 u8 old_coverage_class;
b9a5f8ca
JM		 2034
2035 if (!rdev->ops->set_wiphy_params) {
2036 result = -EOPNOTSUPP;
2037 goto bad_res;
2038 }
2039
2040 old_retry_short = rdev->wiphy.retry_short;
2041 old_retry_long = rdev->wiphy.retry_long;
2042 old_frag_threshold = rdev->wiphy.frag_threshold;
2043 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 2044 old_coverage_class = rdev->wiphy.coverage_class;
b9a5f8ca
JM		 2045
2046 if (changed & WIPHY_PARAM_RETRY_SHORT)
2047 rdev->wiphy.retry_short = retry_short;
2048 if (changed & WIPHY_PARAM_RETRY_LONG)
2049 rdev->wiphy.retry_long = retry_long;
2050 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
2051 rdev->wiphy.frag_threshold = frag_threshold;
2052 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
2053 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 2054 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
2055 rdev->wiphy.coverage_class = coverage_class;
b9a5f8ca 2056
e35e4d28 2057 result = rdev_set_wiphy_params(rdev, changed);
b9a5f8ca
JM		 2058 if (result) {
2059 rdev->wiphy.retry_short = old_retry_short;
2060 rdev->wiphy.retry_long = old_retry_long;
2061 rdev->wiphy.frag_threshold = old_frag_threshold;
2062 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 2063 rdev->wiphy.coverage_class = old_coverage_class;
b9a5f8ca
JM		 2064 }
2065 }
72bdcf34 2066
306d6112 2067 bad_res:
4bbf4d56 2068 mutex_unlock(&rdev->mtx);
f444de05
JB		 2069 if (netdev)
2070 dev_put(netdev);
55682965
JB		 2071 return result;
2072}
2073
71bbc994
JB		 2074static inline u64 wdev_id(struct wireless_dev *wdev)
2075{
2076 return (u64)wdev->identifier |
2077 ((u64)wiphy_to_dev(wdev->wiphy)->wiphy_idx << 32);
2078}
55682965 2079
683b6d3b
JB		 2080static int nl80211_send_chandef(struct sk_buff *msg,
2081 struct cfg80211_chan_def *chandef)
2082{
9f5e8f6e 2083 WARN_ON(!cfg80211_chandef_valid(chandef));
3d9d1d66 2084
683b6d3b
JB		 2085 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
2086 chandef->chan->center_freq))
2087 return -ENOBUFS;
3d9d1d66
JB		 2088 switch (chandef->width) {
2089 case NL80211_CHAN_WIDTH_20_NOHT:
2090 case NL80211_CHAN_WIDTH_20:
2091 case NL80211_CHAN_WIDTH_40:
2092 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
2093 cfg80211_get_chandef_type(chandef)))
2094 return -ENOBUFS;
2095 break;
2096 default:
2097 break;
2098 }
2099 if (nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, chandef->width))
2100 return -ENOBUFS;
2101 if (nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ1, chandef->center_freq1))
2102 return -ENOBUFS;
2103 if (chandef->center_freq2 &&
2104 nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ2, chandef->center_freq2))
683b6d3b
JB		 2105 return -ENOBUFS;
2106 return 0;
2107}
2108
15e47304 2109static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
d726405a 2110 struct cfg80211_registered_device *rdev,
72fb2abc 2111 struct wireless_dev *wdev)
55682965 2112{
72fb2abc 2113 struct net_device *dev = wdev->netdev;
55682965
JB		 2114 void *hdr;
2115
15e47304 2116 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_INTERFACE);
55682965
JB		 2117 if (!hdr)
2118 return -1;
2119
72fb2abc
JB		 2120 if (dev &&
2121 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
98104fde 2122 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
72fb2abc
JB		 2123 goto nla_put_failure;
2124
2125 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
2126 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
71bbc994 2127 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
98104fde 2128 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
9360ffd1
DM		 2129 nla_put_u32(msg, NL80211_ATTR_GENERATION,
2130 rdev->devlist_generation ^
2131 (cfg80211_rdev_list_generation << 2)))
2132 goto nla_put_failure;
f5ea9120 2133
5b7ccaf3 2134 if (rdev->ops->get_channel) {
683b6d3b
JB		 2135 int ret;
2136 struct cfg80211_chan_def chandef;
2137
2138 ret = rdev_get_channel(rdev, wdev, &chandef);
2139 if (ret == 0) {
2140 if (nl80211_send_chandef(msg, &chandef))
2141 goto nla_put_failure;
2142 }
d91df0e3
PF		 2143 }
2144
b84e7a05
AQ		 2145 if (wdev->ssid_len) {
2146 if (nla_put(msg, NL80211_ATTR_SSID, wdev->ssid_len, wdev->ssid))
2147 goto nla_put_failure;
2148 }
2149
55682965
JB		 2150 return genlmsg_end(msg, hdr);
2151
2152 nla_put_failure:
bc3ed28c
TG		 2153 genlmsg_cancel(msg, hdr);
2154 return -EMSGSIZE;
55682965
JB		 2155}
2156
2157static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
2158{
2159 int wp_idx = 0;
2160 int if_idx = 0;
2161 int wp_start = cb->args[0];
2162 int if_start = cb->args[1];
f5ea9120 2163 struct cfg80211_registered_device *rdev;
55682965
JB		 2164 struct wireless_dev *wdev;
2165
a1794390 2166 mutex_lock(&cfg80211_mutex);
f5ea9120
JB		 2167 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
2168 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 2169 continue;
bba95fef
JB		 2170 if (wp_idx < wp_start) {
2171 wp_idx++;
55682965 2172 continue;
bba95fef 2173 }
55682965
JB		 2174 if_idx = 0;
2175
f5ea9120 2176 mutex_lock(&rdev->devlist_mtx);
89a54e48 2177 list_for_each_entry(wdev, &rdev->wdev_list, list) {
bba95fef
JB		 2178 if (if_idx < if_start) {
2179 if_idx++;
55682965 2180 continue;
bba95fef 2181 }
15e47304 2182 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
55682965 2183 cb->nlh->nlmsg_seq, NLM_F_MULTI,
72fb2abc 2184 rdev, wdev) < 0) {
f5ea9120 2185 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 2186 goto out;
2187 }
2188 if_idx++;
55682965 2189 }
f5ea9120 2190 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 2191
2192 wp_idx++;
55682965 2193 }
bba95fef 2194 out:
a1794390 2195 mutex_unlock(&cfg80211_mutex);
55682965
JB		 2196
2197 cb->args[0] = wp_idx;
2198 cb->args[1] = if_idx;
2199
2200 return skb->len;
2201}
2202
2203static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
2204{
2205 struct sk_buff *msg;
4c476991 2206 struct cfg80211_registered_device *dev = info->user_ptr[0];
72fb2abc 2207 struct wireless_dev *wdev = info->user_ptr[1];
55682965 2208
fd2120ca 2209 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 2210 if (!msg)
4c476991 2211 return -ENOMEM;
55682965 2212
15e47304 2213 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
72fb2abc 2214 dev, wdev) < 0) {
4c476991
JB		 2215 nlmsg_free(msg);
2216 return -ENOBUFS;
2217 }
55682965 2218
134e6375 2219 return genlmsg_reply(msg, info);
55682965
JB		 2220}
2221
66f7ac50
MW		 2222static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
2223 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
2224 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
2225 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
2226 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
2227 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
2228};
2229
2230static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
2231{
2232 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
2233 int flag;
2234
2235 *mntrflags = 0;
2236
2237 if (!nla)
2238 return -EINVAL;
2239
2240 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
2241 nla, mntr_flags_policy))
2242 return -EINVAL;
2243
2244 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
2245 if (flags[flag])
2246 *mntrflags |= (1<<flag);
2247
2248 return 0;
2249}
2250
9bc383de 2251static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 2252 struct net_device *netdev, u8 use_4addr,
2253 enum nl80211_iftype iftype)
9bc383de 2254{
ad4bb6f8 2255 if (!use_4addr) {
f350a0a8 2256 if (netdev && (netdev->priv_flags & IFF_BRIDGE_PORT))
ad4bb6f8 2257 return -EBUSY;
9bc383de 2258 return 0;
ad4bb6f8 2259 }
9bc383de
JB		 2260
2261 switch (iftype) {
2262 case NL80211_IFTYPE_AP_VLAN:
2263 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
2264 return 0;
2265 break;
2266 case NL80211_IFTYPE_STATION:
2267 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
2268 return 0;
2269 break;
2270 default:
2271 break;
2272 }
2273
2274 return -EOPNOTSUPP;
2275}
2276
55682965
JB		 2277static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
2278{
4c476991 2279 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 2280 struct vif_params params;
e36d56b6 2281 int err;
04a773ad 2282 enum nl80211_iftype otype, ntype;
4c476991 2283 struct net_device *dev = info->user_ptr[1];
92ffe055 2284 u32 _flags, *flags = NULL;
ac7f9cfa 2285 bool change = false;
55682965 2286
2ec600d6
LCC		 2287 memset(&params, 0, sizeof(params));
2288
04a773ad 2289 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 2290
723b038d 2291 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 2292 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 2293 if (otype != ntype)
ac7f9cfa 2294 change = true;
4c476991
JB		 2295 if (ntype > NL80211_IFTYPE_MAX)
2296 return -EINVAL;
723b038d
JB		 2297 }
2298
92ffe055 2299 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 2300 struct wireless_dev *wdev = dev->ieee80211_ptr;
2301
4c476991
JB		 2302 if (ntype != NL80211_IFTYPE_MESH_POINT)
2303 return -EINVAL;
29cbe68c
JB		 2304 if (netif_running(dev))
2305 return -EBUSY;
2306
2307 wdev_lock(wdev);
2308 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
2309 IEEE80211_MAX_MESH_ID_LEN);
2310 wdev->mesh_id_up_len =
2311 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
2312 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
2313 wdev->mesh_id_up_len);
2314 wdev_unlock(wdev);
2ec600d6
LCC		 2315 }
2316
8b787643
FF		 2317 if (info->attrs[NL80211_ATTR_4ADDR]) {
2318 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
2319 change = true;
ad4bb6f8 2320 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 2321 if (err)
4c476991 2322 return err;
8b787643
FF		 2323 } else {
2324 params.use_4addr = -1;
2325 }
2326
92ffe055 2327 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4c476991
JB		 2328 if (ntype != NL80211_IFTYPE_MONITOR)
2329 return -EINVAL;
92ffe055
JB		 2330 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
2331 &_flags);
ac7f9cfa 2332 if (err)
4c476991 2333 return err;
ac7f9cfa
JB		 2334
2335 flags = &_flags;
2336 change = true;
92ffe055 2337 }
3b85875a 2338
ac7f9cfa 2339 if (change)
3d54d255 2340 err = cfg80211_change_iface(rdev, dev, ntype, flags, &params);
ac7f9cfa
JB		 2341 else
2342 err = 0;
60719ffd 2343
9bc383de
JB		 2344 if (!err && params.use_4addr != -1)
2345 dev->ieee80211_ptr->use_4addr = params.use_4addr;
2346
55682965
JB		 2347 return err;
2348}
2349
2350static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
2351{
4c476991 2352 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 2353 struct vif_params params;
84efbb84 2354 struct wireless_dev *wdev;
1c90f9d4 2355 struct sk_buff *msg;
55682965
JB		 2356 int err;
2357 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
66f7ac50 2358 u32 flags;
55682965 2359
2ec600d6
LCC		 2360 memset(&params, 0, sizeof(params));
2361
55682965
JB		 2362 if (!info->attrs[NL80211_ATTR_IFNAME])
2363 return -EINVAL;
2364
2365 if (info->attrs[NL80211_ATTR_IFTYPE]) {
2366 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
2367 if (type > NL80211_IFTYPE_MAX)
2368 return -EINVAL;
2369 }
2370
79c97e97 2371 if (!rdev->ops->add_virtual_intf ||
4c476991
JB		 2372 !(rdev->wiphy.interface_modes & (1 << type)))
2373 return -EOPNOTSUPP;
55682965 2374
1c18f145
AS		 2375 if (type == NL80211_IFTYPE_P2P_DEVICE && info->attrs[NL80211_ATTR_MAC]) {
2376 nla_memcpy(params.macaddr, info->attrs[NL80211_ATTR_MAC],
2377 ETH_ALEN);
2378 if (!is_valid_ether_addr(params.macaddr))
2379 return -EADDRNOTAVAIL;
2380 }
2381
9bc383de 2382 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 2383 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 2384 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 2385 if (err)
4c476991 2386 return err;
9bc383de 2387 }
8b787643 2388
1c90f9d4
JB		 2389 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2390 if (!msg)
2391 return -ENOMEM;
2392
66f7ac50
MW		 2393 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
2394 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
2395 &flags);
e35e4d28
HG		 2396 wdev = rdev_add_virtual_intf(rdev,
2397 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
2398 type, err ? NULL : &flags, &params);
1c90f9d4
JB		 2399 if (IS_ERR(wdev)) {
2400 nlmsg_free(msg);
84efbb84 2401 return PTR_ERR(wdev);
1c90f9d4 2402 }
2ec600d6 2403
98104fde
JB		 2404 switch (type) {
2405 case NL80211_IFTYPE_MESH_POINT:
2406 if (!info->attrs[NL80211_ATTR_MESH_ID])
2407 break;
29cbe68c
JB		 2408 wdev_lock(wdev);
2409 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
2410 IEEE80211_MAX_MESH_ID_LEN);
2411 wdev->mesh_id_up_len =
2412 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
2413 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
2414 wdev->mesh_id_up_len);
2415 wdev_unlock(wdev);
98104fde
JB		 2416 break;
2417 case NL80211_IFTYPE_P2P_DEVICE:
2418 /*
2419 * P2P Device doesn't have a netdev, so doesn't go
2420 * through the netdev notifier and must be added here
2421 */
2422 mutex_init(&wdev->mtx);
2423 INIT_LIST_HEAD(&wdev->event_list);
2424 spin_lock_init(&wdev->event_lock);
2425 INIT_LIST_HEAD(&wdev->mgmt_registrations);
2426 spin_lock_init(&wdev->mgmt_registrations_lock);
2427
2428 mutex_lock(&rdev->devlist_mtx);
2429 wdev->identifier = ++rdev->wdev_id;
2430 list_add_rcu(&wdev->list, &rdev->wdev_list);
2431 rdev->devlist_generation++;
2432 mutex_unlock(&rdev->devlist_mtx);
2433 break;
2434 default:
2435 break;
29cbe68c
JB		 2436 }
2437
15e47304 2438 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
1c90f9d4
JB		 2439 rdev, wdev) < 0) {
2440 nlmsg_free(msg);
2441 return -ENOBUFS;
2442 }
2443
2444 return genlmsg_reply(msg, info);
55682965
JB		 2445}
2446
2447static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
2448{
4c476991 2449 struct cfg80211_registered_device *rdev = info->user_ptr[0];
84efbb84 2450 struct wireless_dev *wdev = info->user_ptr[1];
55682965 2451
4c476991
JB		 2452 if (!rdev->ops->del_virtual_intf)
2453 return -EOPNOTSUPP;
55682965 2454
84efbb84
JB		 2455 /*
2456 * If we remove a wireless device without a netdev then clear
2457 * user_ptr[1] so that nl80211_post_doit won't dereference it
2458 * to check if it needs to do dev_put(). Otherwise it crashes
2459 * since the wdev has been freed, unlike with a netdev where
2460 * we need the dev_put() for the netdev to really be freed.
2461 */
2462 if (!wdev->netdev)
2463 info->user_ptr[1] = NULL;
2464
e35e4d28 2465 return rdev_del_virtual_intf(rdev, wdev);
55682965
JB		 2466}
2467
1d9d9213
SW		 2468static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
2469{
2470 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2471 struct net_device *dev = info->user_ptr[1];
2472 u16 noack_map;
2473
2474 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
2475 return -EINVAL;
2476
2477 if (!rdev->ops->set_noack_map)
2478 return -EOPNOTSUPP;
2479
2480 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
2481
e35e4d28 2482 return rdev_set_noack_map(rdev, dev, noack_map);
1d9d9213
SW		 2483}
2484
41ade00f
JB		 2485struct get_key_cookie {
2486 struct sk_buff *msg;
2487 int error;
b9454e83 2488 int idx;
41ade00f
JB		 2489};
2490
2491static void get_key_callback(void *c, struct key_params *params)
2492{
b9454e83 2493 struct nlattr *key;
41ade00f
JB		 2494 struct get_key_cookie *cookie = c;
2495
9360ffd1
DM		 2496 if ((params->key &&
2497 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
2498 params->key_len, params->key)) ||
2499 (params->seq &&
2500 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
2501 params->seq_len, params->seq)) ||
2502 (params->cipher &&
2503 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
2504 params->cipher)))
2505 goto nla_put_failure;
41ade00f 2506
b9454e83
JB		 2507 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
2508 if (!key)
2509 goto nla_put_failure;
2510
9360ffd1
DM		 2511 if ((params->key &&
2512 nla_put(cookie->msg, NL80211_KEY_DATA,
2513 params->key_len, params->key)) ||
2514 (params->seq &&
2515 nla_put(cookie->msg, NL80211_KEY_SEQ,
2516 params->seq_len, params->seq)) ||
2517 (params->cipher &&
2518 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
2519 params->cipher)))
2520 goto nla_put_failure;
b9454e83 2521
9360ffd1
DM		 2522 if (nla_put_u8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx))
2523 goto nla_put_failure;
b9454e83
JB		 2524
2525 nla_nest_end(cookie->msg, key);
2526
41ade00f
JB		 2527 return;
2528 nla_put_failure:
2529 cookie->error = 1;
2530}
2531
2532static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
2533{
4c476991 2534 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 2535 int err;
4c476991 2536 struct net_device *dev = info->user_ptr[1];
41ade00f 2537 u8 key_idx = 0;
e31b8213
JB		 2538 const u8 *mac_addr = NULL;
2539 bool pairwise;
41ade00f
JB		 2540 struct get_key_cookie cookie = {
2541 .error = 0,
2542 };
2543 void *hdr;
2544 struct sk_buff *msg;
2545
2546 if (info->attrs[NL80211_ATTR_KEY_IDX])
2547 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
2548
3cfcf6ac 2549 if (key_idx > 5)
41ade00f
JB		 2550 return -EINVAL;
2551
2552 if (info->attrs[NL80211_ATTR_MAC])
2553 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2554
e31b8213
JB		 2555 pairwise = !!mac_addr;
2556 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
2557 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
2558 if (kt >= NUM_NL80211_KEYTYPES)
2559 return -EINVAL;
2560 if (kt != NL80211_KEYTYPE_GROUP &&
2561 kt != NL80211_KEYTYPE_PAIRWISE)
2562 return -EINVAL;
2563 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
2564 }
2565
4c476991
JB		 2566 if (!rdev->ops->get_key)
2567 return -EOPNOTSUPP;
41ade00f 2568
fd2120ca 2569 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 2570 if (!msg)
2571 return -ENOMEM;
41ade00f 2572
15e47304 2573 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
41ade00f 2574 NL80211_CMD_NEW_KEY);
4c476991
JB		 2575 if (IS_ERR(hdr))
2576 return PTR_ERR(hdr);
41ade00f
JB		 2577
2578 cookie.msg = msg;
b9454e83 2579 cookie.idx = key_idx;
41ade00f 2580
9360ffd1
DM		 2581 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
2582 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
2583 goto nla_put_failure;
2584 if (mac_addr &&
2585 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
2586 goto nla_put_failure;
41ade00f 2587
e31b8213
JB		 2588 if (pairwise && mac_addr &&
2589 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2590 return -ENOENT;
2591
e35e4d28
HG		 2592 err = rdev_get_key(rdev, dev, key_idx, pairwise, mac_addr, &cookie,
2593 get_key_callback);
41ade00f
JB		 2594
2595 if (err)
6c95e2a2 2596 goto free_msg;
41ade00f
JB		 2597
2598 if (cookie.error)
2599 goto nla_put_failure;
2600
2601 genlmsg_end(msg, hdr);
4c476991 2602 return genlmsg_reply(msg, info);
41ade00f
JB		 2603
2604 nla_put_failure:
2605 err = -ENOBUFS;
6c95e2a2 2606 free_msg:
41ade00f 2607 nlmsg_free(msg);
41ade00f
JB		 2608 return err;
2609}
2610
2611static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
2612{
4c476991 2613 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 2614 struct key_parse key;
41ade00f 2615 int err;
4c476991 2616 struct net_device *dev = info->user_ptr[1];
41ade00f 2617
b9454e83
JB		 2618 err = nl80211_parse_key(info, &key);
2619 if (err)
2620 return err;
41ade00f 2621
b9454e83 2622 if (key.idx < 0)
41ade00f
JB		 2623 return -EINVAL;
2624
b9454e83
JB		 2625 /* only support setting default key */
2626 if (!key.def && !key.defmgmt)
41ade00f
JB		 2627 return -EINVAL;
2628
dbd2fd65 2629 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 2630
dbd2fd65
JB		 2631 if (key.def) {
2632 if (!rdev->ops->set_default_key) {
2633 err = -EOPNOTSUPP;
2634 goto out;
2635 }
41ade00f 2636
dbd2fd65
JB		 2637 err = nl80211_key_allowed(dev->ieee80211_ptr);
2638 if (err)
2639 goto out;
2640
e35e4d28 2641 err = rdev_set_default_key(rdev, dev, key.idx,
dbd2fd65
JB		 2642 key.def_uni, key.def_multi);
2643
2644 if (err)
2645 goto out;
fffd0934 2646
3d23e349 2647#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 2648 dev->ieee80211_ptr->wext.default_key = key.idx;
2649#endif
2650 } else {
2651 if (key.def_uni || !key.def_multi) {
2652 err = -EINVAL;
2653 goto out;
2654 }
2655
2656 if (!rdev->ops->set_default_mgmt_key) {
2657 err = -EOPNOTSUPP;
2658 goto out;
2659 }
2660
2661 err = nl80211_key_allowed(dev->ieee80211_ptr);
2662 if (err)
2663 goto out;
2664
e35e4d28 2665 err = rdev_set_default_mgmt_key(rdev, dev, key.idx);
dbd2fd65
JB		 2666 if (err)
2667 goto out;
2668
2669#ifdef CONFIG_CFG80211_WEXT
2670 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 2671#endif
dbd2fd65
JB		 2672 }
2673
2674 out:
fffd0934 2675 wdev_unlock(dev->ieee80211_ptr);
41ade00f 2676
41ade00f
JB		 2677 return err;
2678}
2679
2680static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
2681{
4c476991 2682 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 2683 int err;
4c476991 2684 struct net_device *dev = info->user_ptr[1];
b9454e83 2685 struct key_parse key;
e31b8213 2686 const u8 *mac_addr = NULL;
41ade00f 2687
b9454e83
JB		 2688 err = nl80211_parse_key(info, &key);
2689 if (err)
2690 return err;
41ade00f 2691
b9454e83 2692 if (!key.p.key)
41ade00f
JB		 2693 return -EINVAL;
2694
41ade00f
JB		 2695 if (info->attrs[NL80211_ATTR_MAC])
2696 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2697
e31b8213
JB		 2698 if (key.type == -1) {
2699 if (mac_addr)
2700 key.type = NL80211_KEYTYPE_PAIRWISE;
2701 else
2702 key.type = NL80211_KEYTYPE_GROUP;
2703 }
2704
2705 /* for now */
2706 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2707 key.type != NL80211_KEYTYPE_GROUP)
2708 return -EINVAL;
2709
4c476991
JB		 2710 if (!rdev->ops->add_key)
2711 return -EOPNOTSUPP;
25e47c18 2712
e31b8213
JB		 2713 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
2714 key.type == NL80211_KEYTYPE_PAIRWISE,
2715 mac_addr))
4c476991 2716 return -EINVAL;
41ade00f 2717
fffd0934
JB		 2718 wdev_lock(dev->ieee80211_ptr);
2719 err = nl80211_key_allowed(dev->ieee80211_ptr);
2720 if (!err)
e35e4d28
HG		 2721 err = rdev_add_key(rdev, dev, key.idx,
2722 key.type == NL80211_KEYTYPE_PAIRWISE,
2723 mac_addr, &key.p);
fffd0934 2724 wdev_unlock(dev->ieee80211_ptr);
41ade00f 2725
41ade00f
JB		 2726 return err;
2727}
2728
2729static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
2730{
4c476991 2731 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 2732 int err;
4c476991 2733 struct net_device *dev = info->user_ptr[1];
41ade00f 2734 u8 *mac_addr = NULL;
b9454e83 2735 struct key_parse key;
41ade00f 2736
b9454e83
JB		 2737 err = nl80211_parse_key(info, &key);
2738 if (err)
2739 return err;
41ade00f
JB		 2740
2741 if (info->attrs[NL80211_ATTR_MAC])
2742 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2743
e31b8213
JB		 2744 if (key.type == -1) {
2745 if (mac_addr)
2746 key.type = NL80211_KEYTYPE_PAIRWISE;
2747 else
2748 key.type = NL80211_KEYTYPE_GROUP;
2749 }
2750
2751 /* for now */
2752 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2753 key.type != NL80211_KEYTYPE_GROUP)
2754 return -EINVAL;
2755
4c476991
JB		 2756 if (!rdev->ops->del_key)
2757 return -EOPNOTSUPP;
41ade00f 2758
fffd0934
JB		 2759 wdev_lock(dev->ieee80211_ptr);
2760 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213
JB		 2761
2762 if (key.type == NL80211_KEYTYPE_PAIRWISE && mac_addr &&
2763 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2764 err = -ENOENT;
2765
fffd0934 2766 if (!err)
e35e4d28
HG		 2767 err = rdev_del_key(rdev, dev, key.idx,
2768 key.type == NL80211_KEYTYPE_PAIRWISE,
2769 mac_addr);
41ade00f 2770
3d23e349 2771#ifdef CONFIG_CFG80211_WEXT
08645126 2772 if (!err) {
b9454e83 2773 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 2774 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 2775 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 2776 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
2777 }
2778#endif
fffd0934 2779 wdev_unlock(dev->ieee80211_ptr);
08645126 2780
41ade00f
JB		 2781 return err;
2782}
2783
77765eaf
VT		 2784/* This function returns an error or the number of nested attributes */
2785static int validate_acl_mac_addrs(struct nlattr *nl_attr)
2786{
2787 struct nlattr *attr;
2788 int n_entries = 0, tmp;
2789
2790 nla_for_each_nested(attr, nl_attr, tmp) {
2791 if (nla_len(attr) != ETH_ALEN)
2792 return -EINVAL;
2793
2794 n_entries++;
2795 }
2796
2797 return n_entries;
2798}
2799
2800/*
2801 * This function parses ACL information and allocates memory for ACL data.
2802 * On successful return, the calling function is responsible to free the
2803 * ACL buffer returned by this function.
2804 */
2805static struct cfg80211_acl_data *parse_acl_data(struct wiphy *wiphy,
2806 struct genl_info *info)
2807{
2808 enum nl80211_acl_policy acl_policy;
2809 struct nlattr *attr;
2810 struct cfg80211_acl_data *acl;
2811 int i = 0, n_entries, tmp;
2812
2813 if (!wiphy->max_acl_mac_addrs)
2814 return ERR_PTR(-EOPNOTSUPP);
2815
2816 if (!info->attrs[NL80211_ATTR_ACL_POLICY])
2817 return ERR_PTR(-EINVAL);
2818
2819 acl_policy = nla_get_u32(info->attrs[NL80211_ATTR_ACL_POLICY]);
2820 if (acl_policy != NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
2821 acl_policy != NL80211_ACL_POLICY_DENY_UNLESS_LISTED)
2822 return ERR_PTR(-EINVAL);
2823
2824 if (!info->attrs[NL80211_ATTR_MAC_ADDRS])
2825 return ERR_PTR(-EINVAL);
2826
2827 n_entries = validate_acl_mac_addrs(info->attrs[NL80211_ATTR_MAC_ADDRS]);
2828 if (n_entries < 0)
2829 return ERR_PTR(n_entries);
2830
2831 if (n_entries > wiphy->max_acl_mac_addrs)
2832 return ERR_PTR(-ENOTSUPP);
2833
2834 acl = kzalloc(sizeof(*acl) + (sizeof(struct mac_address) * n_entries),
2835 GFP_KERNEL);
2836 if (!acl)
2837 return ERR_PTR(-ENOMEM);
2838
2839 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_MAC_ADDRS], tmp) {
2840 memcpy(acl->mac_addrs[i].addr, nla_data(attr), ETH_ALEN);
2841 i++;
2842 }
2843
2844 acl->n_acl_entries = n_entries;
2845 acl->acl_policy = acl_policy;
2846
2847 return acl;
2848}
2849
2850static int nl80211_set_mac_acl(struct sk_buff *skb, struct genl_info *info)
2851{
2852 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2853 struct net_device *dev = info->user_ptr[1];
2854 struct cfg80211_acl_data *acl;
2855 int err;
2856
2857 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2858 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2859 return -EOPNOTSUPP;
2860
2861 if (!dev->ieee80211_ptr->beacon_interval)
2862 return -EINVAL;
2863
2864 acl = parse_acl_data(&rdev->wiphy, info);
2865 if (IS_ERR(acl))
2866 return PTR_ERR(acl);
2867
2868 err = rdev_set_mac_acl(rdev, dev, acl);
2869
2870 kfree(acl);
2871
2872 return err;
2873}
2874
8860020e
JB		 2875static int nl80211_parse_beacon(struct genl_info *info,
2876 struct cfg80211_beacon_data *bcn)
ed1b6cc7 2877{
8860020e 2878 bool haveinfo = false;
ed1b6cc7 2879
9946ecfb
JM		 2880 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]) ||
2881 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]) ||
2882 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_PROBE_RESP]) ||
2883 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]))
f4a11bb0
JB		 2884 return -EINVAL;
2885
8860020e 2886 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 2887
ed1b6cc7 2888 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
8860020e
JB		 2889 bcn->head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2890 bcn->head_len = nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2891 if (!bcn->head_len)
2892 return -EINVAL;
2893 haveinfo = true;
ed1b6cc7
JB		 2894 }
2895
2896 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
8860020e
JB		 2897 bcn->tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2898 bcn->tail_len =
ed1b6cc7 2899 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 2900 haveinfo = true;
ed1b6cc7
JB		 2901 }
2902
4c476991
JB		 2903 if (!haveinfo)
2904 return -EINVAL;
3b85875a 2905
9946ecfb 2906 if (info->attrs[NL80211_ATTR_IE]) {
8860020e
JB		 2907 bcn->beacon_ies = nla_data(info->attrs[NL80211_ATTR_IE]);
2908 bcn->beacon_ies_len = nla_len(info->attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 2909 }
2910
2911 if (info->attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 2912 bcn->proberesp_ies =
9946ecfb 2913 nla_data(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 2914 bcn->proberesp_ies_len =
9946ecfb
JM		 2915 nla_len(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2916 }
2917
2918 if (info->attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 2919 bcn->assocresp_ies =
9946ecfb 2920 nla_data(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 2921 bcn->assocresp_ies_len =
9946ecfb
JM		 2922 nla_len(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2923 }
2924
00f740e1 2925 if (info->attrs[NL80211_ATTR_PROBE_RESP]) {
8860020e 2926 bcn->probe_resp =
00f740e1 2927 nla_data(info->attrs[NL80211_ATTR_PROBE_RESP]);
8860020e 2928 bcn->probe_resp_len =
00f740e1
AN		 2929 nla_len(info->attrs[NL80211_ATTR_PROBE_RESP]);
2930 }
2931
8860020e
JB		 2932 return 0;
2933}
2934
46c1dd0c
FF		 2935static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
2936 struct cfg80211_ap_settings *params)
2937{
2938 struct wireless_dev *wdev;
2939 bool ret = false;
2940
2941 mutex_lock(&rdev->devlist_mtx);
2942
89a54e48 2943 list_for_each_entry(wdev, &rdev->wdev_list, list) {
46c1dd0c
FF		 2944 if (wdev->iftype != NL80211_IFTYPE_AP &&
2945 wdev->iftype != NL80211_IFTYPE_P2P_GO)
2946 continue;
2947
683b6d3b 2948 if (!wdev->preset_chandef.chan)
46c1dd0c
FF		 2949 continue;
2950
683b6d3b 2951 params->chandef = wdev->preset_chandef;
46c1dd0c
FF		 2952 ret = true;
2953 break;
2954 }
2955
2956 mutex_unlock(&rdev->devlist_mtx);
2957
2958 return ret;
2959}
2960
e39e5b5e
JM		 2961static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
2962 enum nl80211_auth_type auth_type,
2963 enum nl80211_commands cmd)
2964{
2965 if (auth_type > NL80211_AUTHTYPE_MAX)
2966 return false;
2967
2968 switch (cmd) {
2969 case NL80211_CMD_AUTHENTICATE:
2970 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
2971 auth_type == NL80211_AUTHTYPE_SAE)
2972 return false;
2973 return true;
2974 case NL80211_CMD_CONNECT:
2975 case NL80211_CMD_START_AP:
2976 /* SAE not supported yet */
2977 if (auth_type == NL80211_AUTHTYPE_SAE)
2978 return false;
2979 return true;
2980 default:
2981 return false;
2982 }
2983}
2984
8860020e
JB		 2985static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
2986{
2987 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2988 struct net_device *dev = info->user_ptr[1];
2989 struct wireless_dev *wdev = dev->ieee80211_ptr;
2990 struct cfg80211_ap_settings params;
2991 int err;
04f39047 2992 u8 radar_detect_width = 0;
8860020e
JB		 2993
2994 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2995 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2996 return -EOPNOTSUPP;
2997
2998 if (!rdev->ops->start_ap)
2999 return -EOPNOTSUPP;
3000
3001 if (wdev->beacon_interval)
3002 return -EALREADY;
3003
3004 memset(&params, 0, sizeof(params));
3005
3006 /* these are required for START_AP */
3007 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
3008 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
3009 !info->attrs[NL80211_ATTR_BEACON_HEAD])
3010 return -EINVAL;
3011
3012 err = nl80211_parse_beacon(info, &params.beacon);
3013 if (err)
3014 return err;
3015
3016 params.beacon_interval =
3017 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
3018 params.dtim_period =
3019 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
3020
3021 err = cfg80211_validate_beacon_int(rdev, params.beacon_interval);
3022 if (err)
3023 return err;
3024
3025 /*
3026 * In theory, some of these attributes should be required here
3027 * but since they were not used when the command was originally
3028 * added, keep them optional for old user space programs to let
3029 * them continue to work with drivers that do not need the
3030 * additional information -- drivers must check!
3031 */
3032 if (info->attrs[NL80211_ATTR_SSID]) {
3033 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
3034 params.ssid_len =
3035 nla_len(info->attrs[NL80211_ATTR_SSID]);
3036 if (params.ssid_len == 0 ||
3037 params.ssid_len > IEEE80211_MAX_SSID_LEN)
3038 return -EINVAL;
3039 }
3040
3041 if (info->attrs[NL80211_ATTR_HIDDEN_SSID]) {
3042 params.hidden_ssid = nla_get_u32(
3043 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
3044 if (params.hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE &&
3045 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_LEN &&
3046 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_CONTENTS)
3047 return -EINVAL;
3048 }
3049
3050 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
3051
3052 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
3053 params.auth_type = nla_get_u32(
3054 info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 3055 if (!nl80211_valid_auth_type(rdev, params.auth_type,
3056 NL80211_CMD_START_AP))
8860020e
JB		 3057 return -EINVAL;
3058 } else
3059 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
3060
3061 err = nl80211_crypto_settings(rdev, info, &params.crypto,
3062 NL80211_MAX_NR_CIPHER_SUITES);
3063 if (err)
3064 return err;
3065
1b658f11
VT		 3066 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
3067 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
3068 return -EOPNOTSUPP;
3069 params.inactivity_timeout = nla_get_u16(
3070 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
3071 }
3072
53cabad7
JB		 3073 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
3074 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3075 return -EINVAL;
3076 params.p2p_ctwindow =
3077 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
3078 if (params.p2p_ctwindow > 127)
3079 return -EINVAL;
3080 if (params.p2p_ctwindow != 0 &&
3081 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
3082 return -EINVAL;
3083 }
3084
3085 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
3086 u8 tmp;
3087
3088 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3089 return -EINVAL;
3090 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
3091 if (tmp > 1)
3092 return -EINVAL;
3093 params.p2p_opp_ps = tmp;
3094 if (params.p2p_opp_ps != 0 &&
3095 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
3096 return -EINVAL;
3097 }
3098
aa430da4 3099 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 3100 err = nl80211_parse_chandef(rdev, info, &params.chandef);
3101 if (err)
3102 return err;
3103 } else if (wdev->preset_chandef.chan) {
3104 params.chandef = wdev->preset_chandef;
46c1dd0c 3105 } else if (!nl80211_get_ap_channel(rdev, &params))
aa430da4
JB		 3106 return -EINVAL;
3107
683b6d3b 3108 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &params.chandef))
aa430da4
JB		 3109 return -EINVAL;
3110
04f39047
SW		 3111 err = cfg80211_chandef_dfs_required(wdev->wiphy, &params.chandef);
3112 if (err < 0)
3113 return err;
3114 if (err) {
3115 radar_detect_width = BIT(params.chandef.width);
3116 params.radar_required = true;
3117 }
3118
e4e32459 3119 mutex_lock(&rdev->devlist_mtx);
04f39047
SW		 3120 err = cfg80211_can_use_iftype_chan(rdev, wdev, wdev->iftype,
3121 params.chandef.chan,
3122 CHAN_MODE_SHARED,
3123 radar_detect_width);
e4e32459
MK		 3124 mutex_unlock(&rdev->devlist_mtx);
3125
3126 if (err)
3127 return err;
3128
77765eaf
VT		 3129 if (info->attrs[NL80211_ATTR_ACL_POLICY]) {
3130 params.acl = parse_acl_data(&rdev->wiphy, info);
3131 if (IS_ERR(params.acl))
3132 return PTR_ERR(params.acl);
3133 }
3134
e35e4d28 3135 err = rdev_start_ap(rdev, dev, &params);
46c1dd0c 3136 if (!err) {
683b6d3b 3137 wdev->preset_chandef = params.chandef;
8860020e 3138 wdev->beacon_interval = params.beacon_interval;
683b6d3b 3139 wdev->channel = params.chandef.chan;
06e191e2
AQ		 3140 wdev->ssid_len = params.ssid_len;
3141 memcpy(wdev->ssid, params.ssid, wdev->ssid_len);
46c1dd0c 3142 }
77765eaf
VT		 3143
3144 kfree(params.acl);
3145
56d1893d 3146 return err;
ed1b6cc7
JB		 3147}
3148
8860020e
JB		 3149static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
3150{
3151 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3152 struct net_device *dev = info->user_ptr[1];
3153 struct wireless_dev *wdev = dev->ieee80211_ptr;
3154 struct cfg80211_beacon_data params;
3155 int err;
3156
3157 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
3158 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3159 return -EOPNOTSUPP;
3160
3161 if (!rdev->ops->change_beacon)
3162 return -EOPNOTSUPP;
3163
3164 if (!wdev->beacon_interval)
3165 return -EINVAL;
3166
3167 err = nl80211_parse_beacon(info, &params);
3168 if (err)
3169 return err;
3170
e35e4d28 3171 return rdev_change_beacon(rdev, dev, &params);
8860020e
JB		 3172}
3173
3174static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 3175{
4c476991
JB		 3176 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3177 struct net_device *dev = info->user_ptr[1];
ed1b6cc7 3178
60771780 3179 return cfg80211_stop_ap(rdev, dev);
ed1b6cc7
JB		 3180}
3181
5727ef1b
JB		 3182static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
3183 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
3184 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
3185 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 3186 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 3187 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 3188 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 3189};
3190
eccb8e8f 3191static int parse_station_flags(struct genl_info *info,
bdd3ae3d 3192 enum nl80211_iftype iftype,
eccb8e8f 3193 struct station_parameters *params)
5727ef1b
JB		 3194{
3195 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 3196 struct nlattr *nla;
5727ef1b
JB		 3197 int flag;
3198
eccb8e8f
JB		 3199 /*
3200 * Try parsing the new attribute first so userspace
3201 * can specify both for older kernels.
3202 */
3203 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
3204 if (nla) {
3205 struct nl80211_sta_flag_update *sta_flags;
3206
3207 sta_flags = nla_data(nla);
3208 params->sta_flags_mask = sta_flags->mask;
3209 params->sta_flags_set = sta_flags->set;
77ee7c89 3210 params->sta_flags_set &= params->sta_flags_mask;
eccb8e8f
JB		 3211 if ((params->sta_flags_mask |
3212 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
3213 return -EINVAL;
3214 return 0;
3215 }
3216
3217 /* if present, parse the old attribute */
5727ef1b 3218
eccb8e8f 3219 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 3220 if (!nla)
3221 return 0;
3222
3223 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
3224 nla, sta_flags_policy))
3225 return -EINVAL;
3226
bdd3ae3d
JB		 3227 /*
3228 * Only allow certain flags for interface types so that
3229 * other attributes are silently ignored. Remember that
3230 * this is backward compatibility code with old userspace
3231 * and shouldn't be hit in other cases anyway.
3232 */
3233 switch (iftype) {
3234 case NL80211_IFTYPE_AP:
3235 case NL80211_IFTYPE_AP_VLAN:
3236 case NL80211_IFTYPE_P2P_GO:
3237 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
3238 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
3239 BIT(NL80211_STA_FLAG_WME) |
3240 BIT(NL80211_STA_FLAG_MFP);
3241 break;
3242 case NL80211_IFTYPE_P2P_CLIENT:
3243 case NL80211_IFTYPE_STATION:
3244 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
3245 BIT(NL80211_STA_FLAG_TDLS_PEER);
3246 break;
3247 case NL80211_IFTYPE_MESH_POINT:
3248 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
3249 BIT(NL80211_STA_FLAG_MFP) |
3250 BIT(NL80211_STA_FLAG_AUTHORIZED);
3251 default:
3252 return -EINVAL;
3253 }
5727ef1b 3254
3383b5a6
JB		 3255 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
3256 if (flags[flag]) {
eccb8e8f 3257 params->sta_flags_set |= (1<<flag);
5727ef1b 3258
3383b5a6
JB		 3259 /* no longer support new API additions in old API */
3260 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
3261 return -EINVAL;
3262 }
3263 }
3264
5727ef1b
JB		 3265 return 0;
3266}
3267
c8dcfd8a
FF		 3268static bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info,
3269 int attr)
3270{
3271 struct nlattr *rate;
8eb41c8d
VK		 3272 u32 bitrate;
3273 u16 bitrate_compat;
c8dcfd8a
FF		 3274
3275 rate = nla_nest_start(msg, attr);
3276 if (!rate)
db9c64cf 3277 return false;
c8dcfd8a
FF		 3278
3279 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
3280 bitrate = cfg80211_calculate_bitrate(info);
8eb41c8d
VK		 3281 /* report 16-bit bitrate only if we can */
3282 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
db9c64cf
JB		 3283 if (bitrate > 0 &&
3284 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate))
3285 return false;
3286 if (bitrate_compat > 0 &&
3287 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat))
3288 return false;
3289
3290 if (info->flags & RATE_INFO_FLAGS_MCS) {
3291 if (nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs))
3292 return false;
3293 if (info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH &&
3294 nla_put_flag(msg, NL80211_RATE_INFO_40_MHZ_WIDTH))
3295 return false;
3296 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
3297 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
3298 return false;
3299 } else if (info->flags & RATE_INFO_FLAGS_VHT_MCS) {
3300 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_MCS, info->mcs))
3301 return false;
3302 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_NSS, info->nss))
3303 return false;
3304 if (info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH &&
3305 nla_put_flag(msg, NL80211_RATE_INFO_40_MHZ_WIDTH))
3306 return false;
3307 if (info->flags & RATE_INFO_FLAGS_80_MHZ_WIDTH &&
3308 nla_put_flag(msg, NL80211_RATE_INFO_80_MHZ_WIDTH))
3309 return false;
3310 if (info->flags & RATE_INFO_FLAGS_80P80_MHZ_WIDTH &&
3311 nla_put_flag(msg, NL80211_RATE_INFO_80P80_MHZ_WIDTH))
3312 return false;
3313 if (info->flags & RATE_INFO_FLAGS_160_MHZ_WIDTH &&
3314 nla_put_flag(msg, NL80211_RATE_INFO_160_MHZ_WIDTH))
3315 return false;
3316 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
3317 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
3318 return false;
3319 }
c8dcfd8a
FF		 3320
3321 nla_nest_end(msg, rate);
3322 return true;
c8dcfd8a
FF		 3323}
3324
15e47304 3325static int nl80211_send_station(struct sk_buff *msg, u32 portid, u32 seq,
66266b3a
JL		 3326 int flags,
3327 struct cfg80211_registered_device *rdev,
3328 struct net_device *dev,
98b62183 3329 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 3330{
3331 void *hdr;
f4263c98 3332 struct nlattr *sinfoattr, *bss_param;
fd5b74dc 3333
15e47304 3334 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_STATION);
fd5b74dc
JB		 3335 if (!hdr)
3336 return -1;
3337
9360ffd1
DM		 3338 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3339 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
3340 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
3341 goto nla_put_failure;
f5ea9120 3342
2ec600d6
LCC		 3343 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
3344 if (!sinfoattr)
fd5b74dc 3345 goto nla_put_failure;
9360ffd1
DM		 3346 if ((sinfo->filled & STATION_INFO_CONNECTED_TIME) &&
3347 nla_put_u32(msg, NL80211_STA_INFO_CONNECTED_TIME,
3348 sinfo->connected_time))
3349 goto nla_put_failure;
3350 if ((sinfo->filled & STATION_INFO_INACTIVE_TIME) &&
3351 nla_put_u32(msg, NL80211_STA_INFO_INACTIVE_TIME,
3352 sinfo->inactive_time))
3353 goto nla_put_failure;
42745e03
VK		 3354 if ((sinfo->filled & (STATION_INFO_RX_BYTES |
3355 STATION_INFO_RX_BYTES64)) &&
9360ffd1 3356 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
42745e03 3357 (u32)sinfo->rx_bytes))
9360ffd1 3358 goto nla_put_failure;
42745e03
VK		 3359 if ((sinfo->filled & (STATION_INFO_TX_BYTES |
3360 NL80211_STA_INFO_TX_BYTES64)) &&
9360ffd1 3361 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
42745e03
VK		 3362 (u32)sinfo->tx_bytes))
3363 goto nla_put_failure;
3364 if ((sinfo->filled & STATION_INFO_RX_BYTES64) &&
3365 nla_put_u64(msg, NL80211_STA_INFO_RX_BYTES64,
3366 sinfo->rx_bytes))
3367 goto nla_put_failure;
3368 if ((sinfo->filled & STATION_INFO_TX_BYTES64) &&
3369 nla_put_u64(msg, NL80211_STA_INFO_TX_BYTES64,
9360ffd1
DM		 3370 sinfo->tx_bytes))
3371 goto nla_put_failure;
3372 if ((sinfo->filled & STATION_INFO_LLID) &&
3373 nla_put_u16(msg, NL80211_STA_INFO_LLID, sinfo->llid))
3374 goto nla_put_failure;
3375 if ((sinfo->filled & STATION_INFO_PLID) &&
3376 nla_put_u16(msg, NL80211_STA_INFO_PLID, sinfo->plid))
3377 goto nla_put_failure;
3378 if ((sinfo->filled & STATION_INFO_PLINK_STATE) &&
3379 nla_put_u8(msg, NL80211_STA_INFO_PLINK_STATE,
3380 sinfo->plink_state))
3381 goto nla_put_failure;
66266b3a
JL		 3382 switch (rdev->wiphy.signal_type) {
3383 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 3384 if ((sinfo->filled & STATION_INFO_SIGNAL) &&
3385 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL,
3386 sinfo->signal))
3387 goto nla_put_failure;
3388 if ((sinfo->filled & STATION_INFO_SIGNAL_AVG) &&
3389 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL_AVG,
3390 sinfo->signal_avg))
3391 goto nla_put_failure;
66266b3a
JL		 3392 break;
3393 default:
3394 break;
3395 }
420e7fab 3396 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
c8dcfd8a
FF		 3397 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
3398 NL80211_STA_INFO_TX_BITRATE))
3399 goto nla_put_failure;
3400 }
3401 if (sinfo->filled & STATION_INFO_RX_BITRATE) {
3402 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
3403 NL80211_STA_INFO_RX_BITRATE))
420e7fab 3404 goto nla_put_failure;
420e7fab 3405 }
9360ffd1
DM		 3406 if ((sinfo->filled & STATION_INFO_RX_PACKETS) &&
3407 nla_put_u32(msg, NL80211_STA_INFO_RX_PACKETS,
3408 sinfo->rx_packets))
3409 goto nla_put_failure;
3410 if ((sinfo->filled & STATION_INFO_TX_PACKETS) &&
3411 nla_put_u32(msg, NL80211_STA_INFO_TX_PACKETS,
3412 sinfo->tx_packets))
3413 goto nla_put_failure;
3414 if ((sinfo->filled & STATION_INFO_TX_RETRIES) &&
3415 nla_put_u32(msg, NL80211_STA_INFO_TX_RETRIES,
3416 sinfo->tx_retries))
3417 goto nla_put_failure;
3418 if ((sinfo->filled & STATION_INFO_TX_FAILED) &&
3419 nla_put_u32(msg, NL80211_STA_INFO_TX_FAILED,
3420 sinfo->tx_failed))
3421 goto nla_put_failure;
3422 if ((sinfo->filled & STATION_INFO_BEACON_LOSS_COUNT) &&
3423 nla_put_u32(msg, NL80211_STA_INFO_BEACON_LOSS,
3424 sinfo->beacon_loss_count))
3425 goto nla_put_failure;
3b1c5a53
MP		 3426 if ((sinfo->filled & STATION_INFO_LOCAL_PM) &&
3427 nla_put_u32(msg, NL80211_STA_INFO_LOCAL_PM,
3428 sinfo->local_pm))
3429 goto nla_put_failure;
3430 if ((sinfo->filled & STATION_INFO_PEER_PM) &&
3431 nla_put_u32(msg, NL80211_STA_INFO_PEER_PM,
3432 sinfo->peer_pm))
3433 goto nla_put_failure;
3434 if ((sinfo->filled & STATION_INFO_NONPEER_PM) &&
3435 nla_put_u32(msg, NL80211_STA_INFO_NONPEER_PM,
3436 sinfo->nonpeer_pm))
3437 goto nla_put_failure;
f4263c98
PS		 3438 if (sinfo->filled & STATION_INFO_BSS_PARAM) {
3439 bss_param = nla_nest_start(msg, NL80211_STA_INFO_BSS_PARAM);
3440 if (!bss_param)
3441 goto nla_put_failure;
3442
9360ffd1
DM		 3443 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
3444 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
3445 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
3446 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
3447 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
3448 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
3449 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
3450 sinfo->bss_param.dtim_period) ||
3451 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
3452 sinfo->bss_param.beacon_interval))
3453 goto nla_put_failure;
f4263c98
PS		 3454
3455 nla_nest_end(msg, bss_param);
3456 }
9360ffd1
DM		 3457 if ((sinfo->filled & STATION_INFO_STA_FLAGS) &&
3458 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
3459 sizeof(struct nl80211_sta_flag_update),
3460 &sinfo->sta_flags))
3461 goto nla_put_failure;
7eab0f64
JL		 3462 if ((sinfo->filled & STATION_INFO_T_OFFSET) &&
3463 nla_put_u64(msg, NL80211_STA_INFO_T_OFFSET,
3464 sinfo->t_offset))
3465 goto nla_put_failure;
2ec600d6 3466 nla_nest_end(msg, sinfoattr);
fd5b74dc 3467
9360ffd1
DM		 3468 if ((sinfo->filled & STATION_INFO_ASSOC_REQ_IES) &&
3469 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
3470 sinfo->assoc_req_ies))
3471 goto nla_put_failure;
50d3dfb7 3472
fd5b74dc
JB		 3473 return genlmsg_end(msg, hdr);
3474
3475 nla_put_failure:
bc3ed28c
TG		 3476 genlmsg_cancel(msg, hdr);
3477 return -EMSGSIZE;
fd5b74dc
JB		 3478}
3479
2ec600d6 3480static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 3481 struct netlink_callback *cb)
2ec600d6 3482{
2ec600d6
LCC		 3483 struct station_info sinfo;
3484 struct cfg80211_registered_device *dev;
bba95fef 3485 struct net_device *netdev;
2ec600d6 3486 u8 mac_addr[ETH_ALEN];
bba95fef 3487 int sta_idx = cb->args[1];
2ec600d6 3488 int err;
2ec600d6 3489
67748893
JB		 3490 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
3491 if (err)
3492 return err;
bba95fef
JB		 3493
3494 if (!dev->ops->dump_station) {
eec60b03 3495 err = -EOPNOTSUPP;
bba95fef
JB		 3496 goto out_err;
3497 }
3498
bba95fef 3499 while (1) {
f612cedf 3500 memset(&sinfo, 0, sizeof(sinfo));
e35e4d28
HG		 3501 err = rdev_dump_station(dev, netdev, sta_idx,
3502 mac_addr, &sinfo);
bba95fef
JB		 3503 if (err == -ENOENT)
3504 break;
3505 if (err)
3b85875a 3506 goto out_err;
bba95fef
JB		 3507
3508 if (nl80211_send_station(skb,
15e47304 3509 NETLINK_CB(cb->skb).portid,
bba95fef 3510 cb->nlh->nlmsg_seq, NLM_F_MULTI,
66266b3a 3511 dev, netdev, mac_addr,
bba95fef
JB		 3512 &sinfo) < 0)
3513 goto out;
3514
3515 sta_idx++;
3516 }
3517
3518
3519 out:
3520 cb->args[1] = sta_idx;
3521 err = skb->len;
bba95fef 3522 out_err:
67748893 3523 nl80211_finish_netdev_dump(dev);
bba95fef
JB		 3524
3525 return err;
2ec600d6 3526}
fd5b74dc 3527
5727ef1b
JB		 3528static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
3529{
4c476991
JB		 3530 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3531 struct net_device *dev = info->user_ptr[1];
2ec600d6 3532 struct station_info sinfo;
fd5b74dc
JB		 3533 struct sk_buff *msg;
3534 u8 *mac_addr = NULL;
4c476991 3535 int err;
fd5b74dc 3536
2ec600d6 3537 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc
JB		 3538
3539 if (!info->attrs[NL80211_ATTR_MAC])
3540 return -EINVAL;
3541
3542 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3543
4c476991
JB		 3544 if (!rdev->ops->get_station)
3545 return -EOPNOTSUPP;
3b85875a 3546
e35e4d28 3547 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
fd5b74dc 3548 if (err)
4c476991 3549 return err;
2ec600d6 3550
fd2120ca 3551 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
fd5b74dc 3552 if (!msg)
4c476991 3553 return -ENOMEM;
fd5b74dc 3554
15e47304 3555 if (nl80211_send_station(msg, info->snd_portid, info->snd_seq, 0,
66266b3a 3556 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991
JB		 3557 nlmsg_free(msg);
3558 return -ENOBUFS;
3559 }
3b85875a 3560
4c476991 3561 return genlmsg_reply(msg, info);
5727ef1b
JB		 3562}
3563
77ee7c89
JB		 3564int cfg80211_check_station_change(struct wiphy *wiphy,
3565 struct station_parameters *params,
3566 enum cfg80211_station_type statype)
3567{
3568 if (params->listen_interval != -1)
3569 return -EINVAL;
3570 if (params->aid)
3571 return -EINVAL;
3572
3573 /* When you run into this, adjust the code below for the new flag */
3574 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
3575
3576 switch (statype) {
3577 case CFG80211_STA_MESH_PEER_NONSEC:
3578 case CFG80211_STA_MESH_PEER_SECURE:
3579 /*
3580 * No ignoring the TDLS flag here -- the userspace mesh
3581 * code doesn't have the bug of including TDLS in the
3582 * mask everywhere.
3583 */
3584 if (params->sta_flags_mask &
3585 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
3586 BIT(NL80211_STA_FLAG_MFP) |
3587 BIT(NL80211_STA_FLAG_AUTHORIZED)))
3588 return -EINVAL;
3589 break;
3590 case CFG80211_STA_TDLS_PEER_SETUP:
3591 case CFG80211_STA_TDLS_PEER_ACTIVE:
3592 if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
3593 return -EINVAL;
3594 /* ignore since it can't change */
3595 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3596 break;
3597 default:
3598 /* disallow mesh-specific things */
3599 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
3600 return -EINVAL;
3601 if (params->local_pm)
3602 return -EINVAL;
3603 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
3604 return -EINVAL;
3605 }
3606
3607 if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
3608 statype != CFG80211_STA_TDLS_PEER_ACTIVE) {
3609 /* TDLS can't be set, ... */
3610 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3611 return -EINVAL;
3612 /*
3613 * ... but don't bother the driver with it. This works around
3614 * a hostapd/wpa_supplicant issue -- it always includes the
3615 * TLDS_PEER flag in the mask even for AP mode.
3616 */
3617 params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3618 }
3619
3620 if (statype != CFG80211_STA_TDLS_PEER_SETUP) {
3621 /* reject other things that can't change */
3622 if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD)
3623 return -EINVAL;
3624 if (params->sta_modify_mask & STATION_PARAM_APPLY_CAPABILITY)
3625 return -EINVAL;
3626 if (params->supported_rates)
3627 return -EINVAL;
3628 if (params->ext_capab || params->ht_capa || params->vht_capa)
3629 return -EINVAL;
3630 }
3631
3632 if (statype != CFG80211_STA_AP_CLIENT) {
3633 if (params->vlan)
3634 return -EINVAL;
3635 }
3636
3637 switch (statype) {
3638 case CFG80211_STA_AP_MLME_CLIENT:
3639 /* Use this only for authorizing/unauthorizing a station */
3640 if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
3641 return -EOPNOTSUPP;
3642 break;
3643 case CFG80211_STA_AP_CLIENT:
3644 /* accept only the listed bits */
3645 if (params->sta_flags_mask &
3646 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
3647 BIT(NL80211_STA_FLAG_AUTHENTICATED) |
3648 BIT(NL80211_STA_FLAG_ASSOCIATED) |
3649 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
3650 BIT(NL80211_STA_FLAG_WME) |
3651 BIT(NL80211_STA_FLAG_MFP)))
3652 return -EINVAL;
3653
3654 /* but authenticated/associated only if driver handles it */
3655 if (!(wiphy->features & NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
3656 params->sta_flags_mask &
3657 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
3658 BIT(NL80211_STA_FLAG_ASSOCIATED)))
3659 return -EINVAL;
3660 break;
3661 case CFG80211_STA_IBSS:
3662 case CFG80211_STA_AP_STA:
3663 /* reject any changes other than AUTHORIZED */
3664 if (params->sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
3665 return -EINVAL;
3666 break;
3667 case CFG80211_STA_TDLS_PEER_SETUP:
3668 /* reject any changes other than AUTHORIZED or WME */
3669 if (params->sta_flags_mask & ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
3670 BIT(NL80211_STA_FLAG_WME)))
3671 return -EINVAL;
3672 /* force (at least) rates when authorizing */
3673 if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
3674 !params->supported_rates)
3675 return -EINVAL;
3676 break;
3677 case CFG80211_STA_TDLS_PEER_ACTIVE:
3678 /* reject any changes */
3679 return -EINVAL;
3680 case CFG80211_STA_MESH_PEER_NONSEC:
3681 if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
3682 return -EINVAL;
3683 break;
3684 case CFG80211_STA_MESH_PEER_SECURE:
3685 if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
3686 return -EINVAL;
3687 break;
3688 }
3689
3690 return 0;
3691}
3692EXPORT_SYMBOL(cfg80211_check_station_change);
3693
5727ef1b 3694/*
c258d2de 3695 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 3696 */
80b99899
JB		 3697static struct net_device *get_vlan(struct genl_info *info,
3698 struct cfg80211_registered_device *rdev)
5727ef1b 3699{
463d0183 3700 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 3701 struct net_device *v;
3702 int ret;
3703
3704 if (!vlanattr)
3705 return NULL;
3706
3707 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
3708 if (!v)
3709 return ERR_PTR(-ENODEV);
3710
3711 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
3712 ret = -EINVAL;
3713 goto error;
5727ef1b 3714 }
80b99899 3715
77ee7c89
JB		 3716 if (v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
3717 v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
3718 v->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
3719 ret = -EINVAL;
3720 goto error;
3721 }
3722
80b99899
JB		 3723 if (!netif_running(v)) {
3724 ret = -ENETDOWN;
3725 goto error;
3726 }
3727
3728 return v;
3729 error:
3730 dev_put(v);
3731 return ERR_PTR(ret);
5727ef1b
JB		 3732}
3733
df881293
JM		 3734static struct nla_policy
3735nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] __read_mostly = {
3736 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
3737 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
3738};
3739
ff276691
JB		 3740static int nl80211_parse_sta_wme(struct genl_info *info,
3741 struct station_parameters *params)
df881293 3742{
df881293
JM		 3743 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
3744 struct nlattr *nla;
3745 int err;
3746
df881293
JM		 3747 /* parse WME attributes if present */
3748 if (!info->attrs[NL80211_ATTR_STA_WME])
3749 return 0;
3750
3751 nla = info->attrs[NL80211_ATTR_STA_WME];
3752 err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
3753 nl80211_sta_wme_policy);
3754 if (err)
3755 return err;
3756
3757 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
3758 params->uapsd_queues = nla_get_u8(
3759 tb[NL80211_STA_WME_UAPSD_QUEUES]);
3760 if (params->uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
3761 return -EINVAL;
3762
3763 if (tb[NL80211_STA_WME_MAX_SP])
3764 params->max_sp = nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
3765
3766 if (params->max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
3767 return -EINVAL;
3768
3769 params->sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
3770
3771 return 0;
3772}
3773
ff276691
JB		 3774static int nl80211_set_station_tdls(struct genl_info *info,
3775 struct station_parameters *params)
3776{
3777 /* Dummy STA entry gets updated once the peer capabilities are known */
3778 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
3779 params->ht_capa =
3780 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
3781 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
3782 params->vht_capa =
3783 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
3784
3785 return nl80211_parse_sta_wme(info, params);
3786}
3787
5727ef1b
JB		 3788static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
3789{
4c476991 3790 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 3791 struct net_device *dev = info->user_ptr[1];
5727ef1b 3792 struct station_parameters params;
77ee7c89
JB		 3793 u8 *mac_addr;
3794 int err;
5727ef1b
JB		 3795
3796 memset(&params, 0, sizeof(params));
3797
3798 params.listen_interval = -1;
3799
77ee7c89
JB		 3800 if (!rdev->ops->change_station)
3801 return -EOPNOTSUPP;
3802
5727ef1b
JB		 3803 if (info->attrs[NL80211_ATTR_STA_AID])
3804 return -EINVAL;
3805
3806 if (!info->attrs[NL80211_ATTR_MAC])
3807 return -EINVAL;
3808
3809 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3810
3811 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
3812 params.supported_rates =
3813 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3814 params.supported_rates_len =
3815 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3816 }
3817
9d62a986
JM		 3818 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
3819 params.capability =
3820 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
3821 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
3822 }
3823
3824 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
3825 params.ext_capab =
3826 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
3827 params.ext_capab_len =
3828 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
3829 }
3830
df881293 3831 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
ba23d206 3832 return -EINVAL;
36aedc90 3833
bdd3ae3d 3834 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 3835 return -EINVAL;
3836
f8bacc21 3837 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION]) {
2ec600d6 3838 params.plink_action =
f8bacc21
JB		 3839 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
3840 if (params.plink_action >= NUM_NL80211_PLINK_ACTIONS)
3841 return -EINVAL;
3842 }
2ec600d6 3843
f8bacc21 3844 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE]) {
9c3990aa 3845 params.plink_state =
f8bacc21
JB		 3846 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
3847 if (params.plink_state >= NUM_NL80211_PLINK_STATES)
3848 return -EINVAL;
3849 params.sta_modify_mask |= STATION_PARAM_APPLY_PLINK_STATE;
3850 }
9c3990aa 3851
3b1c5a53
MP		 3852 if (info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]) {
3853 enum nl80211_mesh_power_mode pm = nla_get_u32(
3854 info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]);
3855
3856 if (pm <= NL80211_MESH_POWER_UNKNOWN ||
3857 pm > NL80211_MESH_POWER_MAX)
3858 return -EINVAL;
3859
3860 params.local_pm = pm;
3861 }
3862
77ee7c89
JB		 3863 /* Include parameters for TDLS peer (will check later) */
3864 err = nl80211_set_station_tdls(info, &params);
3865 if (err)
3866 return err;
3867
3868 params.vlan = get_vlan(info, rdev);
3869 if (IS_ERR(params.vlan))
3870 return PTR_ERR(params.vlan);
3871
a97f4424
JB		 3872 switch (dev->ieee80211_ptr->iftype) {
3873 case NL80211_IFTYPE_AP:
3874 case NL80211_IFTYPE_AP_VLAN:
074ac8df 3875 case NL80211_IFTYPE_P2P_GO:
074ac8df 3876 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 3877 case NL80211_IFTYPE_STATION:
267335d6 3878 case NL80211_IFTYPE_ADHOC:
a97f4424 3879 case NL80211_IFTYPE_MESH_POINT:
a97f4424
JB		 3880 break;
3881 default:
77ee7c89
JB		 3882 err = -EOPNOTSUPP;
3883 goto out_put_vlan;
034d655e
JB		 3884 }
3885
77ee7c89 3886 /* driver will call cfg80211_check_station_change() */
e35e4d28 3887 err = rdev_change_station(rdev, dev, mac_addr, &params);
5727ef1b 3888
77ee7c89 3889 out_put_vlan:
5727ef1b
JB		 3890 if (params.vlan)
3891 dev_put(params.vlan);
3b85875a 3892
5727ef1b
JB		 3893 return err;
3894}
3895
3896static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
3897{
4c476991 3898 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 3899 int err;
4c476991 3900 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 3901 struct station_parameters params;
3902 u8 *mac_addr = NULL;
3903
3904 memset(&params, 0, sizeof(params));
3905
984c311b
JB		 3906 if (!rdev->ops->add_station)
3907 return -EOPNOTSUPP;
3908
5727ef1b
JB		 3909 if (!info->attrs[NL80211_ATTR_MAC])
3910 return -EINVAL;
3911
5727ef1b
JB		 3912 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
3913 return -EINVAL;
3914
3915 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
3916 return -EINVAL;
3917
0e956c13
TLSC		 3918 if (!info->attrs[NL80211_ATTR_STA_AID])
3919 return -EINVAL;
3920
5727ef1b
JB		 3921 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3922 params.supported_rates =
3923 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3924 params.supported_rates_len =
3925 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3926 params.listen_interval =
3927 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 3928
0e956c13
TLSC		 3929 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
3930 if (!params.aid || params.aid > IEEE80211_MAX_AID)
3931 return -EINVAL;
51b50fbe 3932
9d62a986
JM		 3933 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
3934 params.capability =
3935 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
3936 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
3937 }
3938
3939 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
3940 params.ext_capab =
3941 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
3942 params.ext_capab_len =
3943 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
3944 }
3945
36aedc90
JM		 3946 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
3947 params.ht_capa =
3948 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 3949
f461be3e
MP		 3950 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
3951 params.vht_capa =
3952 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
3953
f8bacc21 3954 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION]) {
96b78dff 3955 params.plink_action =
f8bacc21
JB		 3956 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
3957 if (params.plink_action >= NUM_NL80211_PLINK_ACTIONS)
3958 return -EINVAL;
3959 }
96b78dff 3960
ff276691
JB		 3961 err = nl80211_parse_sta_wme(info, &params);
3962 if (err)
3963 return err;
bdd90d5e 3964
bdd3ae3d 3965 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 3966 return -EINVAL;
3967
77ee7c89
JB		 3968 /* When you run into this, adjust the code below for the new flag */
3969 BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
3970
bdd90d5e
JB		 3971 switch (dev->ieee80211_ptr->iftype) {
3972 case NL80211_IFTYPE_AP:
3973 case NL80211_IFTYPE_AP_VLAN:
3974 case NL80211_IFTYPE_P2P_GO:
984c311b
JB		 3975 /* ignore WME attributes if iface/sta is not capable */
3976 if (!(rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) ||
3977 !(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)))
3978 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
c75786c9 3979
bdd90d5e
JB		 3980 /* TDLS peers cannot be added */
3981 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
4319e193 3982 return -EINVAL;
bdd90d5e
JB		 3983 /* but don't bother the driver with it */
3984 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 3985
d582cffb
JB		 3986 /* allow authenticated/associated only if driver handles it */
3987 if (!(rdev->wiphy.features &
3988 NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
3989 params.sta_flags_mask &
3990 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
3991 BIT(NL80211_STA_FLAG_ASSOCIATED)))
3992 return -EINVAL;
3993
bdd90d5e
JB		 3994 /* must be last in here for error handling */
3995 params.vlan = get_vlan(info, rdev);
3996 if (IS_ERR(params.vlan))
3997 return PTR_ERR(params.vlan);
3998 break;
3999 case NL80211_IFTYPE_MESH_POINT:
984c311b
JB		 4000 /* ignore uAPSD data */
4001 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
4002
d582cffb
JB		 4003 /* associated is disallowed */
4004 if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
4005 return -EINVAL;
bdd90d5e
JB		 4006 /* TDLS peers cannot be added */
4007 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
4008 return -EINVAL;
4009 break;
4010 case NL80211_IFTYPE_STATION:
984c311b
JB		 4011 /* ignore uAPSD data */
4012 params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
4013
77ee7c89
JB		 4014 /* these are disallowed */
4015 if (params.sta_flags_mask &
4016 (BIT(NL80211_STA_FLAG_ASSOCIATED) |
4017 BIT(NL80211_STA_FLAG_AUTHENTICATED)))
d582cffb 4018 return -EINVAL;
bdd90d5e
JB		 4019 /* Only TDLS peers can be added */
4020 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
4021 return -EINVAL;
4022 /* Can only add if TDLS ... */
4023 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
4024 return -EOPNOTSUPP;
4025 /* ... with external setup is supported */
4026 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
4027 return -EOPNOTSUPP;
77ee7c89
JB		 4028 /*
4029 * Older wpa_supplicant versions always mark the TDLS peer
4030 * as authorized, but it shouldn't yet be.
4031 */
4032 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_AUTHORIZED);
bdd90d5e
JB		 4033 break;
4034 default:
4035 return -EOPNOTSUPP;
c75786c9
EP		 4036 }
4037
bdd90d5e 4038 /* be aware of params.vlan when changing code here */
5727ef1b 4039
e35e4d28 4040 err = rdev_add_station(rdev, dev, mac_addr, &params);
5727ef1b 4041
5727ef1b
JB		 4042 if (params.vlan)
4043 dev_put(params.vlan);
5727ef1b
JB		 4044 return err;
4045}
4046
4047static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
4048{
4c476991
JB		 4049 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4050 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 4051 u8 *mac_addr = NULL;
4052
4053 if (info->attrs[NL80211_ATTR_MAC])
4054 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
4055
e80cf853 4056 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
d5d9de02 4057 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
074ac8df 4058 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 4059 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4060 return -EINVAL;
5727ef1b 4061
4c476991
JB		 4062 if (!rdev->ops->del_station)
4063 return -EOPNOTSUPP;
3b85875a 4064
e35e4d28 4065 return rdev_del_station(rdev, dev, mac_addr);
5727ef1b
JB		 4066}
4067
15e47304 4068static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
2ec600d6
LCC		 4069 int flags, struct net_device *dev,
4070 u8 *dst, u8 *next_hop,
4071 struct mpath_info *pinfo)
4072{
4073 void *hdr;
4074 struct nlattr *pinfoattr;
4075
15e47304 4076 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_STATION);
2ec600d6
LCC		 4077 if (!hdr)
4078 return -1;
4079
9360ffd1
DM		 4080 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
4081 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
4082 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
4083 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
4084 goto nla_put_failure;
f5ea9120 4085
2ec600d6
LCC		 4086 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
4087 if (!pinfoattr)
4088 goto nla_put_failure;
9360ffd1
DM		 4089 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
4090 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
4091 pinfo->frame_qlen))
4092 goto nla_put_failure;
4093 if (((pinfo->filled & MPATH_INFO_SN) &&
4094 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
4095 ((pinfo->filled & MPATH_INFO_METRIC) &&
4096 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
4097 pinfo->metric)) ||
4098 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
4099 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
4100 pinfo->exptime)) ||
4101 ((pinfo->filled & MPATH_INFO_FLAGS) &&
4102 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
4103 pinfo->flags)) ||
4104 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
4105 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
4106 pinfo->discovery_timeout)) ||
4107 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
4108 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
4109 pinfo->discovery_retries)))
4110 goto nla_put_failure;
2ec600d6
LCC		 4111
4112 nla_nest_end(msg, pinfoattr);
4113
4114 return genlmsg_end(msg, hdr);
4115
4116 nla_put_failure:
bc3ed28c
TG		 4117 genlmsg_cancel(msg, hdr);
4118 return -EMSGSIZE;
2ec600d6
LCC		 4119}
4120
4121static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 4122 struct netlink_callback *cb)
2ec600d6 4123{
2ec600d6
LCC		 4124 struct mpath_info pinfo;
4125 struct cfg80211_registered_device *dev;
bba95fef 4126 struct net_device *netdev;
2ec600d6
LCC		 4127 u8 dst[ETH_ALEN];
4128 u8 next_hop[ETH_ALEN];
bba95fef 4129 int path_idx = cb->args[1];
2ec600d6 4130 int err;
2ec600d6 4131
67748893
JB		 4132 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
4133 if (err)
4134 return err;
bba95fef
JB		 4135
4136 if (!dev->ops->dump_mpath) {
eec60b03 4137 err = -EOPNOTSUPP;
bba95fef
JB		 4138 goto out_err;
4139 }
4140
eec60b03
JM		 4141 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
4142 err = -EOPNOTSUPP;
0448b5fc 4143 goto out_err;
eec60b03
JM		 4144 }
4145
bba95fef 4146 while (1) {
e35e4d28
HG		 4147 err = rdev_dump_mpath(dev, netdev, path_idx, dst, next_hop,
4148 &pinfo);
bba95fef 4149 if (err == -ENOENT)
2ec600d6 4150 break;
bba95fef 4151 if (err)
3b85875a 4152 goto out_err;
2ec600d6 4153
15e47304 4154 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
bba95fef
JB		 4155 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4156 netdev, dst, next_hop,
4157 &pinfo) < 0)
4158 goto out;
2ec600d6 4159
bba95fef 4160 path_idx++;
2ec600d6 4161 }
2ec600d6 4162
2ec600d6 4163
bba95fef
JB		 4164 out:
4165 cb->args[1] = path_idx;
4166 err = skb->len;
bba95fef 4167 out_err:
67748893 4168 nl80211_finish_netdev_dump(dev);
bba95fef 4169 return err;
2ec600d6
LCC		 4170}
4171
4172static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
4173{
4c476991 4174 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 4175 int err;
4c476991 4176 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 4177 struct mpath_info pinfo;
4178 struct sk_buff *msg;
4179 u8 *dst = NULL;
4180 u8 next_hop[ETH_ALEN];
4181
4182 memset(&pinfo, 0, sizeof(pinfo));
4183
4184 if (!info->attrs[NL80211_ATTR_MAC])
4185 return -EINVAL;
4186
4187 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
4188
4c476991
JB		 4189 if (!rdev->ops->get_mpath)
4190 return -EOPNOTSUPP;
2ec600d6 4191
4c476991
JB		 4192 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
4193 return -EOPNOTSUPP;
eec60b03 4194
e35e4d28 4195 err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
2ec600d6 4196 if (err)
4c476991 4197 return err;
2ec600d6 4198
fd2120ca 4199 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 4200 if (!msg)
4c476991 4201 return -ENOMEM;
2ec600d6 4202
15e47304 4203 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
4c476991
JB		 4204 dev, dst, next_hop, &pinfo) < 0) {
4205 nlmsg_free(msg);
4206 return -ENOBUFS;
4207 }
3b85875a 4208
4c476991 4209 return genlmsg_reply(msg, info);
2ec600d6
LCC		 4210}
4211
4212static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
4213{
4c476991
JB		 4214 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4215 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 4216 u8 *dst = NULL;
4217 u8 *next_hop = NULL;
4218
4219 if (!info->attrs[NL80211_ATTR_MAC])
4220 return -EINVAL;
4221
4222 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
4223 return -EINVAL;
4224
4225 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
4226 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
4227
4c476991
JB		 4228 if (!rdev->ops->change_mpath)
4229 return -EOPNOTSUPP;
35a8efe1 4230
4c476991
JB		 4231 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
4232 return -EOPNOTSUPP;
2ec600d6 4233
e35e4d28 4234 return rdev_change_mpath(rdev, dev, dst, next_hop);
2ec600d6 4235}
4c476991 4236
2ec600d6
LCC		 4237static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
4238{
4c476991
JB		 4239 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4240 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 4241 u8 *dst = NULL;
4242 u8 *next_hop = NULL;
4243
4244 if (!info->attrs[NL80211_ATTR_MAC])
4245 return -EINVAL;
4246
4247 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
4248 return -EINVAL;
4249
4250 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
4251 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
4252
4c476991
JB		 4253 if (!rdev->ops->add_mpath)
4254 return -EOPNOTSUPP;
35a8efe1 4255
4c476991
JB		 4256 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
4257 return -EOPNOTSUPP;
2ec600d6 4258
e35e4d28 4259 return rdev_add_mpath(rdev, dev, dst, next_hop);
2ec600d6
LCC		 4260}
4261
4262static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
4263{
4c476991
JB		 4264 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4265 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 4266 u8 *dst = NULL;
4267
4268 if (info->attrs[NL80211_ATTR_MAC])
4269 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
4270
4c476991
JB		 4271 if (!rdev->ops->del_mpath)
4272 return -EOPNOTSUPP;
3b85875a 4273
e35e4d28 4274 return rdev_del_mpath(rdev, dev, dst);
2ec600d6
LCC		 4275}
4276
9f1ba906
JM		 4277static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
4278{
4c476991
JB		 4279 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4280 struct net_device *dev = info->user_ptr[1];
9f1ba906
JM		 4281 struct bss_parameters params;
4282
4283 memset(&params, 0, sizeof(params));
4284 /* default to not changing parameters */
4285 params.use_cts_prot = -1;
4286 params.use_short_preamble = -1;
4287 params.use_short_slot_time = -1;
fd8aaaf3 4288 params.ap_isolate = -1;
50b12f59 4289 params.ht_opmode = -1;
53cabad7
JB		 4290 params.p2p_ctwindow = -1;
4291 params.p2p_opp_ps = -1;
9f1ba906
JM		 4292
4293 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
4294 params.use_cts_prot =
4295 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
4296 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
4297 params.use_short_preamble =
4298 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
4299 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
4300 params.use_short_slot_time =
4301 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 4302 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
4303 params.basic_rates =
4304 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
4305 params.basic_rates_len =
4306 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
4307 }
fd8aaaf3
FF		 4308 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
4309 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 4310 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
4311 params.ht_opmode =
4312 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 4313
53cabad7
JB		 4314 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
4315 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4316 return -EINVAL;
4317 params.p2p_ctwindow =
4318 nla_get_s8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
4319 if (params.p2p_ctwindow < 0)
4320 return -EINVAL;
4321 if (params.p2p_ctwindow != 0 &&
4322 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
4323 return -EINVAL;
4324 }
4325
4326 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
4327 u8 tmp;
4328
4329 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4330 return -EINVAL;
4331 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
4332 if (tmp > 1)
4333 return -EINVAL;
4334 params.p2p_opp_ps = tmp;
4335 if (params.p2p_opp_ps &&
4336 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
4337 return -EINVAL;
4338 }
4339
4c476991
JB		 4340 if (!rdev->ops->change_bss)
4341 return -EOPNOTSUPP;
9f1ba906 4342
074ac8df 4343 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 4344 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4345 return -EOPNOTSUPP;
3b85875a 4346
e35e4d28 4347 return rdev_change_bss(rdev, dev, &params);
9f1ba906
JM		 4348}
4349
b54452b0 4350static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
b2e1b302
LR		 4351 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
4352 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
4353 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
4354 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
4355 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
4356 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
4357};
4358
4359static int parse_reg_rule(struct nlattr *tb[],
4360 struct ieee80211_reg_rule *reg_rule)
4361{
4362 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
4363 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
4364
4365 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
4366 return -EINVAL;
4367 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
4368 return -EINVAL;
4369 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
4370 return -EINVAL;
4371 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
4372 return -EINVAL;
4373 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
4374 return -EINVAL;
4375
4376 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
4377
4378 freq_range->start_freq_khz =
4379 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
4380 freq_range->end_freq_khz =
4381 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
4382 freq_range->max_bandwidth_khz =
4383 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
4384
4385 power_rule->max_eirp =
4386 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
4387
4388 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
4389 power_rule->max_antenna_gain =
4390 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
4391
4392 return 0;
4393}
4394
4395static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
4396{
4397 int r;
4398 char *data = NULL;
57b5ce07 4399 enum nl80211_user_reg_hint_type user_reg_hint_type;
b2e1b302 4400
80778f18
LR		 4401 /*
4402 * You should only get this when cfg80211 hasn't yet initialized
4403 * completely when built-in to the kernel right between the time
4404 * window between nl80211_init() and regulatory_init(), if that is
4405 * even possible.
4406 */
458f4f9e 4407 if (unlikely(!rcu_access_pointer(cfg80211_regdomain)))
fe33eb39 4408 return -EINPROGRESS;
80778f18 4409
fe33eb39
LR		 4410 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
4411 return -EINVAL;
b2e1b302
LR		 4412
4413 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
4414
57b5ce07
LR		 4415 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
4416 user_reg_hint_type =
4417 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
4418 else
4419 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
4420
4421 switch (user_reg_hint_type) {
4422 case NL80211_USER_REG_HINT_USER:
4423 case NL80211_USER_REG_HINT_CELL_BASE:
4424 break;
4425 default:
4426 return -EINVAL;
4427 }
4428
4429 r = regulatory_hint_user(data, user_reg_hint_type);
fe33eb39 4430
b2e1b302
LR		 4431 return r;
4432}
4433
24bdd9f4 4434static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 4435 struct genl_info *info)
93da9cc1 4436{
4c476991 4437 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 4438 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 4439 struct wireless_dev *wdev = dev->ieee80211_ptr;
4440 struct mesh_config cur_params;
4441 int err = 0;
93da9cc1 4442 void *hdr;
4443 struct nlattr *pinfoattr;
4444 struct sk_buff *msg;
4445
29cbe68c
JB		 4446 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
4447 return -EOPNOTSUPP;
4448
24bdd9f4 4449 if (!rdev->ops->get_mesh_config)
4c476991 4450 return -EOPNOTSUPP;
f3f92586 4451
29cbe68c
JB		 4452 wdev_lock(wdev);
4453 /* If not connected, get default parameters */
4454 if (!wdev->mesh_id_len)
4455 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
4456 else
e35e4d28 4457 err = rdev_get_mesh_config(rdev, dev, &cur_params);
29cbe68c
JB		 4458 wdev_unlock(wdev);
4459
93da9cc1 4460 if (err)
4c476991 4461 return err;
93da9cc1 4462
4463 /* Draw up a netlink message to send back */
fd2120ca 4464 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 4465 if (!msg)
4466 return -ENOMEM;
15e47304 4467 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
24bdd9f4 4468 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 4469 if (!hdr)
efe1cf0c 4470 goto out;
24bdd9f4 4471 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 4472 if (!pinfoattr)
4473 goto nla_put_failure;
9360ffd1
DM		 4474 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
4475 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
4476 cur_params.dot11MeshRetryTimeout) ||
4477 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
4478 cur_params.dot11MeshConfirmTimeout) ||
4479 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
4480 cur_params.dot11MeshHoldingTimeout) ||
4481 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
4482 cur_params.dot11MeshMaxPeerLinks) ||
4483 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
4484 cur_params.dot11MeshMaxRetries) ||
4485 nla_put_u8(msg, NL80211_MESHCONF_TTL,
4486 cur_params.dot11MeshTTL) ||
4487 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
4488 cur_params.element_ttl) ||
4489 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
4490 cur_params.auto_open_plinks) ||
7eab0f64
JL		 4491 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
4492 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 4493 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
4494 cur_params.dot11MeshHWMPmaxPREQretries) ||
4495 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
4496 cur_params.path_refresh_time) ||
4497 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
4498 cur_params.min_discovery_timeout) ||
4499 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
4500 cur_params.dot11MeshHWMPactivePathTimeout) ||
4501 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
4502 cur_params.dot11MeshHWMPpreqMinInterval) ||
4503 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
4504 cur_params.dot11MeshHWMPperrMinInterval) ||
4505 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
4506 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
4507 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
4508 cur_params.dot11MeshHWMPRootMode) ||
4509 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
4510 cur_params.dot11MeshHWMPRannInterval) ||
4511 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
4512 cur_params.dot11MeshGateAnnouncementProtocol) ||
4513 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
4514 cur_params.dot11MeshForwarding) ||
4515 nla_put_u32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 4516 cur_params.rssi_threshold) ||
4517 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 4518 cur_params.ht_opmode) ||
4519 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
4520 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
4521 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 4522 cur_params.dot11MeshHWMProotInterval) ||
4523 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
3b1c5a53
MP		 4524 cur_params.dot11MeshHWMPconfirmationInterval) ||
4525 nla_put_u32(msg, NL80211_MESHCONF_POWER_MODE,
4526 cur_params.power_mode) ||
4527 nla_put_u16(msg, NL80211_MESHCONF_AWAKE_WINDOW,
4528 cur_params.dot11MeshAwakeWindowDuration))
9360ffd1 4529 goto nla_put_failure;
93da9cc1 4530 nla_nest_end(msg, pinfoattr);
4531 genlmsg_end(msg, hdr);
4c476991 4532 return genlmsg_reply(msg, info);
93da9cc1 4533
3b85875a 4534 nla_put_failure:
93da9cc1 4535 genlmsg_cancel(msg, hdr);
efe1cf0c 4536 out:
d080e275 4537 nlmsg_free(msg);
4c476991 4538 return -ENOBUFS;
93da9cc1 4539}
4540
b54452b0 4541static const struct nla_policy nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
93da9cc1 4542 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
4543 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
4544 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
4545 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
4546 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
4547 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
45904f21 4548 [NL80211_MESHCONF_ELEMENT_TTL] = { .type = NLA_U8 },
93da9cc1 4549 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
d299a1f2 4550 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] = { .type = NLA_U32 },
93da9cc1 4551 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
4552 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
4553 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
4554 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
4555 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
dca7e943 4556 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] = { .type = NLA_U16 },
93da9cc1 4557 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
699403db 4558 [NL80211_MESHCONF_HWMP_ROOTMODE] = { .type = NLA_U8 },
0507e159 4559 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] = { .type = NLA_U16 },
16dd7267 4560 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = { .type = NLA_U8 },
94f90656 4561 [NL80211_MESHCONF_FORWARDING] = { .type = NLA_U8 },
a4f606ea
CYY		 4562 [NL80211_MESHCONF_RSSI_THRESHOLD] = { .type = NLA_U32 },
4563 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
ac1073a6
CYY		 4564 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
4565 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] = { .type = NLA_U16 },
728b19e5 4566 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] = { .type = NLA_U16 },
3b1c5a53
MP		 4567 [NL80211_MESHCONF_POWER_MODE] = { .type = NLA_U32 },
4568 [NL80211_MESHCONF_AWAKE_WINDOW] = { .type = NLA_U16 },
93da9cc1 4569};
4570
c80d545d
JC		 4571static const struct nla_policy
4572 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 4573 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 4574 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
4575 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 4576 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
581a8b0f 4577 [NL80211_MESH_SETUP_IE] = { .type = NLA_BINARY,
a4f606ea 4578 .len = IEEE80211_MAX_DATA_LEN },
b130e5ce 4579 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 4580};
4581
24bdd9f4 4582static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 4583 struct mesh_config *cfg,
4584 u32 *mask_out)
93da9cc1 4585{
93da9cc1 4586 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 4587 u32 mask = 0;
93da9cc1 4588
ea54fba2
MP		 4589#define FILL_IN_MESH_PARAM_IF_SET(tb, cfg, param, min, max, mask, attr, fn) \
4590do { \
4591 if (tb[attr]) { \
4592 if (fn(tb[attr]) < min || fn(tb[attr]) > max) \
4593 return -EINVAL; \
4594 cfg->param = fn(tb[attr]); \
4595 mask |= (1 << (attr - 1)); \
4596 } \
4597} while (0)
bd90fdcc
JB		 4598
4599
24bdd9f4 4600 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 4601 return -EINVAL;
4602 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
24bdd9f4 4603 info->attrs[NL80211_ATTR_MESH_CONFIG],
bd90fdcc 4604 nl80211_meshconf_params_policy))
93da9cc1 4605 return -EINVAL;
4606
93da9cc1 4607 /* This makes sure that there aren't more than 32 mesh config
4608 * parameters (otherwise our bitfield scheme would not work.) */
4609 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
4610
4611 /* Fill in the params struct */
ea54fba2 4612 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout, 1, 255,
a4f606ea
CYY		 4613 mask, NL80211_MESHCONF_RETRY_TIMEOUT,
4614 nla_get_u16);
ea54fba2 4615 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout, 1, 255,
a4f606ea
CYY		 4616 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT,
4617 nla_get_u16);
ea54fba2 4618 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout, 1, 255,
a4f606ea
CYY		 4619 mask, NL80211_MESHCONF_HOLDING_TIMEOUT,
4620 nla_get_u16);
ea54fba2 4621 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks, 0, 255,
a4f606ea
CYY		 4622 mask, NL80211_MESHCONF_MAX_PEER_LINKS,
4623 nla_get_u16);
ea54fba2 4624 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries, 0, 16,
a4f606ea
CYY		 4625 mask, NL80211_MESHCONF_MAX_RETRIES,
4626 nla_get_u8);
ea54fba2 4627 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL, 1, 255,
a4f606ea 4628 mask, NL80211_MESHCONF_TTL, nla_get_u8);
ea54fba2 4629 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl, 1, 255,
a4f606ea
CYY		 4630 mask, NL80211_MESHCONF_ELEMENT_TTL,
4631 nla_get_u8);
ea54fba2 4632 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks, 0, 1,
a4f606ea
CYY		 4633 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
4634 nla_get_u8);
ea54fba2
MP		 4635 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
4636 1, 255, mask,
a4f606ea
CYY		 4637 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
4638 nla_get_u32);
ea54fba2 4639 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries, 0, 255,
a4f606ea
CYY		 4640 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
4641 nla_get_u8);
ea54fba2 4642 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time, 1, 65535,
a4f606ea
CYY		 4643 mask, NL80211_MESHCONF_PATH_REFRESH_TIME,
4644 nla_get_u32);
ea54fba2 4645 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout, 1, 65535,
a4f606ea
CYY		 4646 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
4647 nla_get_u16);
ea54fba2
MP		 4648 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
4649 1, 65535, mask,
a4f606ea
CYY		 4650 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
4651 nla_get_u32);
93da9cc1 4652 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
ea54fba2
MP		 4653 1, 65535, mask,
4654 NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
a4f606ea 4655 nla_get_u16);
dca7e943 4656 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval,
ea54fba2
MP		 4657 1, 65535, mask,
4658 NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
a4f606ea 4659 nla_get_u16);
93da9cc1 4660 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ea54fba2
MP		 4661 dot11MeshHWMPnetDiameterTraversalTime,
4662 1, 65535, mask,
a4f606ea
CYY		 4663 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
4664 nla_get_u16);
ea54fba2
MP		 4665 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, 0, 4,
4666 mask, NL80211_MESHCONF_HWMP_ROOTMODE,
4667 nla_get_u8);
4668 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, 1, 65535,
4669 mask, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
a4f606ea 4670 nla_get_u16);
63c5723b 4671 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ea54fba2
MP		 4672 dot11MeshGateAnnouncementProtocol, 0, 1,
4673 mask, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
a4f606ea 4674 nla_get_u8);
ea54fba2 4675 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding, 0, 1,
a4f606ea
CYY		 4676 mask, NL80211_MESHCONF_FORWARDING,
4677 nla_get_u8);
ea54fba2 4678 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold, 1, 255,
a4f606ea
CYY		 4679 mask, NL80211_MESHCONF_RSSI_THRESHOLD,
4680 nla_get_u32);
ea54fba2 4681 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, ht_opmode, 0, 16,
a4f606ea 4682 mask, NL80211_MESHCONF_HT_OPMODE,
ac1073a6
CYY		 4683 nla_get_u16);
4684 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathToRootTimeout,
ea54fba2 4685 1, 65535, mask,
ac1073a6
CYY		 4686 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
4687 nla_get_u32);
ea54fba2 4688 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval, 1, 65535,
ac1073a6 4689 mask, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
728b19e5
CYY		 4690 nla_get_u16);
4691 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
ea54fba2
MP		 4692 dot11MeshHWMPconfirmationInterval,
4693 1, 65535, mask,
728b19e5 4694 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
a4f606ea 4695 nla_get_u16);
3b1c5a53
MP		 4696 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, power_mode,
4697 NL80211_MESH_POWER_ACTIVE,
4698 NL80211_MESH_POWER_MAX,
4699 mask, NL80211_MESHCONF_POWER_MODE,
4700 nla_get_u32);
4701 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshAwakeWindowDuration,
4702 0, 65535, mask,
4703 NL80211_MESHCONF_AWAKE_WINDOW, nla_get_u16);
bd90fdcc
JB		 4704 if (mask_out)
4705 *mask_out = mask;
c80d545d 4706
bd90fdcc
JB		 4707 return 0;
4708
4709#undef FILL_IN_MESH_PARAM_IF_SET
4710}
4711
c80d545d
JC		 4712static int nl80211_parse_mesh_setup(struct genl_info *info,
4713 struct mesh_setup *setup)
4714{
4715 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
4716
4717 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
4718 return -EINVAL;
4719 if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
4720 info->attrs[NL80211_ATTR_MESH_SETUP],
4721 nl80211_mesh_setup_params_policy))
4722 return -EINVAL;
4723
d299a1f2
JC		 4724 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
4725 setup->sync_method =
4726 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
4727 IEEE80211_SYNC_METHOD_VENDOR :
4728 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
4729
c80d545d
JC		 4730 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
4731 setup->path_sel_proto =
4732 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
4733 IEEE80211_PATH_PROTOCOL_VENDOR :
4734 IEEE80211_PATH_PROTOCOL_HWMP;
4735
4736 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
4737 setup->path_metric =
4738 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
4739 IEEE80211_PATH_METRIC_VENDOR :
4740 IEEE80211_PATH_METRIC_AIRTIME;
4741
581a8b0f
JC		 4742
4743 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 4744 struct nlattr *ieattr =
581a8b0f 4745 tb[NL80211_MESH_SETUP_IE];
c80d545d
JC		 4746 if (!is_valid_ie_attr(ieattr))
4747 return -EINVAL;
581a8b0f
JC		 4748 setup->ie = nla_data(ieattr);
4749 setup->ie_len = nla_len(ieattr);
c80d545d 4750 }
b130e5ce
JC		 4751 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
4752 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
c80d545d
JC		 4753
4754 return 0;
4755}
4756
24bdd9f4 4757static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 4758 struct genl_info *info)
bd90fdcc
JB		 4759{
4760 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4761 struct net_device *dev = info->user_ptr[1];
29cbe68c 4762 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 4763 struct mesh_config cfg;
4764 u32 mask;
4765 int err;
4766
29cbe68c
JB		 4767 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
4768 return -EOPNOTSUPP;
4769
24bdd9f4 4770 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 4771 return -EOPNOTSUPP;
4772
24bdd9f4 4773 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 4774 if (err)
4775 return err;
4776
29cbe68c
JB		 4777 wdev_lock(wdev);
4778 if (!wdev->mesh_id_len)
4779 err = -ENOLINK;
4780
4781 if (!err)
e35e4d28 4782 err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
29cbe68c
JB		 4783
4784 wdev_unlock(wdev);
4785
4786 return err;
93da9cc1 4787}
4788
f130347c
LR		 4789static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
4790{
458f4f9e 4791 const struct ieee80211_regdomain *regdom;
f130347c
LR		 4792 struct sk_buff *msg;
4793 void *hdr = NULL;
4794 struct nlattr *nl_reg_rules;
4795 unsigned int i;
4796 int err = -EINVAL;
4797
a1794390 4798 mutex_lock(&cfg80211_mutex);
f130347c
LR		 4799
4800 if (!cfg80211_regdomain)
4801 goto out;
4802
fd2120ca 4803 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
f130347c
LR		 4804 if (!msg) {
4805 err = -ENOBUFS;
4806 goto out;
4807 }
4808
15e47304 4809 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
f130347c
LR		 4810 NL80211_CMD_GET_REG);
4811 if (!hdr)
efe1cf0c 4812 goto put_failure;
f130347c 4813
57b5ce07
LR		 4814 if (reg_last_request_cell_base() &&
4815 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
4816 NL80211_USER_REG_HINT_CELL_BASE))
4817 goto nla_put_failure;
4818
458f4f9e
JB		 4819 rcu_read_lock();
4820 regdom = rcu_dereference(cfg80211_regdomain);
4821
4822 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2, regdom->alpha2) ||
4823 (regdom->dfs_region &&
4824 nla_put_u8(msg, NL80211_ATTR_DFS_REGION, regdom->dfs_region)))
4825 goto nla_put_failure_rcu;
4826
f130347c
LR		 4827 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
4828 if (!nl_reg_rules)
458f4f9e 4829 goto nla_put_failure_rcu;
f130347c 4830
458f4f9e 4831 for (i = 0; i < regdom->n_reg_rules; i++) {
f130347c
LR		 4832 struct nlattr *nl_reg_rule;
4833 const struct ieee80211_reg_rule *reg_rule;
4834 const struct ieee80211_freq_range *freq_range;
4835 const struct ieee80211_power_rule *power_rule;
4836
458f4f9e 4837 reg_rule = &regdom->reg_rules[i];
f130347c
LR		 4838 freq_range = &reg_rule->freq_range;
4839 power_rule = &reg_rule->power_rule;
4840
4841 nl_reg_rule = nla_nest_start(msg, i);
4842 if (!nl_reg_rule)
458f4f9e 4843 goto nla_put_failure_rcu;
f130347c 4844
9360ffd1
DM		 4845 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
4846 reg_rule->flags) ||
4847 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
4848 freq_range->start_freq_khz) ||
4849 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
4850 freq_range->end_freq_khz) ||
4851 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
4852 freq_range->max_bandwidth_khz) ||
4853 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
4854 power_rule->max_antenna_gain) ||
4855 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
4856 power_rule->max_eirp))
458f4f9e 4857 goto nla_put_failure_rcu;
f130347c
LR		 4858
4859 nla_nest_end(msg, nl_reg_rule);
4860 }
458f4f9e 4861 rcu_read_unlock();
f130347c
LR		 4862
4863 nla_nest_end(msg, nl_reg_rules);
4864
4865 genlmsg_end(msg, hdr);
134e6375 4866 err = genlmsg_reply(msg, info);
f130347c
LR		 4867 goto out;
4868
458f4f9e
JB		 4869nla_put_failure_rcu:
4870 rcu_read_unlock();
f130347c
LR		 4871nla_put_failure:
4872 genlmsg_cancel(msg, hdr);
efe1cf0c 4873put_failure:
d080e275 4874 nlmsg_free(msg);
f130347c
LR		 4875 err = -EMSGSIZE;
4876out:
a1794390 4877 mutex_unlock(&cfg80211_mutex);
f130347c
LR		 4878 return err;
4879}
4880
b2e1b302
LR		 4881static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
4882{
4883 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
4884 struct nlattr *nl_reg_rule;
4885 char *alpha2 = NULL;
4886 int rem_reg_rules = 0, r = 0;
4887 u32 num_rules = 0, rule_idx = 0, size_of_regd;
8b60b078 4888 u8 dfs_region = 0;
b2e1b302
LR		 4889 struct ieee80211_regdomain *rd = NULL;
4890
4891 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
4892 return -EINVAL;
4893
4894 if (!info->attrs[NL80211_ATTR_REG_RULES])
4895 return -EINVAL;
4896
4897 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
4898
8b60b078
LR		 4899 if (info->attrs[NL80211_ATTR_DFS_REGION])
4900 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
4901
b2e1b302 4902 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 4903 rem_reg_rules) {
b2e1b302
LR		 4904 num_rules++;
4905 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 4906 return -EINVAL;
b2e1b302
LR		 4907 }
4908
b2e1b302 4909 size_of_regd = sizeof(struct ieee80211_regdomain) +
1a919318 4910 num_rules * sizeof(struct ieee80211_reg_rule);
b2e1b302
LR		 4911
4912 rd = kzalloc(size_of_regd, GFP_KERNEL);
6913b49a
JB		 4913 if (!rd)
4914 return -ENOMEM;
b2e1b302
LR		 4915
4916 rd->n_reg_rules = num_rules;
4917 rd->alpha2[0] = alpha2[0];
4918 rd->alpha2[1] = alpha2[1];
4919
8b60b078
LR		 4920 /*
4921 * Disable DFS master mode if the DFS region was
4922 * not supported or known on this kernel.
4923 */
4924 if (reg_supported_dfs_region(dfs_region))
4925 rd->dfs_region = dfs_region;
4926
b2e1b302 4927 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
1a919318 4928 rem_reg_rules) {
b2e1b302 4929 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
1a919318
JB		 4930 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
4931 reg_rule_policy);
b2e1b302
LR		 4932 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
4933 if (r)
4934 goto bad_reg;
4935
4936 rule_idx++;
4937
d0e18f83
LR		 4938 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
4939 r = -EINVAL;
b2e1b302 4940 goto bad_reg;
d0e18f83 4941 }
b2e1b302
LR		 4942 }
4943
6913b49a
JB		 4944 mutex_lock(&cfg80211_mutex);
4945
b2e1b302 4946 r = set_regdom(rd);
6913b49a 4947 /* set_regdom took ownership */
1a919318 4948 rd = NULL;
6913b49a 4949 mutex_unlock(&cfg80211_mutex);
b2e1b302 4950
d2372b31 4951 bad_reg:
b2e1b302 4952 kfree(rd);
d0e18f83 4953 return r;
b2e1b302
LR		 4954}
4955
83f5e2cf
JB		 4956static int validate_scan_freqs(struct nlattr *freqs)
4957{
4958 struct nlattr *attr1, *attr2;
4959 int n_channels = 0, tmp1, tmp2;
4960
4961 nla_for_each_nested(attr1, freqs, tmp1) {
4962 n_channels++;
4963 /*
4964 * Some hardware has a limited channel list for
4965 * scanning, and it is pretty much nonsensical
4966 * to scan for a channel twice, so disallow that
4967 * and don't require drivers to check that the
4968 * channel list they get isn't longer than what
4969 * they can scan, as long as they can scan all
4970 * the channels they registered at once.
4971 */
4972 nla_for_each_nested(attr2, freqs, tmp2)
4973 if (attr1 != attr2 &&
4974 nla_get_u32(attr1) == nla_get_u32(attr2))
4975 return 0;
4976 }
4977
4978 return n_channels;
4979}
4980
2a519311
JB		 4981static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
4982{
4c476991 4983 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fd014284 4984 struct wireless_dev *wdev = info->user_ptr[1];
2a519311 4985 struct cfg80211_scan_request *request;
2a519311
JB		 4986 struct nlattr *attr;
4987 struct wiphy *wiphy;
83f5e2cf 4988 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 4989 size_t ie_len;
2a519311 4990
f4a11bb0
JB		 4991 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4992 return -EINVAL;
4993
79c97e97 4994 wiphy = &rdev->wiphy;
2a519311 4995
4c476991
JB		 4996 if (!rdev->ops->scan)
4997 return -EOPNOTSUPP;
2a519311 4998
4c476991
JB		 4999 if (rdev->scan_req)
5000 return -EBUSY;
2a519311
JB		 5001
5002 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
83f5e2cf
JB		 5003 n_channels = validate_scan_freqs(
5004 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4c476991
JB		 5005 if (!n_channels)
5006 return -EINVAL;
2a519311 5007 } else {
34850ab2 5008 enum ieee80211_band band;
83f5e2cf
JB		 5009 n_channels = 0;
5010
2a519311
JB		 5011 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
5012 if (wiphy->bands[band])
5013 n_channels += wiphy->bands[band]->n_channels;
5014 }
5015
5016 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
5017 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
5018 n_ssids++;
5019
4c476991
JB		 5020 if (n_ssids > wiphy->max_scan_ssids)
5021 return -EINVAL;
2a519311 5022
70692ad2
JM		 5023 if (info->attrs[NL80211_ATTR_IE])
5024 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5025 else
5026 ie_len = 0;
5027
4c476991
JB		 5028 if (ie_len > wiphy->max_scan_ie_len)
5029 return -EINVAL;
18a83659 5030
2a519311 5031 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 5032 + sizeof(*request->ssids) * n_ssids
5033 + sizeof(*request->channels) * n_channels
70692ad2 5034 + ie_len, GFP_KERNEL);
4c476991
JB		 5035 if (!request)
5036 return -ENOMEM;
2a519311 5037
2a519311 5038 if (n_ssids)
5ba63533 5039 request->ssids = (void *)&request->channels[n_channels];
2a519311 5040 request->n_ssids = n_ssids;
70692ad2
JM		 5041 if (ie_len) {
5042 if (request->ssids)
5043 request->ie = (void *)(request->ssids + n_ssids);
5044 else
5045 request->ie = (void *)(request->channels + n_channels);
5046 }
2a519311 5047
584991dc 5048 i = 0;
2a519311
JB		 5049 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
5050 /* user specified, bail out if channel not found */
2a519311 5051 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
584991dc
JB		 5052 struct ieee80211_channel *chan;
5053
5054 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
5055
5056 if (!chan) {
2a519311
JB		 5057 err = -EINVAL;
5058 goto out_free;
5059 }
584991dc
JB		 5060
5061 /* ignore disabled channels */
5062 if (chan->flags & IEEE80211_CHAN_DISABLED)
5063 continue;
5064
5065 request->channels[i] = chan;
2a519311
JB		 5066 i++;
5067 }
5068 } else {
34850ab2
JB		 5069 enum ieee80211_band band;
5070
2a519311 5071 /* all channels */
2a519311
JB		 5072 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
5073 int j;
5074 if (!wiphy->bands[band])
5075 continue;
5076 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 5077 struct ieee80211_channel *chan;
5078
5079 chan = &wiphy->bands[band]->channels[j];
5080
5081 if (chan->flags & IEEE80211_CHAN_DISABLED)
5082 continue;
5083
5084 request->channels[i] = chan;
2a519311
JB		 5085 i++;
5086 }
5087 }
5088 }
5089
584991dc
JB		 5090 if (!i) {
5091 err = -EINVAL;
5092 goto out_free;
5093 }
5094
5095 request->n_channels = i;
5096
2a519311
JB		 5097 i = 0;
5098 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
5099 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 5100 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 5101 err = -EINVAL;
5102 goto out_free;
5103 }
57a27e1d 5104 request->ssids[i].ssid_len = nla_len(attr);
2a519311 5105 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 5106 i++;
5107 }
5108 }
5109
70692ad2
JM		 5110 if (info->attrs[NL80211_ATTR_IE]) {
5111 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 5112 memcpy((void *)request->ie,
5113 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 5114 request->ie_len);
5115 }
5116
34850ab2 5117 for (i = 0; i < IEEE80211_NUM_BANDS; i++)
a401d2bb
JB		 5118 if (wiphy->bands[i])
5119 request->rates[i] =
5120 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 5121
5122 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
5123 nla_for_each_nested(attr,
5124 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
5125 tmp) {
5126 enum ieee80211_band band = nla_type(attr);
5127
84404623 5128 if (band < 0 || band >= IEEE80211_NUM_BANDS) {
34850ab2
JB		 5129 err = -EINVAL;
5130 goto out_free;
5131 }
5132 err = ieee80211_get_ratemask(wiphy->bands[band],
5133 nla_data(attr),
5134 nla_len(attr),
5135 &request->rates[band]);
5136 if (err)
5137 goto out_free;
5138 }
5139 }
5140
46856bbf 5141 if (info->attrs[NL80211_ATTR_SCAN_FLAGS]) {
ed473771
SL		 5142 request->flags = nla_get_u32(
5143 info->attrs[NL80211_ATTR_SCAN_FLAGS]);
15d6030b
SL		 5144 if (((request->flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
5145 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
5146 ((request->flags & NL80211_SCAN_FLAG_FLUSH) &&
5147 !(wiphy->features & NL80211_FEATURE_SCAN_FLUSH))) {
46856bbf
SL		 5148 err = -EOPNOTSUPP;
5149 goto out_free;
5150 }
5151 }
ed473771 5152
e9f935e3
RM		 5153 request->no_cck =
5154 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
5155
fd014284 5156 request->wdev = wdev;
79c97e97 5157 request->wiphy = &rdev->wiphy;
15d6030b 5158 request->scan_start = jiffies;
2a519311 5159
79c97e97 5160 rdev->scan_req = request;
e35e4d28 5161 err = rdev_scan(rdev, request);
2a519311 5162
463d0183 5163 if (!err) {
fd014284
JB		 5164 nl80211_send_scan_start(rdev, wdev);
5165 if (wdev->netdev)
5166 dev_hold(wdev->netdev);
4c476991 5167 } else {
2a519311 5168 out_free:
79c97e97 5169 rdev->scan_req = NULL;
2a519311
JB		 5170 kfree(request);
5171 }
3b85875a 5172
2a519311
JB		 5173 return err;
5174}
5175
807f8a8c
LC		 5176static int nl80211_start_sched_scan(struct sk_buff *skb,
5177 struct genl_info *info)
5178{
5179 struct cfg80211_sched_scan_request *request;
5180 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5181 struct net_device *dev = info->user_ptr[1];
807f8a8c
LC		 5182 struct nlattr *attr;
5183 struct wiphy *wiphy;
a1f1c21c 5184 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i;
bbe6ad6d 5185 u32 interval;
807f8a8c
LC		 5186 enum ieee80211_band band;
5187 size_t ie_len;
a1f1c21c 5188 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
807f8a8c
LC		 5189
5190 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
5191 !rdev->ops->sched_scan_start)
5192 return -EOPNOTSUPP;
5193
5194 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5195 return -EINVAL;
5196
bbe6ad6d
LC		 5197 if (!info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
5198 return -EINVAL;
5199
5200 interval = nla_get_u32(info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
5201 if (interval == 0)
5202 return -EINVAL;
5203
807f8a8c
LC		 5204 wiphy = &rdev->wiphy;
5205
5206 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
5207 n_channels = validate_scan_freqs(
5208 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
5209 if (!n_channels)
5210 return -EINVAL;
5211 } else {
5212 n_channels = 0;
5213
5214 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
5215 if (wiphy->bands[band])
5216 n_channels += wiphy->bands[band]->n_channels;
5217 }
5218
5219 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
5220 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
5221 tmp)
5222 n_ssids++;
5223
93b6aa69 5224 if (n_ssids > wiphy->max_sched_scan_ssids)
807f8a8c
LC		 5225 return -EINVAL;
5226
a1f1c21c
LC		 5227 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH])
5228 nla_for_each_nested(attr,
5229 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
5230 tmp)
5231 n_match_sets++;
5232
5233 if (n_match_sets > wiphy->max_match_sets)
5234 return -EINVAL;
5235
807f8a8c
LC		 5236 if (info->attrs[NL80211_ATTR_IE])
5237 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5238 else
5239 ie_len = 0;
5240
5a865bad 5241 if (ie_len > wiphy->max_sched_scan_ie_len)
807f8a8c
LC		 5242 return -EINVAL;
5243
c10841ca
LC		 5244 mutex_lock(&rdev->sched_scan_mtx);
5245
5246 if (rdev->sched_scan_req) {
5247 err = -EINPROGRESS;
5248 goto out;
5249 }
5250
807f8a8c 5251 request = kzalloc(sizeof(*request)
a2cd43c5 5252 + sizeof(*request->ssids) * n_ssids
a1f1c21c 5253 + sizeof(*request->match_sets) * n_match_sets
a2cd43c5 5254 + sizeof(*request->channels) * n_channels
807f8a8c 5255 + ie_len, GFP_KERNEL);
c10841ca
LC		 5256 if (!request) {
5257 err = -ENOMEM;
5258 goto out;
5259 }
807f8a8c
LC		 5260
5261 if (n_ssids)
5262 request->ssids = (void *)&request->channels[n_channels];
5263 request->n_ssids = n_ssids;
5264 if (ie_len) {
5265 if (request->ssids)
5266 request->ie = (void *)(request->ssids + n_ssids);
5267 else
5268 request->ie = (void *)(request->channels + n_channels);
5269 }
5270
a1f1c21c
LC		 5271 if (n_match_sets) {
5272 if (request->ie)
5273 request->match_sets = (void *)(request->ie + ie_len);
5274 else if (request->ssids)
5275 request->match_sets =
5276 (void *)(request->ssids + n_ssids);
5277 else
5278 request->match_sets =
5279 (void *)(request->channels + n_channels);
5280 }
5281 request->n_match_sets = n_match_sets;
5282
807f8a8c
LC		 5283 i = 0;
5284 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
5285 /* user specified, bail out if channel not found */
5286 nla_for_each_nested(attr,
5287 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES],
5288 tmp) {
5289 struct ieee80211_channel *chan;
5290
5291 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
5292
5293 if (!chan) {
5294 err = -EINVAL;
5295 goto out_free;
5296 }
5297
5298 /* ignore disabled channels */
5299 if (chan->flags & IEEE80211_CHAN_DISABLED)
5300 continue;
5301
5302 request->channels[i] = chan;
5303 i++;
5304 }
5305 } else {
5306 /* all channels */
5307 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
5308 int j;
5309 if (!wiphy->bands[band])
5310 continue;
5311 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
5312 struct ieee80211_channel *chan;
5313
5314 chan = &wiphy->bands[band]->channels[j];
5315
5316 if (chan->flags & IEEE80211_CHAN_DISABLED)
5317 continue;
5318
5319 request->channels[i] = chan;
5320 i++;
5321 }
5322 }
5323 }
5324
5325 if (!i) {
5326 err = -EINVAL;
5327 goto out_free;
5328 }
5329
5330 request->n_channels = i;
5331
5332 i = 0;
5333 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
5334 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
5335 tmp) {
57a27e1d 5336 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 5337 err = -EINVAL;
5338 goto out_free;
5339 }
57a27e1d 5340 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 5341 memcpy(request->ssids[i].ssid, nla_data(attr),
5342 nla_len(attr));
807f8a8c
LC		 5343 i++;
5344 }
5345 }
5346
a1f1c21c
LC		 5347 i = 0;
5348 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
5349 nla_for_each_nested(attr,
5350 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
5351 tmp) {
88e920b4 5352 struct nlattr *ssid, *rssi;
a1f1c21c
LC		 5353
5354 nla_parse(tb, NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
5355 nla_data(attr), nla_len(attr),
5356 nl80211_match_policy);
4a4ab0d7 5357 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
a1f1c21c
LC		 5358 if (ssid) {
5359 if (nla_len(ssid) > IEEE80211_MAX_SSID_LEN) {
5360 err = -EINVAL;
5361 goto out_free;
5362 }
5363 memcpy(request->match_sets[i].ssid.ssid,
5364 nla_data(ssid), nla_len(ssid));
5365 request->match_sets[i].ssid.ssid_len =
5366 nla_len(ssid);
5367 }
88e920b4
TP		 5368 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
5369 if (rssi)
5370 request->rssi_thold = nla_get_u32(rssi);
5371 else
5372 request->rssi_thold =
5373 NL80211_SCAN_RSSI_THOLD_OFF;
a1f1c21c
LC		 5374 i++;
5375 }
5376 }
5377
807f8a8c
LC		 5378 if (info->attrs[NL80211_ATTR_IE]) {
5379 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5380 memcpy((void *)request->ie,
5381 nla_data(info->attrs[NL80211_ATTR_IE]),
5382 request->ie_len);
5383 }
5384
46856bbf 5385 if (info->attrs[NL80211_ATTR_SCAN_FLAGS]) {
ed473771
SL		 5386 request->flags = nla_get_u32(
5387 info->attrs[NL80211_ATTR_SCAN_FLAGS]);
15d6030b
SL		 5388 if (((request->flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
5389 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
5390 ((request->flags & NL80211_SCAN_FLAG_FLUSH) &&
5391 !(wiphy->features & NL80211_FEATURE_SCAN_FLUSH))) {
46856bbf
SL		 5392 err = -EOPNOTSUPP;
5393 goto out_free;
5394 }
5395 }
ed473771 5396
807f8a8c
LC		 5397 request->dev = dev;
5398 request->wiphy = &rdev->wiphy;
bbe6ad6d 5399 request->interval = interval;
15d6030b 5400 request->scan_start = jiffies;
807f8a8c 5401
e35e4d28 5402 err = rdev_sched_scan_start(rdev, dev, request);
807f8a8c
LC		 5403 if (!err) {
5404 rdev->sched_scan_req = request;
5405 nl80211_send_sched_scan(rdev, dev,
5406 NL80211_CMD_START_SCHED_SCAN);
5407 goto out;
5408 }
5409
5410out_free:
5411 kfree(request);
5412out:
c10841ca 5413 mutex_unlock(&rdev->sched_scan_mtx);
807f8a8c
LC		 5414 return err;
5415}
5416
5417static int nl80211_stop_sched_scan(struct sk_buff *skb,
5418 struct genl_info *info)
5419{
5420 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c10841ca 5421 int err;
807f8a8c
LC		 5422
5423 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
5424 !rdev->ops->sched_scan_stop)
5425 return -EOPNOTSUPP;
5426
c10841ca
LC		 5427 mutex_lock(&rdev->sched_scan_mtx);
5428 err = __cfg80211_stop_sched_scan(rdev, false);
5429 mutex_unlock(&rdev->sched_scan_mtx);
5430
5431 return err;
807f8a8c
LC		 5432}
5433
04f39047
SW		 5434static int nl80211_start_radar_detection(struct sk_buff *skb,
5435 struct genl_info *info)
5436{
5437 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5438 struct net_device *dev = info->user_ptr[1];
5439 struct wireless_dev *wdev = dev->ieee80211_ptr;
5440 struct cfg80211_chan_def chandef;
5441 int err;
5442
5443 err = nl80211_parse_chandef(rdev, info, &chandef);
5444 if (err)
5445 return err;
5446
5447 if (wdev->cac_started)
5448 return -EBUSY;
5449
5450 err = cfg80211_chandef_dfs_required(wdev->wiphy, &chandef);
5451 if (err < 0)
5452 return err;
5453
5454 if (err == 0)
5455 return -EINVAL;
5456
5457 if (chandef.chan->dfs_state != NL80211_DFS_USABLE)
5458 return -EINVAL;
5459
5460 if (!rdev->ops->start_radar_detection)
5461 return -EOPNOTSUPP;
5462
5463 mutex_lock(&rdev->devlist_mtx);
5464 err = cfg80211_can_use_iftype_chan(rdev, wdev, wdev->iftype,
5465 chandef.chan, CHAN_MODE_SHARED,
5466 BIT(chandef.width));
5467 if (err)
5468 goto err_locked;
5469
5470 err = rdev->ops->start_radar_detection(&rdev->wiphy, dev, &chandef);
5471 if (!err) {
5472 wdev->channel = chandef.chan;
5473 wdev->cac_started = true;
5474 wdev->cac_start_time = jiffies;
5475 }
5476err_locked:
5477 mutex_unlock(&rdev->devlist_mtx);
5478
5479 return err;
5480}
5481
9720bb3a
JB		 5482static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
5483 u32 seq, int flags,
2a519311 5484 struct cfg80211_registered_device *rdev,
48ab905d
JB		 5485 struct wireless_dev *wdev,
5486 struct cfg80211_internal_bss *intbss)
2a519311 5487{
48ab905d 5488 struct cfg80211_bss *res = &intbss->pub;
9caf0364 5489 const struct cfg80211_bss_ies *ies;
2a519311
JB		 5490 void *hdr;
5491 struct nlattr *bss;
8cef2c9d 5492 bool tsf = false;
48ab905d
JB		 5493
5494 ASSERT_WDEV_LOCK(wdev);
2a519311 5495
15e47304 5496 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
2a519311
JB		 5497 NL80211_CMD_NEW_SCAN_RESULTS);
5498 if (!hdr)
5499 return -1;
5500
9720bb3a
JB		 5501 genl_dump_check_consistent(cb, hdr, &nl80211_fam);
5502
9360ffd1
DM		 5503 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation) ||
5504 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
5505 goto nla_put_failure;
2a519311
JB		 5506
5507 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
5508 if (!bss)
5509 goto nla_put_failure;
9360ffd1 5510 if ((!is_zero_ether_addr(res->bssid) &&
9caf0364 5511 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)))
9360ffd1 5512 goto nla_put_failure;
9caf0364
JB		 5513
5514 rcu_read_lock();
5515 ies = rcu_dereference(res->ies);
8cef2c9d
JB		 5516 if (ies) {
5517 if (nla_put_u64(msg, NL80211_BSS_TSF, ies->tsf))
5518 goto fail_unlock_rcu;
5519 tsf = true;
5520 if (ies->len && nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
5521 ies->len, ies->data))
5522 goto fail_unlock_rcu;
9caf0364
JB		 5523 }
5524 ies = rcu_dereference(res->beacon_ies);
8cef2c9d
JB		 5525 if (ies) {
5526 if (!tsf && nla_put_u64(msg, NL80211_BSS_TSF, ies->tsf))
5527 goto fail_unlock_rcu;
5528 if (ies->len && nla_put(msg, NL80211_BSS_BEACON_IES,
5529 ies->len, ies->data))
5530 goto fail_unlock_rcu;
9caf0364
JB		 5531 }
5532 rcu_read_unlock();
5533
9360ffd1
DM		 5534 if (res->beacon_interval &&
5535 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
5536 goto nla_put_failure;
5537 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
5538 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
5539 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
5540 jiffies_to_msecs(jiffies - intbss->ts)))
5541 goto nla_put_failure;
2a519311 5542
77965c97 5543 switch (rdev->wiphy.signal_type) {
2a519311 5544 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 5545 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
5546 goto nla_put_failure;
2a519311
JB		 5547 break;
5548 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 5549 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
5550 goto nla_put_failure;
2a519311
JB		 5551 break;
5552 default:
5553 break;
5554 }
5555
48ab905d 5556 switch (wdev->iftype) {
074ac8df 5557 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 5558 case NL80211_IFTYPE_STATION:
9360ffd1
DM		 5559 if (intbss == wdev->current_bss &&
5560 nla_put_u32(msg, NL80211_BSS_STATUS,
5561 NL80211_BSS_STATUS_ASSOCIATED))
5562 goto nla_put_failure;
48ab905d
JB		 5563 break;
5564 case NL80211_IFTYPE_ADHOC:
9360ffd1
DM		 5565 if (intbss == wdev->current_bss &&
5566 nla_put_u32(msg, NL80211_BSS_STATUS,
5567 NL80211_BSS_STATUS_IBSS_JOINED))
5568 goto nla_put_failure;
48ab905d
JB		 5569 break;
5570 default:
5571 break;
5572 }
5573
2a519311
JB		 5574 nla_nest_end(msg, bss);
5575
5576 return genlmsg_end(msg, hdr);
5577
8cef2c9d
JB		 5578 fail_unlock_rcu:
5579 rcu_read_unlock();
2a519311
JB		 5580 nla_put_failure:
5581 genlmsg_cancel(msg, hdr);
5582 return -EMSGSIZE;
5583}
5584
5585static int nl80211_dump_scan(struct sk_buff *skb,
5586 struct netlink_callback *cb)
5587{
48ab905d
JB		 5588 struct cfg80211_registered_device *rdev;
5589 struct net_device *dev;
2a519311 5590 struct cfg80211_internal_bss *scan;
48ab905d 5591 struct wireless_dev *wdev;
2a519311
JB		 5592 int start = cb->args[1], idx = 0;
5593 int err;
5594
67748893
JB		 5595 err = nl80211_prepare_netdev_dump(skb, cb, &rdev, &dev);
5596 if (err)
5597 return err;
2a519311 5598
48ab905d 5599 wdev = dev->ieee80211_ptr;
2a519311 5600
48ab905d
JB		 5601 wdev_lock(wdev);
5602 spin_lock_bh(&rdev->bss_lock);
5603 cfg80211_bss_expire(rdev);
5604
9720bb3a
JB		 5605 cb->seq = rdev->bss_generation;
5606
48ab905d 5607 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 5608 if (++idx <= start)
5609 continue;
9720bb3a 5610 if (nl80211_send_bss(skb, cb,
2a519311 5611 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 5612 rdev, wdev, scan) < 0) {
2a519311 5613 idx--;
67748893 5614 break;
2a519311
JB		 5615 }
5616 }
5617
48ab905d
JB		 5618 spin_unlock_bh(&rdev->bss_lock);
5619 wdev_unlock(wdev);
2a519311
JB		 5620
5621 cb->args[1] = idx;
67748893 5622 nl80211_finish_netdev_dump(rdev);
2a519311 5623
67748893 5624 return skb->len;
2a519311
JB		 5625}
5626
15e47304 5627static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
61fa713c
HS		 5628 int flags, struct net_device *dev,
5629 struct survey_info *survey)
5630{
5631 void *hdr;
5632 struct nlattr *infoattr;
5633
15e47304 5634 hdr = nl80211hdr_put(msg, portid, seq, flags,
61fa713c
HS		 5635 NL80211_CMD_NEW_SURVEY_RESULTS);
5636 if (!hdr)
5637 return -ENOMEM;
5638
9360ffd1
DM		 5639 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
5640 goto nla_put_failure;
61fa713c
HS		 5641
5642 infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
5643 if (!infoattr)
5644 goto nla_put_failure;
5645
9360ffd1
DM		 5646 if (nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
5647 survey->channel->center_freq))
5648 goto nla_put_failure;
5649
5650 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
5651 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
5652 goto nla_put_failure;
5653 if ((survey->filled & SURVEY_INFO_IN_USE) &&
5654 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
5655 goto nla_put_failure;
5656 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME) &&
5657 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME,
5658 survey->channel_time))
5659 goto nla_put_failure;
5660 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_BUSY) &&
5661 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_BUSY,
5662 survey->channel_time_busy))
5663 goto nla_put_failure;
5664 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_EXT_BUSY) &&
5665 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_EXT_BUSY,
5666 survey->channel_time_ext_busy))
5667 goto nla_put_failure;
5668 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_RX) &&
5669 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_RX,
5670 survey->channel_time_rx))
5671 goto nla_put_failure;
5672 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_TX) &&
5673 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_TX,
5674 survey->channel_time_tx))
5675 goto nla_put_failure;
61fa713c
HS		 5676
5677 nla_nest_end(msg, infoattr);
5678
5679 return genlmsg_end(msg, hdr);
5680
5681 nla_put_failure:
5682 genlmsg_cancel(msg, hdr);
5683 return -EMSGSIZE;
5684}
5685
5686static int nl80211_dump_survey(struct sk_buff *skb,
5687 struct netlink_callback *cb)
5688{
5689 struct survey_info survey;
5690 struct cfg80211_registered_device *dev;
5691 struct net_device *netdev;
61fa713c
HS		 5692 int survey_idx = cb->args[1];
5693 int res;
5694
67748893
JB		 5695 res = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
5696 if (res)
5697 return res;
61fa713c
HS		 5698
5699 if (!dev->ops->dump_survey) {
5700 res = -EOPNOTSUPP;
5701 goto out_err;
5702 }
5703
5704 while (1) {
180cdc79
LR		 5705 struct ieee80211_channel *chan;
5706
e35e4d28 5707 res = rdev_dump_survey(dev, netdev, survey_idx, &survey);
61fa713c
HS		 5708 if (res == -ENOENT)
5709 break;
5710 if (res)
5711 goto out_err;
5712
180cdc79
LR		 5713 /* Survey without a channel doesn't make sense */
5714 if (!survey.channel) {
5715 res = -EINVAL;
5716 goto out;
5717 }
5718
5719 chan = ieee80211_get_channel(&dev->wiphy,
5720 survey.channel->center_freq);
5721 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED) {
5722 survey_idx++;
5723 continue;
5724 }
5725
61fa713c 5726 if (nl80211_send_survey(skb,
15e47304 5727 NETLINK_CB(cb->skb).portid,
61fa713c
HS		 5728 cb->nlh->nlmsg_seq, NLM_F_MULTI,
5729 netdev,
5730 &survey) < 0)
5731 goto out;
5732 survey_idx++;
5733 }
5734
5735 out:
5736 cb->args[1] = survey_idx;
5737 res = skb->len;
5738 out_err:
67748893 5739 nl80211_finish_netdev_dump(dev);
61fa713c
HS		 5740 return res;
5741}
5742
b23aa676
SO		 5743static bool nl80211_valid_wpa_versions(u32 wpa_versions)
5744{
5745 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
5746 NL80211_WPA_VERSION_2));
5747}
5748
636a5d36
JM		 5749static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
5750{
4c476991
JB		 5751 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5752 struct net_device *dev = info->user_ptr[1];
19957bb3 5753 struct ieee80211_channel *chan;
e39e5b5e
JM		 5754 const u8 *bssid, *ssid, *ie = NULL, *sae_data = NULL;
5755 int err, ssid_len, ie_len = 0, sae_data_len = 0;
19957bb3 5756 enum nl80211_auth_type auth_type;
fffd0934 5757 struct key_parse key;
d5cdfacb 5758 bool local_state_change;
636a5d36 5759
f4a11bb0
JB		 5760 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5761 return -EINVAL;
5762
5763 if (!info->attrs[NL80211_ATTR_MAC])
5764 return -EINVAL;
5765
1778092e
JM		 5766 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
5767 return -EINVAL;
5768
19957bb3
JB		 5769 if (!info->attrs[NL80211_ATTR_SSID])
5770 return -EINVAL;
5771
5772 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
5773 return -EINVAL;
5774
fffd0934
JB		 5775 err = nl80211_parse_key(info, &key);
5776 if (err)
5777 return err;
5778
5779 if (key.idx >= 0) {
e31b8213
JB		 5780 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
5781 return -EINVAL;
fffd0934
JB		 5782 if (!key.p.key || !key.p.key_len)
5783 return -EINVAL;
5784 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
5785 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
5786 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
5787 key.p.key_len != WLAN_KEY_LEN_WEP104))
5788 return -EINVAL;
5789 if (key.idx > 4)
5790 return -EINVAL;
5791 } else {
5792 key.p.key_len = 0;
5793 key.p.key = NULL;
5794 }
5795
afea0b7a
JB		 5796 if (key.idx >= 0) {
5797 int i;
5798 bool ok = false;
5799 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
5800 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
5801 ok = true;
5802 break;
5803 }
5804 }
4c476991
JB		 5805 if (!ok)
5806 return -EINVAL;
afea0b7a
JB		 5807 }
5808
4c476991
JB		 5809 if (!rdev->ops->auth)
5810 return -EOPNOTSUPP;
636a5d36 5811
074ac8df 5812 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5813 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5814 return -EOPNOTSUPP;
eec60b03 5815
19957bb3 5816 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
79c97e97 5817 chan = ieee80211_get_channel(&rdev->wiphy,
19957bb3 5818 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 5819 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
5820 return -EINVAL;
636a5d36 5821
19957bb3
JB		 5822 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5823 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 5824
5825 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5826 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5827 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5828 }
5829
19957bb3 5830 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e 5831 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
4c476991 5832 return -EINVAL;
636a5d36 5833
e39e5b5e
JM		 5834 if (auth_type == NL80211_AUTHTYPE_SAE &&
5835 !info->attrs[NL80211_ATTR_SAE_DATA])
5836 return -EINVAL;
5837
5838 if (info->attrs[NL80211_ATTR_SAE_DATA]) {
5839 if (auth_type != NL80211_AUTHTYPE_SAE)
5840 return -EINVAL;
5841 sae_data = nla_data(info->attrs[NL80211_ATTR_SAE_DATA]);
5842 sae_data_len = nla_len(info->attrs[NL80211_ATTR_SAE_DATA]);
5843 /* need to include at least Auth Transaction and Status Code */
5844 if (sae_data_len < 4)
5845 return -EINVAL;
5846 }
5847
d5cdfacb
JM		 5848 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5849
95de817b
JB		 5850 /*
5851 * Since we no longer track auth state, ignore
5852 * requests to only change local state.
5853 */
5854 if (local_state_change)
5855 return 0;
5856
4c476991
JB		 5857 return cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
5858 ssid, ssid_len, ie, ie_len,
e39e5b5e
JM		 5859 key.p.key, key.p.key_len, key.idx,
5860 sae_data, sae_data_len);
636a5d36
JM		 5861}
5862
c0692b8f
JB		 5863static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
5864 struct genl_info *info,
3dc27d25
JB		 5865 struct cfg80211_crypto_settings *settings,
5866 int cipher_limit)
b23aa676 5867{
c0b2bbd8
JB		 5868 memset(settings, 0, sizeof(*settings));
5869
b23aa676
SO		 5870 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
5871
c0692b8f
JB		 5872 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
5873 u16 proto;
5874 proto = nla_get_u16(
5875 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
5876 settings->control_port_ethertype = cpu_to_be16(proto);
5877 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
5878 proto != ETH_P_PAE)
5879 return -EINVAL;
5880 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
5881 settings->control_port_no_encrypt = true;
5882 } else
5883 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
5884
b23aa676
SO		 5885 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
5886 void *data;
5887 int len, i;
5888
5889 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
5890 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
5891 settings->n_ciphers_pairwise = len / sizeof(u32);
5892
5893 if (len % sizeof(u32))
5894 return -EINVAL;
5895
3dc27d25 5896 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 5897 return -EINVAL;
5898
5899 memcpy(settings->ciphers_pairwise, data, len);
5900
5901 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 5902 if (!cfg80211_supported_cipher_suite(
5903 &rdev->wiphy,
b23aa676
SO		 5904 settings->ciphers_pairwise[i]))
5905 return -EINVAL;
5906 }
5907
5908 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
5909 settings->cipher_group =
5910 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 5911 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
5912 settings->cipher_group))
b23aa676
SO		 5913 return -EINVAL;
5914 }
5915
5916 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
5917 settings->wpa_versions =
5918 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
5919 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
5920 return -EINVAL;
5921 }
5922
5923 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
5924 void *data;
6d30240e 5925 int len;
b23aa676
SO		 5926
5927 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
5928 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
5929 settings->n_akm_suites = len / sizeof(u32);
5930
5931 if (len % sizeof(u32))
5932 return -EINVAL;
5933
1b9ca027
JM		 5934 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
5935 return -EINVAL;
5936
b23aa676 5937 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 5938 }
5939
5940 return 0;
5941}
5942
636a5d36
JM		 5943static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
5944{
4c476991
JB		 5945 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5946 struct net_device *dev = info->user_ptr[1];
19957bb3 5947 struct cfg80211_crypto_settings crypto;
f444de05 5948 struct ieee80211_channel *chan;
3e5d7649 5949 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
19957bb3
JB		 5950 int err, ssid_len, ie_len = 0;
5951 bool use_mfp = false;
7e7c8926
BG		 5952 u32 flags = 0;
5953 struct ieee80211_ht_cap *ht_capa = NULL;
5954 struct ieee80211_ht_cap *ht_capa_mask = NULL;
636a5d36 5955
f4a11bb0
JB		 5956 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5957 return -EINVAL;
5958
5959 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 5960 !info->attrs[NL80211_ATTR_SSID] ||
5961 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 5962 return -EINVAL;
5963
4c476991
JB		 5964 if (!rdev->ops->assoc)
5965 return -EOPNOTSUPP;
636a5d36 5966
074ac8df 5967 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5968 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5969 return -EOPNOTSUPP;
eec60b03 5970
19957bb3 5971 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 5972
19957bb3
JB		 5973 chan = ieee80211_get_channel(&rdev->wiphy,
5974 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 5975 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
5976 return -EINVAL;
636a5d36 5977
19957bb3
JB		 5978 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5979 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 5980
5981 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 5982 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5983 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 5984 }
5985
dc6382ce 5986 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 5987 enum nl80211_mfp mfp =
dc6382ce 5988 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 5989 if (mfp == NL80211_MFP_REQUIRED)
19957bb3 5990 use_mfp = true;
4c476991
JB		 5991 else if (mfp != NL80211_MFP_NO)
5992 return -EINVAL;
dc6382ce
JM		 5993 }
5994
3e5d7649
JB		 5995 if (info->attrs[NL80211_ATTR_PREV_BSSID])
5996 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
5997
7e7c8926
BG		 5998 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
5999 flags |= ASSOC_REQ_DISABLE_HT;
6000
6001 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
6002 ht_capa_mask =
6003 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]);
6004
6005 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
6006 if (!ht_capa_mask)
6007 return -EINVAL;
6008 ht_capa = nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
6009 }
6010
c0692b8f 6011 err = nl80211_crypto_settings(rdev, info, &crypto, 1);
b23aa676 6012 if (!err)
3e5d7649
JB		 6013 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
6014 ssid, ssid_len, ie, ie_len, use_mfp,
7e7c8926
BG		 6015 &crypto, flags, ht_capa,
6016 ht_capa_mask);
636a5d36 6017
636a5d36
JM		 6018 return err;
6019}
6020
6021static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
6022{
4c476991
JB		 6023 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6024 struct net_device *dev = info->user_ptr[1];
19957bb3 6025 const u8 *ie = NULL, *bssid;
4c476991 6026 int ie_len = 0;
19957bb3 6027 u16 reason_code;
d5cdfacb 6028 bool local_state_change;
636a5d36 6029
f4a11bb0
JB		 6030 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
6031 return -EINVAL;
6032
6033 if (!info->attrs[NL80211_ATTR_MAC])
6034 return -EINVAL;
6035
6036 if (!info->attrs[NL80211_ATTR_REASON_CODE])
6037 return -EINVAL;
6038
4c476991
JB		 6039 if (!rdev->ops->deauth)
6040 return -EOPNOTSUPP;
636a5d36 6041
074ac8df 6042 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 6043 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
6044 return -EOPNOTSUPP;
eec60b03 6045
19957bb3 6046 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 6047
19957bb3
JB		 6048 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
6049 if (reason_code == 0) {
f4a11bb0 6050 /* Reason Code 0 is reserved */
4c476991 6051 return -EINVAL;
255e737e 6052 }
636a5d36
JM		 6053
6054 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 6055 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
6056 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 6057 }
6058
d5cdfacb
JM		 6059 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
6060
4c476991
JB		 6061 return cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
6062 local_state_change);
636a5d36
JM		 6063}
6064
6065static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
6066{
4c476991
JB		 6067 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6068 struct net_device *dev = info->user_ptr[1];
19957bb3 6069 const u8 *ie = NULL, *bssid;
4c476991 6070 int ie_len = 0;
19957bb3 6071 u16 reason_code;
d5cdfacb 6072 bool local_state_change;
636a5d36 6073
f4a11bb0
JB		 6074 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
6075 return -EINVAL;
6076
6077 if (!info->attrs[NL80211_ATTR_MAC])
6078 return -EINVAL;
6079
6080 if (!info->attrs[NL80211_ATTR_REASON_CODE])
6081 return -EINVAL;
6082
4c476991
JB		 6083 if (!rdev->ops->disassoc)
6084 return -EOPNOTSUPP;
636a5d36 6085
074ac8df 6086 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 6087 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
6088 return -EOPNOTSUPP;
eec60b03 6089
19957bb3 6090 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 6091
19957bb3
JB		 6092 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
6093 if (reason_code == 0) {
f4a11bb0 6094 /* Reason Code 0 is reserved */
4c476991 6095 return -EINVAL;
255e737e 6096 }
636a5d36
JM		 6097
6098 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 6099 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
6100 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 6101 }
6102
d5cdfacb
JM		 6103 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
6104
4c476991
JB		 6105 return cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
6106 local_state_change);
636a5d36
JM		 6107}
6108
dd5b4cc7
FF		 6109static bool
6110nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
6111 int mcast_rate[IEEE80211_NUM_BANDS],
6112 int rateval)
6113{
6114 struct wiphy *wiphy = &rdev->wiphy;
6115 bool found = false;
6116 int band, i;
6117
6118 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
6119 struct ieee80211_supported_band *sband;
6120
6121 sband = wiphy->bands[band];
6122 if (!sband)
6123 continue;
6124
6125 for (i = 0; i < sband->n_bitrates; i++) {
6126 if (sband->bitrates[i].bitrate == rateval) {
6127 mcast_rate[band] = i + 1;
6128 found = true;
6129 break;
6130 }
6131 }
6132 }
6133
6134 return found;
6135}
6136
04a773ad
JB		 6137static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
6138{
4c476991
JB		 6139 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6140 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 6141 struct cfg80211_ibss_params ibss;
6142 struct wiphy *wiphy;
fffd0934 6143 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 6144 int err;
6145
8e30bc55
JB		 6146 memset(&ibss, 0, sizeof(ibss));
6147
04a773ad
JB		 6148 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
6149 return -EINVAL;
6150
683b6d3b 6151 if (!info->attrs[NL80211_ATTR_SSID] ||
04a773ad
JB		 6152 !nla_len(info->attrs[NL80211_ATTR_SSID]))
6153 return -EINVAL;
6154
8e30bc55
JB		 6155 ibss.beacon_interval = 100;
6156
6157 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
6158 ibss.beacon_interval =
6159 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
6160 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
6161 return -EINVAL;
6162 }
6163
4c476991
JB		 6164 if (!rdev->ops->join_ibss)
6165 return -EOPNOTSUPP;
04a773ad 6166
4c476991
JB		 6167 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
6168 return -EOPNOTSUPP;
04a773ad 6169
79c97e97 6170 wiphy = &rdev->wiphy;
04a773ad 6171
39193498 6172 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 6173 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 6174
6175 if (!is_valid_ether_addr(ibss.bssid))
6176 return -EINVAL;
6177 }
04a773ad
JB		 6178 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
6179 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
6180
6181 if (info->attrs[NL80211_ATTR_IE]) {
6182 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
6183 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
6184 }
6185
683b6d3b
JB		 6186 err = nl80211_parse_chandef(rdev, info, &ibss.chandef);
6187 if (err)
6188 return err;
04a773ad 6189
683b6d3b 6190 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &ibss.chandef))
54858ee5
AS		 6191 return -EINVAL;
6192
db9c64cf
JB		 6193 if (ibss.chandef.width > NL80211_CHAN_WIDTH_40)
6194 return -EINVAL;
6195 if (ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
6196 !(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
c04d6150 6197 return -EINVAL;
db9c64cf 6198
04a773ad 6199 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 6200 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
6201
fbd2c8dc
TP		 6202 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
6203 u8 *rates =
6204 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
6205 int n_rates =
6206 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
6207 struct ieee80211_supported_band *sband =
683b6d3b 6208 wiphy->bands[ibss.chandef.chan->band];
fbd2c8dc 6209
34850ab2
JB		 6210 err = ieee80211_get_ratemask(sband, rates, n_rates,
6211 &ibss.basic_rates);
6212 if (err)
6213 return err;
fbd2c8dc 6214 }
dd5b4cc7
FF		 6215
6216 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
6217 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
6218 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
6219 return -EINVAL;
fbd2c8dc 6220
4c476991 6221 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
de7044ee
SM		 6222 bool no_ht = false;
6223
4c476991 6224 connkeys = nl80211_parse_connkeys(rdev,
de7044ee
SM		 6225 info->attrs[NL80211_ATTR_KEYS],
6226 &no_ht);
4c476991
JB		 6227 if (IS_ERR(connkeys))
6228 return PTR_ERR(connkeys);
de7044ee 6229
3d9d1d66
JB		 6230 if ((ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT) &&
6231 no_ht) {
de7044ee
SM		 6232 kfree(connkeys);
6233 return -EINVAL;
6234 }
4c476991 6235 }
04a773ad 6236
267335d6
AQ		 6237 ibss.control_port =
6238 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
6239
4c476991 6240 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934
JB		 6241 if (err)
6242 kfree(connkeys);
04a773ad
JB		 6243 return err;
6244}
6245
6246static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
6247{
4c476991
JB		 6248 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6249 struct net_device *dev = info->user_ptr[1];
04a773ad 6250
4c476991
JB		 6251 if (!rdev->ops->leave_ibss)
6252 return -EOPNOTSUPP;
04a773ad 6253
4c476991
JB		 6254 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
6255 return -EOPNOTSUPP;
04a773ad 6256
4c476991 6257 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 6258}
6259
f4e583c8
AQ		 6260static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
6261{
6262 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6263 struct net_device *dev = info->user_ptr[1];
6264 int mcast_rate[IEEE80211_NUM_BANDS];
6265 u32 nla_rate;
6266 int err;
6267
6268 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
6269 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
6270 return -EOPNOTSUPP;
6271
6272 if (!rdev->ops->set_mcast_rate)
6273 return -EOPNOTSUPP;
6274
6275 memset(mcast_rate, 0, sizeof(mcast_rate));
6276
6277 if (!info->attrs[NL80211_ATTR_MCAST_RATE])
6278 return -EINVAL;
6279
6280 nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
6281 if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
6282 return -EINVAL;
6283
6284 err = rdev->ops->set_mcast_rate(&rdev->wiphy, dev, mcast_rate);
6285
6286 return err;
6287}
6288
6289
aff89a9b
JB		 6290#ifdef CONFIG_NL80211_TESTMODE
6291static struct genl_multicast_group nl80211_testmode_mcgrp = {
6292 .name = "testmode",
6293};
6294
6295static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
6296{
4c476991 6297 struct cfg80211_registered_device *rdev = info->user_ptr[0];
aff89a9b
JB		 6298 int err;
6299
6300 if (!info->attrs[NL80211_ATTR_TESTDATA])
6301 return -EINVAL;
6302
aff89a9b
JB		 6303 err = -EOPNOTSUPP;
6304 if (rdev->ops->testmode_cmd) {
6305 rdev->testmode_info = info;
e35e4d28 6306 err = rdev_testmode_cmd(rdev,
aff89a9b
JB		 6307 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
6308 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
6309 rdev->testmode_info = NULL;
6310 }
6311
aff89a9b
JB		 6312 return err;
6313}
6314
71063f0e
WYG		 6315static int nl80211_testmode_dump(struct sk_buff *skb,
6316 struct netlink_callback *cb)
6317{
00918d33 6318 struct cfg80211_registered_device *rdev;
71063f0e
WYG		 6319 int err;
6320 long phy_idx;
6321 void *data = NULL;
6322 int data_len = 0;
6323
6324 if (cb->args[0]) {
6325 /*
6326 * 0 is a valid index, but not valid for args[0],
6327 * so we need to offset by 1.
6328 */
6329 phy_idx = cb->args[0] - 1;
6330 } else {
6331 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
6332 nl80211_fam.attrbuf, nl80211_fam.maxattr,
6333 nl80211_policy);
6334 if (err)
6335 return err;
00918d33 6336
2bd7e35d
JB		 6337 mutex_lock(&cfg80211_mutex);
6338 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk),
6339 nl80211_fam.attrbuf);
6340 if (IS_ERR(rdev)) {
6341 mutex_unlock(&cfg80211_mutex);
6342 return PTR_ERR(rdev);
00918d33 6343 }
2bd7e35d
JB		 6344 phy_idx = rdev->wiphy_idx;
6345 rdev = NULL;
6346 mutex_unlock(&cfg80211_mutex);
6347
71063f0e
WYG		 6348 if (nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA])
6349 cb->args[1] =
6350 (long)nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA];
6351 }
6352
6353 if (cb->args[1]) {
6354 data = nla_data((void *)cb->args[1]);
6355 data_len = nla_len((void *)cb->args[1]);
6356 }
6357
6358 mutex_lock(&cfg80211_mutex);
00918d33
JB		 6359 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
6360 if (!rdev) {
71063f0e
WYG		 6361 mutex_unlock(&cfg80211_mutex);
6362 return -ENOENT;
6363 }
00918d33 6364 cfg80211_lock_rdev(rdev);
71063f0e
WYG		 6365 mutex_unlock(&cfg80211_mutex);
6366
00918d33 6367 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 6368 err = -EOPNOTSUPP;
6369 goto out_err;
6370 }
6371
6372 while (1) {
15e47304 6373 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
71063f0e
WYG		 6374 cb->nlh->nlmsg_seq, NLM_F_MULTI,
6375 NL80211_CMD_TESTMODE);
6376 struct nlattr *tmdata;
6377
9360ffd1 6378 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 6379 genlmsg_cancel(skb, hdr);
6380 break;
6381 }
6382
6383 tmdata = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
6384 if (!tmdata) {
6385 genlmsg_cancel(skb, hdr);
6386 break;
6387 }
e35e4d28 6388 err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
71063f0e
WYG		 6389 nla_nest_end(skb, tmdata);
6390
6391 if (err == -ENOBUFS || err == -ENOENT) {
6392 genlmsg_cancel(skb, hdr);
6393 break;
6394 } else if (err) {
6395 genlmsg_cancel(skb, hdr);
6396 goto out_err;
6397 }
6398
6399 genlmsg_end(skb, hdr);
6400 }
6401
6402 err = skb->len;
6403 /* see above */
6404 cb->args[0] = phy_idx + 1;
6405 out_err:
00918d33 6406 cfg80211_unlock_rdev(rdev);
71063f0e
WYG		 6407 return err;
6408}
6409
aff89a9b
JB		 6410static struct sk_buff *
6411__cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
15e47304 6412 int approxlen, u32 portid, u32 seq, gfp_t gfp)
aff89a9b
JB		 6413{
6414 struct sk_buff *skb;
6415 void *hdr;
6416 struct nlattr *data;
6417
6418 skb = nlmsg_new(approxlen + 100, gfp);
6419 if (!skb)
6420 return NULL;
6421
15e47304 6422 hdr = nl80211hdr_put(skb, portid, seq, 0, NL80211_CMD_TESTMODE);
aff89a9b
JB		 6423 if (!hdr) {
6424 kfree_skb(skb);
6425 return NULL;
6426 }
6427
9360ffd1
DM		 6428 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
6429 goto nla_put_failure;
aff89a9b
JB		 6430 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
6431
6432 ((void **)skb->cb)[0] = rdev;
6433 ((void **)skb->cb)[1] = hdr;
6434 ((void **)skb->cb)[2] = data;
6435
6436 return skb;
6437
6438 nla_put_failure:
6439 kfree_skb(skb);
6440 return NULL;
6441}
6442
6443struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
6444 int approxlen)
6445{
6446 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
6447
6448 if (WARN_ON(!rdev->testmode_info))
6449 return NULL;
6450
6451 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
15e47304 6452 rdev->testmode_info->snd_portid,
aff89a9b
JB		 6453 rdev->testmode_info->snd_seq,
6454 GFP_KERNEL);
6455}
6456EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
6457
6458int cfg80211_testmode_reply(struct sk_buff *skb)
6459{
6460 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
6461 void *hdr = ((void **)skb->cb)[1];
6462 struct nlattr *data = ((void **)skb->cb)[2];
6463
6464 if (WARN_ON(!rdev->testmode_info)) {
6465 kfree_skb(skb);
6466 return -EINVAL;
6467 }
6468
6469 nla_nest_end(skb, data);
6470 genlmsg_end(skb, hdr);
6471 return genlmsg_reply(skb, rdev->testmode_info);
6472}
6473EXPORT_SYMBOL(cfg80211_testmode_reply);
6474
6475struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
6476 int approxlen, gfp_t gfp)
6477{
6478 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
6479
6480 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
6481}
6482EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
6483
6484void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
6485{
6486 void *hdr = ((void **)skb->cb)[1];
6487 struct nlattr *data = ((void **)skb->cb)[2];
6488
6489 nla_nest_end(skb, data);
6490 genlmsg_end(skb, hdr);
6491 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
6492}
6493EXPORT_SYMBOL(cfg80211_testmode_event);
6494#endif
6495
b23aa676
SO		 6496static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
6497{
4c476991
JB		 6498 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6499 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 6500 struct cfg80211_connect_params connect;
6501 struct wiphy *wiphy;
fffd0934 6502 struct cfg80211_cached_keys *connkeys = NULL;
b23aa676
SO		 6503 int err;
6504
6505 memset(&connect, 0, sizeof(connect));
6506
6507 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
6508 return -EINVAL;
6509
6510 if (!info->attrs[NL80211_ATTR_SSID] ||
6511 !nla_len(info->attrs[NL80211_ATTR_SSID]))
6512 return -EINVAL;
6513
6514 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
6515 connect.auth_type =
6516 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
e39e5b5e
JM		 6517 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
6518 NL80211_CMD_CONNECT))
b23aa676
SO		 6519 return -EINVAL;
6520 } else
6521 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
6522
6523 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
6524
c0692b8f 6525 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 6526 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 6527 if (err)
6528 return err;
b23aa676 6529
074ac8df 6530 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 6531 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
6532 return -EOPNOTSUPP;
b23aa676 6533
79c97e97 6534 wiphy = &rdev->wiphy;
b23aa676 6535
4486ea98
BS		 6536 connect.bg_scan_period = -1;
6537 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
6538 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
6539 connect.bg_scan_period =
6540 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
6541 }
6542
b23aa676
SO		 6543 if (info->attrs[NL80211_ATTR_MAC])
6544 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
6545 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
6546 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
6547
6548 if (info->attrs[NL80211_ATTR_IE]) {
6549 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
6550 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
6551 }
6552
cee00a95
JM		 6553 if (info->attrs[NL80211_ATTR_USE_MFP]) {
6554 connect.mfp = nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
6555 if (connect.mfp != NL80211_MFP_REQUIRED &&
6556 connect.mfp != NL80211_MFP_NO)
6557 return -EINVAL;
6558 } else {
6559 connect.mfp = NL80211_MFP_NO;
6560 }
6561
b23aa676
SO		 6562 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
6563 connect.channel =
6564 ieee80211_get_channel(wiphy,
6565 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
6566 if (!connect.channel ||
4c476991
JB		 6567 connect.channel->flags & IEEE80211_CHAN_DISABLED)
6568 return -EINVAL;
b23aa676
SO		 6569 }
6570
fffd0934
JB		 6571 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
6572 connkeys = nl80211_parse_connkeys(rdev,
de7044ee 6573 info->attrs[NL80211_ATTR_KEYS], NULL);
4c476991
JB		 6574 if (IS_ERR(connkeys))
6575 return PTR_ERR(connkeys);
fffd0934
JB		 6576 }
6577
7e7c8926
BG		 6578 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
6579 connect.flags |= ASSOC_REQ_DISABLE_HT;
6580
6581 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
6582 memcpy(&connect.ht_capa_mask,
6583 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
6584 sizeof(connect.ht_capa_mask));
6585
6586 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
b4e4f47e
WY		 6587 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
6588 kfree(connkeys);
7e7c8926 6589 return -EINVAL;
b4e4f47e 6590 }
7e7c8926
BG		 6591 memcpy(&connect.ht_capa,
6592 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
6593 sizeof(connect.ht_capa));
6594 }
6595
fffd0934 6596 err = cfg80211_connect(rdev, dev, &connect, connkeys);
fffd0934
JB		 6597 if (err)
6598 kfree(connkeys);
b23aa676
SO		 6599 return err;
6600}
6601
6602static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
6603{
4c476991
JB		 6604 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6605 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 6606 u16 reason;
6607
6608 if (!info->attrs[NL80211_ATTR_REASON_CODE])
6609 reason = WLAN_REASON_DEAUTH_LEAVING;
6610 else
6611 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
6612
6613 if (reason == 0)
6614 return -EINVAL;
6615
074ac8df 6616 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 6617 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
6618 return -EOPNOTSUPP;
b23aa676 6619
4c476991 6620 return cfg80211_disconnect(rdev, dev, reason, true);
b23aa676
SO		 6621}
6622
463d0183
JB		 6623static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
6624{
4c476991 6625 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 6626 struct net *net;
6627 int err;
6628 u32 pid;
6629
6630 if (!info->attrs[NL80211_ATTR_PID])
6631 return -EINVAL;
6632
6633 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
6634
463d0183 6635 net = get_net_ns_by_pid(pid);
4c476991
JB		 6636 if (IS_ERR(net))
6637 return PTR_ERR(net);
463d0183
JB		 6638
6639 err = 0;
6640
6641 /* check if anything to do */
4c476991
JB		 6642 if (!net_eq(wiphy_net(&rdev->wiphy), net))
6643 err = cfg80211_switch_netns(rdev, net);
463d0183 6644
463d0183 6645 put_net(net);
463d0183
JB		 6646 return err;
6647}
6648
67fbb16b
SO		 6649static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
6650{
4c476991 6651 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 6652 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
6653 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 6654 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 6655 struct cfg80211_pmksa pmksa;
6656
6657 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
6658
6659 if (!info->attrs[NL80211_ATTR_MAC])
6660 return -EINVAL;
6661
6662 if (!info->attrs[NL80211_ATTR_PMKID])
6663 return -EINVAL;
6664
67fbb16b
SO		 6665 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
6666 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
6667
074ac8df 6668 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 6669 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
6670 return -EOPNOTSUPP;
67fbb16b
SO		 6671
6672 switch (info->genlhdr->cmd) {
6673 case NL80211_CMD_SET_PMKSA:
6674 rdev_ops = rdev->ops->set_pmksa;
6675 break;
6676 case NL80211_CMD_DEL_PMKSA:
6677 rdev_ops = rdev->ops->del_pmksa;
6678 break;
6679 default:
6680 WARN_ON(1);
6681 break;
6682 }
6683
4c476991
JB		 6684 if (!rdev_ops)
6685 return -EOPNOTSUPP;
67fbb16b 6686
4c476991 6687 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 6688}
6689
6690static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
6691{
4c476991
JB		 6692 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6693 struct net_device *dev = info->user_ptr[1];
67fbb16b 6694
074ac8df 6695 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 6696 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
6697 return -EOPNOTSUPP;
67fbb16b 6698
4c476991
JB		 6699 if (!rdev->ops->flush_pmksa)
6700 return -EOPNOTSUPP;
67fbb16b 6701
e35e4d28 6702 return rdev_flush_pmksa(rdev, dev);
67fbb16b
SO		 6703}
6704
109086ce
AN		 6705static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
6706{
6707 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6708 struct net_device *dev = info->user_ptr[1];
6709 u8 action_code, dialog_token;
6710 u16 status_code;
6711 u8 *peer;
6712
6713 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
6714 !rdev->ops->tdls_mgmt)
6715 return -EOPNOTSUPP;
6716
6717 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
6718 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
6719 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
6720 !info->attrs[NL80211_ATTR_IE] ||
6721 !info->attrs[NL80211_ATTR_MAC])
6722 return -EINVAL;
6723
6724 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
6725 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
6726 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
6727 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
6728
e35e4d28
HG		 6729 return rdev_tdls_mgmt(rdev, dev, peer, action_code,
6730 dialog_token, status_code,
6731 nla_data(info->attrs[NL80211_ATTR_IE]),
6732 nla_len(info->attrs[NL80211_ATTR_IE]));
109086ce
AN		 6733}
6734
6735static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
6736{
6737 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6738 struct net_device *dev = info->user_ptr[1];
6739 enum nl80211_tdls_operation operation;
6740 u8 *peer;
6741
6742 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
6743 !rdev->ops->tdls_oper)
6744 return -EOPNOTSUPP;
6745
6746 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
6747 !info->attrs[NL80211_ATTR_MAC])
6748 return -EINVAL;
6749
6750 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
6751 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
6752
e35e4d28 6753 return rdev_tdls_oper(rdev, dev, peer, operation);
109086ce
AN		 6754}
6755
9588bbd5
JM		 6756static int nl80211_remain_on_channel(struct sk_buff *skb,
6757 struct genl_info *info)
6758{
4c476991 6759 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6760 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 6761 struct cfg80211_chan_def chandef;
9588bbd5
JM		 6762 struct sk_buff *msg;
6763 void *hdr;
6764 u64 cookie;
683b6d3b 6765 u32 duration;
9588bbd5
JM		 6766 int err;
6767
6768 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
6769 !info->attrs[NL80211_ATTR_DURATION])
6770 return -EINVAL;
6771
6772 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
6773
ebf348fc
JB		 6774 if (!rdev->ops->remain_on_channel ||
6775 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
6776 return -EOPNOTSUPP;
6777
9588bbd5 6778 /*
ebf348fc
JB		 6779 * We should be on that channel for at least a minimum amount of
6780 * time (10ms) but no longer than the driver supports.
9588bbd5 6781 */
ebf348fc 6782 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 6783 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 6784 return -EINVAL;
6785
683b6d3b
JB		 6786 err = nl80211_parse_chandef(rdev, info, &chandef);
6787 if (err)
6788 return err;
9588bbd5
JM		 6789
6790 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 6791 if (!msg)
6792 return -ENOMEM;
9588bbd5 6793
15e47304 6794 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
9588bbd5
JM		 6795 NL80211_CMD_REMAIN_ON_CHANNEL);
6796
6797 if (IS_ERR(hdr)) {
6798 err = PTR_ERR(hdr);
6799 goto free_msg;
6800 }
6801
683b6d3b
JB		 6802 err = rdev_remain_on_channel(rdev, wdev, chandef.chan,
6803 duration, &cookie);
9588bbd5
JM		 6804
6805 if (err)
6806 goto free_msg;
6807
9360ffd1
DM		 6808 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
6809 goto nla_put_failure;
9588bbd5
JM		 6810
6811 genlmsg_end(msg, hdr);
4c476991
JB		 6812
6813 return genlmsg_reply(msg, info);
9588bbd5
JM		 6814
6815 nla_put_failure:
6816 err = -ENOBUFS;
6817 free_msg:
6818 nlmsg_free(msg);
9588bbd5
JM		 6819 return err;
6820}
6821
6822static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
6823 struct genl_info *info)
6824{
4c476991 6825 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6826 struct wireless_dev *wdev = info->user_ptr[1];
9588bbd5 6827 u64 cookie;
9588bbd5
JM		 6828
6829 if (!info->attrs[NL80211_ATTR_COOKIE])
6830 return -EINVAL;
6831
4c476991
JB		 6832 if (!rdev->ops->cancel_remain_on_channel)
6833 return -EOPNOTSUPP;
9588bbd5 6834
9588bbd5
JM		 6835 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
6836
e35e4d28 6837 return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
9588bbd5
JM		 6838}
6839
13ae75b1
JM		 6840static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
6841 u8 *rates, u8 rates_len)
6842{
6843 u8 i;
6844 u32 mask = 0;
6845
6846 for (i = 0; i < rates_len; i++) {
6847 int rate = (rates[i] & 0x7f) * 5;
6848 int ridx;
6849 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
6850 struct ieee80211_rate *srate =
6851 &sband->bitrates[ridx];
6852 if (rate == srate->bitrate) {
6853 mask |= 1 << ridx;
6854 break;
6855 }
6856 }
6857 if (ridx == sband->n_bitrates)
6858 return 0; /* rate not found */
6859 }
6860
6861 return mask;
6862}
6863
24db78c0
SW		 6864static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
6865 u8 *rates, u8 rates_len,
6866 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
6867{
6868 u8 i;
6869
6870 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
6871
6872 for (i = 0; i < rates_len; i++) {
6873 int ridx, rbit;
6874
6875 ridx = rates[i] / 8;
6876 rbit = BIT(rates[i] % 8);
6877
6878 /* check validity */
910570b5 6879 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
24db78c0
SW		 6880 return false;
6881
6882 /* check availability */
6883 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
6884 mcs[ridx] |= rbit;
6885 else
6886 return false;
6887 }
6888
6889 return true;
6890}
6891
b54452b0 6892static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
13ae75b1
JM		 6893 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
6894 .len = NL80211_MAX_SUPP_RATES },
24db78c0
SW		 6895 [NL80211_TXRATE_MCS] = { .type = NLA_BINARY,
6896 .len = NL80211_MAX_SUPP_HT_RATES },
13ae75b1
JM		 6897};
6898
6899static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
6900 struct genl_info *info)
6901{
6902 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4c476991 6903 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13ae75b1 6904 struct cfg80211_bitrate_mask mask;
4c476991
JB		 6905 int rem, i;
6906 struct net_device *dev = info->user_ptr[1];
13ae75b1
JM		 6907 struct nlattr *tx_rates;
6908 struct ieee80211_supported_band *sband;
6909
6910 if (info->attrs[NL80211_ATTR_TX_RATES] == NULL)
6911 return -EINVAL;
6912
4c476991
JB		 6913 if (!rdev->ops->set_bitrate_mask)
6914 return -EOPNOTSUPP;
13ae75b1
JM		 6915
6916 memset(&mask, 0, sizeof(mask));
6917 /* Default to all rates enabled */
6918 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
6919 sband = rdev->wiphy.bands[i];
6920 mask.control[i].legacy =
6921 sband ? (1 << sband->n_bitrates) - 1 : 0;
24db78c0
SW		 6922 if (sband)
6923 memcpy(mask.control[i].mcs,
6924 sband->ht_cap.mcs.rx_mask,
6925 sizeof(mask.control[i].mcs));
6926 else
6927 memset(mask.control[i].mcs, 0,
6928 sizeof(mask.control[i].mcs));
13ae75b1
JM		 6929 }
6930
6931 /*
6932 * The nested attribute uses enum nl80211_band as the index. This maps
6933 * directly to the enum ieee80211_band values used in cfg80211.
6934 */
24db78c0 6935 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
13ae75b1
JM		 6936 nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem)
6937 {
6938 enum ieee80211_band band = nla_type(tx_rates);
4c476991
JB		 6939 if (band < 0 || band >= IEEE80211_NUM_BANDS)
6940 return -EINVAL;
13ae75b1 6941 sband = rdev->wiphy.bands[band];
4c476991
JB		 6942 if (sband == NULL)
6943 return -EINVAL;
13ae75b1
JM		 6944 nla_parse(tb, NL80211_TXRATE_MAX, nla_data(tx_rates),
6945 nla_len(tx_rates), nl80211_txattr_policy);
6946 if (tb[NL80211_TXRATE_LEGACY]) {
6947 mask.control[band].legacy = rateset_to_mask(
6948 sband,
6949 nla_data(tb[NL80211_TXRATE_LEGACY]),
6950 nla_len(tb[NL80211_TXRATE_LEGACY]));
218d2e26
BS		 6951 if ((mask.control[band].legacy == 0) &&
6952 nla_len(tb[NL80211_TXRATE_LEGACY]))
6953 return -EINVAL;
24db78c0
SW		 6954 }
6955 if (tb[NL80211_TXRATE_MCS]) {
6956 if (!ht_rateset_to_mask(
6957 sband,
6958 nla_data(tb[NL80211_TXRATE_MCS]),
6959 nla_len(tb[NL80211_TXRATE_MCS]),
6960 mask.control[band].mcs))
6961 return -EINVAL;
6962 }
6963
6964 if (mask.control[band].legacy == 0) {
6965 /* don't allow empty legacy rates if HT
6966 * is not even supported. */
6967 if (!rdev->wiphy.bands[band]->ht_cap.ht_supported)
6968 return -EINVAL;
6969
6970 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
6971 if (mask.control[band].mcs[i])
6972 break;
6973
6974 /* legacy and mcs rates may not be both empty */
6975 if (i == IEEE80211_HT_MCS_MASK_LEN)
4c476991 6976 return -EINVAL;
13ae75b1
JM		 6977 }
6978 }
6979
e35e4d28 6980 return rdev_set_bitrate_mask(rdev, dev, NULL, &mask);
13ae75b1
JM		 6981}
6982
2e161f78 6983static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 6984{
4c476991 6985 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 6986 struct wireless_dev *wdev = info->user_ptr[1];
2e161f78 6987 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 6988
6989 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
6990 return -EINVAL;
6991
2e161f78
JB		 6992 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
6993 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 6994
71bbc994
JB		 6995 switch (wdev->iftype) {
6996 case NL80211_IFTYPE_STATION:
6997 case NL80211_IFTYPE_ADHOC:
6998 case NL80211_IFTYPE_P2P_CLIENT:
6999 case NL80211_IFTYPE_AP:
7000 case NL80211_IFTYPE_AP_VLAN:
7001 case NL80211_IFTYPE_MESH_POINT:
7002 case NL80211_IFTYPE_P2P_GO:
98104fde 7003 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994
JB		 7004 break;
7005 default:
4c476991 7006 return -EOPNOTSUPP;
71bbc994 7007 }
026331c4
JM		 7008
7009 /* not much point in registering if we can't reply */
4c476991
JB		 7010 if (!rdev->ops->mgmt_tx)
7011 return -EOPNOTSUPP;
026331c4 7012
15e47304 7013 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
026331c4
JM		 7014 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
7015 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]));
026331c4
JM		 7016}
7017
2e161f78 7018static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 7019{
4c476991 7020 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 7021 struct wireless_dev *wdev = info->user_ptr[1];
683b6d3b 7022 struct cfg80211_chan_def chandef;
026331c4 7023 int err;
d64d373f 7024 void *hdr = NULL;
026331c4 7025 u64 cookie;
e247bd90 7026 struct sk_buff *msg = NULL;
f7ca38df 7027 unsigned int wait = 0;
e247bd90
JB		 7028 bool offchan, no_cck, dont_wait_for_ack;
7029
7030 dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
026331c4 7031
683b6d3b 7032 if (!info->attrs[NL80211_ATTR_FRAME])
026331c4
JM		 7033 return -EINVAL;
7034
4c476991
JB		 7035 if (!rdev->ops->mgmt_tx)
7036 return -EOPNOTSUPP;
026331c4 7037
71bbc994
JB		 7038 switch (wdev->iftype) {
7039 case NL80211_IFTYPE_STATION:
7040 case NL80211_IFTYPE_ADHOC:
7041 case NL80211_IFTYPE_P2P_CLIENT:
7042 case NL80211_IFTYPE_AP:
7043 case NL80211_IFTYPE_AP_VLAN:
7044 case NL80211_IFTYPE_MESH_POINT:
7045 case NL80211_IFTYPE_P2P_GO:
98104fde 7046 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994
JB		 7047 break;
7048 default:
4c476991 7049 return -EOPNOTSUPP;
71bbc994 7050 }
026331c4 7051
f7ca38df 7052 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 7053 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df
JB		 7054 return -EINVAL;
7055 wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 7056
7057 /*
7058 * We should wait on the channel for at least a minimum amount
7059 * of time (10ms) but no longer than the driver supports.
7060 */
7061 if (wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
7062 wait > rdev->wiphy.max_remain_on_channel_duration)
7063 return -EINVAL;
7064
f7ca38df
JB		 7065 }
7066
f7ca38df
JB		 7067 offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
7068
7c4ef712
JB		 7069 if (offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
7070 return -EINVAL;
7071
e9f935e3
RM		 7072 no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
7073
683b6d3b
JB		 7074 err = nl80211_parse_chandef(rdev, info, &chandef);
7075 if (err)
7076 return err;
026331c4 7077
e247bd90
JB		 7078 if (!dont_wait_for_ack) {
7079 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7080 if (!msg)
7081 return -ENOMEM;
026331c4 7082
15e47304 7083 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
e247bd90 7084 NL80211_CMD_FRAME);
026331c4 7085
e247bd90
JB		 7086 if (IS_ERR(hdr)) {
7087 err = PTR_ERR(hdr);
7088 goto free_msg;
7089 }
026331c4 7090 }
e247bd90 7091
683b6d3b 7092 err = cfg80211_mlme_mgmt_tx(rdev, wdev, chandef.chan, offchan, wait,
2e161f78
JB		 7093 nla_data(info->attrs[NL80211_ATTR_FRAME]),
7094 nla_len(info->attrs[NL80211_ATTR_FRAME]),
e247bd90 7095 no_cck, dont_wait_for_ack, &cookie);
026331c4
JM		 7096 if (err)
7097 goto free_msg;
7098
e247bd90 7099 if (msg) {
9360ffd1
DM		 7100 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
7101 goto nla_put_failure;
026331c4 7102
e247bd90
JB		 7103 genlmsg_end(msg, hdr);
7104 return genlmsg_reply(msg, info);
7105 }
7106
7107 return 0;
026331c4
JM		 7108
7109 nla_put_failure:
7110 err = -ENOBUFS;
7111 free_msg:
7112 nlmsg_free(msg);
026331c4
JM		 7113 return err;
7114}
7115
f7ca38df
JB		 7116static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
7117{
7118 struct cfg80211_registered_device *rdev = info->user_ptr[0];
71bbc994 7119 struct wireless_dev *wdev = info->user_ptr[1];
f7ca38df
JB		 7120 u64 cookie;
7121
7122 if (!info->attrs[NL80211_ATTR_COOKIE])
7123 return -EINVAL;
7124
7125 if (!rdev->ops->mgmt_tx_cancel_wait)
7126 return -EOPNOTSUPP;
7127
71bbc994
JB		 7128 switch (wdev->iftype) {
7129 case NL80211_IFTYPE_STATION:
7130 case NL80211_IFTYPE_ADHOC:
7131 case NL80211_IFTYPE_P2P_CLIENT:
7132 case NL80211_IFTYPE_AP:
7133 case NL80211_IFTYPE_AP_VLAN:
7134 case NL80211_IFTYPE_P2P_GO:
98104fde 7135 case NL80211_IFTYPE_P2P_DEVICE:
71bbc994
JB		 7136 break;
7137 default:
f7ca38df 7138 return -EOPNOTSUPP;
71bbc994 7139 }
f7ca38df
JB		 7140
7141 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
7142
e35e4d28 7143 return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
f7ca38df
JB		 7144}
7145
ffb9eb3d
KV		 7146static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
7147{
4c476991 7148 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 7149 struct wireless_dev *wdev;
4c476991 7150 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 7151 u8 ps_state;
7152 bool state;
7153 int err;
7154
4c476991
JB		 7155 if (!info->attrs[NL80211_ATTR_PS_STATE])
7156 return -EINVAL;
ffb9eb3d
KV		 7157
7158 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
7159
4c476991
JB		 7160 if (ps_state != NL80211_PS_DISABLED && ps_state != NL80211_PS_ENABLED)
7161 return -EINVAL;
ffb9eb3d
KV		 7162
7163 wdev = dev->ieee80211_ptr;
7164
4c476991
JB		 7165 if (!rdev->ops->set_power_mgmt)
7166 return -EOPNOTSUPP;
ffb9eb3d
KV		 7167
7168 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
7169
7170 if (state == wdev->ps)
4c476991 7171 return 0;
ffb9eb3d 7172
e35e4d28 7173 err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
4c476991
JB		 7174 if (!err)
7175 wdev->ps = state;
ffb9eb3d
KV		 7176 return err;
7177}
7178
7179static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
7180{
4c476991 7181 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 7182 enum nl80211_ps_state ps_state;
7183 struct wireless_dev *wdev;
4c476991 7184 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 7185 struct sk_buff *msg;
7186 void *hdr;
7187 int err;
7188
ffb9eb3d
KV		 7189 wdev = dev->ieee80211_ptr;
7190
4c476991
JB		 7191 if (!rdev->ops->set_power_mgmt)
7192 return -EOPNOTSUPP;
ffb9eb3d
KV		 7193
7194 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 7195 if (!msg)
7196 return -ENOMEM;
ffb9eb3d 7197
15e47304 7198 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ffb9eb3d
KV		 7199 NL80211_CMD_GET_POWER_SAVE);
7200 if (!hdr) {
4c476991 7201 err = -ENOBUFS;
ffb9eb3d
KV		 7202 goto free_msg;
7203 }
7204
7205 if (wdev->ps)
7206 ps_state = NL80211_PS_ENABLED;
7207 else
7208 ps_state = NL80211_PS_DISABLED;
7209
9360ffd1
DM		 7210 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
7211 goto nla_put_failure;
ffb9eb3d
KV		 7212
7213 genlmsg_end(msg, hdr);
4c476991 7214 return genlmsg_reply(msg, info);
ffb9eb3d 7215
4c476991 7216 nla_put_failure:
ffb9eb3d 7217 err = -ENOBUFS;
4c476991 7218 free_msg:
ffb9eb3d 7219 nlmsg_free(msg);
ffb9eb3d
KV		 7220 return err;
7221}
7222
d6dc1a38
JO		 7223static struct nla_policy
7224nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] __read_mostly = {
7225 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
7226 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
7227 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
84f10708
TP		 7228 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
7229 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
7230 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
d6dc1a38
JO		 7231};
7232
84f10708 7233static int nl80211_set_cqm_txe(struct genl_info *info,
d9d8b019 7234 u32 rate, u32 pkts, u32 intvl)
84f10708
TP		 7235{
7236 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7237 struct wireless_dev *wdev;
7238 struct net_device *dev = info->user_ptr[1];
7239
d9d8b019 7240 if (rate > 100 || intvl > NL80211_CQM_TXE_MAX_INTVL)
84f10708
TP		 7241 return -EINVAL;
7242
7243 wdev = dev->ieee80211_ptr;
7244
7245 if (!rdev->ops->set_cqm_txe_config)
7246 return -EOPNOTSUPP;
7247
7248 if (wdev->iftype != NL80211_IFTYPE_STATION &&
7249 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
7250 return -EOPNOTSUPP;
7251
e35e4d28 7252 return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
84f10708
TP		 7253}
7254
d6dc1a38
JO		 7255static int nl80211_set_cqm_rssi(struct genl_info *info,
7256 s32 threshold, u32 hysteresis)
7257{
4c476991 7258 struct cfg80211_registered_device *rdev = info->user_ptr[0];
d6dc1a38 7259 struct wireless_dev *wdev;
4c476991 7260 struct net_device *dev = info->user_ptr[1];
d6dc1a38
JO		 7261
7262 if (threshold > 0)
7263 return -EINVAL;
7264
d6dc1a38
JO		 7265 wdev = dev->ieee80211_ptr;
7266
4c476991
JB		 7267 if (!rdev->ops->set_cqm_rssi_config)
7268 return -EOPNOTSUPP;
d6dc1a38 7269
074ac8df 7270 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 7271 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
7272 return -EOPNOTSUPP;
d6dc1a38 7273
e35e4d28 7274 return rdev_set_cqm_rssi_config(rdev, dev, threshold, hysteresis);
d6dc1a38
JO		 7275}
7276
7277static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
7278{
7279 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
7280 struct nlattr *cqm;
7281 int err;
7282
7283 cqm = info->attrs[NL80211_ATTR_CQM];
7284 if (!cqm) {
7285 err = -EINVAL;
7286 goto out;
7287 }
7288
7289 err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
7290 nl80211_attr_cqm_policy);
7291 if (err)
7292 goto out;
7293
7294 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
7295 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
7296 s32 threshold;
7297 u32 hysteresis;
7298 threshold = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
7299 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
7300 err = nl80211_set_cqm_rssi(info, threshold, hysteresis);
84f10708
TP		 7301 } else if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
7302 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
7303 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
7304 u32 rate, pkts, intvl;
7305 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
7306 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
7307 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
7308 err = nl80211_set_cqm_txe(info, rate, pkts, intvl);
d6dc1a38
JO		 7309 } else
7310 err = -EINVAL;
7311
7312out:
7313 return err;
7314}
7315
29cbe68c
JB		 7316static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
7317{
7318 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7319 struct net_device *dev = info->user_ptr[1];
7320 struct mesh_config cfg;
c80d545d 7321 struct mesh_setup setup;
29cbe68c
JB		 7322 int err;
7323
7324 /* start with default */
7325 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 7326 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 7327
24bdd9f4 7328 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 7329 /* and parse parameters if given */
24bdd9f4 7330 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 7331 if (err)
7332 return err;
7333 }
7334
7335 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
7336 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
7337 return -EINVAL;
7338
c80d545d
JC		 7339 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
7340 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
7341
4bb62344
CYY		 7342 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
7343 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
7344 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
7345 return -EINVAL;
7346
9bdbf04d
MP		 7347 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
7348 setup.beacon_interval =
7349 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
7350 if (setup.beacon_interval < 10 ||
7351 setup.beacon_interval > 10000)
7352 return -EINVAL;
7353 }
7354
7355 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
7356 setup.dtim_period =
7357 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
7358 if (setup.dtim_period < 1 || setup.dtim_period > 100)
7359 return -EINVAL;
7360 }
7361
c80d545d
JC		 7362 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
7363 /* parse additional setup parameters if given */
7364 err = nl80211_parse_mesh_setup(info, &setup);
7365 if (err)
7366 return err;
7367 }
7368
cc1d2806 7369 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
683b6d3b
JB		 7370 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
7371 if (err)
7372 return err;
cc1d2806
JB		 7373 } else {
7374 /* cfg80211_join_mesh() will sort it out */
683b6d3b 7375 setup.chandef.chan = NULL;
cc1d2806
JB		 7376 }
7377
c80d545d 7378 return cfg80211_join_mesh(rdev, dev, &setup, &cfg);
29cbe68c
JB		 7379}
7380
7381static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
7382{
7383 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7384 struct net_device *dev = info->user_ptr[1];
7385
7386 return cfg80211_leave_mesh(rdev, dev);
7387}
7388
dfb89c56 7389#ifdef CONFIG_PM
bb92d199
AK		 7390static int nl80211_send_wowlan_patterns(struct sk_buff *msg,
7391 struct cfg80211_registered_device *rdev)
7392{
7393 struct nlattr *nl_pats, *nl_pat;
7394 int i, pat_len;
7395
7396 if (!rdev->wowlan->n_patterns)
7397 return 0;
7398
7399 nl_pats = nla_nest_start(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN);
7400 if (!nl_pats)
7401 return -ENOBUFS;
7402
7403 for (i = 0; i < rdev->wowlan->n_patterns; i++) {
7404 nl_pat = nla_nest_start(msg, i + 1);
7405 if (!nl_pat)
7406 return -ENOBUFS;
7407 pat_len = rdev->wowlan->patterns[i].pattern_len;
7408 if (nla_put(msg, NL80211_WOWLAN_PKTPAT_MASK,
7409 DIV_ROUND_UP(pat_len, 8),
7410 rdev->wowlan->patterns[i].mask) ||
7411 nla_put(msg, NL80211_WOWLAN_PKTPAT_PATTERN,
7412 pat_len, rdev->wowlan->patterns[i].pattern) ||
7413 nla_put_u32(msg, NL80211_WOWLAN_PKTPAT_OFFSET,
7414 rdev->wowlan->patterns[i].pkt_offset))
7415 return -ENOBUFS;
7416 nla_nest_end(msg, nl_pat);
7417 }
7418 nla_nest_end(msg, nl_pats);
7419
7420 return 0;
7421}
7422
2a0e047e
JB		 7423static int nl80211_send_wowlan_tcp(struct sk_buff *msg,
7424 struct cfg80211_wowlan_tcp *tcp)
7425{
7426 struct nlattr *nl_tcp;
7427
7428 if (!tcp)
7429 return 0;
7430
7431 nl_tcp = nla_nest_start(msg, NL80211_WOWLAN_TRIG_TCP_CONNECTION);
7432 if (!nl_tcp)
7433 return -ENOBUFS;
7434
7435 if (nla_put_be32(msg, NL80211_WOWLAN_TCP_SRC_IPV4, tcp->src) ||
7436 nla_put_be32(msg, NL80211_WOWLAN_TCP_DST_IPV4, tcp->dst) ||
7437 nla_put(msg, NL80211_WOWLAN_TCP_DST_MAC, ETH_ALEN, tcp->dst_mac) ||
7438 nla_put_u16(msg, NL80211_WOWLAN_TCP_SRC_PORT, tcp->src_port) ||
7439 nla_put_u16(msg, NL80211_WOWLAN_TCP_DST_PORT, tcp->dst_port) ||
7440 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
7441 tcp->payload_len, tcp->payload) ||
7442 nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
7443 tcp->data_interval) ||
7444 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
7445 tcp->wake_len, tcp->wake_data) ||
7446 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_MASK,
7447 DIV_ROUND_UP(tcp->wake_len, 8), tcp->wake_mask))
7448 return -ENOBUFS;
7449
7450 if (tcp->payload_seq.len &&
7451 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ,
7452 sizeof(tcp->payload_seq), &tcp->payload_seq))
7453 return -ENOBUFS;
7454
7455 if (tcp->payload_tok.len &&
7456 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
7457 sizeof(tcp->payload_tok) + tcp->tokens_size,
7458 &tcp->payload_tok))
7459 return -ENOBUFS;
7460
7461 return 0;
7462}
7463
ff1b6e69
JB		 7464static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
7465{
7466 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7467 struct sk_buff *msg;
7468 void *hdr;
2a0e047e 7469 u32 size = NLMSG_DEFAULT_SIZE;
ff1b6e69 7470
2a0e047e
JB		 7471 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns &&
7472 !rdev->wiphy.wowlan.tcp)
ff1b6e69
JB		 7473 return -EOPNOTSUPP;
7474
2a0e047e
JB		 7475 if (rdev->wowlan && rdev->wowlan->tcp) {
7476 /* adjust size to have room for all the data */
7477 size += rdev->wowlan->tcp->tokens_size +
7478 rdev->wowlan->tcp->payload_len +
7479 rdev->wowlan->tcp->wake_len +
7480 rdev->wowlan->tcp->wake_len / 8;
7481 }
7482
7483 msg = nlmsg_new(size, GFP_KERNEL);
ff1b6e69
JB		 7484 if (!msg)
7485 return -ENOMEM;
7486
15e47304 7487 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
ff1b6e69
JB		 7488 NL80211_CMD_GET_WOWLAN);
7489 if (!hdr)
7490 goto nla_put_failure;
7491
7492 if (rdev->wowlan) {
7493 struct nlattr *nl_wowlan;
7494
7495 nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
7496 if (!nl_wowlan)
7497 goto nla_put_failure;
7498
9360ffd1
DM		 7499 if ((rdev->wowlan->any &&
7500 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
7501 (rdev->wowlan->disconnect &&
7502 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
7503 (rdev->wowlan->magic_pkt &&
7504 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
7505 (rdev->wowlan->gtk_rekey_failure &&
7506 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
7507 (rdev->wowlan->eap_identity_req &&
7508 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
7509 (rdev->wowlan->four_way_handshake &&
7510 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
7511 (rdev->wowlan->rfkill_release &&
7512 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
7513 goto nla_put_failure;
2a0e047e 7514
bb92d199
AK		 7515 if (nl80211_send_wowlan_patterns(msg, rdev))
7516 goto nla_put_failure;
2a0e047e
JB		 7517
7518 if (nl80211_send_wowlan_tcp(msg, rdev->wowlan->tcp))
7519 goto nla_put_failure;
7520
ff1b6e69
JB		 7521 nla_nest_end(msg, nl_wowlan);
7522 }
7523
7524 genlmsg_end(msg, hdr);
7525 return genlmsg_reply(msg, info);
7526
7527nla_put_failure:
7528 nlmsg_free(msg);
7529 return -ENOBUFS;
7530}
7531
2a0e047e
JB		 7532static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
7533 struct nlattr *attr,
7534 struct cfg80211_wowlan *trig)
7535{
7536 struct nlattr *tb[NUM_NL80211_WOWLAN_TCP];
7537 struct cfg80211_wowlan_tcp *cfg;
7538 struct nl80211_wowlan_tcp_data_token *tok = NULL;
7539 struct nl80211_wowlan_tcp_data_seq *seq = NULL;
7540 u32 size;
7541 u32 data_size, wake_size, tokens_size = 0, wake_mask_size;
7542 int err, port;
7543
7544 if (!rdev->wiphy.wowlan.tcp)
7545 return -EINVAL;
7546
7547 err = nla_parse(tb, MAX_NL80211_WOWLAN_TCP,
7548 nla_data(attr), nla_len(attr),
7549 nl80211_wowlan_tcp_policy);
7550 if (err)
7551 return err;
7552
7553 if (!tb[NL80211_WOWLAN_TCP_SRC_IPV4] ||
7554 !tb[NL80211_WOWLAN_TCP_DST_IPV4] ||
7555 !tb[NL80211_WOWLAN_TCP_DST_MAC] ||
7556 !tb[NL80211_WOWLAN_TCP_DST_PORT] ||
7557 !tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD] ||
7558 !tb[NL80211_WOWLAN_TCP_DATA_INTERVAL] ||
7559 !tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD] ||
7560 !tb[NL80211_WOWLAN_TCP_WAKE_MASK])
7561 return -EINVAL;
7562
7563 data_size = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]);
7564 if (data_size > rdev->wiphy.wowlan.tcp->data_payload_max)
7565 return -EINVAL;
7566
7567 if (nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) >
7568 rdev->wiphy.wowlan.tcp->data_interval_max)
7569 return -EINVAL;
7570
7571 wake_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]);
7572 if (wake_size > rdev->wiphy.wowlan.tcp->wake_payload_max)
7573 return -EINVAL;
7574
7575 wake_mask_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_MASK]);
7576 if (wake_mask_size != DIV_ROUND_UP(wake_size, 8))
7577 return -EINVAL;
7578
7579 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]) {
7580 u32 tokln = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
7581
7582 tok = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
7583 tokens_size = tokln - sizeof(*tok);
7584
7585 if (!tok->len || tokens_size % tok->len)
7586 return -EINVAL;
7587 if (!rdev->wiphy.wowlan.tcp->tok)
7588 return -EINVAL;
7589 if (tok->len > rdev->wiphy.wowlan.tcp->tok->max_len)
7590 return -EINVAL;
7591 if (tok->len < rdev->wiphy.wowlan.tcp->tok->min_len)
7592 return -EINVAL;
7593 if (tokens_size > rdev->wiphy.wowlan.tcp->tok->bufsize)
7594 return -EINVAL;
7595 if (tok->offset + tok->len > data_size)
7596 return -EINVAL;
7597 }
7598
7599 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]) {
7600 seq = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]);
7601 if (!rdev->wiphy.wowlan.tcp->seq)
7602 return -EINVAL;
7603 if (seq->len == 0 || seq->len > 4)
7604 return -EINVAL;
7605 if (seq->len + seq->offset > data_size)
7606 return -EINVAL;
7607 }
7608
7609 size = sizeof(*cfg);
7610 size += data_size;
7611 size += wake_size + wake_mask_size;
7612 size += tokens_size;
7613
7614 cfg = kzalloc(size, GFP_KERNEL);
7615 if (!cfg)
7616 return -ENOMEM;
7617 cfg->src = nla_get_be32(tb[NL80211_WOWLAN_TCP_SRC_IPV4]);
7618 cfg->dst = nla_get_be32(tb[NL80211_WOWLAN_TCP_DST_IPV4]);
7619 memcpy(cfg->dst_mac, nla_data(tb[NL80211_WOWLAN_TCP_DST_MAC]),
7620 ETH_ALEN);
7621 if (tb[NL80211_WOWLAN_TCP_SRC_PORT])
7622 port = nla_get_u16(tb[NL80211_WOWLAN_TCP_SRC_PORT]);
7623 else
7624 port = 0;
7625#ifdef CONFIG_INET
7626 /* allocate a socket and port for it and use it */
7627 err = __sock_create(wiphy_net(&rdev->wiphy), PF_INET, SOCK_STREAM,
7628 IPPROTO_TCP, &cfg->sock, 1);
7629 if (err) {
7630 kfree(cfg);
7631 return err;
7632 }
7633 if (inet_csk_get_port(cfg->sock->sk, port)) {
7634 sock_release(cfg->sock);
7635 kfree(cfg);
7636 return -EADDRINUSE;
7637 }
7638 cfg->src_port = inet_sk(cfg->sock->sk)->inet_num;
7639#else
7640 if (!port) {
7641 kfree(cfg);
7642 return -EINVAL;
7643 }
7644 cfg->src_port = port;
7645#endif
7646
7647 cfg->dst_port = nla_get_u16(tb[NL80211_WOWLAN_TCP_DST_PORT]);
7648 cfg->payload_len = data_size;
7649 cfg->payload = (u8 *)cfg + sizeof(*cfg) + tokens_size;
7650 memcpy((void *)cfg->payload,
7651 nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]),
7652 data_size);
7653 if (seq)
7654 cfg->payload_seq = *seq;
7655 cfg->data_interval = nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]);
7656 cfg->wake_len = wake_size;
7657 cfg->wake_data = (u8 *)cfg + sizeof(*cfg) + tokens_size + data_size;
7658 memcpy((void *)cfg->wake_data,
7659 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]),
7660 wake_size);
7661 cfg->wake_mask = (u8 *)cfg + sizeof(*cfg) + tokens_size +
7662 data_size + wake_size;
7663 memcpy((void *)cfg->wake_mask,
7664 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_MASK]),
7665 wake_mask_size);
7666 if (tok) {
7667 cfg->tokens_size = tokens_size;
7668 memcpy(&cfg->payload_tok, tok, sizeof(*tok) + tokens_size);
7669 }
7670
7671 trig->tcp = cfg;
7672
7673 return 0;
7674}
7675
ff1b6e69
JB		 7676static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
7677{
7678 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7679 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
ff1b6e69 7680 struct cfg80211_wowlan new_triggers = {};
ae33bd81 7681 struct cfg80211_wowlan *ntrig;
ff1b6e69
JB		 7682 struct wiphy_wowlan_support *wowlan = &rdev->wiphy.wowlan;
7683 int err, i;
6d52563f 7684 bool prev_enabled = rdev->wowlan;
ff1b6e69 7685
2a0e047e
JB		 7686 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns &&
7687 !rdev->wiphy.wowlan.tcp)
ff1b6e69
JB		 7688 return -EOPNOTSUPP;
7689
ae33bd81
JB		 7690 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
7691 cfg80211_rdev_free_wowlan(rdev);
7692 rdev->wowlan = NULL;
7693 goto set_wakeup;
7694 }
ff1b6e69
JB		 7695
7696 err = nla_parse(tb, MAX_NL80211_WOWLAN_TRIG,
7697 nla_data(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
7698 nla_len(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
7699 nl80211_wowlan_policy);
7700 if (err)
7701 return err;
7702
7703 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
7704 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
7705 return -EINVAL;
7706 new_triggers.any = true;
7707 }
7708
7709 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
7710 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
7711 return -EINVAL;
7712 new_triggers.disconnect = true;
7713 }
7714
7715 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
7716 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
7717 return -EINVAL;
7718 new_triggers.magic_pkt = true;
7719 }
7720
77dbbb13
JB		 7721 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
7722 return -EINVAL;
7723
7724 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
7725 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
7726 return -EINVAL;
7727 new_triggers.gtk_rekey_failure = true;
7728 }
7729
7730 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
7731 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
7732 return -EINVAL;
7733 new_triggers.eap_identity_req = true;
7734 }
7735
7736 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
7737 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
7738 return -EINVAL;
7739 new_triggers.four_way_handshake = true;
7740 }
7741
7742 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
7743 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
7744 return -EINVAL;
7745 new_triggers.rfkill_release = true;
7746 }
7747
ff1b6e69
JB		 7748 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
7749 struct nlattr *pat;
7750 int n_patterns = 0;
bb92d199 7751 int rem, pat_len, mask_len, pkt_offset;
ff1b6e69
JB		 7752 struct nlattr *pat_tb[NUM_NL80211_WOWLAN_PKTPAT];
7753
7754 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
7755 rem)
7756 n_patterns++;
7757 if (n_patterns > wowlan->n_patterns)
7758 return -EINVAL;
7759
7760 new_triggers.patterns = kcalloc(n_patterns,
7761 sizeof(new_triggers.patterns[0]),
7762 GFP_KERNEL);
7763 if (!new_triggers.patterns)
7764 return -ENOMEM;
7765
7766 new_triggers.n_patterns = n_patterns;
7767 i = 0;
7768
7769 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
7770 rem) {
7771 nla_parse(pat_tb, MAX_NL80211_WOWLAN_PKTPAT,
7772 nla_data(pat), nla_len(pat), NULL);
7773 err = -EINVAL;
7774 if (!pat_tb[NL80211_WOWLAN_PKTPAT_MASK] ||
7775 !pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN])
7776 goto error;
7777 pat_len = nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]);
7778 mask_len = DIV_ROUND_UP(pat_len, 8);
7779 if (nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]) !=
7780 mask_len)
7781 goto error;
7782 if (pat_len > wowlan->pattern_max_len ||
7783 pat_len < wowlan->pattern_min_len)
7784 goto error;
7785
bb92d199
AK		 7786 if (!pat_tb[NL80211_WOWLAN_PKTPAT_OFFSET])
7787 pkt_offset = 0;
7788 else
7789 pkt_offset = nla_get_u32(
7790 pat_tb[NL80211_WOWLAN_PKTPAT_OFFSET]);
7791 if (pkt_offset > wowlan->max_pkt_offset)
7792 goto error;
7793 new_triggers.patterns[i].pkt_offset = pkt_offset;
7794
ff1b6e69
JB		 7795 new_triggers.patterns[i].mask =
7796 kmalloc(mask_len + pat_len, GFP_KERNEL);
7797 if (!new_triggers.patterns[i].mask) {
7798 err = -ENOMEM;
7799 goto error;
7800 }
7801 new_triggers.patterns[i].pattern =
7802 new_triggers.patterns[i].mask + mask_len;
7803 memcpy(new_triggers.patterns[i].mask,
7804 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]),
7805 mask_len);
7806 new_triggers.patterns[i].pattern_len = pat_len;
7807 memcpy(new_triggers.patterns[i].pattern,
7808 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]),
7809 pat_len);
7810 i++;
7811 }
7812 }
7813
2a0e047e
JB		 7814 if (tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION]) {
7815 err = nl80211_parse_wowlan_tcp(
7816 rdev, tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION],
7817 &new_triggers);
7818 if (err)
7819 goto error;
7820 }
7821
ae33bd81
JB		 7822 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
7823 if (!ntrig) {
7824 err = -ENOMEM;
7825 goto error;
ff1b6e69 7826 }
ae33bd81
JB		 7827 cfg80211_rdev_free_wowlan(rdev);
7828 rdev->wowlan = ntrig;
ff1b6e69 7829
ae33bd81 7830 set_wakeup:
6d52563f 7831 if (rdev->ops->set_wakeup && prev_enabled != !!rdev->wowlan)
e35e4d28 7832 rdev_set_wakeup(rdev, rdev->wowlan);
6d52563f 7833
ff1b6e69
JB		 7834 return 0;
7835 error:
7836 for (i = 0; i < new_triggers.n_patterns; i++)
7837 kfree(new_triggers.patterns[i].mask);
7838 kfree(new_triggers.patterns);
2a0e047e
JB		 7839 if (new_triggers.tcp && new_triggers.tcp->sock)
7840 sock_release(new_triggers.tcp->sock);
7841 kfree(new_triggers.tcp);
ff1b6e69
JB		 7842 return err;
7843}
dfb89c56 7844#endif
ff1b6e69 7845
e5497d76
JB		 7846static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
7847{
7848 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7849 struct net_device *dev = info->user_ptr[1];
7850 struct wireless_dev *wdev = dev->ieee80211_ptr;
7851 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
7852 struct cfg80211_gtk_rekey_data rekey_data;
7853 int err;
7854
7855 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
7856 return -EINVAL;
7857
7858 err = nla_parse(tb, MAX_NL80211_REKEY_DATA,
7859 nla_data(info->attrs[NL80211_ATTR_REKEY_DATA]),
7860 nla_len(info->attrs[NL80211_ATTR_REKEY_DATA]),
7861 nl80211_rekey_policy);
7862 if (err)
7863 return err;
7864
7865 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
7866 return -ERANGE;
7867 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
7868 return -ERANGE;
7869 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
7870 return -ERANGE;
7871
7872 memcpy(rekey_data.kek, nla_data(tb[NL80211_REKEY_DATA_KEK]),
7873 NL80211_KEK_LEN);
7874 memcpy(rekey_data.kck, nla_data(tb[NL80211_REKEY_DATA_KCK]),
7875 NL80211_KCK_LEN);
7876 memcpy(rekey_data.replay_ctr,
7877 nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]),
7878 NL80211_REPLAY_CTR_LEN);
7879
7880 wdev_lock(wdev);
7881 if (!wdev->current_bss) {
7882 err = -ENOTCONN;
7883 goto out;
7884 }
7885
7886 if (!rdev->ops->set_rekey_data) {
7887 err = -EOPNOTSUPP;
7888 goto out;
7889 }
7890
e35e4d28 7891 err = rdev_set_rekey_data(rdev, dev, &rekey_data);
e5497d76
JB		 7892 out:
7893 wdev_unlock(wdev);
7894 return err;
7895}
7896
28946da7
JB		 7897static int nl80211_register_unexpected_frame(struct sk_buff *skb,
7898 struct genl_info *info)
7899{
7900 struct net_device *dev = info->user_ptr[1];
7901 struct wireless_dev *wdev = dev->ieee80211_ptr;
7902
7903 if (wdev->iftype != NL80211_IFTYPE_AP &&
7904 wdev->iftype != NL80211_IFTYPE_P2P_GO)
7905 return -EINVAL;
7906
15e47304 7907 if (wdev->ap_unexpected_nlportid)
28946da7
JB		 7908 return -EBUSY;
7909
15e47304 7910 wdev->ap_unexpected_nlportid = info->snd_portid;
28946da7
JB		 7911 return 0;
7912}
7913
7f6cf311
JB		 7914static int nl80211_probe_client(struct sk_buff *skb,
7915 struct genl_info *info)
7916{
7917 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7918 struct net_device *dev = info->user_ptr[1];
7919 struct wireless_dev *wdev = dev->ieee80211_ptr;
7920 struct sk_buff *msg;
7921 void *hdr;
7922 const u8 *addr;
7923 u64 cookie;
7924 int err;
7925
7926 if (wdev->iftype != NL80211_IFTYPE_AP &&
7927 wdev->iftype != NL80211_IFTYPE_P2P_GO)
7928 return -EOPNOTSUPP;
7929
7930 if (!info->attrs[NL80211_ATTR_MAC])
7931 return -EINVAL;
7932
7933 if (!rdev->ops->probe_client)
7934 return -EOPNOTSUPP;
7935
7936 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7937 if (!msg)
7938 return -ENOMEM;
7939
15e47304 7940 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7f6cf311
JB		 7941 NL80211_CMD_PROBE_CLIENT);
7942
7943 if (IS_ERR(hdr)) {
7944 err = PTR_ERR(hdr);
7945 goto free_msg;
7946 }
7947
7948 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
7949
e35e4d28 7950 err = rdev_probe_client(rdev, dev, addr, &cookie);
7f6cf311
JB		 7951 if (err)
7952 goto free_msg;
7953
9360ffd1
DM		 7954 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
7955 goto nla_put_failure;
7f6cf311
JB		 7956
7957 genlmsg_end(msg, hdr);
7958
7959 return genlmsg_reply(msg, info);
7960
7961 nla_put_failure:
7962 err = -ENOBUFS;
7963 free_msg:
7964 nlmsg_free(msg);
7965 return err;
7966}
7967
5e760230
JB		 7968static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
7969{
7970 struct cfg80211_registered_device *rdev = info->user_ptr[0];
37c73b5f
BG		 7971 struct cfg80211_beacon_registration *reg, *nreg;
7972 int rv;
5e760230
JB		 7973
7974 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
7975 return -EOPNOTSUPP;
7976
37c73b5f
BG		 7977 nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
7978 if (!nreg)
7979 return -ENOMEM;
7980
7981 /* First, check if already registered. */
7982 spin_lock_bh(&rdev->beacon_registrations_lock);
7983 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
7984 if (reg->nlportid == info->snd_portid) {
7985 rv = -EALREADY;
7986 goto out_err;
7987 }
7988 }
7989 /* Add it to the list */
7990 nreg->nlportid = info->snd_portid;
7991 list_add(&nreg->list, &rdev->beacon_registrations);
5e760230 7992
37c73b5f 7993 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 7994
7995 return 0;
37c73b5f
BG		 7996out_err:
7997 spin_unlock_bh(&rdev->beacon_registrations_lock);
7998 kfree(nreg);
7999 return rv;
5e760230
JB		 8000}
8001
98104fde
JB		 8002static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
8003{
8004 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8005 struct wireless_dev *wdev = info->user_ptr[1];
8006 int err;
8007
8008 if (!rdev->ops->start_p2p_device)
8009 return -EOPNOTSUPP;
8010
8011 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
8012 return -EOPNOTSUPP;
8013
8014 if (wdev->p2p_started)
8015 return 0;
8016
8017 mutex_lock(&rdev->devlist_mtx);
8018 err = cfg80211_can_add_interface(rdev, wdev->iftype);
8019 mutex_unlock(&rdev->devlist_mtx);
8020 if (err)
8021 return err;
8022
eeb126e9 8023 err = rdev_start_p2p_device(rdev, wdev);
98104fde
JB		 8024 if (err)
8025 return err;
8026
8027 wdev->p2p_started = true;
8028 mutex_lock(&rdev->devlist_mtx);
8029 rdev->opencount++;
8030 mutex_unlock(&rdev->devlist_mtx);
8031
8032 return 0;
8033}
8034
8035static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
8036{
8037 struct cfg80211_registered_device *rdev = info->user_ptr[0];
8038 struct wireless_dev *wdev = info->user_ptr[1];
8039
8040 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
8041 return -EOPNOTSUPP;
8042
8043 if (!rdev->ops->stop_p2p_device)
8044 return -EOPNOTSUPP;
8045
8046 if (!wdev->p2p_started)
8047 return 0;
8048
eeb126e9 8049 rdev_stop_p2p_device(rdev, wdev);
98104fde
JB		 8050 wdev->p2p_started = false;
8051
8052 mutex_lock(&rdev->devlist_mtx);
8053 rdev->opencount--;
8054 mutex_unlock(&rdev->devlist_mtx);
8055
8056 if (WARN_ON(rdev->scan_req && rdev->scan_req->wdev == wdev)) {
8057 rdev->scan_req->aborted = true;
8058 ___cfg80211_scan_done(rdev, true);
8059 }
8060
8061 return 0;
8062}
8063
3713b4e3
JB		 8064static int nl80211_get_protocol_features(struct sk_buff *skb,
8065 struct genl_info *info)
8066{
8067 void *hdr;
8068 struct sk_buff *msg;
8069
8070 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8071 if (!msg)
8072 return -ENOMEM;
8073
8074 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
8075 NL80211_CMD_GET_PROTOCOL_FEATURES);
8076 if (!hdr)
8077 goto nla_put_failure;
8078
8079 if (nla_put_u32(msg, NL80211_ATTR_PROTOCOL_FEATURES,
8080 NL80211_PROTOCOL_FEATURE_SPLIT_WIPHY_DUMP))
8081 goto nla_put_failure;
8082
8083 genlmsg_end(msg, hdr);
8084 return genlmsg_reply(msg, info);
8085
8086 nla_put_failure:
8087 kfree_skb(msg);
8088 return -ENOBUFS;
8089}
8090
4c476991
JB		 8091#define NL80211_FLAG_NEED_WIPHY 0x01
8092#define NL80211_FLAG_NEED_NETDEV 0x02
8093#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 8094#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
8095#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
8096 NL80211_FLAG_CHECK_NETDEV_UP)
1bf614ef 8097#define NL80211_FLAG_NEED_WDEV 0x10
98104fde 8098/* If a netdev is associated, it must be UP, P2P must be started */
1bf614ef
JB		 8099#define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
8100 NL80211_FLAG_CHECK_NETDEV_UP)
4c476991
JB		 8101
8102static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
8103 struct genl_info *info)
8104{
8105 struct cfg80211_registered_device *rdev;
89a54e48 8106 struct wireless_dev *wdev;
4c476991 8107 struct net_device *dev;
4c476991
JB		 8108 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
8109
8110 if (rtnl)
8111 rtnl_lock();
8112
8113 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
4f7eff10 8114 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
4c476991
JB		 8115 if (IS_ERR(rdev)) {
8116 if (rtnl)
8117 rtnl_unlock();
8118 return PTR_ERR(rdev);
8119 }
8120 info->user_ptr[0] = rdev;
1bf614ef
JB		 8121 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV ||
8122 ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
89a54e48
JB		 8123 mutex_lock(&cfg80211_mutex);
8124 wdev = __cfg80211_wdev_from_attrs(genl_info_net(info),
8125 info->attrs);
8126 if (IS_ERR(wdev)) {
8127 mutex_unlock(&cfg80211_mutex);
4c476991
JB		 8128 if (rtnl)
8129 rtnl_unlock();
89a54e48 8130 return PTR_ERR(wdev);
4c476991 8131 }
89a54e48 8132
89a54e48
JB		 8133 dev = wdev->netdev;
8134 rdev = wiphy_to_dev(wdev->wiphy);
8135
1bf614ef
JB		 8136 if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
8137 if (!dev) {
8138 mutex_unlock(&cfg80211_mutex);
8139 if (rtnl)
8140 rtnl_unlock();
8141 return -EINVAL;
8142 }
8143
8144 info->user_ptr[1] = dev;
8145 } else {
8146 info->user_ptr[1] = wdev;
41265714 8147 }
1bf614ef
JB		 8148
8149 if (dev) {
8150 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
8151 !netif_running(dev)) {
8152 mutex_unlock(&cfg80211_mutex);
8153 if (rtnl)
8154 rtnl_unlock();
8155 return -ENETDOWN;
8156 }
8157
8158 dev_hold(dev);
98104fde
JB		 8159 } else if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP) {
8160 if (!wdev->p2p_started) {
8161 mutex_unlock(&cfg80211_mutex);
8162 if (rtnl)
8163 rtnl_unlock();
8164 return -ENETDOWN;
8165 }
41265714 8166 }
89a54e48 8167
89a54e48
JB		 8168 cfg80211_lock_rdev(rdev);
8169
8170 mutex_unlock(&cfg80211_mutex);
8171
4c476991 8172 info->user_ptr[0] = rdev;
4c476991
JB		 8173 }
8174
8175 return 0;
8176}
8177
8178static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
8179 struct genl_info *info)
8180{
8181 if (info->user_ptr[0])
8182 cfg80211_unlock_rdev(info->user_ptr[0]);
1bf614ef
JB		 8183 if (info->user_ptr[1]) {
8184 if (ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
8185 struct wireless_dev *wdev = info->user_ptr[1];
8186
8187 if (wdev->netdev)
8188 dev_put(wdev->netdev);
8189 } else {
8190 dev_put(info->user_ptr[1]);
8191 }
8192 }
4c476991
JB		 8193 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
8194 rtnl_unlock();
8195}
8196
55682965
JB		 8197static struct genl_ops nl80211_ops[] = {
8198 {
8199 .cmd = NL80211_CMD_GET_WIPHY,
8200 .doit = nl80211_get_wiphy,
8201 .dumpit = nl80211_dump_wiphy,
8202 .policy = nl80211_policy,
8203 /* can be retrieved by unprivileged users */
4c476991 8204 .internal_flags = NL80211_FLAG_NEED_WIPHY,
55682965
JB		 8205 },
8206 {
8207 .cmd = NL80211_CMD_SET_WIPHY,
8208 .doit = nl80211_set_wiphy,
8209 .policy = nl80211_policy,
8210 .flags = GENL_ADMIN_PERM,
4c476991 8211 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 8212 },
8213 {
8214 .cmd = NL80211_CMD_GET_INTERFACE,
8215 .doit = nl80211_get_interface,
8216 .dumpit = nl80211_dump_interface,
8217 .policy = nl80211_policy,
8218 /* can be retrieved by unprivileged users */
72fb2abc 8219 .internal_flags = NL80211_FLAG_NEED_WDEV,
55682965
JB		 8220 },
8221 {
8222 .cmd = NL80211_CMD_SET_INTERFACE,
8223 .doit = nl80211_set_interface,
8224 .policy = nl80211_policy,
8225 .flags = GENL_ADMIN_PERM,
4c476991
JB		 8226 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8227 NL80211_FLAG_NEED_RTNL,
55682965
JB		 8228 },
8229 {
8230 .cmd = NL80211_CMD_NEW_INTERFACE,
8231 .doit = nl80211_new_interface,
8232 .policy = nl80211_policy,
8233 .flags = GENL_ADMIN_PERM,
4c476991
JB		 8234 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8235 NL80211_FLAG_NEED_RTNL,
55682965
JB		 8236 },
8237 {
8238 .cmd = NL80211_CMD_DEL_INTERFACE,
8239 .doit = nl80211_del_interface,
8240 .policy = nl80211_policy,
41ade00f 8241 .flags = GENL_ADMIN_PERM,
84efbb84 8242 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 8243 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 8244 },
8245 {
8246 .cmd = NL80211_CMD_GET_KEY,
8247 .doit = nl80211_get_key,
8248 .policy = nl80211_policy,
8249 .flags = GENL_ADMIN_PERM,
2b5f8b0b 8250 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8251 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 8252 },
8253 {
8254 .cmd = NL80211_CMD_SET_KEY,
8255 .doit = nl80211_set_key,
8256 .policy = nl80211_policy,
8257 .flags = GENL_ADMIN_PERM,
41265714 8258 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8259 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 8260 },
8261 {
8262 .cmd = NL80211_CMD_NEW_KEY,
8263 .doit = nl80211_new_key,
8264 .policy = nl80211_policy,
8265 .flags = GENL_ADMIN_PERM,
41265714 8266 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8267 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 8268 },
8269 {
8270 .cmd = NL80211_CMD_DEL_KEY,
8271 .doit = nl80211_del_key,
8272 .policy = nl80211_policy,
55682965 8273 .flags = GENL_ADMIN_PERM,
41265714 8274 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8275 NL80211_FLAG_NEED_RTNL,
55682965 8276 },
ed1b6cc7
JB		 8277 {
8278 .cmd = NL80211_CMD_SET_BEACON,
8279 .policy = nl80211_policy,
8280 .flags = GENL_ADMIN_PERM,
8860020e 8281 .doit = nl80211_set_beacon,
2b5f8b0b 8282 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8283 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 8284 },
8285 {
8860020e 8286 .cmd = NL80211_CMD_START_AP,
ed1b6cc7
JB		 8287 .policy = nl80211_policy,
8288 .flags = GENL_ADMIN_PERM,
8860020e 8289 .doit = nl80211_start_ap,
2b5f8b0b 8290 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8291 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 8292 },
8293 {
8860020e 8294 .cmd = NL80211_CMD_STOP_AP,
ed1b6cc7
JB		 8295 .policy = nl80211_policy,
8296 .flags = GENL_ADMIN_PERM,
8860020e 8297 .doit = nl80211_stop_ap,
2b5f8b0b 8298 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8299 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 8300 },
5727ef1b
JB		 8301 {
8302 .cmd = NL80211_CMD_GET_STATION,
8303 .doit = nl80211_get_station,
2ec600d6 8304 .dumpit = nl80211_dump_station,
5727ef1b 8305 .policy = nl80211_policy,
4c476991
JB		 8306 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8307 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 8308 },
8309 {
8310 .cmd = NL80211_CMD_SET_STATION,
8311 .doit = nl80211_set_station,
8312 .policy = nl80211_policy,
8313 .flags = GENL_ADMIN_PERM,
2b5f8b0b 8314 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8315 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 8316 },
8317 {
8318 .cmd = NL80211_CMD_NEW_STATION,
8319 .doit = nl80211_new_station,
8320 .policy = nl80211_policy,
8321 .flags = GENL_ADMIN_PERM,
41265714 8322 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8323 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 8324 },
8325 {
8326 .cmd = NL80211_CMD_DEL_STATION,
8327 .doit = nl80211_del_station,
8328 .policy = nl80211_policy,
2ec600d6 8329 .flags = GENL_ADMIN_PERM,
2b5f8b0b 8330 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8331 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 8332 },
8333 {
8334 .cmd = NL80211_CMD_GET_MPATH,
8335 .doit = nl80211_get_mpath,
8336 .dumpit = nl80211_dump_mpath,
8337 .policy = nl80211_policy,
8338 .flags = GENL_ADMIN_PERM,
41265714 8339 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8340 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 8341 },
8342 {
8343 .cmd = NL80211_CMD_SET_MPATH,
8344 .doit = nl80211_set_mpath,
8345 .policy = nl80211_policy,
8346 .flags = GENL_ADMIN_PERM,
41265714 8347 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8348 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 8349 },
8350 {
8351 .cmd = NL80211_CMD_NEW_MPATH,
8352 .doit = nl80211_new_mpath,
8353 .policy = nl80211_policy,
8354 .flags = GENL_ADMIN_PERM,
41265714 8355 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8356 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 8357 },
8358 {
8359 .cmd = NL80211_CMD_DEL_MPATH,
8360 .doit = nl80211_del_mpath,
8361 .policy = nl80211_policy,
9f1ba906 8362 .flags = GENL_ADMIN_PERM,
2b5f8b0b 8363 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8364 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 8365 },
8366 {
8367 .cmd = NL80211_CMD_SET_BSS,
8368 .doit = nl80211_set_bss,
8369 .policy = nl80211_policy,
b2e1b302 8370 .flags = GENL_ADMIN_PERM,
2b5f8b0b 8371 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8372 NL80211_FLAG_NEED_RTNL,
b2e1b302 8373 },
f130347c
LR		 8374 {
8375 .cmd = NL80211_CMD_GET_REG,
8376 .doit = nl80211_get_reg,
8377 .policy = nl80211_policy,
8378 /* can be retrieved by unprivileged users */
8379 },
b2e1b302
LR		 8380 {
8381 .cmd = NL80211_CMD_SET_REG,
8382 .doit = nl80211_set_reg,
8383 .policy = nl80211_policy,
8384 .flags = GENL_ADMIN_PERM,
8385 },
8386 {
8387 .cmd = NL80211_CMD_REQ_SET_REG,
8388 .doit = nl80211_req_set_reg,
8389 .policy = nl80211_policy,
93da9cc1 8390 .flags = GENL_ADMIN_PERM,
8391 },
8392 {
24bdd9f4
JC		 8393 .cmd = NL80211_CMD_GET_MESH_CONFIG,
8394 .doit = nl80211_get_mesh_config,
93da9cc1 8395 .policy = nl80211_policy,
8396 /* can be retrieved by unprivileged users */
2b5f8b0b 8397 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8398 NL80211_FLAG_NEED_RTNL,
93da9cc1 8399 },
8400 {
24bdd9f4
JC		 8401 .cmd = NL80211_CMD_SET_MESH_CONFIG,
8402 .doit = nl80211_update_mesh_config,
93da9cc1 8403 .policy = nl80211_policy,
9aed3cc1 8404 .flags = GENL_ADMIN_PERM,
29cbe68c 8405 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8406 NL80211_FLAG_NEED_RTNL,
9aed3cc1 8407 },
2a519311
JB		 8408 {
8409 .cmd = NL80211_CMD_TRIGGER_SCAN,
8410 .doit = nl80211_trigger_scan,
8411 .policy = nl80211_policy,
8412 .flags = GENL_ADMIN_PERM,
fd014284 8413 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 8414 NL80211_FLAG_NEED_RTNL,
2a519311
JB		 8415 },
8416 {
8417 .cmd = NL80211_CMD_GET_SCAN,
8418 .policy = nl80211_policy,
8419 .dumpit = nl80211_dump_scan,
8420 },
807f8a8c
LC		 8421 {
8422 .cmd = NL80211_CMD_START_SCHED_SCAN,
8423 .doit = nl80211_start_sched_scan,
8424 .policy = nl80211_policy,
8425 .flags = GENL_ADMIN_PERM,
8426 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8427 NL80211_FLAG_NEED_RTNL,
8428 },
8429 {
8430 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
8431 .doit = nl80211_stop_sched_scan,
8432 .policy = nl80211_policy,
8433 .flags = GENL_ADMIN_PERM,
8434 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8435 NL80211_FLAG_NEED_RTNL,
8436 },
636a5d36
JM		 8437 {
8438 .cmd = NL80211_CMD_AUTHENTICATE,
8439 .doit = nl80211_authenticate,
8440 .policy = nl80211_policy,
8441 .flags = GENL_ADMIN_PERM,
41265714 8442 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8443 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 8444 },
8445 {
8446 .cmd = NL80211_CMD_ASSOCIATE,
8447 .doit = nl80211_associate,
8448 .policy = nl80211_policy,
8449 .flags = GENL_ADMIN_PERM,
41265714 8450 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8451 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 8452 },
8453 {
8454 .cmd = NL80211_CMD_DEAUTHENTICATE,
8455 .doit = nl80211_deauthenticate,
8456 .policy = nl80211_policy,
8457 .flags = GENL_ADMIN_PERM,
41265714 8458 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8459 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 8460 },
8461 {
8462 .cmd = NL80211_CMD_DISASSOCIATE,
8463 .doit = nl80211_disassociate,
8464 .policy = nl80211_policy,
8465 .flags = GENL_ADMIN_PERM,
41265714 8466 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8467 NL80211_FLAG_NEED_RTNL,
636a5d36 8468 },
04a773ad
JB		 8469 {
8470 .cmd = NL80211_CMD_JOIN_IBSS,
8471 .doit = nl80211_join_ibss,
8472 .policy = nl80211_policy,
8473 .flags = GENL_ADMIN_PERM,
41265714 8474 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8475 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 8476 },
8477 {
8478 .cmd = NL80211_CMD_LEAVE_IBSS,
8479 .doit = nl80211_leave_ibss,
8480 .policy = nl80211_policy,
8481 .flags = GENL_ADMIN_PERM,
41265714 8482 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8483 NL80211_FLAG_NEED_RTNL,
04a773ad 8484 },
aff89a9b
JB		 8485#ifdef CONFIG_NL80211_TESTMODE
8486 {
8487 .cmd = NL80211_CMD_TESTMODE,
8488 .doit = nl80211_testmode_do,
71063f0e 8489 .dumpit = nl80211_testmode_dump,
aff89a9b
JB		 8490 .policy = nl80211_policy,
8491 .flags = GENL_ADMIN_PERM,
4c476991
JB		 8492 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8493 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 8494 },
8495#endif
b23aa676
SO		 8496 {
8497 .cmd = NL80211_CMD_CONNECT,
8498 .doit = nl80211_connect,
8499 .policy = nl80211_policy,
8500 .flags = GENL_ADMIN_PERM,
41265714 8501 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8502 NL80211_FLAG_NEED_RTNL,
b23aa676
SO		 8503 },
8504 {
8505 .cmd = NL80211_CMD_DISCONNECT,
8506 .doit = nl80211_disconnect,
8507 .policy = nl80211_policy,
8508 .flags = GENL_ADMIN_PERM,
41265714 8509 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8510 NL80211_FLAG_NEED_RTNL,
b23aa676 8511 },
463d0183
JB		 8512 {
8513 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
8514 .doit = nl80211_wiphy_netns,
8515 .policy = nl80211_policy,
8516 .flags = GENL_ADMIN_PERM,
4c476991
JB		 8517 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8518 NL80211_FLAG_NEED_RTNL,
463d0183 8519 },
61fa713c
HS		 8520 {
8521 .cmd = NL80211_CMD_GET_SURVEY,
8522 .policy = nl80211_policy,
8523 .dumpit = nl80211_dump_survey,
8524 },
67fbb16b
SO		 8525 {
8526 .cmd = NL80211_CMD_SET_PMKSA,
8527 .doit = nl80211_setdel_pmksa,
8528 .policy = nl80211_policy,
8529 .flags = GENL_ADMIN_PERM,
2b5f8b0b 8530 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8531 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 8532 },
8533 {
8534 .cmd = NL80211_CMD_DEL_PMKSA,
8535 .doit = nl80211_setdel_pmksa,
8536 .policy = nl80211_policy,
8537 .flags = GENL_ADMIN_PERM,
2b5f8b0b 8538 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8539 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 8540 },
8541 {
8542 .cmd = NL80211_CMD_FLUSH_PMKSA,
8543 .doit = nl80211_flush_pmksa,
8544 .policy = nl80211_policy,
8545 .flags = GENL_ADMIN_PERM,
2b5f8b0b 8546 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 8547 NL80211_FLAG_NEED_RTNL,
67fbb16b 8548 },
9588bbd5
JM		 8549 {
8550 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
8551 .doit = nl80211_remain_on_channel,
8552 .policy = nl80211_policy,
8553 .flags = GENL_ADMIN_PERM,
71bbc994 8554 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 8555 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 8556 },
8557 {
8558 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
8559 .doit = nl80211_cancel_remain_on_channel,
8560 .policy = nl80211_policy,
8561 .flags = GENL_ADMIN_PERM,
71bbc994 8562 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 8563 NL80211_FLAG_NEED_RTNL,
9588bbd5 8564 },
13ae75b1
JM		 8565 {
8566 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
8567 .doit = nl80211_set_tx_bitrate_mask,
8568 .policy = nl80211_policy,
8569 .flags = GENL_ADMIN_PERM,
4c476991
JB		 8570 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8571 NL80211_FLAG_NEED_RTNL,
13ae75b1 8572 },
026331c4 8573 {
2e161f78
JB		 8574 .cmd = NL80211_CMD_REGISTER_FRAME,
8575 .doit = nl80211_register_mgmt,
026331c4
JM		 8576 .policy = nl80211_policy,
8577 .flags = GENL_ADMIN_PERM,
71bbc994 8578 .internal_flags = NL80211_FLAG_NEED_WDEV |
4c476991 8579 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 8580 },
8581 {
2e161f78
JB		 8582 .cmd = NL80211_CMD_FRAME,
8583 .doit = nl80211_tx_mgmt,
026331c4 8584 .policy = nl80211_policy,
f7ca38df 8585 .flags = GENL_ADMIN_PERM,
71bbc994 8586 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
f7ca38df
JB		 8587 NL80211_FLAG_NEED_RTNL,
8588 },
8589 {
8590 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
8591 .doit = nl80211_tx_mgmt_cancel_wait,
8592 .policy = nl80211_policy,
026331c4 8593 .flags = GENL_ADMIN_PERM,
71bbc994 8594 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
4c476991 8595 NL80211_FLAG_NEED_RTNL,
026331c4 8596 },
ffb9eb3d
KV		 8597 {
8598 .cmd = NL80211_CMD_SET_POWER_SAVE,
8599 .doit = nl80211_set_power_save,
8600 .policy = nl80211_policy,
8601 .flags = GENL_ADMIN_PERM,
4c476991
JB		 8602 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8603 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 8604 },
8605 {
8606 .cmd = NL80211_CMD_GET_POWER_SAVE,
8607 .doit = nl80211_get_power_save,
8608 .policy = nl80211_policy,
8609 /* can be retrieved by unprivileged users */
4c476991
JB		 8610 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8611 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 8612 },
d6dc1a38
JO		 8613 {
8614 .cmd = NL80211_CMD_SET_CQM,
8615 .doit = nl80211_set_cqm,
8616 .policy = nl80211_policy,
8617 .flags = GENL_ADMIN_PERM,
4c476991
JB		 8618 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8619 NL80211_FLAG_NEED_RTNL,
d6dc1a38 8620 },
f444de05
JB		 8621 {
8622 .cmd = NL80211_CMD_SET_CHANNEL,
8623 .doit = nl80211_set_channel,
8624 .policy = nl80211_policy,
8625 .flags = GENL_ADMIN_PERM,
4c476991
JB		 8626 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8627 NL80211_FLAG_NEED_RTNL,
f444de05 8628 },
e8347eba
BJ		 8629 {
8630 .cmd = NL80211_CMD_SET_WDS_PEER,
8631 .doit = nl80211_set_wds_peer,
8632 .policy = nl80211_policy,
8633 .flags = GENL_ADMIN_PERM,
43b19952
JB		 8634 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8635 NL80211_FLAG_NEED_RTNL,
e8347eba 8636 },
29cbe68c
JB		 8637 {
8638 .cmd = NL80211_CMD_JOIN_MESH,
8639 .doit = nl80211_join_mesh,
8640 .policy = nl80211_policy,
8641 .flags = GENL_ADMIN_PERM,
8642 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8643 NL80211_FLAG_NEED_RTNL,
8644 },
8645 {
8646 .cmd = NL80211_CMD_LEAVE_MESH,
8647 .doit = nl80211_leave_mesh,
8648 .policy = nl80211_policy,
8649 .flags = GENL_ADMIN_PERM,
8650 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8651 NL80211_FLAG_NEED_RTNL,
8652 },
dfb89c56 8653#ifdef CONFIG_PM
ff1b6e69
JB		 8654 {
8655 .cmd = NL80211_CMD_GET_WOWLAN,
8656 .doit = nl80211_get_wowlan,
8657 .policy = nl80211_policy,
8658 /* can be retrieved by unprivileged users */
8659 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8660 NL80211_FLAG_NEED_RTNL,
8661 },
8662 {
8663 .cmd = NL80211_CMD_SET_WOWLAN,
8664 .doit = nl80211_set_wowlan,
8665 .policy = nl80211_policy,
8666 .flags = GENL_ADMIN_PERM,
8667 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8668 NL80211_FLAG_NEED_RTNL,
8669 },
dfb89c56 8670#endif
e5497d76
JB		 8671 {
8672 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
8673 .doit = nl80211_set_rekey_data,
8674 .policy = nl80211_policy,
8675 .flags = GENL_ADMIN_PERM,
8676 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8677 NL80211_FLAG_NEED_RTNL,
8678 },
109086ce
AN		 8679 {
8680 .cmd = NL80211_CMD_TDLS_MGMT,
8681 .doit = nl80211_tdls_mgmt,
8682 .policy = nl80211_policy,
8683 .flags = GENL_ADMIN_PERM,
8684 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8685 NL80211_FLAG_NEED_RTNL,
8686 },
8687 {
8688 .cmd = NL80211_CMD_TDLS_OPER,
8689 .doit = nl80211_tdls_oper,
8690 .policy = nl80211_policy,
8691 .flags = GENL_ADMIN_PERM,
8692 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8693 NL80211_FLAG_NEED_RTNL,
8694 },
28946da7
JB		 8695 {
8696 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
8697 .doit = nl80211_register_unexpected_frame,
8698 .policy = nl80211_policy,
8699 .flags = GENL_ADMIN_PERM,
8700 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8701 NL80211_FLAG_NEED_RTNL,
8702 },
7f6cf311
JB		 8703 {
8704 .cmd = NL80211_CMD_PROBE_CLIENT,
8705 .doit = nl80211_probe_client,
8706 .policy = nl80211_policy,
8707 .flags = GENL_ADMIN_PERM,
2b5f8b0b 8708 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7f6cf311
JB		 8709 NL80211_FLAG_NEED_RTNL,
8710 },
5e760230
JB		 8711 {
8712 .cmd = NL80211_CMD_REGISTER_BEACONS,
8713 .doit = nl80211_register_beacons,
8714 .policy = nl80211_policy,
8715 .flags = GENL_ADMIN_PERM,
8716 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8717 NL80211_FLAG_NEED_RTNL,
8718 },
1d9d9213
SW		 8719 {
8720 .cmd = NL80211_CMD_SET_NOACK_MAP,
8721 .doit = nl80211_set_noack_map,
8722 .policy = nl80211_policy,
8723 .flags = GENL_ADMIN_PERM,
8724 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8725 NL80211_FLAG_NEED_RTNL,
8726 },
98104fde
JB		 8727 {
8728 .cmd = NL80211_CMD_START_P2P_DEVICE,
8729 .doit = nl80211_start_p2p_device,
8730 .policy = nl80211_policy,
8731 .flags = GENL_ADMIN_PERM,
8732 .internal_flags = NL80211_FLAG_NEED_WDEV |
8733 NL80211_FLAG_NEED_RTNL,
8734 },
8735 {
8736 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
8737 .doit = nl80211_stop_p2p_device,
8738 .policy = nl80211_policy,
8739 .flags = GENL_ADMIN_PERM,
8740 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
8741 NL80211_FLAG_NEED_RTNL,
8742 },
f4e583c8
AQ		 8743 {
8744 .cmd = NL80211_CMD_SET_MCAST_RATE,
8745 .doit = nl80211_set_mcast_rate,
77765eaf
VT		 8746 .policy = nl80211_policy,
8747 .flags = GENL_ADMIN_PERM,
8748 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8749 NL80211_FLAG_NEED_RTNL,
8750 },
8751 {
8752 .cmd = NL80211_CMD_SET_MAC_ACL,
8753 .doit = nl80211_set_mac_acl,
f4e583c8
AQ		 8754 .policy = nl80211_policy,
8755 .flags = GENL_ADMIN_PERM,
8756 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8757 NL80211_FLAG_NEED_RTNL,
8758 },
04f39047
SW		 8759 {
8760 .cmd = NL80211_CMD_RADAR_DETECT,
8761 .doit = nl80211_start_radar_detection,
8762 .policy = nl80211_policy,
8763 .flags = GENL_ADMIN_PERM,
8764 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8765 NL80211_FLAG_NEED_RTNL,
8766 },
3713b4e3
JB		 8767 {
8768 .cmd = NL80211_CMD_GET_PROTOCOL_FEATURES,
8769 .doit = nl80211_get_protocol_features,
8770 .policy = nl80211_policy,
8771 },
55682965 8772};
9588bbd5 8773
6039f6d2
JM		 8774static struct genl_multicast_group nl80211_mlme_mcgrp = {
8775 .name = "mlme",
8776};
55682965
JB		 8777
8778/* multicast groups */
8779static struct genl_multicast_group nl80211_config_mcgrp = {
8780 .name = "config",
8781};
2a519311
JB		 8782static struct genl_multicast_group nl80211_scan_mcgrp = {
8783 .name = "scan",
8784};
73d54c9e
LR		 8785static struct genl_multicast_group nl80211_regulatory_mcgrp = {
8786 .name = "regulatory",
8787};
55682965
JB		 8788
8789/* notification functions */
8790
8791void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
8792{
8793 struct sk_buff *msg;
8794
fd2120ca 8795 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 8796 if (!msg)
8797 return;
8798
3713b4e3
JB		 8799 if (nl80211_send_wiphy(rdev, msg, 0, 0, 0,
8800 false, NULL, NULL, NULL) < 0) {
55682965
JB		 8801 nlmsg_free(msg);
8802 return;
8803 }
8804
463d0183
JB		 8805 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8806 nl80211_config_mcgrp.id, GFP_KERNEL);
55682965
JB		 8807}
8808
362a415d
JB		 8809static int nl80211_add_scan_req(struct sk_buff *msg,
8810 struct cfg80211_registered_device *rdev)
8811{
8812 struct cfg80211_scan_request *req = rdev->scan_req;
8813 struct nlattr *nest;
8814 int i;
8815
667503dd
JB		 8816 ASSERT_RDEV_LOCK(rdev);
8817
362a415d
JB		 8818 if (WARN_ON(!req))
8819 return 0;
8820
8821 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
8822 if (!nest)
8823 goto nla_put_failure;
9360ffd1
DM		 8824 for (i = 0; i < req->n_ssids; i++) {
8825 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
8826 goto nla_put_failure;
8827 }
362a415d
JB		 8828 nla_nest_end(msg, nest);
8829
8830 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
8831 if (!nest)
8832 goto nla_put_failure;
9360ffd1
DM		 8833 for (i = 0; i < req->n_channels; i++) {
8834 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
8835 goto nla_put_failure;
8836 }
362a415d
JB		 8837 nla_nest_end(msg, nest);
8838
9360ffd1
DM		 8839 if (req->ie &&
8840 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
8841 goto nla_put_failure;
362a415d 8842
ed473771
SL		 8843 if (req->flags)
8844 nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags);
8845
362a415d
JB		 8846 return 0;
8847 nla_put_failure:
8848 return -ENOBUFS;
8849}
8850
a538e2d5
JB		 8851static int nl80211_send_scan_msg(struct sk_buff *msg,
8852 struct cfg80211_registered_device *rdev,
fd014284 8853 struct wireless_dev *wdev,
15e47304 8854 u32 portid, u32 seq, int flags,
a538e2d5 8855 u32 cmd)
2a519311
JB		 8856{
8857 void *hdr;
8858
15e47304 8859 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
2a519311
JB		 8860 if (!hdr)
8861 return -1;
8862
9360ffd1 8863 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
fd014284
JB		 8864 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8865 wdev->netdev->ifindex)) ||
8866 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
9360ffd1 8867 goto nla_put_failure;
2a519311 8868
362a415d
JB		 8869 /* ignore errors and send incomplete event anyway */
8870 nl80211_add_scan_req(msg, rdev);
2a519311
JB		 8871
8872 return genlmsg_end(msg, hdr);
8873
8874 nla_put_failure:
8875 genlmsg_cancel(msg, hdr);
8876 return -EMSGSIZE;
8877}
8878
807f8a8c
LC		 8879static int
8880nl80211_send_sched_scan_msg(struct sk_buff *msg,
8881 struct cfg80211_registered_device *rdev,
8882 struct net_device *netdev,
15e47304 8883 u32 portid, u32 seq, int flags, u32 cmd)
807f8a8c
LC		 8884{
8885 void *hdr;
8886
15e47304 8887 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
807f8a8c
LC		 8888 if (!hdr)
8889 return -1;
8890
9360ffd1
DM		 8891 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8892 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
8893 goto nla_put_failure;
807f8a8c
LC		 8894
8895 return genlmsg_end(msg, hdr);
8896
8897 nla_put_failure:
8898 genlmsg_cancel(msg, hdr);
8899 return -EMSGSIZE;
8900}
8901
a538e2d5 8902void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
fd014284 8903 struct wireless_dev *wdev)
a538e2d5
JB		 8904{
8905 struct sk_buff *msg;
8906
58050fce 8907 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
a538e2d5
JB		 8908 if (!msg)
8909 return;
8910
fd014284 8911 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5
JB		 8912 NL80211_CMD_TRIGGER_SCAN) < 0) {
8913 nlmsg_free(msg);
8914 return;
8915 }
8916
463d0183
JB		 8917 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8918 nl80211_scan_mcgrp.id, GFP_KERNEL);
a538e2d5
JB		 8919}
8920
2a519311 8921void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
fd014284 8922 struct wireless_dev *wdev)
2a519311
JB		 8923{
8924 struct sk_buff *msg;
8925
fd2120ca 8926 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 8927 if (!msg)
8928 return;
8929
fd014284 8930 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5 8931 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311
JB		 8932 nlmsg_free(msg);
8933 return;
8934 }
8935
463d0183
JB		 8936 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8937 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 8938}
8939
8940void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
fd014284 8941 struct wireless_dev *wdev)
2a519311
JB		 8942{
8943 struct sk_buff *msg;
8944
fd2120ca 8945 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 8946 if (!msg)
8947 return;
8948
fd014284 8949 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
a538e2d5 8950 NL80211_CMD_SCAN_ABORTED) < 0) {
2a519311
JB		 8951 nlmsg_free(msg);
8952 return;
8953 }
8954
463d0183
JB		 8955 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8956 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 8957}
8958
807f8a8c
LC		 8959void nl80211_send_sched_scan_results(struct cfg80211_registered_device *rdev,
8960 struct net_device *netdev)
8961{
8962 struct sk_buff *msg;
8963
8964 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8965 if (!msg)
8966 return;
8967
8968 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0,
8969 NL80211_CMD_SCHED_SCAN_RESULTS) < 0) {
8970 nlmsg_free(msg);
8971 return;
8972 }
8973
8974 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8975 nl80211_scan_mcgrp.id, GFP_KERNEL);
8976}
8977
8978void nl80211_send_sched_scan(struct cfg80211_registered_device *rdev,
8979 struct net_device *netdev, u32 cmd)
8980{
8981 struct sk_buff *msg;
8982
58050fce 8983 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
807f8a8c
LC		 8984 if (!msg)
8985 return;
8986
8987 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0, cmd) < 0) {
8988 nlmsg_free(msg);
8989 return;
8990 }
8991
8992 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8993 nl80211_scan_mcgrp.id, GFP_KERNEL);
8994}
8995
73d54c9e
LR		 8996/*
8997 * This can happen on global regulatory changes or device specific settings
8998 * based on custom world regulatory domains.
8999 */
9000void nl80211_send_reg_change_event(struct regulatory_request *request)
9001{
9002 struct sk_buff *msg;
9003 void *hdr;
9004
fd2120ca 9005 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
73d54c9e
LR		 9006 if (!msg)
9007 return;
9008
9009 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
9010 if (!hdr) {
9011 nlmsg_free(msg);
9012 return;
9013 }
9014
9015 /* Userspace can always count this one always being set */
9360ffd1
DM		 9016 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
9017 goto nla_put_failure;
9018
9019 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
9020 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
9021 NL80211_REGDOM_TYPE_WORLD))
9022 goto nla_put_failure;
9023 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
9024 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
9025 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
9026 goto nla_put_failure;
9027 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
9028 request->intersect) {
9029 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
9030 NL80211_REGDOM_TYPE_INTERSECTION))
9031 goto nla_put_failure;
9032 } else {
9033 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
9034 NL80211_REGDOM_TYPE_COUNTRY) ||
9035 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
9036 request->alpha2))
9037 goto nla_put_failure;
9038 }
9039
f4173766 9040 if (request->wiphy_idx != WIPHY_IDX_INVALID &&
9360ffd1
DM		 9041 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
9042 goto nla_put_failure;
73d54c9e 9043
3b7b72ee 9044 genlmsg_end(msg, hdr);
73d54c9e 9045
bc43b28c 9046 rcu_read_lock();
463d0183 9047 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
bc43b28c
JB		 9048 GFP_ATOMIC);
9049 rcu_read_unlock();
73d54c9e
LR		 9050
9051 return;
9052
9053nla_put_failure:
9054 genlmsg_cancel(msg, hdr);
9055 nlmsg_free(msg);
9056}
9057
6039f6d2
JM		 9058static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
9059 struct net_device *netdev,
9060 const u8 *buf, size_t len,
e6d6e342 9061 enum nl80211_commands cmd, gfp_t gfp)
6039f6d2
JM		 9062{
9063 struct sk_buff *msg;
9064 void *hdr;
9065
e6d6e342 9066 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6039f6d2
JM		 9067 if (!msg)
9068 return;
9069
9070 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
9071 if (!hdr) {
9072 nlmsg_free(msg);
9073 return;
9074 }
9075
9360ffd1
DM		 9076 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9077 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9078 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
9079 goto nla_put_failure;
6039f6d2 9080
3b7b72ee 9081 genlmsg_end(msg, hdr);
6039f6d2 9082
463d0183
JB		 9083 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9084 nl80211_mlme_mcgrp.id, gfp);
6039f6d2
JM		 9085 return;
9086
9087 nla_put_failure:
9088 genlmsg_cancel(msg, hdr);
9089 nlmsg_free(msg);
9090}
9091
9092void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 9093 struct net_device *netdev, const u8 *buf,
9094 size_t len, gfp_t gfp)
6039f6d2
JM		 9095{
9096 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 9097 NL80211_CMD_AUTHENTICATE, gfp);
6039f6d2
JM		 9098}
9099
9100void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
9101 struct net_device *netdev, const u8 *buf,
e6d6e342 9102 size_t len, gfp_t gfp)
6039f6d2 9103{
e6d6e342
JB		 9104 nl80211_send_mlme_event(rdev, netdev, buf, len,
9105 NL80211_CMD_ASSOCIATE, gfp);
6039f6d2
JM		 9106}
9107
53b46b84 9108void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 9109 struct net_device *netdev, const u8 *buf,
9110 size_t len, gfp_t gfp)
6039f6d2
JM		 9111{
9112 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 9113 NL80211_CMD_DEAUTHENTICATE, gfp);
6039f6d2
JM		 9114}
9115
53b46b84
JM		 9116void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
9117 struct net_device *netdev, const u8 *buf,
e6d6e342 9118 size_t len, gfp_t gfp)
6039f6d2
JM		 9119{
9120 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 9121 NL80211_CMD_DISASSOCIATE, gfp);
6039f6d2
JM		 9122}
9123
cf4e594e
JM		 9124void nl80211_send_unprot_deauth(struct cfg80211_registered_device *rdev,
9125 struct net_device *netdev, const u8 *buf,
9126 size_t len, gfp_t gfp)
9127{
9128 nl80211_send_mlme_event(rdev, netdev, buf, len,
9129 NL80211_CMD_UNPROT_DEAUTHENTICATE, gfp);
9130}
9131
9132void nl80211_send_unprot_disassoc(struct cfg80211_registered_device *rdev,
9133 struct net_device *netdev, const u8 *buf,
9134 size_t len, gfp_t gfp)
9135{
9136 nl80211_send_mlme_event(rdev, netdev, buf, len,
9137 NL80211_CMD_UNPROT_DISASSOCIATE, gfp);
9138}
9139
1b06bb40
LR		 9140static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
9141 struct net_device *netdev, int cmd,
e6d6e342 9142 const u8 *addr, gfp_t gfp)
1965c853
JM		 9143{
9144 struct sk_buff *msg;
9145 void *hdr;
9146
e6d6e342 9147 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 9148 if (!msg)
9149 return;
9150
9151 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
9152 if (!hdr) {
9153 nlmsg_free(msg);
9154 return;
9155 }
9156
9360ffd1
DM		 9157 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9158 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9159 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
9160 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
9161 goto nla_put_failure;
1965c853 9162
3b7b72ee 9163 genlmsg_end(msg, hdr);
1965c853 9164
463d0183
JB		 9165 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9166 nl80211_mlme_mcgrp.id, gfp);
1965c853
JM		 9167 return;
9168
9169 nla_put_failure:
9170 genlmsg_cancel(msg, hdr);
9171 nlmsg_free(msg);
9172}
9173
9174void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 9175 struct net_device *netdev, const u8 *addr,
9176 gfp_t gfp)
1965c853
JM		 9177{
9178 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 9179 addr, gfp);
1965c853
JM		 9180}
9181
9182void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 9183 struct net_device *netdev, const u8 *addr,
9184 gfp_t gfp)
1965c853 9185{
e6d6e342
JB		 9186 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
9187 addr, gfp);
1965c853
JM		 9188}
9189
b23aa676
SO		 9190void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
9191 struct net_device *netdev, const u8 *bssid,
9192 const u8 *req_ie, size_t req_ie_len,
9193 const u8 *resp_ie, size_t resp_ie_len,
9194 u16 status, gfp_t gfp)
9195{
9196 struct sk_buff *msg;
9197 void *hdr;
9198
58050fce 9199 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
b23aa676
SO		 9200 if (!msg)
9201 return;
9202
9203 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
9204 if (!hdr) {
9205 nlmsg_free(msg);
9206 return;
9207 }
9208
9360ffd1
DM		 9209 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9210 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9211 (bssid && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid)) ||
9212 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE, status) ||
9213 (req_ie &&
9214 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
9215 (resp_ie &&
9216 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
9217 goto nla_put_failure;
b23aa676 9218
3b7b72ee 9219 genlmsg_end(msg, hdr);
b23aa676 9220
463d0183
JB		 9221 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9222 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 9223 return;
9224
9225 nla_put_failure:
9226 genlmsg_cancel(msg, hdr);
9227 nlmsg_free(msg);
9228
9229}
9230
9231void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
9232 struct net_device *netdev, const u8 *bssid,
9233 const u8 *req_ie, size_t req_ie_len,
9234 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
9235{
9236 struct sk_buff *msg;
9237 void *hdr;
9238
58050fce 9239 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
b23aa676
SO		 9240 if (!msg)
9241 return;
9242
9243 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
9244 if (!hdr) {
9245 nlmsg_free(msg);
9246 return;
9247 }
9248
9360ffd1
DM		 9249 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9250 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9251 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
9252 (req_ie &&
9253 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
9254 (resp_ie &&
9255 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
9256 goto nla_put_failure;
b23aa676 9257
3b7b72ee 9258 genlmsg_end(msg, hdr);
b23aa676 9259
463d0183
JB		 9260 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9261 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 9262 return;
9263
9264 nla_put_failure:
9265 genlmsg_cancel(msg, hdr);
9266 nlmsg_free(msg);
9267
9268}
9269
9270void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
9271 struct net_device *netdev, u16 reason,
667503dd 9272 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 9273{
9274 struct sk_buff *msg;
9275 void *hdr;
9276
58050fce 9277 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
b23aa676
SO		 9278 if (!msg)
9279 return;
9280
9281 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
9282 if (!hdr) {
9283 nlmsg_free(msg);
9284 return;
9285 }
9286
9360ffd1
DM		 9287 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9288 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9289 (from_ap && reason &&
9290 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
9291 (from_ap &&
9292 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
9293 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
9294 goto nla_put_failure;
b23aa676 9295
3b7b72ee 9296 genlmsg_end(msg, hdr);
b23aa676 9297
463d0183
JB		 9298 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9299 nl80211_mlme_mcgrp.id, GFP_KERNEL);
b23aa676
SO		 9300 return;
9301
9302 nla_put_failure:
9303 genlmsg_cancel(msg, hdr);
9304 nlmsg_free(msg);
9305
9306}
9307
04a773ad
JB		 9308void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
9309 struct net_device *netdev, const u8 *bssid,
9310 gfp_t gfp)
9311{
9312 struct sk_buff *msg;
9313 void *hdr;
9314
fd2120ca 9315 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 9316 if (!msg)
9317 return;
9318
9319 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
9320 if (!hdr) {
9321 nlmsg_free(msg);
9322 return;
9323 }
9324
9360ffd1
DM		 9325 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9326 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9327 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
9328 goto nla_put_failure;
04a773ad 9329
3b7b72ee 9330 genlmsg_end(msg, hdr);
04a773ad 9331
463d0183
JB		 9332 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9333 nl80211_mlme_mcgrp.id, gfp);
04a773ad
JB		 9334 return;
9335
9336 nla_put_failure:
9337 genlmsg_cancel(msg, hdr);
9338 nlmsg_free(msg);
9339}
9340
c93b5e71
JC		 9341void nl80211_send_new_peer_candidate(struct cfg80211_registered_device *rdev,
9342 struct net_device *netdev,
9343 const u8 *macaddr, const u8* ie, u8 ie_len,
9344 gfp_t gfp)
9345{
9346 struct sk_buff *msg;
9347 void *hdr;
9348
9349 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9350 if (!msg)
9351 return;
9352
9353 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
9354 if (!hdr) {
9355 nlmsg_free(msg);
9356 return;
9357 }
9358
9360ffd1
DM		 9359 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9360 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9361 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, macaddr) ||
9362 (ie_len && ie &&
9363 nla_put(msg, NL80211_ATTR_IE, ie_len , ie)))
9364 goto nla_put_failure;
c93b5e71 9365
3b7b72ee 9366 genlmsg_end(msg, hdr);
c93b5e71
JC		 9367
9368 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9369 nl80211_mlme_mcgrp.id, gfp);
9370 return;
9371
9372 nla_put_failure:
9373 genlmsg_cancel(msg, hdr);
9374 nlmsg_free(msg);
9375}
9376
a3b8b056
JM		 9377void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
9378 struct net_device *netdev, const u8 *addr,
9379 enum nl80211_key_type key_type, int key_id,
e6d6e342 9380 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 9381{
9382 struct sk_buff *msg;
9383 void *hdr;
9384
e6d6e342 9385 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 9386 if (!msg)
9387 return;
9388
9389 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
9390 if (!hdr) {
9391 nlmsg_free(msg);
9392 return;
9393 }
9394
9360ffd1
DM		 9395 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9396 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9397 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
9398 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
9399 (key_id != -1 &&
9400 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
9401 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
9402 goto nla_put_failure;
a3b8b056 9403
3b7b72ee 9404 genlmsg_end(msg, hdr);
a3b8b056 9405
463d0183
JB		 9406 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9407 nl80211_mlme_mcgrp.id, gfp);
a3b8b056
JM		 9408 return;
9409
9410 nla_put_failure:
9411 genlmsg_cancel(msg, hdr);
9412 nlmsg_free(msg);
9413}
9414
6bad8766
LR		 9415void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
9416 struct ieee80211_channel *channel_before,
9417 struct ieee80211_channel *channel_after)
9418{
9419 struct sk_buff *msg;
9420 void *hdr;
9421 struct nlattr *nl_freq;
9422
fd2120ca 9423 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 9424 if (!msg)
9425 return;
9426
9427 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
9428 if (!hdr) {
9429 nlmsg_free(msg);
9430 return;
9431 }
9432
9433 /*
9434 * Since we are applying the beacon hint to a wiphy we know its
9435 * wiphy_idx is valid
9436 */
9360ffd1
DM		 9437 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
9438 goto nla_put_failure;
6bad8766
LR		 9439
9440 /* Before */
9441 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
9442 if (!nl_freq)
9443 goto nla_put_failure;
cdc89b97 9444 if (nl80211_msg_put_channel(msg, channel_before, false))
6bad8766
LR		 9445 goto nla_put_failure;
9446 nla_nest_end(msg, nl_freq);
9447
9448 /* After */
9449 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
9450 if (!nl_freq)
9451 goto nla_put_failure;
cdc89b97 9452 if (nl80211_msg_put_channel(msg, channel_after, false))
6bad8766
LR		 9453 goto nla_put_failure;
9454 nla_nest_end(msg, nl_freq);
9455
3b7b72ee 9456 genlmsg_end(msg, hdr);
6bad8766 9457
463d0183
JB		 9458 rcu_read_lock();
9459 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
9460 GFP_ATOMIC);
9461 rcu_read_unlock();
6bad8766
LR		 9462
9463 return;
9464
9465nla_put_failure:
9466 genlmsg_cancel(msg, hdr);
9467 nlmsg_free(msg);
9468}
9469
9588bbd5
JM		 9470static void nl80211_send_remain_on_chan_event(
9471 int cmd, struct cfg80211_registered_device *rdev,
71bbc994 9472 struct wireless_dev *wdev, u64 cookie,
9588bbd5 9473 struct ieee80211_channel *chan,
9588bbd5
JM		 9474 unsigned int duration, gfp_t gfp)
9475{
9476 struct sk_buff *msg;
9477 void *hdr;
9478
9479 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9480 if (!msg)
9481 return;
9482
9483 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
9484 if (!hdr) {
9485 nlmsg_free(msg);
9486 return;
9487 }
9488
9360ffd1 9489 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 9490 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
9491 wdev->netdev->ifindex)) ||
00f53350 9492 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
9360ffd1 9493 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
42d97a59
JB		 9494 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
9495 NL80211_CHAN_NO_HT) ||
9360ffd1
DM		 9496 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
9497 goto nla_put_failure;
9588bbd5 9498
9360ffd1
DM		 9499 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
9500 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
9501 goto nla_put_failure;
9588bbd5 9502
3b7b72ee 9503 genlmsg_end(msg, hdr);
9588bbd5
JM		 9504
9505 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9506 nl80211_mlme_mcgrp.id, gfp);
9507 return;
9508
9509 nla_put_failure:
9510 genlmsg_cancel(msg, hdr);
9511 nlmsg_free(msg);
9512}
9513
9514void nl80211_send_remain_on_channel(struct cfg80211_registered_device *rdev,
71bbc994 9515 struct wireless_dev *wdev, u64 cookie,
9588bbd5 9516 struct ieee80211_channel *chan,
9588bbd5
JM		 9517 unsigned int duration, gfp_t gfp)
9518{
9519 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
71bbc994 9520 rdev, wdev, cookie, chan,
42d97a59 9521 duration, gfp);
9588bbd5
JM		 9522}
9523
9524void nl80211_send_remain_on_channel_cancel(
71bbc994
JB		 9525 struct cfg80211_registered_device *rdev,
9526 struct wireless_dev *wdev,
42d97a59 9527 u64 cookie, struct ieee80211_channel *chan, gfp_t gfp)
9588bbd5
JM		 9528{
9529 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
42d97a59 9530 rdev, wdev, cookie, chan, 0, gfp);
9588bbd5
JM		 9531}
9532
98b62183
JB		 9533void nl80211_send_sta_event(struct cfg80211_registered_device *rdev,
9534 struct net_device *dev, const u8 *mac_addr,
9535 struct station_info *sinfo, gfp_t gfp)
9536{
9537 struct sk_buff *msg;
9538
58050fce 9539 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
98b62183
JB		 9540 if (!msg)
9541 return;
9542
66266b3a
JL		 9543 if (nl80211_send_station(msg, 0, 0, 0,
9544 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 9545 nlmsg_free(msg);
9546 return;
9547 }
9548
9549 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9550 nl80211_mlme_mcgrp.id, gfp);
9551}
9552
ec15e68b
JM		 9553void nl80211_send_sta_del_event(struct cfg80211_registered_device *rdev,
9554 struct net_device *dev, const u8 *mac_addr,
9555 gfp_t gfp)
9556{
9557 struct sk_buff *msg;
9558 void *hdr;
9559
58050fce 9560 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
ec15e68b
JM		 9561 if (!msg)
9562 return;
9563
9564 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_STATION);
9565 if (!hdr) {
9566 nlmsg_free(msg);
9567 return;
9568 }
9569
9360ffd1
DM		 9570 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
9571 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
9572 goto nla_put_failure;
ec15e68b 9573
3b7b72ee 9574 genlmsg_end(msg, hdr);
ec15e68b
JM		 9575
9576 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9577 nl80211_mlme_mcgrp.id, gfp);
9578 return;
9579
9580 nla_put_failure:
9581 genlmsg_cancel(msg, hdr);
9582 nlmsg_free(msg);
9583}
9584
ed44a951
PP		 9585void nl80211_send_conn_failed_event(struct cfg80211_registered_device *rdev,
9586 struct net_device *dev, const u8 *mac_addr,
9587 enum nl80211_connect_failed_reason reason,
9588 gfp_t gfp)
9589{
9590 struct sk_buff *msg;
9591 void *hdr;
9592
9593 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
9594 if (!msg)
9595 return;
9596
9597 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
9598 if (!hdr) {
9599 nlmsg_free(msg);
9600 return;
9601 }
9602
9603 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
9604 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
9605 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
9606 goto nla_put_failure;
9607
9608 genlmsg_end(msg, hdr);
9609
9610 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9611 nl80211_mlme_mcgrp.id, gfp);
9612 return;
9613
9614 nla_put_failure:
9615 genlmsg_cancel(msg, hdr);
9616 nlmsg_free(msg);
9617}
9618
b92ab5d8
JB		 9619static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
9620 const u8 *addr, gfp_t gfp)
28946da7
JB		 9621{
9622 struct wireless_dev *wdev = dev->ieee80211_ptr;
9623 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
9624 struct sk_buff *msg;
9625 void *hdr;
9626 int err;
15e47304 9627 u32 nlportid = ACCESS_ONCE(wdev->ap_unexpected_nlportid);
28946da7 9628
15e47304 9629 if (!nlportid)
28946da7
JB		 9630 return false;
9631
9632 msg = nlmsg_new(100, gfp);
9633 if (!msg)
9634 return true;
9635
b92ab5d8 9636 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 9637 if (!hdr) {
9638 nlmsg_free(msg);
9639 return true;
9640 }
9641
9360ffd1
DM		 9642 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9643 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
9644 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
9645 goto nla_put_failure;
28946da7
JB		 9646
9647 err = genlmsg_end(msg, hdr);
9648 if (err < 0) {
9649 nlmsg_free(msg);
9650 return true;
9651 }
9652
15e47304 9653 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
28946da7
JB		 9654 return true;
9655
9656 nla_put_failure:
9657 genlmsg_cancel(msg, hdr);
9658 nlmsg_free(msg);
9659 return true;
9660}
9661
b92ab5d8
JB		 9662bool nl80211_unexpected_frame(struct net_device *dev, const u8 *addr, gfp_t gfp)
9663{
9664 return __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
9665 addr, gfp);
9666}
9667
9668bool nl80211_unexpected_4addr_frame(struct net_device *dev,
9669 const u8 *addr, gfp_t gfp)
9670{
9671 return __nl80211_unexpected_frame(dev,
9672 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
9673 addr, gfp);
9674}
9675
2e161f78 9676int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
15e47304 9677 struct wireless_dev *wdev, u32 nlportid,
804483e9
JB		 9678 int freq, int sig_dbm,
9679 const u8 *buf, size_t len, gfp_t gfp)
026331c4 9680{
71bbc994 9681 struct net_device *netdev = wdev->netdev;
026331c4
JM		 9682 struct sk_buff *msg;
9683 void *hdr;
026331c4
JM		 9684
9685 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9686 if (!msg)
9687 return -ENOMEM;
9688
2e161f78 9689 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 9690 if (!hdr) {
9691 nlmsg_free(msg);
9692 return -ENOMEM;
9693 }
9694
9360ffd1 9695 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 9696 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
9697 netdev->ifindex)) ||
9360ffd1
DM		 9698 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
9699 (sig_dbm &&
9700 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
9701 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
9702 goto nla_put_failure;
026331c4 9703
3b7b72ee 9704 genlmsg_end(msg, hdr);
026331c4 9705
15e47304 9706 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
026331c4
JM		 9707
9708 nla_put_failure:
9709 genlmsg_cancel(msg, hdr);
9710 nlmsg_free(msg);
9711 return -ENOBUFS;
9712}
9713
2e161f78 9714void nl80211_send_mgmt_tx_status(struct cfg80211_registered_device *rdev,
71bbc994 9715 struct wireless_dev *wdev, u64 cookie,
2e161f78
JB		 9716 const u8 *buf, size_t len, bool ack,
9717 gfp_t gfp)
026331c4 9718{
71bbc994 9719 struct net_device *netdev = wdev->netdev;
026331c4
JM		 9720 struct sk_buff *msg;
9721 void *hdr;
9722
9723 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9724 if (!msg)
9725 return;
9726
2e161f78 9727 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
026331c4
JM		 9728 if (!hdr) {
9729 nlmsg_free(msg);
9730 return;
9731 }
9732
9360ffd1 9733 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
71bbc994
JB		 9734 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
9735 netdev->ifindex)) ||
9360ffd1
DM		 9736 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
9737 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
9738 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
9739 goto nla_put_failure;
026331c4 9740
3b7b72ee 9741 genlmsg_end(msg, hdr);
026331c4
JM		 9742
9743 genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
9744 return;
9745
9746 nla_put_failure:
9747 genlmsg_cancel(msg, hdr);
9748 nlmsg_free(msg);
9749}
9750
d6dc1a38
JO		 9751void
9752nl80211_send_cqm_rssi_notify(struct cfg80211_registered_device *rdev,
9753 struct net_device *netdev,
9754 enum nl80211_cqm_rssi_threshold_event rssi_event,
9755 gfp_t gfp)
9756{
9757 struct sk_buff *msg;
9758 struct nlattr *pinfoattr;
9759 void *hdr;
9760
58050fce 9761 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
d6dc1a38
JO		 9762 if (!msg)
9763 return;
9764
9765 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
9766 if (!hdr) {
9767 nlmsg_free(msg);
9768 return;
9769 }
9770
9360ffd1
DM		 9771 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9772 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
9773 goto nla_put_failure;
d6dc1a38
JO		 9774
9775 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
9776 if (!pinfoattr)
9777 goto nla_put_failure;
9778
9360ffd1
DM		 9779 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
9780 rssi_event))
9781 goto nla_put_failure;
d6dc1a38
JO		 9782
9783 nla_nest_end(msg, pinfoattr);
9784
3b7b72ee 9785 genlmsg_end(msg, hdr);
d6dc1a38
JO		 9786
9787 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9788 nl80211_mlme_mcgrp.id, gfp);
9789 return;
9790
9791 nla_put_failure:
9792 genlmsg_cancel(msg, hdr);
9793 nlmsg_free(msg);
9794}
9795
e5497d76
JB		 9796void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
9797 struct net_device *netdev, const u8 *bssid,
9798 const u8 *replay_ctr, gfp_t gfp)
9799{
9800 struct sk_buff *msg;
9801 struct nlattr *rekey_attr;
9802 void *hdr;
9803
58050fce 9804 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
e5497d76
JB		 9805 if (!msg)
9806 return;
9807
9808 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
9809 if (!hdr) {
9810 nlmsg_free(msg);
9811 return;
9812 }
9813
9360ffd1
DM		 9814 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9815 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9816 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
9817 goto nla_put_failure;
e5497d76
JB		 9818
9819 rekey_attr = nla_nest_start(msg, NL80211_ATTR_REKEY_DATA);
9820 if (!rekey_attr)
9821 goto nla_put_failure;
9822
9360ffd1
DM		 9823 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
9824 NL80211_REPLAY_CTR_LEN, replay_ctr))
9825 goto nla_put_failure;
e5497d76
JB		 9826
9827 nla_nest_end(msg, rekey_attr);
9828
3b7b72ee 9829 genlmsg_end(msg, hdr);
e5497d76
JB		 9830
9831 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9832 nl80211_mlme_mcgrp.id, gfp);
9833 return;
9834
9835 nla_put_failure:
9836 genlmsg_cancel(msg, hdr);
9837 nlmsg_free(msg);
9838}
9839
c9df56b4
JM		 9840void nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
9841 struct net_device *netdev, int index,
9842 const u8 *bssid, bool preauth, gfp_t gfp)
9843{
9844 struct sk_buff *msg;
9845 struct nlattr *attr;
9846 void *hdr;
9847
58050fce 9848 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c9df56b4
JM		 9849 if (!msg)
9850 return;
9851
9852 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
9853 if (!hdr) {
9854 nlmsg_free(msg);
9855 return;
9856 }
9857
9360ffd1
DM		 9858 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9859 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
9860 goto nla_put_failure;
c9df56b4
JM		 9861
9862 attr = nla_nest_start(msg, NL80211_ATTR_PMKSA_CANDIDATE);
9863 if (!attr)
9864 goto nla_put_failure;
9865
9360ffd1
DM		 9866 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
9867 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
9868 (preauth &&
9869 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
9870 goto nla_put_failure;
c9df56b4
JM		 9871
9872 nla_nest_end(msg, attr);
9873
3b7b72ee 9874 genlmsg_end(msg, hdr);
c9df56b4
JM		 9875
9876 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9877 nl80211_mlme_mcgrp.id, gfp);
9878 return;
9879
9880 nla_put_failure:
9881 genlmsg_cancel(msg, hdr);
9882 nlmsg_free(msg);
9883}
9884
5314526b 9885void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
683b6d3b
JB		 9886 struct net_device *netdev,
9887 struct cfg80211_chan_def *chandef, gfp_t gfp)
5314526b
TP		 9888{
9889 struct sk_buff *msg;
9890 void *hdr;
9891
58050fce 9892 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
5314526b
TP		 9893 if (!msg)
9894 return;
9895
9896 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CH_SWITCH_NOTIFY);
9897 if (!hdr) {
9898 nlmsg_free(msg);
9899 return;
9900 }
9901
683b6d3b
JB		 9902 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
9903 goto nla_put_failure;
9904
9905 if (nl80211_send_chandef(msg, chandef))
7eab0f64 9906 goto nla_put_failure;
5314526b
TP		 9907
9908 genlmsg_end(msg, hdr);
9909
9910 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9911 nl80211_mlme_mcgrp.id, gfp);
9912 return;
9913
9914 nla_put_failure:
9915 genlmsg_cancel(msg, hdr);
9916 nlmsg_free(msg);
9917}
9918
84f10708
TP		 9919void
9920nl80211_send_cqm_txe_notify(struct cfg80211_registered_device *rdev,
9921 struct net_device *netdev, const u8 *peer,
9922 u32 num_packets, u32 rate, u32 intvl, gfp_t gfp)
9923{
9924 struct sk_buff *msg;
9925 struct nlattr *pinfoattr;
9926 void *hdr;
9927
9928 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
9929 if (!msg)
9930 return;
9931
9932 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
9933 if (!hdr) {
9934 nlmsg_free(msg);
9935 return;
9936 }
9937
9938 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9939 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9940 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer))
9941 goto nla_put_failure;
9942
9943 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
9944 if (!pinfoattr)
9945 goto nla_put_failure;
9946
9947 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
9948 goto nla_put_failure;
9949
9950 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
9951 goto nla_put_failure;
9952
9953 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
9954 goto nla_put_failure;
9955
9956 nla_nest_end(msg, pinfoattr);
9957
9958 genlmsg_end(msg, hdr);
9959
9960 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9961 nl80211_mlme_mcgrp.id, gfp);
9962 return;
9963
9964 nla_put_failure:
9965 genlmsg_cancel(msg, hdr);
9966 nlmsg_free(msg);
9967}
9968
04f39047
SW		 9969void
9970nl80211_radar_notify(struct cfg80211_registered_device *rdev,
9971 struct cfg80211_chan_def *chandef,
9972 enum nl80211_radar_event event,
9973 struct net_device *netdev, gfp_t gfp)
9974{
9975 struct sk_buff *msg;
9976 void *hdr;
9977
9978 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9979 if (!msg)
9980 return;
9981
9982 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_RADAR_DETECT);
9983 if (!hdr) {
9984 nlmsg_free(msg);
9985 return;
9986 }
9987
9988 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
9989 goto nla_put_failure;
9990
9991 /* NOP and radar events don't need a netdev parameter */
9992 if (netdev) {
9993 struct wireless_dev *wdev = netdev->ieee80211_ptr;
9994
9995 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9996 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
9997 goto nla_put_failure;
9998 }
9999
10000 if (nla_put_u32(msg, NL80211_ATTR_RADAR_EVENT, event))
10001 goto nla_put_failure;
10002
10003 if (nl80211_send_chandef(msg, chandef))
10004 goto nla_put_failure;
10005
10006 if (genlmsg_end(msg, hdr) < 0) {
10007 nlmsg_free(msg);
10008 return;
10009 }
10010
10011 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
10012 nl80211_mlme_mcgrp.id, gfp);
10013 return;
10014
10015 nla_put_failure:
10016 genlmsg_cancel(msg, hdr);
10017 nlmsg_free(msg);
10018}
10019
c063dbf5
JB		 10020void
10021nl80211_send_cqm_pktloss_notify(struct cfg80211_registered_device *rdev,
10022 struct net_device *netdev, const u8 *peer,
10023 u32 num_packets, gfp_t gfp)
10024{
10025 struct sk_buff *msg;
10026 struct nlattr *pinfoattr;
10027 void *hdr;
10028
58050fce 10029 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
c063dbf5
JB		 10030 if (!msg)
10031 return;
10032
10033 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
10034 if (!hdr) {
10035 nlmsg_free(msg);
10036 return;
10037 }
10038
9360ffd1
DM		 10039 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
10040 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
10041 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer))
10042 goto nla_put_failure;
c063dbf5
JB		 10043
10044 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
10045 if (!pinfoattr)
10046 goto nla_put_failure;
10047
9360ffd1
DM		 10048 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
10049 goto nla_put_failure;
c063dbf5
JB		 10050
10051 nla_nest_end(msg, pinfoattr);
10052
3b7b72ee 10053 genlmsg_end(msg, hdr);
c063dbf5
JB		 10054
10055 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
10056 nl80211_mlme_mcgrp.id, gfp);
10057 return;
10058
10059 nla_put_failure:
10060 genlmsg_cancel(msg, hdr);
10061 nlmsg_free(msg);
10062}
10063
7f6cf311
JB		 10064void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
10065 u64 cookie, bool acked, gfp_t gfp)
10066{
10067 struct wireless_dev *wdev = dev->ieee80211_ptr;
10068 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
10069 struct sk_buff *msg;
10070 void *hdr;
10071 int err;
10072
4ee3e063
BL		 10073 trace_cfg80211_probe_status(dev, addr, cookie, acked);
10074
58050fce 10075 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
4ee3e063 10076
7f6cf311
JB		 10077 if (!msg)
10078 return;
10079
10080 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
10081 if (!hdr) {
10082 nlmsg_free(msg);
10083 return;
10084 }
10085
9360ffd1
DM		 10086 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
10087 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
10088 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
10089 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
10090 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)))
10091 goto nla_put_failure;
7f6cf311
JB		 10092
10093 err = genlmsg_end(msg, hdr);
10094 if (err < 0) {
10095 nlmsg_free(msg);
10096 return;
10097 }
10098
10099 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
10100 nl80211_mlme_mcgrp.id, gfp);
10101 return;
10102
10103 nla_put_failure:
10104 genlmsg_cancel(msg, hdr);
10105 nlmsg_free(msg);
10106}
10107EXPORT_SYMBOL(cfg80211_probe_status);
10108
5e760230
JB		 10109void cfg80211_report_obss_beacon(struct wiphy *wiphy,
10110 const u8 *frame, size_t len,
37c73b5f 10111 int freq, int sig_dbm)
5e760230
JB		 10112{
10113 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
10114 struct sk_buff *msg;
10115 void *hdr;
37c73b5f 10116 struct cfg80211_beacon_registration *reg;
5e760230 10117
4ee3e063
BL		 10118 trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
10119
37c73b5f
BG		 10120 spin_lock_bh(&rdev->beacon_registrations_lock);
10121 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
10122 msg = nlmsg_new(len + 100, GFP_ATOMIC);
10123 if (!msg) {
10124 spin_unlock_bh(&rdev->beacon_registrations_lock);
10125 return;
10126 }
5e760230 10127
37c73b5f
BG		 10128 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
10129 if (!hdr)
10130 goto nla_put_failure;
5e760230 10131
37c73b5f
BG		 10132 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
10133 (freq &&
10134 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq)) ||
10135 (sig_dbm &&
10136 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
10137 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
10138 goto nla_put_failure;
5e760230 10139
37c73b5f 10140 genlmsg_end(msg, hdr);
5e760230 10141
37c73b5f
BG		 10142 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
10143 }
10144 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230
JB		 10145 return;
10146
10147 nla_put_failure:
37c73b5f
BG		 10148 spin_unlock_bh(&rdev->beacon_registrations_lock);
10149 if (hdr)
10150 genlmsg_cancel(msg, hdr);
5e760230
JB		 10151 nlmsg_free(msg);
10152}
10153EXPORT_SYMBOL(cfg80211_report_obss_beacon);
10154
cd8f7cb4
JB		 10155#ifdef CONFIG_PM
10156void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
10157 struct cfg80211_wowlan_wakeup *wakeup,
10158 gfp_t gfp)
10159{
10160 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
10161 struct sk_buff *msg;
10162 void *hdr;
10163 int err, size = 200;
10164
10165 trace_cfg80211_report_wowlan_wakeup(wdev->wiphy, wdev, wakeup);
10166
10167 if (wakeup)
10168 size += wakeup->packet_present_len;
10169
10170 msg = nlmsg_new(size, gfp);
10171 if (!msg)
10172 return;
10173
10174 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_WOWLAN);
10175 if (!hdr)
10176 goto free_msg;
10177
10178 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
10179 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
10180 goto free_msg;
10181
10182 if (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
10183 wdev->netdev->ifindex))
10184 goto free_msg;
10185
10186 if (wakeup) {
10187 struct nlattr *reasons;
10188
10189 reasons = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
10190
10191 if (wakeup->disconnect &&
10192 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT))
10193 goto free_msg;
10194 if (wakeup->magic_pkt &&
10195 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT))
10196 goto free_msg;
10197 if (wakeup->gtk_rekey_failure &&
10198 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE))
10199 goto free_msg;
10200 if (wakeup->eap_identity_req &&
10201 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST))
10202 goto free_msg;
10203 if (wakeup->four_way_handshake &&
10204 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE))
10205 goto free_msg;
10206 if (wakeup->rfkill_release &&
10207 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE))
10208 goto free_msg;
10209
10210 if (wakeup->pattern_idx >= 0 &&
10211 nla_put_u32(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
10212 wakeup->pattern_idx))
10213 goto free_msg;
10214
2a0e047e
JB		 10215 if (wakeup->tcp_match)
10216 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_MATCH);
10217
10218 if (wakeup->tcp_connlost)
10219 nla_put_flag(msg,
10220 NL80211_WOWLAN_TRIG_WAKEUP_TCP_CONNLOST);
10221
10222 if (wakeup->tcp_nomoretokens)
10223 nla_put_flag(msg,
10224 NL80211_WOWLAN_TRIG_WAKEUP_TCP_NOMORETOKENS);
10225
cd8f7cb4
JB		 10226 if (wakeup->packet) {
10227 u32 pkt_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211;
10228 u32 len_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211_LEN;
10229
10230 if (!wakeup->packet_80211) {
10231 pkt_attr =
10232 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023;
10233 len_attr =
10234 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023_LEN;
10235 }
10236
10237 if (wakeup->packet_len &&
10238 nla_put_u32(msg, len_attr, wakeup->packet_len))
10239 goto free_msg;
10240
10241 if (nla_put(msg, pkt_attr, wakeup->packet_present_len,
10242 wakeup->packet))
10243 goto free_msg;
10244 }
10245
10246 nla_nest_end(msg, reasons);
10247 }
10248
10249 err = genlmsg_end(msg, hdr);
10250 if (err < 0)
10251 goto free_msg;
10252
10253 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
10254 nl80211_mlme_mcgrp.id, gfp);
10255 return;
10256
10257 free_msg:
10258 nlmsg_free(msg);
10259}
10260EXPORT_SYMBOL(cfg80211_report_wowlan_wakeup);
10261#endif
10262
3475b094
JM		 10263void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
10264 enum nl80211_tdls_operation oper,
10265 u16 reason_code, gfp_t gfp)
10266{
10267 struct wireless_dev *wdev = dev->ieee80211_ptr;
10268 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
10269 struct sk_buff *msg;
10270 void *hdr;
10271 int err;
10272
10273 trace_cfg80211_tdls_oper_request(wdev->wiphy, dev, peer, oper,
10274 reason_code);
10275
10276 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
10277 if (!msg)
10278 return;
10279
10280 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_TDLS_OPER);
10281 if (!hdr) {
10282 nlmsg_free(msg);
10283 return;
10284 }
10285
10286 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
10287 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
10288 nla_put_u8(msg, NL80211_ATTR_TDLS_OPERATION, oper) ||
10289 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer) ||
10290 (reason_code > 0 &&
10291 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason_code)))
10292 goto nla_put_failure;
10293
10294 err = genlmsg_end(msg, hdr);
10295 if (err < 0) {
10296 nlmsg_free(msg);
10297 return;
10298 }
10299
10300 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
10301 nl80211_mlme_mcgrp.id, gfp);
10302 return;
10303
10304 nla_put_failure:
10305 genlmsg_cancel(msg, hdr);
10306 nlmsg_free(msg);
10307}
10308EXPORT_SYMBOL(cfg80211_tdls_oper_request);
10309
026331c4
JM		 10310static int nl80211_netlink_notify(struct notifier_block * nb,
10311 unsigned long state,
10312 void *_notify)
10313{
10314 struct netlink_notify *notify = _notify;
10315 struct cfg80211_registered_device *rdev;
10316 struct wireless_dev *wdev;
37c73b5f 10317 struct cfg80211_beacon_registration *reg, *tmp;
026331c4
JM		 10318
10319 if (state != NETLINK_URELEASE)
10320 return NOTIFY_DONE;
10321
10322 rcu_read_lock();
10323
5e760230 10324 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
89a54e48 10325 list_for_each_entry_rcu(wdev, &rdev->wdev_list, list)
15e47304 10326 cfg80211_mlme_unregister_socket(wdev, notify->portid);
37c73b5f
BG		 10327
10328 spin_lock_bh(&rdev->beacon_registrations_lock);
10329 list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
10330 list) {
10331 if (reg->nlportid == notify->portid) {
10332 list_del(&reg->list);
10333 kfree(reg);
10334 break;
10335 }
10336 }
10337 spin_unlock_bh(&rdev->beacon_registrations_lock);
5e760230 10338 }
026331c4
JM		 10339
10340 rcu_read_unlock();
10341
10342 return NOTIFY_DONE;
10343}
10344
10345static struct notifier_block nl80211_netlink_notifier = {
10346 .notifier_call = nl80211_netlink_notify,
10347};
10348
55682965
JB		 10349/* initialisation/exit functions */
10350
10351int nl80211_init(void)
10352{
0d63cbb5 10353 int err;
55682965 10354
0d63cbb5
MM		 10355 err = genl_register_family_with_ops(&nl80211_fam,
10356 nl80211_ops, ARRAY_SIZE(nl80211_ops));
55682965
JB		 10357 if (err)
10358 return err;
10359
55682965
JB		 10360 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
10361 if (err)
10362 goto err_out;
10363
2a519311
JB		 10364 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
10365 if (err)
10366 goto err_out;
10367
73d54c9e
LR		 10368 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
10369 if (err)
10370 goto err_out;
10371
6039f6d2
JM		 10372 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
10373 if (err)
10374 goto err_out;
10375
aff89a9b
JB		 10376#ifdef CONFIG_NL80211_TESTMODE
10377 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
10378 if (err)
10379 goto err_out;
10380#endif
10381
026331c4
JM		 10382 err = netlink_register_notifier(&nl80211_netlink_notifier);
10383 if (err)
10384 goto err_out;
10385
55682965
JB		 10386 return 0;
10387 err_out:
10388 genl_unregister_family(&nl80211_fam);
10389 return err;
10390}
10391
10392void nl80211_exit(void)
10393{
026331c4 10394 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 10395 genl_unregister_family(&nl80211_fam);
10396}
Ubuntu Focal Linux kernel mirror