]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - net/wireless/nl80211.c
projects / mirror_ubuntu-bionic-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
mac80211: retry sending failed BAR frames later instead of tearing down aggr
[mirror_ubuntu-bionic-kernel.git] / net / wireless / nl80211.c
CommitLineData
55682965
JB		 1/*
2 * This is the new netlink-based wireless configuration interface.
3 *
026331c4 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
55682965
JB		 5 */
6
7#include <linux/if.h>
8#include <linux/module.h>
9#include <linux/err.h>
5a0e3ad6 10#include <linux/slab.h>
55682965
JB		 11#include <linux/list.h>
12#include <linux/if_ether.h>
13#include <linux/ieee80211.h>
14#include <linux/nl80211.h>
15#include <linux/rtnetlink.h>
16#include <linux/netlink.h>
2a519311 17#include <linux/etherdevice.h>
463d0183 18#include <net/net_namespace.h>
55682965
JB		 19#include <net/genetlink.h>
20#include <net/cfg80211.h>
463d0183 21#include <net/sock.h>
55682965
JB		 22#include "core.h"
23#include "nl80211.h"
b2e1b302 24#include "reg.h"
55682965 25
5fb628e9
JM		 26static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type);
27static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
28 struct genl_info *info,
29 struct cfg80211_crypto_settings *settings,
30 int cipher_limit);
31
4c476991
JB		 32static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
33 struct genl_info *info);
34static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
35 struct genl_info *info);
36
55682965
JB		 37/* the netlink family */
38static struct genl_family nl80211_fam = {
39 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
40 .name = "nl80211", /* have users key off the name instead */
41 .hdrsize = 0, /* no private header */
42 .version = 1, /* no particular meaning now */
43 .maxattr = NL80211_ATTR_MAX,
463d0183 44 .netnsok = true,
4c476991
JB		 45 .pre_doit = nl80211_pre_doit,
46 .post_doit = nl80211_post_doit,
55682965
JB		 47};
48
79c97e97 49/* internal helper: get rdev and dev */
463d0183 50static int get_rdev_dev_by_info_ifindex(struct genl_info *info,
79c97e97 51 struct cfg80211_registered_device **rdev,
55682965
JB		 52 struct net_device **dev)
53{
463d0183 54 struct nlattr **attrs = info->attrs;
55682965
JB		 55 int ifindex;
56
bba95fef 57 if (!attrs[NL80211_ATTR_IFINDEX])
55682965
JB		 58 return -EINVAL;
59
bba95fef 60 ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
463d0183 61 *dev = dev_get_by_index(genl_info_net(info), ifindex);
55682965
JB		 62 if (!*dev)
63 return -ENODEV;
64
463d0183 65 *rdev = cfg80211_get_dev_from_ifindex(genl_info_net(info), ifindex);
79c97e97 66 if (IS_ERR(*rdev)) {
55682965 67 dev_put(*dev);
79c97e97 68 return PTR_ERR(*rdev);
55682965
JB		 69 }
70
71 return 0;
72}
73
74/* policy for the attributes */
b54452b0 75static const struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] = {
55682965
JB		 76 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
77 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 78 .len = 20-1 },
31888487 79 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
72bdcf34 80 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 81 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
b9a5f8ca
JM		 82 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
83 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
84 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
85 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 86 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
55682965
JB		 87
88 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
89 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
90 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f
JB		 91
92 [NL80211_ATTR_MAC] = { .type = NLA_BINARY, .len = ETH_ALEN },
3e5d7649 93 [NL80211_ATTR_PREV_BSSID] = { .type = NLA_BINARY, .len = ETH_ALEN },
41ade00f 94
b9454e83 95 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 96 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
97 .len = WLAN_MAX_KEY_LEN },
98 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
99 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
100 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
9f26a952 101 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
e31b8213 102 [NL80211_ATTR_KEY_TYPE] = { .type = NLA_U32 },
ed1b6cc7
JB		 103
104 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
105 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
106 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
107 .len = IEEE80211_MAX_DATA_LEN },
108 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
109 .len = IEEE80211_MAX_DATA_LEN },
5727ef1b
JB		 110 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
111 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
112 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
113 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
114 .len = NL80211_MAX_SUPP_RATES },
2ec600d6 115 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
5727ef1b 116 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 117 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6
LCC		 118 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
119 .len = IEEE80211_MAX_MESH_ID_LEN },
120 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
9f1ba906 121
b2e1b302
LR		 122 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
123 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
124
9f1ba906
JM		 125 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
126 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
127 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 128 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
129 .len = NL80211_MAX_SUPP_RATES },
50b12f59 130 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 131
24bdd9f4 132 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 133 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 134
36aedc90
JM		 135 [NL80211_ATTR_HT_CAPABILITY] = { .type = NLA_BINARY,
136 .len = NL80211_HT_CAPABILITY_LEN },
9aed3cc1
JM		 137
138 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
139 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
140 .len = IEEE80211_MAX_DATA_LEN },
2a519311
JB		 141 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
142 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 143
144 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
145 .len = IEEE80211_MAX_SSID_LEN },
146 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
147 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 148 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 149 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
dc6382ce 150 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
eccb8e8f
JB		 151 [NL80211_ATTR_STA_FLAGS2] = {
152 .len = sizeof(struct nl80211_sta_flag_update),
153 },
3f77316c 154 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 155 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
156 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
b23aa676
SO		 157 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
158 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
159 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 160 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 161 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
67fbb16b
SO		 162 [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
163 .len = WLAN_PMKID_LEN },
9588bbd5
JM		 164 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
165 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 166 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 167 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
168 .len = IEEE80211_MAX_DATA_LEN },
169 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ffb9eb3d 170 [NL80211_ATTR_PS_STATE] = { .type = NLA_U32 },
d6dc1a38 171 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 172 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 173 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 174 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
175 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 176 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 177 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
178 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 179 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 180 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 181 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 182 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
9c3990aa 183 [NL80211_ATTR_STA_PLINK_STATE] = { .type = NLA_U8 },
bbe6ad6d 184 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 185 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 186 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
32e9de84 187 [NL80211_ATTR_HIDDEN_SSID] = { .type = NLA_U32 },
9946ecfb
JM		 188 [NL80211_ATTR_IE_PROBE_RESP] = { .type = NLA_BINARY,
189 .len = IEEE80211_MAX_DATA_LEN },
190 [NL80211_ATTR_IE_ASSOC_RESP] = { .type = NLA_BINARY,
191 .len = IEEE80211_MAX_DATA_LEN },
55682965
JB		 192};
193
e31b8213 194/* policy for the key attributes */
b54452b0 195static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 196 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 197 [NL80211_KEY_IDX] = { .type = NLA_U8 },
198 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
199 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
200 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
201 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
e31b8213 202 [NL80211_KEY_TYPE] = { .type = NLA_U32 },
dbd2fd65
JB		 203 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
204};
205
206/* policy for the key default flags */
207static const struct nla_policy
208nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
209 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
210 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 211};
212
ff1b6e69
JB		 213/* policy for WoWLAN attributes */
214static const struct nla_policy
215nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
216 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
217 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
218 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
219 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 220 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
221 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
222 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
223 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
ff1b6e69
JB		 224};
225
e5497d76
JB		 226/* policy for GTK rekey offload attributes */
227static const struct nla_policy
228nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
229 [NL80211_REKEY_DATA_KEK] = { .len = NL80211_KEK_LEN },
230 [NL80211_REKEY_DATA_KCK] = { .len = NL80211_KCK_LEN },
231 [NL80211_REKEY_DATA_REPLAY_CTR] = { .len = NL80211_REPLAY_CTR_LEN },
232};
233
a043897a
HS		 234/* ifidx get helper */
235static int nl80211_get_ifidx(struct netlink_callback *cb)
236{
237 int res;
238
239 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
240 nl80211_fam.attrbuf, nl80211_fam.maxattr,
241 nl80211_policy);
242 if (res)
243 return res;
244
245 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
246 return -EINVAL;
247
248 res = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
249 if (!res)
250 return -EINVAL;
251 return res;
252}
253
67748893
JB		 254static int nl80211_prepare_netdev_dump(struct sk_buff *skb,
255 struct netlink_callback *cb,
256 struct cfg80211_registered_device **rdev,
257 struct net_device **dev)
258{
259 int ifidx = cb->args[0];
260 int err;
261
262 if (!ifidx)
263 ifidx = nl80211_get_ifidx(cb);
264 if (ifidx < 0)
265 return ifidx;
266
267 cb->args[0] = ifidx;
268
269 rtnl_lock();
270
271 *dev = __dev_get_by_index(sock_net(skb->sk), ifidx);
272 if (!*dev) {
273 err = -ENODEV;
274 goto out_rtnl;
275 }
276
277 *rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
3cc25e51
FF		 278 if (IS_ERR(*rdev)) {
279 err = PTR_ERR(*rdev);
67748893
JB		 280 goto out_rtnl;
281 }
282
283 return 0;
284 out_rtnl:
285 rtnl_unlock();
286 return err;
287}
288
289static void nl80211_finish_netdev_dump(struct cfg80211_registered_device *rdev)
290{
291 cfg80211_unlock_rdev(rdev);
292 rtnl_unlock();
293}
294
f4a11bb0
JB		 295/* IE validation */
296static bool is_valid_ie_attr(const struct nlattr *attr)
297{
298 const u8 *pos;
299 int len;
300
301 if (!attr)
302 return true;
303
304 pos = nla_data(attr);
305 len = nla_len(attr);
306
307 while (len) {
308 u8 elemlen;
309
310 if (len < 2)
311 return false;
312 len -= 2;
313
314 elemlen = pos[1];
315 if (elemlen > len)
316 return false;
317
318 len -= elemlen;
319 pos += 2 + elemlen;
320 }
321
322 return true;
323}
324
55682965
JB		 325/* message building helper */
326static inline void *nl80211hdr_put(struct sk_buff *skb, u32 pid, u32 seq,
327 int flags, u8 cmd)
328{
329 /* since there is no private header just add the generic one */
330 return genlmsg_put(skb, pid, seq, &nl80211_fam, flags, cmd);
331}
332
5dab3b8a
LR		 333static int nl80211_msg_put_channel(struct sk_buff *msg,
334 struct ieee80211_channel *chan)
335{
336 NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_FREQ,
337 chan->center_freq);
338
339 if (chan->flags & IEEE80211_CHAN_DISABLED)
340 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_DISABLED);
341 if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN)
342 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN);
343 if (chan->flags & IEEE80211_CHAN_NO_IBSS)
344 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_NO_IBSS);
345 if (chan->flags & IEEE80211_CHAN_RADAR)
346 NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_RADAR);
347
348 NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
349 DBM_TO_MBM(chan->max_power));
350
351 return 0;
352
353 nla_put_failure:
354 return -ENOBUFS;
355}
356
55682965
JB		 357/* netlink command implementations */
358
b9454e83
JB		 359struct key_parse {
360 struct key_params p;
361 int idx;
e31b8213 362 int type;
b9454e83 363 bool def, defmgmt;
dbd2fd65 364 bool def_uni, def_multi;
b9454e83
JB		 365};
366
367static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
368{
369 struct nlattr *tb[NL80211_KEY_MAX + 1];
370 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
371 nl80211_key_policy);
372 if (err)
373 return err;
374
375 k->def = !!tb[NL80211_KEY_DEFAULT];
376 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
377
dbd2fd65
JB		 378 if (k->def) {
379 k->def_uni = true;
380 k->def_multi = true;
381 }
382 if (k->defmgmt)
383 k->def_multi = true;
384
b9454e83
JB		 385 if (tb[NL80211_KEY_IDX])
386 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
387
388 if (tb[NL80211_KEY_DATA]) {
389 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
390 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
391 }
392
393 if (tb[NL80211_KEY_SEQ]) {
394 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
395 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
396 }
397
398 if (tb[NL80211_KEY_CIPHER])
399 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
400
e31b8213
JB		 401 if (tb[NL80211_KEY_TYPE]) {
402 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
403 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
404 return -EINVAL;
405 }
406
dbd2fd65
JB		 407 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
408 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
409 int err = nla_parse_nested(kdt,
410 NUM_NL80211_KEY_DEFAULT_TYPES - 1,
411 tb[NL80211_KEY_DEFAULT_TYPES],
412 nl80211_key_default_policy);
413 if (err)
414 return err;
415
416 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
417 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
418 }
419
b9454e83
JB		 420 return 0;
421}
422
423static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
424{
425 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
426 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
427 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
428 }
429
430 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
431 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
432 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
433 }
434
435 if (info->attrs[NL80211_ATTR_KEY_IDX])
436 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
437
438 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
439 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
440
441 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
442 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
443
dbd2fd65
JB		 444 if (k->def) {
445 k->def_uni = true;
446 k->def_multi = true;
447 }
448 if (k->defmgmt)
449 k->def_multi = true;
450
e31b8213
JB		 451 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
452 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
453 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
454 return -EINVAL;
455 }
456
dbd2fd65
JB		 457 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
458 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
459 int err = nla_parse_nested(
460 kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
461 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
462 nl80211_key_default_policy);
463 if (err)
464 return err;
465
466 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
467 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
468 }
469
b9454e83
JB		 470 return 0;
471}
472
473static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
474{
475 int err;
476
477 memset(k, 0, sizeof(*k));
478 k->idx = -1;
e31b8213 479 k->type = -1;
b9454e83
JB		 480
481 if (info->attrs[NL80211_ATTR_KEY])
482 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
483 else
484 err = nl80211_parse_key_old(info, k);
485
486 if (err)
487 return err;
488
489 if (k->def && k->defmgmt)
490 return -EINVAL;
491
dbd2fd65
JB		 492 if (k->defmgmt) {
493 if (k->def_uni || !k->def_multi)
494 return -EINVAL;
495 }
496
b9454e83
JB		 497 if (k->idx != -1) {
498 if (k->defmgmt) {
499 if (k->idx < 4 || k->idx > 5)
500 return -EINVAL;
501 } else if (k->def) {
502 if (k->idx < 0 || k->idx > 3)
503 return -EINVAL;
504 } else {
505 if (k->idx < 0 || k->idx > 5)
506 return -EINVAL;
507 }
508 }
509
510 return 0;
511}
512
fffd0934
JB		 513static struct cfg80211_cached_keys *
514nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
515 struct nlattr *keys)
516{
517 struct key_parse parse;
518 struct nlattr *key;
519 struct cfg80211_cached_keys *result;
520 int rem, err, def = 0;
521
522 result = kzalloc(sizeof(*result), GFP_KERNEL);
523 if (!result)
524 return ERR_PTR(-ENOMEM);
525
526 result->def = -1;
527 result->defmgmt = -1;
528
529 nla_for_each_nested(key, keys, rem) {
530 memset(&parse, 0, sizeof(parse));
531 parse.idx = -1;
532
533 err = nl80211_parse_key_new(key, &parse);
534 if (err)
535 goto error;
536 err = -EINVAL;
537 if (!parse.p.key)
538 goto error;
539 if (parse.idx < 0 || parse.idx > 4)
540 goto error;
541 if (parse.def) {
542 if (def)
543 goto error;
544 def = 1;
545 result->def = parse.idx;
dbd2fd65
JB		 546 if (!parse.def_uni || !parse.def_multi)
547 goto error;
fffd0934
JB		 548 } else if (parse.defmgmt)
549 goto error;
550 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 551 parse.idx, false, NULL);
fffd0934
JB		 552 if (err)
553 goto error;
554 result->params[parse.idx].cipher = parse.p.cipher;
555 result->params[parse.idx].key_len = parse.p.key_len;
556 result->params[parse.idx].key = result->data[parse.idx];
557 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
558 }
559
560 return result;
561 error:
562 kfree(result);
563 return ERR_PTR(err);
564}
565
566static int nl80211_key_allowed(struct wireless_dev *wdev)
567{
568 ASSERT_WDEV_LOCK(wdev);
569
fffd0934
JB		 570 switch (wdev->iftype) {
571 case NL80211_IFTYPE_AP:
572 case NL80211_IFTYPE_AP_VLAN:
074ac8df 573 case NL80211_IFTYPE_P2P_GO:
ff973af7 574 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 575 break;
576 case NL80211_IFTYPE_ADHOC:
577 if (!wdev->current_bss)
578 return -ENOLINK;
579 break;
580 case NL80211_IFTYPE_STATION:
074ac8df 581 case NL80211_IFTYPE_P2P_CLIENT:
fffd0934
JB		 582 if (wdev->sme_state != CFG80211_SME_CONNECTED)
583 return -ENOLINK;
584 break;
585 default:
586 return -EINVAL;
587 }
588
589 return 0;
590}
591
7527a782
JB		 592static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
593{
594 struct nlattr *nl_modes = nla_nest_start(msg, attr);
595 int i;
596
597 if (!nl_modes)
598 goto nla_put_failure;
599
600 i = 0;
601 while (ifmodes) {
602 if (ifmodes & 1)
603 NLA_PUT_FLAG(msg, i);
604 ifmodes >>= 1;
605 i++;
606 }
607
608 nla_nest_end(msg, nl_modes);
609 return 0;
610
611nla_put_failure:
612 return -ENOBUFS;
613}
614
615static int nl80211_put_iface_combinations(struct wiphy *wiphy,
616 struct sk_buff *msg)
617{
618 struct nlattr *nl_combis;
619 int i, j;
620
621 nl_combis = nla_nest_start(msg,
622 NL80211_ATTR_INTERFACE_COMBINATIONS);
623 if (!nl_combis)
624 goto nla_put_failure;
625
626 for (i = 0; i < wiphy->n_iface_combinations; i++) {
627 const struct ieee80211_iface_combination *c;
628 struct nlattr *nl_combi, *nl_limits;
629
630 c = &wiphy->iface_combinations[i];
631
632 nl_combi = nla_nest_start(msg, i + 1);
633 if (!nl_combi)
634 goto nla_put_failure;
635
636 nl_limits = nla_nest_start(msg, NL80211_IFACE_COMB_LIMITS);
637 if (!nl_limits)
638 goto nla_put_failure;
639
640 for (j = 0; j < c->n_limits; j++) {
641 struct nlattr *nl_limit;
642
643 nl_limit = nla_nest_start(msg, j + 1);
644 if (!nl_limit)
645 goto nla_put_failure;
646 NLA_PUT_U32(msg, NL80211_IFACE_LIMIT_MAX,
647 c->limits[j].max);
648 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
649 c->limits[j].types))
650 goto nla_put_failure;
651 nla_nest_end(msg, nl_limit);
652 }
653
654 nla_nest_end(msg, nl_limits);
655
656 if (c->beacon_int_infra_match)
657 NLA_PUT_FLAG(msg,
658 NL80211_IFACE_COMB_STA_AP_BI_MATCH);
659 NLA_PUT_U32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
660 c->num_different_channels);
661 NLA_PUT_U32(msg, NL80211_IFACE_COMB_MAXNUM,
662 c->max_interfaces);
663
664 nla_nest_end(msg, nl_combi);
665 }
666
667 nla_nest_end(msg, nl_combis);
668
669 return 0;
670nla_put_failure:
671 return -ENOBUFS;
672}
673
55682965
JB		 674static int nl80211_send_wiphy(struct sk_buff *msg, u32 pid, u32 seq, int flags,
675 struct cfg80211_registered_device *dev)
676{
677 void *hdr;
ee688b00
JB		 678 struct nlattr *nl_bands, *nl_band;
679 struct nlattr *nl_freqs, *nl_freq;
680 struct nlattr *nl_rates, *nl_rate;
8fdc621d 681 struct nlattr *nl_cmds;
ee688b00
JB		 682 enum ieee80211_band band;
683 struct ieee80211_channel *chan;
684 struct ieee80211_rate *rate;
685 int i;
2e161f78
JB		 686 const struct ieee80211_txrx_stypes *mgmt_stypes =
687 dev->wiphy.mgmt_stypes;
55682965
JB		 688
689 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_WIPHY);
690 if (!hdr)
691 return -1;
692
b5850a7a 693 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx);
55682965 694 NLA_PUT_STRING(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy));
b9a5f8ca 695
f5ea9120
JB		 696 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION,
697 cfg80211_rdev_list_generation);
698
b9a5f8ca
JM		 699 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
700 dev->wiphy.retry_short);
701 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
702 dev->wiphy.retry_long);
703 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
704 dev->wiphy.frag_threshold);
705 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
706 dev->wiphy.rts_threshold);
81077e82
LT		 707 NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
708 dev->wiphy.coverage_class);
2a519311
JB		 709 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
710 dev->wiphy.max_scan_ssids);
93b6aa69
LC		 711 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
712 dev->wiphy.max_sched_scan_ssids);
18a83659
JB		 713 NLA_PUT_U16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
714 dev->wiphy.max_scan_ie_len);
5a865bad
LC		 715 NLA_PUT_U16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
716 dev->wiphy.max_sched_scan_ie_len);
ee688b00 717
e31b8213
JB		 718 if (dev->wiphy.flags & WIPHY_FLAG_IBSS_RSN)
719 NLA_PUT_FLAG(msg, NL80211_ATTR_SUPPORT_IBSS_RSN);
15d5dda6
JC		 720 if (dev->wiphy.flags & WIPHY_FLAG_MESH_AUTH)
721 NLA_PUT_FLAG(msg, NL80211_ATTR_SUPPORT_MESH_AUTH);
e31b8213 722
25e47c18
JB		 723 NLA_PUT(msg, NL80211_ATTR_CIPHER_SUITES,
724 sizeof(u32) * dev->wiphy.n_cipher_suites,
725 dev->wiphy.cipher_suites);
726
67fbb16b
SO		 727 NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
728 dev->wiphy.max_num_pmkids);
729
c0692b8f
JB		 730 if (dev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL)
731 NLA_PUT_FLAG(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE);
732
39fd5de4
BR		 733 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
734 dev->wiphy.available_antennas_tx);
735 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
736 dev->wiphy.available_antennas_rx);
737
7f531e03
BR		 738 if ((dev->wiphy.available_antennas_tx ||
739 dev->wiphy.available_antennas_rx) && dev->ops->get_antenna) {
afe0cbf8
BR		 740 u32 tx_ant = 0, rx_ant = 0;
741 int res;
742 res = dev->ops->get_antenna(&dev->wiphy, &tx_ant, &rx_ant);
743 if (!res) {
744 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_TX, tx_ant);
745 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_ANTENNA_RX, rx_ant);
746 }
747 }
748
7527a782
JB		 749 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
750 dev->wiphy.interface_modes))
f59ac048
LR		 751 goto nla_put_failure;
752
ee688b00
JB		 753 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
754 if (!nl_bands)
755 goto nla_put_failure;
756
757 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
758 if (!dev->wiphy.bands[band])
759 continue;
760
761 nl_band = nla_nest_start(msg, band);
762 if (!nl_band)
763 goto nla_put_failure;
764
d51626df
JB		 765 /* add HT info */
766 if (dev->wiphy.bands[band]->ht_cap.ht_supported) {
767 NLA_PUT(msg, NL80211_BAND_ATTR_HT_MCS_SET,
768 sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
769 &dev->wiphy.bands[band]->ht_cap.mcs);
770 NLA_PUT_U16(msg, NL80211_BAND_ATTR_HT_CAPA,
771 dev->wiphy.bands[band]->ht_cap.cap);
772 NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
773 dev->wiphy.bands[band]->ht_cap.ampdu_factor);
774 NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
775 dev->wiphy.bands[band]->ht_cap.ampdu_density);
776 }
777
ee688b00
JB		 778 /* add frequencies */
779 nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
780 if (!nl_freqs)
781 goto nla_put_failure;
782
783 for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
784 nl_freq = nla_nest_start(msg, i);
785 if (!nl_freq)
786 goto nla_put_failure;
787
788 chan = &dev->wiphy.bands[band]->channels[i];
5dab3b8a
LR		 789
790 if (nl80211_msg_put_channel(msg, chan))
791 goto nla_put_failure;
e2f367f2 792
ee688b00
JB		 793 nla_nest_end(msg, nl_freq);
794 }
795
796 nla_nest_end(msg, nl_freqs);
797
798 /* add bitrates */
799 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
800 if (!nl_rates)
801 goto nla_put_failure;
802
803 for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
804 nl_rate = nla_nest_start(msg, i);
805 if (!nl_rate)
806 goto nla_put_failure;
807
808 rate = &dev->wiphy.bands[band]->bitrates[i];
809 NLA_PUT_U32(msg, NL80211_BITRATE_ATTR_RATE,
810 rate->bitrate);
811 if (rate->flags & IEEE80211_RATE_SHORT_PREAMBLE)
812 NLA_PUT_FLAG(msg,
813 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE);
814
815 nla_nest_end(msg, nl_rate);
816 }
817
818 nla_nest_end(msg, nl_rates);
819
820 nla_nest_end(msg, nl_band);
821 }
822 nla_nest_end(msg, nl_bands);
823
8fdc621d
JB		 824 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
825 if (!nl_cmds)
826 goto nla_put_failure;
827
828 i = 0;
829#define CMD(op, n) \
830 do { \
831 if (dev->ops->op) { \
832 i++; \
833 NLA_PUT_U32(msg, i, NL80211_CMD_ ## n); \
834 } \
835 } while (0)
836
837 CMD(add_virtual_intf, NEW_INTERFACE);
838 CMD(change_virtual_intf, SET_INTERFACE);
839 CMD(add_key, NEW_KEY);
840 CMD(add_beacon, NEW_BEACON);
841 CMD(add_station, NEW_STATION);
842 CMD(add_mpath, NEW_MPATH);
24bdd9f4 843 CMD(update_mesh_config, SET_MESH_CONFIG);
8fdc621d 844 CMD(change_bss, SET_BSS);
636a5d36
JM		 845 CMD(auth, AUTHENTICATE);
846 CMD(assoc, ASSOCIATE);
847 CMD(deauth, DEAUTHENTICATE);
848 CMD(disassoc, DISASSOCIATE);
04a773ad 849 CMD(join_ibss, JOIN_IBSS);
29cbe68c 850 CMD(join_mesh, JOIN_MESH);
67fbb16b
SO		 851 CMD(set_pmksa, SET_PMKSA);
852 CMD(del_pmksa, DEL_PMKSA);
853 CMD(flush_pmksa, FLUSH_PMKSA);
9588bbd5 854 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
13ae75b1 855 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
2e161f78 856 CMD(mgmt_tx, FRAME);
f7ca38df 857 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
5be83de5 858 if (dev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
463d0183
JB		 859 i++;
860 NLA_PUT_U32(msg, i, NL80211_CMD_SET_WIPHY_NETNS);
861 }
f444de05 862 CMD(set_channel, SET_CHANNEL);
e8347eba 863 CMD(set_wds_peer, SET_WDS_PEER);
807f8a8c
LC		 864 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
865 CMD(sched_scan_start, START_SCHED_SCAN);
8fdc621d
JB		 866
867#undef CMD
b23aa676 868
6829c878 869 if (dev->ops->connect || dev->ops->auth) {
b23aa676
SO		 870 i++;
871 NLA_PUT_U32(msg, i, NL80211_CMD_CONNECT);
872 }
873
6829c878 874 if (dev->ops->disconnect || dev->ops->deauth) {
b23aa676
SO		 875 i++;
876 NLA_PUT_U32(msg, i, NL80211_CMD_DISCONNECT);
877 }
878
8fdc621d
JB		 879 nla_nest_end(msg, nl_cmds);
880
a293911d
JB		 881 if (dev->ops->remain_on_channel)
882 NLA_PUT_U32(msg, NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
883 dev->wiphy.max_remain_on_channel_duration);
884
d2da5878 885 if (dev->ops->mgmt_tx_cancel_wait)
f7ca38df
JB		 886 NLA_PUT_FLAG(msg, NL80211_ATTR_OFFCHANNEL_TX_OK);
887
2e161f78
JB		 888 if (mgmt_stypes) {
889 u16 stypes;
890 struct nlattr *nl_ftypes, *nl_ifs;
891 enum nl80211_iftype ift;
892
893 nl_ifs = nla_nest_start(msg, NL80211_ATTR_TX_FRAME_TYPES);
894 if (!nl_ifs)
895 goto nla_put_failure;
896
897 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
898 nl_ftypes = nla_nest_start(msg, ift);
899 if (!nl_ftypes)
900 goto nla_put_failure;
901 i = 0;
902 stypes = mgmt_stypes[ift].tx;
903 while (stypes) {
904 if (stypes & 1)
905 NLA_PUT_U16(msg, NL80211_ATTR_FRAME_TYPE,
906 (i << 4) | IEEE80211_FTYPE_MGMT);
907 stypes >>= 1;
908 i++;
909 }
910 nla_nest_end(msg, nl_ftypes);
911 }
912
74b70a4e
JB		 913 nla_nest_end(msg, nl_ifs);
914
2e161f78
JB		 915 nl_ifs = nla_nest_start(msg, NL80211_ATTR_RX_FRAME_TYPES);
916 if (!nl_ifs)
917 goto nla_put_failure;
918
919 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
920 nl_ftypes = nla_nest_start(msg, ift);
921 if (!nl_ftypes)
922 goto nla_put_failure;
923 i = 0;
924 stypes = mgmt_stypes[ift].rx;
925 while (stypes) {
926 if (stypes & 1)
927 NLA_PUT_U16(msg, NL80211_ATTR_FRAME_TYPE,
928 (i << 4) | IEEE80211_FTYPE_MGMT);
929 stypes >>= 1;
930 i++;
931 }
932 nla_nest_end(msg, nl_ftypes);
933 }
934 nla_nest_end(msg, nl_ifs);
935 }
936
ff1b6e69
JB		 937 if (dev->wiphy.wowlan.flags || dev->wiphy.wowlan.n_patterns) {
938 struct nlattr *nl_wowlan;
939
940 nl_wowlan = nla_nest_start(msg,
941 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
942 if (!nl_wowlan)
943 goto nla_put_failure;
944
945 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_ANY)
946 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_ANY);
947 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_DISCONNECT)
948 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_DISCONNECT);
949 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_MAGIC_PKT)
950 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT);
77dbbb13
JB		 951 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY)
952 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED);
953 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE)
954 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE);
955 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ)
956 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST);
957 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_4WAY_HANDSHAKE)
958 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE);
959 if (dev->wiphy.wowlan.flags & WIPHY_WOWLAN_RFKILL_RELEASE)
960 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE);
ff1b6e69
JB		 961 if (dev->wiphy.wowlan.n_patterns) {
962 struct nl80211_wowlan_pattern_support pat = {
963 .max_patterns = dev->wiphy.wowlan.n_patterns,
964 .min_pattern_len =
965 dev->wiphy.wowlan.pattern_min_len,
966 .max_pattern_len =
967 dev->wiphy.wowlan.pattern_max_len,
968 };
969 NLA_PUT(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
970 sizeof(pat), &pat);
971 }
972
973 nla_nest_end(msg, nl_wowlan);
974 }
975
7527a782
JB		 976 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
977 dev->wiphy.software_iftypes))
978 goto nla_put_failure;
979
980 if (nl80211_put_iface_combinations(&dev->wiphy, msg))
981 goto nla_put_failure;
982
55682965
JB		 983 return genlmsg_end(msg, hdr);
984
985 nla_put_failure:
bc3ed28c
TG		 986 genlmsg_cancel(msg, hdr);
987 return -EMSGSIZE;
55682965
JB		 988}
989
990static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
991{
992 int idx = 0;
993 int start = cb->args[0];
994 struct cfg80211_registered_device *dev;
995
a1794390 996 mutex_lock(&cfg80211_mutex);
79c97e97 997 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
463d0183
JB		 998 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
999 continue;
b4637271 1000 if (++idx <= start)
55682965
JB		 1001 continue;
1002 if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).pid,
1003 cb->nlh->nlmsg_seq, NLM_F_MULTI,
b4637271
JV		 1004 dev) < 0) {
1005 idx--;
55682965 1006 break;
b4637271 1007 }
55682965 1008 }
a1794390 1009 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1010
1011 cb->args[0] = idx;
1012
1013 return skb->len;
1014}
1015
1016static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
1017{
1018 struct sk_buff *msg;
4c476991 1019 struct cfg80211_registered_device *dev = info->user_ptr[0];
55682965 1020
fd2120ca 1021 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1022 if (!msg)
4c476991 1023 return -ENOMEM;
55682965 1024
4c476991
JB		 1025 if (nl80211_send_wiphy(msg, info->snd_pid, info->snd_seq, 0, dev) < 0) {
1026 nlmsg_free(msg);
1027 return -ENOBUFS;
1028 }
55682965 1029
134e6375 1030 return genlmsg_reply(msg, info);
55682965
JB		 1031}
1032
31888487
JM		 1033static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
1034 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
1035 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
1036 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
1037 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
1038 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
1039};
1040
1041static int parse_txq_params(struct nlattr *tb[],
1042 struct ieee80211_txq_params *txq_params)
1043{
1044 if (!tb[NL80211_TXQ_ATTR_QUEUE] || !tb[NL80211_TXQ_ATTR_TXOP] ||
1045 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
1046 !tb[NL80211_TXQ_ATTR_AIFS])
1047 return -EINVAL;
1048
1049 txq_params->queue = nla_get_u8(tb[NL80211_TXQ_ATTR_QUEUE]);
1050 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
1051 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
1052 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
1053 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
1054
1055 return 0;
1056}
1057
f444de05
JB		 1058static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
1059{
1060 /*
1061 * You can only set the channel explicitly for AP, mesh
1062 * and WDS type interfaces; all others have their channel
1063 * managed via their respective "establish a connection"
1064 * command (connect, join, ...)
1065 *
1066 * Monitors are special as they are normally slaved to
1067 * whatever else is going on, so they behave as though
1068 * you tried setting the wiphy channel itself.
1069 */
1070 return !wdev ||
1071 wdev->iftype == NL80211_IFTYPE_AP ||
1072 wdev->iftype == NL80211_IFTYPE_WDS ||
1073 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 1074 wdev->iftype == NL80211_IFTYPE_MONITOR ||
1075 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 1076}
1077
1078static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
1079 struct wireless_dev *wdev,
1080 struct genl_info *info)
1081{
1082 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
1083 u32 freq;
1084 int result;
1085
1086 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
1087 return -EINVAL;
1088
1089 if (!nl80211_can_set_dev_channel(wdev))
1090 return -EOPNOTSUPP;
1091
1092 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
1093 channel_type = nla_get_u32(info->attrs[
1094 NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1095 if (channel_type != NL80211_CHAN_NO_HT &&
1096 channel_type != NL80211_CHAN_HT20 &&
1097 channel_type != NL80211_CHAN_HT40PLUS &&
1098 channel_type != NL80211_CHAN_HT40MINUS)
1099 return -EINVAL;
1100 }
1101
1102 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
1103
1104 mutex_lock(&rdev->devlist_mtx);
1105 if (wdev) {
1106 wdev_lock(wdev);
1107 result = cfg80211_set_freq(rdev, wdev, freq, channel_type);
1108 wdev_unlock(wdev);
1109 } else {
1110 result = cfg80211_set_freq(rdev, NULL, freq, channel_type);
1111 }
1112 mutex_unlock(&rdev->devlist_mtx);
1113
1114 return result;
1115}
1116
1117static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
1118{
4c476991
JB		 1119 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1120 struct net_device *netdev = info->user_ptr[1];
f444de05 1121
4c476991 1122 return __nl80211_set_channel(rdev, netdev->ieee80211_ptr, info);
f444de05
JB		 1123}
1124
e8347eba
BJ		 1125static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
1126{
43b19952
JB		 1127 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1128 struct net_device *dev = info->user_ptr[1];
1129 struct wireless_dev *wdev = dev->ieee80211_ptr;
388ac775 1130 const u8 *bssid;
e8347eba
BJ		 1131
1132 if (!info->attrs[NL80211_ATTR_MAC])
1133 return -EINVAL;
1134
43b19952
JB		 1135 if (netif_running(dev))
1136 return -EBUSY;
e8347eba 1137
43b19952
JB		 1138 if (!rdev->ops->set_wds_peer)
1139 return -EOPNOTSUPP;
e8347eba 1140
43b19952
JB		 1141 if (wdev->iftype != NL80211_IFTYPE_WDS)
1142 return -EOPNOTSUPP;
e8347eba
BJ		 1143
1144 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
43b19952 1145 return rdev->ops->set_wds_peer(wdev->wiphy, dev, bssid);
e8347eba
BJ		 1146}
1147
1148
55682965
JB		 1149static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
1150{
1151 struct cfg80211_registered_device *rdev;
f444de05
JB		 1152 struct net_device *netdev = NULL;
1153 struct wireless_dev *wdev;
a1e567c8 1154 int result = 0, rem_txq_params = 0;
31888487 1155 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 1156 u32 changed;
1157 u8 retry_short = 0, retry_long = 0;
1158 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 1159 u8 coverage_class = 0;
55682965 1160
f444de05
JB		 1161 /*
1162 * Try to find the wiphy and netdev. Normally this
1163 * function shouldn't need the netdev, but this is
1164 * done for backward compatibility -- previously
1165 * setting the channel was done per wiphy, but now
1166 * it is per netdev. Previous userland like hostapd
1167 * also passed a netdev to set_wiphy, so that it is
1168 * possible to let that go to the right netdev!
1169 */
4bbf4d56
JB		 1170 mutex_lock(&cfg80211_mutex);
1171
f444de05
JB		 1172 if (info->attrs[NL80211_ATTR_IFINDEX]) {
1173 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
1174
1175 netdev = dev_get_by_index(genl_info_net(info), ifindex);
1176 if (netdev && netdev->ieee80211_ptr) {
1177 rdev = wiphy_to_dev(netdev->ieee80211_ptr->wiphy);
1178 mutex_lock(&rdev->mtx);
1179 } else
1180 netdev = NULL;
4bbf4d56
JB		 1181 }
1182
f444de05
JB		 1183 if (!netdev) {
1184 rdev = __cfg80211_rdev_from_info(info);
1185 if (IS_ERR(rdev)) {
1186 mutex_unlock(&cfg80211_mutex);
4c476991 1187 return PTR_ERR(rdev);
f444de05
JB		 1188 }
1189 wdev = NULL;
1190 netdev = NULL;
1191 result = 0;
1192
1193 mutex_lock(&rdev->mtx);
1194 } else if (netif_running(netdev) &&
1195 nl80211_can_set_dev_channel(netdev->ieee80211_ptr))
1196 wdev = netdev->ieee80211_ptr;
1197 else
1198 wdev = NULL;
1199
1200 /*
1201 * end workaround code, by now the rdev is available
1202 * and locked, and wdev may or may not be NULL.
1203 */
4bbf4d56
JB		 1204
1205 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 1206 result = cfg80211_dev_rename(
1207 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56
JB		 1208
1209 mutex_unlock(&cfg80211_mutex);
1210
1211 if (result)
1212 goto bad_res;
31888487
JM		 1213
1214 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
1215 struct ieee80211_txq_params txq_params;
1216 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
1217
1218 if (!rdev->ops->set_txq_params) {
1219 result = -EOPNOTSUPP;
1220 goto bad_res;
1221 }
1222
1223 nla_for_each_nested(nl_txq_params,
1224 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
1225 rem_txq_params) {
1226 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
1227 nla_data(nl_txq_params),
1228 nla_len(nl_txq_params),
1229 txq_params_policy);
1230 result = parse_txq_params(tb, &txq_params);
1231 if (result)
1232 goto bad_res;
1233
1234 result = rdev->ops->set_txq_params(&rdev->wiphy,
1235 &txq_params);
1236 if (result)
1237 goto bad_res;
1238 }
1239 }
55682965 1240
72bdcf34 1241 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
f444de05 1242 result = __nl80211_set_channel(rdev, wdev, info);
72bdcf34
JM		 1243 if (result)
1244 goto bad_res;
1245 }
1246
98d2ff8b
JO		 1247 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
1248 enum nl80211_tx_power_setting type;
1249 int idx, mbm = 0;
1250
1251 if (!rdev->ops->set_tx_power) {
60ea385f 1252 result = -EOPNOTSUPP;
98d2ff8b
JO		 1253 goto bad_res;
1254 }
1255
1256 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
1257 type = nla_get_u32(info->attrs[idx]);
1258
1259 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
1260 (type != NL80211_TX_POWER_AUTOMATIC)) {
1261 result = -EINVAL;
1262 goto bad_res;
1263 }
1264
1265 if (type != NL80211_TX_POWER_AUTOMATIC) {
1266 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
1267 mbm = nla_get_u32(info->attrs[idx]);
1268 }
1269
1270 result = rdev->ops->set_tx_power(&rdev->wiphy, type, mbm);
1271 if (result)
1272 goto bad_res;
1273 }
1274
afe0cbf8
BR		 1275 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
1276 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
1277 u32 tx_ant, rx_ant;
7f531e03
BR		 1278 if ((!rdev->wiphy.available_antennas_tx &&
1279 !rdev->wiphy.available_antennas_rx) ||
1280 !rdev->ops->set_antenna) {
afe0cbf8
BR		 1281 result = -EOPNOTSUPP;
1282 goto bad_res;
1283 }
1284
1285 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
1286 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
1287
a7ffac95 1288 /* reject antenna configurations which don't match the
7f531e03
BR		 1289 * available antenna masks, except for the "all" mask */
1290 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
1291 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
a7ffac95
BR		 1292 result = -EINVAL;
1293 goto bad_res;
1294 }
1295
7f531e03
BR		 1296 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
1297 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 1298
afe0cbf8
BR		 1299 result = rdev->ops->set_antenna(&rdev->wiphy, tx_ant, rx_ant);
1300 if (result)
1301 goto bad_res;
1302 }
1303
b9a5f8ca
JM		 1304 changed = 0;
1305
1306 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
1307 retry_short = nla_get_u8(
1308 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
1309 if (retry_short == 0) {
1310 result = -EINVAL;
1311 goto bad_res;
1312 }
1313 changed |= WIPHY_PARAM_RETRY_SHORT;
1314 }
1315
1316 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
1317 retry_long = nla_get_u8(
1318 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
1319 if (retry_long == 0) {
1320 result = -EINVAL;
1321 goto bad_res;
1322 }
1323 changed |= WIPHY_PARAM_RETRY_LONG;
1324 }
1325
1326 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
1327 frag_threshold = nla_get_u32(
1328 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
1329 if (frag_threshold < 256) {
1330 result = -EINVAL;
1331 goto bad_res;
1332 }
1333 if (frag_threshold != (u32) -1) {
1334 /*
1335 * Fragments (apart from the last one) are required to
1336 * have even length. Make the fragmentation code
1337 * simpler by stripping LSB should someone try to use
1338 * odd threshold value.
1339 */
1340 frag_threshold &= ~0x1;
1341 }
1342 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
1343 }
1344
1345 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
1346 rts_threshold = nla_get_u32(
1347 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
1348 changed |= WIPHY_PARAM_RTS_THRESHOLD;
1349 }
1350
81077e82
LT		 1351 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
1352 coverage_class = nla_get_u8(
1353 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
1354 changed |= WIPHY_PARAM_COVERAGE_CLASS;
1355 }
1356
b9a5f8ca
JM		 1357 if (changed) {
1358 u8 old_retry_short, old_retry_long;
1359 u32 old_frag_threshold, old_rts_threshold;
81077e82 1360 u8 old_coverage_class;
b9a5f8ca
JM		 1361
1362 if (!rdev->ops->set_wiphy_params) {
1363 result = -EOPNOTSUPP;
1364 goto bad_res;
1365 }
1366
1367 old_retry_short = rdev->wiphy.retry_short;
1368 old_retry_long = rdev->wiphy.retry_long;
1369 old_frag_threshold = rdev->wiphy.frag_threshold;
1370 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 1371 old_coverage_class = rdev->wiphy.coverage_class;
b9a5f8ca
JM		 1372
1373 if (changed & WIPHY_PARAM_RETRY_SHORT)
1374 rdev->wiphy.retry_short = retry_short;
1375 if (changed & WIPHY_PARAM_RETRY_LONG)
1376 rdev->wiphy.retry_long = retry_long;
1377 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1378 rdev->wiphy.frag_threshold = frag_threshold;
1379 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1380 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 1381 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1382 rdev->wiphy.coverage_class = coverage_class;
b9a5f8ca
JM		 1383
1384 result = rdev->ops->set_wiphy_params(&rdev->wiphy, changed);
1385 if (result) {
1386 rdev->wiphy.retry_short = old_retry_short;
1387 rdev->wiphy.retry_long = old_retry_long;
1388 rdev->wiphy.frag_threshold = old_frag_threshold;
1389 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 1390 rdev->wiphy.coverage_class = old_coverage_class;
b9a5f8ca
JM		 1391 }
1392 }
72bdcf34 1393
306d6112 1394 bad_res:
4bbf4d56 1395 mutex_unlock(&rdev->mtx);
f444de05
JB		 1396 if (netdev)
1397 dev_put(netdev);
55682965
JB		 1398 return result;
1399}
1400
1401
1402static int nl80211_send_iface(struct sk_buff *msg, u32 pid, u32 seq, int flags,
d726405a 1403 struct cfg80211_registered_device *rdev,
55682965
JB		 1404 struct net_device *dev)
1405{
1406 void *hdr;
1407
1408 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_INTERFACE);
1409 if (!hdr)
1410 return -1;
1411
1412 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
d726405a 1413 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
55682965 1414 NLA_PUT_STRING(msg, NL80211_ATTR_IFNAME, dev->name);
60719ffd 1415 NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE, dev->ieee80211_ptr->iftype);
f5ea9120
JB		 1416
1417 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION,
1418 rdev->devlist_generation ^
1419 (cfg80211_rdev_list_generation << 2));
1420
55682965
JB		 1421 return genlmsg_end(msg, hdr);
1422
1423 nla_put_failure:
bc3ed28c
TG		 1424 genlmsg_cancel(msg, hdr);
1425 return -EMSGSIZE;
55682965
JB		 1426}
1427
1428static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
1429{
1430 int wp_idx = 0;
1431 int if_idx = 0;
1432 int wp_start = cb->args[0];
1433 int if_start = cb->args[1];
f5ea9120 1434 struct cfg80211_registered_device *rdev;
55682965
JB		 1435 struct wireless_dev *wdev;
1436
a1794390 1437 mutex_lock(&cfg80211_mutex);
f5ea9120
JB		 1438 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1439 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 1440 continue;
bba95fef
JB		 1441 if (wp_idx < wp_start) {
1442 wp_idx++;
55682965 1443 continue;
bba95fef 1444 }
55682965
JB		 1445 if_idx = 0;
1446
f5ea9120
JB		 1447 mutex_lock(&rdev->devlist_mtx);
1448 list_for_each_entry(wdev, &rdev->netdev_list, list) {
bba95fef
JB		 1449 if (if_idx < if_start) {
1450 if_idx++;
55682965 1451 continue;
bba95fef 1452 }
55682965
JB		 1453 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).pid,
1454 cb->nlh->nlmsg_seq, NLM_F_MULTI,
f5ea9120
JB		 1455 rdev, wdev->netdev) < 0) {
1456 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1457 goto out;
1458 }
1459 if_idx++;
55682965 1460 }
f5ea9120 1461 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1462
1463 wp_idx++;
55682965 1464 }
bba95fef 1465 out:
a1794390 1466 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1467
1468 cb->args[0] = wp_idx;
1469 cb->args[1] = if_idx;
1470
1471 return skb->len;
1472}
1473
1474static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
1475{
1476 struct sk_buff *msg;
4c476991
JB		 1477 struct cfg80211_registered_device *dev = info->user_ptr[0];
1478 struct net_device *netdev = info->user_ptr[1];
55682965 1479
fd2120ca 1480 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1481 if (!msg)
4c476991 1482 return -ENOMEM;
55682965 1483
d726405a 1484 if (nl80211_send_iface(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 1485 dev, netdev) < 0) {
1486 nlmsg_free(msg);
1487 return -ENOBUFS;
1488 }
55682965 1489
134e6375 1490 return genlmsg_reply(msg, info);
55682965
JB		 1491}
1492
66f7ac50
MW		 1493static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
1494 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
1495 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
1496 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
1497 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
1498 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
1499};
1500
1501static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
1502{
1503 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
1504 int flag;
1505
1506 *mntrflags = 0;
1507
1508 if (!nla)
1509 return -EINVAL;
1510
1511 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
1512 nla, mntr_flags_policy))
1513 return -EINVAL;
1514
1515 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
1516 if (flags[flag])
1517 *mntrflags |= (1<<flag);
1518
1519 return 0;
1520}
1521
9bc383de 1522static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 1523 struct net_device *netdev, u8 use_4addr,
1524 enum nl80211_iftype iftype)
9bc383de 1525{
ad4bb6f8 1526 if (!use_4addr) {
f350a0a8 1527 if (netdev && (netdev->priv_flags & IFF_BRIDGE_PORT))
ad4bb6f8 1528 return -EBUSY;
9bc383de 1529 return 0;
ad4bb6f8 1530 }
9bc383de
JB		 1531
1532 switch (iftype) {
1533 case NL80211_IFTYPE_AP_VLAN:
1534 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
1535 return 0;
1536 break;
1537 case NL80211_IFTYPE_STATION:
1538 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
1539 return 0;
1540 break;
1541 default:
1542 break;
1543 }
1544
1545 return -EOPNOTSUPP;
1546}
1547
55682965
JB		 1548static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
1549{
4c476991 1550 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1551 struct vif_params params;
e36d56b6 1552 int err;
04a773ad 1553 enum nl80211_iftype otype, ntype;
4c476991 1554 struct net_device *dev = info->user_ptr[1];
92ffe055 1555 u32 _flags, *flags = NULL;
ac7f9cfa 1556 bool change = false;
55682965 1557
2ec600d6
LCC		 1558 memset(&params, 0, sizeof(params));
1559
04a773ad 1560 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 1561
723b038d 1562 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 1563 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 1564 if (otype != ntype)
ac7f9cfa 1565 change = true;
4c476991
JB		 1566 if (ntype > NL80211_IFTYPE_MAX)
1567 return -EINVAL;
723b038d
JB		 1568 }
1569
92ffe055 1570 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 1571 struct wireless_dev *wdev = dev->ieee80211_ptr;
1572
4c476991
JB		 1573 if (ntype != NL80211_IFTYPE_MESH_POINT)
1574 return -EINVAL;
29cbe68c
JB		 1575 if (netif_running(dev))
1576 return -EBUSY;
1577
1578 wdev_lock(wdev);
1579 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1580 IEEE80211_MAX_MESH_ID_LEN);
1581 wdev->mesh_id_up_len =
1582 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1583 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1584 wdev->mesh_id_up_len);
1585 wdev_unlock(wdev);
2ec600d6
LCC		 1586 }
1587
8b787643
FF		 1588 if (info->attrs[NL80211_ATTR_4ADDR]) {
1589 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
1590 change = true;
ad4bb6f8 1591 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 1592 if (err)
4c476991 1593 return err;
8b787643
FF		 1594 } else {
1595 params.use_4addr = -1;
1596 }
1597
92ffe055 1598 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4c476991
JB		 1599 if (ntype != NL80211_IFTYPE_MONITOR)
1600 return -EINVAL;
92ffe055
JB		 1601 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
1602 &_flags);
ac7f9cfa 1603 if (err)
4c476991 1604 return err;
ac7f9cfa
JB		 1605
1606 flags = &_flags;
1607 change = true;
92ffe055 1608 }
3b85875a 1609
ac7f9cfa 1610 if (change)
3d54d255 1611 err = cfg80211_change_iface(rdev, dev, ntype, flags, &params);
ac7f9cfa
JB		 1612 else
1613 err = 0;
60719ffd 1614
9bc383de
JB		 1615 if (!err && params.use_4addr != -1)
1616 dev->ieee80211_ptr->use_4addr = params.use_4addr;
1617
55682965
JB		 1618 return err;
1619}
1620
1621static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
1622{
4c476991 1623 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1624 struct vif_params params;
f9e10ce4 1625 struct net_device *dev;
55682965
JB		 1626 int err;
1627 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
66f7ac50 1628 u32 flags;
55682965 1629
2ec600d6
LCC		 1630 memset(&params, 0, sizeof(params));
1631
55682965
JB		 1632 if (!info->attrs[NL80211_ATTR_IFNAME])
1633 return -EINVAL;
1634
1635 if (info->attrs[NL80211_ATTR_IFTYPE]) {
1636 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
1637 if (type > NL80211_IFTYPE_MAX)
1638 return -EINVAL;
1639 }
1640
79c97e97 1641 if (!rdev->ops->add_virtual_intf ||
4c476991
JB		 1642 !(rdev->wiphy.interface_modes & (1 << type)))
1643 return -EOPNOTSUPP;
55682965 1644
9bc383de 1645 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 1646 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 1647 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 1648 if (err)
4c476991 1649 return err;
9bc383de 1650 }
8b787643 1651
66f7ac50
MW		 1652 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
1653 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
1654 &flags);
f9e10ce4 1655 dev = rdev->ops->add_virtual_intf(&rdev->wiphy,
66f7ac50 1656 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
2ec600d6 1657 type, err ? NULL : &flags, &params);
f9e10ce4
JB		 1658 if (IS_ERR(dev))
1659 return PTR_ERR(dev);
2ec600d6 1660
29cbe68c
JB		 1661 if (type == NL80211_IFTYPE_MESH_POINT &&
1662 info->attrs[NL80211_ATTR_MESH_ID]) {
1663 struct wireless_dev *wdev = dev->ieee80211_ptr;
1664
1665 wdev_lock(wdev);
1666 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1667 IEEE80211_MAX_MESH_ID_LEN);
1668 wdev->mesh_id_up_len =
1669 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1670 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1671 wdev->mesh_id_up_len);
1672 wdev_unlock(wdev);
1673 }
1674
f9e10ce4 1675 return 0;
55682965
JB		 1676}
1677
1678static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
1679{
4c476991
JB		 1680 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1681 struct net_device *dev = info->user_ptr[1];
55682965 1682
4c476991
JB		 1683 if (!rdev->ops->del_virtual_intf)
1684 return -EOPNOTSUPP;
55682965 1685
4c476991 1686 return rdev->ops->del_virtual_intf(&rdev->wiphy, dev);
55682965
JB		 1687}
1688
41ade00f
JB		 1689struct get_key_cookie {
1690 struct sk_buff *msg;
1691 int error;
b9454e83 1692 int idx;
41ade00f
JB		 1693};
1694
1695static void get_key_callback(void *c, struct key_params *params)
1696{
b9454e83 1697 struct nlattr *key;
41ade00f
JB		 1698 struct get_key_cookie *cookie = c;
1699
1700 if (params->key)
1701 NLA_PUT(cookie->msg, NL80211_ATTR_KEY_DATA,
1702 params->key_len, params->key);
1703
1704 if (params->seq)
1705 NLA_PUT(cookie->msg, NL80211_ATTR_KEY_SEQ,
1706 params->seq_len, params->seq);
1707
1708 if (params->cipher)
1709 NLA_PUT_U32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
1710 params->cipher);
1711
b9454e83
JB		 1712 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
1713 if (!key)
1714 goto nla_put_failure;
1715
1716 if (params->key)
1717 NLA_PUT(cookie->msg, NL80211_KEY_DATA,
1718 params->key_len, params->key);
1719
1720 if (params->seq)
1721 NLA_PUT(cookie->msg, NL80211_KEY_SEQ,
1722 params->seq_len, params->seq);
1723
1724 if (params->cipher)
1725 NLA_PUT_U32(cookie->msg, NL80211_KEY_CIPHER,
1726 params->cipher);
1727
1728 NLA_PUT_U8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx);
1729
1730 nla_nest_end(cookie->msg, key);
1731
41ade00f
JB		 1732 return;
1733 nla_put_failure:
1734 cookie->error = 1;
1735}
1736
1737static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
1738{
4c476991 1739 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 1740 int err;
4c476991 1741 struct net_device *dev = info->user_ptr[1];
41ade00f 1742 u8 key_idx = 0;
e31b8213
JB		 1743 const u8 *mac_addr = NULL;
1744 bool pairwise;
41ade00f
JB		 1745 struct get_key_cookie cookie = {
1746 .error = 0,
1747 };
1748 void *hdr;
1749 struct sk_buff *msg;
1750
1751 if (info->attrs[NL80211_ATTR_KEY_IDX])
1752 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1753
3cfcf6ac 1754 if (key_idx > 5)
41ade00f
JB		 1755 return -EINVAL;
1756
1757 if (info->attrs[NL80211_ATTR_MAC])
1758 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1759
e31b8213
JB		 1760 pairwise = !!mac_addr;
1761 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
1762 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
1763 if (kt >= NUM_NL80211_KEYTYPES)
1764 return -EINVAL;
1765 if (kt != NL80211_KEYTYPE_GROUP &&
1766 kt != NL80211_KEYTYPE_PAIRWISE)
1767 return -EINVAL;
1768 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
1769 }
1770
4c476991
JB		 1771 if (!rdev->ops->get_key)
1772 return -EOPNOTSUPP;
41ade00f 1773
fd2120ca 1774 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 1775 if (!msg)
1776 return -ENOMEM;
41ade00f
JB		 1777
1778 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
1779 NL80211_CMD_NEW_KEY);
4c476991
JB		 1780 if (IS_ERR(hdr))
1781 return PTR_ERR(hdr);
41ade00f
JB		 1782
1783 cookie.msg = msg;
b9454e83 1784 cookie.idx = key_idx;
41ade00f
JB		 1785
1786 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
1787 NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_idx);
1788 if (mac_addr)
1789 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
1790
e31b8213
JB		 1791 if (pairwise && mac_addr &&
1792 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
1793 return -ENOENT;
1794
1795 err = rdev->ops->get_key(&rdev->wiphy, dev, key_idx, pairwise,
1796 mac_addr, &cookie, get_key_callback);
41ade00f
JB		 1797
1798 if (err)
6c95e2a2 1799 goto free_msg;
41ade00f
JB		 1800
1801 if (cookie.error)
1802 goto nla_put_failure;
1803
1804 genlmsg_end(msg, hdr);
4c476991 1805 return genlmsg_reply(msg, info);
41ade00f
JB		 1806
1807 nla_put_failure:
1808 err = -ENOBUFS;
6c95e2a2 1809 free_msg:
41ade00f 1810 nlmsg_free(msg);
41ade00f
JB		 1811 return err;
1812}
1813
1814static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
1815{
4c476991 1816 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 1817 struct key_parse key;
41ade00f 1818 int err;
4c476991 1819 struct net_device *dev = info->user_ptr[1];
41ade00f 1820
b9454e83
JB		 1821 err = nl80211_parse_key(info, &key);
1822 if (err)
1823 return err;
41ade00f 1824
b9454e83 1825 if (key.idx < 0)
41ade00f
JB		 1826 return -EINVAL;
1827
b9454e83
JB		 1828 /* only support setting default key */
1829 if (!key.def && !key.defmgmt)
41ade00f
JB		 1830 return -EINVAL;
1831
dbd2fd65 1832 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 1833
dbd2fd65
JB		 1834 if (key.def) {
1835 if (!rdev->ops->set_default_key) {
1836 err = -EOPNOTSUPP;
1837 goto out;
1838 }
41ade00f 1839
dbd2fd65
JB		 1840 err = nl80211_key_allowed(dev->ieee80211_ptr);
1841 if (err)
1842 goto out;
1843
dbd2fd65
JB		 1844 err = rdev->ops->set_default_key(&rdev->wiphy, dev, key.idx,
1845 key.def_uni, key.def_multi);
1846
1847 if (err)
1848 goto out;
fffd0934 1849
3d23e349 1850#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 1851 dev->ieee80211_ptr->wext.default_key = key.idx;
1852#endif
1853 } else {
1854 if (key.def_uni || !key.def_multi) {
1855 err = -EINVAL;
1856 goto out;
1857 }
1858
1859 if (!rdev->ops->set_default_mgmt_key) {
1860 err = -EOPNOTSUPP;
1861 goto out;
1862 }
1863
1864 err = nl80211_key_allowed(dev->ieee80211_ptr);
1865 if (err)
1866 goto out;
1867
1868 err = rdev->ops->set_default_mgmt_key(&rdev->wiphy,
1869 dev, key.idx);
1870 if (err)
1871 goto out;
1872
1873#ifdef CONFIG_CFG80211_WEXT
1874 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 1875#endif
dbd2fd65
JB		 1876 }
1877
1878 out:
fffd0934 1879 wdev_unlock(dev->ieee80211_ptr);
41ade00f 1880
41ade00f
JB		 1881 return err;
1882}
1883
1884static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
1885{
4c476991 1886 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 1887 int err;
4c476991 1888 struct net_device *dev = info->user_ptr[1];
b9454e83 1889 struct key_parse key;
e31b8213 1890 const u8 *mac_addr = NULL;
41ade00f 1891
b9454e83
JB		 1892 err = nl80211_parse_key(info, &key);
1893 if (err)
1894 return err;
41ade00f 1895
b9454e83 1896 if (!key.p.key)
41ade00f
JB		 1897 return -EINVAL;
1898
41ade00f
JB		 1899 if (info->attrs[NL80211_ATTR_MAC])
1900 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1901
e31b8213
JB		 1902 if (key.type == -1) {
1903 if (mac_addr)
1904 key.type = NL80211_KEYTYPE_PAIRWISE;
1905 else
1906 key.type = NL80211_KEYTYPE_GROUP;
1907 }
1908
1909 /* for now */
1910 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
1911 key.type != NL80211_KEYTYPE_GROUP)
1912 return -EINVAL;
1913
4c476991
JB		 1914 if (!rdev->ops->add_key)
1915 return -EOPNOTSUPP;
25e47c18 1916
e31b8213
JB		 1917 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
1918 key.type == NL80211_KEYTYPE_PAIRWISE,
1919 mac_addr))
4c476991 1920 return -EINVAL;
41ade00f 1921
fffd0934
JB		 1922 wdev_lock(dev->ieee80211_ptr);
1923 err = nl80211_key_allowed(dev->ieee80211_ptr);
1924 if (!err)
1925 err = rdev->ops->add_key(&rdev->wiphy, dev, key.idx,
e31b8213 1926 key.type == NL80211_KEYTYPE_PAIRWISE,
fffd0934
JB		 1927 mac_addr, &key.p);
1928 wdev_unlock(dev->ieee80211_ptr);
41ade00f 1929
41ade00f
JB		 1930 return err;
1931}
1932
1933static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
1934{
4c476991 1935 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 1936 int err;
4c476991 1937 struct net_device *dev = info->user_ptr[1];
41ade00f 1938 u8 *mac_addr = NULL;
b9454e83 1939 struct key_parse key;
41ade00f 1940
b9454e83
JB		 1941 err = nl80211_parse_key(info, &key);
1942 if (err)
1943 return err;
41ade00f
JB		 1944
1945 if (info->attrs[NL80211_ATTR_MAC])
1946 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1947
e31b8213
JB		 1948 if (key.type == -1) {
1949 if (mac_addr)
1950 key.type = NL80211_KEYTYPE_PAIRWISE;
1951 else
1952 key.type = NL80211_KEYTYPE_GROUP;
1953 }
1954
1955 /* for now */
1956 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
1957 key.type != NL80211_KEYTYPE_GROUP)
1958 return -EINVAL;
1959
4c476991
JB		 1960 if (!rdev->ops->del_key)
1961 return -EOPNOTSUPP;
41ade00f 1962
fffd0934
JB		 1963 wdev_lock(dev->ieee80211_ptr);
1964 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213
JB		 1965
1966 if (key.type == NL80211_KEYTYPE_PAIRWISE && mac_addr &&
1967 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
1968 err = -ENOENT;
1969
fffd0934 1970 if (!err)
e31b8213
JB		 1971 err = rdev->ops->del_key(&rdev->wiphy, dev, key.idx,
1972 key.type == NL80211_KEYTYPE_PAIRWISE,
1973 mac_addr);
41ade00f 1974
3d23e349 1975#ifdef CONFIG_CFG80211_WEXT
08645126 1976 if (!err) {
b9454e83 1977 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 1978 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 1979 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 1980 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
1981 }
1982#endif
fffd0934 1983 wdev_unlock(dev->ieee80211_ptr);
08645126 1984
41ade00f
JB		 1985 return err;
1986}
1987
ed1b6cc7
JB		 1988static int nl80211_addset_beacon(struct sk_buff *skb, struct genl_info *info)
1989{
1990 int (*call)(struct wiphy *wiphy, struct net_device *dev,
1991 struct beacon_parameters *info);
4c476991
JB		 1992 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1993 struct net_device *dev = info->user_ptr[1];
56d1893d 1994 struct wireless_dev *wdev = dev->ieee80211_ptr;
ed1b6cc7 1995 struct beacon_parameters params;
56d1893d 1996 int haveinfo = 0, err;
ed1b6cc7 1997
9946ecfb
JM		 1998 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]) ||
1999 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]) ||
2000 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_PROBE_RESP]) ||
2001 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]))
f4a11bb0
JB		 2002 return -EINVAL;
2003
074ac8df 2004 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 2005 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2006 return -EOPNOTSUPP;
eec60b03 2007
56d1893d
JB		 2008 memset(&params, 0, sizeof(params));
2009
ed1b6cc7
JB		 2010 switch (info->genlhdr->cmd) {
2011 case NL80211_CMD_NEW_BEACON:
2012 /* these are required for NEW_BEACON */
2013 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
2014 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
4c476991
JB		 2015 !info->attrs[NL80211_ATTR_BEACON_HEAD])
2016 return -EINVAL;
ed1b6cc7 2017
56d1893d
JB		 2018 params.interval =
2019 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
2020 params.dtim_period =
2021 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
2022
2023 err = cfg80211_validate_beacon_int(rdev, params.interval);
2024 if (err)
2025 return err;
2026
32e9de84
JM		 2027 /*
2028 * In theory, some of these attributes could be required for
2029 * NEW_BEACON, but since they were not used when the command was
2030 * originally added, keep them optional for old user space
2031 * programs to work with drivers that do not need the additional
2032 * information.
2033 */
2034 if (info->attrs[NL80211_ATTR_SSID]) {
2035 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
2036 params.ssid_len =
2037 nla_len(info->attrs[NL80211_ATTR_SSID]);
2038 if (params.ssid_len == 0 ||
2039 params.ssid_len > IEEE80211_MAX_SSID_LEN)
2040 return -EINVAL;
2041 }
2042
2043 if (info->attrs[NL80211_ATTR_HIDDEN_SSID]) {
2044 params.hidden_ssid = nla_get_u32(
2045 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
2046 if (params.hidden_ssid !=
2047 NL80211_HIDDEN_SSID_NOT_IN_USE &&
2048 params.hidden_ssid !=
2049 NL80211_HIDDEN_SSID_ZERO_LEN &&
2050 params.hidden_ssid !=
2051 NL80211_HIDDEN_SSID_ZERO_CONTENTS)
2052 return -EINVAL;
2053 }
2054
5fb628e9
JM		 2055 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
2056
2057 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
2058 params.auth_type = nla_get_u32(
2059 info->attrs[NL80211_ATTR_AUTH_TYPE]);
2060 if (!nl80211_valid_auth_type(params.auth_type))
2061 return -EINVAL;
2062 } else
2063 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
2064
2065 err = nl80211_crypto_settings(rdev, info, &params.crypto,
2066 NL80211_MAX_NR_CIPHER_SUITES);
2067 if (err)
2068 return err;
2069
79c97e97 2070 call = rdev->ops->add_beacon;
ed1b6cc7
JB		 2071 break;
2072 case NL80211_CMD_SET_BEACON:
79c97e97 2073 call = rdev->ops->set_beacon;
ed1b6cc7
JB		 2074 break;
2075 default:
2076 WARN_ON(1);
4c476991 2077 return -EOPNOTSUPP;
ed1b6cc7
JB		 2078 }
2079
4c476991
JB		 2080 if (!call)
2081 return -EOPNOTSUPP;
ed1b6cc7 2082
ed1b6cc7
JB		 2083 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
2084 params.head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2085 params.head_len =
2086 nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2087 haveinfo = 1;
2088 }
2089
2090 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
2091 params.tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2092 params.tail_len =
2093 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2094 haveinfo = 1;
2095 }
2096
4c476991
JB		 2097 if (!haveinfo)
2098 return -EINVAL;
3b85875a 2099
9946ecfb
JM		 2100 if (info->attrs[NL80211_ATTR_IE]) {
2101 params.beacon_ies = nla_data(info->attrs[NL80211_ATTR_IE]);
2102 params.beacon_ies_len = nla_len(info->attrs[NL80211_ATTR_IE]);
2103 }
2104
2105 if (info->attrs[NL80211_ATTR_IE_PROBE_RESP]) {
2106 params.proberesp_ies =
2107 nla_data(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2108 params.proberesp_ies_len =
2109 nla_len(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2110 }
2111
2112 if (info->attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
2113 params.assocresp_ies =
2114 nla_data(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2115 params.assocresp_ies_len =
2116 nla_len(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2117 }
2118
56d1893d
JB		 2119 err = call(&rdev->wiphy, dev, &params);
2120 if (!err && params.interval)
2121 wdev->beacon_interval = params.interval;
2122 return err;
ed1b6cc7
JB		 2123}
2124
2125static int nl80211_del_beacon(struct sk_buff *skb, struct genl_info *info)
2126{
4c476991
JB		 2127 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2128 struct net_device *dev = info->user_ptr[1];
56d1893d
JB		 2129 struct wireless_dev *wdev = dev->ieee80211_ptr;
2130 int err;
ed1b6cc7 2131
4c476991
JB		 2132 if (!rdev->ops->del_beacon)
2133 return -EOPNOTSUPP;
ed1b6cc7 2134
074ac8df 2135 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 2136 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2137 return -EOPNOTSUPP;
3b85875a 2138
56d1893d
JB		 2139 err = rdev->ops->del_beacon(&rdev->wiphy, dev);
2140 if (!err)
2141 wdev->beacon_interval = 0;
2142 return err;
ed1b6cc7
JB		 2143}
2144
5727ef1b
JB		 2145static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
2146 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
2147 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
2148 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 2149 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 2150 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
5727ef1b
JB		 2151};
2152
eccb8e8f
JB		 2153static int parse_station_flags(struct genl_info *info,
2154 struct station_parameters *params)
5727ef1b
JB		 2155{
2156 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 2157 struct nlattr *nla;
5727ef1b
JB		 2158 int flag;
2159
eccb8e8f
JB		 2160 /*
2161 * Try parsing the new attribute first so userspace
2162 * can specify both for older kernels.
2163 */
2164 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
2165 if (nla) {
2166 struct nl80211_sta_flag_update *sta_flags;
2167
2168 sta_flags = nla_data(nla);
2169 params->sta_flags_mask = sta_flags->mask;
2170 params->sta_flags_set = sta_flags->set;
2171 if ((params->sta_flags_mask |
2172 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
2173 return -EINVAL;
2174 return 0;
2175 }
2176
2177 /* if present, parse the old attribute */
5727ef1b 2178
eccb8e8f 2179 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 2180 if (!nla)
2181 return 0;
2182
2183 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
2184 nla, sta_flags_policy))
2185 return -EINVAL;
2186
eccb8e8f
JB		 2187 params->sta_flags_mask = (1 << __NL80211_STA_FLAG_AFTER_LAST) - 1;
2188 params->sta_flags_mask &= ~1;
5727ef1b
JB		 2189
2190 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++)
2191 if (flags[flag])
eccb8e8f 2192 params->sta_flags_set |= (1<<flag);
5727ef1b
JB		 2193
2194 return 0;
2195}
2196
c8dcfd8a
FF		 2197static bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info,
2198 int attr)
2199{
2200 struct nlattr *rate;
2201 u16 bitrate;
2202
2203 rate = nla_nest_start(msg, attr);
2204 if (!rate)
2205 goto nla_put_failure;
2206
2207 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
2208 bitrate = cfg80211_calculate_bitrate(info);
2209 if (bitrate > 0)
2210 NLA_PUT_U16(msg, NL80211_RATE_INFO_BITRATE, bitrate);
2211
2212 if (info->flags & RATE_INFO_FLAGS_MCS)
2213 NLA_PUT_U8(msg, NL80211_RATE_INFO_MCS, info->mcs);
2214 if (info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH)
2215 NLA_PUT_FLAG(msg, NL80211_RATE_INFO_40_MHZ_WIDTH);
2216 if (info->flags & RATE_INFO_FLAGS_SHORT_GI)
2217 NLA_PUT_FLAG(msg, NL80211_RATE_INFO_SHORT_GI);
2218
2219 nla_nest_end(msg, rate);
2220 return true;
2221
2222nla_put_failure:
2223 return false;
2224}
2225
fd5b74dc
JB		 2226static int nl80211_send_station(struct sk_buff *msg, u32 pid, u32 seq,
2227 int flags, struct net_device *dev,
98b62183 2228 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 2229{
2230 void *hdr;
f4263c98 2231 struct nlattr *sinfoattr, *bss_param;
fd5b74dc
JB		 2232
2233 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
2234 if (!hdr)
2235 return -1;
2236
2237 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
2238 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
2239
f5ea9120
JB		 2240 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, sinfo->generation);
2241
2ec600d6
LCC		 2242 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
2243 if (!sinfoattr)
fd5b74dc 2244 goto nla_put_failure;
ebe27c91
MSS		 2245 if (sinfo->filled & STATION_INFO_CONNECTED_TIME)
2246 NLA_PUT_U32(msg, NL80211_STA_INFO_CONNECTED_TIME,
2247 sinfo->connected_time);
2ec600d6
LCC		 2248 if (sinfo->filled & STATION_INFO_INACTIVE_TIME)
2249 NLA_PUT_U32(msg, NL80211_STA_INFO_INACTIVE_TIME,
2250 sinfo->inactive_time);
2251 if (sinfo->filled & STATION_INFO_RX_BYTES)
2252 NLA_PUT_U32(msg, NL80211_STA_INFO_RX_BYTES,
2253 sinfo->rx_bytes);
2254 if (sinfo->filled & STATION_INFO_TX_BYTES)
2255 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_BYTES,
2256 sinfo->tx_bytes);
2257 if (sinfo->filled & STATION_INFO_LLID)
2258 NLA_PUT_U16(msg, NL80211_STA_INFO_LLID,
2259 sinfo->llid);
2260 if (sinfo->filled & STATION_INFO_PLID)
2261 NLA_PUT_U16(msg, NL80211_STA_INFO_PLID,
2262 sinfo->plid);
2263 if (sinfo->filled & STATION_INFO_PLINK_STATE)
2264 NLA_PUT_U8(msg, NL80211_STA_INFO_PLINK_STATE,
2265 sinfo->plink_state);
420e7fab
HR		 2266 if (sinfo->filled & STATION_INFO_SIGNAL)
2267 NLA_PUT_U8(msg, NL80211_STA_INFO_SIGNAL,
2268 sinfo->signal);
541a45a1
BR		 2269 if (sinfo->filled & STATION_INFO_SIGNAL_AVG)
2270 NLA_PUT_U8(msg, NL80211_STA_INFO_SIGNAL_AVG,
2271 sinfo->signal_avg);
420e7fab 2272 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
c8dcfd8a
FF		 2273 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
2274 NL80211_STA_INFO_TX_BITRATE))
2275 goto nla_put_failure;
2276 }
2277 if (sinfo->filled & STATION_INFO_RX_BITRATE) {
2278 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
2279 NL80211_STA_INFO_RX_BITRATE))
420e7fab 2280 goto nla_put_failure;
420e7fab 2281 }
98c8a60a
JM		 2282 if (sinfo->filled & STATION_INFO_RX_PACKETS)
2283 NLA_PUT_U32(msg, NL80211_STA_INFO_RX_PACKETS,
2284 sinfo->rx_packets);
2285 if (sinfo->filled & STATION_INFO_TX_PACKETS)
2286 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_PACKETS,
2287 sinfo->tx_packets);
b206b4ef
BR		 2288 if (sinfo->filled & STATION_INFO_TX_RETRIES)
2289 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_RETRIES,
2290 sinfo->tx_retries);
2291 if (sinfo->filled & STATION_INFO_TX_FAILED)
2292 NLA_PUT_U32(msg, NL80211_STA_INFO_TX_FAILED,
2293 sinfo->tx_failed);
f4263c98
PS		 2294 if (sinfo->filled & STATION_INFO_BSS_PARAM) {
2295 bss_param = nla_nest_start(msg, NL80211_STA_INFO_BSS_PARAM);
2296 if (!bss_param)
2297 goto nla_put_failure;
2298
2299 if (sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT)
2300 NLA_PUT_FLAG(msg, NL80211_STA_BSS_PARAM_CTS_PROT);
2301 if (sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE)
2302 NLA_PUT_FLAG(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE);
2303 if (sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME)
2304 NLA_PUT_FLAG(msg,
2305 NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME);
2306 NLA_PUT_U8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
2307 sinfo->bss_param.dtim_period);
2308 NLA_PUT_U16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
2309 sinfo->bss_param.beacon_interval);
2310
2311 nla_nest_end(msg, bss_param);
2312 }
2ec600d6 2313 nla_nest_end(msg, sinfoattr);
fd5b74dc 2314
040bdf71 2315 if (sinfo->filled & STATION_INFO_ASSOC_REQ_IES)
50d3dfb7
JM		 2316 NLA_PUT(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
2317 sinfo->assoc_req_ies);
2318
fd5b74dc
JB		 2319 return genlmsg_end(msg, hdr);
2320
2321 nla_put_failure:
bc3ed28c
TG		 2322 genlmsg_cancel(msg, hdr);
2323 return -EMSGSIZE;
fd5b74dc
JB		 2324}
2325
2ec600d6 2326static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 2327 struct netlink_callback *cb)
2ec600d6 2328{
2ec600d6
LCC		 2329 struct station_info sinfo;
2330 struct cfg80211_registered_device *dev;
bba95fef 2331 struct net_device *netdev;
2ec600d6 2332 u8 mac_addr[ETH_ALEN];
bba95fef 2333 int sta_idx = cb->args[1];
2ec600d6 2334 int err;
2ec600d6 2335
67748893
JB		 2336 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
2337 if (err)
2338 return err;
bba95fef
JB		 2339
2340 if (!dev->ops->dump_station) {
eec60b03 2341 err = -EOPNOTSUPP;
bba95fef
JB		 2342 goto out_err;
2343 }
2344
bba95fef 2345 while (1) {
f612cedf 2346 memset(&sinfo, 0, sizeof(sinfo));
bba95fef
JB		 2347 err = dev->ops->dump_station(&dev->wiphy, netdev, sta_idx,
2348 mac_addr, &sinfo);
2349 if (err == -ENOENT)
2350 break;
2351 if (err)
3b85875a 2352 goto out_err;
bba95fef
JB		 2353
2354 if (nl80211_send_station(skb,
2355 NETLINK_CB(cb->skb).pid,
2356 cb->nlh->nlmsg_seq, NLM_F_MULTI,
2357 netdev, mac_addr,
2358 &sinfo) < 0)
2359 goto out;
2360
2361 sta_idx++;
2362 }
2363
2364
2365 out:
2366 cb->args[1] = sta_idx;
2367 err = skb->len;
bba95fef 2368 out_err:
67748893 2369 nl80211_finish_netdev_dump(dev);
bba95fef
JB		 2370
2371 return err;
2ec600d6 2372}
fd5b74dc 2373
5727ef1b
JB		 2374static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
2375{
4c476991
JB		 2376 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2377 struct net_device *dev = info->user_ptr[1];
2ec600d6 2378 struct station_info sinfo;
fd5b74dc
JB		 2379 struct sk_buff *msg;
2380 u8 *mac_addr = NULL;
4c476991 2381 int err;
fd5b74dc 2382
2ec600d6 2383 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc
JB		 2384
2385 if (!info->attrs[NL80211_ATTR_MAC])
2386 return -EINVAL;
2387
2388 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2389
4c476991
JB		 2390 if (!rdev->ops->get_station)
2391 return -EOPNOTSUPP;
3b85875a 2392
4c476991 2393 err = rdev->ops->get_station(&rdev->wiphy, dev, mac_addr, &sinfo);
fd5b74dc 2394 if (err)
4c476991 2395 return err;
2ec600d6 2396
fd2120ca 2397 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
fd5b74dc 2398 if (!msg)
4c476991 2399 return -ENOMEM;
fd5b74dc
JB		 2400
2401 if (nl80211_send_station(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 2402 dev, mac_addr, &sinfo) < 0) {
2403 nlmsg_free(msg);
2404 return -ENOBUFS;
2405 }
3b85875a 2406
4c476991 2407 return genlmsg_reply(msg, info);
5727ef1b
JB		 2408}
2409
2410/*
c258d2de 2411 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 2412 */
463d0183 2413static int get_vlan(struct genl_info *info,
5727ef1b
JB		 2414 struct cfg80211_registered_device *rdev,
2415 struct net_device **vlan)
2416{
463d0183 2417 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
5727ef1b
JB		 2418 *vlan = NULL;
2419
2420 if (vlanattr) {
463d0183
JB		 2421 *vlan = dev_get_by_index(genl_info_net(info),
2422 nla_get_u32(vlanattr));
5727ef1b
JB		 2423 if (!*vlan)
2424 return -ENODEV;
2425 if (!(*vlan)->ieee80211_ptr)
2426 return -EINVAL;
2427 if ((*vlan)->ieee80211_ptr->wiphy != &rdev->wiphy)
2428 return -EINVAL;
c258d2de
FF		 2429 if (!netif_running(*vlan))
2430 return -ENETDOWN;
5727ef1b
JB		 2431 }
2432 return 0;
2433}
2434
2435static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
2436{
4c476991 2437 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 2438 int err;
4c476991 2439 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2440 struct station_parameters params;
2441 u8 *mac_addr = NULL;
2442
2443 memset(&params, 0, sizeof(params));
2444
2445 params.listen_interval = -1;
57cf8043 2446 params.plink_state = -1;
5727ef1b
JB		 2447
2448 if (info->attrs[NL80211_ATTR_STA_AID])
2449 return -EINVAL;
2450
2451 if (!info->attrs[NL80211_ATTR_MAC])
2452 return -EINVAL;
2453
2454 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2455
2456 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
2457 params.supported_rates =
2458 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2459 params.supported_rates_len =
2460 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2461 }
2462
2463 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
2464 params.listen_interval =
2465 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
2466
36aedc90
JM		 2467 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
2468 params.ht_capa =
2469 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
2470
eccb8e8f 2471 if (parse_station_flags(info, &params))
5727ef1b
JB		 2472 return -EINVAL;
2473
2ec600d6
LCC		 2474 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2475 params.plink_action =
2476 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2477
9c3990aa
JC		 2478 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE])
2479 params.plink_state =
2480 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
2481
463d0183 2482 err = get_vlan(info, rdev, &params.vlan);
a97f4424 2483 if (err)
034d655e 2484 goto out;
a97f4424
JB		 2485
2486 /* validate settings */
2487 err = 0;
2488
2489 switch (dev->ieee80211_ptr->iftype) {
2490 case NL80211_IFTYPE_AP:
2491 case NL80211_IFTYPE_AP_VLAN:
074ac8df 2492 case NL80211_IFTYPE_P2P_GO:
a97f4424
JB		 2493 /* disallow mesh-specific things */
2494 if (params.plink_action)
2495 err = -EINVAL;
2496 break;
074ac8df 2497 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424
JB		 2498 case NL80211_IFTYPE_STATION:
2499 /* disallow everything but AUTHORIZED flag */
2500 if (params.plink_action)
2501 err = -EINVAL;
2502 if (params.vlan)
2503 err = -EINVAL;
2504 if (params.supported_rates)
2505 err = -EINVAL;
2506 if (params.ht_capa)
2507 err = -EINVAL;
2508 if (params.listen_interval >= 0)
2509 err = -EINVAL;
2510 if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
2511 err = -EINVAL;
2512 break;
2513 case NL80211_IFTYPE_MESH_POINT:
2514 /* disallow things mesh doesn't support */
2515 if (params.vlan)
2516 err = -EINVAL;
2517 if (params.ht_capa)
2518 err = -EINVAL;
2519 if (params.listen_interval >= 0)
2520 err = -EINVAL;
b39c48fa
JC		 2521 if (params.sta_flags_mask &
2522 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
8429828e 2523 BIT(NL80211_STA_FLAG_MFP) |
b39c48fa 2524 BIT(NL80211_STA_FLAG_AUTHORIZED)))
a97f4424
JB		 2525 err = -EINVAL;
2526 break;
2527 default:
2528 err = -EINVAL;
034d655e
JB		 2529 }
2530
5727ef1b
JB		 2531 if (err)
2532 goto out;
2533
79c97e97 2534 if (!rdev->ops->change_station) {
5727ef1b
JB		 2535 err = -EOPNOTSUPP;
2536 goto out;
2537 }
2538
79c97e97 2539 err = rdev->ops->change_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b
JB		 2540
2541 out:
2542 if (params.vlan)
2543 dev_put(params.vlan);
3b85875a 2544
5727ef1b
JB		 2545 return err;
2546}
2547
c75786c9
EP		 2548static struct nla_policy
2549nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] __read_mostly = {
2550 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
2551 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
2552};
2553
5727ef1b
JB		 2554static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
2555{
4c476991 2556 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 2557 int err;
4c476991 2558 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2559 struct station_parameters params;
2560 u8 *mac_addr = NULL;
2561
2562 memset(&params, 0, sizeof(params));
2563
2564 if (!info->attrs[NL80211_ATTR_MAC])
2565 return -EINVAL;
2566
5727ef1b
JB		 2567 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
2568 return -EINVAL;
2569
2570 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
2571 return -EINVAL;
2572
0e956c13
TLSC		 2573 if (!info->attrs[NL80211_ATTR_STA_AID])
2574 return -EINVAL;
2575
5727ef1b
JB		 2576 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2577 params.supported_rates =
2578 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2579 params.supported_rates_len =
2580 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2581 params.listen_interval =
2582 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 2583
0e956c13
TLSC		 2584 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
2585 if (!params.aid || params.aid > IEEE80211_MAX_AID)
2586 return -EINVAL;
51b50fbe 2587
36aedc90
JM		 2588 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
2589 params.ht_capa =
2590 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 2591
96b78dff
JC		 2592 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2593 params.plink_action =
2594 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2595
eccb8e8f 2596 if (parse_station_flags(info, &params))
5727ef1b
JB		 2597 return -EINVAL;
2598
c75786c9
EP		 2599 /* parse WME attributes if sta is WME capable */
2600 if ((params.sta_flags_set & NL80211_STA_FLAG_WME) &&
2601 info->attrs[NL80211_ATTR_STA_WME]) {
2602 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
2603 struct nlattr *nla;
2604
2605 nla = info->attrs[NL80211_ATTR_STA_WME];
2606 err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
2607 nl80211_sta_wme_policy);
2608 if (err)
2609 return err;
2610
2611 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
2612 params.uapsd_queues =
2613 nla_get_u8(tb[NL80211_STA_WME_UAPSD_QUEUES]);
2614
2615 if (tb[NL80211_STA_WME_MAX_SP])
2616 params.max_sp =
2617 nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
2618 }
2619
0e956c13 2620 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
074ac8df 2621 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
96b78dff 2622 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 2623 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2624 return -EINVAL;
0e956c13 2625
463d0183 2626 err = get_vlan(info, rdev, &params.vlan);
a97f4424 2627 if (err)
e80cf853 2628 goto out;
a97f4424
JB		 2629
2630 /* validate settings */
2631 err = 0;
2632
79c97e97 2633 if (!rdev->ops->add_station) {
5727ef1b
JB		 2634 err = -EOPNOTSUPP;
2635 goto out;
2636 }
2637
79c97e97 2638 err = rdev->ops->add_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b
JB		 2639
2640 out:
2641 if (params.vlan)
2642 dev_put(params.vlan);
5727ef1b
JB		 2643 return err;
2644}
2645
2646static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
2647{
4c476991
JB		 2648 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2649 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2650 u8 *mac_addr = NULL;
2651
2652 if (info->attrs[NL80211_ATTR_MAC])
2653 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2654
e80cf853 2655 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
d5d9de02 2656 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
074ac8df 2657 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 2658 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2659 return -EINVAL;
5727ef1b 2660
4c476991
JB		 2661 if (!rdev->ops->del_station)
2662 return -EOPNOTSUPP;
3b85875a 2663
4c476991 2664 return rdev->ops->del_station(&rdev->wiphy, dev, mac_addr);
5727ef1b
JB		 2665}
2666
2ec600d6
LCC		 2667static int nl80211_send_mpath(struct sk_buff *msg, u32 pid, u32 seq,
2668 int flags, struct net_device *dev,
2669 u8 *dst, u8 *next_hop,
2670 struct mpath_info *pinfo)
2671{
2672 void *hdr;
2673 struct nlattr *pinfoattr;
2674
2675 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
2676 if (!hdr)
2677 return -1;
2678
2679 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
2680 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, dst);
2681 NLA_PUT(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop);
2682
f5ea9120
JB		 2683 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, pinfo->generation);
2684
2ec600d6
LCC		 2685 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
2686 if (!pinfoattr)
2687 goto nla_put_failure;
2688 if (pinfo->filled & MPATH_INFO_FRAME_QLEN)
2689 NLA_PUT_U32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
2690 pinfo->frame_qlen);
d19b3bf6
RP		 2691 if (pinfo->filled & MPATH_INFO_SN)
2692 NLA_PUT_U32(msg, NL80211_MPATH_INFO_SN,
2693 pinfo->sn);
2ec600d6
LCC		 2694 if (pinfo->filled & MPATH_INFO_METRIC)
2695 NLA_PUT_U32(msg, NL80211_MPATH_INFO_METRIC,
2696 pinfo->metric);
2697 if (pinfo->filled & MPATH_INFO_EXPTIME)
2698 NLA_PUT_U32(msg, NL80211_MPATH_INFO_EXPTIME,
2699 pinfo->exptime);
2700 if (pinfo->filled & MPATH_INFO_FLAGS)
2701 NLA_PUT_U8(msg, NL80211_MPATH_INFO_FLAGS,
2702 pinfo->flags);
2703 if (pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT)
2704 NLA_PUT_U32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
2705 pinfo->discovery_timeout);
2706 if (pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES)
2707 NLA_PUT_U8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
2708 pinfo->discovery_retries);
2709
2710 nla_nest_end(msg, pinfoattr);
2711
2712 return genlmsg_end(msg, hdr);
2713
2714 nla_put_failure:
bc3ed28c
TG		 2715 genlmsg_cancel(msg, hdr);
2716 return -EMSGSIZE;
2ec600d6
LCC		 2717}
2718
2719static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 2720 struct netlink_callback *cb)
2ec600d6 2721{
2ec600d6
LCC		 2722 struct mpath_info pinfo;
2723 struct cfg80211_registered_device *dev;
bba95fef 2724 struct net_device *netdev;
2ec600d6
LCC		 2725 u8 dst[ETH_ALEN];
2726 u8 next_hop[ETH_ALEN];
bba95fef 2727 int path_idx = cb->args[1];
2ec600d6 2728 int err;
2ec600d6 2729
67748893
JB		 2730 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
2731 if (err)
2732 return err;
bba95fef
JB		 2733
2734 if (!dev->ops->dump_mpath) {
eec60b03 2735 err = -EOPNOTSUPP;
bba95fef
JB		 2736 goto out_err;
2737 }
2738
eec60b03
JM		 2739 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
2740 err = -EOPNOTSUPP;
0448b5fc 2741 goto out_err;
eec60b03
JM		 2742 }
2743
bba95fef
JB		 2744 while (1) {
2745 err = dev->ops->dump_mpath(&dev->wiphy, netdev, path_idx,
2746 dst, next_hop, &pinfo);
2747 if (err == -ENOENT)
2ec600d6 2748 break;
bba95fef 2749 if (err)
3b85875a 2750 goto out_err;
2ec600d6 2751
bba95fef
JB		 2752 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).pid,
2753 cb->nlh->nlmsg_seq, NLM_F_MULTI,
2754 netdev, dst, next_hop,
2755 &pinfo) < 0)
2756 goto out;
2ec600d6 2757
bba95fef 2758 path_idx++;
2ec600d6 2759 }
2ec600d6 2760
2ec600d6 2761
bba95fef
JB		 2762 out:
2763 cb->args[1] = path_idx;
2764 err = skb->len;
bba95fef 2765 out_err:
67748893 2766 nl80211_finish_netdev_dump(dev);
bba95fef 2767 return err;
2ec600d6
LCC		 2768}
2769
2770static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
2771{
4c476991 2772 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 2773 int err;
4c476991 2774 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2775 struct mpath_info pinfo;
2776 struct sk_buff *msg;
2777 u8 *dst = NULL;
2778 u8 next_hop[ETH_ALEN];
2779
2780 memset(&pinfo, 0, sizeof(pinfo));
2781
2782 if (!info->attrs[NL80211_ATTR_MAC])
2783 return -EINVAL;
2784
2785 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2786
4c476991
JB		 2787 if (!rdev->ops->get_mpath)
2788 return -EOPNOTSUPP;
2ec600d6 2789
4c476991
JB		 2790 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
2791 return -EOPNOTSUPP;
eec60b03 2792
79c97e97 2793 err = rdev->ops->get_mpath(&rdev->wiphy, dev, dst, next_hop, &pinfo);
2ec600d6 2794 if (err)
4c476991 2795 return err;
2ec600d6 2796
fd2120ca 2797 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 2798 if (!msg)
4c476991 2799 return -ENOMEM;
2ec600d6
LCC		 2800
2801 if (nl80211_send_mpath(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 2802 dev, dst, next_hop, &pinfo) < 0) {
2803 nlmsg_free(msg);
2804 return -ENOBUFS;
2805 }
3b85875a 2806
4c476991 2807 return genlmsg_reply(msg, info);
2ec600d6
LCC		 2808}
2809
2810static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
2811{
4c476991
JB		 2812 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2813 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2814 u8 *dst = NULL;
2815 u8 *next_hop = NULL;
2816
2817 if (!info->attrs[NL80211_ATTR_MAC])
2818 return -EINVAL;
2819
2820 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
2821 return -EINVAL;
2822
2823 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2824 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
2825
4c476991
JB		 2826 if (!rdev->ops->change_mpath)
2827 return -EOPNOTSUPP;
35a8efe1 2828
4c476991
JB		 2829 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
2830 return -EOPNOTSUPP;
2ec600d6 2831
4c476991 2832 return rdev->ops->change_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6 2833}
4c476991 2834
2ec600d6
LCC		 2835static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
2836{
4c476991
JB		 2837 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2838 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2839 u8 *dst = NULL;
2840 u8 *next_hop = NULL;
2841
2842 if (!info->attrs[NL80211_ATTR_MAC])
2843 return -EINVAL;
2844
2845 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
2846 return -EINVAL;
2847
2848 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2849 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
2850
4c476991
JB		 2851 if (!rdev->ops->add_mpath)
2852 return -EOPNOTSUPP;
35a8efe1 2853
4c476991
JB		 2854 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
2855 return -EOPNOTSUPP;
2ec600d6 2856
4c476991 2857 return rdev->ops->add_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6
LCC		 2858}
2859
2860static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
2861{
4c476991
JB		 2862 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2863 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 2864 u8 *dst = NULL;
2865
2866 if (info->attrs[NL80211_ATTR_MAC])
2867 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
2868
4c476991
JB		 2869 if (!rdev->ops->del_mpath)
2870 return -EOPNOTSUPP;
3b85875a 2871
4c476991 2872 return rdev->ops->del_mpath(&rdev->wiphy, dev, dst);
2ec600d6
LCC		 2873}
2874
9f1ba906
JM		 2875static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
2876{
4c476991
JB		 2877 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2878 struct net_device *dev = info->user_ptr[1];
9f1ba906
JM		 2879 struct bss_parameters params;
2880
2881 memset(&params, 0, sizeof(params));
2882 /* default to not changing parameters */
2883 params.use_cts_prot = -1;
2884 params.use_short_preamble = -1;
2885 params.use_short_slot_time = -1;
fd8aaaf3 2886 params.ap_isolate = -1;
50b12f59 2887 params.ht_opmode = -1;
9f1ba906
JM		 2888
2889 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
2890 params.use_cts_prot =
2891 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
2892 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
2893 params.use_short_preamble =
2894 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
2895 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
2896 params.use_short_slot_time =
2897 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 2898 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
2899 params.basic_rates =
2900 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
2901 params.basic_rates_len =
2902 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
2903 }
fd8aaaf3
FF		 2904 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
2905 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 2906 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
2907 params.ht_opmode =
2908 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 2909
4c476991
JB		 2910 if (!rdev->ops->change_bss)
2911 return -EOPNOTSUPP;
9f1ba906 2912
074ac8df 2913 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 2914 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2915 return -EOPNOTSUPP;
3b85875a 2916
4c476991 2917 return rdev->ops->change_bss(&rdev->wiphy, dev, &params);
9f1ba906
JM		 2918}
2919
b54452b0 2920static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
b2e1b302
LR		 2921 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
2922 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
2923 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
2924 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
2925 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
2926 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
2927};
2928
2929static int parse_reg_rule(struct nlattr *tb[],
2930 struct ieee80211_reg_rule *reg_rule)
2931{
2932 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
2933 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
2934
2935 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
2936 return -EINVAL;
2937 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
2938 return -EINVAL;
2939 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
2940 return -EINVAL;
2941 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
2942 return -EINVAL;
2943 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
2944 return -EINVAL;
2945
2946 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
2947
2948 freq_range->start_freq_khz =
2949 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
2950 freq_range->end_freq_khz =
2951 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
2952 freq_range->max_bandwidth_khz =
2953 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
2954
2955 power_rule->max_eirp =
2956 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
2957
2958 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
2959 power_rule->max_antenna_gain =
2960 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
2961
2962 return 0;
2963}
2964
2965static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
2966{
2967 int r;
2968 char *data = NULL;
2969
80778f18
LR		 2970 /*
2971 * You should only get this when cfg80211 hasn't yet initialized
2972 * completely when built-in to the kernel right between the time
2973 * window between nl80211_init() and regulatory_init(), if that is
2974 * even possible.
2975 */
2976 mutex_lock(&cfg80211_mutex);
2977 if (unlikely(!cfg80211_regdomain)) {
fe33eb39
LR		 2978 mutex_unlock(&cfg80211_mutex);
2979 return -EINPROGRESS;
80778f18 2980 }
fe33eb39 2981 mutex_unlock(&cfg80211_mutex);
80778f18 2982
fe33eb39
LR		 2983 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
2984 return -EINVAL;
b2e1b302
LR		 2985
2986 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
2987
fe33eb39
LR		 2988 r = regulatory_hint_user(data);
2989
b2e1b302
LR		 2990 return r;
2991}
2992
24bdd9f4 2993static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 2994 struct genl_info *info)
93da9cc1 2995{
4c476991 2996 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 2997 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 2998 struct wireless_dev *wdev = dev->ieee80211_ptr;
2999 struct mesh_config cur_params;
3000 int err = 0;
93da9cc1 3001 void *hdr;
3002 struct nlattr *pinfoattr;
3003 struct sk_buff *msg;
3004
29cbe68c
JB		 3005 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3006 return -EOPNOTSUPP;
3007
24bdd9f4 3008 if (!rdev->ops->get_mesh_config)
4c476991 3009 return -EOPNOTSUPP;
f3f92586 3010
29cbe68c
JB		 3011 wdev_lock(wdev);
3012 /* If not connected, get default parameters */
3013 if (!wdev->mesh_id_len)
3014 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
3015 else
24bdd9f4 3016 err = rdev->ops->get_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 3017 &cur_params);
3018 wdev_unlock(wdev);
3019
93da9cc1 3020 if (err)
4c476991 3021 return err;
93da9cc1 3022
3023 /* Draw up a netlink message to send back */
fd2120ca 3024 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 3025 if (!msg)
3026 return -ENOMEM;
93da9cc1 3027 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
24bdd9f4 3028 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 3029 if (!hdr)
efe1cf0c 3030 goto out;
24bdd9f4 3031 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 3032 if (!pinfoattr)
3033 goto nla_put_failure;
3034 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
3035 NLA_PUT_U16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
3036 cur_params.dot11MeshRetryTimeout);
3037 NLA_PUT_U16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
3038 cur_params.dot11MeshConfirmTimeout);
3039 NLA_PUT_U16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
3040 cur_params.dot11MeshHoldingTimeout);
3041 NLA_PUT_U16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
3042 cur_params.dot11MeshMaxPeerLinks);
3043 NLA_PUT_U8(msg, NL80211_MESHCONF_MAX_RETRIES,
3044 cur_params.dot11MeshMaxRetries);
3045 NLA_PUT_U8(msg, NL80211_MESHCONF_TTL,
3046 cur_params.dot11MeshTTL);
45904f21
JC		 3047 NLA_PUT_U8(msg, NL80211_MESHCONF_ELEMENT_TTL,
3048 cur_params.element_ttl);
93da9cc1 3049 NLA_PUT_U8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
3050 cur_params.auto_open_plinks);
3051 NLA_PUT_U8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3052 cur_params.dot11MeshHWMPmaxPREQretries);
3053 NLA_PUT_U32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
3054 cur_params.path_refresh_time);
3055 NLA_PUT_U16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3056 cur_params.min_discovery_timeout);
3057 NLA_PUT_U32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3058 cur_params.dot11MeshHWMPactivePathTimeout);
3059 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3060 cur_params.dot11MeshHWMPpreqMinInterval);
3061 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3062 cur_params.dot11MeshHWMPnetDiameterTraversalTime);
63c5723b
RP		 3063 NLA_PUT_U8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
3064 cur_params.dot11MeshHWMPRootMode);
0507e159
JC		 3065 NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3066 cur_params.dot11MeshHWMPRannInterval);
16dd7267
JC		 3067 NLA_PUT_U8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3068 cur_params.dot11MeshGateAnnouncementProtocol);
93da9cc1 3069 nla_nest_end(msg, pinfoattr);
3070 genlmsg_end(msg, hdr);
4c476991 3071 return genlmsg_reply(msg, info);
93da9cc1 3072
3b85875a 3073 nla_put_failure:
93da9cc1 3074 genlmsg_cancel(msg, hdr);
efe1cf0c 3075 out:
d080e275 3076 nlmsg_free(msg);
4c476991 3077 return -ENOBUFS;
93da9cc1 3078}
3079
b54452b0 3080static const struct nla_policy nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
93da9cc1 3081 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
3082 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
3083 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
3084 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
3085 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
3086 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
45904f21 3087 [NL80211_MESHCONF_ELEMENT_TTL] = { .type = NLA_U8 },
93da9cc1 3088 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
3089
3090 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
3091 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
3092 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
3093 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
3094 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
3095 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
699403db 3096 [NL80211_MESHCONF_HWMP_ROOTMODE] = { .type = NLA_U8 },
0507e159 3097 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] = { .type = NLA_U16 },
16dd7267 3098 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = { .type = NLA_U8 },
93da9cc1 3099};
3100
c80d545d
JC		 3101static const struct nla_policy
3102 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
3103 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
3104 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 3105 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
581a8b0f 3106 [NL80211_MESH_SETUP_IE] = { .type = NLA_BINARY,
c80d545d 3107 .len = IEEE80211_MAX_DATA_LEN },
b130e5ce 3108 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 3109};
3110
24bdd9f4 3111static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 3112 struct mesh_config *cfg,
3113 u32 *mask_out)
93da9cc1 3114{
93da9cc1 3115 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 3116 u32 mask = 0;
93da9cc1 3117
bd90fdcc
JB		 3118#define FILL_IN_MESH_PARAM_IF_SET(table, cfg, param, mask, attr_num, nla_fn) \
3119do {\
3120 if (table[attr_num]) {\
3121 cfg->param = nla_fn(table[attr_num]); \
3122 mask |= (1 << (attr_num - 1)); \
3123 } \
3124} while (0);\
3125
3126
24bdd9f4 3127 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 3128 return -EINVAL;
3129 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
24bdd9f4 3130 info->attrs[NL80211_ATTR_MESH_CONFIG],
bd90fdcc 3131 nl80211_meshconf_params_policy))
93da9cc1 3132 return -EINVAL;
3133
93da9cc1 3134 /* This makes sure that there aren't more than 32 mesh config
3135 * parameters (otherwise our bitfield scheme would not work.) */
3136 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
3137
3138 /* Fill in the params struct */
93da9cc1 3139 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout,
3140 mask, NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
3141 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout,
3142 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT, nla_get_u16);
3143 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout,
3144 mask, NL80211_MESHCONF_HOLDING_TIMEOUT, nla_get_u16);
3145 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks,
3146 mask, NL80211_MESHCONF_MAX_PEER_LINKS, nla_get_u16);
3147 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries,
3148 mask, NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
3149 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL,
3150 mask, NL80211_MESHCONF_TTL, nla_get_u8);
45904f21
JC		 3151 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl,
3152 mask, NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
93da9cc1 3153 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks,
3154 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS, nla_get_u8);
3155 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries,
3156 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3157 nla_get_u8);
3158 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time,
3159 mask, NL80211_MESHCONF_PATH_REFRESH_TIME, nla_get_u32);
3160 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout,
3161 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3162 nla_get_u16);
3163 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
3164 mask, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3165 nla_get_u32);
3166 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
3167 mask, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3168 nla_get_u16);
3169 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3170 dot11MeshHWMPnetDiameterTraversalTime,
3171 mask, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3172 nla_get_u16);
63c5723b
RP		 3173 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3174 dot11MeshHWMPRootMode, mask,
3175 NL80211_MESHCONF_HWMP_ROOTMODE,
3176 nla_get_u8);
0507e159
JC		 3177 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3178 dot11MeshHWMPRannInterval, mask,
3179 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3180 nla_get_u16);
16dd7267
JC		 3181 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3182 dot11MeshGateAnnouncementProtocol, mask,
3183 NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3184 nla_get_u8);
bd90fdcc
JB		 3185 if (mask_out)
3186 *mask_out = mask;
c80d545d 3187
bd90fdcc
JB		 3188 return 0;
3189
3190#undef FILL_IN_MESH_PARAM_IF_SET
3191}
3192
c80d545d
JC		 3193static int nl80211_parse_mesh_setup(struct genl_info *info,
3194 struct mesh_setup *setup)
3195{
3196 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
3197
3198 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
3199 return -EINVAL;
3200 if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
3201 info->attrs[NL80211_ATTR_MESH_SETUP],
3202 nl80211_mesh_setup_params_policy))
3203 return -EINVAL;
3204
3205 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
3206 setup->path_sel_proto =
3207 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
3208 IEEE80211_PATH_PROTOCOL_VENDOR :
3209 IEEE80211_PATH_PROTOCOL_HWMP;
3210
3211 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
3212 setup->path_metric =
3213 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
3214 IEEE80211_PATH_METRIC_VENDOR :
3215 IEEE80211_PATH_METRIC_AIRTIME;
3216
581a8b0f
JC		 3217
3218 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 3219 struct nlattr *ieattr =
581a8b0f 3220 tb[NL80211_MESH_SETUP_IE];
c80d545d
JC		 3221 if (!is_valid_ie_attr(ieattr))
3222 return -EINVAL;
581a8b0f
JC		 3223 setup->ie = nla_data(ieattr);
3224 setup->ie_len = nla_len(ieattr);
c80d545d 3225 }
b130e5ce
JC		 3226 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
3227 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
c80d545d
JC		 3228
3229 return 0;
3230}
3231
24bdd9f4 3232static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 3233 struct genl_info *info)
bd90fdcc
JB		 3234{
3235 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3236 struct net_device *dev = info->user_ptr[1];
29cbe68c 3237 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 3238 struct mesh_config cfg;
3239 u32 mask;
3240 int err;
3241
29cbe68c
JB		 3242 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3243 return -EOPNOTSUPP;
3244
24bdd9f4 3245 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 3246 return -EOPNOTSUPP;
3247
24bdd9f4 3248 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 3249 if (err)
3250 return err;
3251
29cbe68c
JB		 3252 wdev_lock(wdev);
3253 if (!wdev->mesh_id_len)
3254 err = -ENOLINK;
3255
3256 if (!err)
24bdd9f4 3257 err = rdev->ops->update_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 3258 mask, &cfg);
3259
3260 wdev_unlock(wdev);
3261
3262 return err;
93da9cc1 3263}
3264
f130347c
LR		 3265static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
3266{
3267 struct sk_buff *msg;
3268 void *hdr = NULL;
3269 struct nlattr *nl_reg_rules;
3270 unsigned int i;
3271 int err = -EINVAL;
3272
a1794390 3273 mutex_lock(&cfg80211_mutex);
f130347c
LR		 3274
3275 if (!cfg80211_regdomain)
3276 goto out;
3277
fd2120ca 3278 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
f130347c
LR		 3279 if (!msg) {
3280 err = -ENOBUFS;
3281 goto out;
3282 }
3283
3284 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
3285 NL80211_CMD_GET_REG);
3286 if (!hdr)
efe1cf0c 3287 goto put_failure;
f130347c
LR		 3288
3289 NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2,
3290 cfg80211_regdomain->alpha2);
3291
3292 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
3293 if (!nl_reg_rules)
3294 goto nla_put_failure;
3295
3296 for (i = 0; i < cfg80211_regdomain->n_reg_rules; i++) {
3297 struct nlattr *nl_reg_rule;
3298 const struct ieee80211_reg_rule *reg_rule;
3299 const struct ieee80211_freq_range *freq_range;
3300 const struct ieee80211_power_rule *power_rule;
3301
3302 reg_rule = &cfg80211_regdomain->reg_rules[i];
3303 freq_range = &reg_rule->freq_range;
3304 power_rule = &reg_rule->power_rule;
3305
3306 nl_reg_rule = nla_nest_start(msg, i);
3307 if (!nl_reg_rule)
3308 goto nla_put_failure;
3309
3310 NLA_PUT_U32(msg, NL80211_ATTR_REG_RULE_FLAGS,
3311 reg_rule->flags);
3312 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_START,
3313 freq_range->start_freq_khz);
3314 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_END,
3315 freq_range->end_freq_khz);
3316 NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
3317 freq_range->max_bandwidth_khz);
3318 NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
3319 power_rule->max_antenna_gain);
3320 NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
3321 power_rule->max_eirp);
3322
3323 nla_nest_end(msg, nl_reg_rule);
3324 }
3325
3326 nla_nest_end(msg, nl_reg_rules);
3327
3328 genlmsg_end(msg, hdr);
134e6375 3329 err = genlmsg_reply(msg, info);
f130347c
LR		 3330 goto out;
3331
3332nla_put_failure:
3333 genlmsg_cancel(msg, hdr);
efe1cf0c 3334put_failure:
d080e275 3335 nlmsg_free(msg);
f130347c
LR		 3336 err = -EMSGSIZE;
3337out:
a1794390 3338 mutex_unlock(&cfg80211_mutex);
f130347c
LR		 3339 return err;
3340}
3341
b2e1b302
LR		 3342static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
3343{
3344 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
3345 struct nlattr *nl_reg_rule;
3346 char *alpha2 = NULL;
3347 int rem_reg_rules = 0, r = 0;
3348 u32 num_rules = 0, rule_idx = 0, size_of_regd;
3349 struct ieee80211_regdomain *rd = NULL;
3350
3351 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
3352 return -EINVAL;
3353
3354 if (!info->attrs[NL80211_ATTR_REG_RULES])
3355 return -EINVAL;
3356
3357 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
3358
3359 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
3360 rem_reg_rules) {
3361 num_rules++;
3362 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 3363 return -EINVAL;
b2e1b302
LR		 3364 }
3365
61405e97
LR		 3366 mutex_lock(&cfg80211_mutex);
3367
d0e18f83
LR		 3368 if (!reg_is_valid_request(alpha2)) {
3369 r = -EINVAL;
3370 goto bad_reg;
3371 }
b2e1b302
LR		 3372
3373 size_of_regd = sizeof(struct ieee80211_regdomain) +
3374 (num_rules * sizeof(struct ieee80211_reg_rule));
3375
3376 rd = kzalloc(size_of_regd, GFP_KERNEL);
d0e18f83
LR		 3377 if (!rd) {
3378 r = -ENOMEM;
3379 goto bad_reg;
3380 }
b2e1b302
LR		 3381
3382 rd->n_reg_rules = num_rules;
3383 rd->alpha2[0] = alpha2[0];
3384 rd->alpha2[1] = alpha2[1];
3385
3386 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
3387 rem_reg_rules) {
3388 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
3389 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
3390 reg_rule_policy);
3391 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
3392 if (r)
3393 goto bad_reg;
3394
3395 rule_idx++;
3396
d0e18f83
LR		 3397 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
3398 r = -EINVAL;
b2e1b302 3399 goto bad_reg;
d0e18f83 3400 }
b2e1b302
LR		 3401 }
3402
3403 BUG_ON(rule_idx != num_rules);
3404
b2e1b302 3405 r = set_regdom(rd);
61405e97 3406
a1794390 3407 mutex_unlock(&cfg80211_mutex);
d0e18f83 3408
b2e1b302
LR		 3409 return r;
3410
d2372b31 3411 bad_reg:
61405e97 3412 mutex_unlock(&cfg80211_mutex);
b2e1b302 3413 kfree(rd);
d0e18f83 3414 return r;
b2e1b302
LR		 3415}
3416
83f5e2cf
JB		 3417static int validate_scan_freqs(struct nlattr *freqs)
3418{
3419 struct nlattr *attr1, *attr2;
3420 int n_channels = 0, tmp1, tmp2;
3421
3422 nla_for_each_nested(attr1, freqs, tmp1) {
3423 n_channels++;
3424 /*
3425 * Some hardware has a limited channel list for
3426 * scanning, and it is pretty much nonsensical
3427 * to scan for a channel twice, so disallow that
3428 * and don't require drivers to check that the
3429 * channel list they get isn't longer than what
3430 * they can scan, as long as they can scan all
3431 * the channels they registered at once.
3432 */
3433 nla_for_each_nested(attr2, freqs, tmp2)
3434 if (attr1 != attr2 &&
3435 nla_get_u32(attr1) == nla_get_u32(attr2))
3436 return 0;
3437 }
3438
3439 return n_channels;
3440}
3441
2a519311
JB		 3442static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
3443{
4c476991
JB		 3444 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3445 struct net_device *dev = info->user_ptr[1];
2a519311 3446 struct cfg80211_scan_request *request;
2a519311
JB		 3447 struct nlattr *attr;
3448 struct wiphy *wiphy;
83f5e2cf 3449 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 3450 size_t ie_len;
2a519311 3451
f4a11bb0
JB		 3452 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3453 return -EINVAL;
3454
79c97e97 3455 wiphy = &rdev->wiphy;
2a519311 3456
4c476991
JB		 3457 if (!rdev->ops->scan)
3458 return -EOPNOTSUPP;
2a519311 3459
4c476991
JB		 3460 if (rdev->scan_req)
3461 return -EBUSY;
2a519311
JB		 3462
3463 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
83f5e2cf
JB		 3464 n_channels = validate_scan_freqs(
3465 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4c476991
JB		 3466 if (!n_channels)
3467 return -EINVAL;
2a519311 3468 } else {
34850ab2 3469 enum ieee80211_band band;
83f5e2cf
JB		 3470 n_channels = 0;
3471
2a519311
JB		 3472 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
3473 if (wiphy->bands[band])
3474 n_channels += wiphy->bands[band]->n_channels;
3475 }
3476
3477 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
3478 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
3479 n_ssids++;
3480
4c476991
JB		 3481 if (n_ssids > wiphy->max_scan_ssids)
3482 return -EINVAL;
2a519311 3483
70692ad2
JM		 3484 if (info->attrs[NL80211_ATTR_IE])
3485 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3486 else
3487 ie_len = 0;
3488
4c476991
JB		 3489 if (ie_len > wiphy->max_scan_ie_len)
3490 return -EINVAL;
18a83659 3491
2a519311 3492 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 3493 + sizeof(*request->ssids) * n_ssids
3494 + sizeof(*request->channels) * n_channels
70692ad2 3495 + ie_len, GFP_KERNEL);
4c476991
JB		 3496 if (!request)
3497 return -ENOMEM;
2a519311 3498
2a519311 3499 if (n_ssids)
5ba63533 3500 request->ssids = (void *)&request->channels[n_channels];
2a519311 3501 request->n_ssids = n_ssids;
70692ad2
JM		 3502 if (ie_len) {
3503 if (request->ssids)
3504 request->ie = (void *)(request->ssids + n_ssids);
3505 else
3506 request->ie = (void *)(request->channels + n_channels);
3507 }
2a519311 3508
584991dc 3509 i = 0;
2a519311
JB		 3510 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3511 /* user specified, bail out if channel not found */
2a519311 3512 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
584991dc
JB		 3513 struct ieee80211_channel *chan;
3514
3515 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
3516
3517 if (!chan) {
2a519311
JB		 3518 err = -EINVAL;
3519 goto out_free;
3520 }
584991dc
JB		 3521
3522 /* ignore disabled channels */
3523 if (chan->flags & IEEE80211_CHAN_DISABLED)
3524 continue;
3525
3526 request->channels[i] = chan;
2a519311
JB		 3527 i++;
3528 }
3529 } else {
34850ab2
JB		 3530 enum ieee80211_band band;
3531
2a519311 3532 /* all channels */
2a519311
JB		 3533 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
3534 int j;
3535 if (!wiphy->bands[band])
3536 continue;
3537 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 3538 struct ieee80211_channel *chan;
3539
3540 chan = &wiphy->bands[band]->channels[j];
3541
3542 if (chan->flags & IEEE80211_CHAN_DISABLED)
3543 continue;
3544
3545 request->channels[i] = chan;
2a519311
JB		 3546 i++;
3547 }
3548 }
3549 }
3550
584991dc
JB		 3551 if (!i) {
3552 err = -EINVAL;
3553 goto out_free;
3554 }
3555
3556 request->n_channels = i;
3557
2a519311
JB		 3558 i = 0;
3559 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
3560 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 3561 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 3562 err = -EINVAL;
3563 goto out_free;
3564 }
57a27e1d 3565 request->ssids[i].ssid_len = nla_len(attr);
2a519311 3566 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 3567 i++;
3568 }
3569 }
3570
70692ad2
JM		 3571 if (info->attrs[NL80211_ATTR_IE]) {
3572 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 3573 memcpy((void *)request->ie,
3574 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 3575 request->ie_len);
3576 }
3577
34850ab2 3578 for (i = 0; i < IEEE80211_NUM_BANDS; i++)
a401d2bb
JB		 3579 if (wiphy->bands[i])
3580 request->rates[i] =
3581 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 3582
3583 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
3584 nla_for_each_nested(attr,
3585 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
3586 tmp) {
3587 enum ieee80211_band band = nla_type(attr);
3588
84404623 3589 if (band < 0 || band >= IEEE80211_NUM_BANDS) {
34850ab2
JB		 3590 err = -EINVAL;
3591 goto out_free;
3592 }
3593 err = ieee80211_get_ratemask(wiphy->bands[band],
3594 nla_data(attr),
3595 nla_len(attr),
3596 &request->rates[band]);
3597 if (err)
3598 goto out_free;
3599 }
3600 }
3601
463d0183 3602 request->dev = dev;
79c97e97 3603 request->wiphy = &rdev->wiphy;
2a519311 3604
79c97e97
JB		 3605 rdev->scan_req = request;
3606 err = rdev->ops->scan(&rdev->wiphy, dev, request);
2a519311 3607
463d0183 3608 if (!err) {
79c97e97 3609 nl80211_send_scan_start(rdev, dev);
463d0183 3610 dev_hold(dev);
4c476991 3611 } else {
2a519311 3612 out_free:
79c97e97 3613 rdev->scan_req = NULL;
2a519311
JB		 3614 kfree(request);
3615 }
3b85875a 3616
2a519311
JB		 3617 return err;
3618}
3619
807f8a8c
LC		 3620static int nl80211_start_sched_scan(struct sk_buff *skb,
3621 struct genl_info *info)
3622{
3623 struct cfg80211_sched_scan_request *request;
3624 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3625 struct net_device *dev = info->user_ptr[1];
807f8a8c
LC		 3626 struct nlattr *attr;
3627 struct wiphy *wiphy;
3628 int err, tmp, n_ssids = 0, n_channels, i;
bbe6ad6d 3629 u32 interval;
807f8a8c
LC		 3630 enum ieee80211_band band;
3631 size_t ie_len;
3632
3633 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
3634 !rdev->ops->sched_scan_start)
3635 return -EOPNOTSUPP;
3636
3637 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3638 return -EINVAL;
3639
bbe6ad6d
LC		 3640 if (!info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
3641 return -EINVAL;
3642
3643 interval = nla_get_u32(info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
3644 if (interval == 0)
3645 return -EINVAL;
3646
807f8a8c
LC		 3647 wiphy = &rdev->wiphy;
3648
3649 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3650 n_channels = validate_scan_freqs(
3651 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
3652 if (!n_channels)
3653 return -EINVAL;
3654 } else {
3655 n_channels = 0;
3656
3657 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
3658 if (wiphy->bands[band])
3659 n_channels += wiphy->bands[band]->n_channels;
3660 }
3661
3662 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
3663 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
3664 tmp)
3665 n_ssids++;
3666
93b6aa69 3667 if (n_ssids > wiphy->max_sched_scan_ssids)
807f8a8c
LC		 3668 return -EINVAL;
3669
3670 if (info->attrs[NL80211_ATTR_IE])
3671 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3672 else
3673 ie_len = 0;
3674
5a865bad 3675 if (ie_len > wiphy->max_sched_scan_ie_len)
807f8a8c
LC		 3676 return -EINVAL;
3677
c10841ca
LC		 3678 mutex_lock(&rdev->sched_scan_mtx);
3679
3680 if (rdev->sched_scan_req) {
3681 err = -EINPROGRESS;
3682 goto out;
3683 }
3684
807f8a8c 3685 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 3686 + sizeof(*request->ssids) * n_ssids
3687 + sizeof(*request->channels) * n_channels
807f8a8c 3688 + ie_len, GFP_KERNEL);
c10841ca
LC		 3689 if (!request) {
3690 err = -ENOMEM;
3691 goto out;
3692 }
807f8a8c
LC		 3693
3694 if (n_ssids)
3695 request->ssids = (void *)&request->channels[n_channels];
3696 request->n_ssids = n_ssids;
3697 if (ie_len) {
3698 if (request->ssids)
3699 request->ie = (void *)(request->ssids + n_ssids);
3700 else
3701 request->ie = (void *)(request->channels + n_channels);
3702 }
3703
3704 i = 0;
3705 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3706 /* user specified, bail out if channel not found */
3707 nla_for_each_nested(attr,
3708 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES],
3709 tmp) {
3710 struct ieee80211_channel *chan;
3711
3712 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
3713
3714 if (!chan) {
3715 err = -EINVAL;
3716 goto out_free;
3717 }
3718
3719 /* ignore disabled channels */
3720 if (chan->flags & IEEE80211_CHAN_DISABLED)
3721 continue;
3722
3723 request->channels[i] = chan;
3724 i++;
3725 }
3726 } else {
3727 /* all channels */
3728 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
3729 int j;
3730 if (!wiphy->bands[band])
3731 continue;
3732 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
3733 struct ieee80211_channel *chan;
3734
3735 chan = &wiphy->bands[band]->channels[j];
3736
3737 if (chan->flags & IEEE80211_CHAN_DISABLED)
3738 continue;
3739
3740 request->channels[i] = chan;
3741 i++;
3742 }
3743 }
3744 }
3745
3746 if (!i) {
3747 err = -EINVAL;
3748 goto out_free;
3749 }
3750
3751 request->n_channels = i;
3752
3753 i = 0;
3754 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
3755 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
3756 tmp) {
57a27e1d 3757 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 3758 err = -EINVAL;
3759 goto out_free;
3760 }
57a27e1d 3761 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 3762 memcpy(request->ssids[i].ssid, nla_data(attr),
3763 nla_len(attr));
807f8a8c
LC		 3764 i++;
3765 }
3766 }
3767
3768 if (info->attrs[NL80211_ATTR_IE]) {
3769 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3770 memcpy((void *)request->ie,
3771 nla_data(info->attrs[NL80211_ATTR_IE]),
3772 request->ie_len);
3773 }
3774
3775 request->dev = dev;
3776 request->wiphy = &rdev->wiphy;
bbe6ad6d 3777 request->interval = interval;
807f8a8c
LC		 3778
3779 err = rdev->ops->sched_scan_start(&rdev->wiphy, dev, request);
3780 if (!err) {
3781 rdev->sched_scan_req = request;
3782 nl80211_send_sched_scan(rdev, dev,
3783 NL80211_CMD_START_SCHED_SCAN);
3784 goto out;
3785 }
3786
3787out_free:
3788 kfree(request);
3789out:
c10841ca 3790 mutex_unlock(&rdev->sched_scan_mtx);
807f8a8c
LC		 3791 return err;
3792}
3793
3794static int nl80211_stop_sched_scan(struct sk_buff *skb,
3795 struct genl_info *info)
3796{
3797 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c10841ca 3798 int err;
807f8a8c
LC		 3799
3800 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
3801 !rdev->ops->sched_scan_stop)
3802 return -EOPNOTSUPP;
3803
c10841ca
LC		 3804 mutex_lock(&rdev->sched_scan_mtx);
3805 err = __cfg80211_stop_sched_scan(rdev, false);
3806 mutex_unlock(&rdev->sched_scan_mtx);
3807
3808 return err;
807f8a8c
LC		 3809}
3810
9720bb3a
JB		 3811static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
3812 u32 seq, int flags,
2a519311 3813 struct cfg80211_registered_device *rdev,
48ab905d
JB		 3814 struct wireless_dev *wdev,
3815 struct cfg80211_internal_bss *intbss)
2a519311 3816{
48ab905d 3817 struct cfg80211_bss *res = &intbss->pub;
2a519311
JB		 3818 void *hdr;
3819 struct nlattr *bss;
48ab905d
JB		 3820 int i;
3821
3822 ASSERT_WDEV_LOCK(wdev);
2a519311 3823
9720bb3a 3824 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).pid, seq, flags,
2a519311
JB		 3825 NL80211_CMD_NEW_SCAN_RESULTS);
3826 if (!hdr)
3827 return -1;
3828
9720bb3a
JB		 3829 genl_dump_check_consistent(cb, hdr, &nl80211_fam);
3830
f5ea9120 3831 NLA_PUT_U32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation);
48ab905d 3832 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex);
2a519311
JB		 3833
3834 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
3835 if (!bss)
3836 goto nla_put_failure;
3837 if (!is_zero_ether_addr(res->bssid))
3838 NLA_PUT(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid);
3839 if (res->information_elements && res->len_information_elements)
3840 NLA_PUT(msg, NL80211_BSS_INFORMATION_ELEMENTS,
3841 res->len_information_elements,
3842 res->information_elements);
34a6eddb
JM		 3843 if (res->beacon_ies && res->len_beacon_ies &&
3844 res->beacon_ies != res->information_elements)
3845 NLA_PUT(msg, NL80211_BSS_BEACON_IES,
3846 res->len_beacon_ies, res->beacon_ies);
2a519311
JB		 3847 if (res->tsf)
3848 NLA_PUT_U64(msg, NL80211_BSS_TSF, res->tsf);
3849 if (res->beacon_interval)
3850 NLA_PUT_U16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval);
3851 NLA_PUT_U16(msg, NL80211_BSS_CAPABILITY, res->capability);
3852 NLA_PUT_U32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq);
7c89606e
HS		 3853 NLA_PUT_U32(msg, NL80211_BSS_SEEN_MS_AGO,
3854 jiffies_to_msecs(jiffies - intbss->ts));
2a519311 3855
77965c97 3856 switch (rdev->wiphy.signal_type) {
2a519311
JB		 3857 case CFG80211_SIGNAL_TYPE_MBM:
3858 NLA_PUT_U32(msg, NL80211_BSS_SIGNAL_MBM, res->signal);
3859 break;
3860 case CFG80211_SIGNAL_TYPE_UNSPEC:
3861 NLA_PUT_U8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal);
3862 break;
3863 default:
3864 break;
3865 }
3866
48ab905d 3867 switch (wdev->iftype) {
074ac8df 3868 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d
JB		 3869 case NL80211_IFTYPE_STATION:
3870 if (intbss == wdev->current_bss)
3871 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3872 NL80211_BSS_STATUS_ASSOCIATED);
3873 else for (i = 0; i < MAX_AUTH_BSSES; i++) {
3874 if (intbss != wdev->auth_bsses[i])
3875 continue;
3876 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3877 NL80211_BSS_STATUS_AUTHENTICATED);
3878 break;
3879 }
3880 break;
3881 case NL80211_IFTYPE_ADHOC:
3882 if (intbss == wdev->current_bss)
3883 NLA_PUT_U32(msg, NL80211_BSS_STATUS,
3884 NL80211_BSS_STATUS_IBSS_JOINED);
3885 break;
3886 default:
3887 break;
3888 }
3889
2a519311
JB		 3890 nla_nest_end(msg, bss);
3891
3892 return genlmsg_end(msg, hdr);
3893
3894 nla_put_failure:
3895 genlmsg_cancel(msg, hdr);
3896 return -EMSGSIZE;
3897}
3898
3899static int nl80211_dump_scan(struct sk_buff *skb,
3900 struct netlink_callback *cb)
3901{
48ab905d
JB		 3902 struct cfg80211_registered_device *rdev;
3903 struct net_device *dev;
2a519311 3904 struct cfg80211_internal_bss *scan;
48ab905d 3905 struct wireless_dev *wdev;
2a519311
JB		 3906 int start = cb->args[1], idx = 0;
3907 int err;
3908
67748893
JB		 3909 err = nl80211_prepare_netdev_dump(skb, cb, &rdev, &dev);
3910 if (err)
3911 return err;
2a519311 3912
48ab905d 3913 wdev = dev->ieee80211_ptr;
2a519311 3914
48ab905d
JB		 3915 wdev_lock(wdev);
3916 spin_lock_bh(&rdev->bss_lock);
3917 cfg80211_bss_expire(rdev);
3918
9720bb3a
JB		 3919 cb->seq = rdev->bss_generation;
3920
48ab905d 3921 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 3922 if (++idx <= start)
3923 continue;
9720bb3a 3924 if (nl80211_send_bss(skb, cb,
2a519311 3925 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 3926 rdev, wdev, scan) < 0) {
2a519311 3927 idx--;
67748893 3928 break;
2a519311
JB		 3929 }
3930 }
3931
48ab905d
JB		 3932 spin_unlock_bh(&rdev->bss_lock);
3933 wdev_unlock(wdev);
2a519311
JB		 3934
3935 cb->args[1] = idx;
67748893 3936 nl80211_finish_netdev_dump(rdev);
2a519311 3937
67748893 3938 return skb->len;
2a519311
JB		 3939}
3940
61fa713c
HS		 3941static int nl80211_send_survey(struct sk_buff *msg, u32 pid, u32 seq,
3942 int flags, struct net_device *dev,
3943 struct survey_info *survey)
3944{
3945 void *hdr;
3946 struct nlattr *infoattr;
3947
61fa713c
HS		 3948 hdr = nl80211hdr_put(msg, pid, seq, flags,
3949 NL80211_CMD_NEW_SURVEY_RESULTS);
3950 if (!hdr)
3951 return -ENOMEM;
3952
3953 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
3954
3955 infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
3956 if (!infoattr)
3957 goto nla_put_failure;
3958
3959 NLA_PUT_U32(msg, NL80211_SURVEY_INFO_FREQUENCY,
3960 survey->channel->center_freq);
3961 if (survey->filled & SURVEY_INFO_NOISE_DBM)
3962 NLA_PUT_U8(msg, NL80211_SURVEY_INFO_NOISE,
3963 survey->noise);
17e5a808
FF		 3964 if (survey->filled & SURVEY_INFO_IN_USE)
3965 NLA_PUT_FLAG(msg, NL80211_SURVEY_INFO_IN_USE);
8610c29a
FF		 3966 if (survey->filled & SURVEY_INFO_CHANNEL_TIME)
3967 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME,
3968 survey->channel_time);
3969 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_BUSY)
3970 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_BUSY,
3971 survey->channel_time_busy);
3972 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_EXT_BUSY)
3973 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_EXT_BUSY,
3974 survey->channel_time_ext_busy);
3975 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_RX)
3976 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_RX,
3977 survey->channel_time_rx);
3978 if (survey->filled & SURVEY_INFO_CHANNEL_TIME_TX)
3979 NLA_PUT_U64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_TX,
3980 survey->channel_time_tx);
61fa713c
HS		 3981
3982 nla_nest_end(msg, infoattr);
3983
3984 return genlmsg_end(msg, hdr);
3985
3986 nla_put_failure:
3987 genlmsg_cancel(msg, hdr);
3988 return -EMSGSIZE;
3989}
3990
3991static int nl80211_dump_survey(struct sk_buff *skb,
3992 struct netlink_callback *cb)
3993{
3994 struct survey_info survey;
3995 struct cfg80211_registered_device *dev;
3996 struct net_device *netdev;
61fa713c
HS		 3997 int survey_idx = cb->args[1];
3998 int res;
3999
67748893
JB		 4000 res = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
4001 if (res)
4002 return res;
61fa713c
HS		 4003
4004 if (!dev->ops->dump_survey) {
4005 res = -EOPNOTSUPP;
4006 goto out_err;
4007 }
4008
4009 while (1) {
180cdc79
LR		 4010 struct ieee80211_channel *chan;
4011
61fa713c
HS		 4012 res = dev->ops->dump_survey(&dev->wiphy, netdev, survey_idx,
4013 &survey);
4014 if (res == -ENOENT)
4015 break;
4016 if (res)
4017 goto out_err;
4018
180cdc79
LR		 4019 /* Survey without a channel doesn't make sense */
4020 if (!survey.channel) {
4021 res = -EINVAL;
4022 goto out;
4023 }
4024
4025 chan = ieee80211_get_channel(&dev->wiphy,
4026 survey.channel->center_freq);
4027 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED) {
4028 survey_idx++;
4029 continue;
4030 }
4031
61fa713c
HS		 4032 if (nl80211_send_survey(skb,
4033 NETLINK_CB(cb->skb).pid,
4034 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4035 netdev,
4036 &survey) < 0)
4037 goto out;
4038 survey_idx++;
4039 }
4040
4041 out:
4042 cb->args[1] = survey_idx;
4043 res = skb->len;
4044 out_err:
67748893 4045 nl80211_finish_netdev_dump(dev);
61fa713c
HS		 4046 return res;
4047}
4048
255e737e
JM		 4049static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type)
4050{
b23aa676
SO		 4051 return auth_type <= NL80211_AUTHTYPE_MAX;
4052}
4053
4054static bool nl80211_valid_wpa_versions(u32 wpa_versions)
4055{
4056 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
4057 NL80211_WPA_VERSION_2));
4058}
4059
4060static bool nl80211_valid_akm_suite(u32 akm)
4061{
4062 return akm == WLAN_AKM_SUITE_8021X ||
4063 akm == WLAN_AKM_SUITE_PSK;
4064}
4065
4066static bool nl80211_valid_cipher_suite(u32 cipher)
4067{
4068 return cipher == WLAN_CIPHER_SUITE_WEP40 ||
4069 cipher == WLAN_CIPHER_SUITE_WEP104 ||
4070 cipher == WLAN_CIPHER_SUITE_TKIP ||
4071 cipher == WLAN_CIPHER_SUITE_CCMP ||
4072 cipher == WLAN_CIPHER_SUITE_AES_CMAC;
255e737e
JM		 4073}
4074
b23aa676 4075
636a5d36
JM		 4076static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
4077{
4c476991
JB		 4078 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4079 struct net_device *dev = info->user_ptr[1];
19957bb3
JB		 4080 struct ieee80211_channel *chan;
4081 const u8 *bssid, *ssid, *ie = NULL;
4082 int err, ssid_len, ie_len = 0;
4083 enum nl80211_auth_type auth_type;
fffd0934 4084 struct key_parse key;
d5cdfacb 4085 bool local_state_change;
636a5d36 4086
f4a11bb0
JB		 4087 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4088 return -EINVAL;
4089
4090 if (!info->attrs[NL80211_ATTR_MAC])
4091 return -EINVAL;
4092
1778092e
JM		 4093 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
4094 return -EINVAL;
4095
19957bb3
JB		 4096 if (!info->attrs[NL80211_ATTR_SSID])
4097 return -EINVAL;
4098
4099 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
4100 return -EINVAL;
4101
fffd0934
JB		 4102 err = nl80211_parse_key(info, &key);
4103 if (err)
4104 return err;
4105
4106 if (key.idx >= 0) {
e31b8213
JB		 4107 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
4108 return -EINVAL;
fffd0934
JB		 4109 if (!key.p.key || !key.p.key_len)
4110 return -EINVAL;
4111 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
4112 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
4113 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
4114 key.p.key_len != WLAN_KEY_LEN_WEP104))
4115 return -EINVAL;
4116 if (key.idx > 4)
4117 return -EINVAL;
4118 } else {
4119 key.p.key_len = 0;
4120 key.p.key = NULL;
4121 }
4122
afea0b7a
JB		 4123 if (key.idx >= 0) {
4124 int i;
4125 bool ok = false;
4126 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
4127 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
4128 ok = true;
4129 break;
4130 }
4131 }
4c476991
JB		 4132 if (!ok)
4133 return -EINVAL;
afea0b7a
JB		 4134 }
4135
4c476991
JB		 4136 if (!rdev->ops->auth)
4137 return -EOPNOTSUPP;
636a5d36 4138
074ac8df 4139 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4140 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4141 return -EOPNOTSUPP;
eec60b03 4142
19957bb3 4143 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
79c97e97 4144 chan = ieee80211_get_channel(&rdev->wiphy,
19957bb3 4145 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4146 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4147 return -EINVAL;
636a5d36 4148
19957bb3
JB		 4149 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4150 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4151
4152 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4153 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4154 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4155 }
4156
19957bb3 4157 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
4c476991
JB		 4158 if (!nl80211_valid_auth_type(auth_type))
4159 return -EINVAL;
636a5d36 4160
d5cdfacb
JM		 4161 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4162
4c476991
JB		 4163 return cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
4164 ssid, ssid_len, ie, ie_len,
4165 key.p.key, key.p.key_len, key.idx,
4166 local_state_change);
636a5d36
JM		 4167}
4168
c0692b8f
JB		 4169static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
4170 struct genl_info *info,
3dc27d25
JB		 4171 struct cfg80211_crypto_settings *settings,
4172 int cipher_limit)
b23aa676 4173{
c0b2bbd8
JB		 4174 memset(settings, 0, sizeof(*settings));
4175
b23aa676
SO		 4176 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
4177
c0692b8f
JB		 4178 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
4179 u16 proto;
4180 proto = nla_get_u16(
4181 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
4182 settings->control_port_ethertype = cpu_to_be16(proto);
4183 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
4184 proto != ETH_P_PAE)
4185 return -EINVAL;
4186 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
4187 settings->control_port_no_encrypt = true;
4188 } else
4189 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
4190
b23aa676
SO		 4191 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
4192 void *data;
4193 int len, i;
4194
4195 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
4196 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
4197 settings->n_ciphers_pairwise = len / sizeof(u32);
4198
4199 if (len % sizeof(u32))
4200 return -EINVAL;
4201
3dc27d25 4202 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 4203 return -EINVAL;
4204
4205 memcpy(settings->ciphers_pairwise, data, len);
4206
4207 for (i = 0; i < settings->n_ciphers_pairwise; i++)
4208 if (!nl80211_valid_cipher_suite(
4209 settings->ciphers_pairwise[i]))
4210 return -EINVAL;
4211 }
4212
4213 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
4214 settings->cipher_group =
4215 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
4216 if (!nl80211_valid_cipher_suite(settings->cipher_group))
4217 return -EINVAL;
4218 }
4219
4220 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
4221 settings->wpa_versions =
4222 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
4223 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
4224 return -EINVAL;
4225 }
4226
4227 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
4228 void *data;
4229 int len, i;
4230
4231 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
4232 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
4233 settings->n_akm_suites = len / sizeof(u32);
4234
4235 if (len % sizeof(u32))
4236 return -EINVAL;
4237
4238 memcpy(settings->akm_suites, data, len);
4239
4240 for (i = 0; i < settings->n_ciphers_pairwise; i++)
4241 if (!nl80211_valid_akm_suite(settings->akm_suites[i]))
4242 return -EINVAL;
4243 }
4244
4245 return 0;
4246}
4247
636a5d36
JM		 4248static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
4249{
4c476991
JB		 4250 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4251 struct net_device *dev = info->user_ptr[1];
19957bb3 4252 struct cfg80211_crypto_settings crypto;
f444de05 4253 struct ieee80211_channel *chan;
3e5d7649 4254 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
19957bb3
JB		 4255 int err, ssid_len, ie_len = 0;
4256 bool use_mfp = false;
636a5d36 4257
f4a11bb0
JB		 4258 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4259 return -EINVAL;
4260
4261 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 4262 !info->attrs[NL80211_ATTR_SSID] ||
4263 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 4264 return -EINVAL;
4265
4c476991
JB		 4266 if (!rdev->ops->assoc)
4267 return -EOPNOTSUPP;
636a5d36 4268
074ac8df 4269 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4270 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4271 return -EOPNOTSUPP;
eec60b03 4272
19957bb3 4273 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4274
19957bb3
JB		 4275 chan = ieee80211_get_channel(&rdev->wiphy,
4276 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4277 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4278 return -EINVAL;
636a5d36 4279
19957bb3
JB		 4280 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4281 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4282
4283 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4284 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4285 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4286 }
4287
dc6382ce 4288 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 4289 enum nl80211_mfp mfp =
dc6382ce 4290 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 4291 if (mfp == NL80211_MFP_REQUIRED)
19957bb3 4292 use_mfp = true;
4c476991
JB		 4293 else if (mfp != NL80211_MFP_NO)
4294 return -EINVAL;
dc6382ce
JM		 4295 }
4296
3e5d7649
JB		 4297 if (info->attrs[NL80211_ATTR_PREV_BSSID])
4298 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
4299
c0692b8f 4300 err = nl80211_crypto_settings(rdev, info, &crypto, 1);
b23aa676 4301 if (!err)
3e5d7649
JB		 4302 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
4303 ssid, ssid_len, ie, ie_len, use_mfp,
19957bb3 4304 &crypto);
636a5d36 4305
636a5d36
JM		 4306 return err;
4307}
4308
4309static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
4310{
4c476991
JB		 4311 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4312 struct net_device *dev = info->user_ptr[1];
19957bb3 4313 const u8 *ie = NULL, *bssid;
4c476991 4314 int ie_len = 0;
19957bb3 4315 u16 reason_code;
d5cdfacb 4316 bool local_state_change;
636a5d36 4317
f4a11bb0
JB		 4318 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4319 return -EINVAL;
4320
4321 if (!info->attrs[NL80211_ATTR_MAC])
4322 return -EINVAL;
4323
4324 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4325 return -EINVAL;
4326
4c476991
JB		 4327 if (!rdev->ops->deauth)
4328 return -EOPNOTSUPP;
636a5d36 4329
074ac8df 4330 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4331 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4332 return -EOPNOTSUPP;
eec60b03 4333
19957bb3 4334 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4335
19957bb3
JB		 4336 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4337 if (reason_code == 0) {
f4a11bb0 4338 /* Reason Code 0 is reserved */
4c476991 4339 return -EINVAL;
255e737e 4340 }
636a5d36
JM		 4341
4342 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4343 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4344 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4345 }
4346
d5cdfacb
JM		 4347 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4348
4c476991
JB		 4349 return cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
4350 local_state_change);
636a5d36
JM		 4351}
4352
4353static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
4354{
4c476991
JB		 4355 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4356 struct net_device *dev = info->user_ptr[1];
19957bb3 4357 const u8 *ie = NULL, *bssid;
4c476991 4358 int ie_len = 0;
19957bb3 4359 u16 reason_code;
d5cdfacb 4360 bool local_state_change;
636a5d36 4361
f4a11bb0
JB		 4362 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4363 return -EINVAL;
4364
4365 if (!info->attrs[NL80211_ATTR_MAC])
4366 return -EINVAL;
4367
4368 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4369 return -EINVAL;
4370
4c476991
JB		 4371 if (!rdev->ops->disassoc)
4372 return -EOPNOTSUPP;
636a5d36 4373
074ac8df 4374 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4375 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4376 return -EOPNOTSUPP;
eec60b03 4377
19957bb3 4378 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4379
19957bb3
JB		 4380 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4381 if (reason_code == 0) {
f4a11bb0 4382 /* Reason Code 0 is reserved */
4c476991 4383 return -EINVAL;
255e737e 4384 }
636a5d36
JM		 4385
4386 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4387 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4388 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4389 }
4390
d5cdfacb
JM		 4391 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4392
4c476991
JB		 4393 return cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
4394 local_state_change);
636a5d36
JM		 4395}
4396
dd5b4cc7
FF		 4397static bool
4398nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
4399 int mcast_rate[IEEE80211_NUM_BANDS],
4400 int rateval)
4401{
4402 struct wiphy *wiphy = &rdev->wiphy;
4403 bool found = false;
4404 int band, i;
4405
4406 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4407 struct ieee80211_supported_band *sband;
4408
4409 sband = wiphy->bands[band];
4410 if (!sband)
4411 continue;
4412
4413 for (i = 0; i < sband->n_bitrates; i++) {
4414 if (sband->bitrates[i].bitrate == rateval) {
4415 mcast_rate[band] = i + 1;
4416 found = true;
4417 break;
4418 }
4419 }
4420 }
4421
4422 return found;
4423}
4424
04a773ad
JB		 4425static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
4426{
4c476991
JB		 4427 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4428 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 4429 struct cfg80211_ibss_params ibss;
4430 struct wiphy *wiphy;
fffd0934 4431 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 4432 int err;
4433
8e30bc55
JB		 4434 memset(&ibss, 0, sizeof(ibss));
4435
04a773ad
JB		 4436 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4437 return -EINVAL;
4438
4439 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
4440 !info->attrs[NL80211_ATTR_SSID] ||
4441 !nla_len(info->attrs[NL80211_ATTR_SSID]))
4442 return -EINVAL;
4443
8e30bc55
JB		 4444 ibss.beacon_interval = 100;
4445
4446 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
4447 ibss.beacon_interval =
4448 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
4449 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
4450 return -EINVAL;
4451 }
4452
4c476991
JB		 4453 if (!rdev->ops->join_ibss)
4454 return -EOPNOTSUPP;
04a773ad 4455
4c476991
JB		 4456 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
4457 return -EOPNOTSUPP;
04a773ad 4458
79c97e97 4459 wiphy = &rdev->wiphy;
04a773ad
JB		 4460
4461 if (info->attrs[NL80211_ATTR_MAC])
4462 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
4463 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4464 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
4465
4466 if (info->attrs[NL80211_ATTR_IE]) {
4467 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4468 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4469 }
4470
4471 ibss.channel = ieee80211_get_channel(wiphy,
4472 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4473 if (!ibss.channel ||
4474 ibss.channel->flags & IEEE80211_CHAN_NO_IBSS ||
4c476991
JB		 4475 ibss.channel->flags & IEEE80211_CHAN_DISABLED)
4476 return -EINVAL;
04a773ad
JB		 4477
4478 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 4479 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
4480
fbd2c8dc
TP		 4481 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
4482 u8 *rates =
4483 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
4484 int n_rates =
4485 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
4486 struct ieee80211_supported_band *sband =
4487 wiphy->bands[ibss.channel->band];
34850ab2 4488 int err;
fbd2c8dc 4489
34850ab2
JB		 4490 err = ieee80211_get_ratemask(sband, rates, n_rates,
4491 &ibss.basic_rates);
4492 if (err)
4493 return err;
fbd2c8dc 4494 }
dd5b4cc7
FF		 4495
4496 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
4497 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
4498 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
4499 return -EINVAL;
fbd2c8dc 4500
4c476991
JB		 4501 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
4502 connkeys = nl80211_parse_connkeys(rdev,
4503 info->attrs[NL80211_ATTR_KEYS]);
4504 if (IS_ERR(connkeys))
4505 return PTR_ERR(connkeys);
4506 }
04a773ad 4507
4c476991 4508 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934
JB		 4509 if (err)
4510 kfree(connkeys);
04a773ad
JB		 4511 return err;
4512}
4513
4514static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
4515{
4c476991
JB		 4516 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4517 struct net_device *dev = info->user_ptr[1];
04a773ad 4518
4c476991
JB		 4519 if (!rdev->ops->leave_ibss)
4520 return -EOPNOTSUPP;
04a773ad 4521
4c476991
JB		 4522 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
4523 return -EOPNOTSUPP;
04a773ad 4524
4c476991 4525 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 4526}
4527
aff89a9b
JB		 4528#ifdef CONFIG_NL80211_TESTMODE
4529static struct genl_multicast_group nl80211_testmode_mcgrp = {
4530 .name = "testmode",
4531};
4532
4533static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
4534{
4c476991 4535 struct cfg80211_registered_device *rdev = info->user_ptr[0];
aff89a9b
JB		 4536 int err;
4537
4538 if (!info->attrs[NL80211_ATTR_TESTDATA])
4539 return -EINVAL;
4540
aff89a9b
JB		 4541 err = -EOPNOTSUPP;
4542 if (rdev->ops->testmode_cmd) {
4543 rdev->testmode_info = info;
4544 err = rdev->ops->testmode_cmd(&rdev->wiphy,
4545 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
4546 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
4547 rdev->testmode_info = NULL;
4548 }
4549
aff89a9b
JB		 4550 return err;
4551}
4552
71063f0e
WYG		 4553static int nl80211_testmode_dump(struct sk_buff *skb,
4554 struct netlink_callback *cb)
4555{
4556 struct cfg80211_registered_device *dev;
4557 int err;
4558 long phy_idx;
4559 void *data = NULL;
4560 int data_len = 0;
4561
4562 if (cb->args[0]) {
4563 /*
4564 * 0 is a valid index, but not valid for args[0],
4565 * so we need to offset by 1.
4566 */
4567 phy_idx = cb->args[0] - 1;
4568 } else {
4569 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
4570 nl80211_fam.attrbuf, nl80211_fam.maxattr,
4571 nl80211_policy);
4572 if (err)
4573 return err;
4574 if (!nl80211_fam.attrbuf[NL80211_ATTR_WIPHY])
4575 return -EINVAL;
4576 phy_idx = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_WIPHY]);
4577 if (nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA])
4578 cb->args[1] =
4579 (long)nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA];
4580 }
4581
4582 if (cb->args[1]) {
4583 data = nla_data((void *)cb->args[1]);
4584 data_len = nla_len((void *)cb->args[1]);
4585 }
4586
4587 mutex_lock(&cfg80211_mutex);
4588 dev = cfg80211_rdev_by_wiphy_idx(phy_idx);
4589 if (!dev) {
4590 mutex_unlock(&cfg80211_mutex);
4591 return -ENOENT;
4592 }
4593 cfg80211_lock_rdev(dev);
4594 mutex_unlock(&cfg80211_mutex);
4595
4596 if (!dev->ops->testmode_dump) {
4597 err = -EOPNOTSUPP;
4598 goto out_err;
4599 }
4600
4601 while (1) {
4602 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).pid,
4603 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4604 NL80211_CMD_TESTMODE);
4605 struct nlattr *tmdata;
4606
4607 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, dev->wiphy_idx) < 0) {
4608 genlmsg_cancel(skb, hdr);
4609 break;
4610 }
4611
4612 tmdata = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
4613 if (!tmdata) {
4614 genlmsg_cancel(skb, hdr);
4615 break;
4616 }
4617 err = dev->ops->testmode_dump(&dev->wiphy, skb, cb,
4618 data, data_len);
4619 nla_nest_end(skb, tmdata);
4620
4621 if (err == -ENOBUFS || err == -ENOENT) {
4622 genlmsg_cancel(skb, hdr);
4623 break;
4624 } else if (err) {
4625 genlmsg_cancel(skb, hdr);
4626 goto out_err;
4627 }
4628
4629 genlmsg_end(skb, hdr);
4630 }
4631
4632 err = skb->len;
4633 /* see above */
4634 cb->args[0] = phy_idx + 1;
4635 out_err:
4636 cfg80211_unlock_rdev(dev);
4637 return err;
4638}
4639
aff89a9b
JB		 4640static struct sk_buff *
4641__cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
4642 int approxlen, u32 pid, u32 seq, gfp_t gfp)
4643{
4644 struct sk_buff *skb;
4645 void *hdr;
4646 struct nlattr *data;
4647
4648 skb = nlmsg_new(approxlen + 100, gfp);
4649 if (!skb)
4650 return NULL;
4651
4652 hdr = nl80211hdr_put(skb, pid, seq, 0, NL80211_CMD_TESTMODE);
4653 if (!hdr) {
4654 kfree_skb(skb);
4655 return NULL;
4656 }
4657
4658 NLA_PUT_U32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
4659 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
4660
4661 ((void **)skb->cb)[0] = rdev;
4662 ((void **)skb->cb)[1] = hdr;
4663 ((void **)skb->cb)[2] = data;
4664
4665 return skb;
4666
4667 nla_put_failure:
4668 kfree_skb(skb);
4669 return NULL;
4670}
4671
4672struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
4673 int approxlen)
4674{
4675 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
4676
4677 if (WARN_ON(!rdev->testmode_info))
4678 return NULL;
4679
4680 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
4681 rdev->testmode_info->snd_pid,
4682 rdev->testmode_info->snd_seq,
4683 GFP_KERNEL);
4684}
4685EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
4686
4687int cfg80211_testmode_reply(struct sk_buff *skb)
4688{
4689 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
4690 void *hdr = ((void **)skb->cb)[1];
4691 struct nlattr *data = ((void **)skb->cb)[2];
4692
4693 if (WARN_ON(!rdev->testmode_info)) {
4694 kfree_skb(skb);
4695 return -EINVAL;
4696 }
4697
4698 nla_nest_end(skb, data);
4699 genlmsg_end(skb, hdr);
4700 return genlmsg_reply(skb, rdev->testmode_info);
4701}
4702EXPORT_SYMBOL(cfg80211_testmode_reply);
4703
4704struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
4705 int approxlen, gfp_t gfp)
4706{
4707 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
4708
4709 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
4710}
4711EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
4712
4713void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
4714{
4715 void *hdr = ((void **)skb->cb)[1];
4716 struct nlattr *data = ((void **)skb->cb)[2];
4717
4718 nla_nest_end(skb, data);
4719 genlmsg_end(skb, hdr);
4720 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
4721}
4722EXPORT_SYMBOL(cfg80211_testmode_event);
4723#endif
4724
b23aa676
SO		 4725static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
4726{
4c476991
JB		 4727 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4728 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 4729 struct cfg80211_connect_params connect;
4730 struct wiphy *wiphy;
fffd0934 4731 struct cfg80211_cached_keys *connkeys = NULL;
b23aa676
SO		 4732 int err;
4733
4734 memset(&connect, 0, sizeof(connect));
4735
4736 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4737 return -EINVAL;
4738
4739 if (!info->attrs[NL80211_ATTR_SSID] ||
4740 !nla_len(info->attrs[NL80211_ATTR_SSID]))
4741 return -EINVAL;
4742
4743 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
4744 connect.auth_type =
4745 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
4746 if (!nl80211_valid_auth_type(connect.auth_type))
4747 return -EINVAL;
4748 } else
4749 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
4750
4751 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
4752
c0692b8f 4753 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 4754 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 4755 if (err)
4756 return err;
b23aa676 4757
074ac8df 4758 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4759 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4760 return -EOPNOTSUPP;
b23aa676 4761
79c97e97 4762 wiphy = &rdev->wiphy;
b23aa676 4763
b23aa676
SO		 4764 if (info->attrs[NL80211_ATTR_MAC])
4765 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
4766 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4767 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
4768
4769 if (info->attrs[NL80211_ATTR_IE]) {
4770 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4771 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4772 }
4773
4774 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
4775 connect.channel =
4776 ieee80211_get_channel(wiphy,
4777 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4778 if (!connect.channel ||
4c476991
JB		 4779 connect.channel->flags & IEEE80211_CHAN_DISABLED)
4780 return -EINVAL;
b23aa676
SO		 4781 }
4782
fffd0934
JB		 4783 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
4784 connkeys = nl80211_parse_connkeys(rdev,
4785 info->attrs[NL80211_ATTR_KEYS]);
4c476991
JB		 4786 if (IS_ERR(connkeys))
4787 return PTR_ERR(connkeys);
fffd0934
JB		 4788 }
4789
4790 err = cfg80211_connect(rdev, dev, &connect, connkeys);
fffd0934
JB		 4791 if (err)
4792 kfree(connkeys);
b23aa676
SO		 4793 return err;
4794}
4795
4796static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
4797{
4c476991
JB		 4798 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4799 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 4800 u16 reason;
4801
4802 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4803 reason = WLAN_REASON_DEAUTH_LEAVING;
4804 else
4805 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4806
4807 if (reason == 0)
4808 return -EINVAL;
4809
074ac8df 4810 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4811 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4812 return -EOPNOTSUPP;
b23aa676 4813
4c476991 4814 return cfg80211_disconnect(rdev, dev, reason, true);
b23aa676
SO		 4815}
4816
463d0183
JB		 4817static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
4818{
4c476991 4819 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 4820 struct net *net;
4821 int err;
4822 u32 pid;
4823
4824 if (!info->attrs[NL80211_ATTR_PID])
4825 return -EINVAL;
4826
4827 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
4828
463d0183 4829 net = get_net_ns_by_pid(pid);
4c476991
JB		 4830 if (IS_ERR(net))
4831 return PTR_ERR(net);
463d0183
JB		 4832
4833 err = 0;
4834
4835 /* check if anything to do */
4c476991
JB		 4836 if (!net_eq(wiphy_net(&rdev->wiphy), net))
4837 err = cfg80211_switch_netns(rdev, net);
463d0183 4838
463d0183 4839 put_net(net);
463d0183
JB		 4840 return err;
4841}
4842
67fbb16b
SO		 4843static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
4844{
4c476991 4845 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 4846 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
4847 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 4848 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 4849 struct cfg80211_pmksa pmksa;
4850
4851 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
4852
4853 if (!info->attrs[NL80211_ATTR_MAC])
4854 return -EINVAL;
4855
4856 if (!info->attrs[NL80211_ATTR_PMKID])
4857 return -EINVAL;
4858
67fbb16b
SO		 4859 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
4860 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
4861
074ac8df 4862 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4863 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4864 return -EOPNOTSUPP;
67fbb16b
SO		 4865
4866 switch (info->genlhdr->cmd) {
4867 case NL80211_CMD_SET_PMKSA:
4868 rdev_ops = rdev->ops->set_pmksa;
4869 break;
4870 case NL80211_CMD_DEL_PMKSA:
4871 rdev_ops = rdev->ops->del_pmksa;
4872 break;
4873 default:
4874 WARN_ON(1);
4875 break;
4876 }
4877
4c476991
JB		 4878 if (!rdev_ops)
4879 return -EOPNOTSUPP;
67fbb16b 4880
4c476991 4881 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 4882}
4883
4884static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
4885{
4c476991
JB		 4886 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4887 struct net_device *dev = info->user_ptr[1];
67fbb16b 4888
074ac8df 4889 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4890 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4891 return -EOPNOTSUPP;
67fbb16b 4892
4c476991
JB		 4893 if (!rdev->ops->flush_pmksa)
4894 return -EOPNOTSUPP;
67fbb16b 4895
4c476991 4896 return rdev->ops->flush_pmksa(&rdev->wiphy, dev);
67fbb16b
SO		 4897}
4898
9588bbd5
JM		 4899static int nl80211_remain_on_channel(struct sk_buff *skb,
4900 struct genl_info *info)
4901{
4c476991
JB		 4902 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4903 struct net_device *dev = info->user_ptr[1];
9588bbd5
JM		 4904 struct ieee80211_channel *chan;
4905 struct sk_buff *msg;
4906 void *hdr;
4907 u64 cookie;
4908 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
4909 u32 freq, duration;
4910 int err;
4911
4912 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
4913 !info->attrs[NL80211_ATTR_DURATION])
4914 return -EINVAL;
4915
4916 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
4917
4918 /*
4919 * We should be on that channel for at least one jiffie,
4920 * and more than 5 seconds seems excessive.
4921 */
a293911d
JB		 4922 if (!duration || !msecs_to_jiffies(duration) ||
4923 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 4924 return -EINVAL;
4925
4c476991
JB		 4926 if (!rdev->ops->remain_on_channel)
4927 return -EOPNOTSUPP;
9588bbd5 4928
9588bbd5
JM		 4929 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
4930 channel_type = nla_get_u32(
4931 info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
4932 if (channel_type != NL80211_CHAN_NO_HT &&
4933 channel_type != NL80211_CHAN_HT20 &&
4934 channel_type != NL80211_CHAN_HT40PLUS &&
4c476991
JB		 4935 channel_type != NL80211_CHAN_HT40MINUS)
4936 return -EINVAL;
9588bbd5
JM		 4937 }
4938
4939 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
4940 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 4941 if (chan == NULL)
4942 return -EINVAL;
9588bbd5
JM		 4943
4944 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 4945 if (!msg)
4946 return -ENOMEM;
9588bbd5
JM		 4947
4948 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
4949 NL80211_CMD_REMAIN_ON_CHANNEL);
4950
4951 if (IS_ERR(hdr)) {
4952 err = PTR_ERR(hdr);
4953 goto free_msg;
4954 }
4955
4956 err = rdev->ops->remain_on_channel(&rdev->wiphy, dev, chan,
4957 channel_type, duration, &cookie);
4958
4959 if (err)
4960 goto free_msg;
4961
4962 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
4963
4964 genlmsg_end(msg, hdr);
4c476991
JB		 4965
4966 return genlmsg_reply(msg, info);
9588bbd5
JM		 4967
4968 nla_put_failure:
4969 err = -ENOBUFS;
4970 free_msg:
4971 nlmsg_free(msg);
9588bbd5
JM		 4972 return err;
4973}
4974
4975static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
4976 struct genl_info *info)
4977{
4c476991
JB		 4978 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4979 struct net_device *dev = info->user_ptr[1];
9588bbd5 4980 u64 cookie;
9588bbd5
JM		 4981
4982 if (!info->attrs[NL80211_ATTR_COOKIE])
4983 return -EINVAL;
4984
4c476991
JB		 4985 if (!rdev->ops->cancel_remain_on_channel)
4986 return -EOPNOTSUPP;
9588bbd5 4987
9588bbd5
JM		 4988 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
4989
4c476991 4990 return rdev->ops->cancel_remain_on_channel(&rdev->wiphy, dev, cookie);
9588bbd5
JM		 4991}
4992
13ae75b1
JM		 4993static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
4994 u8 *rates, u8 rates_len)
4995{
4996 u8 i;
4997 u32 mask = 0;
4998
4999 for (i = 0; i < rates_len; i++) {
5000 int rate = (rates[i] & 0x7f) * 5;
5001 int ridx;
5002 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
5003 struct ieee80211_rate *srate =
5004 &sband->bitrates[ridx];
5005 if (rate == srate->bitrate) {
5006 mask |= 1 << ridx;
5007 break;
5008 }
5009 }
5010 if (ridx == sband->n_bitrates)
5011 return 0; /* rate not found */
5012 }
5013
5014 return mask;
5015}
5016
b54452b0 5017static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
13ae75b1
JM		 5018 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
5019 .len = NL80211_MAX_SUPP_RATES },
5020};
5021
5022static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
5023 struct genl_info *info)
5024{
5025 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4c476991 5026 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13ae75b1 5027 struct cfg80211_bitrate_mask mask;
4c476991
JB		 5028 int rem, i;
5029 struct net_device *dev = info->user_ptr[1];
13ae75b1
JM		 5030 struct nlattr *tx_rates;
5031 struct ieee80211_supported_band *sband;
5032
5033 if (info->attrs[NL80211_ATTR_TX_RATES] == NULL)
5034 return -EINVAL;
5035
4c476991
JB		 5036 if (!rdev->ops->set_bitrate_mask)
5037 return -EOPNOTSUPP;
13ae75b1
JM		 5038
5039 memset(&mask, 0, sizeof(mask));
5040 /* Default to all rates enabled */
5041 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
5042 sband = rdev->wiphy.bands[i];
5043 mask.control[i].legacy =
5044 sband ? (1 << sband->n_bitrates) - 1 : 0;
5045 }
5046
5047 /*
5048 * The nested attribute uses enum nl80211_band as the index. This maps
5049 * directly to the enum ieee80211_band values used in cfg80211.
5050 */
5051 nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem)
5052 {
5053 enum ieee80211_band band = nla_type(tx_rates);
4c476991
JB		 5054 if (band < 0 || band >= IEEE80211_NUM_BANDS)
5055 return -EINVAL;
13ae75b1 5056 sband = rdev->wiphy.bands[band];
4c476991
JB		 5057 if (sband == NULL)
5058 return -EINVAL;
13ae75b1
JM		 5059 nla_parse(tb, NL80211_TXRATE_MAX, nla_data(tx_rates),
5060 nla_len(tx_rates), nl80211_txattr_policy);
5061 if (tb[NL80211_TXRATE_LEGACY]) {
5062 mask.control[band].legacy = rateset_to_mask(
5063 sband,
5064 nla_data(tb[NL80211_TXRATE_LEGACY]),
5065 nla_len(tb[NL80211_TXRATE_LEGACY]));
4c476991
JB		 5066 if (mask.control[band].legacy == 0)
5067 return -EINVAL;
13ae75b1
JM		 5068 }
5069 }
5070
4c476991 5071 return rdev->ops->set_bitrate_mask(&rdev->wiphy, dev, NULL, &mask);
13ae75b1
JM		 5072}
5073
2e161f78 5074static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 5075{
4c476991
JB		 5076 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5077 struct net_device *dev = info->user_ptr[1];
2e161f78 5078 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 5079
5080 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
5081 return -EINVAL;
5082
2e161f78
JB		 5083 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
5084 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 5085
9d38d85d 5086 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
074ac8df 5087 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
663fcafd
JB		 5088 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5089 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5090 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
c7108a71 5091 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 5092 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5093 return -EOPNOTSUPP;
026331c4
JM		 5094
5095 /* not much point in registering if we can't reply */
4c476991
JB		 5096 if (!rdev->ops->mgmt_tx)
5097 return -EOPNOTSUPP;
026331c4 5098
4c476991 5099 return cfg80211_mlme_register_mgmt(dev->ieee80211_ptr, info->snd_pid,
2e161f78 5100 frame_type,
026331c4
JM		 5101 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
5102 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]));
026331c4
JM		 5103}
5104
2e161f78 5105static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 5106{
4c476991
JB		 5107 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5108 struct net_device *dev = info->user_ptr[1];
026331c4
JM		 5109 struct ieee80211_channel *chan;
5110 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
252aa631 5111 bool channel_type_valid = false;
026331c4
JM		 5112 u32 freq;
5113 int err;
5114 void *hdr;
5115 u64 cookie;
5116 struct sk_buff *msg;
f7ca38df
JB		 5117 unsigned int wait = 0;
5118 bool offchan;
026331c4
JM		 5119
5120 if (!info->attrs[NL80211_ATTR_FRAME] ||
5121 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
5122 return -EINVAL;
5123
4c476991
JB		 5124 if (!rdev->ops->mgmt_tx)
5125 return -EOPNOTSUPP;
026331c4 5126
9d38d85d 5127 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
074ac8df 5128 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
663fcafd
JB		 5129 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5130 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5131 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
c7108a71 5132 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 5133 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5134 return -EOPNOTSUPP;
026331c4 5135
f7ca38df
JB		 5136 if (info->attrs[NL80211_ATTR_DURATION]) {
5137 if (!rdev->ops->mgmt_tx_cancel_wait)
5138 return -EINVAL;
5139 wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
5140 }
5141
026331c4
JM		 5142 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
5143 channel_type = nla_get_u32(
5144 info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
5145 if (channel_type != NL80211_CHAN_NO_HT &&
5146 channel_type != NL80211_CHAN_HT20 &&
5147 channel_type != NL80211_CHAN_HT40PLUS &&
4c476991
JB		 5148 channel_type != NL80211_CHAN_HT40MINUS)
5149 return -EINVAL;
252aa631 5150 channel_type_valid = true;
026331c4
JM		 5151 }
5152
f7ca38df
JB		 5153 offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
5154
026331c4
JM		 5155 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
5156 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 5157 if (chan == NULL)
5158 return -EINVAL;
026331c4
JM		 5159
5160 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5161 if (!msg)
5162 return -ENOMEM;
026331c4
JM		 5163
5164 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
2e161f78 5165 NL80211_CMD_FRAME);
026331c4
JM		 5166
5167 if (IS_ERR(hdr)) {
5168 err = PTR_ERR(hdr);
5169 goto free_msg;
5170 }
f7ca38df
JB		 5171 err = cfg80211_mlme_mgmt_tx(rdev, dev, chan, offchan, channel_type,
5172 channel_type_valid, wait,
2e161f78
JB		 5173 nla_data(info->attrs[NL80211_ATTR_FRAME]),
5174 nla_len(info->attrs[NL80211_ATTR_FRAME]),
5175 &cookie);
026331c4
JM		 5176 if (err)
5177 goto free_msg;
5178
5179 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
5180
5181 genlmsg_end(msg, hdr);
4c476991 5182 return genlmsg_reply(msg, info);
026331c4
JM		 5183
5184 nla_put_failure:
5185 err = -ENOBUFS;
5186 free_msg:
5187 nlmsg_free(msg);
026331c4
JM		 5188 return err;
5189}
5190
f7ca38df
JB		 5191static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
5192{
5193 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5194 struct net_device *dev = info->user_ptr[1];
5195 u64 cookie;
5196
5197 if (!info->attrs[NL80211_ATTR_COOKIE])
5198 return -EINVAL;
5199
5200 if (!rdev->ops->mgmt_tx_cancel_wait)
5201 return -EOPNOTSUPP;
5202
5203 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
5204 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
5205 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5206 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5207 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
5208 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5209 return -EOPNOTSUPP;
5210
5211 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
5212
5213 return rdev->ops->mgmt_tx_cancel_wait(&rdev->wiphy, dev, cookie);
5214}
5215
ffb9eb3d
KV		 5216static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
5217{
4c476991 5218 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 5219 struct wireless_dev *wdev;
4c476991 5220 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 5221 u8 ps_state;
5222 bool state;
5223 int err;
5224
4c476991
JB		 5225 if (!info->attrs[NL80211_ATTR_PS_STATE])
5226 return -EINVAL;
ffb9eb3d
KV		 5227
5228 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
5229
4c476991
JB		 5230 if (ps_state != NL80211_PS_DISABLED && ps_state != NL80211_PS_ENABLED)
5231 return -EINVAL;
ffb9eb3d
KV		 5232
5233 wdev = dev->ieee80211_ptr;
5234
4c476991
JB		 5235 if (!rdev->ops->set_power_mgmt)
5236 return -EOPNOTSUPP;
ffb9eb3d
KV		 5237
5238 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
5239
5240 if (state == wdev->ps)
4c476991 5241 return 0;
ffb9eb3d 5242
4c476991
JB		 5243 err = rdev->ops->set_power_mgmt(wdev->wiphy, dev, state,
5244 wdev->ps_timeout);
5245 if (!err)
5246 wdev->ps = state;
ffb9eb3d
KV		 5247 return err;
5248}
5249
5250static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
5251{
4c476991 5252 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 5253 enum nl80211_ps_state ps_state;
5254 struct wireless_dev *wdev;
4c476991 5255 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 5256 struct sk_buff *msg;
5257 void *hdr;
5258 int err;
5259
ffb9eb3d
KV		 5260 wdev = dev->ieee80211_ptr;
5261
4c476991
JB		 5262 if (!rdev->ops->set_power_mgmt)
5263 return -EOPNOTSUPP;
ffb9eb3d
KV		 5264
5265 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5266 if (!msg)
5267 return -ENOMEM;
ffb9eb3d
KV		 5268
5269 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5270 NL80211_CMD_GET_POWER_SAVE);
5271 if (!hdr) {
4c476991 5272 err = -ENOBUFS;
ffb9eb3d
KV		 5273 goto free_msg;
5274 }
5275
5276 if (wdev->ps)
5277 ps_state = NL80211_PS_ENABLED;
5278 else
5279 ps_state = NL80211_PS_DISABLED;
5280
5281 NLA_PUT_U32(msg, NL80211_ATTR_PS_STATE, ps_state);
5282
5283 genlmsg_end(msg, hdr);
4c476991 5284 return genlmsg_reply(msg, info);
ffb9eb3d 5285
4c476991 5286 nla_put_failure:
ffb9eb3d 5287 err = -ENOBUFS;
4c476991 5288 free_msg:
ffb9eb3d 5289 nlmsg_free(msg);
ffb9eb3d
KV		 5290 return err;
5291}
5292
d6dc1a38
JO		 5293static struct nla_policy
5294nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] __read_mostly = {
5295 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
5296 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
5297 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
5298};
5299
5300static int nl80211_set_cqm_rssi(struct genl_info *info,
5301 s32 threshold, u32 hysteresis)
5302{
4c476991 5303 struct cfg80211_registered_device *rdev = info->user_ptr[0];
d6dc1a38 5304 struct wireless_dev *wdev;
4c476991 5305 struct net_device *dev = info->user_ptr[1];
d6dc1a38
JO		 5306
5307 if (threshold > 0)
5308 return -EINVAL;
5309
d6dc1a38
JO		 5310 wdev = dev->ieee80211_ptr;
5311
4c476991
JB		 5312 if (!rdev->ops->set_cqm_rssi_config)
5313 return -EOPNOTSUPP;
d6dc1a38 5314
074ac8df 5315 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5316 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
5317 return -EOPNOTSUPP;
d6dc1a38 5318
4c476991
JB		 5319 return rdev->ops->set_cqm_rssi_config(wdev->wiphy, dev,
5320 threshold, hysteresis);
d6dc1a38
JO		 5321}
5322
5323static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
5324{
5325 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
5326 struct nlattr *cqm;
5327 int err;
5328
5329 cqm = info->attrs[NL80211_ATTR_CQM];
5330 if (!cqm) {
5331 err = -EINVAL;
5332 goto out;
5333 }
5334
5335 err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
5336 nl80211_attr_cqm_policy);
5337 if (err)
5338 goto out;
5339
5340 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
5341 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
5342 s32 threshold;
5343 u32 hysteresis;
5344 threshold = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
5345 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
5346 err = nl80211_set_cqm_rssi(info, threshold, hysteresis);
5347 } else
5348 err = -EINVAL;
5349
5350out:
5351 return err;
5352}
5353
29cbe68c
JB		 5354static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
5355{
5356 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5357 struct net_device *dev = info->user_ptr[1];
5358 struct mesh_config cfg;
c80d545d 5359 struct mesh_setup setup;
29cbe68c
JB		 5360 int err;
5361
5362 /* start with default */
5363 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 5364 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 5365
24bdd9f4 5366 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 5367 /* and parse parameters if given */
24bdd9f4 5368 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 5369 if (err)
5370 return err;
5371 }
5372
5373 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
5374 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
5375 return -EINVAL;
5376
c80d545d
JC		 5377 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
5378 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
5379
5380 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
5381 /* parse additional setup parameters if given */
5382 err = nl80211_parse_mesh_setup(info, &setup);
5383 if (err)
5384 return err;
5385 }
5386
5387 return cfg80211_join_mesh(rdev, dev, &setup, &cfg);
29cbe68c
JB		 5388}
5389
5390static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
5391{
5392 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5393 struct net_device *dev = info->user_ptr[1];
5394
5395 return cfg80211_leave_mesh(rdev, dev);
5396}
5397
ff1b6e69
JB		 5398static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
5399{
5400 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5401 struct sk_buff *msg;
5402 void *hdr;
5403
5404 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
5405 return -EOPNOTSUPP;
5406
5407 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
5408 if (!msg)
5409 return -ENOMEM;
5410
5411 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5412 NL80211_CMD_GET_WOWLAN);
5413 if (!hdr)
5414 goto nla_put_failure;
5415
5416 if (rdev->wowlan) {
5417 struct nlattr *nl_wowlan;
5418
5419 nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
5420 if (!nl_wowlan)
5421 goto nla_put_failure;
5422
5423 if (rdev->wowlan->any)
5424 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_ANY);
5425 if (rdev->wowlan->disconnect)
5426 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_DISCONNECT);
5427 if (rdev->wowlan->magic_pkt)
5428 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT);
77dbbb13
JB		 5429 if (rdev->wowlan->gtk_rekey_failure)
5430 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE);
5431 if (rdev->wowlan->eap_identity_req)
5432 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST);
5433 if (rdev->wowlan->four_way_handshake)
5434 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE);
5435 if (rdev->wowlan->rfkill_release)
5436 NLA_PUT_FLAG(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE);
ff1b6e69
JB		 5437 if (rdev->wowlan->n_patterns) {
5438 struct nlattr *nl_pats, *nl_pat;
5439 int i, pat_len;
5440
5441 nl_pats = nla_nest_start(msg,
5442 NL80211_WOWLAN_TRIG_PKT_PATTERN);
5443 if (!nl_pats)
5444 goto nla_put_failure;
5445
5446 for (i = 0; i < rdev->wowlan->n_patterns; i++) {
5447 nl_pat = nla_nest_start(msg, i + 1);
5448 if (!nl_pat)
5449 goto nla_put_failure;
5450 pat_len = rdev->wowlan->patterns[i].pattern_len;
5451 NLA_PUT(msg, NL80211_WOWLAN_PKTPAT_MASK,
5452 DIV_ROUND_UP(pat_len, 8),
5453 rdev->wowlan->patterns[i].mask);
5454 NLA_PUT(msg, NL80211_WOWLAN_PKTPAT_PATTERN,
5455 pat_len,
5456 rdev->wowlan->patterns[i].pattern);
5457 nla_nest_end(msg, nl_pat);
5458 }
5459 nla_nest_end(msg, nl_pats);
5460 }
5461
5462 nla_nest_end(msg, nl_wowlan);
5463 }
5464
5465 genlmsg_end(msg, hdr);
5466 return genlmsg_reply(msg, info);
5467
5468nla_put_failure:
5469 nlmsg_free(msg);
5470 return -ENOBUFS;
5471}
5472
5473static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
5474{
5475 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5476 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
5477 struct cfg80211_wowlan no_triggers = {};
5478 struct cfg80211_wowlan new_triggers = {};
5479 struct wiphy_wowlan_support *wowlan = &rdev->wiphy.wowlan;
5480 int err, i;
5481
5482 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
5483 return -EOPNOTSUPP;
5484
5485 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS])
5486 goto no_triggers;
5487
5488 err = nla_parse(tb, MAX_NL80211_WOWLAN_TRIG,
5489 nla_data(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
5490 nla_len(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
5491 nl80211_wowlan_policy);
5492 if (err)
5493 return err;
5494
5495 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
5496 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
5497 return -EINVAL;
5498 new_triggers.any = true;
5499 }
5500
5501 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
5502 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
5503 return -EINVAL;
5504 new_triggers.disconnect = true;
5505 }
5506
5507 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
5508 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
5509 return -EINVAL;
5510 new_triggers.magic_pkt = true;
5511 }
5512
77dbbb13
JB		 5513 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
5514 return -EINVAL;
5515
5516 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
5517 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
5518 return -EINVAL;
5519 new_triggers.gtk_rekey_failure = true;
5520 }
5521
5522 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
5523 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
5524 return -EINVAL;
5525 new_triggers.eap_identity_req = true;
5526 }
5527
5528 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
5529 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
5530 return -EINVAL;
5531 new_triggers.four_way_handshake = true;
5532 }
5533
5534 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
5535 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
5536 return -EINVAL;
5537 new_triggers.rfkill_release = true;
5538 }
5539
ff1b6e69
JB		 5540 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
5541 struct nlattr *pat;
5542 int n_patterns = 0;
5543 int rem, pat_len, mask_len;
5544 struct nlattr *pat_tb[NUM_NL80211_WOWLAN_PKTPAT];
5545
5546 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
5547 rem)
5548 n_patterns++;
5549 if (n_patterns > wowlan->n_patterns)
5550 return -EINVAL;
5551
5552 new_triggers.patterns = kcalloc(n_patterns,
5553 sizeof(new_triggers.patterns[0]),
5554 GFP_KERNEL);
5555 if (!new_triggers.patterns)
5556 return -ENOMEM;
5557
5558 new_triggers.n_patterns = n_patterns;
5559 i = 0;
5560
5561 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
5562 rem) {
5563 nla_parse(pat_tb, MAX_NL80211_WOWLAN_PKTPAT,
5564 nla_data(pat), nla_len(pat), NULL);
5565 err = -EINVAL;
5566 if (!pat_tb[NL80211_WOWLAN_PKTPAT_MASK] ||
5567 !pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN])
5568 goto error;
5569 pat_len = nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]);
5570 mask_len = DIV_ROUND_UP(pat_len, 8);
5571 if (nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]) !=
5572 mask_len)
5573 goto error;
5574 if (pat_len > wowlan->pattern_max_len ||
5575 pat_len < wowlan->pattern_min_len)
5576 goto error;
5577
5578 new_triggers.patterns[i].mask =
5579 kmalloc(mask_len + pat_len, GFP_KERNEL);
5580 if (!new_triggers.patterns[i].mask) {
5581 err = -ENOMEM;
5582 goto error;
5583 }
5584 new_triggers.patterns[i].pattern =
5585 new_triggers.patterns[i].mask + mask_len;
5586 memcpy(new_triggers.patterns[i].mask,
5587 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]),
5588 mask_len);
5589 new_triggers.patterns[i].pattern_len = pat_len;
5590 memcpy(new_triggers.patterns[i].pattern,
5591 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]),
5592 pat_len);
5593 i++;
5594 }
5595 }
5596
5597 if (memcmp(&new_triggers, &no_triggers, sizeof(new_triggers))) {
5598 struct cfg80211_wowlan *ntrig;
5599 ntrig = kmemdup(&new_triggers, sizeof(new_triggers),
5600 GFP_KERNEL);
5601 if (!ntrig) {
5602 err = -ENOMEM;
5603 goto error;
5604 }
5605 cfg80211_rdev_free_wowlan(rdev);
5606 rdev->wowlan = ntrig;
5607 } else {
5608 no_triggers:
5609 cfg80211_rdev_free_wowlan(rdev);
5610 rdev->wowlan = NULL;
5611 }
5612
5613 return 0;
5614 error:
5615 for (i = 0; i < new_triggers.n_patterns; i++)
5616 kfree(new_triggers.patterns[i].mask);
5617 kfree(new_triggers.patterns);
5618 return err;
5619}
5620
e5497d76
JB		 5621static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
5622{
5623 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5624 struct net_device *dev = info->user_ptr[1];
5625 struct wireless_dev *wdev = dev->ieee80211_ptr;
5626 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
5627 struct cfg80211_gtk_rekey_data rekey_data;
5628 int err;
5629
5630 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
5631 return -EINVAL;
5632
5633 err = nla_parse(tb, MAX_NL80211_REKEY_DATA,
5634 nla_data(info->attrs[NL80211_ATTR_REKEY_DATA]),
5635 nla_len(info->attrs[NL80211_ATTR_REKEY_DATA]),
5636 nl80211_rekey_policy);
5637 if (err)
5638 return err;
5639
5640 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
5641 return -ERANGE;
5642 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
5643 return -ERANGE;
5644 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
5645 return -ERANGE;
5646
5647 memcpy(rekey_data.kek, nla_data(tb[NL80211_REKEY_DATA_KEK]),
5648 NL80211_KEK_LEN);
5649 memcpy(rekey_data.kck, nla_data(tb[NL80211_REKEY_DATA_KCK]),
5650 NL80211_KCK_LEN);
5651 memcpy(rekey_data.replay_ctr,
5652 nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]),
5653 NL80211_REPLAY_CTR_LEN);
5654
5655 wdev_lock(wdev);
5656 if (!wdev->current_bss) {
5657 err = -ENOTCONN;
5658 goto out;
5659 }
5660
5661 if (!rdev->ops->set_rekey_data) {
5662 err = -EOPNOTSUPP;
5663 goto out;
5664 }
5665
5666 err = rdev->ops->set_rekey_data(&rdev->wiphy, dev, &rekey_data);
5667 out:
5668 wdev_unlock(wdev);
5669 return err;
5670}
5671
4c476991
JB		 5672#define NL80211_FLAG_NEED_WIPHY 0x01
5673#define NL80211_FLAG_NEED_NETDEV 0x02
5674#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 5675#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
5676#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
5677 NL80211_FLAG_CHECK_NETDEV_UP)
4c476991
JB		 5678
5679static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
5680 struct genl_info *info)
5681{
5682 struct cfg80211_registered_device *rdev;
5683 struct net_device *dev;
5684 int err;
5685 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
5686
5687 if (rtnl)
5688 rtnl_lock();
5689
5690 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
5691 rdev = cfg80211_get_dev_from_info(info);
5692 if (IS_ERR(rdev)) {
5693 if (rtnl)
5694 rtnl_unlock();
5695 return PTR_ERR(rdev);
5696 }
5697 info->user_ptr[0] = rdev;
5698 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
5699 err = get_rdev_dev_by_info_ifindex(info, &rdev, &dev);
5700 if (err) {
5701 if (rtnl)
5702 rtnl_unlock();
5703 return err;
5704 }
41265714
JB		 5705 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
5706 !netif_running(dev)) {
d537f5fd
JB		 5707 cfg80211_unlock_rdev(rdev);
5708 dev_put(dev);
41265714
JB		 5709 if (rtnl)
5710 rtnl_unlock();
5711 return -ENETDOWN;
5712 }
4c476991
JB		 5713 info->user_ptr[0] = rdev;
5714 info->user_ptr[1] = dev;
5715 }
5716
5717 return 0;
5718}
5719
5720static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
5721 struct genl_info *info)
5722{
5723 if (info->user_ptr[0])
5724 cfg80211_unlock_rdev(info->user_ptr[0]);
5725 if (info->user_ptr[1])
5726 dev_put(info->user_ptr[1]);
5727 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
5728 rtnl_unlock();
5729}
5730
55682965
JB		 5731static struct genl_ops nl80211_ops[] = {
5732 {
5733 .cmd = NL80211_CMD_GET_WIPHY,
5734 .doit = nl80211_get_wiphy,
5735 .dumpit = nl80211_dump_wiphy,
5736 .policy = nl80211_policy,
5737 /* can be retrieved by unprivileged users */
4c476991 5738 .internal_flags = NL80211_FLAG_NEED_WIPHY,
55682965
JB		 5739 },
5740 {
5741 .cmd = NL80211_CMD_SET_WIPHY,
5742 .doit = nl80211_set_wiphy,
5743 .policy = nl80211_policy,
5744 .flags = GENL_ADMIN_PERM,
4c476991 5745 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 5746 },
5747 {
5748 .cmd = NL80211_CMD_GET_INTERFACE,
5749 .doit = nl80211_get_interface,
5750 .dumpit = nl80211_dump_interface,
5751 .policy = nl80211_policy,
5752 /* can be retrieved by unprivileged users */
4c476991 5753 .internal_flags = NL80211_FLAG_NEED_NETDEV,
55682965
JB		 5754 },
5755 {
5756 .cmd = NL80211_CMD_SET_INTERFACE,
5757 .doit = nl80211_set_interface,
5758 .policy = nl80211_policy,
5759 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5760 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5761 NL80211_FLAG_NEED_RTNL,
55682965
JB		 5762 },
5763 {
5764 .cmd = NL80211_CMD_NEW_INTERFACE,
5765 .doit = nl80211_new_interface,
5766 .policy = nl80211_policy,
5767 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5768 .internal_flags = NL80211_FLAG_NEED_WIPHY |
5769 NL80211_FLAG_NEED_RTNL,
55682965
JB		 5770 },
5771 {
5772 .cmd = NL80211_CMD_DEL_INTERFACE,
5773 .doit = nl80211_del_interface,
5774 .policy = nl80211_policy,
41ade00f 5775 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5776 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5777 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5778 },
5779 {
5780 .cmd = NL80211_CMD_GET_KEY,
5781 .doit = nl80211_get_key,
5782 .policy = nl80211_policy,
5783 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5784 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5785 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5786 },
5787 {
5788 .cmd = NL80211_CMD_SET_KEY,
5789 .doit = nl80211_set_key,
5790 .policy = nl80211_policy,
5791 .flags = GENL_ADMIN_PERM,
41265714 5792 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5793 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5794 },
5795 {
5796 .cmd = NL80211_CMD_NEW_KEY,
5797 .doit = nl80211_new_key,
5798 .policy = nl80211_policy,
5799 .flags = GENL_ADMIN_PERM,
41265714 5800 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5801 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 5802 },
5803 {
5804 .cmd = NL80211_CMD_DEL_KEY,
5805 .doit = nl80211_del_key,
5806 .policy = nl80211_policy,
55682965 5807 .flags = GENL_ADMIN_PERM,
41265714 5808 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5809 NL80211_FLAG_NEED_RTNL,
55682965 5810 },
ed1b6cc7
JB		 5811 {
5812 .cmd = NL80211_CMD_SET_BEACON,
5813 .policy = nl80211_policy,
5814 .flags = GENL_ADMIN_PERM,
5815 .doit = nl80211_addset_beacon,
4c476991
JB		 5816 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5817 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 5818 },
5819 {
5820 .cmd = NL80211_CMD_NEW_BEACON,
5821 .policy = nl80211_policy,
5822 .flags = GENL_ADMIN_PERM,
5823 .doit = nl80211_addset_beacon,
4c476991
JB		 5824 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5825 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 5826 },
5827 {
5828 .cmd = NL80211_CMD_DEL_BEACON,
5829 .policy = nl80211_policy,
5830 .flags = GENL_ADMIN_PERM,
5831 .doit = nl80211_del_beacon,
4c476991
JB		 5832 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5833 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 5834 },
5727ef1b
JB		 5835 {
5836 .cmd = NL80211_CMD_GET_STATION,
5837 .doit = nl80211_get_station,
2ec600d6 5838 .dumpit = nl80211_dump_station,
5727ef1b 5839 .policy = nl80211_policy,
4c476991
JB		 5840 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5841 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 5842 },
5843 {
5844 .cmd = NL80211_CMD_SET_STATION,
5845 .doit = nl80211_set_station,
5846 .policy = nl80211_policy,
5847 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5848 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5849 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 5850 },
5851 {
5852 .cmd = NL80211_CMD_NEW_STATION,
5853 .doit = nl80211_new_station,
5854 .policy = nl80211_policy,
5855 .flags = GENL_ADMIN_PERM,
41265714 5856 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5857 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 5858 },
5859 {
5860 .cmd = NL80211_CMD_DEL_STATION,
5861 .doit = nl80211_del_station,
5862 .policy = nl80211_policy,
2ec600d6 5863 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5864 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5865 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5866 },
5867 {
5868 .cmd = NL80211_CMD_GET_MPATH,
5869 .doit = nl80211_get_mpath,
5870 .dumpit = nl80211_dump_mpath,
5871 .policy = nl80211_policy,
5872 .flags = GENL_ADMIN_PERM,
41265714 5873 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5874 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5875 },
5876 {
5877 .cmd = NL80211_CMD_SET_MPATH,
5878 .doit = nl80211_set_mpath,
5879 .policy = nl80211_policy,
5880 .flags = GENL_ADMIN_PERM,
41265714 5881 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5882 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5883 },
5884 {
5885 .cmd = NL80211_CMD_NEW_MPATH,
5886 .doit = nl80211_new_mpath,
5887 .policy = nl80211_policy,
5888 .flags = GENL_ADMIN_PERM,
41265714 5889 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5890 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 5891 },
5892 {
5893 .cmd = NL80211_CMD_DEL_MPATH,
5894 .doit = nl80211_del_mpath,
5895 .policy = nl80211_policy,
9f1ba906 5896 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5897 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5898 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 5899 },
5900 {
5901 .cmd = NL80211_CMD_SET_BSS,
5902 .doit = nl80211_set_bss,
5903 .policy = nl80211_policy,
b2e1b302 5904 .flags = GENL_ADMIN_PERM,
4c476991
JB		 5905 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5906 NL80211_FLAG_NEED_RTNL,
b2e1b302 5907 },
f130347c
LR		 5908 {
5909 .cmd = NL80211_CMD_GET_REG,
5910 .doit = nl80211_get_reg,
5911 .policy = nl80211_policy,
5912 /* can be retrieved by unprivileged users */
5913 },
b2e1b302
LR		 5914 {
5915 .cmd = NL80211_CMD_SET_REG,
5916 .doit = nl80211_set_reg,
5917 .policy = nl80211_policy,
5918 .flags = GENL_ADMIN_PERM,
5919 },
5920 {
5921 .cmd = NL80211_CMD_REQ_SET_REG,
5922 .doit = nl80211_req_set_reg,
5923 .policy = nl80211_policy,
93da9cc1 5924 .flags = GENL_ADMIN_PERM,
5925 },
5926 {
24bdd9f4
JC		 5927 .cmd = NL80211_CMD_GET_MESH_CONFIG,
5928 .doit = nl80211_get_mesh_config,
93da9cc1 5929 .policy = nl80211_policy,
5930 /* can be retrieved by unprivileged users */
4c476991
JB		 5931 .internal_flags = NL80211_FLAG_NEED_NETDEV |
5932 NL80211_FLAG_NEED_RTNL,
93da9cc1 5933 },
5934 {
24bdd9f4
JC		 5935 .cmd = NL80211_CMD_SET_MESH_CONFIG,
5936 .doit = nl80211_update_mesh_config,
93da9cc1 5937 .policy = nl80211_policy,
9aed3cc1 5938 .flags = GENL_ADMIN_PERM,
29cbe68c 5939 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5940 NL80211_FLAG_NEED_RTNL,
9aed3cc1 5941 },
2a519311
JB		 5942 {
5943 .cmd = NL80211_CMD_TRIGGER_SCAN,
5944 .doit = nl80211_trigger_scan,
5945 .policy = nl80211_policy,
5946 .flags = GENL_ADMIN_PERM,
41265714 5947 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5948 NL80211_FLAG_NEED_RTNL,
2a519311
JB		 5949 },
5950 {
5951 .cmd = NL80211_CMD_GET_SCAN,
5952 .policy = nl80211_policy,
5953 .dumpit = nl80211_dump_scan,
5954 },
807f8a8c
LC		 5955 {
5956 .cmd = NL80211_CMD_START_SCHED_SCAN,
5957 .doit = nl80211_start_sched_scan,
5958 .policy = nl80211_policy,
5959 .flags = GENL_ADMIN_PERM,
5960 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5961 NL80211_FLAG_NEED_RTNL,
5962 },
5963 {
5964 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
5965 .doit = nl80211_stop_sched_scan,
5966 .policy = nl80211_policy,
5967 .flags = GENL_ADMIN_PERM,
5968 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
5969 NL80211_FLAG_NEED_RTNL,
5970 },
636a5d36
JM		 5971 {
5972 .cmd = NL80211_CMD_AUTHENTICATE,
5973 .doit = nl80211_authenticate,
5974 .policy = nl80211_policy,
5975 .flags = GENL_ADMIN_PERM,
41265714 5976 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5977 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 5978 },
5979 {
5980 .cmd = NL80211_CMD_ASSOCIATE,
5981 .doit = nl80211_associate,
5982 .policy = nl80211_policy,
5983 .flags = GENL_ADMIN_PERM,
41265714 5984 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5985 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 5986 },
5987 {
5988 .cmd = NL80211_CMD_DEAUTHENTICATE,
5989 .doit = nl80211_deauthenticate,
5990 .policy = nl80211_policy,
5991 .flags = GENL_ADMIN_PERM,
41265714 5992 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 5993 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 5994 },
5995 {
5996 .cmd = NL80211_CMD_DISASSOCIATE,
5997 .doit = nl80211_disassociate,
5998 .policy = nl80211_policy,
5999 .flags = GENL_ADMIN_PERM,
41265714 6000 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6001 NL80211_FLAG_NEED_RTNL,
636a5d36 6002 },
04a773ad
JB		 6003 {
6004 .cmd = NL80211_CMD_JOIN_IBSS,
6005 .doit = nl80211_join_ibss,
6006 .policy = nl80211_policy,
6007 .flags = GENL_ADMIN_PERM,
41265714 6008 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6009 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 6010 },
6011 {
6012 .cmd = NL80211_CMD_LEAVE_IBSS,
6013 .doit = nl80211_leave_ibss,
6014 .policy = nl80211_policy,
6015 .flags = GENL_ADMIN_PERM,
41265714 6016 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6017 NL80211_FLAG_NEED_RTNL,
04a773ad 6018 },
aff89a9b
JB		 6019#ifdef CONFIG_NL80211_TESTMODE
6020 {
6021 .cmd = NL80211_CMD_TESTMODE,
6022 .doit = nl80211_testmode_do,
71063f0e 6023 .dumpit = nl80211_testmode_dump,
aff89a9b
JB		 6024 .policy = nl80211_policy,
6025 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6026 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6027 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 6028 },
6029#endif
b23aa676
SO		 6030 {
6031 .cmd = NL80211_CMD_CONNECT,
6032 .doit = nl80211_connect,
6033 .policy = nl80211_policy,
6034 .flags = GENL_ADMIN_PERM,
41265714 6035 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6036 NL80211_FLAG_NEED_RTNL,
b23aa676
SO		 6037 },
6038 {
6039 .cmd = NL80211_CMD_DISCONNECT,
6040 .doit = nl80211_disconnect,
6041 .policy = nl80211_policy,
6042 .flags = GENL_ADMIN_PERM,
41265714 6043 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6044 NL80211_FLAG_NEED_RTNL,
b23aa676 6045 },
463d0183
JB		 6046 {
6047 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
6048 .doit = nl80211_wiphy_netns,
6049 .policy = nl80211_policy,
6050 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6051 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6052 NL80211_FLAG_NEED_RTNL,
463d0183 6053 },
61fa713c
HS		 6054 {
6055 .cmd = NL80211_CMD_GET_SURVEY,
6056 .policy = nl80211_policy,
6057 .dumpit = nl80211_dump_survey,
6058 },
67fbb16b
SO		 6059 {
6060 .cmd = NL80211_CMD_SET_PMKSA,
6061 .doit = nl80211_setdel_pmksa,
6062 .policy = nl80211_policy,
6063 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6064 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6065 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 6066 },
6067 {
6068 .cmd = NL80211_CMD_DEL_PMKSA,
6069 .doit = nl80211_setdel_pmksa,
6070 .policy = nl80211_policy,
6071 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6072 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6073 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 6074 },
6075 {
6076 .cmd = NL80211_CMD_FLUSH_PMKSA,
6077 .doit = nl80211_flush_pmksa,
6078 .policy = nl80211_policy,
6079 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6080 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6081 NL80211_FLAG_NEED_RTNL,
67fbb16b 6082 },
9588bbd5
JM		 6083 {
6084 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
6085 .doit = nl80211_remain_on_channel,
6086 .policy = nl80211_policy,
6087 .flags = GENL_ADMIN_PERM,
41265714 6088 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6089 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 6090 },
6091 {
6092 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
6093 .doit = nl80211_cancel_remain_on_channel,
6094 .policy = nl80211_policy,
6095 .flags = GENL_ADMIN_PERM,
41265714 6096 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6097 NL80211_FLAG_NEED_RTNL,
9588bbd5 6098 },
13ae75b1
JM		 6099 {
6100 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
6101 .doit = nl80211_set_tx_bitrate_mask,
6102 .policy = nl80211_policy,
6103 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6104 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6105 NL80211_FLAG_NEED_RTNL,
13ae75b1 6106 },
026331c4 6107 {
2e161f78
JB		 6108 .cmd = NL80211_CMD_REGISTER_FRAME,
6109 .doit = nl80211_register_mgmt,
026331c4
JM		 6110 .policy = nl80211_policy,
6111 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6112 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6113 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 6114 },
6115 {
2e161f78
JB		 6116 .cmd = NL80211_CMD_FRAME,
6117 .doit = nl80211_tx_mgmt,
026331c4 6118 .policy = nl80211_policy,
f7ca38df
JB		 6119 .flags = GENL_ADMIN_PERM,
6120 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6121 NL80211_FLAG_NEED_RTNL,
6122 },
6123 {
6124 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
6125 .doit = nl80211_tx_mgmt_cancel_wait,
6126 .policy = nl80211_policy,
026331c4 6127 .flags = GENL_ADMIN_PERM,
41265714 6128 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6129 NL80211_FLAG_NEED_RTNL,
026331c4 6130 },
ffb9eb3d
KV		 6131 {
6132 .cmd = NL80211_CMD_SET_POWER_SAVE,
6133 .doit = nl80211_set_power_save,
6134 .policy = nl80211_policy,
6135 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6136 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6137 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 6138 },
6139 {
6140 .cmd = NL80211_CMD_GET_POWER_SAVE,
6141 .doit = nl80211_get_power_save,
6142 .policy = nl80211_policy,
6143 /* can be retrieved by unprivileged users */
4c476991
JB		 6144 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6145 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 6146 },
d6dc1a38
JO		 6147 {
6148 .cmd = NL80211_CMD_SET_CQM,
6149 .doit = nl80211_set_cqm,
6150 .policy = nl80211_policy,
6151 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6152 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6153 NL80211_FLAG_NEED_RTNL,
d6dc1a38 6154 },
f444de05
JB		 6155 {
6156 .cmd = NL80211_CMD_SET_CHANNEL,
6157 .doit = nl80211_set_channel,
6158 .policy = nl80211_policy,
6159 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6160 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6161 NL80211_FLAG_NEED_RTNL,
f444de05 6162 },
e8347eba
BJ		 6163 {
6164 .cmd = NL80211_CMD_SET_WDS_PEER,
6165 .doit = nl80211_set_wds_peer,
6166 .policy = nl80211_policy,
6167 .flags = GENL_ADMIN_PERM,
43b19952
JB		 6168 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6169 NL80211_FLAG_NEED_RTNL,
e8347eba 6170 },
29cbe68c
JB		 6171 {
6172 .cmd = NL80211_CMD_JOIN_MESH,
6173 .doit = nl80211_join_mesh,
6174 .policy = nl80211_policy,
6175 .flags = GENL_ADMIN_PERM,
6176 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6177 NL80211_FLAG_NEED_RTNL,
6178 },
6179 {
6180 .cmd = NL80211_CMD_LEAVE_MESH,
6181 .doit = nl80211_leave_mesh,
6182 .policy = nl80211_policy,
6183 .flags = GENL_ADMIN_PERM,
6184 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6185 NL80211_FLAG_NEED_RTNL,
6186 },
ff1b6e69
JB		 6187 {
6188 .cmd = NL80211_CMD_GET_WOWLAN,
6189 .doit = nl80211_get_wowlan,
6190 .policy = nl80211_policy,
6191 /* can be retrieved by unprivileged users */
6192 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6193 NL80211_FLAG_NEED_RTNL,
6194 },
6195 {
6196 .cmd = NL80211_CMD_SET_WOWLAN,
6197 .doit = nl80211_set_wowlan,
6198 .policy = nl80211_policy,
6199 .flags = GENL_ADMIN_PERM,
6200 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6201 NL80211_FLAG_NEED_RTNL,
6202 },
e5497d76
JB		 6203 {
6204 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
6205 .doit = nl80211_set_rekey_data,
6206 .policy = nl80211_policy,
6207 .flags = GENL_ADMIN_PERM,
6208 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6209 NL80211_FLAG_NEED_RTNL,
6210 },
55682965 6211};
9588bbd5 6212
6039f6d2
JM		 6213static struct genl_multicast_group nl80211_mlme_mcgrp = {
6214 .name = "mlme",
6215};
55682965
JB		 6216
6217/* multicast groups */
6218static struct genl_multicast_group nl80211_config_mcgrp = {
6219 .name = "config",
6220};
2a519311
JB		 6221static struct genl_multicast_group nl80211_scan_mcgrp = {
6222 .name = "scan",
6223};
73d54c9e
LR		 6224static struct genl_multicast_group nl80211_regulatory_mcgrp = {
6225 .name = "regulatory",
6226};
55682965
JB		 6227
6228/* notification functions */
6229
6230void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
6231{
6232 struct sk_buff *msg;
6233
fd2120ca 6234 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 6235 if (!msg)
6236 return;
6237
6238 if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
6239 nlmsg_free(msg);
6240 return;
6241 }
6242
463d0183
JB		 6243 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6244 nl80211_config_mcgrp.id, GFP_KERNEL);
55682965
JB		 6245}
6246
362a415d
JB		 6247static int nl80211_add_scan_req(struct sk_buff *msg,
6248 struct cfg80211_registered_device *rdev)
6249{
6250 struct cfg80211_scan_request *req = rdev->scan_req;
6251 struct nlattr *nest;
6252 int i;
6253
667503dd
JB		 6254 ASSERT_RDEV_LOCK(rdev);
6255
362a415d
JB		 6256 if (WARN_ON(!req))
6257 return 0;
6258
6259 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
6260 if (!nest)
6261 goto nla_put_failure;
6262 for (i = 0; i < req->n_ssids; i++)
6263 NLA_PUT(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid);
6264 nla_nest_end(msg, nest);
6265
6266 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
6267 if (!nest)
6268 goto nla_put_failure;
6269 for (i = 0; i < req->n_channels; i++)
6270 NLA_PUT_U32(msg, i, req->channels[i]->center_freq);
6271 nla_nest_end(msg, nest);
6272
6273 if (req->ie)
6274 NLA_PUT(msg, NL80211_ATTR_IE, req->ie_len, req->ie);
6275
6276 return 0;
6277 nla_put_failure:
6278 return -ENOBUFS;
6279}
6280
a538e2d5
JB		 6281static int nl80211_send_scan_msg(struct sk_buff *msg,
6282 struct cfg80211_registered_device *rdev,
6283 struct net_device *netdev,
6284 u32 pid, u32 seq, int flags,
6285 u32 cmd)
2a519311
JB		 6286{
6287 void *hdr;
6288
6289 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
6290 if (!hdr)
6291 return -1;
6292
b5850a7a 6293 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
2a519311
JB		 6294 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6295
362a415d
JB		 6296 /* ignore errors and send incomplete event anyway */
6297 nl80211_add_scan_req(msg, rdev);
2a519311
JB		 6298
6299 return genlmsg_end(msg, hdr);
6300
6301 nla_put_failure:
6302 genlmsg_cancel(msg, hdr);
6303 return -EMSGSIZE;
6304}
6305
807f8a8c
LC		 6306static int
6307nl80211_send_sched_scan_msg(struct sk_buff *msg,
6308 struct cfg80211_registered_device *rdev,
6309 struct net_device *netdev,
6310 u32 pid, u32 seq, int flags, u32 cmd)
6311{
6312 void *hdr;
6313
6314 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
6315 if (!hdr)
6316 return -1;
6317
6318 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6319 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6320
6321 return genlmsg_end(msg, hdr);
6322
6323 nla_put_failure:
6324 genlmsg_cancel(msg, hdr);
6325 return -EMSGSIZE;
6326}
6327
a538e2d5
JB		 6328void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
6329 struct net_device *netdev)
6330{
6331 struct sk_buff *msg;
6332
6333 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
6334 if (!msg)
6335 return;
6336
6337 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
6338 NL80211_CMD_TRIGGER_SCAN) < 0) {
6339 nlmsg_free(msg);
6340 return;
6341 }
6342
463d0183
JB		 6343 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6344 nl80211_scan_mcgrp.id, GFP_KERNEL);
a538e2d5
JB		 6345}
6346
2a519311
JB		 6347void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
6348 struct net_device *netdev)
6349{
6350 struct sk_buff *msg;
6351
fd2120ca 6352 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 6353 if (!msg)
6354 return;
6355
a538e2d5
JB		 6356 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
6357 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311
JB		 6358 nlmsg_free(msg);
6359 return;
6360 }
6361
463d0183
JB		 6362 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6363 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 6364}
6365
6366void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
6367 struct net_device *netdev)
6368{
6369 struct sk_buff *msg;
6370
fd2120ca 6371 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 6372 if (!msg)
6373 return;
6374
a538e2d5
JB		 6375 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
6376 NL80211_CMD_SCAN_ABORTED) < 0) {
2a519311
JB		 6377 nlmsg_free(msg);
6378 return;
6379 }
6380
463d0183
JB		 6381 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6382 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 6383}
6384
807f8a8c
LC		 6385void nl80211_send_sched_scan_results(struct cfg80211_registered_device *rdev,
6386 struct net_device *netdev)
6387{
6388 struct sk_buff *msg;
6389
6390 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6391 if (!msg)
6392 return;
6393
6394 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0,
6395 NL80211_CMD_SCHED_SCAN_RESULTS) < 0) {
6396 nlmsg_free(msg);
6397 return;
6398 }
6399
6400 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6401 nl80211_scan_mcgrp.id, GFP_KERNEL);
6402}
6403
6404void nl80211_send_sched_scan(struct cfg80211_registered_device *rdev,
6405 struct net_device *netdev, u32 cmd)
6406{
6407 struct sk_buff *msg;
6408
6409 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
6410 if (!msg)
6411 return;
6412
6413 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0, cmd) < 0) {
6414 nlmsg_free(msg);
6415 return;
6416 }
6417
6418 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6419 nl80211_scan_mcgrp.id, GFP_KERNEL);
6420}
6421
73d54c9e
LR		 6422/*
6423 * This can happen on global regulatory changes or device specific settings
6424 * based on custom world regulatory domains.
6425 */
6426void nl80211_send_reg_change_event(struct regulatory_request *request)
6427{
6428 struct sk_buff *msg;
6429 void *hdr;
6430
fd2120ca 6431 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
73d54c9e
LR		 6432 if (!msg)
6433 return;
6434
6435 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
6436 if (!hdr) {
6437 nlmsg_free(msg);
6438 return;
6439 }
6440
6441 /* Userspace can always count this one always being set */
6442 NLA_PUT_U8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator);
6443
6444 if (request->alpha2[0] == '0' && request->alpha2[1] == '0')
6445 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6446 NL80211_REGDOM_TYPE_WORLD);
6447 else if (request->alpha2[0] == '9' && request->alpha2[1] == '9')
6448 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6449 NL80211_REGDOM_TYPE_CUSTOM_WORLD);
6450 else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
6451 request->intersect)
6452 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6453 NL80211_REGDOM_TYPE_INTERSECTION);
6454 else {
6455 NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
6456 NL80211_REGDOM_TYPE_COUNTRY);
6457 NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2, request->alpha2);
6458 }
6459
6460 if (wiphy_idx_valid(request->wiphy_idx))
6461 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx);
6462
6463 if (genlmsg_end(msg, hdr) < 0) {
6464 nlmsg_free(msg);
6465 return;
6466 }
6467
bc43b28c 6468 rcu_read_lock();
463d0183 6469 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
bc43b28c
JB		 6470 GFP_ATOMIC);
6471 rcu_read_unlock();
73d54c9e
LR		 6472
6473 return;
6474
6475nla_put_failure:
6476 genlmsg_cancel(msg, hdr);
6477 nlmsg_free(msg);
6478}
6479
6039f6d2
JM		 6480static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
6481 struct net_device *netdev,
6482 const u8 *buf, size_t len,
e6d6e342 6483 enum nl80211_commands cmd, gfp_t gfp)
6039f6d2
JM		 6484{
6485 struct sk_buff *msg;
6486 void *hdr;
6487
e6d6e342 6488 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6039f6d2
JM		 6489 if (!msg)
6490 return;
6491
6492 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
6493 if (!hdr) {
6494 nlmsg_free(msg);
6495 return;
6496 }
6497
6498 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6499 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6500 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
6501
6502 if (genlmsg_end(msg, hdr) < 0) {
6503 nlmsg_free(msg);
6504 return;
6505 }
6506
463d0183
JB		 6507 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6508 nl80211_mlme_mcgrp.id, gfp);
6039f6d2
JM		 6509 return;
6510
6511 nla_put_failure:
6512 genlmsg_cancel(msg, hdr);
6513 nlmsg_free(msg);
6514}
6515
6516void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6517 struct net_device *netdev, const u8 *buf,
6518 size_t len, gfp_t gfp)
6039f6d2
JM		 6519{
6520 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 6521 NL80211_CMD_AUTHENTICATE, gfp);
6039f6d2
JM		 6522}
6523
6524void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
6525 struct net_device *netdev, const u8 *buf,
e6d6e342 6526 size_t len, gfp_t gfp)
6039f6d2 6527{
e6d6e342
JB		 6528 nl80211_send_mlme_event(rdev, netdev, buf, len,
6529 NL80211_CMD_ASSOCIATE, gfp);
6039f6d2
JM		 6530}
6531
53b46b84 6532void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6533 struct net_device *netdev, const u8 *buf,
6534 size_t len, gfp_t gfp)
6039f6d2
JM		 6535{
6536 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 6537 NL80211_CMD_DEAUTHENTICATE, gfp);
6039f6d2
JM		 6538}
6539
53b46b84
JM		 6540void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
6541 struct net_device *netdev, const u8 *buf,
e6d6e342 6542 size_t len, gfp_t gfp)
6039f6d2
JM		 6543{
6544 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 6545 NL80211_CMD_DISASSOCIATE, gfp);
6039f6d2
JM		 6546}
6547
cf4e594e
JM		 6548void nl80211_send_unprot_deauth(struct cfg80211_registered_device *rdev,
6549 struct net_device *netdev, const u8 *buf,
6550 size_t len, gfp_t gfp)
6551{
6552 nl80211_send_mlme_event(rdev, netdev, buf, len,
6553 NL80211_CMD_UNPROT_DEAUTHENTICATE, gfp);
6554}
6555
6556void nl80211_send_unprot_disassoc(struct cfg80211_registered_device *rdev,
6557 struct net_device *netdev, const u8 *buf,
6558 size_t len, gfp_t gfp)
6559{
6560 nl80211_send_mlme_event(rdev, netdev, buf, len,
6561 NL80211_CMD_UNPROT_DISASSOCIATE, gfp);
6562}
6563
1b06bb40
LR		 6564static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
6565 struct net_device *netdev, int cmd,
e6d6e342 6566 const u8 *addr, gfp_t gfp)
1965c853
JM		 6567{
6568 struct sk_buff *msg;
6569 void *hdr;
6570
e6d6e342 6571 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 6572 if (!msg)
6573 return;
6574
6575 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
6576 if (!hdr) {
6577 nlmsg_free(msg);
6578 return;
6579 }
6580
6581 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6582 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6583 NLA_PUT_FLAG(msg, NL80211_ATTR_TIMED_OUT);
6584 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
6585
6586 if (genlmsg_end(msg, hdr) < 0) {
6587 nlmsg_free(msg);
6588 return;
6589 }
6590
463d0183
JB		 6591 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6592 nl80211_mlme_mcgrp.id, gfp);
1965c853
JM		 6593 return;
6594
6595 nla_put_failure:
6596 genlmsg_cancel(msg, hdr);
6597 nlmsg_free(msg);
6598}
6599
6600void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6601 struct net_device *netdev, const u8 *addr,
6602 gfp_t gfp)
1965c853
JM		 6603{
6604 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 6605 addr, gfp);
1965c853
JM		 6606}
6607
6608void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 6609 struct net_device *netdev, const u8 *addr,
6610 gfp_t gfp)
1965c853 6611{
e6d6e342
JB		 6612 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
6613 addr, gfp);
1965c853
JM		 6614}
6615
b23aa676
SO		 6616void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
6617 struct net_device *netdev, const u8 *bssid,
6618 const u8 *req_ie, size_t req_ie_len,
6619 const u8 *resp_ie, size_t resp_ie_len,
6620 u16 status, gfp_t gfp)
6621{
6622 struct sk_buff *msg;
6623 void *hdr;
6624
6625 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
6626 if (!msg)
6627 return;
6628
6629 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
6630 if (!hdr) {
6631 nlmsg_free(msg);
6632 return;
6633 }
6634
6635 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6636 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6637 if (bssid)
6638 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
6639 NLA_PUT_U16(msg, NL80211_ATTR_STATUS_CODE, status);
6640 if (req_ie)
6641 NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
6642 if (resp_ie)
6643 NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
6644
6645 if (genlmsg_end(msg, hdr) < 0) {
6646 nlmsg_free(msg);
6647 return;
6648 }
6649
463d0183
JB		 6650 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6651 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 6652 return;
6653
6654 nla_put_failure:
6655 genlmsg_cancel(msg, hdr);
6656 nlmsg_free(msg);
6657
6658}
6659
6660void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
6661 struct net_device *netdev, const u8 *bssid,
6662 const u8 *req_ie, size_t req_ie_len,
6663 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
6664{
6665 struct sk_buff *msg;
6666 void *hdr;
6667
6668 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
6669 if (!msg)
6670 return;
6671
6672 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
6673 if (!hdr) {
6674 nlmsg_free(msg);
6675 return;
6676 }
6677
6678 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6679 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6680 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
6681 if (req_ie)
6682 NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
6683 if (resp_ie)
6684 NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
6685
6686 if (genlmsg_end(msg, hdr) < 0) {
6687 nlmsg_free(msg);
6688 return;
6689 }
6690
463d0183
JB		 6691 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6692 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 6693 return;
6694
6695 nla_put_failure:
6696 genlmsg_cancel(msg, hdr);
6697 nlmsg_free(msg);
6698
6699}
6700
6701void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
6702 struct net_device *netdev, u16 reason,
667503dd 6703 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 6704{
6705 struct sk_buff *msg;
6706 void *hdr;
6707
667503dd 6708 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
b23aa676
SO		 6709 if (!msg)
6710 return;
6711
6712 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
6713 if (!hdr) {
6714 nlmsg_free(msg);
6715 return;
6716 }
6717
6718 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6719 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6720 if (from_ap && reason)
6721 NLA_PUT_U16(msg, NL80211_ATTR_REASON_CODE, reason);
6722 if (from_ap)
6723 NLA_PUT_FLAG(msg, NL80211_ATTR_DISCONNECTED_BY_AP);
6724 if (ie)
6725 NLA_PUT(msg, NL80211_ATTR_IE, ie_len, ie);
6726
6727 if (genlmsg_end(msg, hdr) < 0) {
6728 nlmsg_free(msg);
6729 return;
6730 }
6731
463d0183
JB		 6732 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6733 nl80211_mlme_mcgrp.id, GFP_KERNEL);
b23aa676
SO		 6734 return;
6735
6736 nla_put_failure:
6737 genlmsg_cancel(msg, hdr);
6738 nlmsg_free(msg);
6739
6740}
6741
04a773ad
JB		 6742void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
6743 struct net_device *netdev, const u8 *bssid,
6744 gfp_t gfp)
6745{
6746 struct sk_buff *msg;
6747 void *hdr;
6748
fd2120ca 6749 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 6750 if (!msg)
6751 return;
6752
6753 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
6754 if (!hdr) {
6755 nlmsg_free(msg);
6756 return;
6757 }
6758
6759 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6760 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6761 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
6762
6763 if (genlmsg_end(msg, hdr) < 0) {
6764 nlmsg_free(msg);
6765 return;
6766 }
6767
463d0183
JB		 6768 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6769 nl80211_mlme_mcgrp.id, gfp);
04a773ad
JB		 6770 return;
6771
6772 nla_put_failure:
6773 genlmsg_cancel(msg, hdr);
6774 nlmsg_free(msg);
6775}
6776
c93b5e71
JC		 6777void nl80211_send_new_peer_candidate(struct cfg80211_registered_device *rdev,
6778 struct net_device *netdev,
6779 const u8 *macaddr, const u8* ie, u8 ie_len,
6780 gfp_t gfp)
6781{
6782 struct sk_buff *msg;
6783 void *hdr;
6784
6785 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6786 if (!msg)
6787 return;
6788
6789 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
6790 if (!hdr) {
6791 nlmsg_free(msg);
6792 return;
6793 }
6794
6795 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6796 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6797 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, macaddr);
6798 if (ie_len && ie)
6799 NLA_PUT(msg, NL80211_ATTR_IE, ie_len , ie);
6800
6801 if (genlmsg_end(msg, hdr) < 0) {
6802 nlmsg_free(msg);
6803 return;
6804 }
6805
6806 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6807 nl80211_mlme_mcgrp.id, gfp);
6808 return;
6809
6810 nla_put_failure:
6811 genlmsg_cancel(msg, hdr);
6812 nlmsg_free(msg);
6813}
6814
a3b8b056
JM		 6815void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
6816 struct net_device *netdev, const u8 *addr,
6817 enum nl80211_key_type key_type, int key_id,
e6d6e342 6818 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 6819{
6820 struct sk_buff *msg;
6821 void *hdr;
6822
e6d6e342 6823 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 6824 if (!msg)
6825 return;
6826
6827 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
6828 if (!hdr) {
6829 nlmsg_free(msg);
6830 return;
6831 }
6832
6833 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6834 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6835 if (addr)
6836 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
6837 NLA_PUT_U32(msg, NL80211_ATTR_KEY_TYPE, key_type);
a66b98db
AN		 6838 if (key_id != -1)
6839 NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_id);
a3b8b056
JM		 6840 if (tsc)
6841 NLA_PUT(msg, NL80211_ATTR_KEY_SEQ, 6, tsc);
6842
6843 if (genlmsg_end(msg, hdr) < 0) {
6844 nlmsg_free(msg);
6845 return;
6846 }
6847
463d0183
JB		 6848 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6849 nl80211_mlme_mcgrp.id, gfp);
a3b8b056
JM		 6850 return;
6851
6852 nla_put_failure:
6853 genlmsg_cancel(msg, hdr);
6854 nlmsg_free(msg);
6855}
6856
6bad8766
LR		 6857void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
6858 struct ieee80211_channel *channel_before,
6859 struct ieee80211_channel *channel_after)
6860{
6861 struct sk_buff *msg;
6862 void *hdr;
6863 struct nlattr *nl_freq;
6864
fd2120ca 6865 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 6866 if (!msg)
6867 return;
6868
6869 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
6870 if (!hdr) {
6871 nlmsg_free(msg);
6872 return;
6873 }
6874
6875 /*
6876 * Since we are applying the beacon hint to a wiphy we know its
6877 * wiphy_idx is valid
6878 */
6879 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy));
6880
6881 /* Before */
6882 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
6883 if (!nl_freq)
6884 goto nla_put_failure;
6885 if (nl80211_msg_put_channel(msg, channel_before))
6886 goto nla_put_failure;
6887 nla_nest_end(msg, nl_freq);
6888
6889 /* After */
6890 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
6891 if (!nl_freq)
6892 goto nla_put_failure;
6893 if (nl80211_msg_put_channel(msg, channel_after))
6894 goto nla_put_failure;
6895 nla_nest_end(msg, nl_freq);
6896
6897 if (genlmsg_end(msg, hdr) < 0) {
6898 nlmsg_free(msg);
6899 return;
6900 }
6901
463d0183
JB		 6902 rcu_read_lock();
6903 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
6904 GFP_ATOMIC);
6905 rcu_read_unlock();
6bad8766
LR		 6906
6907 return;
6908
6909nla_put_failure:
6910 genlmsg_cancel(msg, hdr);
6911 nlmsg_free(msg);
6912}
6913
9588bbd5
JM		 6914static void nl80211_send_remain_on_chan_event(
6915 int cmd, struct cfg80211_registered_device *rdev,
6916 struct net_device *netdev, u64 cookie,
6917 struct ieee80211_channel *chan,
6918 enum nl80211_channel_type channel_type,
6919 unsigned int duration, gfp_t gfp)
6920{
6921 struct sk_buff *msg;
6922 void *hdr;
6923
6924 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6925 if (!msg)
6926 return;
6927
6928 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
6929 if (!hdr) {
6930 nlmsg_free(msg);
6931 return;
6932 }
6933
6934 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
6935 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
6936 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq);
6937 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, channel_type);
6938 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
6939
6940 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL)
6941 NLA_PUT_U32(msg, NL80211_ATTR_DURATION, duration);
6942
6943 if (genlmsg_end(msg, hdr) < 0) {
6944 nlmsg_free(msg);
6945 return;
6946 }
6947
6948 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6949 nl80211_mlme_mcgrp.id, gfp);
6950 return;
6951
6952 nla_put_failure:
6953 genlmsg_cancel(msg, hdr);
6954 nlmsg_free(msg);
6955}
6956
6957void nl80211_send_remain_on_channel(struct cfg80211_registered_device *rdev,
6958 struct net_device *netdev, u64 cookie,
6959 struct ieee80211_channel *chan,
6960 enum nl80211_channel_type channel_type,
6961 unsigned int duration, gfp_t gfp)
6962{
6963 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
6964 rdev, netdev, cookie, chan,
6965 channel_type, duration, gfp);
6966}
6967
6968void nl80211_send_remain_on_channel_cancel(
6969 struct cfg80211_registered_device *rdev, struct net_device *netdev,
6970 u64 cookie, struct ieee80211_channel *chan,
6971 enum nl80211_channel_type channel_type, gfp_t gfp)
6972{
6973 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
6974 rdev, netdev, cookie, chan,
6975 channel_type, 0, gfp);
6976}
6977
98b62183
JB		 6978void nl80211_send_sta_event(struct cfg80211_registered_device *rdev,
6979 struct net_device *dev, const u8 *mac_addr,
6980 struct station_info *sinfo, gfp_t gfp)
6981{
6982 struct sk_buff *msg;
6983
6984 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
6985 if (!msg)
6986 return;
6987
6988 if (nl80211_send_station(msg, 0, 0, 0, dev, mac_addr, sinfo) < 0) {
6989 nlmsg_free(msg);
6990 return;
6991 }
6992
6993 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
6994 nl80211_mlme_mcgrp.id, gfp);
6995}
6996
ec15e68b
JM		 6997void nl80211_send_sta_del_event(struct cfg80211_registered_device *rdev,
6998 struct net_device *dev, const u8 *mac_addr,
6999 gfp_t gfp)
7000{
7001 struct sk_buff *msg;
7002 void *hdr;
7003
7004 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7005 if (!msg)
7006 return;
7007
7008 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_STATION);
7009 if (!hdr) {
7010 nlmsg_free(msg);
7011 return;
7012 }
7013
7014 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
7015 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
7016
7017 if (genlmsg_end(msg, hdr) < 0) {
7018 nlmsg_free(msg);
7019 return;
7020 }
7021
7022 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7023 nl80211_mlme_mcgrp.id, gfp);
7024 return;
7025
7026 nla_put_failure:
7027 genlmsg_cancel(msg, hdr);
7028 nlmsg_free(msg);
7029}
7030
2e161f78
JB		 7031int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
7032 struct net_device *netdev, u32 nlpid,
7033 int freq, const u8 *buf, size_t len, gfp_t gfp)
026331c4
JM		 7034{
7035 struct sk_buff *msg;
7036 void *hdr;
7037 int err;
7038
7039 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7040 if (!msg)
7041 return -ENOMEM;
7042
2e161f78 7043 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 7044 if (!hdr) {
7045 nlmsg_free(msg);
7046 return -ENOMEM;
7047 }
7048
7049 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7050 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7051 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FREQ, freq);
7052 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
7053
7054 err = genlmsg_end(msg, hdr);
7055 if (err < 0) {
7056 nlmsg_free(msg);
7057 return err;
7058 }
7059
7060 err = genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlpid);
7061 if (err < 0)
7062 return err;
7063 return 0;
7064
7065 nla_put_failure:
7066 genlmsg_cancel(msg, hdr);
7067 nlmsg_free(msg);
7068 return -ENOBUFS;
7069}
7070
2e161f78
JB		 7071void nl80211_send_mgmt_tx_status(struct cfg80211_registered_device *rdev,
7072 struct net_device *netdev, u64 cookie,
7073 const u8 *buf, size_t len, bool ack,
7074 gfp_t gfp)
026331c4
JM		 7075{
7076 struct sk_buff *msg;
7077 void *hdr;
7078
7079 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7080 if (!msg)
7081 return;
7082
2e161f78 7083 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
026331c4
JM		 7084 if (!hdr) {
7085 nlmsg_free(msg);
7086 return;
7087 }
7088
7089 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7090 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7091 NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
7092 NLA_PUT_U64(msg, NL80211_ATTR_COOKIE, cookie);
7093 if (ack)
7094 NLA_PUT_FLAG(msg, NL80211_ATTR_ACK);
7095
7096 if (genlmsg_end(msg, hdr) < 0) {
7097 nlmsg_free(msg);
7098 return;
7099 }
7100
7101 genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
7102 return;
7103
7104 nla_put_failure:
7105 genlmsg_cancel(msg, hdr);
7106 nlmsg_free(msg);
7107}
7108
d6dc1a38
JO		 7109void
7110nl80211_send_cqm_rssi_notify(struct cfg80211_registered_device *rdev,
7111 struct net_device *netdev,
7112 enum nl80211_cqm_rssi_threshold_event rssi_event,
7113 gfp_t gfp)
7114{
7115 struct sk_buff *msg;
7116 struct nlattr *pinfoattr;
7117 void *hdr;
7118
7119 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7120 if (!msg)
7121 return;
7122
7123 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
7124 if (!hdr) {
7125 nlmsg_free(msg);
7126 return;
7127 }
7128
7129 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7130 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7131
7132 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
7133 if (!pinfoattr)
7134 goto nla_put_failure;
7135
7136 NLA_PUT_U32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
7137 rssi_event);
7138
7139 nla_nest_end(msg, pinfoattr);
7140
7141 if (genlmsg_end(msg, hdr) < 0) {
7142 nlmsg_free(msg);
7143 return;
7144 }
7145
7146 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7147 nl80211_mlme_mcgrp.id, gfp);
7148 return;
7149
7150 nla_put_failure:
7151 genlmsg_cancel(msg, hdr);
7152 nlmsg_free(msg);
7153}
7154
e5497d76
JB		 7155void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
7156 struct net_device *netdev, const u8 *bssid,
7157 const u8 *replay_ctr, gfp_t gfp)
7158{
7159 struct sk_buff *msg;
7160 struct nlattr *rekey_attr;
7161 void *hdr;
7162
7163 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7164 if (!msg)
7165 return;
7166
7167 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
7168 if (!hdr) {
7169 nlmsg_free(msg);
7170 return;
7171 }
7172
7173 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7174 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7175 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
7176
7177 rekey_attr = nla_nest_start(msg, NL80211_ATTR_REKEY_DATA);
7178 if (!rekey_attr)
7179 goto nla_put_failure;
7180
7181 NLA_PUT(msg, NL80211_REKEY_DATA_REPLAY_CTR,
7182 NL80211_REPLAY_CTR_LEN, replay_ctr);
7183
7184 nla_nest_end(msg, rekey_attr);
7185
7186 if (genlmsg_end(msg, hdr) < 0) {
7187 nlmsg_free(msg);
7188 return;
7189 }
7190
7191 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7192 nl80211_mlme_mcgrp.id, gfp);
7193 return;
7194
7195 nla_put_failure:
7196 genlmsg_cancel(msg, hdr);
7197 nlmsg_free(msg);
7198}
7199
c063dbf5
JB		 7200void
7201nl80211_send_cqm_pktloss_notify(struct cfg80211_registered_device *rdev,
7202 struct net_device *netdev, const u8 *peer,
7203 u32 num_packets, gfp_t gfp)
7204{
7205 struct sk_buff *msg;
7206 struct nlattr *pinfoattr;
7207 void *hdr;
7208
7209 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7210 if (!msg)
7211 return;
7212
7213 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
7214 if (!hdr) {
7215 nlmsg_free(msg);
7216 return;
7217 }
7218
7219 NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
7220 NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
7221 NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, peer);
7222
7223 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
7224 if (!pinfoattr)
7225 goto nla_put_failure;
7226
7227 NLA_PUT_U32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets);
7228
7229 nla_nest_end(msg, pinfoattr);
7230
7231 if (genlmsg_end(msg, hdr) < 0) {
7232 nlmsg_free(msg);
7233 return;
7234 }
7235
7236 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7237 nl80211_mlme_mcgrp.id, gfp);
7238 return;
7239
7240 nla_put_failure:
7241 genlmsg_cancel(msg, hdr);
7242 nlmsg_free(msg);
7243}
7244
026331c4
JM		 7245static int nl80211_netlink_notify(struct notifier_block * nb,
7246 unsigned long state,
7247 void *_notify)
7248{
7249 struct netlink_notify *notify = _notify;
7250 struct cfg80211_registered_device *rdev;
7251 struct wireless_dev *wdev;
7252
7253 if (state != NETLINK_URELEASE)
7254 return NOTIFY_DONE;
7255
7256 rcu_read_lock();
7257
7258 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list)
7259 list_for_each_entry_rcu(wdev, &rdev->netdev_list, list)
2e161f78 7260 cfg80211_mlme_unregister_socket(wdev, notify->pid);
026331c4
JM		 7261
7262 rcu_read_unlock();
7263
7264 return NOTIFY_DONE;
7265}
7266
7267static struct notifier_block nl80211_netlink_notifier = {
7268 .notifier_call = nl80211_netlink_notify,
7269};
7270
55682965
JB		 7271/* initialisation/exit functions */
7272
7273int nl80211_init(void)
7274{
0d63cbb5 7275 int err;
55682965 7276
0d63cbb5
MM		 7277 err = genl_register_family_with_ops(&nl80211_fam,
7278 nl80211_ops, ARRAY_SIZE(nl80211_ops));
55682965
JB		 7279 if (err)
7280 return err;
7281
55682965
JB		 7282 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
7283 if (err)
7284 goto err_out;
7285
2a519311
JB		 7286 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
7287 if (err)
7288 goto err_out;
7289
73d54c9e
LR		 7290 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
7291 if (err)
7292 goto err_out;
7293
6039f6d2
JM		 7294 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
7295 if (err)
7296 goto err_out;
7297
aff89a9b
JB		 7298#ifdef CONFIG_NL80211_TESTMODE
7299 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
7300 if (err)
7301 goto err_out;
7302#endif
7303
026331c4
JM		 7304 err = netlink_register_notifier(&nl80211_netlink_notifier);
7305 if (err)
7306 goto err_out;
7307
55682965
JB		 7308 return 0;
7309 err_out:
7310 genl_unregister_family(&nl80211_fam);
7311 return err;
7312}
7313
7314void nl80211_exit(void)
7315{
026331c4 7316 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 7317 genl_unregister_family(&nl80211_fam);
7318}
ubuntu-bionic-kernel mirror