nl80211.c 338 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778277927802781278227832784278527862787278827892790279127922793279427952796279727982799280028012802280328042805280628072808280928102811281228132814281528162817281828192820282128222823282428252826282728282829283028312832283328342835283628372838283928402841284228432844284528462847284828492850285128522853285428552856285728582859286028612862286328642865286628672868286928702871287228732874287528762877287828792880288128822883288428852886288728882889289028912892289328942895289628972898289929002901290229032904290529062907290829092910291129122913291429152916291729182919292029212922292329242925292629272928292929302931293229332934293529362937293829392940294129422943294429452946294729482949295029512952295329542955295629572958295929602961296229632964296529662967296829692970297129722973297429752976297729782979298029812982298329842985298629872988298929902991299229932994299529962997299829993000300130023003300430053006300730083009301030113012301330143015301630173018301930203021302230233024302530263027302830293030303130323033303430353036303730383039304030413042304330443045304630473048304930503051305230533054305530563057305830593060306130623063306430653066306730683069307030713072307330743075307630773078307930803081308230833084308530863087308830893090309130923093309430953096309730983099310031013102310331043105310631073108310931103111311231133114311531163117311831193120312131223123312431253126312731283129313031313132313331343135313631373138313931403141314231433144314531463147314831493150315131523153315431553156315731583159316031613162316331643165316631673168316931703171317231733174317531763177317831793180318131823183318431853186318731883189319031913192319331943195319631973198319932003201320232033204320532063207320832093210321132123213321432153216321732183219322032213222322332243225322632273228322932303231323232333234323532363237323832393240324132423243324432453246324732483249325032513252325332543255325632573258325932603261326232633264326532663267326832693270327132723273327432753276327732783279328032813282328332843285328632873288328932903291329232933294329532963297329832993300330133023303330433053306330733083309331033113312331333143315331633173318331933203321332233233324332533263327332833293330333133323333333433353336333733383339334033413342334333443345334633473348334933503351335233533354335533563357335833593360336133623363336433653366336733683369337033713372337333743375337633773378337933803381338233833384338533863387338833893390339133923393339433953396339733983399340034013402340334043405340634073408340934103411341234133414341534163417341834193420342134223423342434253426342734283429343034313432343334343435343634373438343934403441344234433444344534463447344834493450345134523453345434553456345734583459346034613462346334643465346634673468346934703471347234733474347534763477347834793480348134823483348434853486348734883489349034913492349334943495349634973498349935003501350235033504350535063507350835093510351135123513351435153516351735183519352035213522352335243525352635273528352935303531353235333534353535363537353835393540354135423543354435453546354735483549355035513552355335543555355635573558355935603561356235633564356535663567356835693570357135723573357435753576357735783579358035813582358335843585358635873588358935903591359235933594359535963597359835993600360136023603360436053606360736083609361036113612361336143615361636173618361936203621362236233624362536263627362836293630363136323633363436353636363736383639364036413642364336443645364636473648364936503651365236533654365536563657365836593660366136623663366436653666366736683669367036713672367336743675367636773678367936803681368236833684368536863687368836893690369136923693369436953696369736983699370037013702370337043705370637073708370937103711371237133714371537163717371837193720372137223723372437253726372737283729373037313732373337343735373637373738373937403741374237433744374537463747374837493750375137523753375437553756375737583759376037613762376337643765376637673768376937703771377237733774377537763777377837793780378137823783378437853786378737883789379037913792379337943795379637973798379938003801380238033804380538063807380838093810381138123813381438153816381738183819382038213822382338243825382638273828382938303831383238333834383538363837383838393840384138423843384438453846384738483849385038513852385338543855385638573858385938603861386238633864386538663867386838693870387138723873387438753876387738783879388038813882388338843885388638873888388938903891389238933894389538963897389838993900390139023903390439053906390739083909391039113912391339143915391639173918391939203921392239233924392539263927392839293930393139323933393439353936393739383939394039413942394339443945394639473948394939503951395239533954395539563957395839593960396139623963396439653966396739683969397039713972397339743975397639773978397939803981398239833984398539863987398839893990399139923993399439953996399739983999400040014002400340044005400640074008400940104011401240134014401540164017401840194020402140224023402440254026402740284029403040314032403340344035403640374038403940404041404240434044404540464047404840494050405140524053405440554056405740584059406040614062406340644065406640674068406940704071407240734074407540764077407840794080408140824083408440854086408740884089409040914092409340944095409640974098409941004101410241034104410541064107410841094110411141124113411441154116411741184119412041214122412341244125412641274128412941304131413241334134413541364137413841394140414141424143414441454146414741484149415041514152415341544155415641574158415941604161416241634164416541664167416841694170417141724173417441754176417741784179418041814182418341844185418641874188418941904191419241934194419541964197419841994200420142024203420442054206420742084209421042114212421342144215421642174218421942204221422242234224422542264227422842294230423142324233423442354236423742384239424042414242424342444245424642474248424942504251425242534254425542564257425842594260426142624263426442654266426742684269427042714272427342744275427642774278427942804281428242834284428542864287428842894290429142924293429442954296429742984299430043014302430343044305430643074308430943104311431243134314431543164317431843194320432143224323432443254326432743284329433043314332433343344335433643374338433943404341434243434344434543464347434843494350435143524353435443554356435743584359436043614362436343644365436643674368436943704371437243734374437543764377437843794380438143824383438443854386438743884389439043914392439343944395439643974398439944004401440244034404440544064407440844094410441144124413441444154416441744184419442044214422442344244425442644274428442944304431443244334434443544364437443844394440444144424443444444454446444744484449445044514452445344544455445644574458445944604461446244634464446544664467446844694470447144724473447444754476447744784479448044814482448344844485448644874488448944904491449244934494449544964497449844994500450145024503450445054506450745084509451045114512451345144515451645174518451945204521452245234524452545264527452845294530453145324533453445354536453745384539454045414542454345444545454645474548454945504551455245534554455545564557455845594560456145624563456445654566456745684569457045714572457345744575457645774578457945804581458245834584458545864587458845894590459145924593459445954596459745984599460046014602460346044605460646074608460946104611461246134614461546164617461846194620462146224623462446254626462746284629463046314632463346344635463646374638463946404641464246434644464546464647464846494650465146524653465446554656465746584659466046614662466346644665466646674668466946704671467246734674467546764677467846794680468146824683468446854686468746884689469046914692469346944695469646974698469947004701470247034704470547064707470847094710471147124713471447154716471747184719472047214722472347244725472647274728472947304731473247334734473547364737473847394740474147424743474447454746474747484749475047514752475347544755475647574758475947604761476247634764476547664767476847694770477147724773477447754776477747784779478047814782478347844785478647874788478947904791479247934794479547964797479847994800480148024803480448054806480748084809481048114812481348144815481648174818481948204821482248234824482548264827482848294830483148324833483448354836483748384839484048414842484348444845484648474848484948504851485248534854485548564857485848594860486148624863486448654866486748684869487048714872487348744875487648774878487948804881488248834884488548864887488848894890489148924893489448954896489748984899490049014902490349044905490649074908490949104911491249134914491549164917491849194920492149224923492449254926492749284929493049314932493349344935493649374938493949404941494249434944494549464947494849494950495149524953495449554956495749584959496049614962496349644965496649674968496949704971497249734974497549764977497849794980498149824983498449854986498749884989499049914992499349944995499649974998499950005001500250035004500550065007500850095010501150125013501450155016501750185019502050215022502350245025502650275028502950305031503250335034503550365037503850395040504150425043504450455046504750485049505050515052505350545055505650575058505950605061506250635064506550665067506850695070507150725073507450755076507750785079508050815082508350845085508650875088508950905091509250935094509550965097509850995100510151025103510451055106510751085109511051115112511351145115511651175118511951205121512251235124512551265127512851295130513151325133513451355136513751385139514051415142514351445145514651475148514951505151515251535154515551565157515851595160516151625163516451655166516751685169517051715172517351745175517651775178517951805181518251835184518551865187518851895190519151925193519451955196519751985199520052015202520352045205520652075208520952105211521252135214521552165217521852195220522152225223522452255226522752285229523052315232523352345235523652375238523952405241524252435244524552465247524852495250525152525253525452555256525752585259526052615262526352645265526652675268526952705271527252735274527552765277527852795280528152825283528452855286528752885289529052915292529352945295529652975298529953005301530253035304530553065307530853095310531153125313531453155316531753185319532053215322532353245325532653275328532953305331533253335334533553365337533853395340534153425343534453455346534753485349535053515352535353545355535653575358535953605361536253635364536553665367536853695370537153725373537453755376537753785379538053815382538353845385538653875388538953905391539253935394539553965397539853995400540154025403540454055406540754085409541054115412541354145415541654175418541954205421542254235424542554265427542854295430543154325433543454355436543754385439544054415442544354445445544654475448544954505451545254535454545554565457545854595460546154625463546454655466546754685469547054715472547354745475547654775478547954805481548254835484548554865487548854895490549154925493549454955496549754985499550055015502550355045505550655075508550955105511551255135514551555165517551855195520552155225523552455255526552755285529553055315532553355345535553655375538553955405541554255435544554555465547554855495550555155525553555455555556555755585559556055615562556355645565556655675568556955705571557255735574557555765577557855795580558155825583558455855586558755885589559055915592559355945595559655975598559956005601560256035604560556065607560856095610561156125613561456155616561756185619562056215622562356245625562656275628562956305631563256335634563556365637563856395640564156425643564456455646564756485649565056515652565356545655565656575658565956605661566256635664566556665667566856695670567156725673567456755676567756785679568056815682568356845685568656875688568956905691569256935694569556965697569856995700570157025703570457055706570757085709571057115712571357145715571657175718571957205721572257235724572557265727572857295730573157325733573457355736573757385739574057415742574357445745574657475748574957505751575257535754575557565757575857595760576157625763576457655766576757685769577057715772577357745775577657775778577957805781578257835784578557865787578857895790579157925793579457955796579757985799580058015802580358045805580658075808580958105811581258135814581558165817581858195820582158225823582458255826582758285829583058315832583358345835583658375838583958405841584258435844584558465847584858495850585158525853585458555856585758585859586058615862586358645865586658675868586958705871587258735874587558765877587858795880588158825883588458855886588758885889589058915892589358945895589658975898589959005901590259035904590559065907590859095910591159125913591459155916591759185919592059215922592359245925592659275928592959305931593259335934593559365937593859395940594159425943594459455946594759485949595059515952595359545955595659575958595959605961596259635964596559665967596859695970597159725973597459755976597759785979598059815982598359845985598659875988598959905991599259935994599559965997599859996000600160026003600460056006600760086009601060116012601360146015601660176018601960206021602260236024602560266027602860296030603160326033603460356036603760386039604060416042604360446045604660476048604960506051605260536054605560566057605860596060606160626063606460656066606760686069607060716072607360746075607660776078607960806081608260836084608560866087608860896090609160926093609460956096609760986099610061016102610361046105610661076108610961106111611261136114611561166117611861196120612161226123612461256126612761286129613061316132613361346135613661376138613961406141614261436144614561466147614861496150615161526153615461556156615761586159616061616162616361646165616661676168616961706171617261736174617561766177617861796180618161826183618461856186618761886189619061916192619361946195619661976198619962006201620262036204620562066207620862096210621162126213621462156216621762186219622062216222622362246225622662276228622962306231623262336234623562366237623862396240624162426243624462456246624762486249625062516252625362546255625662576258625962606261626262636264626562666267626862696270627162726273627462756276627762786279628062816282628362846285628662876288628962906291629262936294629562966297629862996300630163026303630463056306630763086309631063116312631363146315631663176318631963206321632263236324632563266327632863296330633163326333633463356336633763386339634063416342634363446345634663476348634963506351635263536354635563566357635863596360636163626363636463656366636763686369637063716372637363746375637663776378637963806381638263836384638563866387638863896390639163926393639463956396639763986399640064016402640364046405640664076408640964106411641264136414641564166417641864196420642164226423642464256426642764286429643064316432643364346435643664376438643964406441644264436444644564466447644864496450645164526453645464556456645764586459646064616462646364646465646664676468646964706471647264736474647564766477647864796480648164826483648464856486648764886489649064916492649364946495649664976498649965006501650265036504650565066507650865096510651165126513651465156516651765186519652065216522652365246525652665276528652965306531653265336534653565366537653865396540654165426543654465456546654765486549655065516552655365546555655665576558655965606561656265636564656565666567656865696570657165726573657465756576657765786579658065816582658365846585658665876588658965906591659265936594659565966597659865996600660166026603660466056606660766086609661066116612661366146615661666176618661966206621662266236624662566266627662866296630663166326633663466356636663766386639664066416642664366446645664666476648664966506651665266536654665566566657665866596660666166626663666466656666666766686669667066716672667366746675667666776678667966806681668266836684668566866687668866896690669166926693669466956696669766986699670067016702670367046705670667076708670967106711671267136714671567166717671867196720672167226723672467256726672767286729673067316732673367346735673667376738673967406741674267436744674567466747674867496750675167526753675467556756675767586759676067616762676367646765676667676768676967706771677267736774677567766777677867796780678167826783678467856786678767886789679067916792679367946795679667976798679968006801680268036804680568066807680868096810681168126813681468156816681768186819682068216822682368246825682668276828682968306831683268336834683568366837683868396840684168426843684468456846684768486849685068516852685368546855685668576858685968606861686268636864686568666867686868696870687168726873687468756876687768786879688068816882688368846885688668876888688968906891689268936894689568966897689868996900690169026903690469056906690769086909691069116912691369146915691669176918691969206921692269236924692569266927692869296930693169326933693469356936693769386939694069416942694369446945694669476948694969506951695269536954695569566957695869596960696169626963696469656966696769686969697069716972697369746975697669776978697969806981698269836984698569866987698869896990699169926993699469956996699769986999700070017002700370047005700670077008700970107011701270137014701570167017701870197020702170227023702470257026702770287029703070317032703370347035703670377038703970407041704270437044704570467047704870497050705170527053705470557056705770587059706070617062706370647065706670677068706970707071707270737074707570767077707870797080708170827083708470857086708770887089709070917092709370947095709670977098709971007101710271037104710571067107710871097110711171127113711471157116711771187119712071217122712371247125712671277128712971307131713271337134713571367137713871397140714171427143714471457146714771487149715071517152715371547155715671577158715971607161716271637164716571667167716871697170717171727173717471757176717771787179718071817182718371847185718671877188718971907191719271937194719571967197719871997200720172027203720472057206720772087209721072117212721372147215721672177218721972207221722272237224722572267227722872297230723172327233723472357236723772387239724072417242724372447245724672477248724972507251725272537254725572567257725872597260726172627263726472657266726772687269727072717272727372747275727672777278727972807281728272837284728572867287728872897290729172927293729472957296729772987299730073017302730373047305730673077308730973107311731273137314731573167317731873197320732173227323732473257326732773287329733073317332733373347335733673377338733973407341734273437344734573467347734873497350735173527353735473557356735773587359736073617362736373647365736673677368736973707371737273737374737573767377737873797380738173827383738473857386738773887389739073917392739373947395739673977398739974007401740274037404740574067407740874097410741174127413741474157416741774187419742074217422742374247425742674277428742974307431743274337434743574367437743874397440744174427443744474457446744774487449745074517452745374547455745674577458745974607461746274637464746574667467746874697470747174727473747474757476747774787479748074817482748374847485748674877488748974907491749274937494749574967497749874997500750175027503750475057506750775087509751075117512751375147515751675177518751975207521752275237524752575267527752875297530753175327533753475357536753775387539754075417542754375447545754675477548754975507551755275537554755575567557755875597560756175627563756475657566756775687569757075717572757375747575757675777578757975807581758275837584758575867587758875897590759175927593759475957596759775987599760076017602760376047605760676077608760976107611761276137614761576167617761876197620762176227623762476257626762776287629763076317632763376347635763676377638763976407641764276437644764576467647764876497650765176527653765476557656765776587659766076617662766376647665766676677668766976707671767276737674767576767677767876797680768176827683768476857686768776887689769076917692769376947695769676977698769977007701770277037704770577067707770877097710771177127713771477157716771777187719772077217722772377247725772677277728772977307731773277337734773577367737773877397740774177427743774477457746774777487749775077517752775377547755775677577758775977607761776277637764776577667767776877697770777177727773777477757776777777787779778077817782778377847785778677877788778977907791779277937794779577967797779877997800780178027803780478057806780778087809781078117812781378147815781678177818781978207821782278237824782578267827782878297830783178327833783478357836783778387839784078417842784378447845784678477848784978507851785278537854785578567857785878597860786178627863786478657866786778687869787078717872787378747875787678777878787978807881788278837884788578867887788878897890789178927893789478957896789778987899790079017902790379047905790679077908790979107911791279137914791579167917791879197920792179227923792479257926792779287929793079317932793379347935793679377938793979407941794279437944794579467947794879497950795179527953795479557956795779587959796079617962796379647965796679677968796979707971797279737974797579767977797879797980798179827983798479857986798779887989799079917992799379947995799679977998799980008001800280038004800580068007800880098010801180128013801480158016801780188019802080218022802380248025802680278028802980308031803280338034803580368037803880398040804180428043804480458046804780488049805080518052805380548055805680578058805980608061806280638064806580668067806880698070807180728073807480758076807780788079808080818082808380848085808680878088808980908091809280938094809580968097809880998100810181028103810481058106810781088109811081118112811381148115811681178118811981208121812281238124812581268127812881298130813181328133813481358136813781388139814081418142814381448145814681478148814981508151815281538154815581568157815881598160816181628163816481658166816781688169817081718172817381748175817681778178817981808181818281838184818581868187818881898190819181928193819481958196819781988199820082018202820382048205820682078208820982108211821282138214821582168217821882198220822182228223822482258226822782288229823082318232823382348235823682378238823982408241824282438244824582468247824882498250825182528253825482558256825782588259826082618262826382648265826682678268826982708271827282738274827582768277827882798280828182828283828482858286828782888289829082918292829382948295829682978298829983008301830283038304830583068307830883098310831183128313831483158316831783188319832083218322832383248325832683278328832983308331833283338334833583368337833883398340834183428343834483458346834783488349835083518352835383548355835683578358835983608361836283638364836583668367836883698370837183728373837483758376837783788379838083818382838383848385838683878388838983908391839283938394839583968397839883998400840184028403840484058406840784088409841084118412841384148415841684178418841984208421842284238424842584268427842884298430843184328433843484358436843784388439844084418442844384448445844684478448844984508451845284538454845584568457845884598460846184628463846484658466846784688469847084718472847384748475847684778478847984808481848284838484848584868487848884898490849184928493849484958496849784988499850085018502850385048505850685078508850985108511851285138514851585168517851885198520852185228523852485258526852785288529853085318532853385348535853685378538853985408541854285438544854585468547854885498550855185528553855485558556855785588559856085618562856385648565856685678568856985708571857285738574857585768577857885798580858185828583858485858586858785888589859085918592859385948595859685978598859986008601860286038604860586068607860886098610861186128613861486158616861786188619862086218622862386248625862686278628862986308631863286338634863586368637863886398640864186428643864486458646864786488649865086518652865386548655865686578658865986608661866286638664866586668667866886698670867186728673867486758676867786788679868086818682868386848685868686878688868986908691869286938694869586968697869886998700870187028703870487058706870787088709871087118712871387148715871687178718871987208721872287238724872587268727872887298730873187328733873487358736873787388739874087418742874387448745874687478748874987508751875287538754875587568757875887598760876187628763876487658766876787688769877087718772877387748775877687778778877987808781878287838784878587868787878887898790879187928793879487958796879787988799880088018802880388048805880688078808880988108811881288138814881588168817881888198820882188228823882488258826882788288829883088318832883388348835883688378838883988408841884288438844884588468847884888498850885188528853885488558856885788588859886088618862886388648865886688678868886988708871887288738874887588768877887888798880888188828883888488858886888788888889889088918892889388948895889688978898889989008901890289038904890589068907890889098910891189128913891489158916891789188919892089218922892389248925892689278928892989308931893289338934893589368937893889398940894189428943894489458946894789488949895089518952895389548955895689578958895989608961896289638964896589668967896889698970897189728973897489758976897789788979898089818982898389848985898689878988898989908991899289938994899589968997899889999000900190029003900490059006900790089009901090119012901390149015901690179018901990209021902290239024902590269027902890299030903190329033903490359036903790389039904090419042904390449045904690479048904990509051905290539054905590569057905890599060906190629063906490659066906790689069907090719072907390749075907690779078907990809081908290839084908590869087908890899090909190929093909490959096909790989099910091019102910391049105910691079108910991109111911291139114911591169117911891199120912191229123912491259126912791289129913091319132913391349135913691379138913991409141914291439144914591469147914891499150915191529153915491559156915791589159916091619162916391649165916691679168916991709171917291739174917591769177917891799180918191829183918491859186918791889189919091919192919391949195919691979198919992009201920292039204920592069207920892099210921192129213921492159216921792189219922092219222922392249225922692279228922992309231923292339234923592369237923892399240924192429243924492459246924792489249925092519252925392549255925692579258925992609261926292639264926592669267926892699270927192729273927492759276927792789279928092819282928392849285928692879288928992909291929292939294929592969297929892999300930193029303930493059306930793089309931093119312931393149315931693179318931993209321932293239324932593269327932893299330933193329333933493359336933793389339934093419342934393449345934693479348934993509351935293539354935593569357935893599360936193629363936493659366936793689369937093719372937393749375937693779378937993809381938293839384938593869387938893899390939193929393939493959396939793989399940094019402940394049405940694079408940994109411941294139414941594169417941894199420942194229423942494259426942794289429943094319432943394349435943694379438943994409441944294439444944594469447944894499450945194529453945494559456945794589459946094619462946394649465946694679468946994709471947294739474947594769477947894799480948194829483948494859486948794889489949094919492949394949495949694979498949995009501950295039504950595069507950895099510951195129513951495159516951795189519952095219522952395249525952695279528952995309531953295339534953595369537953895399540954195429543954495459546954795489549955095519552955395549555955695579558955995609561956295639564956595669567956895699570957195729573957495759576957795789579958095819582958395849585958695879588958995909591959295939594959595969597959895999600960196029603960496059606960796089609961096119612961396149615961696179618961996209621962296239624962596269627962896299630963196329633963496359636963796389639964096419642964396449645964696479648964996509651965296539654965596569657965896599660966196629663966496659666966796689669967096719672967396749675967696779678967996809681968296839684968596869687968896899690969196929693969496959696969796989699970097019702970397049705970697079708970997109711971297139714971597169717971897199720972197229723972497259726972797289729973097319732973397349735973697379738973997409741974297439744974597469747974897499750975197529753975497559756975797589759976097619762976397649765976697679768976997709771977297739774977597769777977897799780978197829783978497859786978797889789979097919792979397949795979697979798979998009801980298039804980598069807980898099810981198129813981498159816981798189819982098219822982398249825982698279828982998309831983298339834983598369837983898399840984198429843984498459846984798489849985098519852985398549855985698579858985998609861986298639864986598669867986898699870987198729873987498759876987798789879988098819882988398849885988698879888988998909891989298939894989598969897989898999900990199029903990499059906990799089909991099119912991399149915991699179918991999209921992299239924992599269927992899299930993199329933993499359936993799389939994099419942994399449945994699479948994999509951995299539954995599569957995899599960996199629963996499659966996799689969997099719972997399749975997699779978997999809981998299839984998599869987998899899990999199929993999499959996999799989999100001000110002100031000410005100061000710008100091001010011100121001310014100151001610017100181001910020100211002210023100241002510026100271002810029100301003110032100331003410035100361003710038100391004010041100421004310044100451004610047100481004910050100511005210053100541005510056100571005810059100601006110062100631006410065100661006710068100691007010071100721007310074100751007610077100781007910080100811008210083100841008510086100871008810089100901009110092100931009410095100961009710098100991010010101101021010310104101051010610107101081010910110101111011210113101141011510116101171011810119101201012110122101231012410125101261012710128101291013010131101321013310134101351013610137101381013910140101411014210143101441014510146101471014810149101501015110152101531015410155101561015710158101591016010161101621016310164101651016610167101681016910170101711017210173101741017510176101771017810179101801018110182101831018410185101861018710188101891019010191101921019310194101951019610197101981019910200102011020210203102041020510206102071020810209102101021110212102131021410215102161021710218102191022010221102221022310224102251022610227102281022910230102311023210233102341023510236102371023810239102401024110242102431024410245102461024710248102491025010251102521025310254102551025610257102581025910260102611026210263102641026510266102671026810269102701027110272102731027410275102761027710278102791028010281102821028310284102851028610287102881028910290102911029210293102941029510296102971029810299103001030110302103031030410305103061030710308103091031010311103121031310314103151031610317103181031910320103211032210323103241032510326103271032810329103301033110332103331033410335103361033710338103391034010341103421034310344103451034610347103481034910350103511035210353103541035510356103571035810359103601036110362103631036410365103661036710368103691037010371103721037310374103751037610377103781037910380103811038210383103841038510386103871038810389103901039110392103931039410395103961039710398103991040010401104021040310404104051040610407104081040910410104111041210413104141041510416104171041810419104201042110422104231042410425104261042710428104291043010431104321043310434104351043610437104381043910440104411044210443104441044510446104471044810449104501045110452104531045410455104561045710458104591046010461104621046310464104651046610467104681046910470104711047210473104741047510476104771047810479104801048110482104831048410485104861048710488104891049010491104921049310494104951049610497104981049910500105011050210503105041050510506105071050810509105101051110512105131051410515105161051710518105191052010521105221052310524105251052610527105281052910530105311053210533105341053510536105371053810539105401054110542105431054410545105461054710548105491055010551105521055310554105551055610557105581055910560105611056210563105641056510566105671056810569105701057110572105731057410575105761057710578105791058010581105821058310584105851058610587105881058910590105911059210593105941059510596105971059810599106001060110602106031060410605106061060710608106091061010611106121061310614106151061610617106181061910620106211062210623106241062510626106271062810629106301063110632106331063410635106361063710638106391064010641106421064310644106451064610647106481064910650106511065210653106541065510656106571065810659106601066110662106631066410665106661066710668106691067010671106721067310674106751067610677106781067910680106811068210683106841068510686106871068810689106901069110692106931069410695106961069710698106991070010701107021070310704107051070610707107081070910710107111071210713107141071510716107171071810719107201072110722107231072410725107261072710728107291073010731107321073310734107351073610737107381073910740107411074210743107441074510746107471074810749107501075110752107531075410755107561075710758107591076010761107621076310764107651076610767107681076910770107711077210773107741077510776107771077810779107801078110782107831078410785107861078710788107891079010791107921079310794107951079610797107981079910800108011080210803108041080510806108071080810809108101081110812108131081410815108161081710818108191082010821108221082310824108251082610827108281082910830108311083210833108341083510836108371083810839108401084110842108431084410845108461084710848108491085010851108521085310854108551085610857108581085910860108611086210863108641086510866108671086810869108701087110872108731087410875108761087710878108791088010881108821088310884108851088610887108881088910890108911089210893108941089510896108971089810899109001090110902109031090410905109061090710908109091091010911109121091310914109151091610917109181091910920109211092210923109241092510926109271092810929109301093110932109331093410935109361093710938109391094010941109421094310944109451094610947109481094910950109511095210953109541095510956109571095810959109601096110962109631096410965109661096710968109691097010971109721097310974109751097610977109781097910980109811098210983109841098510986109871098810989109901099110992109931099410995109961099710998109991100011001110021100311004110051100611007110081100911010110111101211013110141101511016110171101811019110201102111022110231102411025110261102711028110291103011031110321103311034110351103611037110381103911040110411104211043110441104511046110471104811049110501105111052110531105411055110561105711058110591106011061110621106311064110651106611067110681106911070110711107211073110741107511076110771107811079110801108111082110831108411085110861108711088110891109011091110921109311094110951109611097110981109911100111011110211103111041110511106111071110811109111101111111112111131111411115111161111711118111191112011121111221112311124111251112611127111281112911130111311113211133111341113511136111371113811139111401114111142111431114411145111461114711148111491115011151111521115311154111551115611157111581115911160111611116211163111641116511166111671116811169111701117111172111731117411175111761117711178111791118011181111821118311184111851118611187111881118911190111911119211193111941119511196111971119811199112001120111202112031120411205112061120711208112091121011211112121121311214112151121611217112181121911220112211122211223112241122511226112271122811229112301123111232112331123411235112361123711238112391124011241112421124311244112451124611247112481124911250112511125211253112541125511256112571125811259112601126111262112631126411265112661126711268112691127011271112721127311274112751127611277112781127911280112811128211283112841128511286112871128811289112901129111292112931129411295112961129711298112991130011301113021130311304113051130611307113081130911310113111131211313113141131511316113171131811319113201132111322113231132411325113261132711328113291133011331113321133311334113351133611337113381133911340113411134211343113441134511346113471134811349113501135111352113531135411355113561135711358113591136011361113621136311364113651136611367113681136911370113711137211373113741137511376113771137811379113801138111382113831138411385113861138711388113891139011391113921139311394113951139611397113981139911400114011140211403114041140511406114071140811409114101141111412114131141411415114161141711418114191142011421114221142311424114251142611427114281142911430114311143211433114341143511436114371143811439114401144111442114431144411445114461144711448114491145011451114521145311454114551145611457114581145911460114611146211463114641146511466114671146811469114701147111472114731147411475114761147711478114791148011481114821148311484114851148611487114881148911490114911149211493114941149511496114971149811499115001150111502115031150411505115061150711508115091151011511115121151311514115151151611517115181151911520115211152211523115241152511526115271152811529115301153111532115331153411535115361153711538115391154011541115421154311544115451154611547115481154911550115511155211553115541155511556115571155811559115601156111562115631156411565115661156711568115691157011571115721157311574115751157611577115781157911580115811158211583115841158511586115871158811589115901159111592115931159411595115961159711598115991160011601116021160311604116051160611607116081160911610116111161211613116141161511616116171161811619116201162111622116231162411625116261162711628116291163011631116321163311634116351163611637116381163911640116411164211643116441164511646116471164811649116501165111652116531165411655116561165711658116591166011661116621166311664116651166611667116681166911670116711167211673116741167511676116771167811679116801168111682116831168411685116861168711688116891169011691116921169311694116951169611697116981169911700117011170211703117041170511706117071170811709117101171111712117131171411715117161171711718117191172011721117221172311724117251172611727117281172911730117311173211733117341173511736117371173811739117401174111742117431174411745117461174711748117491175011751117521175311754117551175611757117581175911760117611176211763117641176511766117671176811769117701177111772117731177411775117761177711778117791178011781117821178311784117851178611787117881178911790117911179211793117941179511796117971179811799118001180111802118031180411805118061180711808118091181011811118121181311814118151181611817118181181911820118211182211823118241182511826118271182811829118301183111832118331183411835118361183711838118391184011841118421184311844118451184611847118481184911850118511185211853118541185511856118571185811859118601186111862118631186411865118661186711868118691187011871118721187311874118751187611877118781187911880118811188211883118841188511886118871188811889118901189111892118931189411895118961189711898118991190011901119021190311904119051190611907119081190911910119111191211913119141191511916119171191811919119201192111922119231192411925119261192711928119291193011931119321193311934119351193611937119381193911940119411194211943119441194511946119471194811949119501195111952119531195411955119561195711958119591196011961119621196311964119651196611967119681196911970119711197211973119741197511976119771197811979119801198111982119831198411985119861198711988119891199011991119921199311994119951199611997119981199912000120011200212003120041200512006120071200812009120101201112012120131201412015120161201712018120191202012021120221202312024120251202612027120281202912030120311203212033120341203512036120371203812039120401204112042120431204412045120461204712048120491205012051120521205312054120551205612057120581205912060120611206212063120641206512066120671206812069120701207112072120731207412075120761207712078120791208012081120821208312084120851208612087120881208912090120911209212093120941209512096120971209812099121001210112102121031210412105121061210712108121091211012111121121211312114121151211612117121181211912120121211212212123121241212512126121271212812129121301213112132121331213412135121361213712138121391214012141121421214312144121451214612147121481214912150121511215212153121541215512156121571215812159121601216112162121631216412165121661216712168121691217012171121721217312174121751217612177121781217912180121811218212183121841218512186121871218812189121901219112192121931219412195121961219712198121991220012201122021220312204122051220612207122081220912210122111221212213122141221512216122171221812219122201222112222122231222412225122261222712228122291223012231122321223312234122351223612237122381223912240122411224212243122441224512246122471224812249122501225112252122531225412255122561225712258122591226012261122621226312264122651226612267122681226912270122711227212273122741227512276122771227812279122801228112282122831228412285122861228712288122891229012291122921229312294122951229612297122981229912300123011230212303123041230512306123071230812309123101231112312123131231412315123161231712318123191232012321123221232312324123251232612327123281232912330123311233212333123341233512336123371233812339123401234112342123431234412345123461234712348123491235012351123521235312354123551235612357123581235912360123611236212363123641236512366123671236812369123701237112372123731237412375123761237712378123791238012381123821238312384123851238612387123881238912390123911239212393123941239512396123971239812399124001240112402124031240412405124061240712408124091241012411124121241312414124151241612417124181241912420124211242212423124241242512426124271242812429124301243112432124331243412435124361243712438124391244012441124421244312444124451244612447124481244912450124511245212453124541245512456124571245812459124601246112462124631246412465124661246712468124691247012471124721247312474124751247612477124781247912480124811248212483124841248512486124871248812489124901249112492124931249412495124961249712498124991250012501125021250312504125051250612507125081250912510125111251212513125141251512516125171251812519125201252112522125231252412525125261252712528125291253012531125321253312534125351253612537125381253912540125411254212543125441254512546125471254812549125501255112552125531255412555125561255712558125591256012561125621256312564125651256612567125681256912570125711257212573125741257512576125771257812579125801258112582125831258412585125861258712588125891259012591125921259312594125951259612597125981259912600126011260212603126041260512606126071260812609126101261112612126131261412615126161261712618126191262012621126221262312624126251262612627126281262912630126311263212633126341263512636126371263812639126401264112642126431264412645126461264712648126491265012651126521265312654126551265612657126581265912660126611266212663126641266512666126671266812669126701267112672126731267412675126761267712678126791268012681126821268312684126851268612687126881268912690126911269212693126941269512696126971269812699127001270112702127031270412705127061270712708127091271012711127121271312714127151271612717127181271912720127211272212723127241272512726127271272812729127301273112732127331273412735127361273712738127391274012741127421274312744127451274612747127481274912750127511275212753127541275512756127571275812759127601276112762127631276412765127661276712768127691277012771127721277312774127751277612777127781277912780127811278212783127841278512786127871278812789127901279112792127931279412795127961279712798127991280012801128021280312804128051280612807128081280912810128111281212813128141281512816128171281812819128201282112822128231282412825128261282712828128291283012831128321283312834128351283612837128381283912840128411284212843128441284512846128471284812849128501285112852128531285412855128561285712858128591286012861128621286312864128651286612867128681286912870128711287212873128741287512876128771287812879128801288112882
  1. /*
  2. * This is the new netlink-based wireless configuration interface.
  3. *
  4. * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
  5. * Copyright 2013-2014 Intel Mobile Communications GmbH
  6. */
  7. #include <linux/if.h>
  8. #include <linux/module.h>
  9. #include <linux/err.h>
  10. #include <linux/slab.h>
  11. #include <linux/list.h>
  12. #include <linux/if_ether.h>
  13. #include <linux/ieee80211.h>
  14. #include <linux/nl80211.h>
  15. #include <linux/rtnetlink.h>
  16. #include <linux/netlink.h>
  17. #include <linux/etherdevice.h>
  18. #include <net/net_namespace.h>
  19. #include <net/genetlink.h>
  20. #include <net/cfg80211.h>
  21. #include <net/sock.h>
  22. #include <net/inet_connection_sock.h>
  23. #include "core.h"
  24. #include "nl80211.h"
  25. #include "reg.h"
  26. #include "rdev-ops.h"
  27. static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
  28. struct genl_info *info,
  29. struct cfg80211_crypto_settings *settings,
  30. int cipher_limit);
  31. static int nl80211_pre_doit(const struct genl_ops *ops, struct sk_buff *skb,
  32. struct genl_info *info);
  33. static void nl80211_post_doit(const struct genl_ops *ops, struct sk_buff *skb,
  34. struct genl_info *info);
  35. /* the netlink family */
  36. static struct genl_family nl80211_fam = {
  37. .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
  38. .name = NL80211_GENL_NAME, /* have users key off the name instead */
  39. .hdrsize = 0, /* no private header */
  40. .version = 1, /* no particular meaning now */
  41. .maxattr = NL80211_ATTR_MAX,
  42. .netnsok = true,
  43. .pre_doit = nl80211_pre_doit,
  44. .post_doit = nl80211_post_doit,
  45. };
  46. /* multicast groups */
  47. enum nl80211_multicast_groups {
  48. NL80211_MCGRP_CONFIG,
  49. NL80211_MCGRP_SCAN,
  50. NL80211_MCGRP_REGULATORY,
  51. NL80211_MCGRP_MLME,
  52. NL80211_MCGRP_VENDOR,
  53. NL80211_MCGRP_TESTMODE /* keep last - ifdef! */
  54. };
  55. static const struct genl_multicast_group nl80211_mcgrps[] = {
  56. [NL80211_MCGRP_CONFIG] = { .name = NL80211_MULTICAST_GROUP_CONFIG },
  57. [NL80211_MCGRP_SCAN] = { .name = NL80211_MULTICAST_GROUP_SCAN },
  58. [NL80211_MCGRP_REGULATORY] = { .name = NL80211_MULTICAST_GROUP_REG },
  59. [NL80211_MCGRP_MLME] = { .name = NL80211_MULTICAST_GROUP_MLME },
  60. [NL80211_MCGRP_VENDOR] = { .name = NL80211_MULTICAST_GROUP_VENDOR },
  61. #ifdef CONFIG_NL80211_TESTMODE
  62. [NL80211_MCGRP_TESTMODE] = { .name = NL80211_MULTICAST_GROUP_TESTMODE }
  63. #endif
  64. };
  65. /* returns ERR_PTR values */
  66. static struct wireless_dev *
  67. __cfg80211_wdev_from_attrs(struct net *netns, struct nlattr **attrs)
  68. {
  69. struct cfg80211_registered_device *rdev;
  70. struct wireless_dev *result = NULL;
  71. bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
  72. bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
  73. u64 wdev_id;
  74. int wiphy_idx = -1;
  75. int ifidx = -1;
  76. ASSERT_RTNL();
  77. if (!have_ifidx && !have_wdev_id)
  78. return ERR_PTR(-EINVAL);
  79. if (have_ifidx)
  80. ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
  81. if (have_wdev_id) {
  82. wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
  83. wiphy_idx = wdev_id >> 32;
  84. }
  85. list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
  86. struct wireless_dev *wdev;
  87. if (wiphy_net(&rdev->wiphy) != netns)
  88. continue;
  89. if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
  90. continue;
  91. list_for_each_entry(wdev, &rdev->wdev_list, list) {
  92. if (have_ifidx && wdev->netdev &&
  93. wdev->netdev->ifindex == ifidx) {
  94. result = wdev;
  95. break;
  96. }
  97. if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
  98. result = wdev;
  99. break;
  100. }
  101. }
  102. if (result)
  103. break;
  104. }
  105. if (result)
  106. return result;
  107. return ERR_PTR(-ENODEV);
  108. }
  109. static struct cfg80211_registered_device *
  110. __cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
  111. {
  112. struct cfg80211_registered_device *rdev = NULL, *tmp;
  113. struct net_device *netdev;
  114. ASSERT_RTNL();
  115. if (!attrs[NL80211_ATTR_WIPHY] &&
  116. !attrs[NL80211_ATTR_IFINDEX] &&
  117. !attrs[NL80211_ATTR_WDEV])
  118. return ERR_PTR(-EINVAL);
  119. if (attrs[NL80211_ATTR_WIPHY])
  120. rdev = cfg80211_rdev_by_wiphy_idx(
  121. nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
  122. if (attrs[NL80211_ATTR_WDEV]) {
  123. u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
  124. struct wireless_dev *wdev;
  125. bool found = false;
  126. tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
  127. if (tmp) {
  128. /* make sure wdev exists */
  129. list_for_each_entry(wdev, &tmp->wdev_list, list) {
  130. if (wdev->identifier != (u32)wdev_id)
  131. continue;
  132. found = true;
  133. break;
  134. }
  135. if (!found)
  136. tmp = NULL;
  137. if (rdev && tmp != rdev)
  138. return ERR_PTR(-EINVAL);
  139. rdev = tmp;
  140. }
  141. }
  142. if (attrs[NL80211_ATTR_IFINDEX]) {
  143. int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
  144. netdev = __dev_get_by_index(netns, ifindex);
  145. if (netdev) {
  146. if (netdev->ieee80211_ptr)
  147. tmp = wiphy_to_rdev(
  148. netdev->ieee80211_ptr->wiphy);
  149. else
  150. tmp = NULL;
  151. /* not wireless device -- return error */
  152. if (!tmp)
  153. return ERR_PTR(-EINVAL);
  154. /* mismatch -- return error */
  155. if (rdev && tmp != rdev)
  156. return ERR_PTR(-EINVAL);
  157. rdev = tmp;
  158. }
  159. }
  160. if (!rdev)
  161. return ERR_PTR(-ENODEV);
  162. if (netns != wiphy_net(&rdev->wiphy))
  163. return ERR_PTR(-ENODEV);
  164. return rdev;
  165. }
  166. /*
  167. * This function returns a pointer to the driver
  168. * that the genl_info item that is passed refers to.
  169. *
  170. * The result of this can be a PTR_ERR and hence must
  171. * be checked with IS_ERR() for errors.
  172. */
  173. static struct cfg80211_registered_device *
  174. cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
  175. {
  176. return __cfg80211_rdev_from_attrs(netns, info->attrs);
  177. }
  178. /* policy for the attributes */
  179. static const struct nla_policy nl80211_policy[NUM_NL80211_ATTR] = {
  180. [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
  181. [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
  182. .len = 20-1 },
  183. [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
  184. [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
  185. [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
  186. [NL80211_ATTR_CHANNEL_WIDTH] = { .type = NLA_U32 },
  187. [NL80211_ATTR_CENTER_FREQ1] = { .type = NLA_U32 },
  188. [NL80211_ATTR_CENTER_FREQ2] = { .type = NLA_U32 },
  189. [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
  190. [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
  191. [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
  192. [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
  193. [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
  194. [NL80211_ATTR_WIPHY_DYN_ACK] = { .type = NLA_FLAG },
  195. [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
  196. [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
  197. [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
  198. [NL80211_ATTR_MAC] = { .len = ETH_ALEN },
  199. [NL80211_ATTR_PREV_BSSID] = { .len = ETH_ALEN },
  200. [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
  201. [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
  202. .len = WLAN_MAX_KEY_LEN },
  203. [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
  204. [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
  205. [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
  206. [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
  207. [NL80211_ATTR_KEY_TYPE] = { .type = NLA_U32 },
  208. [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
  209. [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
  210. [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
  211. .len = IEEE80211_MAX_DATA_LEN },
  212. [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
  213. .len = IEEE80211_MAX_DATA_LEN },
  214. [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
  215. [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
  216. [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
  217. [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
  218. .len = NL80211_MAX_SUPP_RATES },
  219. [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
  220. [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
  221. [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
  222. [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
  223. .len = IEEE80211_MAX_MESH_ID_LEN },
  224. [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
  225. [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
  226. [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
  227. [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
  228. [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
  229. [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
  230. [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
  231. .len = NL80211_MAX_SUPP_RATES },
  232. [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
  233. [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
  234. [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
  235. [NL80211_ATTR_HT_CAPABILITY] = { .len = NL80211_HT_CAPABILITY_LEN },
  236. [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
  237. [NL80211_ATTR_IE] = { .type = NLA_BINARY,
  238. .len = IEEE80211_MAX_DATA_LEN },
  239. [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
  240. [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
  241. [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
  242. .len = IEEE80211_MAX_SSID_LEN },
  243. [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
  244. [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
  245. [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
  246. [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
  247. [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
  248. [NL80211_ATTR_STA_FLAGS2] = {
  249. .len = sizeof(struct nl80211_sta_flag_update),
  250. },
  251. [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
  252. [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
  253. [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
  254. [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
  255. [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
  256. [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
  257. [NL80211_ATTR_PID] = { .type = NLA_U32 },
  258. [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
  259. [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
  260. .len = WLAN_PMKID_LEN },
  261. [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
  262. [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
  263. [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
  264. [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
  265. .len = IEEE80211_MAX_DATA_LEN },
  266. [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
  267. [NL80211_ATTR_PS_STATE] = { .type = NLA_U32 },
  268. [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
  269. [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
  270. [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
  271. [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
  272. [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
  273. [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
  274. [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
  275. [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
  276. [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
  277. [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
  278. [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
  279. [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
  280. [NL80211_ATTR_STA_PLINK_STATE] = { .type = NLA_U8 },
  281. [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
  282. [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
  283. [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
  284. [NL80211_ATTR_HIDDEN_SSID] = { .type = NLA_U32 },
  285. [NL80211_ATTR_IE_PROBE_RESP] = { .type = NLA_BINARY,
  286. .len = IEEE80211_MAX_DATA_LEN },
  287. [NL80211_ATTR_IE_ASSOC_RESP] = { .type = NLA_BINARY,
  288. .len = IEEE80211_MAX_DATA_LEN },
  289. [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
  290. [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
  291. [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
  292. [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
  293. [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
  294. [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
  295. [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
  296. [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
  297. [NL80211_ATTR_TDLS_INITIATOR] = { .type = NLA_FLAG },
  298. [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
  299. [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
  300. .len = IEEE80211_MAX_DATA_LEN },
  301. [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
  302. [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
  303. [NL80211_ATTR_HT_CAPABILITY_MASK] = {
  304. .len = NL80211_HT_CAPABILITY_LEN
  305. },
  306. [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
  307. [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
  308. [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
  309. [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
  310. [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
  311. [NL80211_ATTR_SAE_DATA] = { .type = NLA_BINARY, },
  312. [NL80211_ATTR_VHT_CAPABILITY] = { .len = NL80211_VHT_CAPABILITY_LEN },
  313. [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
  314. [NL80211_ATTR_P2P_CTWINDOW] = { .type = NLA_U8 },
  315. [NL80211_ATTR_P2P_OPPPS] = { .type = NLA_U8 },
  316. [NL80211_ATTR_ACL_POLICY] = {. type = NLA_U32 },
  317. [NL80211_ATTR_MAC_ADDRS] = { .type = NLA_NESTED },
  318. [NL80211_ATTR_STA_CAPABILITY] = { .type = NLA_U16 },
  319. [NL80211_ATTR_STA_EXT_CAPABILITY] = { .type = NLA_BINARY, },
  320. [NL80211_ATTR_SPLIT_WIPHY_DUMP] = { .type = NLA_FLAG, },
  321. [NL80211_ATTR_DISABLE_VHT] = { .type = NLA_FLAG },
  322. [NL80211_ATTR_VHT_CAPABILITY_MASK] = {
  323. .len = NL80211_VHT_CAPABILITY_LEN,
  324. },
  325. [NL80211_ATTR_MDID] = { .type = NLA_U16 },
  326. [NL80211_ATTR_IE_RIC] = { .type = NLA_BINARY,
  327. .len = IEEE80211_MAX_DATA_LEN },
  328. [NL80211_ATTR_PEER_AID] = { .type = NLA_U16 },
  329. [NL80211_ATTR_CH_SWITCH_COUNT] = { .type = NLA_U32 },
  330. [NL80211_ATTR_CH_SWITCH_BLOCK_TX] = { .type = NLA_FLAG },
  331. [NL80211_ATTR_CSA_IES] = { .type = NLA_NESTED },
  332. [NL80211_ATTR_CSA_C_OFF_BEACON] = { .type = NLA_BINARY },
  333. [NL80211_ATTR_CSA_C_OFF_PRESP] = { .type = NLA_BINARY },
  334. [NL80211_ATTR_STA_SUPPORTED_CHANNELS] = { .type = NLA_BINARY },
  335. [NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES] = { .type = NLA_BINARY },
  336. [NL80211_ATTR_HANDLE_DFS] = { .type = NLA_FLAG },
  337. [NL80211_ATTR_OPMODE_NOTIF] = { .type = NLA_U8 },
  338. [NL80211_ATTR_VENDOR_ID] = { .type = NLA_U32 },
  339. [NL80211_ATTR_VENDOR_SUBCMD] = { .type = NLA_U32 },
  340. [NL80211_ATTR_VENDOR_DATA] = { .type = NLA_BINARY },
  341. [NL80211_ATTR_QOS_MAP] = { .type = NLA_BINARY,
  342. .len = IEEE80211_QOS_MAP_LEN_MAX },
  343. [NL80211_ATTR_MAC_HINT] = { .len = ETH_ALEN },
  344. [NL80211_ATTR_WIPHY_FREQ_HINT] = { .type = NLA_U32 },
  345. [NL80211_ATTR_TDLS_PEER_CAPABILITY] = { .type = NLA_U32 },
  346. [NL80211_ATTR_SOCKET_OWNER] = { .type = NLA_FLAG },
  347. [NL80211_ATTR_CSA_C_OFFSETS_TX] = { .type = NLA_BINARY },
  348. [NL80211_ATTR_USE_RRM] = { .type = NLA_FLAG },
  349. [NL80211_ATTR_TSID] = { .type = NLA_U8 },
  350. [NL80211_ATTR_USER_PRIO] = { .type = NLA_U8 },
  351. [NL80211_ATTR_ADMITTED_TIME] = { .type = NLA_U16 },
  352. [NL80211_ATTR_SMPS_MODE] = { .type = NLA_U8 },
  353. [NL80211_ATTR_MAC_MASK] = { .len = ETH_ALEN },
  354. [NL80211_ATTR_WIPHY_SELF_MANAGED_REG] = { .type = NLA_FLAG },
  355. };
  356. /* policy for the key attributes */
  357. static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
  358. [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
  359. [NL80211_KEY_IDX] = { .type = NLA_U8 },
  360. [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
  361. [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
  362. [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
  363. [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
  364. [NL80211_KEY_TYPE] = { .type = NLA_U32 },
  365. [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
  366. };
  367. /* policy for the key default flags */
  368. static const struct nla_policy
  369. nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
  370. [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
  371. [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
  372. };
  373. /* policy for WoWLAN attributes */
  374. static const struct nla_policy
  375. nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
  376. [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
  377. [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
  378. [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
  379. [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
  380. [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
  381. [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
  382. [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
  383. [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
  384. [NL80211_WOWLAN_TRIG_TCP_CONNECTION] = { .type = NLA_NESTED },
  385. [NL80211_WOWLAN_TRIG_NET_DETECT] = { .type = NLA_NESTED },
  386. };
  387. static const struct nla_policy
  388. nl80211_wowlan_tcp_policy[NUM_NL80211_WOWLAN_TCP] = {
  389. [NL80211_WOWLAN_TCP_SRC_IPV4] = { .type = NLA_U32 },
  390. [NL80211_WOWLAN_TCP_DST_IPV4] = { .type = NLA_U32 },
  391. [NL80211_WOWLAN_TCP_DST_MAC] = { .len = ETH_ALEN },
  392. [NL80211_WOWLAN_TCP_SRC_PORT] = { .type = NLA_U16 },
  393. [NL80211_WOWLAN_TCP_DST_PORT] = { .type = NLA_U16 },
  394. [NL80211_WOWLAN_TCP_DATA_PAYLOAD] = { .len = 1 },
  395. [NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ] = {
  396. .len = sizeof(struct nl80211_wowlan_tcp_data_seq)
  397. },
  398. [NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN] = {
  399. .len = sizeof(struct nl80211_wowlan_tcp_data_token)
  400. },
  401. [NL80211_WOWLAN_TCP_DATA_INTERVAL] = { .type = NLA_U32 },
  402. [NL80211_WOWLAN_TCP_WAKE_PAYLOAD] = { .len = 1 },
  403. [NL80211_WOWLAN_TCP_WAKE_MASK] = { .len = 1 },
  404. };
  405. /* policy for coalesce rule attributes */
  406. static const struct nla_policy
  407. nl80211_coalesce_policy[NUM_NL80211_ATTR_COALESCE_RULE] = {
  408. [NL80211_ATTR_COALESCE_RULE_DELAY] = { .type = NLA_U32 },
  409. [NL80211_ATTR_COALESCE_RULE_CONDITION] = { .type = NLA_U32 },
  410. [NL80211_ATTR_COALESCE_RULE_PKT_PATTERN] = { .type = NLA_NESTED },
  411. };
  412. /* policy for GTK rekey offload attributes */
  413. static const struct nla_policy
  414. nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
  415. [NL80211_REKEY_DATA_KEK] = { .len = NL80211_KEK_LEN },
  416. [NL80211_REKEY_DATA_KCK] = { .len = NL80211_KCK_LEN },
  417. [NL80211_REKEY_DATA_REPLAY_CTR] = { .len = NL80211_REPLAY_CTR_LEN },
  418. };
  419. static const struct nla_policy
  420. nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
  421. [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
  422. .len = IEEE80211_MAX_SSID_LEN },
  423. [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
  424. };
  425. static int nl80211_prepare_wdev_dump(struct sk_buff *skb,
  426. struct netlink_callback *cb,
  427. struct cfg80211_registered_device **rdev,
  428. struct wireless_dev **wdev)
  429. {
  430. int err;
  431. rtnl_lock();
  432. if (!cb->args[0]) {
  433. err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
  434. nl80211_fam.attrbuf, nl80211_fam.maxattr,
  435. nl80211_policy);
  436. if (err)
  437. goto out_unlock;
  438. *wdev = __cfg80211_wdev_from_attrs(sock_net(skb->sk),
  439. nl80211_fam.attrbuf);
  440. if (IS_ERR(*wdev)) {
  441. err = PTR_ERR(*wdev);
  442. goto out_unlock;
  443. }
  444. *rdev = wiphy_to_rdev((*wdev)->wiphy);
  445. /* 0 is the first index - add 1 to parse only once */
  446. cb->args[0] = (*rdev)->wiphy_idx + 1;
  447. cb->args[1] = (*wdev)->identifier;
  448. } else {
  449. /* subtract the 1 again here */
  450. struct wiphy *wiphy = wiphy_idx_to_wiphy(cb->args[0] - 1);
  451. struct wireless_dev *tmp;
  452. if (!wiphy) {
  453. err = -ENODEV;
  454. goto out_unlock;
  455. }
  456. *rdev = wiphy_to_rdev(wiphy);
  457. *wdev = NULL;
  458. list_for_each_entry(tmp, &(*rdev)->wdev_list, list) {
  459. if (tmp->identifier == cb->args[1]) {
  460. *wdev = tmp;
  461. break;
  462. }
  463. }
  464. if (!*wdev) {
  465. err = -ENODEV;
  466. goto out_unlock;
  467. }
  468. }
  469. return 0;
  470. out_unlock:
  471. rtnl_unlock();
  472. return err;
  473. }
  474. static void nl80211_finish_wdev_dump(struct cfg80211_registered_device *rdev)
  475. {
  476. rtnl_unlock();
  477. }
  478. /* IE validation */
  479. static bool is_valid_ie_attr(const struct nlattr *attr)
  480. {
  481. const u8 *pos;
  482. int len;
  483. if (!attr)
  484. return true;
  485. pos = nla_data(attr);
  486. len = nla_len(attr);
  487. while (len) {
  488. u8 elemlen;
  489. if (len < 2)
  490. return false;
  491. len -= 2;
  492. elemlen = pos[1];
  493. if (elemlen > len)
  494. return false;
  495. len -= elemlen;
  496. pos += 2 + elemlen;
  497. }
  498. return true;
  499. }
  500. /* message building helper */
  501. static inline void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
  502. int flags, u8 cmd)
  503. {
  504. /* since there is no private header just add the generic one */
  505. return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
  506. }
  507. static int nl80211_msg_put_channel(struct sk_buff *msg,
  508. struct ieee80211_channel *chan,
  509. bool large)
  510. {
  511. /* Some channels must be completely excluded from the
  512. * list to protect old user-space tools from breaking
  513. */
  514. if (!large && chan->flags &
  515. (IEEE80211_CHAN_NO_10MHZ | IEEE80211_CHAN_NO_20MHZ))
  516. return 0;
  517. if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
  518. chan->center_freq))
  519. goto nla_put_failure;
  520. if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
  521. nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
  522. goto nla_put_failure;
  523. if (chan->flags & IEEE80211_CHAN_NO_IR) {
  524. if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IR))
  525. goto nla_put_failure;
  526. if (nla_put_flag(msg, __NL80211_FREQUENCY_ATTR_NO_IBSS))
  527. goto nla_put_failure;
  528. }
  529. if (chan->flags & IEEE80211_CHAN_RADAR) {
  530. if (nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
  531. goto nla_put_failure;
  532. if (large) {
  533. u32 time;
  534. time = elapsed_jiffies_msecs(chan->dfs_state_entered);
  535. if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_STATE,
  536. chan->dfs_state))
  537. goto nla_put_failure;
  538. if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_DFS_TIME,
  539. time))
  540. goto nla_put_failure;
  541. if (nla_put_u32(msg,
  542. NL80211_FREQUENCY_ATTR_DFS_CAC_TIME,
  543. chan->dfs_cac_ms))
  544. goto nla_put_failure;
  545. }
  546. }
  547. if (large) {
  548. if ((chan->flags & IEEE80211_CHAN_NO_HT40MINUS) &&
  549. nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_MINUS))
  550. goto nla_put_failure;
  551. if ((chan->flags & IEEE80211_CHAN_NO_HT40PLUS) &&
  552. nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_PLUS))
  553. goto nla_put_failure;
  554. if ((chan->flags & IEEE80211_CHAN_NO_80MHZ) &&
  555. nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_80MHZ))
  556. goto nla_put_failure;
  557. if ((chan->flags & IEEE80211_CHAN_NO_160MHZ) &&
  558. nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_160MHZ))
  559. goto nla_put_failure;
  560. if ((chan->flags & IEEE80211_CHAN_INDOOR_ONLY) &&
  561. nla_put_flag(msg, NL80211_FREQUENCY_ATTR_INDOOR_ONLY))
  562. goto nla_put_failure;
  563. if ((chan->flags & IEEE80211_CHAN_GO_CONCURRENT) &&
  564. nla_put_flag(msg, NL80211_FREQUENCY_ATTR_GO_CONCURRENT))
  565. goto nla_put_failure;
  566. if ((chan->flags & IEEE80211_CHAN_NO_20MHZ) &&
  567. nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_20MHZ))
  568. goto nla_put_failure;
  569. if ((chan->flags & IEEE80211_CHAN_NO_10MHZ) &&
  570. nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_10MHZ))
  571. goto nla_put_failure;
  572. }
  573. if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
  574. DBM_TO_MBM(chan->max_power)))
  575. goto nla_put_failure;
  576. return 0;
  577. nla_put_failure:
  578. return -ENOBUFS;
  579. }
  580. /* netlink command implementations */
  581. struct key_parse {
  582. struct key_params p;
  583. int idx;
  584. int type;
  585. bool def, defmgmt;
  586. bool def_uni, def_multi;
  587. };
  588. static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
  589. {
  590. struct nlattr *tb[NL80211_KEY_MAX + 1];
  591. int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
  592. nl80211_key_policy);
  593. if (err)
  594. return err;
  595. k->def = !!tb[NL80211_KEY_DEFAULT];
  596. k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
  597. if (k->def) {
  598. k->def_uni = true;
  599. k->def_multi = true;
  600. }
  601. if (k->defmgmt)
  602. k->def_multi = true;
  603. if (tb[NL80211_KEY_IDX])
  604. k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
  605. if (tb[NL80211_KEY_DATA]) {
  606. k->p.key = nla_data(tb[NL80211_KEY_DATA]);
  607. k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
  608. }
  609. if (tb[NL80211_KEY_SEQ]) {
  610. k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
  611. k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
  612. }
  613. if (tb[NL80211_KEY_CIPHER])
  614. k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
  615. if (tb[NL80211_KEY_TYPE]) {
  616. k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
  617. if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
  618. return -EINVAL;
  619. }
  620. if (tb[NL80211_KEY_DEFAULT_TYPES]) {
  621. struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
  622. err = nla_parse_nested(kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
  623. tb[NL80211_KEY_DEFAULT_TYPES],
  624. nl80211_key_default_policy);
  625. if (err)
  626. return err;
  627. k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
  628. k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
  629. }
  630. return 0;
  631. }
  632. static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
  633. {
  634. if (info->attrs[NL80211_ATTR_KEY_DATA]) {
  635. k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
  636. k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
  637. }
  638. if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
  639. k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
  640. k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
  641. }
  642. if (info->attrs[NL80211_ATTR_KEY_IDX])
  643. k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
  644. if (info->attrs[NL80211_ATTR_KEY_CIPHER])
  645. k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
  646. k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
  647. k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
  648. if (k->def) {
  649. k->def_uni = true;
  650. k->def_multi = true;
  651. }
  652. if (k->defmgmt)
  653. k->def_multi = true;
  654. if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
  655. k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
  656. if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
  657. return -EINVAL;
  658. }
  659. if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
  660. struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
  661. int err = nla_parse_nested(
  662. kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
  663. info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
  664. nl80211_key_default_policy);
  665. if (err)
  666. return err;
  667. k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
  668. k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
  669. }
  670. return 0;
  671. }
  672. static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
  673. {
  674. int err;
  675. memset(k, 0, sizeof(*k));
  676. k->idx = -1;
  677. k->type = -1;
  678. if (info->attrs[NL80211_ATTR_KEY])
  679. err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
  680. else
  681. err = nl80211_parse_key_old(info, k);
  682. if (err)
  683. return err;
  684. if (k->def && k->defmgmt)
  685. return -EINVAL;
  686. if (k->defmgmt) {
  687. if (k->def_uni || !k->def_multi)
  688. return -EINVAL;
  689. }
  690. if (k->idx != -1) {
  691. if (k->defmgmt) {
  692. if (k->idx < 4 || k->idx > 5)
  693. return -EINVAL;
  694. } else if (k->def) {
  695. if (k->idx < 0 || k->idx > 3)
  696. return -EINVAL;
  697. } else {
  698. if (k->idx < 0 || k->idx > 5)
  699. return -EINVAL;
  700. }
  701. }
  702. return 0;
  703. }
  704. static struct cfg80211_cached_keys *
  705. nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
  706. struct nlattr *keys, bool *no_ht)
  707. {
  708. struct key_parse parse;
  709. struct nlattr *key;
  710. struct cfg80211_cached_keys *result;
  711. int rem, err, def = 0;
  712. result = kzalloc(sizeof(*result), GFP_KERNEL);
  713. if (!result)
  714. return ERR_PTR(-ENOMEM);
  715. result->def = -1;
  716. result->defmgmt = -1;
  717. nla_for_each_nested(key, keys, rem) {
  718. memset(&parse, 0, sizeof(parse));
  719. parse.idx = -1;
  720. err = nl80211_parse_key_new(key, &parse);
  721. if (err)
  722. goto error;
  723. err = -EINVAL;
  724. if (!parse.p.key)
  725. goto error;
  726. if (parse.idx < 0 || parse.idx > 4)
  727. goto error;
  728. if (parse.def) {
  729. if (def)
  730. goto error;
  731. def = 1;
  732. result->def = parse.idx;
  733. if (!parse.def_uni || !parse.def_multi)
  734. goto error;
  735. } else if (parse.defmgmt)
  736. goto error;
  737. err = cfg80211_validate_key_settings(rdev, &parse.p,
  738. parse.idx, false, NULL);
  739. if (err)
  740. goto error;
  741. result->params[parse.idx].cipher = parse.p.cipher;
  742. result->params[parse.idx].key_len = parse.p.key_len;
  743. result->params[parse.idx].key = result->data[parse.idx];
  744. memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
  745. if (parse.p.cipher == WLAN_CIPHER_SUITE_WEP40 ||
  746. parse.p.cipher == WLAN_CIPHER_SUITE_WEP104) {
  747. if (no_ht)
  748. *no_ht = true;
  749. }
  750. }
  751. return result;
  752. error:
  753. kfree(result);
  754. return ERR_PTR(err);
  755. }
  756. static int nl80211_key_allowed(struct wireless_dev *wdev)
  757. {
  758. ASSERT_WDEV_LOCK(wdev);
  759. switch (wdev->iftype) {
  760. case NL80211_IFTYPE_AP:
  761. case NL80211_IFTYPE_AP_VLAN:
  762. case NL80211_IFTYPE_P2P_GO:
  763. case NL80211_IFTYPE_MESH_POINT:
  764. break;
  765. case NL80211_IFTYPE_ADHOC:
  766. case NL80211_IFTYPE_STATION:
  767. case NL80211_IFTYPE_P2P_CLIENT:
  768. if (!wdev->current_bss)
  769. return -ENOLINK;
  770. break;
  771. case NL80211_IFTYPE_UNSPECIFIED:
  772. case NL80211_IFTYPE_OCB:
  773. case NL80211_IFTYPE_MONITOR:
  774. case NL80211_IFTYPE_P2P_DEVICE:
  775. case NL80211_IFTYPE_WDS:
  776. case NUM_NL80211_IFTYPES:
  777. return -EINVAL;
  778. }
  779. return 0;
  780. }
  781. static struct ieee80211_channel *nl80211_get_valid_chan(struct wiphy *wiphy,
  782. struct nlattr *tb)
  783. {
  784. struct ieee80211_channel *chan;
  785. if (tb == NULL)
  786. return NULL;
  787. chan = ieee80211_get_channel(wiphy, nla_get_u32(tb));
  788. if (!chan || chan->flags & IEEE80211_CHAN_DISABLED)
  789. return NULL;
  790. return chan;
  791. }
  792. static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
  793. {
  794. struct nlattr *nl_modes = nla_nest_start(msg, attr);
  795. int i;
  796. if (!nl_modes)
  797. goto nla_put_failure;
  798. i = 0;
  799. while (ifmodes) {
  800. if ((ifmodes & 1) && nla_put_flag(msg, i))
  801. goto nla_put_failure;
  802. ifmodes >>= 1;
  803. i++;
  804. }
  805. nla_nest_end(msg, nl_modes);
  806. return 0;
  807. nla_put_failure:
  808. return -ENOBUFS;
  809. }
  810. static int nl80211_put_iface_combinations(struct wiphy *wiphy,
  811. struct sk_buff *msg,
  812. bool large)
  813. {
  814. struct nlattr *nl_combis;
  815. int i, j;
  816. nl_combis = nla_nest_start(msg,
  817. NL80211_ATTR_INTERFACE_COMBINATIONS);
  818. if (!nl_combis)
  819. goto nla_put_failure;
  820. for (i = 0; i < wiphy->n_iface_combinations; i++) {
  821. const struct ieee80211_iface_combination *c;
  822. struct nlattr *nl_combi, *nl_limits;
  823. c = &wiphy->iface_combinations[i];
  824. nl_combi = nla_nest_start(msg, i + 1);
  825. if (!nl_combi)
  826. goto nla_put_failure;
  827. nl_limits = nla_nest_start(msg, NL80211_IFACE_COMB_LIMITS);
  828. if (!nl_limits)
  829. goto nla_put_failure;
  830. for (j = 0; j < c->n_limits; j++) {
  831. struct nlattr *nl_limit;
  832. nl_limit = nla_nest_start(msg, j + 1);
  833. if (!nl_limit)
  834. goto nla_put_failure;
  835. if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
  836. c->limits[j].max))
  837. goto nla_put_failure;
  838. if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
  839. c->limits[j].types))
  840. goto nla_put_failure;
  841. nla_nest_end(msg, nl_limit);
  842. }
  843. nla_nest_end(msg, nl_limits);
  844. if (c->beacon_int_infra_match &&
  845. nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
  846. goto nla_put_failure;
  847. if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
  848. c->num_different_channels) ||
  849. nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
  850. c->max_interfaces))
  851. goto nla_put_failure;
  852. if (large &&
  853. (nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_WIDTHS,
  854. c->radar_detect_widths) ||
  855. nla_put_u32(msg, NL80211_IFACE_COMB_RADAR_DETECT_REGIONS,
  856. c->radar_detect_regions)))
  857. goto nla_put_failure;
  858. nla_nest_end(msg, nl_combi);
  859. }
  860. nla_nest_end(msg, nl_combis);
  861. return 0;
  862. nla_put_failure:
  863. return -ENOBUFS;
  864. }
  865. #ifdef CONFIG_PM
  866. static int nl80211_send_wowlan_tcp_caps(struct cfg80211_registered_device *rdev,
  867. struct sk_buff *msg)
  868. {
  869. const struct wiphy_wowlan_tcp_support *tcp = rdev->wiphy.wowlan->tcp;
  870. struct nlattr *nl_tcp;
  871. if (!tcp)
  872. return 0;
  873. nl_tcp = nla_nest_start(msg, NL80211_WOWLAN_TRIG_TCP_CONNECTION);
  874. if (!nl_tcp)
  875. return -ENOBUFS;
  876. if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
  877. tcp->data_payload_max))
  878. return -ENOBUFS;
  879. if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
  880. tcp->data_payload_max))
  881. return -ENOBUFS;
  882. if (tcp->seq && nla_put_flag(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ))
  883. return -ENOBUFS;
  884. if (tcp->tok && nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
  885. sizeof(*tcp->tok), tcp->tok))
  886. return -ENOBUFS;
  887. if (nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
  888. tcp->data_interval_max))
  889. return -ENOBUFS;
  890. if (nla_put_u32(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
  891. tcp->wake_payload_max))
  892. return -ENOBUFS;
  893. nla_nest_end(msg, nl_tcp);
  894. return 0;
  895. }
  896. static int nl80211_send_wowlan(struct sk_buff *msg,
  897. struct cfg80211_registered_device *rdev,
  898. bool large)
  899. {
  900. struct nlattr *nl_wowlan;
  901. if (!rdev->wiphy.wowlan)
  902. return 0;
  903. nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
  904. if (!nl_wowlan)
  905. return -ENOBUFS;
  906. if (((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_ANY) &&
  907. nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
  908. ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_DISCONNECT) &&
  909. nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
  910. ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT) &&
  911. nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
  912. ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
  913. nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
  914. ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
  915. nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
  916. ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
  917. nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
  918. ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
  919. nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
  920. ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
  921. nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
  922. return -ENOBUFS;
  923. if (rdev->wiphy.wowlan->n_patterns) {
  924. struct nl80211_pattern_support pat = {
  925. .max_patterns = rdev->wiphy.wowlan->n_patterns,
  926. .min_pattern_len = rdev->wiphy.wowlan->pattern_min_len,
  927. .max_pattern_len = rdev->wiphy.wowlan->pattern_max_len,
  928. .max_pkt_offset = rdev->wiphy.wowlan->max_pkt_offset,
  929. };
  930. if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
  931. sizeof(pat), &pat))
  932. return -ENOBUFS;
  933. }
  934. if ((rdev->wiphy.wowlan->flags & WIPHY_WOWLAN_NET_DETECT) &&
  935. nla_put_u32(msg, NL80211_WOWLAN_TRIG_NET_DETECT,
  936. rdev->wiphy.wowlan->max_nd_match_sets))
  937. return -ENOBUFS;
  938. if (large && nl80211_send_wowlan_tcp_caps(rdev, msg))
  939. return -ENOBUFS;
  940. /* TODO: send wowlan net detect */
  941. nla_nest_end(msg, nl_wowlan);
  942. return 0;
  943. }
  944. #endif
  945. static int nl80211_send_coalesce(struct sk_buff *msg,
  946. struct cfg80211_registered_device *rdev)
  947. {
  948. struct nl80211_coalesce_rule_support rule;
  949. if (!rdev->wiphy.coalesce)
  950. return 0;
  951. rule.max_rules = rdev->wiphy.coalesce->n_rules;
  952. rule.max_delay = rdev->wiphy.coalesce->max_delay;
  953. rule.pat.max_patterns = rdev->wiphy.coalesce->n_patterns;
  954. rule.pat.min_pattern_len = rdev->wiphy.coalesce->pattern_min_len;
  955. rule.pat.max_pattern_len = rdev->wiphy.coalesce->pattern_max_len;
  956. rule.pat.max_pkt_offset = rdev->wiphy.coalesce->max_pkt_offset;
  957. if (nla_put(msg, NL80211_ATTR_COALESCE_RULE, sizeof(rule), &rule))
  958. return -ENOBUFS;
  959. return 0;
  960. }
  961. static int nl80211_send_band_rateinfo(struct sk_buff *msg,
  962. struct ieee80211_supported_band *sband)
  963. {
  964. struct nlattr *nl_rates, *nl_rate;
  965. struct ieee80211_rate *rate;
  966. int i;
  967. /* add HT info */
  968. if (sband->ht_cap.ht_supported &&
  969. (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
  970. sizeof(sband->ht_cap.mcs),
  971. &sband->ht_cap.mcs) ||
  972. nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
  973. sband->ht_cap.cap) ||
  974. nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
  975. sband->ht_cap.ampdu_factor) ||
  976. nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
  977. sband->ht_cap.ampdu_density)))
  978. return -ENOBUFS;
  979. /* add VHT info */
  980. if (sband->vht_cap.vht_supported &&
  981. (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
  982. sizeof(sband->vht_cap.vht_mcs),
  983. &sband->vht_cap.vht_mcs) ||
  984. nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
  985. sband->vht_cap.cap)))
  986. return -ENOBUFS;
  987. /* add bitrates */
  988. nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
  989. if (!nl_rates)
  990. return -ENOBUFS;
  991. for (i = 0; i < sband->n_bitrates; i++) {
  992. nl_rate = nla_nest_start(msg, i);
  993. if (!nl_rate)
  994. return -ENOBUFS;
  995. rate = &sband->bitrates[i];
  996. if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
  997. rate->bitrate))
  998. return -ENOBUFS;
  999. if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
  1000. nla_put_flag(msg,
  1001. NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
  1002. return -ENOBUFS;
  1003. nla_nest_end(msg, nl_rate);
  1004. }
  1005. nla_nest_end(msg, nl_rates);
  1006. return 0;
  1007. }
  1008. static int
  1009. nl80211_send_mgmt_stypes(struct sk_buff *msg,
  1010. const struct ieee80211_txrx_stypes *mgmt_stypes)
  1011. {
  1012. u16 stypes;
  1013. struct nlattr *nl_ftypes, *nl_ifs;
  1014. enum nl80211_iftype ift;
  1015. int i;
  1016. if (!mgmt_stypes)
  1017. return 0;
  1018. nl_ifs = nla_nest_start(msg, NL80211_ATTR_TX_FRAME_TYPES);
  1019. if (!nl_ifs)
  1020. return -ENOBUFS;
  1021. for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
  1022. nl_ftypes = nla_nest_start(msg, ift);
  1023. if (!nl_ftypes)
  1024. return -ENOBUFS;
  1025. i = 0;
  1026. stypes = mgmt_stypes[ift].tx;
  1027. while (stypes) {
  1028. if ((stypes & 1) &&
  1029. nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
  1030. (i << 4) | IEEE80211_FTYPE_MGMT))
  1031. return -ENOBUFS;
  1032. stypes >>= 1;
  1033. i++;
  1034. }
  1035. nla_nest_end(msg, nl_ftypes);
  1036. }
  1037. nla_nest_end(msg, nl_ifs);
  1038. nl_ifs = nla_nest_start(msg, NL80211_ATTR_RX_FRAME_TYPES);
  1039. if (!nl_ifs)
  1040. return -ENOBUFS;
  1041. for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
  1042. nl_ftypes = nla_nest_start(msg, ift);
  1043. if (!nl_ftypes)
  1044. return -ENOBUFS;
  1045. i = 0;
  1046. stypes = mgmt_stypes[ift].rx;
  1047. while (stypes) {
  1048. if ((stypes & 1) &&
  1049. nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
  1050. (i << 4) | IEEE80211_FTYPE_MGMT))
  1051. return -ENOBUFS;
  1052. stypes >>= 1;
  1053. i++;
  1054. }
  1055. nla_nest_end(msg, nl_ftypes);
  1056. }
  1057. nla_nest_end(msg, nl_ifs);
  1058. return 0;
  1059. }
  1060. struct nl80211_dump_wiphy_state {
  1061. s64 filter_wiphy;
  1062. long start;
  1063. long split_start, band_start, chan_start;
  1064. bool split;
  1065. };
  1066. static int nl80211_send_wiphy(struct cfg80211_registered_device *rdev,
  1067. enum nl80211_commands cmd,
  1068. struct sk_buff *msg, u32 portid, u32 seq,
  1069. int flags, struct nl80211_dump_wiphy_state *state)
  1070. {
  1071. void *hdr;
  1072. struct nlattr *nl_bands, *nl_band;
  1073. struct nlattr *nl_freqs, *nl_freq;
  1074. struct nlattr *nl_cmds;
  1075. enum ieee80211_band band;
  1076. struct ieee80211_channel *chan;
  1077. int i;
  1078. const struct ieee80211_txrx_stypes *mgmt_stypes =
  1079. rdev->wiphy.mgmt_stypes;
  1080. u32 features;
  1081. hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
  1082. if (!hdr)
  1083. return -ENOBUFS;
  1084. if (WARN_ON(!state))
  1085. return -EINVAL;
  1086. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  1087. nla_put_string(msg, NL80211_ATTR_WIPHY_NAME,
  1088. wiphy_name(&rdev->wiphy)) ||
  1089. nla_put_u32(msg, NL80211_ATTR_GENERATION,
  1090. cfg80211_rdev_list_generation))
  1091. goto nla_put_failure;
  1092. if (cmd != NL80211_CMD_NEW_WIPHY)
  1093. goto finish;
  1094. switch (state->split_start) {
  1095. case 0:
  1096. if (nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
  1097. rdev->wiphy.retry_short) ||
  1098. nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
  1099. rdev->wiphy.retry_long) ||
  1100. nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
  1101. rdev->wiphy.frag_threshold) ||
  1102. nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
  1103. rdev->wiphy.rts_threshold) ||
  1104. nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
  1105. rdev->wiphy.coverage_class) ||
  1106. nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
  1107. rdev->wiphy.max_scan_ssids) ||
  1108. nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
  1109. rdev->wiphy.max_sched_scan_ssids) ||
  1110. nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
  1111. rdev->wiphy.max_scan_ie_len) ||
  1112. nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
  1113. rdev->wiphy.max_sched_scan_ie_len) ||
  1114. nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
  1115. rdev->wiphy.max_match_sets))
  1116. goto nla_put_failure;
  1117. if ((rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
  1118. nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
  1119. goto nla_put_failure;
  1120. if ((rdev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
  1121. nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
  1122. goto nla_put_failure;
  1123. if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
  1124. nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
  1125. goto nla_put_failure;
  1126. if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
  1127. nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
  1128. goto nla_put_failure;
  1129. if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
  1130. nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
  1131. goto nla_put_failure;
  1132. if ((rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
  1133. nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
  1134. goto nla_put_failure;
  1135. state->split_start++;
  1136. if (state->split)
  1137. break;
  1138. case 1:
  1139. if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
  1140. sizeof(u32) * rdev->wiphy.n_cipher_suites,
  1141. rdev->wiphy.cipher_suites))
  1142. goto nla_put_failure;
  1143. if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
  1144. rdev->wiphy.max_num_pmkids))
  1145. goto nla_put_failure;
  1146. if ((rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
  1147. nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
  1148. goto nla_put_failure;
  1149. if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
  1150. rdev->wiphy.available_antennas_tx) ||
  1151. nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
  1152. rdev->wiphy.available_antennas_rx))
  1153. goto nla_put_failure;
  1154. if ((rdev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
  1155. nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
  1156. rdev->wiphy.probe_resp_offload))
  1157. goto nla_put_failure;
  1158. if ((rdev->wiphy.available_antennas_tx ||
  1159. rdev->wiphy.available_antennas_rx) &&
  1160. rdev->ops->get_antenna) {
  1161. u32 tx_ant = 0, rx_ant = 0;
  1162. int res;
  1163. res = rdev_get_antenna(rdev, &tx_ant, &rx_ant);
  1164. if (!res) {
  1165. if (nla_put_u32(msg,
  1166. NL80211_ATTR_WIPHY_ANTENNA_TX,
  1167. tx_ant) ||
  1168. nla_put_u32(msg,
  1169. NL80211_ATTR_WIPHY_ANTENNA_RX,
  1170. rx_ant))
  1171. goto nla_put_failure;
  1172. }
  1173. }
  1174. state->split_start++;
  1175. if (state->split)
  1176. break;
  1177. case 2:
  1178. if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
  1179. rdev->wiphy.interface_modes))
  1180. goto nla_put_failure;
  1181. state->split_start++;
  1182. if (state->split)
  1183. break;
  1184. case 3:
  1185. nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
  1186. if (!nl_bands)
  1187. goto nla_put_failure;
  1188. for (band = state->band_start;
  1189. band < IEEE80211_NUM_BANDS; band++) {
  1190. struct ieee80211_supported_band *sband;
  1191. sband = rdev->wiphy.bands[band];
  1192. if (!sband)
  1193. continue;
  1194. nl_band = nla_nest_start(msg, band);
  1195. if (!nl_band)
  1196. goto nla_put_failure;
  1197. switch (state->chan_start) {
  1198. case 0:
  1199. if (nl80211_send_band_rateinfo(msg, sband))
  1200. goto nla_put_failure;
  1201. state->chan_start++;
  1202. if (state->split)
  1203. break;
  1204. default:
  1205. /* add frequencies */
  1206. nl_freqs = nla_nest_start(
  1207. msg, NL80211_BAND_ATTR_FREQS);
  1208. if (!nl_freqs)
  1209. goto nla_put_failure;
  1210. for (i = state->chan_start - 1;
  1211. i < sband->n_channels;
  1212. i++) {
  1213. nl_freq = nla_nest_start(msg, i);
  1214. if (!nl_freq)
  1215. goto nla_put_failure;
  1216. chan = &sband->channels[i];
  1217. if (nl80211_msg_put_channel(
  1218. msg, chan,
  1219. state->split))
  1220. goto nla_put_failure;
  1221. nla_nest_end(msg, nl_freq);
  1222. if (state->split)
  1223. break;
  1224. }
  1225. if (i < sband->n_channels)
  1226. state->chan_start = i + 2;
  1227. else
  1228. state->chan_start = 0;
  1229. nla_nest_end(msg, nl_freqs);
  1230. }
  1231. nla_nest_end(msg, nl_band);
  1232. if (state->split) {
  1233. /* start again here */
  1234. if (state->chan_start)
  1235. band--;
  1236. break;
  1237. }
  1238. }
  1239. nla_nest_end(msg, nl_bands);
  1240. if (band < IEEE80211_NUM_BANDS)
  1241. state->band_start = band + 1;
  1242. else
  1243. state->band_start = 0;
  1244. /* if bands & channels are done, continue outside */
  1245. if (state->band_start == 0 && state->chan_start == 0)
  1246. state->split_start++;
  1247. if (state->split)
  1248. break;
  1249. case 4:
  1250. nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
  1251. if (!nl_cmds)
  1252. goto nla_put_failure;
  1253. i = 0;
  1254. #define CMD(op, n) \
  1255. do { \
  1256. if (rdev->ops->op) { \
  1257. i++; \
  1258. if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
  1259. goto nla_put_failure; \
  1260. } \
  1261. } while (0)
  1262. CMD(add_virtual_intf, NEW_INTERFACE);
  1263. CMD(change_virtual_intf, SET_INTERFACE);
  1264. CMD(add_key, NEW_KEY);
  1265. CMD(start_ap, START_AP);
  1266. CMD(add_station, NEW_STATION);
  1267. CMD(add_mpath, NEW_MPATH);
  1268. CMD(update_mesh_config, SET_MESH_CONFIG);
  1269. CMD(change_bss, SET_BSS);
  1270. CMD(auth, AUTHENTICATE);
  1271. CMD(assoc, ASSOCIATE);
  1272. CMD(deauth, DEAUTHENTICATE);
  1273. CMD(disassoc, DISASSOCIATE);
  1274. CMD(join_ibss, JOIN_IBSS);
  1275. CMD(join_mesh, JOIN_MESH);
  1276. CMD(set_pmksa, SET_PMKSA);
  1277. CMD(del_pmksa, DEL_PMKSA);
  1278. CMD(flush_pmksa, FLUSH_PMKSA);
  1279. if (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
  1280. CMD(remain_on_channel, REMAIN_ON_CHANNEL);
  1281. CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
  1282. CMD(mgmt_tx, FRAME);
  1283. CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
  1284. if (rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
  1285. i++;
  1286. if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
  1287. goto nla_put_failure;
  1288. }
  1289. if (rdev->ops->set_monitor_channel || rdev->ops->start_ap ||
  1290. rdev->ops->join_mesh) {
  1291. i++;
  1292. if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
  1293. goto nla_put_failure;
  1294. }
  1295. CMD(set_wds_peer, SET_WDS_PEER);
  1296. if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
  1297. CMD(tdls_mgmt, TDLS_MGMT);
  1298. CMD(tdls_oper, TDLS_OPER);
  1299. }
  1300. if (rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
  1301. CMD(sched_scan_start, START_SCHED_SCAN);
  1302. CMD(probe_client, PROBE_CLIENT);
  1303. CMD(set_noack_map, SET_NOACK_MAP);
  1304. if (rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
  1305. i++;
  1306. if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
  1307. goto nla_put_failure;
  1308. }
  1309. CMD(start_p2p_device, START_P2P_DEVICE);
  1310. CMD(set_mcast_rate, SET_MCAST_RATE);
  1311. #ifdef CONFIG_NL80211_TESTMODE
  1312. CMD(testmode_cmd, TESTMODE);
  1313. #endif
  1314. if (state->split) {
  1315. CMD(crit_proto_start, CRIT_PROTOCOL_START);
  1316. CMD(crit_proto_stop, CRIT_PROTOCOL_STOP);
  1317. if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH)
  1318. CMD(channel_switch, CHANNEL_SWITCH);
  1319. CMD(set_qos_map, SET_QOS_MAP);
  1320. if (rdev->wiphy.features &
  1321. NL80211_FEATURE_SUPPORTS_WMM_ADMISSION)
  1322. CMD(add_tx_ts, ADD_TX_TS);
  1323. }
  1324. /* add into the if now */
  1325. #undef CMD
  1326. if (rdev->ops->connect || rdev->ops->auth) {
  1327. i++;
  1328. if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
  1329. goto nla_put_failure;
  1330. }
  1331. if (rdev->ops->disconnect || rdev->ops->deauth) {
  1332. i++;
  1333. if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
  1334. goto nla_put_failure;
  1335. }
  1336. nla_nest_end(msg, nl_cmds);
  1337. state->split_start++;
  1338. if (state->split)
  1339. break;
  1340. case 5:
  1341. if (rdev->ops->remain_on_channel &&
  1342. (rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
  1343. nla_put_u32(msg,
  1344. NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
  1345. rdev->wiphy.max_remain_on_channel_duration))
  1346. goto nla_put_failure;
  1347. if ((rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
  1348. nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
  1349. goto nla_put_failure;
  1350. if (nl80211_send_mgmt_stypes(msg, mgmt_stypes))
  1351. goto nla_put_failure;
  1352. state->split_start++;
  1353. if (state->split)
  1354. break;
  1355. case 6:
  1356. #ifdef CONFIG_PM
  1357. if (nl80211_send_wowlan(msg, rdev, state->split))
  1358. goto nla_put_failure;
  1359. state->split_start++;
  1360. if (state->split)
  1361. break;
  1362. #else
  1363. state->split_start++;
  1364. #endif
  1365. case 7:
  1366. if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
  1367. rdev->wiphy.software_iftypes))
  1368. goto nla_put_failure;
  1369. if (nl80211_put_iface_combinations(&rdev->wiphy, msg,
  1370. state->split))
  1371. goto nla_put_failure;
  1372. state->split_start++;
  1373. if (state->split)
  1374. break;
  1375. case 8:
  1376. if ((rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
  1377. nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
  1378. rdev->wiphy.ap_sme_capa))
  1379. goto nla_put_failure;
  1380. features = rdev->wiphy.features;
  1381. /*
  1382. * We can only add the per-channel limit information if the
  1383. * dump is split, otherwise it makes it too big. Therefore
  1384. * only advertise it in that case.
  1385. */
  1386. if (state->split)
  1387. features |= NL80211_FEATURE_ADVERTISE_CHAN_LIMITS;
  1388. if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS, features))
  1389. goto nla_put_failure;
  1390. if (rdev->wiphy.ht_capa_mod_mask &&
  1391. nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
  1392. sizeof(*rdev->wiphy.ht_capa_mod_mask),
  1393. rdev->wiphy.ht_capa_mod_mask))
  1394. goto nla_put_failure;
  1395. if (rdev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME &&
  1396. rdev->wiphy.max_acl_mac_addrs &&
  1397. nla_put_u32(msg, NL80211_ATTR_MAC_ACL_MAX,
  1398. rdev->wiphy.max_acl_mac_addrs))
  1399. goto nla_put_failure;
  1400. /*
  1401. * Any information below this point is only available to
  1402. * applications that can deal with it being split. This
  1403. * helps ensure that newly added capabilities don't break
  1404. * older tools by overrunning their buffers.
  1405. *
  1406. * We still increment split_start so that in the split
  1407. * case we'll continue with more data in the next round,
  1408. * but break unconditionally so unsplit data stops here.
  1409. */
  1410. state->split_start++;
  1411. break;
  1412. case 9:
  1413. if (rdev->wiphy.extended_capabilities &&
  1414. (nla_put(msg, NL80211_ATTR_EXT_CAPA,
  1415. rdev->wiphy.extended_capabilities_len,
  1416. rdev->wiphy.extended_capabilities) ||
  1417. nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
  1418. rdev->wiphy.extended_capabilities_len,
  1419. rdev->wiphy.extended_capabilities_mask)))
  1420. goto nla_put_failure;
  1421. if (rdev->wiphy.vht_capa_mod_mask &&
  1422. nla_put(msg, NL80211_ATTR_VHT_CAPABILITY_MASK,
  1423. sizeof(*rdev->wiphy.vht_capa_mod_mask),
  1424. rdev->wiphy.vht_capa_mod_mask))
  1425. goto nla_put_failure;
  1426. state->split_start++;
  1427. break;
  1428. case 10:
  1429. if (nl80211_send_coalesce(msg, rdev))
  1430. goto nla_put_failure;
  1431. if ((rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ) &&
  1432. (nla_put_flag(msg, NL80211_ATTR_SUPPORT_5_MHZ) ||
  1433. nla_put_flag(msg, NL80211_ATTR_SUPPORT_10_MHZ)))
  1434. goto nla_put_failure;
  1435. if (rdev->wiphy.max_ap_assoc_sta &&
  1436. nla_put_u32(msg, NL80211_ATTR_MAX_AP_ASSOC_STA,
  1437. rdev->wiphy.max_ap_assoc_sta))
  1438. goto nla_put_failure;
  1439. state->split_start++;
  1440. break;
  1441. case 11:
  1442. if (rdev->wiphy.n_vendor_commands) {
  1443. const struct nl80211_vendor_cmd_info *info;
  1444. struct nlattr *nested;
  1445. nested = nla_nest_start(msg, NL80211_ATTR_VENDOR_DATA);
  1446. if (!nested)
  1447. goto nla_put_failure;
  1448. for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
  1449. info = &rdev->wiphy.vendor_commands[i].info;
  1450. if (nla_put(msg, i + 1, sizeof(*info), info))
  1451. goto nla_put_failure;
  1452. }
  1453. nla_nest_end(msg, nested);
  1454. }
  1455. if (rdev->wiphy.n_vendor_events) {
  1456. const struct nl80211_vendor_cmd_info *info;
  1457. struct nlattr *nested;
  1458. nested = nla_nest_start(msg,
  1459. NL80211_ATTR_VENDOR_EVENTS);
  1460. if (!nested)
  1461. goto nla_put_failure;
  1462. for (i = 0; i < rdev->wiphy.n_vendor_events; i++) {
  1463. info = &rdev->wiphy.vendor_events[i];
  1464. if (nla_put(msg, i + 1, sizeof(*info), info))
  1465. goto nla_put_failure;
  1466. }
  1467. nla_nest_end(msg, nested);
  1468. }
  1469. state->split_start++;
  1470. break;
  1471. case 12:
  1472. if (rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH &&
  1473. nla_put_u8(msg, NL80211_ATTR_MAX_CSA_COUNTERS,
  1474. rdev->wiphy.max_num_csa_counters))
  1475. goto nla_put_failure;
  1476. if (rdev->wiphy.regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
  1477. nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
  1478. goto nla_put_failure;
  1479. if (nla_put(msg, NL80211_ATTR_EXT_FEATURES,
  1480. sizeof(rdev->wiphy.ext_features),
  1481. rdev->wiphy.ext_features))
  1482. goto nla_put_failure;
  1483. /* done */
  1484. state->split_start = 0;
  1485. break;
  1486. }
  1487. finish:
  1488. return genlmsg_end(msg, hdr);
  1489. nla_put_failure:
  1490. genlmsg_cancel(msg, hdr);
  1491. return -EMSGSIZE;
  1492. }
  1493. static int nl80211_dump_wiphy_parse(struct sk_buff *skb,
  1494. struct netlink_callback *cb,
  1495. struct nl80211_dump_wiphy_state *state)
  1496. {
  1497. struct nlattr **tb = nl80211_fam.attrbuf;
  1498. int ret = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
  1499. tb, nl80211_fam.maxattr, nl80211_policy);
  1500. /* ignore parse errors for backward compatibility */
  1501. if (ret)
  1502. return 0;
  1503. state->split = tb[NL80211_ATTR_SPLIT_WIPHY_DUMP];
  1504. if (tb[NL80211_ATTR_WIPHY])
  1505. state->filter_wiphy = nla_get_u32(tb[NL80211_ATTR_WIPHY]);
  1506. if (tb[NL80211_ATTR_WDEV])
  1507. state->filter_wiphy = nla_get_u64(tb[NL80211_ATTR_WDEV]) >> 32;
  1508. if (tb[NL80211_ATTR_IFINDEX]) {
  1509. struct net_device *netdev;
  1510. struct cfg80211_registered_device *rdev;
  1511. int ifidx = nla_get_u32(tb[NL80211_ATTR_IFINDEX]);
  1512. netdev = __dev_get_by_index(sock_net(skb->sk), ifidx);
  1513. if (!netdev)
  1514. return -ENODEV;
  1515. if (netdev->ieee80211_ptr) {
  1516. rdev = wiphy_to_rdev(
  1517. netdev->ieee80211_ptr->wiphy);
  1518. state->filter_wiphy = rdev->wiphy_idx;
  1519. }
  1520. }
  1521. return 0;
  1522. }
  1523. static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
  1524. {
  1525. int idx = 0, ret;
  1526. struct nl80211_dump_wiphy_state *state = (void *)cb->args[0];
  1527. struct cfg80211_registered_device *rdev;
  1528. rtnl_lock();
  1529. if (!state) {
  1530. state = kzalloc(sizeof(*state), GFP_KERNEL);
  1531. if (!state) {
  1532. rtnl_unlock();
  1533. return -ENOMEM;
  1534. }
  1535. state->filter_wiphy = -1;
  1536. ret = nl80211_dump_wiphy_parse(skb, cb, state);
  1537. if (ret) {
  1538. kfree(state);
  1539. rtnl_unlock();
  1540. return ret;
  1541. }
  1542. cb->args[0] = (long)state;
  1543. }
  1544. list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
  1545. if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
  1546. continue;
  1547. if (++idx <= state->start)
  1548. continue;
  1549. if (state->filter_wiphy != -1 &&
  1550. state->filter_wiphy != rdev->wiphy_idx)
  1551. continue;
  1552. /* attempt to fit multiple wiphy data chunks into the skb */
  1553. do {
  1554. ret = nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY,
  1555. skb,
  1556. NETLINK_CB(cb->skb).portid,
  1557. cb->nlh->nlmsg_seq,
  1558. NLM_F_MULTI, state);
  1559. if (ret < 0) {
  1560. /*
  1561. * If sending the wiphy data didn't fit (ENOBUFS
  1562. * or EMSGSIZE returned), this SKB is still
  1563. * empty (so it's not too big because another
  1564. * wiphy dataset is already in the skb) and
  1565. * we've not tried to adjust the dump allocation
  1566. * yet ... then adjust the alloc size to be
  1567. * bigger, and return 1 but with the empty skb.
  1568. * This results in an empty message being RX'ed
  1569. * in userspace, but that is ignored.
  1570. *
  1571. * We can then retry with the larger buffer.
  1572. */
  1573. if ((ret == -ENOBUFS || ret == -EMSGSIZE) &&
  1574. !skb->len && !state->split &&
  1575. cb->min_dump_alloc < 4096) {
  1576. cb->min_dump_alloc = 4096;
  1577. state->split_start = 0;
  1578. rtnl_unlock();
  1579. return 1;
  1580. }
  1581. idx--;
  1582. break;
  1583. }
  1584. } while (state->split_start > 0);
  1585. break;
  1586. }
  1587. rtnl_unlock();
  1588. state->start = idx;
  1589. return skb->len;
  1590. }
  1591. static int nl80211_dump_wiphy_done(struct netlink_callback *cb)
  1592. {
  1593. kfree((void *)cb->args[0]);
  1594. return 0;
  1595. }
  1596. static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
  1597. {
  1598. struct sk_buff *msg;
  1599. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  1600. struct nl80211_dump_wiphy_state state = {};
  1601. msg = nlmsg_new(4096, GFP_KERNEL);
  1602. if (!msg)
  1603. return -ENOMEM;
  1604. if (nl80211_send_wiphy(rdev, NL80211_CMD_NEW_WIPHY, msg,
  1605. info->snd_portid, info->snd_seq, 0,
  1606. &state) < 0) {
  1607. nlmsg_free(msg);
  1608. return -ENOBUFS;
  1609. }
  1610. return genlmsg_reply(msg, info);
  1611. }
  1612. static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
  1613. [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
  1614. [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
  1615. [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
  1616. [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
  1617. [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
  1618. };
  1619. static int parse_txq_params(struct nlattr *tb[],
  1620. struct ieee80211_txq_params *txq_params)
  1621. {
  1622. if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
  1623. !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
  1624. !tb[NL80211_TXQ_ATTR_AIFS])
  1625. return -EINVAL;
  1626. txq_params->ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
  1627. txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
  1628. txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
  1629. txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
  1630. txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
  1631. if (txq_params->ac >= NL80211_NUM_ACS)
  1632. return -EINVAL;
  1633. return 0;
  1634. }
  1635. static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
  1636. {
  1637. /*
  1638. * You can only set the channel explicitly for WDS interfaces,
  1639. * all others have their channel managed via their respective
  1640. * "establish a connection" command (connect, join, ...)
  1641. *
  1642. * For AP/GO and mesh mode, the channel can be set with the
  1643. * channel userspace API, but is only stored and passed to the
  1644. * low-level driver when the AP starts or the mesh is joined.
  1645. * This is for backward compatibility, userspace can also give
  1646. * the channel in the start-ap or join-mesh commands instead.
  1647. *
  1648. * Monitors are special as they are normally slaved to
  1649. * whatever else is going on, so they have their own special
  1650. * operation to set the monitor channel if possible.
  1651. */
  1652. return !wdev ||
  1653. wdev->iftype == NL80211_IFTYPE_AP ||
  1654. wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
  1655. wdev->iftype == NL80211_IFTYPE_MONITOR ||
  1656. wdev->iftype == NL80211_IFTYPE_P2P_GO;
  1657. }
  1658. static int nl80211_parse_chandef(struct cfg80211_registered_device *rdev,
  1659. struct genl_info *info,
  1660. struct cfg80211_chan_def *chandef)
  1661. {
  1662. u32 control_freq;
  1663. if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
  1664. return -EINVAL;
  1665. control_freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
  1666. chandef->chan = ieee80211_get_channel(&rdev->wiphy, control_freq);
  1667. chandef->width = NL80211_CHAN_WIDTH_20_NOHT;
  1668. chandef->center_freq1 = control_freq;
  1669. chandef->center_freq2 = 0;
  1670. /* Primary channel not allowed */
  1671. if (!chandef->chan || chandef->chan->flags & IEEE80211_CHAN_DISABLED)
  1672. return -EINVAL;
  1673. if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
  1674. enum nl80211_channel_type chantype;
  1675. chantype = nla_get_u32(
  1676. info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
  1677. switch (chantype) {
  1678. case NL80211_CHAN_NO_HT:
  1679. case NL80211_CHAN_HT20:
  1680. case NL80211_CHAN_HT40PLUS:
  1681. case NL80211_CHAN_HT40MINUS:
  1682. cfg80211_chandef_create(chandef, chandef->chan,
  1683. chantype);
  1684. break;
  1685. default:
  1686. return -EINVAL;
  1687. }
  1688. } else if (info->attrs[NL80211_ATTR_CHANNEL_WIDTH]) {
  1689. chandef->width =
  1690. nla_get_u32(info->attrs[NL80211_ATTR_CHANNEL_WIDTH]);
  1691. if (info->attrs[NL80211_ATTR_CENTER_FREQ1])
  1692. chandef->center_freq1 =
  1693. nla_get_u32(
  1694. info->attrs[NL80211_ATTR_CENTER_FREQ1]);
  1695. if (info->attrs[NL80211_ATTR_CENTER_FREQ2])
  1696. chandef->center_freq2 =
  1697. nla_get_u32(
  1698. info->attrs[NL80211_ATTR_CENTER_FREQ2]);
  1699. }
  1700. if (!cfg80211_chandef_valid(chandef))
  1701. return -EINVAL;
  1702. if (!cfg80211_chandef_usable(&rdev->wiphy, chandef,
  1703. IEEE80211_CHAN_DISABLED))
  1704. return -EINVAL;
  1705. if ((chandef->width == NL80211_CHAN_WIDTH_5 ||
  1706. chandef->width == NL80211_CHAN_WIDTH_10) &&
  1707. !(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_5_10_MHZ))
  1708. return -EINVAL;
  1709. return 0;
  1710. }
  1711. static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
  1712. struct net_device *dev,
  1713. struct genl_info *info)
  1714. {
  1715. struct cfg80211_chan_def chandef;
  1716. int result;
  1717. enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
  1718. struct wireless_dev *wdev = NULL;
  1719. if (dev)
  1720. wdev = dev->ieee80211_ptr;
  1721. if (!nl80211_can_set_dev_channel(wdev))
  1722. return -EOPNOTSUPP;
  1723. if (wdev)
  1724. iftype = wdev->iftype;
  1725. result = nl80211_parse_chandef(rdev, info, &chandef);
  1726. if (result)
  1727. return result;
  1728. switch (iftype) {
  1729. case NL80211_IFTYPE_AP:
  1730. case NL80211_IFTYPE_P2P_GO:
  1731. if (!cfg80211_reg_can_beacon(&rdev->wiphy, &chandef, iftype)) {
  1732. result = -EINVAL;
  1733. break;
  1734. }
  1735. if (wdev->beacon_interval) {
  1736. if (!dev || !rdev->ops->set_ap_chanwidth ||
  1737. !(rdev->wiphy.features &
  1738. NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE)) {
  1739. result = -EBUSY;
  1740. break;
  1741. }
  1742. /* Only allow dynamic channel width changes */
  1743. if (chandef.chan != wdev->preset_chandef.chan) {
  1744. result = -EBUSY;
  1745. break;
  1746. }
  1747. result = rdev_set_ap_chanwidth(rdev, dev, &chandef);
  1748. if (result)
  1749. break;
  1750. }
  1751. wdev->preset_chandef = chandef;
  1752. result = 0;
  1753. break;
  1754. case NL80211_IFTYPE_MESH_POINT:
  1755. result = cfg80211_set_mesh_channel(rdev, wdev, &chandef);
  1756. break;
  1757. case NL80211_IFTYPE_MONITOR:
  1758. result = cfg80211_set_monitor_channel(rdev, &chandef);
  1759. break;
  1760. default:
  1761. result = -EINVAL;
  1762. }
  1763. return result;
  1764. }
  1765. static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
  1766. {
  1767. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  1768. struct net_device *netdev = info->user_ptr[1];
  1769. return __nl80211_set_channel(rdev, netdev, info);
  1770. }
  1771. static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
  1772. {
  1773. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  1774. struct net_device *dev = info->user_ptr[1];
  1775. struct wireless_dev *wdev = dev->ieee80211_ptr;
  1776. const u8 *bssid;
  1777. if (!info->attrs[NL80211_ATTR_MAC])
  1778. return -EINVAL;
  1779. if (netif_running(dev))
  1780. return -EBUSY;
  1781. if (!rdev->ops->set_wds_peer)
  1782. return -EOPNOTSUPP;
  1783. if (wdev->iftype != NL80211_IFTYPE_WDS)
  1784. return -EOPNOTSUPP;
  1785. bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1786. return rdev_set_wds_peer(rdev, dev, bssid);
  1787. }
  1788. static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
  1789. {
  1790. struct cfg80211_registered_device *rdev;
  1791. struct net_device *netdev = NULL;
  1792. struct wireless_dev *wdev;
  1793. int result = 0, rem_txq_params = 0;
  1794. struct nlattr *nl_txq_params;
  1795. u32 changed;
  1796. u8 retry_short = 0, retry_long = 0;
  1797. u32 frag_threshold = 0, rts_threshold = 0;
  1798. u8 coverage_class = 0;
  1799. ASSERT_RTNL();
  1800. /*
  1801. * Try to find the wiphy and netdev. Normally this
  1802. * function shouldn't need the netdev, but this is
  1803. * done for backward compatibility -- previously
  1804. * setting the channel was done per wiphy, but now
  1805. * it is per netdev. Previous userland like hostapd
  1806. * also passed a netdev to set_wiphy, so that it is
  1807. * possible to let that go to the right netdev!
  1808. */
  1809. if (info->attrs[NL80211_ATTR_IFINDEX]) {
  1810. int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
  1811. netdev = __dev_get_by_index(genl_info_net(info), ifindex);
  1812. if (netdev && netdev->ieee80211_ptr)
  1813. rdev = wiphy_to_rdev(netdev->ieee80211_ptr->wiphy);
  1814. else
  1815. netdev = NULL;
  1816. }
  1817. if (!netdev) {
  1818. rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
  1819. info->attrs);
  1820. if (IS_ERR(rdev))
  1821. return PTR_ERR(rdev);
  1822. wdev = NULL;
  1823. netdev = NULL;
  1824. result = 0;
  1825. } else
  1826. wdev = netdev->ieee80211_ptr;
  1827. /*
  1828. * end workaround code, by now the rdev is available
  1829. * and locked, and wdev may or may not be NULL.
  1830. */
  1831. if (info->attrs[NL80211_ATTR_WIPHY_NAME])
  1832. result = cfg80211_dev_rename(
  1833. rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
  1834. if (result)
  1835. return result;
  1836. if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
  1837. struct ieee80211_txq_params txq_params;
  1838. struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
  1839. if (!rdev->ops->set_txq_params)
  1840. return -EOPNOTSUPP;
  1841. if (!netdev)
  1842. return -EINVAL;
  1843. if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
  1844. netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
  1845. return -EINVAL;
  1846. if (!netif_running(netdev))
  1847. return -ENETDOWN;
  1848. nla_for_each_nested(nl_txq_params,
  1849. info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
  1850. rem_txq_params) {
  1851. result = nla_parse(tb, NL80211_TXQ_ATTR_MAX,
  1852. nla_data(nl_txq_params),
  1853. nla_len(nl_txq_params),
  1854. txq_params_policy);
  1855. if (result)
  1856. return result;
  1857. result = parse_txq_params(tb, &txq_params);
  1858. if (result)
  1859. return result;
  1860. result = rdev_set_txq_params(rdev, netdev,
  1861. &txq_params);
  1862. if (result)
  1863. return result;
  1864. }
  1865. }
  1866. if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
  1867. result = __nl80211_set_channel(
  1868. rdev,
  1869. nl80211_can_set_dev_channel(wdev) ? netdev : NULL,
  1870. info);
  1871. if (result)
  1872. return result;
  1873. }
  1874. if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
  1875. struct wireless_dev *txp_wdev = wdev;
  1876. enum nl80211_tx_power_setting type;
  1877. int idx, mbm = 0;
  1878. if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
  1879. txp_wdev = NULL;
  1880. if (!rdev->ops->set_tx_power)
  1881. return -EOPNOTSUPP;
  1882. idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
  1883. type = nla_get_u32(info->attrs[idx]);
  1884. if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
  1885. (type != NL80211_TX_POWER_AUTOMATIC))
  1886. return -EINVAL;
  1887. if (type != NL80211_TX_POWER_AUTOMATIC) {
  1888. idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
  1889. mbm = nla_get_u32(info->attrs[idx]);
  1890. }
  1891. result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
  1892. if (result)
  1893. return result;
  1894. }
  1895. if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
  1896. info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
  1897. u32 tx_ant, rx_ant;
  1898. if ((!rdev->wiphy.available_antennas_tx &&
  1899. !rdev->wiphy.available_antennas_rx) ||
  1900. !rdev->ops->set_antenna)
  1901. return -EOPNOTSUPP;
  1902. tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
  1903. rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
  1904. /* reject antenna configurations which don't match the
  1905. * available antenna masks, except for the "all" mask */
  1906. if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
  1907. (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx)))
  1908. return -EINVAL;
  1909. tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
  1910. rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
  1911. result = rdev_set_antenna(rdev, tx_ant, rx_ant);
  1912. if (result)
  1913. return result;
  1914. }
  1915. changed = 0;
  1916. if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
  1917. retry_short = nla_get_u8(
  1918. info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
  1919. if (retry_short == 0)
  1920. return -EINVAL;
  1921. changed |= WIPHY_PARAM_RETRY_SHORT;
  1922. }
  1923. if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
  1924. retry_long = nla_get_u8(
  1925. info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
  1926. if (retry_long == 0)
  1927. return -EINVAL;
  1928. changed |= WIPHY_PARAM_RETRY_LONG;
  1929. }
  1930. if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
  1931. frag_threshold = nla_get_u32(
  1932. info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
  1933. if (frag_threshold < 256)
  1934. return -EINVAL;
  1935. if (frag_threshold != (u32) -1) {
  1936. /*
  1937. * Fragments (apart from the last one) are required to
  1938. * have even length. Make the fragmentation code
  1939. * simpler by stripping LSB should someone try to use
  1940. * odd threshold value.
  1941. */
  1942. frag_threshold &= ~0x1;
  1943. }
  1944. changed |= WIPHY_PARAM_FRAG_THRESHOLD;
  1945. }
  1946. if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
  1947. rts_threshold = nla_get_u32(
  1948. info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
  1949. changed |= WIPHY_PARAM_RTS_THRESHOLD;
  1950. }
  1951. if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
  1952. if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK])
  1953. return -EINVAL;
  1954. coverage_class = nla_get_u8(
  1955. info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
  1956. changed |= WIPHY_PARAM_COVERAGE_CLASS;
  1957. }
  1958. if (info->attrs[NL80211_ATTR_WIPHY_DYN_ACK]) {
  1959. if (!(rdev->wiphy.features & NL80211_FEATURE_ACKTO_ESTIMATION))
  1960. return -EOPNOTSUPP;
  1961. changed |= WIPHY_PARAM_DYN_ACK;
  1962. }
  1963. if (changed) {
  1964. u8 old_retry_short, old_retry_long;
  1965. u32 old_frag_threshold, old_rts_threshold;
  1966. u8 old_coverage_class;
  1967. if (!rdev->ops->set_wiphy_params)
  1968. return -EOPNOTSUPP;
  1969. old_retry_short = rdev->wiphy.retry_short;
  1970. old_retry_long = rdev->wiphy.retry_long;
  1971. old_frag_threshold = rdev->wiphy.frag_threshold;
  1972. old_rts_threshold = rdev->wiphy.rts_threshold;
  1973. old_coverage_class = rdev->wiphy.coverage_class;
  1974. if (changed & WIPHY_PARAM_RETRY_SHORT)
  1975. rdev->wiphy.retry_short = retry_short;
  1976. if (changed & WIPHY_PARAM_RETRY_LONG)
  1977. rdev->wiphy.retry_long = retry_long;
  1978. if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
  1979. rdev->wiphy.frag_threshold = frag_threshold;
  1980. if (changed & WIPHY_PARAM_RTS_THRESHOLD)
  1981. rdev->wiphy.rts_threshold = rts_threshold;
  1982. if (changed & WIPHY_PARAM_COVERAGE_CLASS)
  1983. rdev->wiphy.coverage_class = coverage_class;
  1984. result = rdev_set_wiphy_params(rdev, changed);
  1985. if (result) {
  1986. rdev->wiphy.retry_short = old_retry_short;
  1987. rdev->wiphy.retry_long = old_retry_long;
  1988. rdev->wiphy.frag_threshold = old_frag_threshold;
  1989. rdev->wiphy.rts_threshold = old_rts_threshold;
  1990. rdev->wiphy.coverage_class = old_coverage_class;
  1991. }
  1992. }
  1993. return 0;
  1994. }
  1995. static inline u64 wdev_id(struct wireless_dev *wdev)
  1996. {
  1997. return (u64)wdev->identifier |
  1998. ((u64)wiphy_to_rdev(wdev->wiphy)->wiphy_idx << 32);
  1999. }
  2000. static int nl80211_send_chandef(struct sk_buff *msg,
  2001. const struct cfg80211_chan_def *chandef)
  2002. {
  2003. if (WARN_ON(!cfg80211_chandef_valid(chandef)))
  2004. return -EINVAL;
  2005. if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
  2006. chandef->chan->center_freq))
  2007. return -ENOBUFS;
  2008. switch (chandef->width) {
  2009. case NL80211_CHAN_WIDTH_20_NOHT:
  2010. case NL80211_CHAN_WIDTH_20:
  2011. case NL80211_CHAN_WIDTH_40:
  2012. if (nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
  2013. cfg80211_get_chandef_type(chandef)))
  2014. return -ENOBUFS;
  2015. break;
  2016. default:
  2017. break;
  2018. }
  2019. if (nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, chandef->width))
  2020. return -ENOBUFS;
  2021. if (nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ1, chandef->center_freq1))
  2022. return -ENOBUFS;
  2023. if (chandef->center_freq2 &&
  2024. nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ2, chandef->center_freq2))
  2025. return -ENOBUFS;
  2026. return 0;
  2027. }
  2028. static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
  2029. struct cfg80211_registered_device *rdev,
  2030. struct wireless_dev *wdev, bool removal)
  2031. {
  2032. struct net_device *dev = wdev->netdev;
  2033. u8 cmd = NL80211_CMD_NEW_INTERFACE;
  2034. void *hdr;
  2035. if (removal)
  2036. cmd = NL80211_CMD_DEL_INTERFACE;
  2037. hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
  2038. if (!hdr)
  2039. return -1;
  2040. if (dev &&
  2041. (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
  2042. nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
  2043. goto nla_put_failure;
  2044. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  2045. nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
  2046. nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
  2047. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
  2048. nla_put_u32(msg, NL80211_ATTR_GENERATION,
  2049. rdev->devlist_generation ^
  2050. (cfg80211_rdev_list_generation << 2)))
  2051. goto nla_put_failure;
  2052. if (rdev->ops->get_channel) {
  2053. int ret;
  2054. struct cfg80211_chan_def chandef;
  2055. ret = rdev_get_channel(rdev, wdev, &chandef);
  2056. if (ret == 0) {
  2057. if (nl80211_send_chandef(msg, &chandef))
  2058. goto nla_put_failure;
  2059. }
  2060. }
  2061. if (wdev->ssid_len) {
  2062. if (nla_put(msg, NL80211_ATTR_SSID, wdev->ssid_len, wdev->ssid))
  2063. goto nla_put_failure;
  2064. }
  2065. return genlmsg_end(msg, hdr);
  2066. nla_put_failure:
  2067. genlmsg_cancel(msg, hdr);
  2068. return -EMSGSIZE;
  2069. }
  2070. static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
  2071. {
  2072. int wp_idx = 0;
  2073. int if_idx = 0;
  2074. int wp_start = cb->args[0];
  2075. int if_start = cb->args[1];
  2076. struct cfg80211_registered_device *rdev;
  2077. struct wireless_dev *wdev;
  2078. rtnl_lock();
  2079. list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
  2080. if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
  2081. continue;
  2082. if (wp_idx < wp_start) {
  2083. wp_idx++;
  2084. continue;
  2085. }
  2086. if_idx = 0;
  2087. list_for_each_entry(wdev, &rdev->wdev_list, list) {
  2088. if (if_idx < if_start) {
  2089. if_idx++;
  2090. continue;
  2091. }
  2092. if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
  2093. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  2094. rdev, wdev, false) < 0) {
  2095. goto out;
  2096. }
  2097. if_idx++;
  2098. }
  2099. wp_idx++;
  2100. }
  2101. out:
  2102. rtnl_unlock();
  2103. cb->args[0] = wp_idx;
  2104. cb->args[1] = if_idx;
  2105. return skb->len;
  2106. }
  2107. static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
  2108. {
  2109. struct sk_buff *msg;
  2110. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2111. struct wireless_dev *wdev = info->user_ptr[1];
  2112. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  2113. if (!msg)
  2114. return -ENOMEM;
  2115. if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
  2116. rdev, wdev, false) < 0) {
  2117. nlmsg_free(msg);
  2118. return -ENOBUFS;
  2119. }
  2120. return genlmsg_reply(msg, info);
  2121. }
  2122. static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
  2123. [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
  2124. [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
  2125. [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
  2126. [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
  2127. [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
  2128. [NL80211_MNTR_FLAG_ACTIVE] = { .type = NLA_FLAG },
  2129. };
  2130. static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
  2131. {
  2132. struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
  2133. int flag;
  2134. *mntrflags = 0;
  2135. if (!nla)
  2136. return -EINVAL;
  2137. if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
  2138. nla, mntr_flags_policy))
  2139. return -EINVAL;
  2140. for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
  2141. if (flags[flag])
  2142. *mntrflags |= (1<<flag);
  2143. return 0;
  2144. }
  2145. static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
  2146. struct net_device *netdev, u8 use_4addr,
  2147. enum nl80211_iftype iftype)
  2148. {
  2149. if (!use_4addr) {
  2150. if (netdev && (netdev->priv_flags & IFF_BRIDGE_PORT))
  2151. return -EBUSY;
  2152. return 0;
  2153. }
  2154. switch (iftype) {
  2155. case NL80211_IFTYPE_AP_VLAN:
  2156. if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
  2157. return 0;
  2158. break;
  2159. case NL80211_IFTYPE_STATION:
  2160. if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
  2161. return 0;
  2162. break;
  2163. default:
  2164. break;
  2165. }
  2166. return -EOPNOTSUPP;
  2167. }
  2168. static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
  2169. {
  2170. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2171. struct vif_params params;
  2172. int err;
  2173. enum nl80211_iftype otype, ntype;
  2174. struct net_device *dev = info->user_ptr[1];
  2175. u32 _flags, *flags = NULL;
  2176. bool change = false;
  2177. memset(&params, 0, sizeof(params));
  2178. otype = ntype = dev->ieee80211_ptr->iftype;
  2179. if (info->attrs[NL80211_ATTR_IFTYPE]) {
  2180. ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
  2181. if (otype != ntype)
  2182. change = true;
  2183. if (ntype > NL80211_IFTYPE_MAX)
  2184. return -EINVAL;
  2185. }
  2186. if (info->attrs[NL80211_ATTR_MESH_ID]) {
  2187. struct wireless_dev *wdev = dev->ieee80211_ptr;
  2188. if (ntype != NL80211_IFTYPE_MESH_POINT)
  2189. return -EINVAL;
  2190. if (netif_running(dev))
  2191. return -EBUSY;
  2192. wdev_lock(wdev);
  2193. BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
  2194. IEEE80211_MAX_MESH_ID_LEN);
  2195. wdev->mesh_id_up_len =
  2196. nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
  2197. memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
  2198. wdev->mesh_id_up_len);
  2199. wdev_unlock(wdev);
  2200. }
  2201. if (info->attrs[NL80211_ATTR_4ADDR]) {
  2202. params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
  2203. change = true;
  2204. err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
  2205. if (err)
  2206. return err;
  2207. } else {
  2208. params.use_4addr = -1;
  2209. }
  2210. if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
  2211. if (ntype != NL80211_IFTYPE_MONITOR)
  2212. return -EINVAL;
  2213. err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
  2214. &_flags);
  2215. if (err)
  2216. return err;
  2217. flags = &_flags;
  2218. change = true;
  2219. }
  2220. if (flags && (*flags & MONITOR_FLAG_ACTIVE) &&
  2221. !(rdev->wiphy.features & NL80211_FEATURE_ACTIVE_MONITOR))
  2222. return -EOPNOTSUPP;
  2223. if (change)
  2224. err = cfg80211_change_iface(rdev, dev, ntype, flags, &params);
  2225. else
  2226. err = 0;
  2227. if (!err && params.use_4addr != -1)
  2228. dev->ieee80211_ptr->use_4addr = params.use_4addr;
  2229. return err;
  2230. }
  2231. static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
  2232. {
  2233. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2234. struct vif_params params;
  2235. struct wireless_dev *wdev;
  2236. struct sk_buff *msg, *event;
  2237. int err;
  2238. enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
  2239. u32 flags;
  2240. /* to avoid failing a new interface creation due to pending removal */
  2241. cfg80211_destroy_ifaces(rdev);
  2242. memset(&params, 0, sizeof(params));
  2243. if (!info->attrs[NL80211_ATTR_IFNAME])
  2244. return -EINVAL;
  2245. if (info->attrs[NL80211_ATTR_IFTYPE]) {
  2246. type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
  2247. if (type > NL80211_IFTYPE_MAX)
  2248. return -EINVAL;
  2249. }
  2250. if (!rdev->ops->add_virtual_intf ||
  2251. !(rdev->wiphy.interface_modes & (1 << type)))
  2252. return -EOPNOTSUPP;
  2253. if ((type == NL80211_IFTYPE_P2P_DEVICE ||
  2254. rdev->wiphy.features & NL80211_FEATURE_MAC_ON_CREATE) &&
  2255. info->attrs[NL80211_ATTR_MAC]) {
  2256. nla_memcpy(params.macaddr, info->attrs[NL80211_ATTR_MAC],
  2257. ETH_ALEN);
  2258. if (!is_valid_ether_addr(params.macaddr))
  2259. return -EADDRNOTAVAIL;
  2260. }
  2261. if (info->attrs[NL80211_ATTR_4ADDR]) {
  2262. params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
  2263. err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
  2264. if (err)
  2265. return err;
  2266. }
  2267. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  2268. if (!msg)
  2269. return -ENOMEM;
  2270. err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
  2271. info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
  2272. &flags);
  2273. if (!err && (flags & MONITOR_FLAG_ACTIVE) &&
  2274. !(rdev->wiphy.features & NL80211_FEATURE_ACTIVE_MONITOR))
  2275. return -EOPNOTSUPP;
  2276. wdev = rdev_add_virtual_intf(rdev,
  2277. nla_data(info->attrs[NL80211_ATTR_IFNAME]),
  2278. type, err ? NULL : &flags, &params);
  2279. if (WARN_ON(!wdev)) {
  2280. nlmsg_free(msg);
  2281. return -EPROTO;
  2282. } else if (IS_ERR(wdev)) {
  2283. nlmsg_free(msg);
  2284. return PTR_ERR(wdev);
  2285. }
  2286. if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
  2287. wdev->owner_nlportid = info->snd_portid;
  2288. switch (type) {
  2289. case NL80211_IFTYPE_MESH_POINT:
  2290. if (!info->attrs[NL80211_ATTR_MESH_ID])
  2291. break;
  2292. wdev_lock(wdev);
  2293. BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
  2294. IEEE80211_MAX_MESH_ID_LEN);
  2295. wdev->mesh_id_up_len =
  2296. nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
  2297. memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
  2298. wdev->mesh_id_up_len);
  2299. wdev_unlock(wdev);
  2300. break;
  2301. case NL80211_IFTYPE_P2P_DEVICE:
  2302. /*
  2303. * P2P Device doesn't have a netdev, so doesn't go
  2304. * through the netdev notifier and must be added here
  2305. */
  2306. mutex_init(&wdev->mtx);
  2307. INIT_LIST_HEAD(&wdev->event_list);
  2308. spin_lock_init(&wdev->event_lock);
  2309. INIT_LIST_HEAD(&wdev->mgmt_registrations);
  2310. spin_lock_init(&wdev->mgmt_registrations_lock);
  2311. wdev->identifier = ++rdev->wdev_id;
  2312. list_add_rcu(&wdev->list, &rdev->wdev_list);
  2313. rdev->devlist_generation++;
  2314. break;
  2315. default:
  2316. break;
  2317. }
  2318. if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
  2319. rdev, wdev, false) < 0) {
  2320. nlmsg_free(msg);
  2321. return -ENOBUFS;
  2322. }
  2323. event = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  2324. if (event) {
  2325. if (nl80211_send_iface(event, 0, 0, 0,
  2326. rdev, wdev, false) < 0) {
  2327. nlmsg_free(event);
  2328. goto out;
  2329. }
  2330. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
  2331. event, 0, NL80211_MCGRP_CONFIG,
  2332. GFP_KERNEL);
  2333. }
  2334. out:
  2335. return genlmsg_reply(msg, info);
  2336. }
  2337. static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
  2338. {
  2339. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2340. struct wireless_dev *wdev = info->user_ptr[1];
  2341. struct sk_buff *msg;
  2342. int status;
  2343. if (!rdev->ops->del_virtual_intf)
  2344. return -EOPNOTSUPP;
  2345. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  2346. if (msg && nl80211_send_iface(msg, 0, 0, 0, rdev, wdev, true) < 0) {
  2347. nlmsg_free(msg);
  2348. msg = NULL;
  2349. }
  2350. /*
  2351. * If we remove a wireless device without a netdev then clear
  2352. * user_ptr[1] so that nl80211_post_doit won't dereference it
  2353. * to check if it needs to do dev_put(). Otherwise it crashes
  2354. * since the wdev has been freed, unlike with a netdev where
  2355. * we need the dev_put() for the netdev to really be freed.
  2356. */
  2357. if (!wdev->netdev)
  2358. info->user_ptr[1] = NULL;
  2359. status = rdev_del_virtual_intf(rdev, wdev);
  2360. if (status >= 0 && msg)
  2361. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy),
  2362. msg, 0, NL80211_MCGRP_CONFIG,
  2363. GFP_KERNEL);
  2364. else
  2365. nlmsg_free(msg);
  2366. return status;
  2367. }
  2368. static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
  2369. {
  2370. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2371. struct net_device *dev = info->user_ptr[1];
  2372. u16 noack_map;
  2373. if (!info->attrs[NL80211_ATTR_NOACK_MAP])
  2374. return -EINVAL;
  2375. if (!rdev->ops->set_noack_map)
  2376. return -EOPNOTSUPP;
  2377. noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
  2378. return rdev_set_noack_map(rdev, dev, noack_map);
  2379. }
  2380. struct get_key_cookie {
  2381. struct sk_buff *msg;
  2382. int error;
  2383. int idx;
  2384. };
  2385. static void get_key_callback(void *c, struct key_params *params)
  2386. {
  2387. struct nlattr *key;
  2388. struct get_key_cookie *cookie = c;
  2389. if ((params->key &&
  2390. nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
  2391. params->key_len, params->key)) ||
  2392. (params->seq &&
  2393. nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
  2394. params->seq_len, params->seq)) ||
  2395. (params->cipher &&
  2396. nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
  2397. params->cipher)))
  2398. goto nla_put_failure;
  2399. key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
  2400. if (!key)
  2401. goto nla_put_failure;
  2402. if ((params->key &&
  2403. nla_put(cookie->msg, NL80211_KEY_DATA,
  2404. params->key_len, params->key)) ||
  2405. (params->seq &&
  2406. nla_put(cookie->msg, NL80211_KEY_SEQ,
  2407. params->seq_len, params->seq)) ||
  2408. (params->cipher &&
  2409. nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
  2410. params->cipher)))
  2411. goto nla_put_failure;
  2412. if (nla_put_u8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx))
  2413. goto nla_put_failure;
  2414. nla_nest_end(cookie->msg, key);
  2415. return;
  2416. nla_put_failure:
  2417. cookie->error = 1;
  2418. }
  2419. static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
  2420. {
  2421. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2422. int err;
  2423. struct net_device *dev = info->user_ptr[1];
  2424. u8 key_idx = 0;
  2425. const u8 *mac_addr = NULL;
  2426. bool pairwise;
  2427. struct get_key_cookie cookie = {
  2428. .error = 0,
  2429. };
  2430. void *hdr;
  2431. struct sk_buff *msg;
  2432. if (info->attrs[NL80211_ATTR_KEY_IDX])
  2433. key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
  2434. if (key_idx > 5)
  2435. return -EINVAL;
  2436. if (info->attrs[NL80211_ATTR_MAC])
  2437. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  2438. pairwise = !!mac_addr;
  2439. if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
  2440. u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
  2441. if (kt >= NUM_NL80211_KEYTYPES)
  2442. return -EINVAL;
  2443. if (kt != NL80211_KEYTYPE_GROUP &&
  2444. kt != NL80211_KEYTYPE_PAIRWISE)
  2445. return -EINVAL;
  2446. pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
  2447. }
  2448. if (!rdev->ops->get_key)
  2449. return -EOPNOTSUPP;
  2450. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  2451. if (!msg)
  2452. return -ENOMEM;
  2453. hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
  2454. NL80211_CMD_NEW_KEY);
  2455. if (!hdr)
  2456. goto nla_put_failure;
  2457. cookie.msg = msg;
  2458. cookie.idx = key_idx;
  2459. if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
  2460. nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
  2461. goto nla_put_failure;
  2462. if (mac_addr &&
  2463. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
  2464. goto nla_put_failure;
  2465. if (pairwise && mac_addr &&
  2466. !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
  2467. return -ENOENT;
  2468. err = rdev_get_key(rdev, dev, key_idx, pairwise, mac_addr, &cookie,
  2469. get_key_callback);
  2470. if (err)
  2471. goto free_msg;
  2472. if (cookie.error)
  2473. goto nla_put_failure;
  2474. genlmsg_end(msg, hdr);
  2475. return genlmsg_reply(msg, info);
  2476. nla_put_failure:
  2477. err = -ENOBUFS;
  2478. free_msg:
  2479. nlmsg_free(msg);
  2480. return err;
  2481. }
  2482. static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
  2483. {
  2484. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2485. struct key_parse key;
  2486. int err;
  2487. struct net_device *dev = info->user_ptr[1];
  2488. err = nl80211_parse_key(info, &key);
  2489. if (err)
  2490. return err;
  2491. if (key.idx < 0)
  2492. return -EINVAL;
  2493. /* only support setting default key */
  2494. if (!key.def && !key.defmgmt)
  2495. return -EINVAL;
  2496. wdev_lock(dev->ieee80211_ptr);
  2497. if (key.def) {
  2498. if (!rdev->ops->set_default_key) {
  2499. err = -EOPNOTSUPP;
  2500. goto out;
  2501. }
  2502. err = nl80211_key_allowed(dev->ieee80211_ptr);
  2503. if (err)
  2504. goto out;
  2505. err = rdev_set_default_key(rdev, dev, key.idx,
  2506. key.def_uni, key.def_multi);
  2507. if (err)
  2508. goto out;
  2509. #ifdef CONFIG_CFG80211_WEXT
  2510. dev->ieee80211_ptr->wext.default_key = key.idx;
  2511. #endif
  2512. } else {
  2513. if (key.def_uni || !key.def_multi) {
  2514. err = -EINVAL;
  2515. goto out;
  2516. }
  2517. if (!rdev->ops->set_default_mgmt_key) {
  2518. err = -EOPNOTSUPP;
  2519. goto out;
  2520. }
  2521. err = nl80211_key_allowed(dev->ieee80211_ptr);
  2522. if (err)
  2523. goto out;
  2524. err = rdev_set_default_mgmt_key(rdev, dev, key.idx);
  2525. if (err)
  2526. goto out;
  2527. #ifdef CONFIG_CFG80211_WEXT
  2528. dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
  2529. #endif
  2530. }
  2531. out:
  2532. wdev_unlock(dev->ieee80211_ptr);
  2533. return err;
  2534. }
  2535. static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
  2536. {
  2537. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2538. int err;
  2539. struct net_device *dev = info->user_ptr[1];
  2540. struct key_parse key;
  2541. const u8 *mac_addr = NULL;
  2542. err = nl80211_parse_key(info, &key);
  2543. if (err)
  2544. return err;
  2545. if (!key.p.key)
  2546. return -EINVAL;
  2547. if (info->attrs[NL80211_ATTR_MAC])
  2548. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  2549. if (key.type == -1) {
  2550. if (mac_addr)
  2551. key.type = NL80211_KEYTYPE_PAIRWISE;
  2552. else
  2553. key.type = NL80211_KEYTYPE_GROUP;
  2554. }
  2555. /* for now */
  2556. if (key.type != NL80211_KEYTYPE_PAIRWISE &&
  2557. key.type != NL80211_KEYTYPE_GROUP)
  2558. return -EINVAL;
  2559. if (!rdev->ops->add_key)
  2560. return -EOPNOTSUPP;
  2561. if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
  2562. key.type == NL80211_KEYTYPE_PAIRWISE,
  2563. mac_addr))
  2564. return -EINVAL;
  2565. wdev_lock(dev->ieee80211_ptr);
  2566. err = nl80211_key_allowed(dev->ieee80211_ptr);
  2567. if (!err)
  2568. err = rdev_add_key(rdev, dev, key.idx,
  2569. key.type == NL80211_KEYTYPE_PAIRWISE,
  2570. mac_addr, &key.p);
  2571. wdev_unlock(dev->ieee80211_ptr);
  2572. return err;
  2573. }
  2574. static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
  2575. {
  2576. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2577. int err;
  2578. struct net_device *dev = info->user_ptr[1];
  2579. u8 *mac_addr = NULL;
  2580. struct key_parse key;
  2581. err = nl80211_parse_key(info, &key);
  2582. if (err)
  2583. return err;
  2584. if (info->attrs[NL80211_ATTR_MAC])
  2585. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  2586. if (key.type == -1) {
  2587. if (mac_addr)
  2588. key.type = NL80211_KEYTYPE_PAIRWISE;
  2589. else
  2590. key.type = NL80211_KEYTYPE_GROUP;
  2591. }
  2592. /* for now */
  2593. if (key.type != NL80211_KEYTYPE_PAIRWISE &&
  2594. key.type != NL80211_KEYTYPE_GROUP)
  2595. return -EINVAL;
  2596. if (!rdev->ops->del_key)
  2597. return -EOPNOTSUPP;
  2598. wdev_lock(dev->ieee80211_ptr);
  2599. err = nl80211_key_allowed(dev->ieee80211_ptr);
  2600. if (key.type == NL80211_KEYTYPE_PAIRWISE && mac_addr &&
  2601. !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
  2602. err = -ENOENT;
  2603. if (!err)
  2604. err = rdev_del_key(rdev, dev, key.idx,
  2605. key.type == NL80211_KEYTYPE_PAIRWISE,
  2606. mac_addr);
  2607. #ifdef CONFIG_CFG80211_WEXT
  2608. if (!err) {
  2609. if (key.idx == dev->ieee80211_ptr->wext.default_key)
  2610. dev->ieee80211_ptr->wext.default_key = -1;
  2611. else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
  2612. dev->ieee80211_ptr->wext.default_mgmt_key = -1;
  2613. }
  2614. #endif
  2615. wdev_unlock(dev->ieee80211_ptr);
  2616. return err;
  2617. }
  2618. /* This function returns an error or the number of nested attributes */
  2619. static int validate_acl_mac_addrs(struct nlattr *nl_attr)
  2620. {
  2621. struct nlattr *attr;
  2622. int n_entries = 0, tmp;
  2623. nla_for_each_nested(attr, nl_attr, tmp) {
  2624. if (nla_len(attr) != ETH_ALEN)
  2625. return -EINVAL;
  2626. n_entries++;
  2627. }
  2628. return n_entries;
  2629. }
  2630. /*
  2631. * This function parses ACL information and allocates memory for ACL data.
  2632. * On successful return, the calling function is responsible to free the
  2633. * ACL buffer returned by this function.
  2634. */
  2635. static struct cfg80211_acl_data *parse_acl_data(struct wiphy *wiphy,
  2636. struct genl_info *info)
  2637. {
  2638. enum nl80211_acl_policy acl_policy;
  2639. struct nlattr *attr;
  2640. struct cfg80211_acl_data *acl;
  2641. int i = 0, n_entries, tmp;
  2642. if (!wiphy->max_acl_mac_addrs)
  2643. return ERR_PTR(-EOPNOTSUPP);
  2644. if (!info->attrs[NL80211_ATTR_ACL_POLICY])
  2645. return ERR_PTR(-EINVAL);
  2646. acl_policy = nla_get_u32(info->attrs[NL80211_ATTR_ACL_POLICY]);
  2647. if (acl_policy != NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
  2648. acl_policy != NL80211_ACL_POLICY_DENY_UNLESS_LISTED)
  2649. return ERR_PTR(-EINVAL);
  2650. if (!info->attrs[NL80211_ATTR_MAC_ADDRS])
  2651. return ERR_PTR(-EINVAL);
  2652. n_entries = validate_acl_mac_addrs(info->attrs[NL80211_ATTR_MAC_ADDRS]);
  2653. if (n_entries < 0)
  2654. return ERR_PTR(n_entries);
  2655. if (n_entries > wiphy->max_acl_mac_addrs)
  2656. return ERR_PTR(-ENOTSUPP);
  2657. acl = kzalloc(sizeof(*acl) + (sizeof(struct mac_address) * n_entries),
  2658. GFP_KERNEL);
  2659. if (!acl)
  2660. return ERR_PTR(-ENOMEM);
  2661. nla_for_each_nested(attr, info->attrs[NL80211_ATTR_MAC_ADDRS], tmp) {
  2662. memcpy(acl->mac_addrs[i].addr, nla_data(attr), ETH_ALEN);
  2663. i++;
  2664. }
  2665. acl->n_acl_entries = n_entries;
  2666. acl->acl_policy = acl_policy;
  2667. return acl;
  2668. }
  2669. static int nl80211_set_mac_acl(struct sk_buff *skb, struct genl_info *info)
  2670. {
  2671. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2672. struct net_device *dev = info->user_ptr[1];
  2673. struct cfg80211_acl_data *acl;
  2674. int err;
  2675. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
  2676. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
  2677. return -EOPNOTSUPP;
  2678. if (!dev->ieee80211_ptr->beacon_interval)
  2679. return -EINVAL;
  2680. acl = parse_acl_data(&rdev->wiphy, info);
  2681. if (IS_ERR(acl))
  2682. return PTR_ERR(acl);
  2683. err = rdev_set_mac_acl(rdev, dev, acl);
  2684. kfree(acl);
  2685. return err;
  2686. }
  2687. static int nl80211_parse_beacon(struct nlattr *attrs[],
  2688. struct cfg80211_beacon_data *bcn)
  2689. {
  2690. bool haveinfo = false;
  2691. if (!is_valid_ie_attr(attrs[NL80211_ATTR_BEACON_TAIL]) ||
  2692. !is_valid_ie_attr(attrs[NL80211_ATTR_IE]) ||
  2693. !is_valid_ie_attr(attrs[NL80211_ATTR_IE_PROBE_RESP]) ||
  2694. !is_valid_ie_attr(attrs[NL80211_ATTR_IE_ASSOC_RESP]))
  2695. return -EINVAL;
  2696. memset(bcn, 0, sizeof(*bcn));
  2697. if (attrs[NL80211_ATTR_BEACON_HEAD]) {
  2698. bcn->head = nla_data(attrs[NL80211_ATTR_BEACON_HEAD]);
  2699. bcn->head_len = nla_len(attrs[NL80211_ATTR_BEACON_HEAD]);
  2700. if (!bcn->head_len)
  2701. return -EINVAL;
  2702. haveinfo = true;
  2703. }
  2704. if (attrs[NL80211_ATTR_BEACON_TAIL]) {
  2705. bcn->tail = nla_data(attrs[NL80211_ATTR_BEACON_TAIL]);
  2706. bcn->tail_len = nla_len(attrs[NL80211_ATTR_BEACON_TAIL]);
  2707. haveinfo = true;
  2708. }
  2709. if (!haveinfo)
  2710. return -EINVAL;
  2711. if (attrs[NL80211_ATTR_IE]) {
  2712. bcn->beacon_ies = nla_data(attrs[NL80211_ATTR_IE]);
  2713. bcn->beacon_ies_len = nla_len(attrs[NL80211_ATTR_IE]);
  2714. }
  2715. if (attrs[NL80211_ATTR_IE_PROBE_RESP]) {
  2716. bcn->proberesp_ies =
  2717. nla_data(attrs[NL80211_ATTR_IE_PROBE_RESP]);
  2718. bcn->proberesp_ies_len =
  2719. nla_len(attrs[NL80211_ATTR_IE_PROBE_RESP]);
  2720. }
  2721. if (attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
  2722. bcn->assocresp_ies =
  2723. nla_data(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
  2724. bcn->assocresp_ies_len =
  2725. nla_len(attrs[NL80211_ATTR_IE_ASSOC_RESP]);
  2726. }
  2727. if (attrs[NL80211_ATTR_PROBE_RESP]) {
  2728. bcn->probe_resp = nla_data(attrs[NL80211_ATTR_PROBE_RESP]);
  2729. bcn->probe_resp_len = nla_len(attrs[NL80211_ATTR_PROBE_RESP]);
  2730. }
  2731. return 0;
  2732. }
  2733. static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
  2734. struct cfg80211_ap_settings *params)
  2735. {
  2736. struct wireless_dev *wdev;
  2737. bool ret = false;
  2738. list_for_each_entry(wdev, &rdev->wdev_list, list) {
  2739. if (wdev->iftype != NL80211_IFTYPE_AP &&
  2740. wdev->iftype != NL80211_IFTYPE_P2P_GO)
  2741. continue;
  2742. if (!wdev->preset_chandef.chan)
  2743. continue;
  2744. params->chandef = wdev->preset_chandef;
  2745. ret = true;
  2746. break;
  2747. }
  2748. return ret;
  2749. }
  2750. static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
  2751. enum nl80211_auth_type auth_type,
  2752. enum nl80211_commands cmd)
  2753. {
  2754. if (auth_type > NL80211_AUTHTYPE_MAX)
  2755. return false;
  2756. switch (cmd) {
  2757. case NL80211_CMD_AUTHENTICATE:
  2758. if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
  2759. auth_type == NL80211_AUTHTYPE_SAE)
  2760. return false;
  2761. return true;
  2762. case NL80211_CMD_CONNECT:
  2763. case NL80211_CMD_START_AP:
  2764. /* SAE not supported yet */
  2765. if (auth_type == NL80211_AUTHTYPE_SAE)
  2766. return false;
  2767. return true;
  2768. default:
  2769. return false;
  2770. }
  2771. }
  2772. static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
  2773. {
  2774. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2775. struct net_device *dev = info->user_ptr[1];
  2776. struct wireless_dev *wdev = dev->ieee80211_ptr;
  2777. struct cfg80211_ap_settings params;
  2778. int err;
  2779. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
  2780. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
  2781. return -EOPNOTSUPP;
  2782. if (!rdev->ops->start_ap)
  2783. return -EOPNOTSUPP;
  2784. if (wdev->beacon_interval)
  2785. return -EALREADY;
  2786. memset(&params, 0, sizeof(params));
  2787. /* these are required for START_AP */
  2788. if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
  2789. !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
  2790. !info->attrs[NL80211_ATTR_BEACON_HEAD])
  2791. return -EINVAL;
  2792. err = nl80211_parse_beacon(info->attrs, &params.beacon);
  2793. if (err)
  2794. return err;
  2795. params.beacon_interval =
  2796. nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
  2797. params.dtim_period =
  2798. nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
  2799. err = cfg80211_validate_beacon_int(rdev, params.beacon_interval);
  2800. if (err)
  2801. return err;
  2802. /*
  2803. * In theory, some of these attributes should be required here
  2804. * but since they were not used when the command was originally
  2805. * added, keep them optional for old user space programs to let
  2806. * them continue to work with drivers that do not need the
  2807. * additional information -- drivers must check!
  2808. */
  2809. if (info->attrs[NL80211_ATTR_SSID]) {
  2810. params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
  2811. params.ssid_len =
  2812. nla_len(info->attrs[NL80211_ATTR_SSID]);
  2813. if (params.ssid_len == 0 ||
  2814. params.ssid_len > IEEE80211_MAX_SSID_LEN)
  2815. return -EINVAL;
  2816. }
  2817. if (info->attrs[NL80211_ATTR_HIDDEN_SSID]) {
  2818. params.hidden_ssid = nla_get_u32(
  2819. info->attrs[NL80211_ATTR_HIDDEN_SSID]);
  2820. if (params.hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE &&
  2821. params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_LEN &&
  2822. params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_CONTENTS)
  2823. return -EINVAL;
  2824. }
  2825. params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
  2826. if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
  2827. params.auth_type = nla_get_u32(
  2828. info->attrs[NL80211_ATTR_AUTH_TYPE]);
  2829. if (!nl80211_valid_auth_type(rdev, params.auth_type,
  2830. NL80211_CMD_START_AP))
  2831. return -EINVAL;
  2832. } else
  2833. params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
  2834. err = nl80211_crypto_settings(rdev, info, &params.crypto,
  2835. NL80211_MAX_NR_CIPHER_SUITES);
  2836. if (err)
  2837. return err;
  2838. if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
  2839. if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
  2840. return -EOPNOTSUPP;
  2841. params.inactivity_timeout = nla_get_u16(
  2842. info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
  2843. }
  2844. if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
  2845. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
  2846. return -EINVAL;
  2847. params.p2p_ctwindow =
  2848. nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
  2849. if (params.p2p_ctwindow > 127)
  2850. return -EINVAL;
  2851. if (params.p2p_ctwindow != 0 &&
  2852. !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
  2853. return -EINVAL;
  2854. }
  2855. if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
  2856. u8 tmp;
  2857. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
  2858. return -EINVAL;
  2859. tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
  2860. if (tmp > 1)
  2861. return -EINVAL;
  2862. params.p2p_opp_ps = tmp;
  2863. if (params.p2p_opp_ps != 0 &&
  2864. !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
  2865. return -EINVAL;
  2866. }
  2867. if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
  2868. err = nl80211_parse_chandef(rdev, info, &params.chandef);
  2869. if (err)
  2870. return err;
  2871. } else if (wdev->preset_chandef.chan) {
  2872. params.chandef = wdev->preset_chandef;
  2873. } else if (!nl80211_get_ap_channel(rdev, &params))
  2874. return -EINVAL;
  2875. if (!cfg80211_reg_can_beacon(&rdev->wiphy, &params.chandef,
  2876. wdev->iftype))
  2877. return -EINVAL;
  2878. if (info->attrs[NL80211_ATTR_ACL_POLICY]) {
  2879. params.acl = parse_acl_data(&rdev->wiphy, info);
  2880. if (IS_ERR(params.acl))
  2881. return PTR_ERR(params.acl);
  2882. }
  2883. if (info->attrs[NL80211_ATTR_SMPS_MODE]) {
  2884. params.smps_mode =
  2885. nla_get_u8(info->attrs[NL80211_ATTR_SMPS_MODE]);
  2886. switch (params.smps_mode) {
  2887. case NL80211_SMPS_OFF:
  2888. break;
  2889. case NL80211_SMPS_STATIC:
  2890. if (!(rdev->wiphy.features &
  2891. NL80211_FEATURE_STATIC_SMPS))
  2892. return -EINVAL;
  2893. break;
  2894. case NL80211_SMPS_DYNAMIC:
  2895. if (!(rdev->wiphy.features &
  2896. NL80211_FEATURE_DYNAMIC_SMPS))
  2897. return -EINVAL;
  2898. break;
  2899. default:
  2900. return -EINVAL;
  2901. }
  2902. } else {
  2903. params.smps_mode = NL80211_SMPS_OFF;
  2904. }
  2905. wdev_lock(wdev);
  2906. err = rdev_start_ap(rdev, dev, &params);
  2907. if (!err) {
  2908. wdev->preset_chandef = params.chandef;
  2909. wdev->beacon_interval = params.beacon_interval;
  2910. wdev->chandef = params.chandef;
  2911. wdev->ssid_len = params.ssid_len;
  2912. memcpy(wdev->ssid, params.ssid, wdev->ssid_len);
  2913. }
  2914. wdev_unlock(wdev);
  2915. kfree(params.acl);
  2916. return err;
  2917. }
  2918. static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
  2919. {
  2920. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2921. struct net_device *dev = info->user_ptr[1];
  2922. struct wireless_dev *wdev = dev->ieee80211_ptr;
  2923. struct cfg80211_beacon_data params;
  2924. int err;
  2925. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
  2926. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
  2927. return -EOPNOTSUPP;
  2928. if (!rdev->ops->change_beacon)
  2929. return -EOPNOTSUPP;
  2930. if (!wdev->beacon_interval)
  2931. return -EINVAL;
  2932. err = nl80211_parse_beacon(info->attrs, &params);
  2933. if (err)
  2934. return err;
  2935. wdev_lock(wdev);
  2936. err = rdev_change_beacon(rdev, dev, &params);
  2937. wdev_unlock(wdev);
  2938. return err;
  2939. }
  2940. static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
  2941. {
  2942. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  2943. struct net_device *dev = info->user_ptr[1];
  2944. return cfg80211_stop_ap(rdev, dev, false);
  2945. }
  2946. static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
  2947. [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
  2948. [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
  2949. [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
  2950. [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
  2951. [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
  2952. [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
  2953. };
  2954. static int parse_station_flags(struct genl_info *info,
  2955. enum nl80211_iftype iftype,
  2956. struct station_parameters *params)
  2957. {
  2958. struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
  2959. struct nlattr *nla;
  2960. int flag;
  2961. /*
  2962. * Try parsing the new attribute first so userspace
  2963. * can specify both for older kernels.
  2964. */
  2965. nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
  2966. if (nla) {
  2967. struct nl80211_sta_flag_update *sta_flags;
  2968. sta_flags = nla_data(nla);
  2969. params->sta_flags_mask = sta_flags->mask;
  2970. params->sta_flags_set = sta_flags->set;
  2971. params->sta_flags_set &= params->sta_flags_mask;
  2972. if ((params->sta_flags_mask |
  2973. params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
  2974. return -EINVAL;
  2975. return 0;
  2976. }
  2977. /* if present, parse the old attribute */
  2978. nla = info->attrs[NL80211_ATTR_STA_FLAGS];
  2979. if (!nla)
  2980. return 0;
  2981. if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
  2982. nla, sta_flags_policy))
  2983. return -EINVAL;
  2984. /*
  2985. * Only allow certain flags for interface types so that
  2986. * other attributes are silently ignored. Remember that
  2987. * this is backward compatibility code with old userspace
  2988. * and shouldn't be hit in other cases anyway.
  2989. */
  2990. switch (iftype) {
  2991. case NL80211_IFTYPE_AP:
  2992. case NL80211_IFTYPE_AP_VLAN:
  2993. case NL80211_IFTYPE_P2P_GO:
  2994. params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
  2995. BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
  2996. BIT(NL80211_STA_FLAG_WME) |
  2997. BIT(NL80211_STA_FLAG_MFP);
  2998. break;
  2999. case NL80211_IFTYPE_P2P_CLIENT:
  3000. case NL80211_IFTYPE_STATION:
  3001. params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
  3002. BIT(NL80211_STA_FLAG_TDLS_PEER);
  3003. break;
  3004. case NL80211_IFTYPE_MESH_POINT:
  3005. params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
  3006. BIT(NL80211_STA_FLAG_MFP) |
  3007. BIT(NL80211_STA_FLAG_AUTHORIZED);
  3008. default:
  3009. return -EINVAL;
  3010. }
  3011. for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
  3012. if (flags[flag]) {
  3013. params->sta_flags_set |= (1<<flag);
  3014. /* no longer support new API additions in old API */
  3015. if (flag > NL80211_STA_FLAG_MAX_OLD_API)
  3016. return -EINVAL;
  3017. }
  3018. }
  3019. return 0;
  3020. }
  3021. static bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info,
  3022. int attr)
  3023. {
  3024. struct nlattr *rate;
  3025. u32 bitrate;
  3026. u16 bitrate_compat;
  3027. rate = nla_nest_start(msg, attr);
  3028. if (!rate)
  3029. return false;
  3030. /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
  3031. bitrate = cfg80211_calculate_bitrate(info);
  3032. /* report 16-bit bitrate only if we can */
  3033. bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
  3034. if (bitrate > 0 &&
  3035. nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate))
  3036. return false;
  3037. if (bitrate_compat > 0 &&
  3038. nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat))
  3039. return false;
  3040. if (info->flags & RATE_INFO_FLAGS_MCS) {
  3041. if (nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs))
  3042. return false;
  3043. if (info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH &&
  3044. nla_put_flag(msg, NL80211_RATE_INFO_40_MHZ_WIDTH))
  3045. return false;
  3046. if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
  3047. nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
  3048. return false;
  3049. } else if (info->flags & RATE_INFO_FLAGS_VHT_MCS) {
  3050. if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_MCS, info->mcs))
  3051. return false;
  3052. if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_NSS, info->nss))
  3053. return false;
  3054. if (info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH &&
  3055. nla_put_flag(msg, NL80211_RATE_INFO_40_MHZ_WIDTH))
  3056. return false;
  3057. if (info->flags & RATE_INFO_FLAGS_80_MHZ_WIDTH &&
  3058. nla_put_flag(msg, NL80211_RATE_INFO_80_MHZ_WIDTH))
  3059. return false;
  3060. if (info->flags & RATE_INFO_FLAGS_80P80_MHZ_WIDTH &&
  3061. nla_put_flag(msg, NL80211_RATE_INFO_80P80_MHZ_WIDTH))
  3062. return false;
  3063. if (info->flags & RATE_INFO_FLAGS_160_MHZ_WIDTH &&
  3064. nla_put_flag(msg, NL80211_RATE_INFO_160_MHZ_WIDTH))
  3065. return false;
  3066. if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
  3067. nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
  3068. return false;
  3069. }
  3070. nla_nest_end(msg, rate);
  3071. return true;
  3072. }
  3073. static bool nl80211_put_signal(struct sk_buff *msg, u8 mask, s8 *signal,
  3074. int id)
  3075. {
  3076. void *attr;
  3077. int i = 0;
  3078. if (!mask)
  3079. return true;
  3080. attr = nla_nest_start(msg, id);
  3081. if (!attr)
  3082. return false;
  3083. for (i = 0; i < IEEE80211_MAX_CHAINS; i++) {
  3084. if (!(mask & BIT(i)))
  3085. continue;
  3086. if (nla_put_u8(msg, i, signal[i]))
  3087. return false;
  3088. }
  3089. nla_nest_end(msg, attr);
  3090. return true;
  3091. }
  3092. static int nl80211_send_station(struct sk_buff *msg, u32 cmd, u32 portid,
  3093. u32 seq, int flags,
  3094. struct cfg80211_registered_device *rdev,
  3095. struct net_device *dev,
  3096. const u8 *mac_addr, struct station_info *sinfo)
  3097. {
  3098. void *hdr;
  3099. struct nlattr *sinfoattr, *bss_param;
  3100. hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
  3101. if (!hdr)
  3102. return -1;
  3103. if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
  3104. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
  3105. nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
  3106. goto nla_put_failure;
  3107. sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
  3108. if (!sinfoattr)
  3109. goto nla_put_failure;
  3110. #define PUT_SINFO(attr, memb, type) do { \
  3111. if (sinfo->filled & BIT(NL80211_STA_INFO_ ## attr) && \
  3112. nla_put_ ## type(msg, NL80211_STA_INFO_ ## attr, \
  3113. sinfo->memb)) \
  3114. goto nla_put_failure; \
  3115. } while (0)
  3116. PUT_SINFO(CONNECTED_TIME, connected_time, u32);
  3117. PUT_SINFO(INACTIVE_TIME, inactive_time, u32);
  3118. if (sinfo->filled & (BIT(NL80211_STA_INFO_RX_BYTES) |
  3119. BIT(NL80211_STA_INFO_RX_BYTES64)) &&
  3120. nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
  3121. (u32)sinfo->rx_bytes))
  3122. goto nla_put_failure;
  3123. if (sinfo->filled & (BIT(NL80211_STA_INFO_TX_BYTES) |
  3124. BIT(NL80211_STA_INFO_TX_BYTES64)) &&
  3125. nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
  3126. (u32)sinfo->tx_bytes))
  3127. goto nla_put_failure;
  3128. PUT_SINFO(RX_BYTES64, rx_bytes, u64);
  3129. PUT_SINFO(TX_BYTES64, tx_bytes, u64);
  3130. PUT_SINFO(LLID, llid, u16);
  3131. PUT_SINFO(PLID, plid, u16);
  3132. PUT_SINFO(PLINK_STATE, plink_state, u8);
  3133. switch (rdev->wiphy.signal_type) {
  3134. case CFG80211_SIGNAL_TYPE_MBM:
  3135. PUT_SINFO(SIGNAL, signal, u8);
  3136. PUT_SINFO(SIGNAL_AVG, signal_avg, u8);
  3137. break;
  3138. default:
  3139. break;
  3140. }
  3141. if (sinfo->filled & BIT(NL80211_STA_INFO_CHAIN_SIGNAL)) {
  3142. if (!nl80211_put_signal(msg, sinfo->chains,
  3143. sinfo->chain_signal,
  3144. NL80211_STA_INFO_CHAIN_SIGNAL))
  3145. goto nla_put_failure;
  3146. }
  3147. if (sinfo->filled & BIT(NL80211_STA_INFO_CHAIN_SIGNAL_AVG)) {
  3148. if (!nl80211_put_signal(msg, sinfo->chains,
  3149. sinfo->chain_signal_avg,
  3150. NL80211_STA_INFO_CHAIN_SIGNAL_AVG))
  3151. goto nla_put_failure;
  3152. }
  3153. if (sinfo->filled & BIT(NL80211_STA_INFO_TX_BITRATE)) {
  3154. if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
  3155. NL80211_STA_INFO_TX_BITRATE))
  3156. goto nla_put_failure;
  3157. }
  3158. if (sinfo->filled & BIT(NL80211_STA_INFO_RX_BITRATE)) {
  3159. if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
  3160. NL80211_STA_INFO_RX_BITRATE))
  3161. goto nla_put_failure;
  3162. }
  3163. PUT_SINFO(RX_PACKETS, rx_packets, u32);
  3164. PUT_SINFO(TX_PACKETS, tx_packets, u32);
  3165. PUT_SINFO(TX_RETRIES, tx_retries, u32);
  3166. PUT_SINFO(TX_FAILED, tx_failed, u32);
  3167. PUT_SINFO(EXPECTED_THROUGHPUT, expected_throughput, u32);
  3168. PUT_SINFO(BEACON_LOSS, beacon_loss_count, u32);
  3169. PUT_SINFO(LOCAL_PM, local_pm, u32);
  3170. PUT_SINFO(PEER_PM, peer_pm, u32);
  3171. PUT_SINFO(NONPEER_PM, nonpeer_pm, u32);
  3172. if (sinfo->filled & BIT(NL80211_STA_INFO_BSS_PARAM)) {
  3173. bss_param = nla_nest_start(msg, NL80211_STA_INFO_BSS_PARAM);
  3174. if (!bss_param)
  3175. goto nla_put_failure;
  3176. if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
  3177. nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
  3178. ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
  3179. nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
  3180. ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
  3181. nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
  3182. nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
  3183. sinfo->bss_param.dtim_period) ||
  3184. nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
  3185. sinfo->bss_param.beacon_interval))
  3186. goto nla_put_failure;
  3187. nla_nest_end(msg, bss_param);
  3188. }
  3189. if ((sinfo->filled & BIT(NL80211_STA_INFO_STA_FLAGS)) &&
  3190. nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
  3191. sizeof(struct nl80211_sta_flag_update),
  3192. &sinfo->sta_flags))
  3193. goto nla_put_failure;
  3194. PUT_SINFO(T_OFFSET, t_offset, u64);
  3195. PUT_SINFO(RX_DROP_MISC, rx_dropped_misc, u64);
  3196. PUT_SINFO(BEACON_RX, rx_beacon, u64);
  3197. PUT_SINFO(BEACON_SIGNAL_AVG, rx_beacon_signal_avg, u8);
  3198. #undef PUT_SINFO
  3199. if (sinfo->filled & BIT(NL80211_STA_INFO_TID_STATS)) {
  3200. struct nlattr *tidsattr;
  3201. int tid;
  3202. tidsattr = nla_nest_start(msg, NL80211_STA_INFO_TID_STATS);
  3203. if (!tidsattr)
  3204. goto nla_put_failure;
  3205. for (tid = 0; tid < IEEE80211_NUM_TIDS + 1; tid++) {
  3206. struct cfg80211_tid_stats *tidstats;
  3207. struct nlattr *tidattr;
  3208. tidstats = &sinfo->pertid[tid];
  3209. if (!tidstats->filled)
  3210. continue;
  3211. tidattr = nla_nest_start(msg, tid + 1);
  3212. if (!tidattr)
  3213. goto nla_put_failure;
  3214. #define PUT_TIDVAL(attr, memb, type) do { \
  3215. if (tidstats->filled & BIT(NL80211_TID_STATS_ ## attr) && \
  3216. nla_put_ ## type(msg, NL80211_TID_STATS_ ## attr, \
  3217. tidstats->memb)) \
  3218. goto nla_put_failure; \
  3219. } while (0)
  3220. PUT_TIDVAL(RX_MSDU, rx_msdu, u64);
  3221. PUT_TIDVAL(TX_MSDU, tx_msdu, u64);
  3222. PUT_TIDVAL(TX_MSDU_RETRIES, tx_msdu_retries, u64);
  3223. PUT_TIDVAL(TX_MSDU_FAILED, tx_msdu_failed, u64);
  3224. #undef PUT_TIDVAL
  3225. nla_nest_end(msg, tidattr);
  3226. }
  3227. nla_nest_end(msg, tidsattr);
  3228. }
  3229. nla_nest_end(msg, sinfoattr);
  3230. if (sinfo->assoc_req_ies_len &&
  3231. nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
  3232. sinfo->assoc_req_ies))
  3233. goto nla_put_failure;
  3234. return genlmsg_end(msg, hdr);
  3235. nla_put_failure:
  3236. genlmsg_cancel(msg, hdr);
  3237. return -EMSGSIZE;
  3238. }
  3239. static int nl80211_dump_station(struct sk_buff *skb,
  3240. struct netlink_callback *cb)
  3241. {
  3242. struct station_info sinfo;
  3243. struct cfg80211_registered_device *rdev;
  3244. struct wireless_dev *wdev;
  3245. u8 mac_addr[ETH_ALEN];
  3246. int sta_idx = cb->args[2];
  3247. int err;
  3248. err = nl80211_prepare_wdev_dump(skb, cb, &rdev, &wdev);
  3249. if (err)
  3250. return err;
  3251. if (!wdev->netdev) {
  3252. err = -EINVAL;
  3253. goto out_err;
  3254. }
  3255. if (!rdev->ops->dump_station) {
  3256. err = -EOPNOTSUPP;
  3257. goto out_err;
  3258. }
  3259. while (1) {
  3260. memset(&sinfo, 0, sizeof(sinfo));
  3261. err = rdev_dump_station(rdev, wdev->netdev, sta_idx,
  3262. mac_addr, &sinfo);
  3263. if (err == -ENOENT)
  3264. break;
  3265. if (err)
  3266. goto out_err;
  3267. if (nl80211_send_station(skb, NL80211_CMD_NEW_STATION,
  3268. NETLINK_CB(cb->skb).portid,
  3269. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  3270. rdev, wdev->netdev, mac_addr,
  3271. &sinfo) < 0)
  3272. goto out;
  3273. sta_idx++;
  3274. }
  3275. out:
  3276. cb->args[2] = sta_idx;
  3277. err = skb->len;
  3278. out_err:
  3279. nl80211_finish_wdev_dump(rdev);
  3280. return err;
  3281. }
  3282. static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
  3283. {
  3284. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  3285. struct net_device *dev = info->user_ptr[1];
  3286. struct station_info sinfo;
  3287. struct sk_buff *msg;
  3288. u8 *mac_addr = NULL;
  3289. int err;
  3290. memset(&sinfo, 0, sizeof(sinfo));
  3291. if (!info->attrs[NL80211_ATTR_MAC])
  3292. return -EINVAL;
  3293. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3294. if (!rdev->ops->get_station)
  3295. return -EOPNOTSUPP;
  3296. err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
  3297. if (err)
  3298. return err;
  3299. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  3300. if (!msg)
  3301. return -ENOMEM;
  3302. if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION,
  3303. info->snd_portid, info->snd_seq, 0,
  3304. rdev, dev, mac_addr, &sinfo) < 0) {
  3305. nlmsg_free(msg);
  3306. return -ENOBUFS;
  3307. }
  3308. return genlmsg_reply(msg, info);
  3309. }
  3310. int cfg80211_check_station_change(struct wiphy *wiphy,
  3311. struct station_parameters *params,
  3312. enum cfg80211_station_type statype)
  3313. {
  3314. if (params->listen_interval != -1)
  3315. return -EINVAL;
  3316. if (params->aid &&
  3317. !(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
  3318. return -EINVAL;
  3319. /* When you run into this, adjust the code below for the new flag */
  3320. BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
  3321. switch (statype) {
  3322. case CFG80211_STA_MESH_PEER_KERNEL:
  3323. case CFG80211_STA_MESH_PEER_USER:
  3324. /*
  3325. * No ignoring the TDLS flag here -- the userspace mesh
  3326. * code doesn't have the bug of including TDLS in the
  3327. * mask everywhere.
  3328. */
  3329. if (params->sta_flags_mask &
  3330. ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
  3331. BIT(NL80211_STA_FLAG_MFP) |
  3332. BIT(NL80211_STA_FLAG_AUTHORIZED)))
  3333. return -EINVAL;
  3334. break;
  3335. case CFG80211_STA_TDLS_PEER_SETUP:
  3336. case CFG80211_STA_TDLS_PEER_ACTIVE:
  3337. if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
  3338. return -EINVAL;
  3339. /* ignore since it can't change */
  3340. params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
  3341. break;
  3342. default:
  3343. /* disallow mesh-specific things */
  3344. if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
  3345. return -EINVAL;
  3346. if (params->local_pm)
  3347. return -EINVAL;
  3348. if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
  3349. return -EINVAL;
  3350. }
  3351. if (statype != CFG80211_STA_TDLS_PEER_SETUP &&
  3352. statype != CFG80211_STA_TDLS_PEER_ACTIVE) {
  3353. /* TDLS can't be set, ... */
  3354. if (params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
  3355. return -EINVAL;
  3356. /*
  3357. * ... but don't bother the driver with it. This works around
  3358. * a hostapd/wpa_supplicant issue -- it always includes the
  3359. * TLDS_PEER flag in the mask even for AP mode.
  3360. */
  3361. params->sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
  3362. }
  3363. if (statype != CFG80211_STA_TDLS_PEER_SETUP) {
  3364. /* reject other things that can't change */
  3365. if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD)
  3366. return -EINVAL;
  3367. if (params->sta_modify_mask & STATION_PARAM_APPLY_CAPABILITY)
  3368. return -EINVAL;
  3369. if (params->supported_rates)
  3370. return -EINVAL;
  3371. if (params->ext_capab || params->ht_capa || params->vht_capa)
  3372. return -EINVAL;
  3373. }
  3374. if (statype != CFG80211_STA_AP_CLIENT) {
  3375. if (params->vlan)
  3376. return -EINVAL;
  3377. }
  3378. switch (statype) {
  3379. case CFG80211_STA_AP_MLME_CLIENT:
  3380. /* Use this only for authorizing/unauthorizing a station */
  3381. if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
  3382. return -EOPNOTSUPP;
  3383. break;
  3384. case CFG80211_STA_AP_CLIENT:
  3385. /* accept only the listed bits */
  3386. if (params->sta_flags_mask &
  3387. ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
  3388. BIT(NL80211_STA_FLAG_AUTHENTICATED) |
  3389. BIT(NL80211_STA_FLAG_ASSOCIATED) |
  3390. BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
  3391. BIT(NL80211_STA_FLAG_WME) |
  3392. BIT(NL80211_STA_FLAG_MFP)))
  3393. return -EINVAL;
  3394. /* but authenticated/associated only if driver handles it */
  3395. if (!(wiphy->features & NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
  3396. params->sta_flags_mask &
  3397. (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
  3398. BIT(NL80211_STA_FLAG_ASSOCIATED)))
  3399. return -EINVAL;
  3400. break;
  3401. case CFG80211_STA_IBSS:
  3402. case CFG80211_STA_AP_STA:
  3403. /* reject any changes other than AUTHORIZED */
  3404. if (params->sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
  3405. return -EINVAL;
  3406. break;
  3407. case CFG80211_STA_TDLS_PEER_SETUP:
  3408. /* reject any changes other than AUTHORIZED or WME */
  3409. if (params->sta_flags_mask & ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
  3410. BIT(NL80211_STA_FLAG_WME)))
  3411. return -EINVAL;
  3412. /* force (at least) rates when authorizing */
  3413. if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED) &&
  3414. !params->supported_rates)
  3415. return -EINVAL;
  3416. break;
  3417. case CFG80211_STA_TDLS_PEER_ACTIVE:
  3418. /* reject any changes */
  3419. return -EINVAL;
  3420. case CFG80211_STA_MESH_PEER_KERNEL:
  3421. if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE)
  3422. return -EINVAL;
  3423. break;
  3424. case CFG80211_STA_MESH_PEER_USER:
  3425. if (params->plink_action != NL80211_PLINK_ACTION_NO_ACTION)
  3426. return -EINVAL;
  3427. break;
  3428. }
  3429. return 0;
  3430. }
  3431. EXPORT_SYMBOL(cfg80211_check_station_change);
  3432. /*
  3433. * Get vlan interface making sure it is running and on the right wiphy.
  3434. */
  3435. static struct net_device *get_vlan(struct genl_info *info,
  3436. struct cfg80211_registered_device *rdev)
  3437. {
  3438. struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
  3439. struct net_device *v;
  3440. int ret;
  3441. if (!vlanattr)
  3442. return NULL;
  3443. v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
  3444. if (!v)
  3445. return ERR_PTR(-ENODEV);
  3446. if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
  3447. ret = -EINVAL;
  3448. goto error;
  3449. }
  3450. if (v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
  3451. v->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
  3452. v->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
  3453. ret = -EINVAL;
  3454. goto error;
  3455. }
  3456. if (!netif_running(v)) {
  3457. ret = -ENETDOWN;
  3458. goto error;
  3459. }
  3460. return v;
  3461. error:
  3462. dev_put(v);
  3463. return ERR_PTR(ret);
  3464. }
  3465. static const struct nla_policy
  3466. nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] = {
  3467. [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
  3468. [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
  3469. };
  3470. static int nl80211_parse_sta_wme(struct genl_info *info,
  3471. struct station_parameters *params)
  3472. {
  3473. struct nlattr *tb[NL80211_STA_WME_MAX + 1];
  3474. struct nlattr *nla;
  3475. int err;
  3476. /* parse WME attributes if present */
  3477. if (!info->attrs[NL80211_ATTR_STA_WME])
  3478. return 0;
  3479. nla = info->attrs[NL80211_ATTR_STA_WME];
  3480. err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
  3481. nl80211_sta_wme_policy);
  3482. if (err)
  3483. return err;
  3484. if (tb[NL80211_STA_WME_UAPSD_QUEUES])
  3485. params->uapsd_queues = nla_get_u8(
  3486. tb[NL80211_STA_WME_UAPSD_QUEUES]);
  3487. if (params->uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
  3488. return -EINVAL;
  3489. if (tb[NL80211_STA_WME_MAX_SP])
  3490. params->max_sp = nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
  3491. if (params->max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
  3492. return -EINVAL;
  3493. params->sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
  3494. return 0;
  3495. }
  3496. static int nl80211_parse_sta_channel_info(struct genl_info *info,
  3497. struct station_parameters *params)
  3498. {
  3499. if (info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]) {
  3500. params->supported_channels =
  3501. nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
  3502. params->supported_channels_len =
  3503. nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_CHANNELS]);
  3504. /*
  3505. * Need to include at least one (first channel, number of
  3506. * channels) tuple for each subband, and must have proper
  3507. * tuples for the rest of the data as well.
  3508. */
  3509. if (params->supported_channels_len < 2)
  3510. return -EINVAL;
  3511. if (params->supported_channels_len % 2)
  3512. return -EINVAL;
  3513. }
  3514. if (info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]) {
  3515. params->supported_oper_classes =
  3516. nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
  3517. params->supported_oper_classes_len =
  3518. nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES]);
  3519. /*
  3520. * The value of the Length field of the Supported Operating
  3521. * Classes element is between 2 and 253.
  3522. */
  3523. if (params->supported_oper_classes_len < 2 ||
  3524. params->supported_oper_classes_len > 253)
  3525. return -EINVAL;
  3526. }
  3527. return 0;
  3528. }
  3529. static int nl80211_set_station_tdls(struct genl_info *info,
  3530. struct station_parameters *params)
  3531. {
  3532. int err;
  3533. /* Dummy STA entry gets updated once the peer capabilities are known */
  3534. if (info->attrs[NL80211_ATTR_PEER_AID])
  3535. params->aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
  3536. if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
  3537. params->ht_capa =
  3538. nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
  3539. if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
  3540. params->vht_capa =
  3541. nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
  3542. err = nl80211_parse_sta_channel_info(info, params);
  3543. if (err)
  3544. return err;
  3545. return nl80211_parse_sta_wme(info, params);
  3546. }
  3547. static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
  3548. {
  3549. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  3550. struct net_device *dev = info->user_ptr[1];
  3551. struct station_parameters params;
  3552. u8 *mac_addr;
  3553. int err;
  3554. memset(&params, 0, sizeof(params));
  3555. params.listen_interval = -1;
  3556. if (!rdev->ops->change_station)
  3557. return -EOPNOTSUPP;
  3558. if (info->attrs[NL80211_ATTR_STA_AID])
  3559. return -EINVAL;
  3560. if (!info->attrs[NL80211_ATTR_MAC])
  3561. return -EINVAL;
  3562. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3563. if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
  3564. params.supported_rates =
  3565. nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
  3566. params.supported_rates_len =
  3567. nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
  3568. }
  3569. if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
  3570. params.capability =
  3571. nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
  3572. params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
  3573. }
  3574. if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
  3575. params.ext_capab =
  3576. nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
  3577. params.ext_capab_len =
  3578. nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
  3579. }
  3580. if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
  3581. return -EINVAL;
  3582. if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
  3583. return -EINVAL;
  3584. if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION]) {
  3585. params.plink_action =
  3586. nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
  3587. if (params.plink_action >= NUM_NL80211_PLINK_ACTIONS)
  3588. return -EINVAL;
  3589. }
  3590. if (info->attrs[NL80211_ATTR_STA_PLINK_STATE]) {
  3591. params.plink_state =
  3592. nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
  3593. if (params.plink_state >= NUM_NL80211_PLINK_STATES)
  3594. return -EINVAL;
  3595. params.sta_modify_mask |= STATION_PARAM_APPLY_PLINK_STATE;
  3596. }
  3597. if (info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]) {
  3598. enum nl80211_mesh_power_mode pm = nla_get_u32(
  3599. info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]);
  3600. if (pm <= NL80211_MESH_POWER_UNKNOWN ||
  3601. pm > NL80211_MESH_POWER_MAX)
  3602. return -EINVAL;
  3603. params.local_pm = pm;
  3604. }
  3605. /* Include parameters for TDLS peer (will check later) */
  3606. err = nl80211_set_station_tdls(info, &params);
  3607. if (err)
  3608. return err;
  3609. params.vlan = get_vlan(info, rdev);
  3610. if (IS_ERR(params.vlan))
  3611. return PTR_ERR(params.vlan);
  3612. switch (dev->ieee80211_ptr->iftype) {
  3613. case NL80211_IFTYPE_AP:
  3614. case NL80211_IFTYPE_AP_VLAN:
  3615. case NL80211_IFTYPE_P2P_GO:
  3616. case NL80211_IFTYPE_P2P_CLIENT:
  3617. case NL80211_IFTYPE_STATION:
  3618. case NL80211_IFTYPE_ADHOC:
  3619. case NL80211_IFTYPE_MESH_POINT:
  3620. break;
  3621. default:
  3622. err = -EOPNOTSUPP;
  3623. goto out_put_vlan;
  3624. }
  3625. /* driver will call cfg80211_check_station_change() */
  3626. err = rdev_change_station(rdev, dev, mac_addr, &params);
  3627. out_put_vlan:
  3628. if (params.vlan)
  3629. dev_put(params.vlan);
  3630. return err;
  3631. }
  3632. static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
  3633. {
  3634. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  3635. int err;
  3636. struct net_device *dev = info->user_ptr[1];
  3637. struct station_parameters params;
  3638. u8 *mac_addr = NULL;
  3639. memset(&params, 0, sizeof(params));
  3640. if (!rdev->ops->add_station)
  3641. return -EOPNOTSUPP;
  3642. if (!info->attrs[NL80211_ATTR_MAC])
  3643. return -EINVAL;
  3644. if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
  3645. return -EINVAL;
  3646. if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
  3647. return -EINVAL;
  3648. if (!info->attrs[NL80211_ATTR_STA_AID] &&
  3649. !info->attrs[NL80211_ATTR_PEER_AID])
  3650. return -EINVAL;
  3651. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3652. params.supported_rates =
  3653. nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
  3654. params.supported_rates_len =
  3655. nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
  3656. params.listen_interval =
  3657. nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
  3658. if (info->attrs[NL80211_ATTR_PEER_AID])
  3659. params.aid = nla_get_u16(info->attrs[NL80211_ATTR_PEER_AID]);
  3660. else
  3661. params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
  3662. if (!params.aid || params.aid > IEEE80211_MAX_AID)
  3663. return -EINVAL;
  3664. if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
  3665. params.capability =
  3666. nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
  3667. params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
  3668. }
  3669. if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
  3670. params.ext_capab =
  3671. nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
  3672. params.ext_capab_len =
  3673. nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
  3674. }
  3675. if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
  3676. params.ht_capa =
  3677. nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
  3678. if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
  3679. params.vht_capa =
  3680. nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
  3681. if (info->attrs[NL80211_ATTR_OPMODE_NOTIF]) {
  3682. params.opmode_notif_used = true;
  3683. params.opmode_notif =
  3684. nla_get_u8(info->attrs[NL80211_ATTR_OPMODE_NOTIF]);
  3685. }
  3686. if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION]) {
  3687. params.plink_action =
  3688. nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
  3689. if (params.plink_action >= NUM_NL80211_PLINK_ACTIONS)
  3690. return -EINVAL;
  3691. }
  3692. err = nl80211_parse_sta_channel_info(info, &params);
  3693. if (err)
  3694. return err;
  3695. err = nl80211_parse_sta_wme(info, &params);
  3696. if (err)
  3697. return err;
  3698. if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
  3699. return -EINVAL;
  3700. /* When you run into this, adjust the code below for the new flag */
  3701. BUILD_BUG_ON(NL80211_STA_FLAG_MAX != 7);
  3702. switch (dev->ieee80211_ptr->iftype) {
  3703. case NL80211_IFTYPE_AP:
  3704. case NL80211_IFTYPE_AP_VLAN:
  3705. case NL80211_IFTYPE_P2P_GO:
  3706. /* ignore WME attributes if iface/sta is not capable */
  3707. if (!(rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) ||
  3708. !(params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)))
  3709. params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
  3710. /* TDLS peers cannot be added */
  3711. if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
  3712. info->attrs[NL80211_ATTR_PEER_AID])
  3713. return -EINVAL;
  3714. /* but don't bother the driver with it */
  3715. params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
  3716. /* allow authenticated/associated only if driver handles it */
  3717. if (!(rdev->wiphy.features &
  3718. NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
  3719. params.sta_flags_mask &
  3720. (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
  3721. BIT(NL80211_STA_FLAG_ASSOCIATED)))
  3722. return -EINVAL;
  3723. /* must be last in here for error handling */
  3724. params.vlan = get_vlan(info, rdev);
  3725. if (IS_ERR(params.vlan))
  3726. return PTR_ERR(params.vlan);
  3727. break;
  3728. case NL80211_IFTYPE_MESH_POINT:
  3729. /* ignore uAPSD data */
  3730. params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
  3731. /* associated is disallowed */
  3732. if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
  3733. return -EINVAL;
  3734. /* TDLS peers cannot be added */
  3735. if ((params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)) ||
  3736. info->attrs[NL80211_ATTR_PEER_AID])
  3737. return -EINVAL;
  3738. break;
  3739. case NL80211_IFTYPE_STATION:
  3740. case NL80211_IFTYPE_P2P_CLIENT:
  3741. /* ignore uAPSD data */
  3742. params.sta_modify_mask &= ~STATION_PARAM_APPLY_UAPSD;
  3743. /* these are disallowed */
  3744. if (params.sta_flags_mask &
  3745. (BIT(NL80211_STA_FLAG_ASSOCIATED) |
  3746. BIT(NL80211_STA_FLAG_AUTHENTICATED)))
  3747. return -EINVAL;
  3748. /* Only TDLS peers can be added */
  3749. if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
  3750. return -EINVAL;
  3751. /* Can only add if TDLS ... */
  3752. if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
  3753. return -EOPNOTSUPP;
  3754. /* ... with external setup is supported */
  3755. if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
  3756. return -EOPNOTSUPP;
  3757. /*
  3758. * Older wpa_supplicant versions always mark the TDLS peer
  3759. * as authorized, but it shouldn't yet be.
  3760. */
  3761. params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_AUTHORIZED);
  3762. break;
  3763. default:
  3764. return -EOPNOTSUPP;
  3765. }
  3766. /* be aware of params.vlan when changing code here */
  3767. err = rdev_add_station(rdev, dev, mac_addr, &params);
  3768. if (params.vlan)
  3769. dev_put(params.vlan);
  3770. return err;
  3771. }
  3772. static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
  3773. {
  3774. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  3775. struct net_device *dev = info->user_ptr[1];
  3776. struct station_del_parameters params;
  3777. memset(&params, 0, sizeof(params));
  3778. if (info->attrs[NL80211_ATTR_MAC])
  3779. params.mac = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3780. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
  3781. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
  3782. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
  3783. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
  3784. return -EINVAL;
  3785. if (!rdev->ops->del_station)
  3786. return -EOPNOTSUPP;
  3787. if (info->attrs[NL80211_ATTR_MGMT_SUBTYPE]) {
  3788. params.subtype =
  3789. nla_get_u8(info->attrs[NL80211_ATTR_MGMT_SUBTYPE]);
  3790. if (params.subtype != IEEE80211_STYPE_DISASSOC >> 4 &&
  3791. params.subtype != IEEE80211_STYPE_DEAUTH >> 4)
  3792. return -EINVAL;
  3793. } else {
  3794. /* Default to Deauthentication frame */
  3795. params.subtype = IEEE80211_STYPE_DEAUTH >> 4;
  3796. }
  3797. if (info->attrs[NL80211_ATTR_REASON_CODE]) {
  3798. params.reason_code =
  3799. nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
  3800. if (params.reason_code == 0)
  3801. return -EINVAL; /* 0 is reserved */
  3802. } else {
  3803. /* Default to reason code 2 */
  3804. params.reason_code = WLAN_REASON_PREV_AUTH_NOT_VALID;
  3805. }
  3806. return rdev_del_station(rdev, dev, &params);
  3807. }
  3808. static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
  3809. int flags, struct net_device *dev,
  3810. u8 *dst, u8 *next_hop,
  3811. struct mpath_info *pinfo)
  3812. {
  3813. void *hdr;
  3814. struct nlattr *pinfoattr;
  3815. hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_MPATH);
  3816. if (!hdr)
  3817. return -1;
  3818. if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
  3819. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
  3820. nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
  3821. nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
  3822. goto nla_put_failure;
  3823. pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
  3824. if (!pinfoattr)
  3825. goto nla_put_failure;
  3826. if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
  3827. nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
  3828. pinfo->frame_qlen))
  3829. goto nla_put_failure;
  3830. if (((pinfo->filled & MPATH_INFO_SN) &&
  3831. nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
  3832. ((pinfo->filled & MPATH_INFO_METRIC) &&
  3833. nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
  3834. pinfo->metric)) ||
  3835. ((pinfo->filled & MPATH_INFO_EXPTIME) &&
  3836. nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
  3837. pinfo->exptime)) ||
  3838. ((pinfo->filled & MPATH_INFO_FLAGS) &&
  3839. nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
  3840. pinfo->flags)) ||
  3841. ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
  3842. nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
  3843. pinfo->discovery_timeout)) ||
  3844. ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
  3845. nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
  3846. pinfo->discovery_retries)))
  3847. goto nla_put_failure;
  3848. nla_nest_end(msg, pinfoattr);
  3849. return genlmsg_end(msg, hdr);
  3850. nla_put_failure:
  3851. genlmsg_cancel(msg, hdr);
  3852. return -EMSGSIZE;
  3853. }
  3854. static int nl80211_dump_mpath(struct sk_buff *skb,
  3855. struct netlink_callback *cb)
  3856. {
  3857. struct mpath_info pinfo;
  3858. struct cfg80211_registered_device *rdev;
  3859. struct wireless_dev *wdev;
  3860. u8 dst[ETH_ALEN];
  3861. u8 next_hop[ETH_ALEN];
  3862. int path_idx = cb->args[2];
  3863. int err;
  3864. err = nl80211_prepare_wdev_dump(skb, cb, &rdev, &wdev);
  3865. if (err)
  3866. return err;
  3867. if (!rdev->ops->dump_mpath) {
  3868. err = -EOPNOTSUPP;
  3869. goto out_err;
  3870. }
  3871. if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
  3872. err = -EOPNOTSUPP;
  3873. goto out_err;
  3874. }
  3875. while (1) {
  3876. err = rdev_dump_mpath(rdev, wdev->netdev, path_idx, dst,
  3877. next_hop, &pinfo);
  3878. if (err == -ENOENT)
  3879. break;
  3880. if (err)
  3881. goto out_err;
  3882. if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
  3883. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  3884. wdev->netdev, dst, next_hop,
  3885. &pinfo) < 0)
  3886. goto out;
  3887. path_idx++;
  3888. }
  3889. out:
  3890. cb->args[2] = path_idx;
  3891. err = skb->len;
  3892. out_err:
  3893. nl80211_finish_wdev_dump(rdev);
  3894. return err;
  3895. }
  3896. static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
  3897. {
  3898. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  3899. int err;
  3900. struct net_device *dev = info->user_ptr[1];
  3901. struct mpath_info pinfo;
  3902. struct sk_buff *msg;
  3903. u8 *dst = NULL;
  3904. u8 next_hop[ETH_ALEN];
  3905. memset(&pinfo, 0, sizeof(pinfo));
  3906. if (!info->attrs[NL80211_ATTR_MAC])
  3907. return -EINVAL;
  3908. dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3909. if (!rdev->ops->get_mpath)
  3910. return -EOPNOTSUPP;
  3911. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
  3912. return -EOPNOTSUPP;
  3913. err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
  3914. if (err)
  3915. return err;
  3916. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  3917. if (!msg)
  3918. return -ENOMEM;
  3919. if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
  3920. dev, dst, next_hop, &pinfo) < 0) {
  3921. nlmsg_free(msg);
  3922. return -ENOBUFS;
  3923. }
  3924. return genlmsg_reply(msg, info);
  3925. }
  3926. static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
  3927. {
  3928. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  3929. struct net_device *dev = info->user_ptr[1];
  3930. u8 *dst = NULL;
  3931. u8 *next_hop = NULL;
  3932. if (!info->attrs[NL80211_ATTR_MAC])
  3933. return -EINVAL;
  3934. if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
  3935. return -EINVAL;
  3936. dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3937. next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
  3938. if (!rdev->ops->change_mpath)
  3939. return -EOPNOTSUPP;
  3940. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
  3941. return -EOPNOTSUPP;
  3942. return rdev_change_mpath(rdev, dev, dst, next_hop);
  3943. }
  3944. static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
  3945. {
  3946. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  3947. struct net_device *dev = info->user_ptr[1];
  3948. u8 *dst = NULL;
  3949. u8 *next_hop = NULL;
  3950. if (!info->attrs[NL80211_ATTR_MAC])
  3951. return -EINVAL;
  3952. if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
  3953. return -EINVAL;
  3954. dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3955. next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
  3956. if (!rdev->ops->add_mpath)
  3957. return -EOPNOTSUPP;
  3958. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
  3959. return -EOPNOTSUPP;
  3960. return rdev_add_mpath(rdev, dev, dst, next_hop);
  3961. }
  3962. static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
  3963. {
  3964. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  3965. struct net_device *dev = info->user_ptr[1];
  3966. u8 *dst = NULL;
  3967. if (info->attrs[NL80211_ATTR_MAC])
  3968. dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3969. if (!rdev->ops->del_mpath)
  3970. return -EOPNOTSUPP;
  3971. return rdev_del_mpath(rdev, dev, dst);
  3972. }
  3973. static int nl80211_get_mpp(struct sk_buff *skb, struct genl_info *info)
  3974. {
  3975. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  3976. int err;
  3977. struct net_device *dev = info->user_ptr[1];
  3978. struct mpath_info pinfo;
  3979. struct sk_buff *msg;
  3980. u8 *dst = NULL;
  3981. u8 mpp[ETH_ALEN];
  3982. memset(&pinfo, 0, sizeof(pinfo));
  3983. if (!info->attrs[NL80211_ATTR_MAC])
  3984. return -EINVAL;
  3985. dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3986. if (!rdev->ops->get_mpp)
  3987. return -EOPNOTSUPP;
  3988. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
  3989. return -EOPNOTSUPP;
  3990. err = rdev_get_mpp(rdev, dev, dst, mpp, &pinfo);
  3991. if (err)
  3992. return err;
  3993. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  3994. if (!msg)
  3995. return -ENOMEM;
  3996. if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
  3997. dev, dst, mpp, &pinfo) < 0) {
  3998. nlmsg_free(msg);
  3999. return -ENOBUFS;
  4000. }
  4001. return genlmsg_reply(msg, info);
  4002. }
  4003. static int nl80211_dump_mpp(struct sk_buff *skb,
  4004. struct netlink_callback *cb)
  4005. {
  4006. struct mpath_info pinfo;
  4007. struct cfg80211_registered_device *rdev;
  4008. struct wireless_dev *wdev;
  4009. u8 dst[ETH_ALEN];
  4010. u8 mpp[ETH_ALEN];
  4011. int path_idx = cb->args[2];
  4012. int err;
  4013. err = nl80211_prepare_wdev_dump(skb, cb, &rdev, &wdev);
  4014. if (err)
  4015. return err;
  4016. if (!rdev->ops->dump_mpp) {
  4017. err = -EOPNOTSUPP;
  4018. goto out_err;
  4019. }
  4020. if (wdev->iftype != NL80211_IFTYPE_MESH_POINT) {
  4021. err = -EOPNOTSUPP;
  4022. goto out_err;
  4023. }
  4024. while (1) {
  4025. err = rdev_dump_mpp(rdev, wdev->netdev, path_idx, dst,
  4026. mpp, &pinfo);
  4027. if (err == -ENOENT)
  4028. break;
  4029. if (err)
  4030. goto out_err;
  4031. if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
  4032. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  4033. wdev->netdev, dst, mpp,
  4034. &pinfo) < 0)
  4035. goto out;
  4036. path_idx++;
  4037. }
  4038. out:
  4039. cb->args[2] = path_idx;
  4040. err = skb->len;
  4041. out_err:
  4042. nl80211_finish_wdev_dump(rdev);
  4043. return err;
  4044. }
  4045. static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
  4046. {
  4047. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  4048. struct net_device *dev = info->user_ptr[1];
  4049. struct wireless_dev *wdev = dev->ieee80211_ptr;
  4050. struct bss_parameters params;
  4051. int err;
  4052. memset(&params, 0, sizeof(params));
  4053. /* default to not changing parameters */
  4054. params.use_cts_prot = -1;
  4055. params.use_short_preamble = -1;
  4056. params.use_short_slot_time = -1;
  4057. params.ap_isolate = -1;
  4058. params.ht_opmode = -1;
  4059. params.p2p_ctwindow = -1;
  4060. params.p2p_opp_ps = -1;
  4061. if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
  4062. params.use_cts_prot =
  4063. nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
  4064. if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
  4065. params.use_short_preamble =
  4066. nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
  4067. if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
  4068. params.use_short_slot_time =
  4069. nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
  4070. if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
  4071. params.basic_rates =
  4072. nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
  4073. params.basic_rates_len =
  4074. nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
  4075. }
  4076. if (info->attrs[NL80211_ATTR_AP_ISOLATE])
  4077. params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
  4078. if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
  4079. params.ht_opmode =
  4080. nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
  4081. if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
  4082. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
  4083. return -EINVAL;
  4084. params.p2p_ctwindow =
  4085. nla_get_s8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
  4086. if (params.p2p_ctwindow < 0)
  4087. return -EINVAL;
  4088. if (params.p2p_ctwindow != 0 &&
  4089. !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
  4090. return -EINVAL;
  4091. }
  4092. if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
  4093. u8 tmp;
  4094. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
  4095. return -EINVAL;
  4096. tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
  4097. if (tmp > 1)
  4098. return -EINVAL;
  4099. params.p2p_opp_ps = tmp;
  4100. if (params.p2p_opp_ps &&
  4101. !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
  4102. return -EINVAL;
  4103. }
  4104. if (!rdev->ops->change_bss)
  4105. return -EOPNOTSUPP;
  4106. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
  4107. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
  4108. return -EOPNOTSUPP;
  4109. wdev_lock(wdev);
  4110. err = rdev_change_bss(rdev, dev, &params);
  4111. wdev_unlock(wdev);
  4112. return err;
  4113. }
  4114. static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
  4115. [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
  4116. [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
  4117. [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
  4118. [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
  4119. [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
  4120. [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
  4121. [NL80211_ATTR_DFS_CAC_TIME] = { .type = NLA_U32 },
  4122. };
  4123. static int parse_reg_rule(struct nlattr *tb[],
  4124. struct ieee80211_reg_rule *reg_rule)
  4125. {
  4126. struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
  4127. struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
  4128. if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
  4129. return -EINVAL;
  4130. if (!tb[NL80211_ATTR_FREQ_RANGE_START])
  4131. return -EINVAL;
  4132. if (!tb[NL80211_ATTR_FREQ_RANGE_END])
  4133. return -EINVAL;
  4134. if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
  4135. return -EINVAL;
  4136. if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
  4137. return -EINVAL;
  4138. reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
  4139. freq_range->start_freq_khz =
  4140. nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
  4141. freq_range->end_freq_khz =
  4142. nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
  4143. freq_range->max_bandwidth_khz =
  4144. nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
  4145. power_rule->max_eirp =
  4146. nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
  4147. if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
  4148. power_rule->max_antenna_gain =
  4149. nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
  4150. if (tb[NL80211_ATTR_DFS_CAC_TIME])
  4151. reg_rule->dfs_cac_ms =
  4152. nla_get_u32(tb[NL80211_ATTR_DFS_CAC_TIME]);
  4153. return 0;
  4154. }
  4155. static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
  4156. {
  4157. char *data = NULL;
  4158. enum nl80211_user_reg_hint_type user_reg_hint_type;
  4159. /*
  4160. * You should only get this when cfg80211 hasn't yet initialized
  4161. * completely when built-in to the kernel right between the time
  4162. * window between nl80211_init() and regulatory_init(), if that is
  4163. * even possible.
  4164. */
  4165. if (unlikely(!rcu_access_pointer(cfg80211_regdomain)))
  4166. return -EINPROGRESS;
  4167. if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
  4168. user_reg_hint_type =
  4169. nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
  4170. else
  4171. user_reg_hint_type = NL80211_USER_REG_HINT_USER;
  4172. switch (user_reg_hint_type) {
  4173. case NL80211_USER_REG_HINT_USER:
  4174. case NL80211_USER_REG_HINT_CELL_BASE:
  4175. if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
  4176. return -EINVAL;
  4177. data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
  4178. return regulatory_hint_user(data, user_reg_hint_type);
  4179. case NL80211_USER_REG_HINT_INDOOR:
  4180. return regulatory_hint_indoor_user();
  4181. default:
  4182. return -EINVAL;
  4183. }
  4184. }
  4185. static int nl80211_get_mesh_config(struct sk_buff *skb,
  4186. struct genl_info *info)
  4187. {
  4188. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  4189. struct net_device *dev = info->user_ptr[1];
  4190. struct wireless_dev *wdev = dev->ieee80211_ptr;
  4191. struct mesh_config cur_params;
  4192. int err = 0;
  4193. void *hdr;
  4194. struct nlattr *pinfoattr;
  4195. struct sk_buff *msg;
  4196. if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
  4197. return -EOPNOTSUPP;
  4198. if (!rdev->ops->get_mesh_config)
  4199. return -EOPNOTSUPP;
  4200. wdev_lock(wdev);
  4201. /* If not connected, get default parameters */
  4202. if (!wdev->mesh_id_len)
  4203. memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
  4204. else
  4205. err = rdev_get_mesh_config(rdev, dev, &cur_params);
  4206. wdev_unlock(wdev);
  4207. if (err)
  4208. return err;
  4209. /* Draw up a netlink message to send back */
  4210. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  4211. if (!msg)
  4212. return -ENOMEM;
  4213. hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
  4214. NL80211_CMD_GET_MESH_CONFIG);
  4215. if (!hdr)
  4216. goto out;
  4217. pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_CONFIG);
  4218. if (!pinfoattr)
  4219. goto nla_put_failure;
  4220. if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
  4221. nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
  4222. cur_params.dot11MeshRetryTimeout) ||
  4223. nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
  4224. cur_params.dot11MeshConfirmTimeout) ||
  4225. nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
  4226. cur_params.dot11MeshHoldingTimeout) ||
  4227. nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
  4228. cur_params.dot11MeshMaxPeerLinks) ||
  4229. nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
  4230. cur_params.dot11MeshMaxRetries) ||
  4231. nla_put_u8(msg, NL80211_MESHCONF_TTL,
  4232. cur_params.dot11MeshTTL) ||
  4233. nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
  4234. cur_params.element_ttl) ||
  4235. nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
  4236. cur_params.auto_open_plinks) ||
  4237. nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
  4238. cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
  4239. nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
  4240. cur_params.dot11MeshHWMPmaxPREQretries) ||
  4241. nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
  4242. cur_params.path_refresh_time) ||
  4243. nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
  4244. cur_params.min_discovery_timeout) ||
  4245. nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
  4246. cur_params.dot11MeshHWMPactivePathTimeout) ||
  4247. nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
  4248. cur_params.dot11MeshHWMPpreqMinInterval) ||
  4249. nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
  4250. cur_params.dot11MeshHWMPperrMinInterval) ||
  4251. nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
  4252. cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
  4253. nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
  4254. cur_params.dot11MeshHWMPRootMode) ||
  4255. nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
  4256. cur_params.dot11MeshHWMPRannInterval) ||
  4257. nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
  4258. cur_params.dot11MeshGateAnnouncementProtocol) ||
  4259. nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
  4260. cur_params.dot11MeshForwarding) ||
  4261. nla_put_u32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
  4262. cur_params.rssi_threshold) ||
  4263. nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
  4264. cur_params.ht_opmode) ||
  4265. nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
  4266. cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
  4267. nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
  4268. cur_params.dot11MeshHWMProotInterval) ||
  4269. nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
  4270. cur_params.dot11MeshHWMPconfirmationInterval) ||
  4271. nla_put_u32(msg, NL80211_MESHCONF_POWER_MODE,
  4272. cur_params.power_mode) ||
  4273. nla_put_u16(msg, NL80211_MESHCONF_AWAKE_WINDOW,
  4274. cur_params.dot11MeshAwakeWindowDuration) ||
  4275. nla_put_u32(msg, NL80211_MESHCONF_PLINK_TIMEOUT,
  4276. cur_params.plink_timeout))
  4277. goto nla_put_failure;
  4278. nla_nest_end(msg, pinfoattr);
  4279. genlmsg_end(msg, hdr);
  4280. return genlmsg_reply(msg, info);
  4281. nla_put_failure:
  4282. genlmsg_cancel(msg, hdr);
  4283. out:
  4284. nlmsg_free(msg);
  4285. return -ENOBUFS;
  4286. }
  4287. static const struct nla_policy nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
  4288. [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
  4289. [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
  4290. [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
  4291. [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
  4292. [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
  4293. [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
  4294. [NL80211_MESHCONF_ELEMENT_TTL] = { .type = NLA_U8 },
  4295. [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
  4296. [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] = { .type = NLA_U32 },
  4297. [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
  4298. [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
  4299. [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
  4300. [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
  4301. [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
  4302. [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] = { .type = NLA_U16 },
  4303. [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
  4304. [NL80211_MESHCONF_HWMP_ROOTMODE] = { .type = NLA_U8 },
  4305. [NL80211_MESHCONF_HWMP_RANN_INTERVAL] = { .type = NLA_U16 },
  4306. [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = { .type = NLA_U8 },
  4307. [NL80211_MESHCONF_FORWARDING] = { .type = NLA_U8 },
  4308. [NL80211_MESHCONF_RSSI_THRESHOLD] = { .type = NLA_U32 },
  4309. [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
  4310. [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
  4311. [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] = { .type = NLA_U16 },
  4312. [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] = { .type = NLA_U16 },
  4313. [NL80211_MESHCONF_POWER_MODE] = { .type = NLA_U32 },
  4314. [NL80211_MESHCONF_AWAKE_WINDOW] = { .type = NLA_U16 },
  4315. [NL80211_MESHCONF_PLINK_TIMEOUT] = { .type = NLA_U32 },
  4316. };
  4317. static const struct nla_policy
  4318. nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
  4319. [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
  4320. [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
  4321. [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
  4322. [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
  4323. [NL80211_MESH_SETUP_AUTH_PROTOCOL] = { .type = NLA_U8 },
  4324. [NL80211_MESH_SETUP_USERSPACE_MPM] = { .type = NLA_FLAG },
  4325. [NL80211_MESH_SETUP_IE] = { .type = NLA_BINARY,
  4326. .len = IEEE80211_MAX_DATA_LEN },
  4327. [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
  4328. };
  4329. static int nl80211_parse_mesh_config(struct genl_info *info,
  4330. struct mesh_config *cfg,
  4331. u32 *mask_out)
  4332. {
  4333. struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
  4334. u32 mask = 0;
  4335. #define FILL_IN_MESH_PARAM_IF_SET(tb, cfg, param, min, max, mask, attr, fn) \
  4336. do { \
  4337. if (tb[attr]) { \
  4338. if (fn(tb[attr]) < min || fn(tb[attr]) > max) \
  4339. return -EINVAL; \
  4340. cfg->param = fn(tb[attr]); \
  4341. mask |= (1 << (attr - 1)); \
  4342. } \
  4343. } while (0)
  4344. if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
  4345. return -EINVAL;
  4346. if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
  4347. info->attrs[NL80211_ATTR_MESH_CONFIG],
  4348. nl80211_meshconf_params_policy))
  4349. return -EINVAL;
  4350. /* This makes sure that there aren't more than 32 mesh config
  4351. * parameters (otherwise our bitfield scheme would not work.) */
  4352. BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
  4353. /* Fill in the params struct */
  4354. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout, 1, 255,
  4355. mask, NL80211_MESHCONF_RETRY_TIMEOUT,
  4356. nla_get_u16);
  4357. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout, 1, 255,
  4358. mask, NL80211_MESHCONF_CONFIRM_TIMEOUT,
  4359. nla_get_u16);
  4360. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout, 1, 255,
  4361. mask, NL80211_MESHCONF_HOLDING_TIMEOUT,
  4362. nla_get_u16);
  4363. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks, 0, 255,
  4364. mask, NL80211_MESHCONF_MAX_PEER_LINKS,
  4365. nla_get_u16);
  4366. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries, 0, 16,
  4367. mask, NL80211_MESHCONF_MAX_RETRIES,
  4368. nla_get_u8);
  4369. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL, 1, 255,
  4370. mask, NL80211_MESHCONF_TTL, nla_get_u8);
  4371. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl, 1, 255,
  4372. mask, NL80211_MESHCONF_ELEMENT_TTL,
  4373. nla_get_u8);
  4374. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks, 0, 1,
  4375. mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
  4376. nla_get_u8);
  4377. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
  4378. 1, 255, mask,
  4379. NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
  4380. nla_get_u32);
  4381. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries, 0, 255,
  4382. mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
  4383. nla_get_u8);
  4384. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time, 1, 65535,
  4385. mask, NL80211_MESHCONF_PATH_REFRESH_TIME,
  4386. nla_get_u32);
  4387. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout, 1, 65535,
  4388. mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
  4389. nla_get_u16);
  4390. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
  4391. 1, 65535, mask,
  4392. NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
  4393. nla_get_u32);
  4394. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
  4395. 1, 65535, mask,
  4396. NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
  4397. nla_get_u16);
  4398. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval,
  4399. 1, 65535, mask,
  4400. NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
  4401. nla_get_u16);
  4402. FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
  4403. dot11MeshHWMPnetDiameterTraversalTime,
  4404. 1, 65535, mask,
  4405. NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
  4406. nla_get_u16);
  4407. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, 0, 4,
  4408. mask, NL80211_MESHCONF_HWMP_ROOTMODE,
  4409. nla_get_u8);
  4410. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, 1, 65535,
  4411. mask, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
  4412. nla_get_u16);
  4413. FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
  4414. dot11MeshGateAnnouncementProtocol, 0, 1,
  4415. mask, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
  4416. nla_get_u8);
  4417. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding, 0, 1,
  4418. mask, NL80211_MESHCONF_FORWARDING,
  4419. nla_get_u8);
  4420. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold, -255, 0,
  4421. mask, NL80211_MESHCONF_RSSI_THRESHOLD,
  4422. nla_get_s32);
  4423. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, ht_opmode, 0, 16,
  4424. mask, NL80211_MESHCONF_HT_OPMODE,
  4425. nla_get_u16);
  4426. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathToRootTimeout,
  4427. 1, 65535, mask,
  4428. NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
  4429. nla_get_u32);
  4430. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval, 1, 65535,
  4431. mask, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
  4432. nla_get_u16);
  4433. FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
  4434. dot11MeshHWMPconfirmationInterval,
  4435. 1, 65535, mask,
  4436. NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
  4437. nla_get_u16);
  4438. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, power_mode,
  4439. NL80211_MESH_POWER_ACTIVE,
  4440. NL80211_MESH_POWER_MAX,
  4441. mask, NL80211_MESHCONF_POWER_MODE,
  4442. nla_get_u32);
  4443. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshAwakeWindowDuration,
  4444. 0, 65535, mask,
  4445. NL80211_MESHCONF_AWAKE_WINDOW, nla_get_u16);
  4446. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, plink_timeout, 1, 0xffffffff,
  4447. mask, NL80211_MESHCONF_PLINK_TIMEOUT,
  4448. nla_get_u32);
  4449. if (mask_out)
  4450. *mask_out = mask;
  4451. return 0;
  4452. #undef FILL_IN_MESH_PARAM_IF_SET
  4453. }
  4454. static int nl80211_parse_mesh_setup(struct genl_info *info,
  4455. struct mesh_setup *setup)
  4456. {
  4457. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  4458. struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
  4459. if (!info->attrs[NL80211_ATTR_MESH_SETUP])
  4460. return -EINVAL;
  4461. if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
  4462. info->attrs[NL80211_ATTR_MESH_SETUP],
  4463. nl80211_mesh_setup_params_policy))
  4464. return -EINVAL;
  4465. if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
  4466. setup->sync_method =
  4467. (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
  4468. IEEE80211_SYNC_METHOD_VENDOR :
  4469. IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
  4470. if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
  4471. setup->path_sel_proto =
  4472. (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
  4473. IEEE80211_PATH_PROTOCOL_VENDOR :
  4474. IEEE80211_PATH_PROTOCOL_HWMP;
  4475. if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
  4476. setup->path_metric =
  4477. (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
  4478. IEEE80211_PATH_METRIC_VENDOR :
  4479. IEEE80211_PATH_METRIC_AIRTIME;
  4480. if (tb[NL80211_MESH_SETUP_IE]) {
  4481. struct nlattr *ieattr =
  4482. tb[NL80211_MESH_SETUP_IE];
  4483. if (!is_valid_ie_attr(ieattr))
  4484. return -EINVAL;
  4485. setup->ie = nla_data(ieattr);
  4486. setup->ie_len = nla_len(ieattr);
  4487. }
  4488. if (tb[NL80211_MESH_SETUP_USERSPACE_MPM] &&
  4489. !(rdev->wiphy.features & NL80211_FEATURE_USERSPACE_MPM))
  4490. return -EINVAL;
  4491. setup->user_mpm = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_MPM]);
  4492. setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
  4493. setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
  4494. if (setup->is_secure)
  4495. setup->user_mpm = true;
  4496. if (tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]) {
  4497. if (!setup->user_mpm)
  4498. return -EINVAL;
  4499. setup->auth_id =
  4500. nla_get_u8(tb[NL80211_MESH_SETUP_AUTH_PROTOCOL]);
  4501. }
  4502. return 0;
  4503. }
  4504. static int nl80211_update_mesh_config(struct sk_buff *skb,
  4505. struct genl_info *info)
  4506. {
  4507. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  4508. struct net_device *dev = info->user_ptr[1];
  4509. struct wireless_dev *wdev = dev->ieee80211_ptr;
  4510. struct mesh_config cfg;
  4511. u32 mask;
  4512. int err;
  4513. if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
  4514. return -EOPNOTSUPP;
  4515. if (!rdev->ops->update_mesh_config)
  4516. return -EOPNOTSUPP;
  4517. err = nl80211_parse_mesh_config(info, &cfg, &mask);
  4518. if (err)
  4519. return err;
  4520. wdev_lock(wdev);
  4521. if (!wdev->mesh_id_len)
  4522. err = -ENOLINK;
  4523. if (!err)
  4524. err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
  4525. wdev_unlock(wdev);
  4526. return err;
  4527. }
  4528. static int nl80211_put_regdom(const struct ieee80211_regdomain *regdom,
  4529. struct sk_buff *msg)
  4530. {
  4531. struct nlattr *nl_reg_rules;
  4532. unsigned int i;
  4533. if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2, regdom->alpha2) ||
  4534. (regdom->dfs_region &&
  4535. nla_put_u8(msg, NL80211_ATTR_DFS_REGION, regdom->dfs_region)))
  4536. goto nla_put_failure;
  4537. nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
  4538. if (!nl_reg_rules)
  4539. goto nla_put_failure;
  4540. for (i = 0; i < regdom->n_reg_rules; i++) {
  4541. struct nlattr *nl_reg_rule;
  4542. const struct ieee80211_reg_rule *reg_rule;
  4543. const struct ieee80211_freq_range *freq_range;
  4544. const struct ieee80211_power_rule *power_rule;
  4545. unsigned int max_bandwidth_khz;
  4546. reg_rule = &regdom->reg_rules[i];
  4547. freq_range = &reg_rule->freq_range;
  4548. power_rule = &reg_rule->power_rule;
  4549. nl_reg_rule = nla_nest_start(msg, i);
  4550. if (!nl_reg_rule)
  4551. goto nla_put_failure;
  4552. max_bandwidth_khz = freq_range->max_bandwidth_khz;
  4553. if (!max_bandwidth_khz)
  4554. max_bandwidth_khz = reg_get_max_bandwidth(regdom,
  4555. reg_rule);
  4556. if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
  4557. reg_rule->flags) ||
  4558. nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
  4559. freq_range->start_freq_khz) ||
  4560. nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
  4561. freq_range->end_freq_khz) ||
  4562. nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
  4563. max_bandwidth_khz) ||
  4564. nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
  4565. power_rule->max_antenna_gain) ||
  4566. nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
  4567. power_rule->max_eirp) ||
  4568. nla_put_u32(msg, NL80211_ATTR_DFS_CAC_TIME,
  4569. reg_rule->dfs_cac_ms))
  4570. goto nla_put_failure;
  4571. nla_nest_end(msg, nl_reg_rule);
  4572. }
  4573. nla_nest_end(msg, nl_reg_rules);
  4574. return 0;
  4575. nla_put_failure:
  4576. return -EMSGSIZE;
  4577. }
  4578. static int nl80211_get_reg_do(struct sk_buff *skb, struct genl_info *info)
  4579. {
  4580. const struct ieee80211_regdomain *regdom = NULL;
  4581. struct cfg80211_registered_device *rdev;
  4582. struct wiphy *wiphy = NULL;
  4583. struct sk_buff *msg;
  4584. void *hdr;
  4585. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  4586. if (!msg)
  4587. return -ENOBUFS;
  4588. hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
  4589. NL80211_CMD_GET_REG);
  4590. if (!hdr)
  4591. goto put_failure;
  4592. if (info->attrs[NL80211_ATTR_WIPHY]) {
  4593. bool self_managed;
  4594. rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
  4595. if (IS_ERR(rdev)) {
  4596. nlmsg_free(msg);
  4597. return PTR_ERR(rdev);
  4598. }
  4599. wiphy = &rdev->wiphy;
  4600. self_managed = wiphy->regulatory_flags &
  4601. REGULATORY_WIPHY_SELF_MANAGED;
  4602. regdom = get_wiphy_regdom(wiphy);
  4603. /* a self-managed-reg device must have a private regdom */
  4604. if (WARN_ON(!regdom && self_managed)) {
  4605. nlmsg_free(msg);
  4606. return -EINVAL;
  4607. }
  4608. if (regdom &&
  4609. nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
  4610. goto nla_put_failure;
  4611. }
  4612. if (!wiphy && reg_last_request_cell_base() &&
  4613. nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
  4614. NL80211_USER_REG_HINT_CELL_BASE))
  4615. goto nla_put_failure;
  4616. rcu_read_lock();
  4617. if (!regdom)
  4618. regdom = rcu_dereference(cfg80211_regdomain);
  4619. if (nl80211_put_regdom(regdom, msg))
  4620. goto nla_put_failure_rcu;
  4621. rcu_read_unlock();
  4622. genlmsg_end(msg, hdr);
  4623. return genlmsg_reply(msg, info);
  4624. nla_put_failure_rcu:
  4625. rcu_read_unlock();
  4626. nla_put_failure:
  4627. genlmsg_cancel(msg, hdr);
  4628. put_failure:
  4629. nlmsg_free(msg);
  4630. return -EMSGSIZE;
  4631. }
  4632. static int nl80211_send_regdom(struct sk_buff *msg, struct netlink_callback *cb,
  4633. u32 seq, int flags, struct wiphy *wiphy,
  4634. const struct ieee80211_regdomain *regdom)
  4635. {
  4636. void *hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
  4637. NL80211_CMD_GET_REG);
  4638. if (!hdr)
  4639. return -1;
  4640. genl_dump_check_consistent(cb, hdr, &nl80211_fam);
  4641. if (nl80211_put_regdom(regdom, msg))
  4642. goto nla_put_failure;
  4643. if (!wiphy && reg_last_request_cell_base() &&
  4644. nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
  4645. NL80211_USER_REG_HINT_CELL_BASE))
  4646. goto nla_put_failure;
  4647. if (wiphy &&
  4648. nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
  4649. goto nla_put_failure;
  4650. if (wiphy && wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
  4651. nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
  4652. goto nla_put_failure;
  4653. return genlmsg_end(msg, hdr);
  4654. nla_put_failure:
  4655. genlmsg_cancel(msg, hdr);
  4656. return -EMSGSIZE;
  4657. }
  4658. static int nl80211_get_reg_dump(struct sk_buff *skb,
  4659. struct netlink_callback *cb)
  4660. {
  4661. const struct ieee80211_regdomain *regdom = NULL;
  4662. struct cfg80211_registered_device *rdev;
  4663. int err, reg_idx, start = cb->args[2];
  4664. rtnl_lock();
  4665. if (cfg80211_regdomain && start == 0) {
  4666. err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
  4667. NLM_F_MULTI, NULL,
  4668. rtnl_dereference(cfg80211_regdomain));
  4669. if (err < 0)
  4670. goto out_err;
  4671. }
  4672. /* the global regdom is idx 0 */
  4673. reg_idx = 1;
  4674. list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
  4675. regdom = get_wiphy_regdom(&rdev->wiphy);
  4676. if (!regdom)
  4677. continue;
  4678. if (++reg_idx <= start)
  4679. continue;
  4680. err = nl80211_send_regdom(skb, cb, cb->nlh->nlmsg_seq,
  4681. NLM_F_MULTI, &rdev->wiphy, regdom);
  4682. if (err < 0) {
  4683. reg_idx--;
  4684. break;
  4685. }
  4686. }
  4687. cb->args[2] = reg_idx;
  4688. err = skb->len;
  4689. out_err:
  4690. rtnl_unlock();
  4691. return err;
  4692. }
  4693. static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
  4694. {
  4695. struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
  4696. struct nlattr *nl_reg_rule;
  4697. char *alpha2;
  4698. int rem_reg_rules, r;
  4699. u32 num_rules = 0, rule_idx = 0, size_of_regd;
  4700. enum nl80211_dfs_regions dfs_region = NL80211_DFS_UNSET;
  4701. struct ieee80211_regdomain *rd;
  4702. if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
  4703. return -EINVAL;
  4704. if (!info->attrs[NL80211_ATTR_REG_RULES])
  4705. return -EINVAL;
  4706. alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
  4707. if (info->attrs[NL80211_ATTR_DFS_REGION])
  4708. dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
  4709. nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
  4710. rem_reg_rules) {
  4711. num_rules++;
  4712. if (num_rules > NL80211_MAX_SUPP_REG_RULES)
  4713. return -EINVAL;
  4714. }
  4715. if (!reg_is_valid_request(alpha2))
  4716. return -EINVAL;
  4717. size_of_regd = sizeof(struct ieee80211_regdomain) +
  4718. num_rules * sizeof(struct ieee80211_reg_rule);
  4719. rd = kzalloc(size_of_regd, GFP_KERNEL);
  4720. if (!rd)
  4721. return -ENOMEM;
  4722. rd->n_reg_rules = num_rules;
  4723. rd->alpha2[0] = alpha2[0];
  4724. rd->alpha2[1] = alpha2[1];
  4725. /*
  4726. * Disable DFS master mode if the DFS region was
  4727. * not supported or known on this kernel.
  4728. */
  4729. if (reg_supported_dfs_region(dfs_region))
  4730. rd->dfs_region = dfs_region;
  4731. nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
  4732. rem_reg_rules) {
  4733. r = nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
  4734. nla_data(nl_reg_rule), nla_len(nl_reg_rule),
  4735. reg_rule_policy);
  4736. if (r)
  4737. goto bad_reg;
  4738. r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
  4739. if (r)
  4740. goto bad_reg;
  4741. rule_idx++;
  4742. if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
  4743. r = -EINVAL;
  4744. goto bad_reg;
  4745. }
  4746. }
  4747. r = set_regdom(rd);
  4748. /* set_regdom took ownership */
  4749. rd = NULL;
  4750. bad_reg:
  4751. kfree(rd);
  4752. return r;
  4753. }
  4754. static int validate_scan_freqs(struct nlattr *freqs)
  4755. {
  4756. struct nlattr *attr1, *attr2;
  4757. int n_channels = 0, tmp1, tmp2;
  4758. nla_for_each_nested(attr1, freqs, tmp1) {
  4759. n_channels++;
  4760. /*
  4761. * Some hardware has a limited channel list for
  4762. * scanning, and it is pretty much nonsensical
  4763. * to scan for a channel twice, so disallow that
  4764. * and don't require drivers to check that the
  4765. * channel list they get isn't longer than what
  4766. * they can scan, as long as they can scan all
  4767. * the channels they registered at once.
  4768. */
  4769. nla_for_each_nested(attr2, freqs, tmp2)
  4770. if (attr1 != attr2 &&
  4771. nla_get_u32(attr1) == nla_get_u32(attr2))
  4772. return 0;
  4773. }
  4774. return n_channels;
  4775. }
  4776. static int nl80211_parse_random_mac(struct nlattr **attrs,
  4777. u8 *mac_addr, u8 *mac_addr_mask)
  4778. {
  4779. int i;
  4780. if (!attrs[NL80211_ATTR_MAC] && !attrs[NL80211_ATTR_MAC_MASK]) {
  4781. memset(mac_addr, 0, ETH_ALEN);
  4782. memset(mac_addr_mask, 0, ETH_ALEN);
  4783. mac_addr[0] = 0x2;
  4784. mac_addr_mask[0] = 0x3;
  4785. return 0;
  4786. }
  4787. /* need both or none */
  4788. if (!attrs[NL80211_ATTR_MAC] || !attrs[NL80211_ATTR_MAC_MASK])
  4789. return -EINVAL;
  4790. memcpy(mac_addr, nla_data(attrs[NL80211_ATTR_MAC]), ETH_ALEN);
  4791. memcpy(mac_addr_mask, nla_data(attrs[NL80211_ATTR_MAC_MASK]), ETH_ALEN);
  4792. /* don't allow or configure an mcast address */
  4793. if (!is_multicast_ether_addr(mac_addr_mask) ||
  4794. is_multicast_ether_addr(mac_addr))
  4795. return -EINVAL;
  4796. /*
  4797. * allow users to pass a MAC address that has bits set outside
  4798. * of the mask, but don't bother drivers with having to deal
  4799. * with such bits
  4800. */
  4801. for (i = 0; i < ETH_ALEN; i++)
  4802. mac_addr[i] &= mac_addr_mask[i];
  4803. return 0;
  4804. }
  4805. static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
  4806. {
  4807. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  4808. struct wireless_dev *wdev = info->user_ptr[1];
  4809. struct cfg80211_scan_request *request;
  4810. struct nlattr *attr;
  4811. struct wiphy *wiphy;
  4812. int err, tmp, n_ssids = 0, n_channels, i;
  4813. size_t ie_len;
  4814. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  4815. return -EINVAL;
  4816. wiphy = &rdev->wiphy;
  4817. if (!rdev->ops->scan)
  4818. return -EOPNOTSUPP;
  4819. if (rdev->scan_req || rdev->scan_msg) {
  4820. err = -EBUSY;
  4821. goto unlock;
  4822. }
  4823. if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
  4824. n_channels = validate_scan_freqs(
  4825. info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
  4826. if (!n_channels) {
  4827. err = -EINVAL;
  4828. goto unlock;
  4829. }
  4830. } else {
  4831. n_channels = ieee80211_get_num_supported_channels(wiphy);
  4832. }
  4833. if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
  4834. nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
  4835. n_ssids++;
  4836. if (n_ssids > wiphy->max_scan_ssids) {
  4837. err = -EINVAL;
  4838. goto unlock;
  4839. }
  4840. if (info->attrs[NL80211_ATTR_IE])
  4841. ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  4842. else
  4843. ie_len = 0;
  4844. if (ie_len > wiphy->max_scan_ie_len) {
  4845. err = -EINVAL;
  4846. goto unlock;
  4847. }
  4848. request = kzalloc(sizeof(*request)
  4849. + sizeof(*request->ssids) * n_ssids
  4850. + sizeof(*request->channels) * n_channels
  4851. + ie_len, GFP_KERNEL);
  4852. if (!request) {
  4853. err = -ENOMEM;
  4854. goto unlock;
  4855. }
  4856. if (n_ssids)
  4857. request->ssids = (void *)&request->channels[n_channels];
  4858. request->n_ssids = n_ssids;
  4859. if (ie_len) {
  4860. if (request->ssids)
  4861. request->ie = (void *)(request->ssids + n_ssids);
  4862. else
  4863. request->ie = (void *)(request->channels + n_channels);
  4864. }
  4865. i = 0;
  4866. if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
  4867. /* user specified, bail out if channel not found */
  4868. nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
  4869. struct ieee80211_channel *chan;
  4870. chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
  4871. if (!chan) {
  4872. err = -EINVAL;
  4873. goto out_free;
  4874. }
  4875. /* ignore disabled channels */
  4876. if (chan->flags & IEEE80211_CHAN_DISABLED)
  4877. continue;
  4878. request->channels[i] = chan;
  4879. i++;
  4880. }
  4881. } else {
  4882. enum ieee80211_band band;
  4883. /* all channels */
  4884. for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
  4885. int j;
  4886. if (!wiphy->bands[band])
  4887. continue;
  4888. for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
  4889. struct ieee80211_channel *chan;
  4890. chan = &wiphy->bands[band]->channels[j];
  4891. if (chan->flags & IEEE80211_CHAN_DISABLED)
  4892. continue;
  4893. request->channels[i] = chan;
  4894. i++;
  4895. }
  4896. }
  4897. }
  4898. if (!i) {
  4899. err = -EINVAL;
  4900. goto out_free;
  4901. }
  4902. request->n_channels = i;
  4903. i = 0;
  4904. if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
  4905. nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
  4906. if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
  4907. err = -EINVAL;
  4908. goto out_free;
  4909. }
  4910. request->ssids[i].ssid_len = nla_len(attr);
  4911. memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
  4912. i++;
  4913. }
  4914. }
  4915. if (info->attrs[NL80211_ATTR_IE]) {
  4916. request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  4917. memcpy((void *)request->ie,
  4918. nla_data(info->attrs[NL80211_ATTR_IE]),
  4919. request->ie_len);
  4920. }
  4921. for (i = 0; i < IEEE80211_NUM_BANDS; i++)
  4922. if (wiphy->bands[i])
  4923. request->rates[i] =
  4924. (1 << wiphy->bands[i]->n_bitrates) - 1;
  4925. if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
  4926. nla_for_each_nested(attr,
  4927. info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
  4928. tmp) {
  4929. enum ieee80211_band band = nla_type(attr);
  4930. if (band < 0 || band >= IEEE80211_NUM_BANDS) {
  4931. err = -EINVAL;
  4932. goto out_free;
  4933. }
  4934. if (!wiphy->bands[band])
  4935. continue;
  4936. err = ieee80211_get_ratemask(wiphy->bands[band],
  4937. nla_data(attr),
  4938. nla_len(attr),
  4939. &request->rates[band]);
  4940. if (err)
  4941. goto out_free;
  4942. }
  4943. }
  4944. if (info->attrs[NL80211_ATTR_SCAN_FLAGS]) {
  4945. request->flags = nla_get_u32(
  4946. info->attrs[NL80211_ATTR_SCAN_FLAGS]);
  4947. if ((request->flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
  4948. !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) {
  4949. err = -EOPNOTSUPP;
  4950. goto out_free;
  4951. }
  4952. if (request->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
  4953. if (!(wiphy->features &
  4954. NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR)) {
  4955. err = -EOPNOTSUPP;
  4956. goto out_free;
  4957. }
  4958. if (wdev->current_bss) {
  4959. err = -EOPNOTSUPP;
  4960. goto out_free;
  4961. }
  4962. err = nl80211_parse_random_mac(info->attrs,
  4963. request->mac_addr,
  4964. request->mac_addr_mask);
  4965. if (err)
  4966. goto out_free;
  4967. }
  4968. }
  4969. request->no_cck =
  4970. nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
  4971. request->wdev = wdev;
  4972. request->wiphy = &rdev->wiphy;
  4973. request->scan_start = jiffies;
  4974. rdev->scan_req = request;
  4975. err = rdev_scan(rdev, request);
  4976. if (!err) {
  4977. nl80211_send_scan_start(rdev, wdev);
  4978. if (wdev->netdev)
  4979. dev_hold(wdev->netdev);
  4980. } else {
  4981. out_free:
  4982. rdev->scan_req = NULL;
  4983. kfree(request);
  4984. }
  4985. unlock:
  4986. return err;
  4987. }
  4988. static struct cfg80211_sched_scan_request *
  4989. nl80211_parse_sched_scan(struct wiphy *wiphy, struct wireless_dev *wdev,
  4990. struct nlattr **attrs)
  4991. {
  4992. struct cfg80211_sched_scan_request *request;
  4993. struct nlattr *attr;
  4994. int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i;
  4995. u32 interval;
  4996. enum ieee80211_band band;
  4997. size_t ie_len;
  4998. struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
  4999. s32 default_match_rssi = NL80211_SCAN_RSSI_THOLD_OFF;
  5000. if (!is_valid_ie_attr(attrs[NL80211_ATTR_IE]))
  5001. return ERR_PTR(-EINVAL);
  5002. if (!attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
  5003. return ERR_PTR(-EINVAL);
  5004. interval = nla_get_u32(attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
  5005. if (interval == 0)
  5006. return ERR_PTR(-EINVAL);
  5007. if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
  5008. n_channels = validate_scan_freqs(
  5009. attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
  5010. if (!n_channels)
  5011. return ERR_PTR(-EINVAL);
  5012. } else {
  5013. n_channels = ieee80211_get_num_supported_channels(wiphy);
  5014. }
  5015. if (attrs[NL80211_ATTR_SCAN_SSIDS])
  5016. nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
  5017. tmp)
  5018. n_ssids++;
  5019. if (n_ssids > wiphy->max_sched_scan_ssids)
  5020. return ERR_PTR(-EINVAL);
  5021. /*
  5022. * First, count the number of 'real' matchsets. Due to an issue with
  5023. * the old implementation, matchsets containing only the RSSI attribute
  5024. * (NL80211_SCHED_SCAN_MATCH_ATTR_RSSI) are considered as the 'default'
  5025. * RSSI for all matchsets, rather than their own matchset for reporting
  5026. * all APs with a strong RSSI. This is needed to be compatible with
  5027. * older userspace that treated a matchset with only the RSSI as the
  5028. * global RSSI for all other matchsets - if there are other matchsets.
  5029. */
  5030. if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
  5031. nla_for_each_nested(attr,
  5032. attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
  5033. tmp) {
  5034. struct nlattr *rssi;
  5035. err = nla_parse(tb, NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
  5036. nla_data(attr), nla_len(attr),
  5037. nl80211_match_policy);
  5038. if (err)
  5039. return ERR_PTR(err);
  5040. /* add other standalone attributes here */
  5041. if (tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID]) {
  5042. n_match_sets++;
  5043. continue;
  5044. }
  5045. rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
  5046. if (rssi)
  5047. default_match_rssi = nla_get_s32(rssi);
  5048. }
  5049. }
  5050. /* However, if there's no other matchset, add the RSSI one */
  5051. if (!n_match_sets && default_match_rssi != NL80211_SCAN_RSSI_THOLD_OFF)
  5052. n_match_sets = 1;
  5053. if (n_match_sets > wiphy->max_match_sets)
  5054. return ERR_PTR(-EINVAL);
  5055. if (attrs[NL80211_ATTR_IE])
  5056. ie_len = nla_len(attrs[NL80211_ATTR_IE]);
  5057. else
  5058. ie_len = 0;
  5059. if (ie_len > wiphy->max_sched_scan_ie_len)
  5060. return ERR_PTR(-EINVAL);
  5061. request = kzalloc(sizeof(*request)
  5062. + sizeof(*request->ssids) * n_ssids
  5063. + sizeof(*request->match_sets) * n_match_sets
  5064. + sizeof(*request->channels) * n_channels
  5065. + ie_len, GFP_KERNEL);
  5066. if (!request)
  5067. return ERR_PTR(-ENOMEM);
  5068. if (n_ssids)
  5069. request->ssids = (void *)&request->channels[n_channels];
  5070. request->n_ssids = n_ssids;
  5071. if (ie_len) {
  5072. if (request->ssids)
  5073. request->ie = (void *)(request->ssids + n_ssids);
  5074. else
  5075. request->ie = (void *)(request->channels + n_channels);
  5076. }
  5077. if (n_match_sets) {
  5078. if (request->ie)
  5079. request->match_sets = (void *)(request->ie + ie_len);
  5080. else if (request->ssids)
  5081. request->match_sets =
  5082. (void *)(request->ssids + n_ssids);
  5083. else
  5084. request->match_sets =
  5085. (void *)(request->channels + n_channels);
  5086. }
  5087. request->n_match_sets = n_match_sets;
  5088. i = 0;
  5089. if (attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
  5090. /* user specified, bail out if channel not found */
  5091. nla_for_each_nested(attr,
  5092. attrs[NL80211_ATTR_SCAN_FREQUENCIES],
  5093. tmp) {
  5094. struct ieee80211_channel *chan;
  5095. chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
  5096. if (!chan) {
  5097. err = -EINVAL;
  5098. goto out_free;
  5099. }
  5100. /* ignore disabled channels */
  5101. if (chan->flags & IEEE80211_CHAN_DISABLED)
  5102. continue;
  5103. request->channels[i] = chan;
  5104. i++;
  5105. }
  5106. } else {
  5107. /* all channels */
  5108. for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
  5109. int j;
  5110. if (!wiphy->bands[band])
  5111. continue;
  5112. for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
  5113. struct ieee80211_channel *chan;
  5114. chan = &wiphy->bands[band]->channels[j];
  5115. if (chan->flags & IEEE80211_CHAN_DISABLED)
  5116. continue;
  5117. request->channels[i] = chan;
  5118. i++;
  5119. }
  5120. }
  5121. }
  5122. if (!i) {
  5123. err = -EINVAL;
  5124. goto out_free;
  5125. }
  5126. request->n_channels = i;
  5127. i = 0;
  5128. if (attrs[NL80211_ATTR_SCAN_SSIDS]) {
  5129. nla_for_each_nested(attr, attrs[NL80211_ATTR_SCAN_SSIDS],
  5130. tmp) {
  5131. if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
  5132. err = -EINVAL;
  5133. goto out_free;
  5134. }
  5135. request->ssids[i].ssid_len = nla_len(attr);
  5136. memcpy(request->ssids[i].ssid, nla_data(attr),
  5137. nla_len(attr));
  5138. i++;
  5139. }
  5140. }
  5141. i = 0;
  5142. if (attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
  5143. nla_for_each_nested(attr,
  5144. attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
  5145. tmp) {
  5146. struct nlattr *ssid, *rssi;
  5147. err = nla_parse(tb, NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
  5148. nla_data(attr), nla_len(attr),
  5149. nl80211_match_policy);
  5150. if (err)
  5151. goto out_free;
  5152. ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
  5153. if (ssid) {
  5154. if (WARN_ON(i >= n_match_sets)) {
  5155. /* this indicates a programming error,
  5156. * the loop above should have verified
  5157. * things properly
  5158. */
  5159. err = -EINVAL;
  5160. goto out_free;
  5161. }
  5162. if (nla_len(ssid) > IEEE80211_MAX_SSID_LEN) {
  5163. err = -EINVAL;
  5164. goto out_free;
  5165. }
  5166. memcpy(request->match_sets[i].ssid.ssid,
  5167. nla_data(ssid), nla_len(ssid));
  5168. request->match_sets[i].ssid.ssid_len =
  5169. nla_len(ssid);
  5170. /* special attribute - old implemenation w/a */
  5171. request->match_sets[i].rssi_thold =
  5172. default_match_rssi;
  5173. rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
  5174. if (rssi)
  5175. request->match_sets[i].rssi_thold =
  5176. nla_get_s32(rssi);
  5177. }
  5178. i++;
  5179. }
  5180. /* there was no other matchset, so the RSSI one is alone */
  5181. if (i == 0 && n_match_sets)
  5182. request->match_sets[0].rssi_thold = default_match_rssi;
  5183. request->min_rssi_thold = INT_MAX;
  5184. for (i = 0; i < n_match_sets; i++)
  5185. request->min_rssi_thold =
  5186. min(request->match_sets[i].rssi_thold,
  5187. request->min_rssi_thold);
  5188. } else {
  5189. request->min_rssi_thold = NL80211_SCAN_RSSI_THOLD_OFF;
  5190. }
  5191. if (ie_len) {
  5192. request->ie_len = ie_len;
  5193. memcpy((void *)request->ie,
  5194. nla_data(attrs[NL80211_ATTR_IE]),
  5195. request->ie_len);
  5196. }
  5197. if (attrs[NL80211_ATTR_SCAN_FLAGS]) {
  5198. request->flags = nla_get_u32(
  5199. attrs[NL80211_ATTR_SCAN_FLAGS]);
  5200. if ((request->flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
  5201. !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) {
  5202. err = -EOPNOTSUPP;
  5203. goto out_free;
  5204. }
  5205. if (request->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
  5206. u32 flg = NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR;
  5207. if (!wdev) /* must be net-detect */
  5208. flg = NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
  5209. if (!(wiphy->features & flg)) {
  5210. err = -EOPNOTSUPP;
  5211. goto out_free;
  5212. }
  5213. if (wdev && wdev->current_bss) {
  5214. err = -EOPNOTSUPP;
  5215. goto out_free;
  5216. }
  5217. err = nl80211_parse_random_mac(attrs, request->mac_addr,
  5218. request->mac_addr_mask);
  5219. if (err)
  5220. goto out_free;
  5221. }
  5222. }
  5223. request->interval = interval;
  5224. request->scan_start = jiffies;
  5225. return request;
  5226. out_free:
  5227. kfree(request);
  5228. return ERR_PTR(err);
  5229. }
  5230. static int nl80211_start_sched_scan(struct sk_buff *skb,
  5231. struct genl_info *info)
  5232. {
  5233. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  5234. struct net_device *dev = info->user_ptr[1];
  5235. struct wireless_dev *wdev = dev->ieee80211_ptr;
  5236. struct cfg80211_sched_scan_request *sched_scan_req;
  5237. int err;
  5238. if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
  5239. !rdev->ops->sched_scan_start)
  5240. return -EOPNOTSUPP;
  5241. if (rdev->sched_scan_req)
  5242. return -EINPROGRESS;
  5243. sched_scan_req = nl80211_parse_sched_scan(&rdev->wiphy, wdev,
  5244. info->attrs);
  5245. err = PTR_ERR_OR_ZERO(sched_scan_req);
  5246. if (err)
  5247. goto out_err;
  5248. err = rdev_sched_scan_start(rdev, dev, sched_scan_req);
  5249. if (err)
  5250. goto out_free;
  5251. sched_scan_req->dev = dev;
  5252. sched_scan_req->wiphy = &rdev->wiphy;
  5253. if (info->attrs[NL80211_ATTR_SOCKET_OWNER])
  5254. sched_scan_req->owner_nlportid = info->snd_portid;
  5255. rcu_assign_pointer(rdev->sched_scan_req, sched_scan_req);
  5256. nl80211_send_sched_scan(rdev, dev,
  5257. NL80211_CMD_START_SCHED_SCAN);
  5258. return 0;
  5259. out_free:
  5260. kfree(sched_scan_req);
  5261. out_err:
  5262. return err;
  5263. }
  5264. static int nl80211_stop_sched_scan(struct sk_buff *skb,
  5265. struct genl_info *info)
  5266. {
  5267. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  5268. if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
  5269. !rdev->ops->sched_scan_stop)
  5270. return -EOPNOTSUPP;
  5271. return __cfg80211_stop_sched_scan(rdev, false);
  5272. }
  5273. static int nl80211_start_radar_detection(struct sk_buff *skb,
  5274. struct genl_info *info)
  5275. {
  5276. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  5277. struct net_device *dev = info->user_ptr[1];
  5278. struct wireless_dev *wdev = dev->ieee80211_ptr;
  5279. struct cfg80211_chan_def chandef;
  5280. enum nl80211_dfs_regions dfs_region;
  5281. unsigned int cac_time_ms;
  5282. int err;
  5283. dfs_region = reg_get_dfs_region(wdev->wiphy);
  5284. if (dfs_region == NL80211_DFS_UNSET)
  5285. return -EINVAL;
  5286. err = nl80211_parse_chandef(rdev, info, &chandef);
  5287. if (err)
  5288. return err;
  5289. if (netif_carrier_ok(dev))
  5290. return -EBUSY;
  5291. if (wdev->cac_started)
  5292. return -EBUSY;
  5293. err = cfg80211_chandef_dfs_required(wdev->wiphy, &chandef,
  5294. wdev->iftype);
  5295. if (err < 0)
  5296. return err;
  5297. if (err == 0)
  5298. return -EINVAL;
  5299. if (!cfg80211_chandef_dfs_usable(wdev->wiphy, &chandef))
  5300. return -EINVAL;
  5301. if (!rdev->ops->start_radar_detection)
  5302. return -EOPNOTSUPP;
  5303. cac_time_ms = cfg80211_chandef_dfs_cac_time(&rdev->wiphy, &chandef);
  5304. if (WARN_ON(!cac_time_ms))
  5305. cac_time_ms = IEEE80211_DFS_MIN_CAC_TIME_MS;
  5306. err = rdev->ops->start_radar_detection(&rdev->wiphy, dev, &chandef,
  5307. cac_time_ms);
  5308. if (!err) {
  5309. wdev->chandef = chandef;
  5310. wdev->cac_started = true;
  5311. wdev->cac_start_time = jiffies;
  5312. wdev->cac_time_ms = cac_time_ms;
  5313. }
  5314. return err;
  5315. }
  5316. static int nl80211_channel_switch(struct sk_buff *skb, struct genl_info *info)
  5317. {
  5318. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  5319. struct net_device *dev = info->user_ptr[1];
  5320. struct wireless_dev *wdev = dev->ieee80211_ptr;
  5321. struct cfg80211_csa_settings params;
  5322. /* csa_attrs is defined static to avoid waste of stack size - this
  5323. * function is called under RTNL lock, so this should not be a problem.
  5324. */
  5325. static struct nlattr *csa_attrs[NL80211_ATTR_MAX+1];
  5326. int err;
  5327. bool need_new_beacon = false;
  5328. int len, i;
  5329. u32 cs_count;
  5330. if (!rdev->ops->channel_switch ||
  5331. !(rdev->wiphy.flags & WIPHY_FLAG_HAS_CHANNEL_SWITCH))
  5332. return -EOPNOTSUPP;
  5333. switch (dev->ieee80211_ptr->iftype) {
  5334. case NL80211_IFTYPE_AP:
  5335. case NL80211_IFTYPE_P2P_GO:
  5336. need_new_beacon = true;
  5337. /* useless if AP is not running */
  5338. if (!wdev->beacon_interval)
  5339. return -ENOTCONN;
  5340. break;
  5341. case NL80211_IFTYPE_ADHOC:
  5342. if (!wdev->ssid_len)
  5343. return -ENOTCONN;
  5344. break;
  5345. case NL80211_IFTYPE_MESH_POINT:
  5346. if (!wdev->mesh_id_len)
  5347. return -ENOTCONN;
  5348. break;
  5349. default:
  5350. return -EOPNOTSUPP;
  5351. }
  5352. memset(&params, 0, sizeof(params));
  5353. if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
  5354. !info->attrs[NL80211_ATTR_CH_SWITCH_COUNT])
  5355. return -EINVAL;
  5356. /* only important for AP, IBSS and mesh create IEs internally */
  5357. if (need_new_beacon && !info->attrs[NL80211_ATTR_CSA_IES])
  5358. return -EINVAL;
  5359. /* Even though the attribute is u32, the specification says
  5360. * u8, so let's make sure we don't overflow.
  5361. */
  5362. cs_count = nla_get_u32(info->attrs[NL80211_ATTR_CH_SWITCH_COUNT]);
  5363. if (cs_count > 255)
  5364. return -EINVAL;
  5365. params.count = cs_count;
  5366. if (!need_new_beacon)
  5367. goto skip_beacons;
  5368. err = nl80211_parse_beacon(info->attrs, &params.beacon_after);
  5369. if (err)
  5370. return err;
  5371. err = nla_parse_nested(csa_attrs, NL80211_ATTR_MAX,
  5372. info->attrs[NL80211_ATTR_CSA_IES],
  5373. nl80211_policy);
  5374. if (err)
  5375. return err;
  5376. err = nl80211_parse_beacon(csa_attrs, &params.beacon_csa);
  5377. if (err)
  5378. return err;
  5379. if (!csa_attrs[NL80211_ATTR_CSA_C_OFF_BEACON])
  5380. return -EINVAL;
  5381. len = nla_len(csa_attrs[NL80211_ATTR_CSA_C_OFF_BEACON]);
  5382. if (!len || (len % sizeof(u16)))
  5383. return -EINVAL;
  5384. params.n_counter_offsets_beacon = len / sizeof(u16);
  5385. if (rdev->wiphy.max_num_csa_counters &&
  5386. (params.n_counter_offsets_beacon >
  5387. rdev->wiphy.max_num_csa_counters))
  5388. return -EINVAL;
  5389. params.counter_offsets_beacon =
  5390. nla_data(csa_attrs[NL80211_ATTR_CSA_C_OFF_BEACON]);
  5391. /* sanity checks - counters should fit and be the same */
  5392. for (i = 0; i < params.n_counter_offsets_beacon; i++) {
  5393. u16 offset = params.counter_offsets_beacon[i];
  5394. if (offset >= params.beacon_csa.tail_len)
  5395. return -EINVAL;
  5396. if (params.beacon_csa.tail[offset] != params.count)
  5397. return -EINVAL;
  5398. }
  5399. if (csa_attrs[NL80211_ATTR_CSA_C_OFF_PRESP]) {
  5400. len = nla_len(csa_attrs[NL80211_ATTR_CSA_C_OFF_PRESP]);
  5401. if (!len || (len % sizeof(u16)))
  5402. return -EINVAL;
  5403. params.n_counter_offsets_presp = len / sizeof(u16);
  5404. if (rdev->wiphy.max_num_csa_counters &&
  5405. (params.n_counter_offsets_beacon >
  5406. rdev->wiphy.max_num_csa_counters))
  5407. return -EINVAL;
  5408. params.counter_offsets_presp =
  5409. nla_data(csa_attrs[NL80211_ATTR_CSA_C_OFF_PRESP]);
  5410. /* sanity checks - counters should fit and be the same */
  5411. for (i = 0; i < params.n_counter_offsets_presp; i++) {
  5412. u16 offset = params.counter_offsets_presp[i];
  5413. if (offset >= params.beacon_csa.probe_resp_len)
  5414. return -EINVAL;
  5415. if (params.beacon_csa.probe_resp[offset] !=
  5416. params.count)
  5417. return -EINVAL;
  5418. }
  5419. }
  5420. skip_beacons:
  5421. err = nl80211_parse_chandef(rdev, info, &params.chandef);
  5422. if (err)
  5423. return err;
  5424. if (!cfg80211_reg_can_beacon(&rdev->wiphy, &params.chandef,
  5425. wdev->iftype))
  5426. return -EINVAL;
  5427. err = cfg80211_chandef_dfs_required(wdev->wiphy,
  5428. &params.chandef,
  5429. wdev->iftype);
  5430. if (err < 0)
  5431. return err;
  5432. if (err > 0)
  5433. params.radar_required = true;
  5434. if (info->attrs[NL80211_ATTR_CH_SWITCH_BLOCK_TX])
  5435. params.block_tx = true;
  5436. wdev_lock(wdev);
  5437. err = rdev_channel_switch(rdev, dev, &params);
  5438. wdev_unlock(wdev);
  5439. return err;
  5440. }
  5441. static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
  5442. u32 seq, int flags,
  5443. struct cfg80211_registered_device *rdev,
  5444. struct wireless_dev *wdev,
  5445. struct cfg80211_internal_bss *intbss)
  5446. {
  5447. struct cfg80211_bss *res = &intbss->pub;
  5448. const struct cfg80211_bss_ies *ies;
  5449. void *hdr;
  5450. struct nlattr *bss;
  5451. ASSERT_WDEV_LOCK(wdev);
  5452. hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
  5453. NL80211_CMD_NEW_SCAN_RESULTS);
  5454. if (!hdr)
  5455. return -1;
  5456. genl_dump_check_consistent(cb, hdr, &nl80211_fam);
  5457. if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation))
  5458. goto nla_put_failure;
  5459. if (wdev->netdev &&
  5460. nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
  5461. goto nla_put_failure;
  5462. if (nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
  5463. goto nla_put_failure;
  5464. bss = nla_nest_start(msg, NL80211_ATTR_BSS);
  5465. if (!bss)
  5466. goto nla_put_failure;
  5467. if ((!is_zero_ether_addr(res->bssid) &&
  5468. nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)))
  5469. goto nla_put_failure;
  5470. rcu_read_lock();
  5471. /* indicate whether we have probe response data or not */
  5472. if (rcu_access_pointer(res->proberesp_ies) &&
  5473. nla_put_flag(msg, NL80211_BSS_PRESP_DATA))
  5474. goto fail_unlock_rcu;
  5475. /* this pointer prefers to be pointed to probe response data
  5476. * but is always valid
  5477. */
  5478. ies = rcu_dereference(res->ies);
  5479. if (ies) {
  5480. if (nla_put_u64(msg, NL80211_BSS_TSF, ies->tsf))
  5481. goto fail_unlock_rcu;
  5482. if (ies->len && nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
  5483. ies->len, ies->data))
  5484. goto fail_unlock_rcu;
  5485. }
  5486. /* and this pointer is always (unless driver didn't know) beacon data */
  5487. ies = rcu_dereference(res->beacon_ies);
  5488. if (ies && ies->from_beacon) {
  5489. if (nla_put_u64(msg, NL80211_BSS_BEACON_TSF, ies->tsf))
  5490. goto fail_unlock_rcu;
  5491. if (ies->len && nla_put(msg, NL80211_BSS_BEACON_IES,
  5492. ies->len, ies->data))
  5493. goto fail_unlock_rcu;
  5494. }
  5495. rcu_read_unlock();
  5496. if (res->beacon_interval &&
  5497. nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
  5498. goto nla_put_failure;
  5499. if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
  5500. nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
  5501. nla_put_u32(msg, NL80211_BSS_CHAN_WIDTH, res->scan_width) ||
  5502. nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
  5503. jiffies_to_msecs(jiffies - intbss->ts)))
  5504. goto nla_put_failure;
  5505. switch (rdev->wiphy.signal_type) {
  5506. case CFG80211_SIGNAL_TYPE_MBM:
  5507. if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
  5508. goto nla_put_failure;
  5509. break;
  5510. case CFG80211_SIGNAL_TYPE_UNSPEC:
  5511. if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
  5512. goto nla_put_failure;
  5513. break;
  5514. default:
  5515. break;
  5516. }
  5517. switch (wdev->iftype) {
  5518. case NL80211_IFTYPE_P2P_CLIENT:
  5519. case NL80211_IFTYPE_STATION:
  5520. if (intbss == wdev->current_bss &&
  5521. nla_put_u32(msg, NL80211_BSS_STATUS,
  5522. NL80211_BSS_STATUS_ASSOCIATED))
  5523. goto nla_put_failure;
  5524. break;
  5525. case NL80211_IFTYPE_ADHOC:
  5526. if (intbss == wdev->current_bss &&
  5527. nla_put_u32(msg, NL80211_BSS_STATUS,
  5528. NL80211_BSS_STATUS_IBSS_JOINED))
  5529. goto nla_put_failure;
  5530. break;
  5531. default:
  5532. break;
  5533. }
  5534. nla_nest_end(msg, bss);
  5535. return genlmsg_end(msg, hdr);
  5536. fail_unlock_rcu:
  5537. rcu_read_unlock();
  5538. nla_put_failure:
  5539. genlmsg_cancel(msg, hdr);
  5540. return -EMSGSIZE;
  5541. }
  5542. static int nl80211_dump_scan(struct sk_buff *skb, struct netlink_callback *cb)
  5543. {
  5544. struct cfg80211_registered_device *rdev;
  5545. struct cfg80211_internal_bss *scan;
  5546. struct wireless_dev *wdev;
  5547. int start = cb->args[2], idx = 0;
  5548. int err;
  5549. err = nl80211_prepare_wdev_dump(skb, cb, &rdev, &wdev);
  5550. if (err)
  5551. return err;
  5552. wdev_lock(wdev);
  5553. spin_lock_bh(&rdev->bss_lock);
  5554. cfg80211_bss_expire(rdev);
  5555. cb->seq = rdev->bss_generation;
  5556. list_for_each_entry(scan, &rdev->bss_list, list) {
  5557. if (++idx <= start)
  5558. continue;
  5559. if (nl80211_send_bss(skb, cb,
  5560. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  5561. rdev, wdev, scan) < 0) {
  5562. idx--;
  5563. break;
  5564. }
  5565. }
  5566. spin_unlock_bh(&rdev->bss_lock);
  5567. wdev_unlock(wdev);
  5568. cb->args[2] = idx;
  5569. nl80211_finish_wdev_dump(rdev);
  5570. return skb->len;
  5571. }
  5572. static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
  5573. int flags, struct net_device *dev,
  5574. bool allow_radio_stats,
  5575. struct survey_info *survey)
  5576. {
  5577. void *hdr;
  5578. struct nlattr *infoattr;
  5579. /* skip radio stats if userspace didn't request them */
  5580. if (!survey->channel && !allow_radio_stats)
  5581. return 0;
  5582. hdr = nl80211hdr_put(msg, portid, seq, flags,
  5583. NL80211_CMD_NEW_SURVEY_RESULTS);
  5584. if (!hdr)
  5585. return -ENOMEM;
  5586. if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
  5587. goto nla_put_failure;
  5588. infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
  5589. if (!infoattr)
  5590. goto nla_put_failure;
  5591. if (survey->channel &&
  5592. nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
  5593. survey->channel->center_freq))
  5594. goto nla_put_failure;
  5595. if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
  5596. nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
  5597. goto nla_put_failure;
  5598. if ((survey->filled & SURVEY_INFO_IN_USE) &&
  5599. nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
  5600. goto nla_put_failure;
  5601. if ((survey->filled & SURVEY_INFO_TIME) &&
  5602. nla_put_u64(msg, NL80211_SURVEY_INFO_TIME,
  5603. survey->time))
  5604. goto nla_put_failure;
  5605. if ((survey->filled & SURVEY_INFO_TIME_BUSY) &&
  5606. nla_put_u64(msg, NL80211_SURVEY_INFO_TIME_BUSY,
  5607. survey->time_busy))
  5608. goto nla_put_failure;
  5609. if ((survey->filled & SURVEY_INFO_TIME_EXT_BUSY) &&
  5610. nla_put_u64(msg, NL80211_SURVEY_INFO_TIME_EXT_BUSY,
  5611. survey->time_ext_busy))
  5612. goto nla_put_failure;
  5613. if ((survey->filled & SURVEY_INFO_TIME_RX) &&
  5614. nla_put_u64(msg, NL80211_SURVEY_INFO_TIME_RX,
  5615. survey->time_rx))
  5616. goto nla_put_failure;
  5617. if ((survey->filled & SURVEY_INFO_TIME_TX) &&
  5618. nla_put_u64(msg, NL80211_SURVEY_INFO_TIME_TX,
  5619. survey->time_tx))
  5620. goto nla_put_failure;
  5621. if ((survey->filled & SURVEY_INFO_TIME_SCAN) &&
  5622. nla_put_u64(msg, NL80211_SURVEY_INFO_TIME_SCAN,
  5623. survey->time_scan))
  5624. goto nla_put_failure;
  5625. nla_nest_end(msg, infoattr);
  5626. return genlmsg_end(msg, hdr);
  5627. nla_put_failure:
  5628. genlmsg_cancel(msg, hdr);
  5629. return -EMSGSIZE;
  5630. }
  5631. static int nl80211_dump_survey(struct sk_buff *skb, struct netlink_callback *cb)
  5632. {
  5633. struct survey_info survey;
  5634. struct cfg80211_registered_device *rdev;
  5635. struct wireless_dev *wdev;
  5636. int survey_idx = cb->args[2];
  5637. int res;
  5638. bool radio_stats;
  5639. res = nl80211_prepare_wdev_dump(skb, cb, &rdev, &wdev);
  5640. if (res)
  5641. return res;
  5642. /* prepare_wdev_dump parsed the attributes */
  5643. radio_stats = nl80211_fam.attrbuf[NL80211_ATTR_SURVEY_RADIO_STATS];
  5644. if (!wdev->netdev) {
  5645. res = -EINVAL;
  5646. goto out_err;
  5647. }
  5648. if (!rdev->ops->dump_survey) {
  5649. res = -EOPNOTSUPP;
  5650. goto out_err;
  5651. }
  5652. while (1) {
  5653. res = rdev_dump_survey(rdev, wdev->netdev, survey_idx, &survey);
  5654. if (res == -ENOENT)
  5655. break;
  5656. if (res)
  5657. goto out_err;
  5658. /* don't send disabled channels, but do send non-channel data */
  5659. if (survey.channel &&
  5660. survey.channel->flags & IEEE80211_CHAN_DISABLED) {
  5661. survey_idx++;
  5662. continue;
  5663. }
  5664. if (nl80211_send_survey(skb,
  5665. NETLINK_CB(cb->skb).portid,
  5666. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  5667. wdev->netdev, radio_stats, &survey) < 0)
  5668. goto out;
  5669. survey_idx++;
  5670. }
  5671. out:
  5672. cb->args[2] = survey_idx;
  5673. res = skb->len;
  5674. out_err:
  5675. nl80211_finish_wdev_dump(rdev);
  5676. return res;
  5677. }
  5678. static bool nl80211_valid_wpa_versions(u32 wpa_versions)
  5679. {
  5680. return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
  5681. NL80211_WPA_VERSION_2));
  5682. }
  5683. static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
  5684. {
  5685. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  5686. struct net_device *dev = info->user_ptr[1];
  5687. struct ieee80211_channel *chan;
  5688. const u8 *bssid, *ssid, *ie = NULL, *sae_data = NULL;
  5689. int err, ssid_len, ie_len = 0, sae_data_len = 0;
  5690. enum nl80211_auth_type auth_type;
  5691. struct key_parse key;
  5692. bool local_state_change;
  5693. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  5694. return -EINVAL;
  5695. if (!info->attrs[NL80211_ATTR_MAC])
  5696. return -EINVAL;
  5697. if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
  5698. return -EINVAL;
  5699. if (!info->attrs[NL80211_ATTR_SSID])
  5700. return -EINVAL;
  5701. if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
  5702. return -EINVAL;
  5703. err = nl80211_parse_key(info, &key);
  5704. if (err)
  5705. return err;
  5706. if (key.idx >= 0) {
  5707. if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
  5708. return -EINVAL;
  5709. if (!key.p.key || !key.p.key_len)
  5710. return -EINVAL;
  5711. if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
  5712. key.p.key_len != WLAN_KEY_LEN_WEP40) &&
  5713. (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
  5714. key.p.key_len != WLAN_KEY_LEN_WEP104))
  5715. return -EINVAL;
  5716. if (key.idx > 4)
  5717. return -EINVAL;
  5718. } else {
  5719. key.p.key_len = 0;
  5720. key.p.key = NULL;
  5721. }
  5722. if (key.idx >= 0) {
  5723. int i;
  5724. bool ok = false;
  5725. for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
  5726. if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
  5727. ok = true;
  5728. break;
  5729. }
  5730. }
  5731. if (!ok)
  5732. return -EINVAL;
  5733. }
  5734. if (!rdev->ops->auth)
  5735. return -EOPNOTSUPP;
  5736. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
  5737. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
  5738. return -EOPNOTSUPP;
  5739. bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  5740. chan = nl80211_get_valid_chan(&rdev->wiphy,
  5741. info->attrs[NL80211_ATTR_WIPHY_FREQ]);
  5742. if (!chan)
  5743. return -EINVAL;
  5744. ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
  5745. ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
  5746. if (info->attrs[NL80211_ATTR_IE]) {
  5747. ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  5748. ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  5749. }
  5750. auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
  5751. if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
  5752. return -EINVAL;
  5753. if (auth_type == NL80211_AUTHTYPE_SAE &&
  5754. !info->attrs[NL80211_ATTR_SAE_DATA])
  5755. return -EINVAL;
  5756. if (info->attrs[NL80211_ATTR_SAE_DATA]) {
  5757. if (auth_type != NL80211_AUTHTYPE_SAE)
  5758. return -EINVAL;
  5759. sae_data = nla_data(info->attrs[NL80211_ATTR_SAE_DATA]);
  5760. sae_data_len = nla_len(info->attrs[NL80211_ATTR_SAE_DATA]);
  5761. /* need to include at least Auth Transaction and Status Code */
  5762. if (sae_data_len < 4)
  5763. return -EINVAL;
  5764. }
  5765. local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
  5766. /*
  5767. * Since we no longer track auth state, ignore
  5768. * requests to only change local state.
  5769. */
  5770. if (local_state_change)
  5771. return 0;
  5772. wdev_lock(dev->ieee80211_ptr);
  5773. err = cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
  5774. ssid, ssid_len, ie, ie_len,
  5775. key.p.key, key.p.key_len, key.idx,
  5776. sae_data, sae_data_len);
  5777. wdev_unlock(dev->ieee80211_ptr);
  5778. return err;
  5779. }
  5780. static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
  5781. struct genl_info *info,
  5782. struct cfg80211_crypto_settings *settings,
  5783. int cipher_limit)
  5784. {
  5785. memset(settings, 0, sizeof(*settings));
  5786. settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
  5787. if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
  5788. u16 proto;
  5789. proto = nla_get_u16(
  5790. info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
  5791. settings->control_port_ethertype = cpu_to_be16(proto);
  5792. if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
  5793. proto != ETH_P_PAE)
  5794. return -EINVAL;
  5795. if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
  5796. settings->control_port_no_encrypt = true;
  5797. } else
  5798. settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
  5799. if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
  5800. void *data;
  5801. int len, i;
  5802. data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
  5803. len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
  5804. settings->n_ciphers_pairwise = len / sizeof(u32);
  5805. if (len % sizeof(u32))
  5806. return -EINVAL;
  5807. if (settings->n_ciphers_pairwise > cipher_limit)
  5808. return -EINVAL;
  5809. memcpy(settings->ciphers_pairwise, data, len);
  5810. for (i = 0; i < settings->n_ciphers_pairwise; i++)
  5811. if (!cfg80211_supported_cipher_suite(
  5812. &rdev->wiphy,
  5813. settings->ciphers_pairwise[i]))
  5814. return -EINVAL;
  5815. }
  5816. if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
  5817. settings->cipher_group =
  5818. nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
  5819. if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
  5820. settings->cipher_group))
  5821. return -EINVAL;
  5822. }
  5823. if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
  5824. settings->wpa_versions =
  5825. nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
  5826. if (!nl80211_valid_wpa_versions(settings->wpa_versions))
  5827. return -EINVAL;
  5828. }
  5829. if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
  5830. void *data;
  5831. int len;
  5832. data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
  5833. len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
  5834. settings->n_akm_suites = len / sizeof(u32);
  5835. if (len % sizeof(u32))
  5836. return -EINVAL;
  5837. if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
  5838. return -EINVAL;
  5839. memcpy(settings->akm_suites, data, len);
  5840. }
  5841. return 0;
  5842. }
  5843. static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
  5844. {
  5845. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  5846. struct net_device *dev = info->user_ptr[1];
  5847. struct ieee80211_channel *chan;
  5848. struct cfg80211_assoc_request req = {};
  5849. const u8 *bssid, *ssid;
  5850. int err, ssid_len = 0;
  5851. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  5852. return -EINVAL;
  5853. if (!info->attrs[NL80211_ATTR_MAC] ||
  5854. !info->attrs[NL80211_ATTR_SSID] ||
  5855. !info->attrs[NL80211_ATTR_WIPHY_FREQ])
  5856. return -EINVAL;
  5857. if (!rdev->ops->assoc)
  5858. return -EOPNOTSUPP;
  5859. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
  5860. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
  5861. return -EOPNOTSUPP;
  5862. bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  5863. chan = nl80211_get_valid_chan(&rdev->wiphy,
  5864. info->attrs[NL80211_ATTR_WIPHY_FREQ]);
  5865. if (!chan)
  5866. return -EINVAL;
  5867. ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
  5868. ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
  5869. if (info->attrs[NL80211_ATTR_IE]) {
  5870. req.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  5871. req.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  5872. }
  5873. if (info->attrs[NL80211_ATTR_USE_MFP]) {
  5874. enum nl80211_mfp mfp =
  5875. nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
  5876. if (mfp == NL80211_MFP_REQUIRED)
  5877. req.use_mfp = true;
  5878. else if (mfp != NL80211_MFP_NO)
  5879. return -EINVAL;
  5880. }
  5881. if (info->attrs[NL80211_ATTR_PREV_BSSID])
  5882. req.prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
  5883. if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
  5884. req.flags |= ASSOC_REQ_DISABLE_HT;
  5885. if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
  5886. memcpy(&req.ht_capa_mask,
  5887. nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
  5888. sizeof(req.ht_capa_mask));
  5889. if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
  5890. if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
  5891. return -EINVAL;
  5892. memcpy(&req.ht_capa,
  5893. nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
  5894. sizeof(req.ht_capa));
  5895. }
  5896. if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
  5897. req.flags |= ASSOC_REQ_DISABLE_VHT;
  5898. if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
  5899. memcpy(&req.vht_capa_mask,
  5900. nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
  5901. sizeof(req.vht_capa_mask));
  5902. if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
  5903. if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
  5904. return -EINVAL;
  5905. memcpy(&req.vht_capa,
  5906. nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
  5907. sizeof(req.vht_capa));
  5908. }
  5909. if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
  5910. if (!(rdev->wiphy.features &
  5911. NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) ||
  5912. !(rdev->wiphy.features & NL80211_FEATURE_QUIET))
  5913. return -EINVAL;
  5914. req.flags |= ASSOC_REQ_USE_RRM;
  5915. }
  5916. err = nl80211_crypto_settings(rdev, info, &req.crypto, 1);
  5917. if (!err) {
  5918. wdev_lock(dev->ieee80211_ptr);
  5919. err = cfg80211_mlme_assoc(rdev, dev, chan, bssid,
  5920. ssid, ssid_len, &req);
  5921. wdev_unlock(dev->ieee80211_ptr);
  5922. }
  5923. return err;
  5924. }
  5925. static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
  5926. {
  5927. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  5928. struct net_device *dev = info->user_ptr[1];
  5929. const u8 *ie = NULL, *bssid;
  5930. int ie_len = 0, err;
  5931. u16 reason_code;
  5932. bool local_state_change;
  5933. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  5934. return -EINVAL;
  5935. if (!info->attrs[NL80211_ATTR_MAC])
  5936. return -EINVAL;
  5937. if (!info->attrs[NL80211_ATTR_REASON_CODE])
  5938. return -EINVAL;
  5939. if (!rdev->ops->deauth)
  5940. return -EOPNOTSUPP;
  5941. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
  5942. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
  5943. return -EOPNOTSUPP;
  5944. bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  5945. reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
  5946. if (reason_code == 0) {
  5947. /* Reason Code 0 is reserved */
  5948. return -EINVAL;
  5949. }
  5950. if (info->attrs[NL80211_ATTR_IE]) {
  5951. ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  5952. ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  5953. }
  5954. local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
  5955. wdev_lock(dev->ieee80211_ptr);
  5956. err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
  5957. local_state_change);
  5958. wdev_unlock(dev->ieee80211_ptr);
  5959. return err;
  5960. }
  5961. static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
  5962. {
  5963. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  5964. struct net_device *dev = info->user_ptr[1];
  5965. const u8 *ie = NULL, *bssid;
  5966. int ie_len = 0, err;
  5967. u16 reason_code;
  5968. bool local_state_change;
  5969. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  5970. return -EINVAL;
  5971. if (!info->attrs[NL80211_ATTR_MAC])
  5972. return -EINVAL;
  5973. if (!info->attrs[NL80211_ATTR_REASON_CODE])
  5974. return -EINVAL;
  5975. if (!rdev->ops->disassoc)
  5976. return -EOPNOTSUPP;
  5977. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
  5978. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
  5979. return -EOPNOTSUPP;
  5980. bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  5981. reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
  5982. if (reason_code == 0) {
  5983. /* Reason Code 0 is reserved */
  5984. return -EINVAL;
  5985. }
  5986. if (info->attrs[NL80211_ATTR_IE]) {
  5987. ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  5988. ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  5989. }
  5990. local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
  5991. wdev_lock(dev->ieee80211_ptr);
  5992. err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
  5993. local_state_change);
  5994. wdev_unlock(dev->ieee80211_ptr);
  5995. return err;
  5996. }
  5997. static bool
  5998. nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
  5999. int mcast_rate[IEEE80211_NUM_BANDS],
  6000. int rateval)
  6001. {
  6002. struct wiphy *wiphy = &rdev->wiphy;
  6003. bool found = false;
  6004. int band, i;
  6005. for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
  6006. struct ieee80211_supported_band *sband;
  6007. sband = wiphy->bands[band];
  6008. if (!sband)
  6009. continue;
  6010. for (i = 0; i < sband->n_bitrates; i++) {
  6011. if (sband->bitrates[i].bitrate == rateval) {
  6012. mcast_rate[band] = i + 1;
  6013. found = true;
  6014. break;
  6015. }
  6016. }
  6017. }
  6018. return found;
  6019. }
  6020. static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
  6021. {
  6022. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6023. struct net_device *dev = info->user_ptr[1];
  6024. struct cfg80211_ibss_params ibss;
  6025. struct wiphy *wiphy;
  6026. struct cfg80211_cached_keys *connkeys = NULL;
  6027. int err;
  6028. memset(&ibss, 0, sizeof(ibss));
  6029. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  6030. return -EINVAL;
  6031. if (!info->attrs[NL80211_ATTR_SSID] ||
  6032. !nla_len(info->attrs[NL80211_ATTR_SSID]))
  6033. return -EINVAL;
  6034. ibss.beacon_interval = 100;
  6035. if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
  6036. ibss.beacon_interval =
  6037. nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
  6038. if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
  6039. return -EINVAL;
  6040. }
  6041. if (!rdev->ops->join_ibss)
  6042. return -EOPNOTSUPP;
  6043. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
  6044. return -EOPNOTSUPP;
  6045. wiphy = &rdev->wiphy;
  6046. if (info->attrs[NL80211_ATTR_MAC]) {
  6047. ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  6048. if (!is_valid_ether_addr(ibss.bssid))
  6049. return -EINVAL;
  6050. }
  6051. ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
  6052. ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
  6053. if (info->attrs[NL80211_ATTR_IE]) {
  6054. ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  6055. ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  6056. }
  6057. err = nl80211_parse_chandef(rdev, info, &ibss.chandef);
  6058. if (err)
  6059. return err;
  6060. if (!cfg80211_reg_can_beacon(&rdev->wiphy, &ibss.chandef,
  6061. NL80211_IFTYPE_ADHOC))
  6062. return -EINVAL;
  6063. switch (ibss.chandef.width) {
  6064. case NL80211_CHAN_WIDTH_5:
  6065. case NL80211_CHAN_WIDTH_10:
  6066. case NL80211_CHAN_WIDTH_20_NOHT:
  6067. break;
  6068. case NL80211_CHAN_WIDTH_20:
  6069. case NL80211_CHAN_WIDTH_40:
  6070. if (rdev->wiphy.features & NL80211_FEATURE_HT_IBSS)
  6071. break;
  6072. default:
  6073. return -EINVAL;
  6074. }
  6075. ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
  6076. ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
  6077. if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
  6078. u8 *rates =
  6079. nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
  6080. int n_rates =
  6081. nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
  6082. struct ieee80211_supported_band *sband =
  6083. wiphy->bands[ibss.chandef.chan->band];
  6084. err = ieee80211_get_ratemask(sband, rates, n_rates,
  6085. &ibss.basic_rates);
  6086. if (err)
  6087. return err;
  6088. }
  6089. if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
  6090. memcpy(&ibss.ht_capa_mask,
  6091. nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
  6092. sizeof(ibss.ht_capa_mask));
  6093. if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
  6094. if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
  6095. return -EINVAL;
  6096. memcpy(&ibss.ht_capa,
  6097. nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
  6098. sizeof(ibss.ht_capa));
  6099. }
  6100. if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
  6101. !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
  6102. nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
  6103. return -EINVAL;
  6104. if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
  6105. bool no_ht = false;
  6106. connkeys = nl80211_parse_connkeys(rdev,
  6107. info->attrs[NL80211_ATTR_KEYS],
  6108. &no_ht);
  6109. if (IS_ERR(connkeys))
  6110. return PTR_ERR(connkeys);
  6111. if ((ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT) &&
  6112. no_ht) {
  6113. kfree(connkeys);
  6114. return -EINVAL;
  6115. }
  6116. }
  6117. ibss.control_port =
  6118. nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
  6119. ibss.userspace_handles_dfs =
  6120. nla_get_flag(info->attrs[NL80211_ATTR_HANDLE_DFS]);
  6121. err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
  6122. if (err)
  6123. kzfree(connkeys);
  6124. return err;
  6125. }
  6126. static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
  6127. {
  6128. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6129. struct net_device *dev = info->user_ptr[1];
  6130. if (!rdev->ops->leave_ibss)
  6131. return -EOPNOTSUPP;
  6132. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
  6133. return -EOPNOTSUPP;
  6134. return cfg80211_leave_ibss(rdev, dev, false);
  6135. }
  6136. static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
  6137. {
  6138. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6139. struct net_device *dev = info->user_ptr[1];
  6140. int mcast_rate[IEEE80211_NUM_BANDS];
  6141. u32 nla_rate;
  6142. int err;
  6143. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
  6144. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
  6145. return -EOPNOTSUPP;
  6146. if (!rdev->ops->set_mcast_rate)
  6147. return -EOPNOTSUPP;
  6148. memset(mcast_rate, 0, sizeof(mcast_rate));
  6149. if (!info->attrs[NL80211_ATTR_MCAST_RATE])
  6150. return -EINVAL;
  6151. nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
  6152. if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
  6153. return -EINVAL;
  6154. err = rdev->ops->set_mcast_rate(&rdev->wiphy, dev, mcast_rate);
  6155. return err;
  6156. }
  6157. static struct sk_buff *
  6158. __cfg80211_alloc_vendor_skb(struct cfg80211_registered_device *rdev,
  6159. int approxlen, u32 portid, u32 seq,
  6160. enum nl80211_commands cmd,
  6161. enum nl80211_attrs attr,
  6162. const struct nl80211_vendor_cmd_info *info,
  6163. gfp_t gfp)
  6164. {
  6165. struct sk_buff *skb;
  6166. void *hdr;
  6167. struct nlattr *data;
  6168. skb = nlmsg_new(approxlen + 100, gfp);
  6169. if (!skb)
  6170. return NULL;
  6171. hdr = nl80211hdr_put(skb, portid, seq, 0, cmd);
  6172. if (!hdr) {
  6173. kfree_skb(skb);
  6174. return NULL;
  6175. }
  6176. if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
  6177. goto nla_put_failure;
  6178. if (info) {
  6179. if (nla_put_u32(skb, NL80211_ATTR_VENDOR_ID,
  6180. info->vendor_id))
  6181. goto nla_put_failure;
  6182. if (nla_put_u32(skb, NL80211_ATTR_VENDOR_SUBCMD,
  6183. info->subcmd))
  6184. goto nla_put_failure;
  6185. }
  6186. data = nla_nest_start(skb, attr);
  6187. ((void **)skb->cb)[0] = rdev;
  6188. ((void **)skb->cb)[1] = hdr;
  6189. ((void **)skb->cb)[2] = data;
  6190. return skb;
  6191. nla_put_failure:
  6192. kfree_skb(skb);
  6193. return NULL;
  6194. }
  6195. struct sk_buff *__cfg80211_alloc_event_skb(struct wiphy *wiphy,
  6196. enum nl80211_commands cmd,
  6197. enum nl80211_attrs attr,
  6198. int vendor_event_idx,
  6199. int approxlen, gfp_t gfp)
  6200. {
  6201. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  6202. const struct nl80211_vendor_cmd_info *info;
  6203. switch (cmd) {
  6204. case NL80211_CMD_TESTMODE:
  6205. if (WARN_ON(vendor_event_idx != -1))
  6206. return NULL;
  6207. info = NULL;
  6208. break;
  6209. case NL80211_CMD_VENDOR:
  6210. if (WARN_ON(vendor_event_idx < 0 ||
  6211. vendor_event_idx >= wiphy->n_vendor_events))
  6212. return NULL;
  6213. info = &wiphy->vendor_events[vendor_event_idx];
  6214. break;
  6215. default:
  6216. WARN_ON(1);
  6217. return NULL;
  6218. }
  6219. return __cfg80211_alloc_vendor_skb(rdev, approxlen, 0, 0,
  6220. cmd, attr, info, gfp);
  6221. }
  6222. EXPORT_SYMBOL(__cfg80211_alloc_event_skb);
  6223. void __cfg80211_send_event_skb(struct sk_buff *skb, gfp_t gfp)
  6224. {
  6225. struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
  6226. void *hdr = ((void **)skb->cb)[1];
  6227. struct nlattr *data = ((void **)skb->cb)[2];
  6228. enum nl80211_multicast_groups mcgrp = NL80211_MCGRP_TESTMODE;
  6229. /* clear CB data for netlink core to own from now on */
  6230. memset(skb->cb, 0, sizeof(skb->cb));
  6231. nla_nest_end(skb, data);
  6232. genlmsg_end(skb, hdr);
  6233. if (data->nla_type == NL80211_ATTR_VENDOR_DATA)
  6234. mcgrp = NL80211_MCGRP_VENDOR;
  6235. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), skb, 0,
  6236. mcgrp, gfp);
  6237. }
  6238. EXPORT_SYMBOL(__cfg80211_send_event_skb);
  6239. #ifdef CONFIG_NL80211_TESTMODE
  6240. static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
  6241. {
  6242. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6243. struct wireless_dev *wdev =
  6244. __cfg80211_wdev_from_attrs(genl_info_net(info), info->attrs);
  6245. int err;
  6246. if (!rdev->ops->testmode_cmd)
  6247. return -EOPNOTSUPP;
  6248. if (IS_ERR(wdev)) {
  6249. err = PTR_ERR(wdev);
  6250. if (err != -EINVAL)
  6251. return err;
  6252. wdev = NULL;
  6253. } else if (wdev->wiphy != &rdev->wiphy) {
  6254. return -EINVAL;
  6255. }
  6256. if (!info->attrs[NL80211_ATTR_TESTDATA])
  6257. return -EINVAL;
  6258. rdev->cur_cmd_info = info;
  6259. err = rdev_testmode_cmd(rdev, wdev,
  6260. nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
  6261. nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
  6262. rdev->cur_cmd_info = NULL;
  6263. return err;
  6264. }
  6265. static int nl80211_testmode_dump(struct sk_buff *skb,
  6266. struct netlink_callback *cb)
  6267. {
  6268. struct cfg80211_registered_device *rdev;
  6269. int err;
  6270. long phy_idx;
  6271. void *data = NULL;
  6272. int data_len = 0;
  6273. rtnl_lock();
  6274. if (cb->args[0]) {
  6275. /*
  6276. * 0 is a valid index, but not valid for args[0],
  6277. * so we need to offset by 1.
  6278. */
  6279. phy_idx = cb->args[0] - 1;
  6280. } else {
  6281. err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
  6282. nl80211_fam.attrbuf, nl80211_fam.maxattr,
  6283. nl80211_policy);
  6284. if (err)
  6285. goto out_err;
  6286. rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk),
  6287. nl80211_fam.attrbuf);
  6288. if (IS_ERR(rdev)) {
  6289. err = PTR_ERR(rdev);
  6290. goto out_err;
  6291. }
  6292. phy_idx = rdev->wiphy_idx;
  6293. rdev = NULL;
  6294. if (nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA])
  6295. cb->args[1] =
  6296. (long)nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA];
  6297. }
  6298. if (cb->args[1]) {
  6299. data = nla_data((void *)cb->args[1]);
  6300. data_len = nla_len((void *)cb->args[1]);
  6301. }
  6302. rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
  6303. if (!rdev) {
  6304. err = -ENOENT;
  6305. goto out_err;
  6306. }
  6307. if (!rdev->ops->testmode_dump) {
  6308. err = -EOPNOTSUPP;
  6309. goto out_err;
  6310. }
  6311. while (1) {
  6312. void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
  6313. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  6314. NL80211_CMD_TESTMODE);
  6315. struct nlattr *tmdata;
  6316. if (!hdr)
  6317. break;
  6318. if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
  6319. genlmsg_cancel(skb, hdr);
  6320. break;
  6321. }
  6322. tmdata = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
  6323. if (!tmdata) {
  6324. genlmsg_cancel(skb, hdr);
  6325. break;
  6326. }
  6327. err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
  6328. nla_nest_end(skb, tmdata);
  6329. if (err == -ENOBUFS || err == -ENOENT) {
  6330. genlmsg_cancel(skb, hdr);
  6331. break;
  6332. } else if (err) {
  6333. genlmsg_cancel(skb, hdr);
  6334. goto out_err;
  6335. }
  6336. genlmsg_end(skb, hdr);
  6337. }
  6338. err = skb->len;
  6339. /* see above */
  6340. cb->args[0] = phy_idx + 1;
  6341. out_err:
  6342. rtnl_unlock();
  6343. return err;
  6344. }
  6345. #endif
  6346. static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
  6347. {
  6348. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6349. struct net_device *dev = info->user_ptr[1];
  6350. struct cfg80211_connect_params connect;
  6351. struct wiphy *wiphy;
  6352. struct cfg80211_cached_keys *connkeys = NULL;
  6353. int err;
  6354. memset(&connect, 0, sizeof(connect));
  6355. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  6356. return -EINVAL;
  6357. if (!info->attrs[NL80211_ATTR_SSID] ||
  6358. !nla_len(info->attrs[NL80211_ATTR_SSID]))
  6359. return -EINVAL;
  6360. if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
  6361. connect.auth_type =
  6362. nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
  6363. if (!nl80211_valid_auth_type(rdev, connect.auth_type,
  6364. NL80211_CMD_CONNECT))
  6365. return -EINVAL;
  6366. } else
  6367. connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
  6368. connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
  6369. err = nl80211_crypto_settings(rdev, info, &connect.crypto,
  6370. NL80211_MAX_NR_CIPHER_SUITES);
  6371. if (err)
  6372. return err;
  6373. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
  6374. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
  6375. return -EOPNOTSUPP;
  6376. wiphy = &rdev->wiphy;
  6377. connect.bg_scan_period = -1;
  6378. if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
  6379. (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
  6380. connect.bg_scan_period =
  6381. nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
  6382. }
  6383. if (info->attrs[NL80211_ATTR_MAC])
  6384. connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  6385. else if (info->attrs[NL80211_ATTR_MAC_HINT])
  6386. connect.bssid_hint =
  6387. nla_data(info->attrs[NL80211_ATTR_MAC_HINT]);
  6388. connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
  6389. connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
  6390. if (info->attrs[NL80211_ATTR_IE]) {
  6391. connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  6392. connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  6393. }
  6394. if (info->attrs[NL80211_ATTR_USE_MFP]) {
  6395. connect.mfp = nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
  6396. if (connect.mfp != NL80211_MFP_REQUIRED &&
  6397. connect.mfp != NL80211_MFP_NO)
  6398. return -EINVAL;
  6399. } else {
  6400. connect.mfp = NL80211_MFP_NO;
  6401. }
  6402. if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
  6403. connect.channel = nl80211_get_valid_chan(
  6404. wiphy, info->attrs[NL80211_ATTR_WIPHY_FREQ]);
  6405. if (!connect.channel)
  6406. return -EINVAL;
  6407. } else if (info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]) {
  6408. connect.channel_hint = nl80211_get_valid_chan(
  6409. wiphy, info->attrs[NL80211_ATTR_WIPHY_FREQ_HINT]);
  6410. if (!connect.channel_hint)
  6411. return -EINVAL;
  6412. }
  6413. if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
  6414. connkeys = nl80211_parse_connkeys(rdev,
  6415. info->attrs[NL80211_ATTR_KEYS], NULL);
  6416. if (IS_ERR(connkeys))
  6417. return PTR_ERR(connkeys);
  6418. }
  6419. if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
  6420. connect.flags |= ASSOC_REQ_DISABLE_HT;
  6421. if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
  6422. memcpy(&connect.ht_capa_mask,
  6423. nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
  6424. sizeof(connect.ht_capa_mask));
  6425. if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
  6426. if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
  6427. kzfree(connkeys);
  6428. return -EINVAL;
  6429. }
  6430. memcpy(&connect.ht_capa,
  6431. nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
  6432. sizeof(connect.ht_capa));
  6433. }
  6434. if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_VHT]))
  6435. connect.flags |= ASSOC_REQ_DISABLE_VHT;
  6436. if (info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK])
  6437. memcpy(&connect.vht_capa_mask,
  6438. nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]),
  6439. sizeof(connect.vht_capa_mask));
  6440. if (info->attrs[NL80211_ATTR_VHT_CAPABILITY]) {
  6441. if (!info->attrs[NL80211_ATTR_VHT_CAPABILITY_MASK]) {
  6442. kzfree(connkeys);
  6443. return -EINVAL;
  6444. }
  6445. memcpy(&connect.vht_capa,
  6446. nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]),
  6447. sizeof(connect.vht_capa));
  6448. }
  6449. if (nla_get_flag(info->attrs[NL80211_ATTR_USE_RRM])) {
  6450. if (!(rdev->wiphy.features &
  6451. NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES) ||
  6452. !(rdev->wiphy.features & NL80211_FEATURE_QUIET))
  6453. return -EINVAL;
  6454. connect.flags |= ASSOC_REQ_USE_RRM;
  6455. }
  6456. wdev_lock(dev->ieee80211_ptr);
  6457. err = cfg80211_connect(rdev, dev, &connect, connkeys, NULL);
  6458. wdev_unlock(dev->ieee80211_ptr);
  6459. if (err)
  6460. kzfree(connkeys);
  6461. return err;
  6462. }
  6463. static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
  6464. {
  6465. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6466. struct net_device *dev = info->user_ptr[1];
  6467. u16 reason;
  6468. int ret;
  6469. if (!info->attrs[NL80211_ATTR_REASON_CODE])
  6470. reason = WLAN_REASON_DEAUTH_LEAVING;
  6471. else
  6472. reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
  6473. if (reason == 0)
  6474. return -EINVAL;
  6475. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
  6476. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
  6477. return -EOPNOTSUPP;
  6478. wdev_lock(dev->ieee80211_ptr);
  6479. ret = cfg80211_disconnect(rdev, dev, reason, true);
  6480. wdev_unlock(dev->ieee80211_ptr);
  6481. return ret;
  6482. }
  6483. static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
  6484. {
  6485. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6486. struct net *net;
  6487. int err;
  6488. u32 pid;
  6489. if (!info->attrs[NL80211_ATTR_PID])
  6490. return -EINVAL;
  6491. pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
  6492. net = get_net_ns_by_pid(pid);
  6493. if (IS_ERR(net))
  6494. return PTR_ERR(net);
  6495. err = 0;
  6496. /* check if anything to do */
  6497. if (!net_eq(wiphy_net(&rdev->wiphy), net))
  6498. err = cfg80211_switch_netns(rdev, net);
  6499. put_net(net);
  6500. return err;
  6501. }
  6502. static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
  6503. {
  6504. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6505. int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
  6506. struct cfg80211_pmksa *pmksa) = NULL;
  6507. struct net_device *dev = info->user_ptr[1];
  6508. struct cfg80211_pmksa pmksa;
  6509. memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
  6510. if (!info->attrs[NL80211_ATTR_MAC])
  6511. return -EINVAL;
  6512. if (!info->attrs[NL80211_ATTR_PMKID])
  6513. return -EINVAL;
  6514. pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
  6515. pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  6516. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
  6517. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
  6518. return -EOPNOTSUPP;
  6519. switch (info->genlhdr->cmd) {
  6520. case NL80211_CMD_SET_PMKSA:
  6521. rdev_ops = rdev->ops->set_pmksa;
  6522. break;
  6523. case NL80211_CMD_DEL_PMKSA:
  6524. rdev_ops = rdev->ops->del_pmksa;
  6525. break;
  6526. default:
  6527. WARN_ON(1);
  6528. break;
  6529. }
  6530. if (!rdev_ops)
  6531. return -EOPNOTSUPP;
  6532. return rdev_ops(&rdev->wiphy, dev, &pmksa);
  6533. }
  6534. static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
  6535. {
  6536. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6537. struct net_device *dev = info->user_ptr[1];
  6538. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
  6539. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
  6540. return -EOPNOTSUPP;
  6541. if (!rdev->ops->flush_pmksa)
  6542. return -EOPNOTSUPP;
  6543. return rdev_flush_pmksa(rdev, dev);
  6544. }
  6545. static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
  6546. {
  6547. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6548. struct net_device *dev = info->user_ptr[1];
  6549. u8 action_code, dialog_token;
  6550. u32 peer_capability = 0;
  6551. u16 status_code;
  6552. u8 *peer;
  6553. bool initiator;
  6554. if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
  6555. !rdev->ops->tdls_mgmt)
  6556. return -EOPNOTSUPP;
  6557. if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
  6558. !info->attrs[NL80211_ATTR_STATUS_CODE] ||
  6559. !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
  6560. !info->attrs[NL80211_ATTR_IE] ||
  6561. !info->attrs[NL80211_ATTR_MAC])
  6562. return -EINVAL;
  6563. peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
  6564. action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
  6565. status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
  6566. dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
  6567. initiator = nla_get_flag(info->attrs[NL80211_ATTR_TDLS_INITIATOR]);
  6568. if (info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY])
  6569. peer_capability =
  6570. nla_get_u32(info->attrs[NL80211_ATTR_TDLS_PEER_CAPABILITY]);
  6571. return rdev_tdls_mgmt(rdev, dev, peer, action_code,
  6572. dialog_token, status_code, peer_capability,
  6573. initiator,
  6574. nla_data(info->attrs[NL80211_ATTR_IE]),
  6575. nla_len(info->attrs[NL80211_ATTR_IE]));
  6576. }
  6577. static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
  6578. {
  6579. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6580. struct net_device *dev = info->user_ptr[1];
  6581. enum nl80211_tdls_operation operation;
  6582. u8 *peer;
  6583. if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
  6584. !rdev->ops->tdls_oper)
  6585. return -EOPNOTSUPP;
  6586. if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
  6587. !info->attrs[NL80211_ATTR_MAC])
  6588. return -EINVAL;
  6589. operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
  6590. peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
  6591. return rdev_tdls_oper(rdev, dev, peer, operation);
  6592. }
  6593. static int nl80211_remain_on_channel(struct sk_buff *skb,
  6594. struct genl_info *info)
  6595. {
  6596. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6597. struct wireless_dev *wdev = info->user_ptr[1];
  6598. struct cfg80211_chan_def chandef;
  6599. struct sk_buff *msg;
  6600. void *hdr;
  6601. u64 cookie;
  6602. u32 duration;
  6603. int err;
  6604. if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
  6605. !info->attrs[NL80211_ATTR_DURATION])
  6606. return -EINVAL;
  6607. duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
  6608. if (!rdev->ops->remain_on_channel ||
  6609. !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
  6610. return -EOPNOTSUPP;
  6611. /*
  6612. * We should be on that channel for at least a minimum amount of
  6613. * time (10ms) but no longer than the driver supports.
  6614. */
  6615. if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
  6616. duration > rdev->wiphy.max_remain_on_channel_duration)
  6617. return -EINVAL;
  6618. err = nl80211_parse_chandef(rdev, info, &chandef);
  6619. if (err)
  6620. return err;
  6621. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  6622. if (!msg)
  6623. return -ENOMEM;
  6624. hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
  6625. NL80211_CMD_REMAIN_ON_CHANNEL);
  6626. if (!hdr) {
  6627. err = -ENOBUFS;
  6628. goto free_msg;
  6629. }
  6630. err = rdev_remain_on_channel(rdev, wdev, chandef.chan,
  6631. duration, &cookie);
  6632. if (err)
  6633. goto free_msg;
  6634. if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
  6635. goto nla_put_failure;
  6636. genlmsg_end(msg, hdr);
  6637. return genlmsg_reply(msg, info);
  6638. nla_put_failure:
  6639. err = -ENOBUFS;
  6640. free_msg:
  6641. nlmsg_free(msg);
  6642. return err;
  6643. }
  6644. static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
  6645. struct genl_info *info)
  6646. {
  6647. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6648. struct wireless_dev *wdev = info->user_ptr[1];
  6649. u64 cookie;
  6650. if (!info->attrs[NL80211_ATTR_COOKIE])
  6651. return -EINVAL;
  6652. if (!rdev->ops->cancel_remain_on_channel)
  6653. return -EOPNOTSUPP;
  6654. cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
  6655. return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
  6656. }
  6657. static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
  6658. u8 *rates, u8 rates_len)
  6659. {
  6660. u8 i;
  6661. u32 mask = 0;
  6662. for (i = 0; i < rates_len; i++) {
  6663. int rate = (rates[i] & 0x7f) * 5;
  6664. int ridx;
  6665. for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
  6666. struct ieee80211_rate *srate =
  6667. &sband->bitrates[ridx];
  6668. if (rate == srate->bitrate) {
  6669. mask |= 1 << ridx;
  6670. break;
  6671. }
  6672. }
  6673. if (ridx == sband->n_bitrates)
  6674. return 0; /* rate not found */
  6675. }
  6676. return mask;
  6677. }
  6678. static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
  6679. u8 *rates, u8 rates_len,
  6680. u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
  6681. {
  6682. u8 i;
  6683. memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
  6684. for (i = 0; i < rates_len; i++) {
  6685. int ridx, rbit;
  6686. ridx = rates[i] / 8;
  6687. rbit = BIT(rates[i] % 8);
  6688. /* check validity */
  6689. if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
  6690. return false;
  6691. /* check availability */
  6692. if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
  6693. mcs[ridx] |= rbit;
  6694. else
  6695. return false;
  6696. }
  6697. return true;
  6698. }
  6699. static u16 vht_mcs_map_to_mcs_mask(u8 vht_mcs_map)
  6700. {
  6701. u16 mcs_mask = 0;
  6702. switch (vht_mcs_map) {
  6703. case IEEE80211_VHT_MCS_NOT_SUPPORTED:
  6704. break;
  6705. case IEEE80211_VHT_MCS_SUPPORT_0_7:
  6706. mcs_mask = 0x00FF;
  6707. break;
  6708. case IEEE80211_VHT_MCS_SUPPORT_0_8:
  6709. mcs_mask = 0x01FF;
  6710. break;
  6711. case IEEE80211_VHT_MCS_SUPPORT_0_9:
  6712. mcs_mask = 0x03FF;
  6713. break;
  6714. default:
  6715. break;
  6716. }
  6717. return mcs_mask;
  6718. }
  6719. static void vht_build_mcs_mask(u16 vht_mcs_map,
  6720. u16 vht_mcs_mask[NL80211_VHT_NSS_MAX])
  6721. {
  6722. u8 nss;
  6723. for (nss = 0; nss < NL80211_VHT_NSS_MAX; nss++) {
  6724. vht_mcs_mask[nss] = vht_mcs_map_to_mcs_mask(vht_mcs_map & 0x03);
  6725. vht_mcs_map >>= 2;
  6726. }
  6727. }
  6728. static bool vht_set_mcs_mask(struct ieee80211_supported_band *sband,
  6729. struct nl80211_txrate_vht *txrate,
  6730. u16 mcs[NL80211_VHT_NSS_MAX])
  6731. {
  6732. u16 tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
  6733. u16 tx_mcs_mask[NL80211_VHT_NSS_MAX] = {};
  6734. u8 i;
  6735. if (!sband->vht_cap.vht_supported)
  6736. return false;
  6737. memset(mcs, 0, sizeof(u16) * NL80211_VHT_NSS_MAX);
  6738. /* Build vht_mcs_mask from VHT capabilities */
  6739. vht_build_mcs_mask(tx_mcs_map, tx_mcs_mask);
  6740. for (i = 0; i < NL80211_VHT_NSS_MAX; i++) {
  6741. if ((tx_mcs_mask[i] & txrate->mcs[i]) == txrate->mcs[i])
  6742. mcs[i] = txrate->mcs[i];
  6743. else
  6744. return false;
  6745. }
  6746. return true;
  6747. }
  6748. static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
  6749. [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
  6750. .len = NL80211_MAX_SUPP_RATES },
  6751. [NL80211_TXRATE_HT] = { .type = NLA_BINARY,
  6752. .len = NL80211_MAX_SUPP_HT_RATES },
  6753. [NL80211_TXRATE_VHT] = { .len = sizeof(struct nl80211_txrate_vht)},
  6754. [NL80211_TXRATE_GI] = { .type = NLA_U8 },
  6755. };
  6756. static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
  6757. struct genl_info *info)
  6758. {
  6759. struct nlattr *tb[NL80211_TXRATE_MAX + 1];
  6760. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6761. struct cfg80211_bitrate_mask mask;
  6762. int rem, i;
  6763. struct net_device *dev = info->user_ptr[1];
  6764. struct nlattr *tx_rates;
  6765. struct ieee80211_supported_band *sband;
  6766. u16 vht_tx_mcs_map;
  6767. if (!rdev->ops->set_bitrate_mask)
  6768. return -EOPNOTSUPP;
  6769. memset(&mask, 0, sizeof(mask));
  6770. /* Default to all rates enabled */
  6771. for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
  6772. sband = rdev->wiphy.bands[i];
  6773. if (!sband)
  6774. continue;
  6775. mask.control[i].legacy = (1 << sband->n_bitrates) - 1;
  6776. memcpy(mask.control[i].ht_mcs,
  6777. sband->ht_cap.mcs.rx_mask,
  6778. sizeof(mask.control[i].ht_mcs));
  6779. if (!sband->vht_cap.vht_supported)
  6780. continue;
  6781. vht_tx_mcs_map = le16_to_cpu(sband->vht_cap.vht_mcs.tx_mcs_map);
  6782. vht_build_mcs_mask(vht_tx_mcs_map, mask.control[i].vht_mcs);
  6783. }
  6784. /* if no rates are given set it back to the defaults */
  6785. if (!info->attrs[NL80211_ATTR_TX_RATES])
  6786. goto out;
  6787. /*
  6788. * The nested attribute uses enum nl80211_band as the index. This maps
  6789. * directly to the enum ieee80211_band values used in cfg80211.
  6790. */
  6791. BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
  6792. nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem) {
  6793. enum ieee80211_band band = nla_type(tx_rates);
  6794. int err;
  6795. if (band < 0 || band >= IEEE80211_NUM_BANDS)
  6796. return -EINVAL;
  6797. sband = rdev->wiphy.bands[band];
  6798. if (sband == NULL)
  6799. return -EINVAL;
  6800. err = nla_parse(tb, NL80211_TXRATE_MAX, nla_data(tx_rates),
  6801. nla_len(tx_rates), nl80211_txattr_policy);
  6802. if (err)
  6803. return err;
  6804. if (tb[NL80211_TXRATE_LEGACY]) {
  6805. mask.control[band].legacy = rateset_to_mask(
  6806. sband,
  6807. nla_data(tb[NL80211_TXRATE_LEGACY]),
  6808. nla_len(tb[NL80211_TXRATE_LEGACY]));
  6809. if ((mask.control[band].legacy == 0) &&
  6810. nla_len(tb[NL80211_TXRATE_LEGACY]))
  6811. return -EINVAL;
  6812. }
  6813. if (tb[NL80211_TXRATE_HT]) {
  6814. if (!ht_rateset_to_mask(
  6815. sband,
  6816. nla_data(tb[NL80211_TXRATE_HT]),
  6817. nla_len(tb[NL80211_TXRATE_HT]),
  6818. mask.control[band].ht_mcs))
  6819. return -EINVAL;
  6820. }
  6821. if (tb[NL80211_TXRATE_VHT]) {
  6822. if (!vht_set_mcs_mask(
  6823. sband,
  6824. nla_data(tb[NL80211_TXRATE_VHT]),
  6825. mask.control[band].vht_mcs))
  6826. return -EINVAL;
  6827. }
  6828. if (tb[NL80211_TXRATE_GI]) {
  6829. mask.control[band].gi =
  6830. nla_get_u8(tb[NL80211_TXRATE_GI]);
  6831. if (mask.control[band].gi > NL80211_TXRATE_FORCE_LGI)
  6832. return -EINVAL;
  6833. }
  6834. if (mask.control[band].legacy == 0) {
  6835. /* don't allow empty legacy rates if HT or VHT
  6836. * are not even supported.
  6837. */
  6838. if (!(rdev->wiphy.bands[band]->ht_cap.ht_supported ||
  6839. rdev->wiphy.bands[band]->vht_cap.vht_supported))
  6840. return -EINVAL;
  6841. for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
  6842. if (mask.control[band].ht_mcs[i])
  6843. goto out;
  6844. for (i = 0; i < NL80211_VHT_NSS_MAX; i++)
  6845. if (mask.control[band].vht_mcs[i])
  6846. goto out;
  6847. /* legacy and mcs rates may not be both empty */
  6848. return -EINVAL;
  6849. }
  6850. }
  6851. out:
  6852. return rdev_set_bitrate_mask(rdev, dev, NULL, &mask);
  6853. }
  6854. static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
  6855. {
  6856. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6857. struct wireless_dev *wdev = info->user_ptr[1];
  6858. u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
  6859. if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
  6860. return -EINVAL;
  6861. if (info->attrs[NL80211_ATTR_FRAME_TYPE])
  6862. frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
  6863. switch (wdev->iftype) {
  6864. case NL80211_IFTYPE_STATION:
  6865. case NL80211_IFTYPE_ADHOC:
  6866. case NL80211_IFTYPE_P2P_CLIENT:
  6867. case NL80211_IFTYPE_AP:
  6868. case NL80211_IFTYPE_AP_VLAN:
  6869. case NL80211_IFTYPE_MESH_POINT:
  6870. case NL80211_IFTYPE_P2P_GO:
  6871. case NL80211_IFTYPE_P2P_DEVICE:
  6872. break;
  6873. default:
  6874. return -EOPNOTSUPP;
  6875. }
  6876. /* not much point in registering if we can't reply */
  6877. if (!rdev->ops->mgmt_tx)
  6878. return -EOPNOTSUPP;
  6879. return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
  6880. nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
  6881. nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]));
  6882. }
  6883. static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
  6884. {
  6885. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6886. struct wireless_dev *wdev = info->user_ptr[1];
  6887. struct cfg80211_chan_def chandef;
  6888. int err;
  6889. void *hdr = NULL;
  6890. u64 cookie;
  6891. struct sk_buff *msg = NULL;
  6892. struct cfg80211_mgmt_tx_params params = {
  6893. .dont_wait_for_ack =
  6894. info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK],
  6895. };
  6896. if (!info->attrs[NL80211_ATTR_FRAME])
  6897. return -EINVAL;
  6898. if (!rdev->ops->mgmt_tx)
  6899. return -EOPNOTSUPP;
  6900. switch (wdev->iftype) {
  6901. case NL80211_IFTYPE_P2P_DEVICE:
  6902. if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
  6903. return -EINVAL;
  6904. case NL80211_IFTYPE_STATION:
  6905. case NL80211_IFTYPE_ADHOC:
  6906. case NL80211_IFTYPE_P2P_CLIENT:
  6907. case NL80211_IFTYPE_AP:
  6908. case NL80211_IFTYPE_AP_VLAN:
  6909. case NL80211_IFTYPE_MESH_POINT:
  6910. case NL80211_IFTYPE_P2P_GO:
  6911. break;
  6912. default:
  6913. return -EOPNOTSUPP;
  6914. }
  6915. if (info->attrs[NL80211_ATTR_DURATION]) {
  6916. if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
  6917. return -EINVAL;
  6918. params.wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
  6919. /*
  6920. * We should wait on the channel for at least a minimum amount
  6921. * of time (10ms) but no longer than the driver supports.
  6922. */
  6923. if (params.wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
  6924. params.wait > rdev->wiphy.max_remain_on_channel_duration)
  6925. return -EINVAL;
  6926. }
  6927. params.offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
  6928. if (params.offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
  6929. return -EINVAL;
  6930. params.no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
  6931. /* get the channel if any has been specified, otherwise pass NULL to
  6932. * the driver. The latter will use the current one
  6933. */
  6934. chandef.chan = NULL;
  6935. if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
  6936. err = nl80211_parse_chandef(rdev, info, &chandef);
  6937. if (err)
  6938. return err;
  6939. }
  6940. if (!chandef.chan && params.offchan)
  6941. return -EINVAL;
  6942. params.buf = nla_data(info->attrs[NL80211_ATTR_FRAME]);
  6943. params.len = nla_len(info->attrs[NL80211_ATTR_FRAME]);
  6944. if (info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]) {
  6945. int len = nla_len(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
  6946. int i;
  6947. if (len % sizeof(u16))
  6948. return -EINVAL;
  6949. params.n_csa_offsets = len / sizeof(u16);
  6950. params.csa_offsets =
  6951. nla_data(info->attrs[NL80211_ATTR_CSA_C_OFFSETS_TX]);
  6952. /* check that all the offsets fit the frame */
  6953. for (i = 0; i < params.n_csa_offsets; i++) {
  6954. if (params.csa_offsets[i] >= params.len)
  6955. return -EINVAL;
  6956. }
  6957. }
  6958. if (!params.dont_wait_for_ack) {
  6959. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  6960. if (!msg)
  6961. return -ENOMEM;
  6962. hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
  6963. NL80211_CMD_FRAME);
  6964. if (!hdr) {
  6965. err = -ENOBUFS;
  6966. goto free_msg;
  6967. }
  6968. }
  6969. params.chan = chandef.chan;
  6970. err = cfg80211_mlme_mgmt_tx(rdev, wdev, &params, &cookie);
  6971. if (err)
  6972. goto free_msg;
  6973. if (msg) {
  6974. if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
  6975. goto nla_put_failure;
  6976. genlmsg_end(msg, hdr);
  6977. return genlmsg_reply(msg, info);
  6978. }
  6979. return 0;
  6980. nla_put_failure:
  6981. err = -ENOBUFS;
  6982. free_msg:
  6983. nlmsg_free(msg);
  6984. return err;
  6985. }
  6986. static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
  6987. {
  6988. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  6989. struct wireless_dev *wdev = info->user_ptr[1];
  6990. u64 cookie;
  6991. if (!info->attrs[NL80211_ATTR_COOKIE])
  6992. return -EINVAL;
  6993. if (!rdev->ops->mgmt_tx_cancel_wait)
  6994. return -EOPNOTSUPP;
  6995. switch (wdev->iftype) {
  6996. case NL80211_IFTYPE_STATION:
  6997. case NL80211_IFTYPE_ADHOC:
  6998. case NL80211_IFTYPE_P2P_CLIENT:
  6999. case NL80211_IFTYPE_AP:
  7000. case NL80211_IFTYPE_AP_VLAN:
  7001. case NL80211_IFTYPE_P2P_GO:
  7002. case NL80211_IFTYPE_P2P_DEVICE:
  7003. break;
  7004. default:
  7005. return -EOPNOTSUPP;
  7006. }
  7007. cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
  7008. return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
  7009. }
  7010. static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
  7011. {
  7012. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7013. struct wireless_dev *wdev;
  7014. struct net_device *dev = info->user_ptr[1];
  7015. u8 ps_state;
  7016. bool state;
  7017. int err;
  7018. if (!info->attrs[NL80211_ATTR_PS_STATE])
  7019. return -EINVAL;
  7020. ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
  7021. if (ps_state != NL80211_PS_DISABLED && ps_state != NL80211_PS_ENABLED)
  7022. return -EINVAL;
  7023. wdev = dev->ieee80211_ptr;
  7024. if (!rdev->ops->set_power_mgmt)
  7025. return -EOPNOTSUPP;
  7026. state = (ps_state == NL80211_PS_ENABLED) ? true : false;
  7027. if (state == wdev->ps)
  7028. return 0;
  7029. err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
  7030. if (!err)
  7031. wdev->ps = state;
  7032. return err;
  7033. }
  7034. static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
  7035. {
  7036. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7037. enum nl80211_ps_state ps_state;
  7038. struct wireless_dev *wdev;
  7039. struct net_device *dev = info->user_ptr[1];
  7040. struct sk_buff *msg;
  7041. void *hdr;
  7042. int err;
  7043. wdev = dev->ieee80211_ptr;
  7044. if (!rdev->ops->set_power_mgmt)
  7045. return -EOPNOTSUPP;
  7046. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  7047. if (!msg)
  7048. return -ENOMEM;
  7049. hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
  7050. NL80211_CMD_GET_POWER_SAVE);
  7051. if (!hdr) {
  7052. err = -ENOBUFS;
  7053. goto free_msg;
  7054. }
  7055. if (wdev->ps)
  7056. ps_state = NL80211_PS_ENABLED;
  7057. else
  7058. ps_state = NL80211_PS_DISABLED;
  7059. if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
  7060. goto nla_put_failure;
  7061. genlmsg_end(msg, hdr);
  7062. return genlmsg_reply(msg, info);
  7063. nla_put_failure:
  7064. err = -ENOBUFS;
  7065. free_msg:
  7066. nlmsg_free(msg);
  7067. return err;
  7068. }
  7069. static const struct nla_policy
  7070. nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] = {
  7071. [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
  7072. [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
  7073. [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
  7074. [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
  7075. [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
  7076. [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
  7077. };
  7078. static int nl80211_set_cqm_txe(struct genl_info *info,
  7079. u32 rate, u32 pkts, u32 intvl)
  7080. {
  7081. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7082. struct net_device *dev = info->user_ptr[1];
  7083. struct wireless_dev *wdev = dev->ieee80211_ptr;
  7084. if (rate > 100 || intvl > NL80211_CQM_TXE_MAX_INTVL)
  7085. return -EINVAL;
  7086. if (!rdev->ops->set_cqm_txe_config)
  7087. return -EOPNOTSUPP;
  7088. if (wdev->iftype != NL80211_IFTYPE_STATION &&
  7089. wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
  7090. return -EOPNOTSUPP;
  7091. return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
  7092. }
  7093. static int nl80211_set_cqm_rssi(struct genl_info *info,
  7094. s32 threshold, u32 hysteresis)
  7095. {
  7096. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7097. struct net_device *dev = info->user_ptr[1];
  7098. struct wireless_dev *wdev = dev->ieee80211_ptr;
  7099. if (threshold > 0)
  7100. return -EINVAL;
  7101. /* disabling - hysteresis should also be zero then */
  7102. if (threshold == 0)
  7103. hysteresis = 0;
  7104. if (!rdev->ops->set_cqm_rssi_config)
  7105. return -EOPNOTSUPP;
  7106. if (wdev->iftype != NL80211_IFTYPE_STATION &&
  7107. wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
  7108. return -EOPNOTSUPP;
  7109. return rdev_set_cqm_rssi_config(rdev, dev, threshold, hysteresis);
  7110. }
  7111. static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
  7112. {
  7113. struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
  7114. struct nlattr *cqm;
  7115. int err;
  7116. cqm = info->attrs[NL80211_ATTR_CQM];
  7117. if (!cqm)
  7118. return -EINVAL;
  7119. err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
  7120. nl80211_attr_cqm_policy);
  7121. if (err)
  7122. return err;
  7123. if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
  7124. attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
  7125. s32 threshold = nla_get_s32(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
  7126. u32 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
  7127. return nl80211_set_cqm_rssi(info, threshold, hysteresis);
  7128. }
  7129. if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
  7130. attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
  7131. attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
  7132. u32 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
  7133. u32 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
  7134. u32 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
  7135. return nl80211_set_cqm_txe(info, rate, pkts, intvl);
  7136. }
  7137. return -EINVAL;
  7138. }
  7139. static int nl80211_join_ocb(struct sk_buff *skb, struct genl_info *info)
  7140. {
  7141. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7142. struct net_device *dev = info->user_ptr[1];
  7143. struct ocb_setup setup = {};
  7144. int err;
  7145. err = nl80211_parse_chandef(rdev, info, &setup.chandef);
  7146. if (err)
  7147. return err;
  7148. return cfg80211_join_ocb(rdev, dev, &setup);
  7149. }
  7150. static int nl80211_leave_ocb(struct sk_buff *skb, struct genl_info *info)
  7151. {
  7152. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7153. struct net_device *dev = info->user_ptr[1];
  7154. return cfg80211_leave_ocb(rdev, dev);
  7155. }
  7156. static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
  7157. {
  7158. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7159. struct net_device *dev = info->user_ptr[1];
  7160. struct mesh_config cfg;
  7161. struct mesh_setup setup;
  7162. int err;
  7163. /* start with default */
  7164. memcpy(&cfg, &default_mesh_config, sizeof(cfg));
  7165. memcpy(&setup, &default_mesh_setup, sizeof(setup));
  7166. if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
  7167. /* and parse parameters if given */
  7168. err = nl80211_parse_mesh_config(info, &cfg, NULL);
  7169. if (err)
  7170. return err;
  7171. }
  7172. if (!info->attrs[NL80211_ATTR_MESH_ID] ||
  7173. !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
  7174. return -EINVAL;
  7175. setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
  7176. setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
  7177. if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
  7178. !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
  7179. nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
  7180. return -EINVAL;
  7181. if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
  7182. setup.beacon_interval =
  7183. nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
  7184. if (setup.beacon_interval < 10 ||
  7185. setup.beacon_interval > 10000)
  7186. return -EINVAL;
  7187. }
  7188. if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
  7189. setup.dtim_period =
  7190. nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
  7191. if (setup.dtim_period < 1 || setup.dtim_period > 100)
  7192. return -EINVAL;
  7193. }
  7194. if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
  7195. /* parse additional setup parameters if given */
  7196. err = nl80211_parse_mesh_setup(info, &setup);
  7197. if (err)
  7198. return err;
  7199. }
  7200. if (setup.user_mpm)
  7201. cfg.auto_open_plinks = false;
  7202. if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
  7203. err = nl80211_parse_chandef(rdev, info, &setup.chandef);
  7204. if (err)
  7205. return err;
  7206. } else {
  7207. /* cfg80211_join_mesh() will sort it out */
  7208. setup.chandef.chan = NULL;
  7209. }
  7210. if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
  7211. u8 *rates = nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
  7212. int n_rates =
  7213. nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
  7214. struct ieee80211_supported_band *sband;
  7215. if (!setup.chandef.chan)
  7216. return -EINVAL;
  7217. sband = rdev->wiphy.bands[setup.chandef.chan->band];
  7218. err = ieee80211_get_ratemask(sband, rates, n_rates,
  7219. &setup.basic_rates);
  7220. if (err)
  7221. return err;
  7222. }
  7223. return cfg80211_join_mesh(rdev, dev, &setup, &cfg);
  7224. }
  7225. static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
  7226. {
  7227. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7228. struct net_device *dev = info->user_ptr[1];
  7229. return cfg80211_leave_mesh(rdev, dev);
  7230. }
  7231. #ifdef CONFIG_PM
  7232. static int nl80211_send_wowlan_patterns(struct sk_buff *msg,
  7233. struct cfg80211_registered_device *rdev)
  7234. {
  7235. struct cfg80211_wowlan *wowlan = rdev->wiphy.wowlan_config;
  7236. struct nlattr *nl_pats, *nl_pat;
  7237. int i, pat_len;
  7238. if (!wowlan->n_patterns)
  7239. return 0;
  7240. nl_pats = nla_nest_start(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN);
  7241. if (!nl_pats)
  7242. return -ENOBUFS;
  7243. for (i = 0; i < wowlan->n_patterns; i++) {
  7244. nl_pat = nla_nest_start(msg, i + 1);
  7245. if (!nl_pat)
  7246. return -ENOBUFS;
  7247. pat_len = wowlan->patterns[i].pattern_len;
  7248. if (nla_put(msg, NL80211_PKTPAT_MASK, DIV_ROUND_UP(pat_len, 8),
  7249. wowlan->patterns[i].mask) ||
  7250. nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
  7251. wowlan->patterns[i].pattern) ||
  7252. nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
  7253. wowlan->patterns[i].pkt_offset))
  7254. return -ENOBUFS;
  7255. nla_nest_end(msg, nl_pat);
  7256. }
  7257. nla_nest_end(msg, nl_pats);
  7258. return 0;
  7259. }
  7260. static int nl80211_send_wowlan_tcp(struct sk_buff *msg,
  7261. struct cfg80211_wowlan_tcp *tcp)
  7262. {
  7263. struct nlattr *nl_tcp;
  7264. if (!tcp)
  7265. return 0;
  7266. nl_tcp = nla_nest_start(msg, NL80211_WOWLAN_TRIG_TCP_CONNECTION);
  7267. if (!nl_tcp)
  7268. return -ENOBUFS;
  7269. if (nla_put_be32(msg, NL80211_WOWLAN_TCP_SRC_IPV4, tcp->src) ||
  7270. nla_put_be32(msg, NL80211_WOWLAN_TCP_DST_IPV4, tcp->dst) ||
  7271. nla_put(msg, NL80211_WOWLAN_TCP_DST_MAC, ETH_ALEN, tcp->dst_mac) ||
  7272. nla_put_u16(msg, NL80211_WOWLAN_TCP_SRC_PORT, tcp->src_port) ||
  7273. nla_put_u16(msg, NL80211_WOWLAN_TCP_DST_PORT, tcp->dst_port) ||
  7274. nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
  7275. tcp->payload_len, tcp->payload) ||
  7276. nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
  7277. tcp->data_interval) ||
  7278. nla_put(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
  7279. tcp->wake_len, tcp->wake_data) ||
  7280. nla_put(msg, NL80211_WOWLAN_TCP_WAKE_MASK,
  7281. DIV_ROUND_UP(tcp->wake_len, 8), tcp->wake_mask))
  7282. return -ENOBUFS;
  7283. if (tcp->payload_seq.len &&
  7284. nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ,
  7285. sizeof(tcp->payload_seq), &tcp->payload_seq))
  7286. return -ENOBUFS;
  7287. if (tcp->payload_tok.len &&
  7288. nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
  7289. sizeof(tcp->payload_tok) + tcp->tokens_size,
  7290. &tcp->payload_tok))
  7291. return -ENOBUFS;
  7292. nla_nest_end(msg, nl_tcp);
  7293. return 0;
  7294. }
  7295. static int nl80211_send_wowlan_nd(struct sk_buff *msg,
  7296. struct cfg80211_sched_scan_request *req)
  7297. {
  7298. struct nlattr *nd, *freqs, *matches, *match;
  7299. int i;
  7300. if (!req)
  7301. return 0;
  7302. nd = nla_nest_start(msg, NL80211_WOWLAN_TRIG_NET_DETECT);
  7303. if (!nd)
  7304. return -ENOBUFS;
  7305. if (nla_put_u32(msg, NL80211_ATTR_SCHED_SCAN_INTERVAL, req->interval))
  7306. return -ENOBUFS;
  7307. freqs = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
  7308. if (!freqs)
  7309. return -ENOBUFS;
  7310. for (i = 0; i < req->n_channels; i++)
  7311. nla_put_u32(msg, i, req->channels[i]->center_freq);
  7312. nla_nest_end(msg, freqs);
  7313. if (req->n_match_sets) {
  7314. matches = nla_nest_start(msg, NL80211_ATTR_SCHED_SCAN_MATCH);
  7315. for (i = 0; i < req->n_match_sets; i++) {
  7316. match = nla_nest_start(msg, i);
  7317. nla_put(msg, NL80211_SCHED_SCAN_MATCH_ATTR_SSID,
  7318. req->match_sets[i].ssid.ssid_len,
  7319. req->match_sets[i].ssid.ssid);
  7320. nla_nest_end(msg, match);
  7321. }
  7322. nla_nest_end(msg, matches);
  7323. }
  7324. nla_nest_end(msg, nd);
  7325. return 0;
  7326. }
  7327. static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
  7328. {
  7329. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7330. struct sk_buff *msg;
  7331. void *hdr;
  7332. u32 size = NLMSG_DEFAULT_SIZE;
  7333. if (!rdev->wiphy.wowlan)
  7334. return -EOPNOTSUPP;
  7335. if (rdev->wiphy.wowlan_config && rdev->wiphy.wowlan_config->tcp) {
  7336. /* adjust size to have room for all the data */
  7337. size += rdev->wiphy.wowlan_config->tcp->tokens_size +
  7338. rdev->wiphy.wowlan_config->tcp->payload_len +
  7339. rdev->wiphy.wowlan_config->tcp->wake_len +
  7340. rdev->wiphy.wowlan_config->tcp->wake_len / 8;
  7341. }
  7342. msg = nlmsg_new(size, GFP_KERNEL);
  7343. if (!msg)
  7344. return -ENOMEM;
  7345. hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
  7346. NL80211_CMD_GET_WOWLAN);
  7347. if (!hdr)
  7348. goto nla_put_failure;
  7349. if (rdev->wiphy.wowlan_config) {
  7350. struct nlattr *nl_wowlan;
  7351. nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
  7352. if (!nl_wowlan)
  7353. goto nla_put_failure;
  7354. if ((rdev->wiphy.wowlan_config->any &&
  7355. nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
  7356. (rdev->wiphy.wowlan_config->disconnect &&
  7357. nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
  7358. (rdev->wiphy.wowlan_config->magic_pkt &&
  7359. nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
  7360. (rdev->wiphy.wowlan_config->gtk_rekey_failure &&
  7361. nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
  7362. (rdev->wiphy.wowlan_config->eap_identity_req &&
  7363. nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
  7364. (rdev->wiphy.wowlan_config->four_way_handshake &&
  7365. nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
  7366. (rdev->wiphy.wowlan_config->rfkill_release &&
  7367. nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
  7368. goto nla_put_failure;
  7369. if (nl80211_send_wowlan_patterns(msg, rdev))
  7370. goto nla_put_failure;
  7371. if (nl80211_send_wowlan_tcp(msg,
  7372. rdev->wiphy.wowlan_config->tcp))
  7373. goto nla_put_failure;
  7374. if (nl80211_send_wowlan_nd(
  7375. msg,
  7376. rdev->wiphy.wowlan_config->nd_config))
  7377. goto nla_put_failure;
  7378. nla_nest_end(msg, nl_wowlan);
  7379. }
  7380. genlmsg_end(msg, hdr);
  7381. return genlmsg_reply(msg, info);
  7382. nla_put_failure:
  7383. nlmsg_free(msg);
  7384. return -ENOBUFS;
  7385. }
  7386. static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
  7387. struct nlattr *attr,
  7388. struct cfg80211_wowlan *trig)
  7389. {
  7390. struct nlattr *tb[NUM_NL80211_WOWLAN_TCP];
  7391. struct cfg80211_wowlan_tcp *cfg;
  7392. struct nl80211_wowlan_tcp_data_token *tok = NULL;
  7393. struct nl80211_wowlan_tcp_data_seq *seq = NULL;
  7394. u32 size;
  7395. u32 data_size, wake_size, tokens_size = 0, wake_mask_size;
  7396. int err, port;
  7397. if (!rdev->wiphy.wowlan->tcp)
  7398. return -EINVAL;
  7399. err = nla_parse(tb, MAX_NL80211_WOWLAN_TCP,
  7400. nla_data(attr), nla_len(attr),
  7401. nl80211_wowlan_tcp_policy);
  7402. if (err)
  7403. return err;
  7404. if (!tb[NL80211_WOWLAN_TCP_SRC_IPV4] ||
  7405. !tb[NL80211_WOWLAN_TCP_DST_IPV4] ||
  7406. !tb[NL80211_WOWLAN_TCP_DST_MAC] ||
  7407. !tb[NL80211_WOWLAN_TCP_DST_PORT] ||
  7408. !tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD] ||
  7409. !tb[NL80211_WOWLAN_TCP_DATA_INTERVAL] ||
  7410. !tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD] ||
  7411. !tb[NL80211_WOWLAN_TCP_WAKE_MASK])
  7412. return -EINVAL;
  7413. data_size = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]);
  7414. if (data_size > rdev->wiphy.wowlan->tcp->data_payload_max)
  7415. return -EINVAL;
  7416. if (nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) >
  7417. rdev->wiphy.wowlan->tcp->data_interval_max ||
  7418. nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) == 0)
  7419. return -EINVAL;
  7420. wake_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]);
  7421. if (wake_size > rdev->wiphy.wowlan->tcp->wake_payload_max)
  7422. return -EINVAL;
  7423. wake_mask_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_MASK]);
  7424. if (wake_mask_size != DIV_ROUND_UP(wake_size, 8))
  7425. return -EINVAL;
  7426. if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]) {
  7427. u32 tokln = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
  7428. tok = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
  7429. tokens_size = tokln - sizeof(*tok);
  7430. if (!tok->len || tokens_size % tok->len)
  7431. return -EINVAL;
  7432. if (!rdev->wiphy.wowlan->tcp->tok)
  7433. return -EINVAL;
  7434. if (tok->len > rdev->wiphy.wowlan->tcp->tok->max_len)
  7435. return -EINVAL;
  7436. if (tok->len < rdev->wiphy.wowlan->tcp->tok->min_len)
  7437. return -EINVAL;
  7438. if (tokens_size > rdev->wiphy.wowlan->tcp->tok->bufsize)
  7439. return -EINVAL;
  7440. if (tok->offset + tok->len > data_size)
  7441. return -EINVAL;
  7442. }
  7443. if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]) {
  7444. seq = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]);
  7445. if (!rdev->wiphy.wowlan->tcp->seq)
  7446. return -EINVAL;
  7447. if (seq->len == 0 || seq->len > 4)
  7448. return -EINVAL;
  7449. if (seq->len + seq->offset > data_size)
  7450. return -EINVAL;
  7451. }
  7452. size = sizeof(*cfg);
  7453. size += data_size;
  7454. size += wake_size + wake_mask_size;
  7455. size += tokens_size;
  7456. cfg = kzalloc(size, GFP_KERNEL);
  7457. if (!cfg)
  7458. return -ENOMEM;
  7459. cfg->src = nla_get_be32(tb[NL80211_WOWLAN_TCP_SRC_IPV4]);
  7460. cfg->dst = nla_get_be32(tb[NL80211_WOWLAN_TCP_DST_IPV4]);
  7461. memcpy(cfg->dst_mac, nla_data(tb[NL80211_WOWLAN_TCP_DST_MAC]),
  7462. ETH_ALEN);
  7463. if (tb[NL80211_WOWLAN_TCP_SRC_PORT])
  7464. port = nla_get_u16(tb[NL80211_WOWLAN_TCP_SRC_PORT]);
  7465. else
  7466. port = 0;
  7467. #ifdef CONFIG_INET
  7468. /* allocate a socket and port for it and use it */
  7469. err = __sock_create(wiphy_net(&rdev->wiphy), PF_INET, SOCK_STREAM,
  7470. IPPROTO_TCP, &cfg->sock, 1);
  7471. if (err) {
  7472. kfree(cfg);
  7473. return err;
  7474. }
  7475. if (inet_csk_get_port(cfg->sock->sk, port)) {
  7476. sock_release(cfg->sock);
  7477. kfree(cfg);
  7478. return -EADDRINUSE;
  7479. }
  7480. cfg->src_port = inet_sk(cfg->sock->sk)->inet_num;
  7481. #else
  7482. if (!port) {
  7483. kfree(cfg);
  7484. return -EINVAL;
  7485. }
  7486. cfg->src_port = port;
  7487. #endif
  7488. cfg->dst_port = nla_get_u16(tb[NL80211_WOWLAN_TCP_DST_PORT]);
  7489. cfg->payload_len = data_size;
  7490. cfg->payload = (u8 *)cfg + sizeof(*cfg) + tokens_size;
  7491. memcpy((void *)cfg->payload,
  7492. nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]),
  7493. data_size);
  7494. if (seq)
  7495. cfg->payload_seq = *seq;
  7496. cfg->data_interval = nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]);
  7497. cfg->wake_len = wake_size;
  7498. cfg->wake_data = (u8 *)cfg + sizeof(*cfg) + tokens_size + data_size;
  7499. memcpy((void *)cfg->wake_data,
  7500. nla_data(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]),
  7501. wake_size);
  7502. cfg->wake_mask = (u8 *)cfg + sizeof(*cfg) + tokens_size +
  7503. data_size + wake_size;
  7504. memcpy((void *)cfg->wake_mask,
  7505. nla_data(tb[NL80211_WOWLAN_TCP_WAKE_MASK]),
  7506. wake_mask_size);
  7507. if (tok) {
  7508. cfg->tokens_size = tokens_size;
  7509. memcpy(&cfg->payload_tok, tok, sizeof(*tok) + tokens_size);
  7510. }
  7511. trig->tcp = cfg;
  7512. return 0;
  7513. }
  7514. static int nl80211_parse_wowlan_nd(struct cfg80211_registered_device *rdev,
  7515. const struct wiphy_wowlan_support *wowlan,
  7516. struct nlattr *attr,
  7517. struct cfg80211_wowlan *trig)
  7518. {
  7519. struct nlattr **tb;
  7520. int err;
  7521. tb = kzalloc(NUM_NL80211_ATTR * sizeof(*tb), GFP_KERNEL);
  7522. if (!tb)
  7523. return -ENOMEM;
  7524. if (!(wowlan->flags & WIPHY_WOWLAN_NET_DETECT)) {
  7525. err = -EOPNOTSUPP;
  7526. goto out;
  7527. }
  7528. err = nla_parse(tb, NL80211_ATTR_MAX,
  7529. nla_data(attr), nla_len(attr),
  7530. nl80211_policy);
  7531. if (err)
  7532. goto out;
  7533. trig->nd_config = nl80211_parse_sched_scan(&rdev->wiphy, NULL, tb);
  7534. err = PTR_ERR_OR_ZERO(trig->nd_config);
  7535. if (err)
  7536. trig->nd_config = NULL;
  7537. out:
  7538. kfree(tb);
  7539. return err;
  7540. }
  7541. static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
  7542. {
  7543. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7544. struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
  7545. struct cfg80211_wowlan new_triggers = {};
  7546. struct cfg80211_wowlan *ntrig;
  7547. const struct wiphy_wowlan_support *wowlan = rdev->wiphy.wowlan;
  7548. int err, i;
  7549. bool prev_enabled = rdev->wiphy.wowlan_config;
  7550. if (!wowlan)
  7551. return -EOPNOTSUPP;
  7552. if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
  7553. cfg80211_rdev_free_wowlan(rdev);
  7554. rdev->wiphy.wowlan_config = NULL;
  7555. goto set_wakeup;
  7556. }
  7557. err = nla_parse(tb, MAX_NL80211_WOWLAN_TRIG,
  7558. nla_data(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
  7559. nla_len(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
  7560. nl80211_wowlan_policy);
  7561. if (err)
  7562. return err;
  7563. if (tb[NL80211_WOWLAN_TRIG_ANY]) {
  7564. if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
  7565. return -EINVAL;
  7566. new_triggers.any = true;
  7567. }
  7568. if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
  7569. if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
  7570. return -EINVAL;
  7571. new_triggers.disconnect = true;
  7572. }
  7573. if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
  7574. if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
  7575. return -EINVAL;
  7576. new_triggers.magic_pkt = true;
  7577. }
  7578. if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
  7579. return -EINVAL;
  7580. if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
  7581. if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
  7582. return -EINVAL;
  7583. new_triggers.gtk_rekey_failure = true;
  7584. }
  7585. if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
  7586. if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
  7587. return -EINVAL;
  7588. new_triggers.eap_identity_req = true;
  7589. }
  7590. if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
  7591. if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
  7592. return -EINVAL;
  7593. new_triggers.four_way_handshake = true;
  7594. }
  7595. if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
  7596. if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
  7597. return -EINVAL;
  7598. new_triggers.rfkill_release = true;
  7599. }
  7600. if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
  7601. struct nlattr *pat;
  7602. int n_patterns = 0;
  7603. int rem, pat_len, mask_len, pkt_offset;
  7604. struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
  7605. nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
  7606. rem)
  7607. n_patterns++;
  7608. if (n_patterns > wowlan->n_patterns)
  7609. return -EINVAL;
  7610. new_triggers.patterns = kcalloc(n_patterns,
  7611. sizeof(new_triggers.patterns[0]),
  7612. GFP_KERNEL);
  7613. if (!new_triggers.patterns)
  7614. return -ENOMEM;
  7615. new_triggers.n_patterns = n_patterns;
  7616. i = 0;
  7617. nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
  7618. rem) {
  7619. u8 *mask_pat;
  7620. nla_parse(pat_tb, MAX_NL80211_PKTPAT, nla_data(pat),
  7621. nla_len(pat), NULL);
  7622. err = -EINVAL;
  7623. if (!pat_tb[NL80211_PKTPAT_MASK] ||
  7624. !pat_tb[NL80211_PKTPAT_PATTERN])
  7625. goto error;
  7626. pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
  7627. mask_len = DIV_ROUND_UP(pat_len, 8);
  7628. if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
  7629. goto error;
  7630. if (pat_len > wowlan->pattern_max_len ||
  7631. pat_len < wowlan->pattern_min_len)
  7632. goto error;
  7633. if (!pat_tb[NL80211_PKTPAT_OFFSET])
  7634. pkt_offset = 0;
  7635. else
  7636. pkt_offset = nla_get_u32(
  7637. pat_tb[NL80211_PKTPAT_OFFSET]);
  7638. if (pkt_offset > wowlan->max_pkt_offset)
  7639. goto error;
  7640. new_triggers.patterns[i].pkt_offset = pkt_offset;
  7641. mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
  7642. if (!mask_pat) {
  7643. err = -ENOMEM;
  7644. goto error;
  7645. }
  7646. new_triggers.patterns[i].mask = mask_pat;
  7647. memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
  7648. mask_len);
  7649. mask_pat += mask_len;
  7650. new_triggers.patterns[i].pattern = mask_pat;
  7651. new_triggers.patterns[i].pattern_len = pat_len;
  7652. memcpy(mask_pat,
  7653. nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
  7654. pat_len);
  7655. i++;
  7656. }
  7657. }
  7658. if (tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION]) {
  7659. err = nl80211_parse_wowlan_tcp(
  7660. rdev, tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION],
  7661. &new_triggers);
  7662. if (err)
  7663. goto error;
  7664. }
  7665. if (tb[NL80211_WOWLAN_TRIG_NET_DETECT]) {
  7666. err = nl80211_parse_wowlan_nd(
  7667. rdev, wowlan, tb[NL80211_WOWLAN_TRIG_NET_DETECT],
  7668. &new_triggers);
  7669. if (err)
  7670. goto error;
  7671. }
  7672. ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
  7673. if (!ntrig) {
  7674. err = -ENOMEM;
  7675. goto error;
  7676. }
  7677. cfg80211_rdev_free_wowlan(rdev);
  7678. rdev->wiphy.wowlan_config = ntrig;
  7679. set_wakeup:
  7680. if (rdev->ops->set_wakeup &&
  7681. prev_enabled != !!rdev->wiphy.wowlan_config)
  7682. rdev_set_wakeup(rdev, rdev->wiphy.wowlan_config);
  7683. return 0;
  7684. error:
  7685. for (i = 0; i < new_triggers.n_patterns; i++)
  7686. kfree(new_triggers.patterns[i].mask);
  7687. kfree(new_triggers.patterns);
  7688. if (new_triggers.tcp && new_triggers.tcp->sock)
  7689. sock_release(new_triggers.tcp->sock);
  7690. kfree(new_triggers.tcp);
  7691. return err;
  7692. }
  7693. #endif
  7694. static int nl80211_send_coalesce_rules(struct sk_buff *msg,
  7695. struct cfg80211_registered_device *rdev)
  7696. {
  7697. struct nlattr *nl_pats, *nl_pat, *nl_rule, *nl_rules;
  7698. int i, j, pat_len;
  7699. struct cfg80211_coalesce_rules *rule;
  7700. if (!rdev->coalesce->n_rules)
  7701. return 0;
  7702. nl_rules = nla_nest_start(msg, NL80211_ATTR_COALESCE_RULE);
  7703. if (!nl_rules)
  7704. return -ENOBUFS;
  7705. for (i = 0; i < rdev->coalesce->n_rules; i++) {
  7706. nl_rule = nla_nest_start(msg, i + 1);
  7707. if (!nl_rule)
  7708. return -ENOBUFS;
  7709. rule = &rdev->coalesce->rules[i];
  7710. if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_DELAY,
  7711. rule->delay))
  7712. return -ENOBUFS;
  7713. if (nla_put_u32(msg, NL80211_ATTR_COALESCE_RULE_CONDITION,
  7714. rule->condition))
  7715. return -ENOBUFS;
  7716. nl_pats = nla_nest_start(msg,
  7717. NL80211_ATTR_COALESCE_RULE_PKT_PATTERN);
  7718. if (!nl_pats)
  7719. return -ENOBUFS;
  7720. for (j = 0; j < rule->n_patterns; j++) {
  7721. nl_pat = nla_nest_start(msg, j + 1);
  7722. if (!nl_pat)
  7723. return -ENOBUFS;
  7724. pat_len = rule->patterns[j].pattern_len;
  7725. if (nla_put(msg, NL80211_PKTPAT_MASK,
  7726. DIV_ROUND_UP(pat_len, 8),
  7727. rule->patterns[j].mask) ||
  7728. nla_put(msg, NL80211_PKTPAT_PATTERN, pat_len,
  7729. rule->patterns[j].pattern) ||
  7730. nla_put_u32(msg, NL80211_PKTPAT_OFFSET,
  7731. rule->patterns[j].pkt_offset))
  7732. return -ENOBUFS;
  7733. nla_nest_end(msg, nl_pat);
  7734. }
  7735. nla_nest_end(msg, nl_pats);
  7736. nla_nest_end(msg, nl_rule);
  7737. }
  7738. nla_nest_end(msg, nl_rules);
  7739. return 0;
  7740. }
  7741. static int nl80211_get_coalesce(struct sk_buff *skb, struct genl_info *info)
  7742. {
  7743. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7744. struct sk_buff *msg;
  7745. void *hdr;
  7746. if (!rdev->wiphy.coalesce)
  7747. return -EOPNOTSUPP;
  7748. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  7749. if (!msg)
  7750. return -ENOMEM;
  7751. hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
  7752. NL80211_CMD_GET_COALESCE);
  7753. if (!hdr)
  7754. goto nla_put_failure;
  7755. if (rdev->coalesce && nl80211_send_coalesce_rules(msg, rdev))
  7756. goto nla_put_failure;
  7757. genlmsg_end(msg, hdr);
  7758. return genlmsg_reply(msg, info);
  7759. nla_put_failure:
  7760. nlmsg_free(msg);
  7761. return -ENOBUFS;
  7762. }
  7763. void cfg80211_rdev_free_coalesce(struct cfg80211_registered_device *rdev)
  7764. {
  7765. struct cfg80211_coalesce *coalesce = rdev->coalesce;
  7766. int i, j;
  7767. struct cfg80211_coalesce_rules *rule;
  7768. if (!coalesce)
  7769. return;
  7770. for (i = 0; i < coalesce->n_rules; i++) {
  7771. rule = &coalesce->rules[i];
  7772. for (j = 0; j < rule->n_patterns; j++)
  7773. kfree(rule->patterns[j].mask);
  7774. kfree(rule->patterns);
  7775. }
  7776. kfree(coalesce->rules);
  7777. kfree(coalesce);
  7778. rdev->coalesce = NULL;
  7779. }
  7780. static int nl80211_parse_coalesce_rule(struct cfg80211_registered_device *rdev,
  7781. struct nlattr *rule,
  7782. struct cfg80211_coalesce_rules *new_rule)
  7783. {
  7784. int err, i;
  7785. const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
  7786. struct nlattr *tb[NUM_NL80211_ATTR_COALESCE_RULE], *pat;
  7787. int rem, pat_len, mask_len, pkt_offset, n_patterns = 0;
  7788. struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
  7789. err = nla_parse(tb, NL80211_ATTR_COALESCE_RULE_MAX, nla_data(rule),
  7790. nla_len(rule), nl80211_coalesce_policy);
  7791. if (err)
  7792. return err;
  7793. if (tb[NL80211_ATTR_COALESCE_RULE_DELAY])
  7794. new_rule->delay =
  7795. nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_DELAY]);
  7796. if (new_rule->delay > coalesce->max_delay)
  7797. return -EINVAL;
  7798. if (tb[NL80211_ATTR_COALESCE_RULE_CONDITION])
  7799. new_rule->condition =
  7800. nla_get_u32(tb[NL80211_ATTR_COALESCE_RULE_CONDITION]);
  7801. if (new_rule->condition != NL80211_COALESCE_CONDITION_MATCH &&
  7802. new_rule->condition != NL80211_COALESCE_CONDITION_NO_MATCH)
  7803. return -EINVAL;
  7804. if (!tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN])
  7805. return -EINVAL;
  7806. nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
  7807. rem)
  7808. n_patterns++;
  7809. if (n_patterns > coalesce->n_patterns)
  7810. return -EINVAL;
  7811. new_rule->patterns = kcalloc(n_patterns, sizeof(new_rule->patterns[0]),
  7812. GFP_KERNEL);
  7813. if (!new_rule->patterns)
  7814. return -ENOMEM;
  7815. new_rule->n_patterns = n_patterns;
  7816. i = 0;
  7817. nla_for_each_nested(pat, tb[NL80211_ATTR_COALESCE_RULE_PKT_PATTERN],
  7818. rem) {
  7819. u8 *mask_pat;
  7820. nla_parse(pat_tb, MAX_NL80211_PKTPAT, nla_data(pat),
  7821. nla_len(pat), NULL);
  7822. if (!pat_tb[NL80211_PKTPAT_MASK] ||
  7823. !pat_tb[NL80211_PKTPAT_PATTERN])
  7824. return -EINVAL;
  7825. pat_len = nla_len(pat_tb[NL80211_PKTPAT_PATTERN]);
  7826. mask_len = DIV_ROUND_UP(pat_len, 8);
  7827. if (nla_len(pat_tb[NL80211_PKTPAT_MASK]) != mask_len)
  7828. return -EINVAL;
  7829. if (pat_len > coalesce->pattern_max_len ||
  7830. pat_len < coalesce->pattern_min_len)
  7831. return -EINVAL;
  7832. if (!pat_tb[NL80211_PKTPAT_OFFSET])
  7833. pkt_offset = 0;
  7834. else
  7835. pkt_offset = nla_get_u32(pat_tb[NL80211_PKTPAT_OFFSET]);
  7836. if (pkt_offset > coalesce->max_pkt_offset)
  7837. return -EINVAL;
  7838. new_rule->patterns[i].pkt_offset = pkt_offset;
  7839. mask_pat = kmalloc(mask_len + pat_len, GFP_KERNEL);
  7840. if (!mask_pat)
  7841. return -ENOMEM;
  7842. new_rule->patterns[i].mask = mask_pat;
  7843. memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_MASK]),
  7844. mask_len);
  7845. mask_pat += mask_len;
  7846. new_rule->patterns[i].pattern = mask_pat;
  7847. new_rule->patterns[i].pattern_len = pat_len;
  7848. memcpy(mask_pat, nla_data(pat_tb[NL80211_PKTPAT_PATTERN]),
  7849. pat_len);
  7850. i++;
  7851. }
  7852. return 0;
  7853. }
  7854. static int nl80211_set_coalesce(struct sk_buff *skb, struct genl_info *info)
  7855. {
  7856. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7857. const struct wiphy_coalesce_support *coalesce = rdev->wiphy.coalesce;
  7858. struct cfg80211_coalesce new_coalesce = {};
  7859. struct cfg80211_coalesce *n_coalesce;
  7860. int err, rem_rule, n_rules = 0, i, j;
  7861. struct nlattr *rule;
  7862. struct cfg80211_coalesce_rules *tmp_rule;
  7863. if (!rdev->wiphy.coalesce || !rdev->ops->set_coalesce)
  7864. return -EOPNOTSUPP;
  7865. if (!info->attrs[NL80211_ATTR_COALESCE_RULE]) {
  7866. cfg80211_rdev_free_coalesce(rdev);
  7867. rdev->ops->set_coalesce(&rdev->wiphy, NULL);
  7868. return 0;
  7869. }
  7870. nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
  7871. rem_rule)
  7872. n_rules++;
  7873. if (n_rules > coalesce->n_rules)
  7874. return -EINVAL;
  7875. new_coalesce.rules = kcalloc(n_rules, sizeof(new_coalesce.rules[0]),
  7876. GFP_KERNEL);
  7877. if (!new_coalesce.rules)
  7878. return -ENOMEM;
  7879. new_coalesce.n_rules = n_rules;
  7880. i = 0;
  7881. nla_for_each_nested(rule, info->attrs[NL80211_ATTR_COALESCE_RULE],
  7882. rem_rule) {
  7883. err = nl80211_parse_coalesce_rule(rdev, rule,
  7884. &new_coalesce.rules[i]);
  7885. if (err)
  7886. goto error;
  7887. i++;
  7888. }
  7889. err = rdev->ops->set_coalesce(&rdev->wiphy, &new_coalesce);
  7890. if (err)
  7891. goto error;
  7892. n_coalesce = kmemdup(&new_coalesce, sizeof(new_coalesce), GFP_KERNEL);
  7893. if (!n_coalesce) {
  7894. err = -ENOMEM;
  7895. goto error;
  7896. }
  7897. cfg80211_rdev_free_coalesce(rdev);
  7898. rdev->coalesce = n_coalesce;
  7899. return 0;
  7900. error:
  7901. for (i = 0; i < new_coalesce.n_rules; i++) {
  7902. tmp_rule = &new_coalesce.rules[i];
  7903. for (j = 0; j < tmp_rule->n_patterns; j++)
  7904. kfree(tmp_rule->patterns[j].mask);
  7905. kfree(tmp_rule->patterns);
  7906. }
  7907. kfree(new_coalesce.rules);
  7908. return err;
  7909. }
  7910. static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
  7911. {
  7912. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7913. struct net_device *dev = info->user_ptr[1];
  7914. struct wireless_dev *wdev = dev->ieee80211_ptr;
  7915. struct nlattr *tb[NUM_NL80211_REKEY_DATA];
  7916. struct cfg80211_gtk_rekey_data rekey_data;
  7917. int err;
  7918. if (!info->attrs[NL80211_ATTR_REKEY_DATA])
  7919. return -EINVAL;
  7920. err = nla_parse(tb, MAX_NL80211_REKEY_DATA,
  7921. nla_data(info->attrs[NL80211_ATTR_REKEY_DATA]),
  7922. nla_len(info->attrs[NL80211_ATTR_REKEY_DATA]),
  7923. nl80211_rekey_policy);
  7924. if (err)
  7925. return err;
  7926. if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
  7927. return -ERANGE;
  7928. if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
  7929. return -ERANGE;
  7930. if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
  7931. return -ERANGE;
  7932. rekey_data.kek = nla_data(tb[NL80211_REKEY_DATA_KEK]);
  7933. rekey_data.kck = nla_data(tb[NL80211_REKEY_DATA_KCK]);
  7934. rekey_data.replay_ctr = nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]);
  7935. wdev_lock(wdev);
  7936. if (!wdev->current_bss) {
  7937. err = -ENOTCONN;
  7938. goto out;
  7939. }
  7940. if (!rdev->ops->set_rekey_data) {
  7941. err = -EOPNOTSUPP;
  7942. goto out;
  7943. }
  7944. err = rdev_set_rekey_data(rdev, dev, &rekey_data);
  7945. out:
  7946. wdev_unlock(wdev);
  7947. return err;
  7948. }
  7949. static int nl80211_register_unexpected_frame(struct sk_buff *skb,
  7950. struct genl_info *info)
  7951. {
  7952. struct net_device *dev = info->user_ptr[1];
  7953. struct wireless_dev *wdev = dev->ieee80211_ptr;
  7954. if (wdev->iftype != NL80211_IFTYPE_AP &&
  7955. wdev->iftype != NL80211_IFTYPE_P2P_GO)
  7956. return -EINVAL;
  7957. if (wdev->ap_unexpected_nlportid)
  7958. return -EBUSY;
  7959. wdev->ap_unexpected_nlportid = info->snd_portid;
  7960. return 0;
  7961. }
  7962. static int nl80211_probe_client(struct sk_buff *skb,
  7963. struct genl_info *info)
  7964. {
  7965. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  7966. struct net_device *dev = info->user_ptr[1];
  7967. struct wireless_dev *wdev = dev->ieee80211_ptr;
  7968. struct sk_buff *msg;
  7969. void *hdr;
  7970. const u8 *addr;
  7971. u64 cookie;
  7972. int err;
  7973. if (wdev->iftype != NL80211_IFTYPE_AP &&
  7974. wdev->iftype != NL80211_IFTYPE_P2P_GO)
  7975. return -EOPNOTSUPP;
  7976. if (!info->attrs[NL80211_ATTR_MAC])
  7977. return -EINVAL;
  7978. if (!rdev->ops->probe_client)
  7979. return -EOPNOTSUPP;
  7980. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  7981. if (!msg)
  7982. return -ENOMEM;
  7983. hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
  7984. NL80211_CMD_PROBE_CLIENT);
  7985. if (!hdr) {
  7986. err = -ENOBUFS;
  7987. goto free_msg;
  7988. }
  7989. addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  7990. err = rdev_probe_client(rdev, dev, addr, &cookie);
  7991. if (err)
  7992. goto free_msg;
  7993. if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
  7994. goto nla_put_failure;
  7995. genlmsg_end(msg, hdr);
  7996. return genlmsg_reply(msg, info);
  7997. nla_put_failure:
  7998. err = -ENOBUFS;
  7999. free_msg:
  8000. nlmsg_free(msg);
  8001. return err;
  8002. }
  8003. static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
  8004. {
  8005. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8006. struct cfg80211_beacon_registration *reg, *nreg;
  8007. int rv;
  8008. if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
  8009. return -EOPNOTSUPP;
  8010. nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
  8011. if (!nreg)
  8012. return -ENOMEM;
  8013. /* First, check if already registered. */
  8014. spin_lock_bh(&rdev->beacon_registrations_lock);
  8015. list_for_each_entry(reg, &rdev->beacon_registrations, list) {
  8016. if (reg->nlportid == info->snd_portid) {
  8017. rv = -EALREADY;
  8018. goto out_err;
  8019. }
  8020. }
  8021. /* Add it to the list */
  8022. nreg->nlportid = info->snd_portid;
  8023. list_add(&nreg->list, &rdev->beacon_registrations);
  8024. spin_unlock_bh(&rdev->beacon_registrations_lock);
  8025. return 0;
  8026. out_err:
  8027. spin_unlock_bh(&rdev->beacon_registrations_lock);
  8028. kfree(nreg);
  8029. return rv;
  8030. }
  8031. static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
  8032. {
  8033. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8034. struct wireless_dev *wdev = info->user_ptr[1];
  8035. int err;
  8036. if (!rdev->ops->start_p2p_device)
  8037. return -EOPNOTSUPP;
  8038. if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
  8039. return -EOPNOTSUPP;
  8040. if (wdev->p2p_started)
  8041. return 0;
  8042. if (rfkill_blocked(rdev->rfkill))
  8043. return -ERFKILL;
  8044. err = rdev_start_p2p_device(rdev, wdev);
  8045. if (err)
  8046. return err;
  8047. wdev->p2p_started = true;
  8048. rdev->opencount++;
  8049. return 0;
  8050. }
  8051. static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
  8052. {
  8053. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8054. struct wireless_dev *wdev = info->user_ptr[1];
  8055. if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
  8056. return -EOPNOTSUPP;
  8057. if (!rdev->ops->stop_p2p_device)
  8058. return -EOPNOTSUPP;
  8059. cfg80211_stop_p2p_device(rdev, wdev);
  8060. return 0;
  8061. }
  8062. static int nl80211_get_protocol_features(struct sk_buff *skb,
  8063. struct genl_info *info)
  8064. {
  8065. void *hdr;
  8066. struct sk_buff *msg;
  8067. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  8068. if (!msg)
  8069. return -ENOMEM;
  8070. hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
  8071. NL80211_CMD_GET_PROTOCOL_FEATURES);
  8072. if (!hdr)
  8073. goto nla_put_failure;
  8074. if (nla_put_u32(msg, NL80211_ATTR_PROTOCOL_FEATURES,
  8075. NL80211_PROTOCOL_FEATURE_SPLIT_WIPHY_DUMP))
  8076. goto nla_put_failure;
  8077. genlmsg_end(msg, hdr);
  8078. return genlmsg_reply(msg, info);
  8079. nla_put_failure:
  8080. kfree_skb(msg);
  8081. return -ENOBUFS;
  8082. }
  8083. static int nl80211_update_ft_ies(struct sk_buff *skb, struct genl_info *info)
  8084. {
  8085. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8086. struct cfg80211_update_ft_ies_params ft_params;
  8087. struct net_device *dev = info->user_ptr[1];
  8088. if (!rdev->ops->update_ft_ies)
  8089. return -EOPNOTSUPP;
  8090. if (!info->attrs[NL80211_ATTR_MDID] ||
  8091. !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  8092. return -EINVAL;
  8093. memset(&ft_params, 0, sizeof(ft_params));
  8094. ft_params.md = nla_get_u16(info->attrs[NL80211_ATTR_MDID]);
  8095. ft_params.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  8096. ft_params.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  8097. return rdev_update_ft_ies(rdev, dev, &ft_params);
  8098. }
  8099. static int nl80211_crit_protocol_start(struct sk_buff *skb,
  8100. struct genl_info *info)
  8101. {
  8102. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8103. struct wireless_dev *wdev = info->user_ptr[1];
  8104. enum nl80211_crit_proto_id proto = NL80211_CRIT_PROTO_UNSPEC;
  8105. u16 duration;
  8106. int ret;
  8107. if (!rdev->ops->crit_proto_start)
  8108. return -EOPNOTSUPP;
  8109. if (WARN_ON(!rdev->ops->crit_proto_stop))
  8110. return -EINVAL;
  8111. if (rdev->crit_proto_nlportid)
  8112. return -EBUSY;
  8113. /* determine protocol if provided */
  8114. if (info->attrs[NL80211_ATTR_CRIT_PROT_ID])
  8115. proto = nla_get_u16(info->attrs[NL80211_ATTR_CRIT_PROT_ID]);
  8116. if (proto >= NUM_NL80211_CRIT_PROTO)
  8117. return -EINVAL;
  8118. /* timeout must be provided */
  8119. if (!info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION])
  8120. return -EINVAL;
  8121. duration =
  8122. nla_get_u16(info->attrs[NL80211_ATTR_MAX_CRIT_PROT_DURATION]);
  8123. if (duration > NL80211_CRIT_PROTO_MAX_DURATION)
  8124. return -ERANGE;
  8125. ret = rdev_crit_proto_start(rdev, wdev, proto, duration);
  8126. if (!ret)
  8127. rdev->crit_proto_nlportid = info->snd_portid;
  8128. return ret;
  8129. }
  8130. static int nl80211_crit_protocol_stop(struct sk_buff *skb,
  8131. struct genl_info *info)
  8132. {
  8133. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8134. struct wireless_dev *wdev = info->user_ptr[1];
  8135. if (!rdev->ops->crit_proto_stop)
  8136. return -EOPNOTSUPP;
  8137. if (rdev->crit_proto_nlportid) {
  8138. rdev->crit_proto_nlportid = 0;
  8139. rdev_crit_proto_stop(rdev, wdev);
  8140. }
  8141. return 0;
  8142. }
  8143. static int nl80211_vendor_cmd(struct sk_buff *skb, struct genl_info *info)
  8144. {
  8145. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8146. struct wireless_dev *wdev =
  8147. __cfg80211_wdev_from_attrs(genl_info_net(info), info->attrs);
  8148. int i, err;
  8149. u32 vid, subcmd;
  8150. if (!rdev->wiphy.vendor_commands)
  8151. return -EOPNOTSUPP;
  8152. if (IS_ERR(wdev)) {
  8153. err = PTR_ERR(wdev);
  8154. if (err != -EINVAL)
  8155. return err;
  8156. wdev = NULL;
  8157. } else if (wdev->wiphy != &rdev->wiphy) {
  8158. return -EINVAL;
  8159. }
  8160. if (!info->attrs[NL80211_ATTR_VENDOR_ID] ||
  8161. !info->attrs[NL80211_ATTR_VENDOR_SUBCMD])
  8162. return -EINVAL;
  8163. vid = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_ID]);
  8164. subcmd = nla_get_u32(info->attrs[NL80211_ATTR_VENDOR_SUBCMD]);
  8165. for (i = 0; i < rdev->wiphy.n_vendor_commands; i++) {
  8166. const struct wiphy_vendor_command *vcmd;
  8167. void *data = NULL;
  8168. int len = 0;
  8169. vcmd = &rdev->wiphy.vendor_commands[i];
  8170. if (vcmd->info.vendor_id != vid || vcmd->info.subcmd != subcmd)
  8171. continue;
  8172. if (vcmd->flags & (WIPHY_VENDOR_CMD_NEED_WDEV |
  8173. WIPHY_VENDOR_CMD_NEED_NETDEV)) {
  8174. if (!wdev)
  8175. return -EINVAL;
  8176. if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_NETDEV &&
  8177. !wdev->netdev)
  8178. return -EINVAL;
  8179. if (vcmd->flags & WIPHY_VENDOR_CMD_NEED_RUNNING) {
  8180. if (wdev->netdev &&
  8181. !netif_running(wdev->netdev))
  8182. return -ENETDOWN;
  8183. if (!wdev->netdev && !wdev->p2p_started)
  8184. return -ENETDOWN;
  8185. }
  8186. } else {
  8187. wdev = NULL;
  8188. }
  8189. if (info->attrs[NL80211_ATTR_VENDOR_DATA]) {
  8190. data = nla_data(info->attrs[NL80211_ATTR_VENDOR_DATA]);
  8191. len = nla_len(info->attrs[NL80211_ATTR_VENDOR_DATA]);
  8192. }
  8193. rdev->cur_cmd_info = info;
  8194. err = rdev->wiphy.vendor_commands[i].doit(&rdev->wiphy, wdev,
  8195. data, len);
  8196. rdev->cur_cmd_info = NULL;
  8197. return err;
  8198. }
  8199. return -EOPNOTSUPP;
  8200. }
  8201. struct sk_buff *__cfg80211_alloc_reply_skb(struct wiphy *wiphy,
  8202. enum nl80211_commands cmd,
  8203. enum nl80211_attrs attr,
  8204. int approxlen)
  8205. {
  8206. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  8207. if (WARN_ON(!rdev->cur_cmd_info))
  8208. return NULL;
  8209. return __cfg80211_alloc_vendor_skb(rdev, approxlen,
  8210. rdev->cur_cmd_info->snd_portid,
  8211. rdev->cur_cmd_info->snd_seq,
  8212. cmd, attr, NULL, GFP_KERNEL);
  8213. }
  8214. EXPORT_SYMBOL(__cfg80211_alloc_reply_skb);
  8215. int cfg80211_vendor_cmd_reply(struct sk_buff *skb)
  8216. {
  8217. struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
  8218. void *hdr = ((void **)skb->cb)[1];
  8219. struct nlattr *data = ((void **)skb->cb)[2];
  8220. /* clear CB data for netlink core to own from now on */
  8221. memset(skb->cb, 0, sizeof(skb->cb));
  8222. if (WARN_ON(!rdev->cur_cmd_info)) {
  8223. kfree_skb(skb);
  8224. return -EINVAL;
  8225. }
  8226. nla_nest_end(skb, data);
  8227. genlmsg_end(skb, hdr);
  8228. return genlmsg_reply(skb, rdev->cur_cmd_info);
  8229. }
  8230. EXPORT_SYMBOL_GPL(cfg80211_vendor_cmd_reply);
  8231. static int nl80211_set_qos_map(struct sk_buff *skb,
  8232. struct genl_info *info)
  8233. {
  8234. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8235. struct cfg80211_qos_map *qos_map = NULL;
  8236. struct net_device *dev = info->user_ptr[1];
  8237. u8 *pos, len, num_des, des_len, des;
  8238. int ret;
  8239. if (!rdev->ops->set_qos_map)
  8240. return -EOPNOTSUPP;
  8241. if (info->attrs[NL80211_ATTR_QOS_MAP]) {
  8242. pos = nla_data(info->attrs[NL80211_ATTR_QOS_MAP]);
  8243. len = nla_len(info->attrs[NL80211_ATTR_QOS_MAP]);
  8244. if (len % 2 || len < IEEE80211_QOS_MAP_LEN_MIN ||
  8245. len > IEEE80211_QOS_MAP_LEN_MAX)
  8246. return -EINVAL;
  8247. qos_map = kzalloc(sizeof(struct cfg80211_qos_map), GFP_KERNEL);
  8248. if (!qos_map)
  8249. return -ENOMEM;
  8250. num_des = (len - IEEE80211_QOS_MAP_LEN_MIN) >> 1;
  8251. if (num_des) {
  8252. des_len = num_des *
  8253. sizeof(struct cfg80211_dscp_exception);
  8254. memcpy(qos_map->dscp_exception, pos, des_len);
  8255. qos_map->num_des = num_des;
  8256. for (des = 0; des < num_des; des++) {
  8257. if (qos_map->dscp_exception[des].up > 7) {
  8258. kfree(qos_map);
  8259. return -EINVAL;
  8260. }
  8261. }
  8262. pos += des_len;
  8263. }
  8264. memcpy(qos_map->up, pos, IEEE80211_QOS_MAP_LEN_MIN);
  8265. }
  8266. wdev_lock(dev->ieee80211_ptr);
  8267. ret = nl80211_key_allowed(dev->ieee80211_ptr);
  8268. if (!ret)
  8269. ret = rdev_set_qos_map(rdev, dev, qos_map);
  8270. wdev_unlock(dev->ieee80211_ptr);
  8271. kfree(qos_map);
  8272. return ret;
  8273. }
  8274. static int nl80211_add_tx_ts(struct sk_buff *skb, struct genl_info *info)
  8275. {
  8276. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8277. struct net_device *dev = info->user_ptr[1];
  8278. struct wireless_dev *wdev = dev->ieee80211_ptr;
  8279. const u8 *peer;
  8280. u8 tsid, up;
  8281. u16 admitted_time = 0;
  8282. int err;
  8283. if (!(rdev->wiphy.features & NL80211_FEATURE_SUPPORTS_WMM_ADMISSION))
  8284. return -EOPNOTSUPP;
  8285. if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC] ||
  8286. !info->attrs[NL80211_ATTR_USER_PRIO])
  8287. return -EINVAL;
  8288. tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
  8289. if (tsid >= IEEE80211_NUM_TIDS)
  8290. return -EINVAL;
  8291. up = nla_get_u8(info->attrs[NL80211_ATTR_USER_PRIO]);
  8292. if (up >= IEEE80211_NUM_UPS)
  8293. return -EINVAL;
  8294. /* WMM uses TIDs 0-7 even for TSPEC */
  8295. if (tsid >= IEEE80211_FIRST_TSPEC_TSID) {
  8296. /* TODO: handle 802.11 TSPEC/admission control
  8297. * need more attributes for that (e.g. BA session requirement);
  8298. * change the WMM adminssion test above to allow both then
  8299. */
  8300. return -EINVAL;
  8301. }
  8302. peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
  8303. if (info->attrs[NL80211_ATTR_ADMITTED_TIME]) {
  8304. admitted_time =
  8305. nla_get_u16(info->attrs[NL80211_ATTR_ADMITTED_TIME]);
  8306. if (!admitted_time)
  8307. return -EINVAL;
  8308. }
  8309. wdev_lock(wdev);
  8310. switch (wdev->iftype) {
  8311. case NL80211_IFTYPE_STATION:
  8312. case NL80211_IFTYPE_P2P_CLIENT:
  8313. if (wdev->current_bss)
  8314. break;
  8315. err = -ENOTCONN;
  8316. goto out;
  8317. default:
  8318. err = -EOPNOTSUPP;
  8319. goto out;
  8320. }
  8321. err = rdev_add_tx_ts(rdev, dev, tsid, peer, up, admitted_time);
  8322. out:
  8323. wdev_unlock(wdev);
  8324. return err;
  8325. }
  8326. static int nl80211_del_tx_ts(struct sk_buff *skb, struct genl_info *info)
  8327. {
  8328. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8329. struct net_device *dev = info->user_ptr[1];
  8330. struct wireless_dev *wdev = dev->ieee80211_ptr;
  8331. const u8 *peer;
  8332. u8 tsid;
  8333. int err;
  8334. if (!info->attrs[NL80211_ATTR_TSID] || !info->attrs[NL80211_ATTR_MAC])
  8335. return -EINVAL;
  8336. tsid = nla_get_u8(info->attrs[NL80211_ATTR_TSID]);
  8337. peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
  8338. wdev_lock(wdev);
  8339. err = rdev_del_tx_ts(rdev, dev, tsid, peer);
  8340. wdev_unlock(wdev);
  8341. return err;
  8342. }
  8343. static int nl80211_tdls_channel_switch(struct sk_buff *skb,
  8344. struct genl_info *info)
  8345. {
  8346. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8347. struct net_device *dev = info->user_ptr[1];
  8348. struct wireless_dev *wdev = dev->ieee80211_ptr;
  8349. struct cfg80211_chan_def chandef = {};
  8350. const u8 *addr;
  8351. u8 oper_class;
  8352. int err;
  8353. if (!rdev->ops->tdls_channel_switch ||
  8354. !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
  8355. return -EOPNOTSUPP;
  8356. switch (dev->ieee80211_ptr->iftype) {
  8357. case NL80211_IFTYPE_STATION:
  8358. case NL80211_IFTYPE_P2P_CLIENT:
  8359. break;
  8360. default:
  8361. return -EOPNOTSUPP;
  8362. }
  8363. if (!info->attrs[NL80211_ATTR_MAC] ||
  8364. !info->attrs[NL80211_ATTR_OPER_CLASS])
  8365. return -EINVAL;
  8366. err = nl80211_parse_chandef(rdev, info, &chandef);
  8367. if (err)
  8368. return err;
  8369. /*
  8370. * Don't allow wide channels on the 2.4Ghz band, as per IEEE802.11-2012
  8371. * section 10.22.6.2.1. Disallow 5/10Mhz channels as well for now, the
  8372. * specification is not defined for them.
  8373. */
  8374. if (chandef.chan->band == IEEE80211_BAND_2GHZ &&
  8375. chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
  8376. chandef.width != NL80211_CHAN_WIDTH_20)
  8377. return -EINVAL;
  8378. /* we will be active on the TDLS link */
  8379. if (!cfg80211_reg_can_beacon(&rdev->wiphy, &chandef, wdev->iftype))
  8380. return -EINVAL;
  8381. /* don't allow switching to DFS channels */
  8382. if (cfg80211_chandef_dfs_required(wdev->wiphy, &chandef, wdev->iftype))
  8383. return -EINVAL;
  8384. addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  8385. oper_class = nla_get_u8(info->attrs[NL80211_ATTR_OPER_CLASS]);
  8386. wdev_lock(wdev);
  8387. err = rdev_tdls_channel_switch(rdev, dev, addr, oper_class, &chandef);
  8388. wdev_unlock(wdev);
  8389. return err;
  8390. }
  8391. static int nl80211_tdls_cancel_channel_switch(struct sk_buff *skb,
  8392. struct genl_info *info)
  8393. {
  8394. struct cfg80211_registered_device *rdev = info->user_ptr[0];
  8395. struct net_device *dev = info->user_ptr[1];
  8396. struct wireless_dev *wdev = dev->ieee80211_ptr;
  8397. const u8 *addr;
  8398. if (!rdev->ops->tdls_channel_switch ||
  8399. !rdev->ops->tdls_cancel_channel_switch ||
  8400. !(rdev->wiphy.features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH))
  8401. return -EOPNOTSUPP;
  8402. switch (dev->ieee80211_ptr->iftype) {
  8403. case NL80211_IFTYPE_STATION:
  8404. case NL80211_IFTYPE_P2P_CLIENT:
  8405. break;
  8406. default:
  8407. return -EOPNOTSUPP;
  8408. }
  8409. if (!info->attrs[NL80211_ATTR_MAC])
  8410. return -EINVAL;
  8411. addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  8412. wdev_lock(wdev);
  8413. rdev_tdls_cancel_channel_switch(rdev, dev, addr);
  8414. wdev_unlock(wdev);
  8415. return 0;
  8416. }
  8417. #define NL80211_FLAG_NEED_WIPHY 0x01
  8418. #define NL80211_FLAG_NEED_NETDEV 0x02
  8419. #define NL80211_FLAG_NEED_RTNL 0x04
  8420. #define NL80211_FLAG_CHECK_NETDEV_UP 0x08
  8421. #define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
  8422. NL80211_FLAG_CHECK_NETDEV_UP)
  8423. #define NL80211_FLAG_NEED_WDEV 0x10
  8424. /* If a netdev is associated, it must be UP, P2P must be started */
  8425. #define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
  8426. NL80211_FLAG_CHECK_NETDEV_UP)
  8427. #define NL80211_FLAG_CLEAR_SKB 0x20
  8428. static int nl80211_pre_doit(const struct genl_ops *ops, struct sk_buff *skb,
  8429. struct genl_info *info)
  8430. {
  8431. struct cfg80211_registered_device *rdev;
  8432. struct wireless_dev *wdev;
  8433. struct net_device *dev;
  8434. bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
  8435. if (rtnl)
  8436. rtnl_lock();
  8437. if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
  8438. rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
  8439. if (IS_ERR(rdev)) {
  8440. if (rtnl)
  8441. rtnl_unlock();
  8442. return PTR_ERR(rdev);
  8443. }
  8444. info->user_ptr[0] = rdev;
  8445. } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV ||
  8446. ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
  8447. ASSERT_RTNL();
  8448. wdev = __cfg80211_wdev_from_attrs(genl_info_net(info),
  8449. info->attrs);
  8450. if (IS_ERR(wdev)) {
  8451. if (rtnl)
  8452. rtnl_unlock();
  8453. return PTR_ERR(wdev);
  8454. }
  8455. dev = wdev->netdev;
  8456. rdev = wiphy_to_rdev(wdev->wiphy);
  8457. if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
  8458. if (!dev) {
  8459. if (rtnl)
  8460. rtnl_unlock();
  8461. return -EINVAL;
  8462. }
  8463. info->user_ptr[1] = dev;
  8464. } else {
  8465. info->user_ptr[1] = wdev;
  8466. }
  8467. if (dev) {
  8468. if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
  8469. !netif_running(dev)) {
  8470. if (rtnl)
  8471. rtnl_unlock();
  8472. return -ENETDOWN;
  8473. }
  8474. dev_hold(dev);
  8475. } else if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP) {
  8476. if (!wdev->p2p_started) {
  8477. if (rtnl)
  8478. rtnl_unlock();
  8479. return -ENETDOWN;
  8480. }
  8481. }
  8482. info->user_ptr[0] = rdev;
  8483. }
  8484. return 0;
  8485. }
  8486. static void nl80211_post_doit(const struct genl_ops *ops, struct sk_buff *skb,
  8487. struct genl_info *info)
  8488. {
  8489. if (info->user_ptr[1]) {
  8490. if (ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
  8491. struct wireless_dev *wdev = info->user_ptr[1];
  8492. if (wdev->netdev)
  8493. dev_put(wdev->netdev);
  8494. } else {
  8495. dev_put(info->user_ptr[1]);
  8496. }
  8497. }
  8498. if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
  8499. rtnl_unlock();
  8500. /* If needed, clear the netlink message payload from the SKB
  8501. * as it might contain key data that shouldn't stick around on
  8502. * the heap after the SKB is freed. The netlink message header
  8503. * is still needed for further processing, so leave it intact.
  8504. */
  8505. if (ops->internal_flags & NL80211_FLAG_CLEAR_SKB) {
  8506. struct nlmsghdr *nlh = nlmsg_hdr(skb);
  8507. memset(nlmsg_data(nlh), 0, nlmsg_len(nlh));
  8508. }
  8509. }
  8510. static const struct genl_ops nl80211_ops[] = {
  8511. {
  8512. .cmd = NL80211_CMD_GET_WIPHY,
  8513. .doit = nl80211_get_wiphy,
  8514. .dumpit = nl80211_dump_wiphy,
  8515. .done = nl80211_dump_wiphy_done,
  8516. .policy = nl80211_policy,
  8517. /* can be retrieved by unprivileged users */
  8518. .internal_flags = NL80211_FLAG_NEED_WIPHY |
  8519. NL80211_FLAG_NEED_RTNL,
  8520. },
  8521. {
  8522. .cmd = NL80211_CMD_SET_WIPHY,
  8523. .doit = nl80211_set_wiphy,
  8524. .policy = nl80211_policy,
  8525. .flags = GENL_ADMIN_PERM,
  8526. .internal_flags = NL80211_FLAG_NEED_RTNL,
  8527. },
  8528. {
  8529. .cmd = NL80211_CMD_GET_INTERFACE,
  8530. .doit = nl80211_get_interface,
  8531. .dumpit = nl80211_dump_interface,
  8532. .policy = nl80211_policy,
  8533. /* can be retrieved by unprivileged users */
  8534. .internal_flags = NL80211_FLAG_NEED_WDEV |
  8535. NL80211_FLAG_NEED_RTNL,
  8536. },
  8537. {
  8538. .cmd = NL80211_CMD_SET_INTERFACE,
  8539. .doit = nl80211_set_interface,
  8540. .policy = nl80211_policy,
  8541. .flags = GENL_ADMIN_PERM,
  8542. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  8543. NL80211_FLAG_NEED_RTNL,
  8544. },
  8545. {
  8546. .cmd = NL80211_CMD_NEW_INTERFACE,
  8547. .doit = nl80211_new_interface,
  8548. .policy = nl80211_policy,
  8549. .flags = GENL_ADMIN_PERM,
  8550. .internal_flags = NL80211_FLAG_NEED_WIPHY |
  8551. NL80211_FLAG_NEED_RTNL,
  8552. },
  8553. {
  8554. .cmd = NL80211_CMD_DEL_INTERFACE,
  8555. .doit = nl80211_del_interface,
  8556. .policy = nl80211_policy,
  8557. .flags = GENL_ADMIN_PERM,
  8558. .internal_flags = NL80211_FLAG_NEED_WDEV |
  8559. NL80211_FLAG_NEED_RTNL,
  8560. },
  8561. {
  8562. .cmd = NL80211_CMD_GET_KEY,
  8563. .doit = nl80211_get_key,
  8564. .policy = nl80211_policy,
  8565. .flags = GENL_ADMIN_PERM,
  8566. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8567. NL80211_FLAG_NEED_RTNL,
  8568. },
  8569. {
  8570. .cmd = NL80211_CMD_SET_KEY,
  8571. .doit = nl80211_set_key,
  8572. .policy = nl80211_policy,
  8573. .flags = GENL_ADMIN_PERM,
  8574. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8575. NL80211_FLAG_NEED_RTNL |
  8576. NL80211_FLAG_CLEAR_SKB,
  8577. },
  8578. {
  8579. .cmd = NL80211_CMD_NEW_KEY,
  8580. .doit = nl80211_new_key,
  8581. .policy = nl80211_policy,
  8582. .flags = GENL_ADMIN_PERM,
  8583. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8584. NL80211_FLAG_NEED_RTNL |
  8585. NL80211_FLAG_CLEAR_SKB,
  8586. },
  8587. {
  8588. .cmd = NL80211_CMD_DEL_KEY,
  8589. .doit = nl80211_del_key,
  8590. .policy = nl80211_policy,
  8591. .flags = GENL_ADMIN_PERM,
  8592. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8593. NL80211_FLAG_NEED_RTNL,
  8594. },
  8595. {
  8596. .cmd = NL80211_CMD_SET_BEACON,
  8597. .policy = nl80211_policy,
  8598. .flags = GENL_ADMIN_PERM,
  8599. .doit = nl80211_set_beacon,
  8600. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8601. NL80211_FLAG_NEED_RTNL,
  8602. },
  8603. {
  8604. .cmd = NL80211_CMD_START_AP,
  8605. .policy = nl80211_policy,
  8606. .flags = GENL_ADMIN_PERM,
  8607. .doit = nl80211_start_ap,
  8608. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8609. NL80211_FLAG_NEED_RTNL,
  8610. },
  8611. {
  8612. .cmd = NL80211_CMD_STOP_AP,
  8613. .policy = nl80211_policy,
  8614. .flags = GENL_ADMIN_PERM,
  8615. .doit = nl80211_stop_ap,
  8616. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8617. NL80211_FLAG_NEED_RTNL,
  8618. },
  8619. {
  8620. .cmd = NL80211_CMD_GET_STATION,
  8621. .doit = nl80211_get_station,
  8622. .dumpit = nl80211_dump_station,
  8623. .policy = nl80211_policy,
  8624. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  8625. NL80211_FLAG_NEED_RTNL,
  8626. },
  8627. {
  8628. .cmd = NL80211_CMD_SET_STATION,
  8629. .doit = nl80211_set_station,
  8630. .policy = nl80211_policy,
  8631. .flags = GENL_ADMIN_PERM,
  8632. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8633. NL80211_FLAG_NEED_RTNL,
  8634. },
  8635. {
  8636. .cmd = NL80211_CMD_NEW_STATION,
  8637. .doit = nl80211_new_station,
  8638. .policy = nl80211_policy,
  8639. .flags = GENL_ADMIN_PERM,
  8640. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8641. NL80211_FLAG_NEED_RTNL,
  8642. },
  8643. {
  8644. .cmd = NL80211_CMD_DEL_STATION,
  8645. .doit = nl80211_del_station,
  8646. .policy = nl80211_policy,
  8647. .flags = GENL_ADMIN_PERM,
  8648. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8649. NL80211_FLAG_NEED_RTNL,
  8650. },
  8651. {
  8652. .cmd = NL80211_CMD_GET_MPATH,
  8653. .doit = nl80211_get_mpath,
  8654. .dumpit = nl80211_dump_mpath,
  8655. .policy = nl80211_policy,
  8656. .flags = GENL_ADMIN_PERM,
  8657. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8658. NL80211_FLAG_NEED_RTNL,
  8659. },
  8660. {
  8661. .cmd = NL80211_CMD_GET_MPP,
  8662. .doit = nl80211_get_mpp,
  8663. .dumpit = nl80211_dump_mpp,
  8664. .policy = nl80211_policy,
  8665. .flags = GENL_ADMIN_PERM,
  8666. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8667. NL80211_FLAG_NEED_RTNL,
  8668. },
  8669. {
  8670. .cmd = NL80211_CMD_SET_MPATH,
  8671. .doit = nl80211_set_mpath,
  8672. .policy = nl80211_policy,
  8673. .flags = GENL_ADMIN_PERM,
  8674. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8675. NL80211_FLAG_NEED_RTNL,
  8676. },
  8677. {
  8678. .cmd = NL80211_CMD_NEW_MPATH,
  8679. .doit = nl80211_new_mpath,
  8680. .policy = nl80211_policy,
  8681. .flags = GENL_ADMIN_PERM,
  8682. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8683. NL80211_FLAG_NEED_RTNL,
  8684. },
  8685. {
  8686. .cmd = NL80211_CMD_DEL_MPATH,
  8687. .doit = nl80211_del_mpath,
  8688. .policy = nl80211_policy,
  8689. .flags = GENL_ADMIN_PERM,
  8690. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8691. NL80211_FLAG_NEED_RTNL,
  8692. },
  8693. {
  8694. .cmd = NL80211_CMD_SET_BSS,
  8695. .doit = nl80211_set_bss,
  8696. .policy = nl80211_policy,
  8697. .flags = GENL_ADMIN_PERM,
  8698. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8699. NL80211_FLAG_NEED_RTNL,
  8700. },
  8701. {
  8702. .cmd = NL80211_CMD_GET_REG,
  8703. .doit = nl80211_get_reg_do,
  8704. .dumpit = nl80211_get_reg_dump,
  8705. .policy = nl80211_policy,
  8706. .internal_flags = NL80211_FLAG_NEED_RTNL,
  8707. /* can be retrieved by unprivileged users */
  8708. },
  8709. {
  8710. .cmd = NL80211_CMD_SET_REG,
  8711. .doit = nl80211_set_reg,
  8712. .policy = nl80211_policy,
  8713. .flags = GENL_ADMIN_PERM,
  8714. .internal_flags = NL80211_FLAG_NEED_RTNL,
  8715. },
  8716. {
  8717. .cmd = NL80211_CMD_REQ_SET_REG,
  8718. .doit = nl80211_req_set_reg,
  8719. .policy = nl80211_policy,
  8720. .flags = GENL_ADMIN_PERM,
  8721. },
  8722. {
  8723. .cmd = NL80211_CMD_GET_MESH_CONFIG,
  8724. .doit = nl80211_get_mesh_config,
  8725. .policy = nl80211_policy,
  8726. /* can be retrieved by unprivileged users */
  8727. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8728. NL80211_FLAG_NEED_RTNL,
  8729. },
  8730. {
  8731. .cmd = NL80211_CMD_SET_MESH_CONFIG,
  8732. .doit = nl80211_update_mesh_config,
  8733. .policy = nl80211_policy,
  8734. .flags = GENL_ADMIN_PERM,
  8735. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8736. NL80211_FLAG_NEED_RTNL,
  8737. },
  8738. {
  8739. .cmd = NL80211_CMD_TRIGGER_SCAN,
  8740. .doit = nl80211_trigger_scan,
  8741. .policy = nl80211_policy,
  8742. .flags = GENL_ADMIN_PERM,
  8743. .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
  8744. NL80211_FLAG_NEED_RTNL,
  8745. },
  8746. {
  8747. .cmd = NL80211_CMD_GET_SCAN,
  8748. .policy = nl80211_policy,
  8749. .dumpit = nl80211_dump_scan,
  8750. },
  8751. {
  8752. .cmd = NL80211_CMD_START_SCHED_SCAN,
  8753. .doit = nl80211_start_sched_scan,
  8754. .policy = nl80211_policy,
  8755. .flags = GENL_ADMIN_PERM,
  8756. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8757. NL80211_FLAG_NEED_RTNL,
  8758. },
  8759. {
  8760. .cmd = NL80211_CMD_STOP_SCHED_SCAN,
  8761. .doit = nl80211_stop_sched_scan,
  8762. .policy = nl80211_policy,
  8763. .flags = GENL_ADMIN_PERM,
  8764. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8765. NL80211_FLAG_NEED_RTNL,
  8766. },
  8767. {
  8768. .cmd = NL80211_CMD_AUTHENTICATE,
  8769. .doit = nl80211_authenticate,
  8770. .policy = nl80211_policy,
  8771. .flags = GENL_ADMIN_PERM,
  8772. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8773. NL80211_FLAG_NEED_RTNL |
  8774. NL80211_FLAG_CLEAR_SKB,
  8775. },
  8776. {
  8777. .cmd = NL80211_CMD_ASSOCIATE,
  8778. .doit = nl80211_associate,
  8779. .policy = nl80211_policy,
  8780. .flags = GENL_ADMIN_PERM,
  8781. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8782. NL80211_FLAG_NEED_RTNL,
  8783. },
  8784. {
  8785. .cmd = NL80211_CMD_DEAUTHENTICATE,
  8786. .doit = nl80211_deauthenticate,
  8787. .policy = nl80211_policy,
  8788. .flags = GENL_ADMIN_PERM,
  8789. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8790. NL80211_FLAG_NEED_RTNL,
  8791. },
  8792. {
  8793. .cmd = NL80211_CMD_DISASSOCIATE,
  8794. .doit = nl80211_disassociate,
  8795. .policy = nl80211_policy,
  8796. .flags = GENL_ADMIN_PERM,
  8797. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8798. NL80211_FLAG_NEED_RTNL,
  8799. },
  8800. {
  8801. .cmd = NL80211_CMD_JOIN_IBSS,
  8802. .doit = nl80211_join_ibss,
  8803. .policy = nl80211_policy,
  8804. .flags = GENL_ADMIN_PERM,
  8805. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8806. NL80211_FLAG_NEED_RTNL,
  8807. },
  8808. {
  8809. .cmd = NL80211_CMD_LEAVE_IBSS,
  8810. .doit = nl80211_leave_ibss,
  8811. .policy = nl80211_policy,
  8812. .flags = GENL_ADMIN_PERM,
  8813. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8814. NL80211_FLAG_NEED_RTNL,
  8815. },
  8816. #ifdef CONFIG_NL80211_TESTMODE
  8817. {
  8818. .cmd = NL80211_CMD_TESTMODE,
  8819. .doit = nl80211_testmode_do,
  8820. .dumpit = nl80211_testmode_dump,
  8821. .policy = nl80211_policy,
  8822. .flags = GENL_ADMIN_PERM,
  8823. .internal_flags = NL80211_FLAG_NEED_WIPHY |
  8824. NL80211_FLAG_NEED_RTNL,
  8825. },
  8826. #endif
  8827. {
  8828. .cmd = NL80211_CMD_CONNECT,
  8829. .doit = nl80211_connect,
  8830. .policy = nl80211_policy,
  8831. .flags = GENL_ADMIN_PERM,
  8832. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8833. NL80211_FLAG_NEED_RTNL,
  8834. },
  8835. {
  8836. .cmd = NL80211_CMD_DISCONNECT,
  8837. .doit = nl80211_disconnect,
  8838. .policy = nl80211_policy,
  8839. .flags = GENL_ADMIN_PERM,
  8840. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8841. NL80211_FLAG_NEED_RTNL,
  8842. },
  8843. {
  8844. .cmd = NL80211_CMD_SET_WIPHY_NETNS,
  8845. .doit = nl80211_wiphy_netns,
  8846. .policy = nl80211_policy,
  8847. .flags = GENL_ADMIN_PERM,
  8848. .internal_flags = NL80211_FLAG_NEED_WIPHY |
  8849. NL80211_FLAG_NEED_RTNL,
  8850. },
  8851. {
  8852. .cmd = NL80211_CMD_GET_SURVEY,
  8853. .policy = nl80211_policy,
  8854. .dumpit = nl80211_dump_survey,
  8855. },
  8856. {
  8857. .cmd = NL80211_CMD_SET_PMKSA,
  8858. .doit = nl80211_setdel_pmksa,
  8859. .policy = nl80211_policy,
  8860. .flags = GENL_ADMIN_PERM,
  8861. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8862. NL80211_FLAG_NEED_RTNL,
  8863. },
  8864. {
  8865. .cmd = NL80211_CMD_DEL_PMKSA,
  8866. .doit = nl80211_setdel_pmksa,
  8867. .policy = nl80211_policy,
  8868. .flags = GENL_ADMIN_PERM,
  8869. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8870. NL80211_FLAG_NEED_RTNL,
  8871. },
  8872. {
  8873. .cmd = NL80211_CMD_FLUSH_PMKSA,
  8874. .doit = nl80211_flush_pmksa,
  8875. .policy = nl80211_policy,
  8876. .flags = GENL_ADMIN_PERM,
  8877. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8878. NL80211_FLAG_NEED_RTNL,
  8879. },
  8880. {
  8881. .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
  8882. .doit = nl80211_remain_on_channel,
  8883. .policy = nl80211_policy,
  8884. .flags = GENL_ADMIN_PERM,
  8885. .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
  8886. NL80211_FLAG_NEED_RTNL,
  8887. },
  8888. {
  8889. .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
  8890. .doit = nl80211_cancel_remain_on_channel,
  8891. .policy = nl80211_policy,
  8892. .flags = GENL_ADMIN_PERM,
  8893. .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
  8894. NL80211_FLAG_NEED_RTNL,
  8895. },
  8896. {
  8897. .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
  8898. .doit = nl80211_set_tx_bitrate_mask,
  8899. .policy = nl80211_policy,
  8900. .flags = GENL_ADMIN_PERM,
  8901. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  8902. NL80211_FLAG_NEED_RTNL,
  8903. },
  8904. {
  8905. .cmd = NL80211_CMD_REGISTER_FRAME,
  8906. .doit = nl80211_register_mgmt,
  8907. .policy = nl80211_policy,
  8908. .flags = GENL_ADMIN_PERM,
  8909. .internal_flags = NL80211_FLAG_NEED_WDEV |
  8910. NL80211_FLAG_NEED_RTNL,
  8911. },
  8912. {
  8913. .cmd = NL80211_CMD_FRAME,
  8914. .doit = nl80211_tx_mgmt,
  8915. .policy = nl80211_policy,
  8916. .flags = GENL_ADMIN_PERM,
  8917. .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
  8918. NL80211_FLAG_NEED_RTNL,
  8919. },
  8920. {
  8921. .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
  8922. .doit = nl80211_tx_mgmt_cancel_wait,
  8923. .policy = nl80211_policy,
  8924. .flags = GENL_ADMIN_PERM,
  8925. .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
  8926. NL80211_FLAG_NEED_RTNL,
  8927. },
  8928. {
  8929. .cmd = NL80211_CMD_SET_POWER_SAVE,
  8930. .doit = nl80211_set_power_save,
  8931. .policy = nl80211_policy,
  8932. .flags = GENL_ADMIN_PERM,
  8933. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  8934. NL80211_FLAG_NEED_RTNL,
  8935. },
  8936. {
  8937. .cmd = NL80211_CMD_GET_POWER_SAVE,
  8938. .doit = nl80211_get_power_save,
  8939. .policy = nl80211_policy,
  8940. /* can be retrieved by unprivileged users */
  8941. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  8942. NL80211_FLAG_NEED_RTNL,
  8943. },
  8944. {
  8945. .cmd = NL80211_CMD_SET_CQM,
  8946. .doit = nl80211_set_cqm,
  8947. .policy = nl80211_policy,
  8948. .flags = GENL_ADMIN_PERM,
  8949. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  8950. NL80211_FLAG_NEED_RTNL,
  8951. },
  8952. {
  8953. .cmd = NL80211_CMD_SET_CHANNEL,
  8954. .doit = nl80211_set_channel,
  8955. .policy = nl80211_policy,
  8956. .flags = GENL_ADMIN_PERM,
  8957. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  8958. NL80211_FLAG_NEED_RTNL,
  8959. },
  8960. {
  8961. .cmd = NL80211_CMD_SET_WDS_PEER,
  8962. .doit = nl80211_set_wds_peer,
  8963. .policy = nl80211_policy,
  8964. .flags = GENL_ADMIN_PERM,
  8965. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  8966. NL80211_FLAG_NEED_RTNL,
  8967. },
  8968. {
  8969. .cmd = NL80211_CMD_JOIN_MESH,
  8970. .doit = nl80211_join_mesh,
  8971. .policy = nl80211_policy,
  8972. .flags = GENL_ADMIN_PERM,
  8973. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8974. NL80211_FLAG_NEED_RTNL,
  8975. },
  8976. {
  8977. .cmd = NL80211_CMD_LEAVE_MESH,
  8978. .doit = nl80211_leave_mesh,
  8979. .policy = nl80211_policy,
  8980. .flags = GENL_ADMIN_PERM,
  8981. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8982. NL80211_FLAG_NEED_RTNL,
  8983. },
  8984. {
  8985. .cmd = NL80211_CMD_JOIN_OCB,
  8986. .doit = nl80211_join_ocb,
  8987. .policy = nl80211_policy,
  8988. .flags = GENL_ADMIN_PERM,
  8989. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8990. NL80211_FLAG_NEED_RTNL,
  8991. },
  8992. {
  8993. .cmd = NL80211_CMD_LEAVE_OCB,
  8994. .doit = nl80211_leave_ocb,
  8995. .policy = nl80211_policy,
  8996. .flags = GENL_ADMIN_PERM,
  8997. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  8998. NL80211_FLAG_NEED_RTNL,
  8999. },
  9000. #ifdef CONFIG_PM
  9001. {
  9002. .cmd = NL80211_CMD_GET_WOWLAN,
  9003. .doit = nl80211_get_wowlan,
  9004. .policy = nl80211_policy,
  9005. /* can be retrieved by unprivileged users */
  9006. .internal_flags = NL80211_FLAG_NEED_WIPHY |
  9007. NL80211_FLAG_NEED_RTNL,
  9008. },
  9009. {
  9010. .cmd = NL80211_CMD_SET_WOWLAN,
  9011. .doit = nl80211_set_wowlan,
  9012. .policy = nl80211_policy,
  9013. .flags = GENL_ADMIN_PERM,
  9014. .internal_flags = NL80211_FLAG_NEED_WIPHY |
  9015. NL80211_FLAG_NEED_RTNL,
  9016. },
  9017. #endif
  9018. {
  9019. .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
  9020. .doit = nl80211_set_rekey_data,
  9021. .policy = nl80211_policy,
  9022. .flags = GENL_ADMIN_PERM,
  9023. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9024. NL80211_FLAG_NEED_RTNL |
  9025. NL80211_FLAG_CLEAR_SKB,
  9026. },
  9027. {
  9028. .cmd = NL80211_CMD_TDLS_MGMT,
  9029. .doit = nl80211_tdls_mgmt,
  9030. .policy = nl80211_policy,
  9031. .flags = GENL_ADMIN_PERM,
  9032. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9033. NL80211_FLAG_NEED_RTNL,
  9034. },
  9035. {
  9036. .cmd = NL80211_CMD_TDLS_OPER,
  9037. .doit = nl80211_tdls_oper,
  9038. .policy = nl80211_policy,
  9039. .flags = GENL_ADMIN_PERM,
  9040. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9041. NL80211_FLAG_NEED_RTNL,
  9042. },
  9043. {
  9044. .cmd = NL80211_CMD_UNEXPECTED_FRAME,
  9045. .doit = nl80211_register_unexpected_frame,
  9046. .policy = nl80211_policy,
  9047. .flags = GENL_ADMIN_PERM,
  9048. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  9049. NL80211_FLAG_NEED_RTNL,
  9050. },
  9051. {
  9052. .cmd = NL80211_CMD_PROBE_CLIENT,
  9053. .doit = nl80211_probe_client,
  9054. .policy = nl80211_policy,
  9055. .flags = GENL_ADMIN_PERM,
  9056. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9057. NL80211_FLAG_NEED_RTNL,
  9058. },
  9059. {
  9060. .cmd = NL80211_CMD_REGISTER_BEACONS,
  9061. .doit = nl80211_register_beacons,
  9062. .policy = nl80211_policy,
  9063. .flags = GENL_ADMIN_PERM,
  9064. .internal_flags = NL80211_FLAG_NEED_WIPHY |
  9065. NL80211_FLAG_NEED_RTNL,
  9066. },
  9067. {
  9068. .cmd = NL80211_CMD_SET_NOACK_MAP,
  9069. .doit = nl80211_set_noack_map,
  9070. .policy = nl80211_policy,
  9071. .flags = GENL_ADMIN_PERM,
  9072. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  9073. NL80211_FLAG_NEED_RTNL,
  9074. },
  9075. {
  9076. .cmd = NL80211_CMD_START_P2P_DEVICE,
  9077. .doit = nl80211_start_p2p_device,
  9078. .policy = nl80211_policy,
  9079. .flags = GENL_ADMIN_PERM,
  9080. .internal_flags = NL80211_FLAG_NEED_WDEV |
  9081. NL80211_FLAG_NEED_RTNL,
  9082. },
  9083. {
  9084. .cmd = NL80211_CMD_STOP_P2P_DEVICE,
  9085. .doit = nl80211_stop_p2p_device,
  9086. .policy = nl80211_policy,
  9087. .flags = GENL_ADMIN_PERM,
  9088. .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
  9089. NL80211_FLAG_NEED_RTNL,
  9090. },
  9091. {
  9092. .cmd = NL80211_CMD_SET_MCAST_RATE,
  9093. .doit = nl80211_set_mcast_rate,
  9094. .policy = nl80211_policy,
  9095. .flags = GENL_ADMIN_PERM,
  9096. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  9097. NL80211_FLAG_NEED_RTNL,
  9098. },
  9099. {
  9100. .cmd = NL80211_CMD_SET_MAC_ACL,
  9101. .doit = nl80211_set_mac_acl,
  9102. .policy = nl80211_policy,
  9103. .flags = GENL_ADMIN_PERM,
  9104. .internal_flags = NL80211_FLAG_NEED_NETDEV |
  9105. NL80211_FLAG_NEED_RTNL,
  9106. },
  9107. {
  9108. .cmd = NL80211_CMD_RADAR_DETECT,
  9109. .doit = nl80211_start_radar_detection,
  9110. .policy = nl80211_policy,
  9111. .flags = GENL_ADMIN_PERM,
  9112. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9113. NL80211_FLAG_NEED_RTNL,
  9114. },
  9115. {
  9116. .cmd = NL80211_CMD_GET_PROTOCOL_FEATURES,
  9117. .doit = nl80211_get_protocol_features,
  9118. .policy = nl80211_policy,
  9119. },
  9120. {
  9121. .cmd = NL80211_CMD_UPDATE_FT_IES,
  9122. .doit = nl80211_update_ft_ies,
  9123. .policy = nl80211_policy,
  9124. .flags = GENL_ADMIN_PERM,
  9125. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9126. NL80211_FLAG_NEED_RTNL,
  9127. },
  9128. {
  9129. .cmd = NL80211_CMD_CRIT_PROTOCOL_START,
  9130. .doit = nl80211_crit_protocol_start,
  9131. .policy = nl80211_policy,
  9132. .flags = GENL_ADMIN_PERM,
  9133. .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
  9134. NL80211_FLAG_NEED_RTNL,
  9135. },
  9136. {
  9137. .cmd = NL80211_CMD_CRIT_PROTOCOL_STOP,
  9138. .doit = nl80211_crit_protocol_stop,
  9139. .policy = nl80211_policy,
  9140. .flags = GENL_ADMIN_PERM,
  9141. .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
  9142. NL80211_FLAG_NEED_RTNL,
  9143. },
  9144. {
  9145. .cmd = NL80211_CMD_GET_COALESCE,
  9146. .doit = nl80211_get_coalesce,
  9147. .policy = nl80211_policy,
  9148. .internal_flags = NL80211_FLAG_NEED_WIPHY |
  9149. NL80211_FLAG_NEED_RTNL,
  9150. },
  9151. {
  9152. .cmd = NL80211_CMD_SET_COALESCE,
  9153. .doit = nl80211_set_coalesce,
  9154. .policy = nl80211_policy,
  9155. .flags = GENL_ADMIN_PERM,
  9156. .internal_flags = NL80211_FLAG_NEED_WIPHY |
  9157. NL80211_FLAG_NEED_RTNL,
  9158. },
  9159. {
  9160. .cmd = NL80211_CMD_CHANNEL_SWITCH,
  9161. .doit = nl80211_channel_switch,
  9162. .policy = nl80211_policy,
  9163. .flags = GENL_ADMIN_PERM,
  9164. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9165. NL80211_FLAG_NEED_RTNL,
  9166. },
  9167. {
  9168. .cmd = NL80211_CMD_VENDOR,
  9169. .doit = nl80211_vendor_cmd,
  9170. .policy = nl80211_policy,
  9171. .flags = GENL_ADMIN_PERM,
  9172. .internal_flags = NL80211_FLAG_NEED_WIPHY |
  9173. NL80211_FLAG_NEED_RTNL,
  9174. },
  9175. {
  9176. .cmd = NL80211_CMD_SET_QOS_MAP,
  9177. .doit = nl80211_set_qos_map,
  9178. .policy = nl80211_policy,
  9179. .flags = GENL_ADMIN_PERM,
  9180. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9181. NL80211_FLAG_NEED_RTNL,
  9182. },
  9183. {
  9184. .cmd = NL80211_CMD_ADD_TX_TS,
  9185. .doit = nl80211_add_tx_ts,
  9186. .policy = nl80211_policy,
  9187. .flags = GENL_ADMIN_PERM,
  9188. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9189. NL80211_FLAG_NEED_RTNL,
  9190. },
  9191. {
  9192. .cmd = NL80211_CMD_DEL_TX_TS,
  9193. .doit = nl80211_del_tx_ts,
  9194. .policy = nl80211_policy,
  9195. .flags = GENL_ADMIN_PERM,
  9196. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9197. NL80211_FLAG_NEED_RTNL,
  9198. },
  9199. {
  9200. .cmd = NL80211_CMD_TDLS_CHANNEL_SWITCH,
  9201. .doit = nl80211_tdls_channel_switch,
  9202. .policy = nl80211_policy,
  9203. .flags = GENL_ADMIN_PERM,
  9204. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9205. NL80211_FLAG_NEED_RTNL,
  9206. },
  9207. {
  9208. .cmd = NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH,
  9209. .doit = nl80211_tdls_cancel_channel_switch,
  9210. .policy = nl80211_policy,
  9211. .flags = GENL_ADMIN_PERM,
  9212. .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
  9213. NL80211_FLAG_NEED_RTNL,
  9214. },
  9215. };
  9216. /* notification functions */
  9217. void nl80211_notify_wiphy(struct cfg80211_registered_device *rdev,
  9218. enum nl80211_commands cmd)
  9219. {
  9220. struct sk_buff *msg;
  9221. struct nl80211_dump_wiphy_state state = {};
  9222. WARN_ON(cmd != NL80211_CMD_NEW_WIPHY &&
  9223. cmd != NL80211_CMD_DEL_WIPHY);
  9224. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  9225. if (!msg)
  9226. return;
  9227. if (nl80211_send_wiphy(rdev, cmd, msg, 0, 0, 0, &state) < 0) {
  9228. nlmsg_free(msg);
  9229. return;
  9230. }
  9231. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9232. NL80211_MCGRP_CONFIG, GFP_KERNEL);
  9233. }
  9234. static int nl80211_add_scan_req(struct sk_buff *msg,
  9235. struct cfg80211_registered_device *rdev)
  9236. {
  9237. struct cfg80211_scan_request *req = rdev->scan_req;
  9238. struct nlattr *nest;
  9239. int i;
  9240. if (WARN_ON(!req))
  9241. return 0;
  9242. nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
  9243. if (!nest)
  9244. goto nla_put_failure;
  9245. for (i = 0; i < req->n_ssids; i++) {
  9246. if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
  9247. goto nla_put_failure;
  9248. }
  9249. nla_nest_end(msg, nest);
  9250. nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
  9251. if (!nest)
  9252. goto nla_put_failure;
  9253. for (i = 0; i < req->n_channels; i++) {
  9254. if (nla_put_u32(msg, i, req->channels[i]->center_freq))
  9255. goto nla_put_failure;
  9256. }
  9257. nla_nest_end(msg, nest);
  9258. if (req->ie &&
  9259. nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
  9260. goto nla_put_failure;
  9261. if (req->flags &&
  9262. nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags))
  9263. goto nla_put_failure;
  9264. return 0;
  9265. nla_put_failure:
  9266. return -ENOBUFS;
  9267. }
  9268. static int nl80211_send_scan_msg(struct sk_buff *msg,
  9269. struct cfg80211_registered_device *rdev,
  9270. struct wireless_dev *wdev,
  9271. u32 portid, u32 seq, int flags,
  9272. u32 cmd)
  9273. {
  9274. void *hdr;
  9275. hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
  9276. if (!hdr)
  9277. return -1;
  9278. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9279. (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
  9280. wdev->netdev->ifindex)) ||
  9281. nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
  9282. goto nla_put_failure;
  9283. /* ignore errors and send incomplete event anyway */
  9284. nl80211_add_scan_req(msg, rdev);
  9285. return genlmsg_end(msg, hdr);
  9286. nla_put_failure:
  9287. genlmsg_cancel(msg, hdr);
  9288. return -EMSGSIZE;
  9289. }
  9290. static int
  9291. nl80211_send_sched_scan_msg(struct sk_buff *msg,
  9292. struct cfg80211_registered_device *rdev,
  9293. struct net_device *netdev,
  9294. u32 portid, u32 seq, int flags, u32 cmd)
  9295. {
  9296. void *hdr;
  9297. hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
  9298. if (!hdr)
  9299. return -1;
  9300. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9301. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
  9302. goto nla_put_failure;
  9303. return genlmsg_end(msg, hdr);
  9304. nla_put_failure:
  9305. genlmsg_cancel(msg, hdr);
  9306. return -EMSGSIZE;
  9307. }
  9308. void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
  9309. struct wireless_dev *wdev)
  9310. {
  9311. struct sk_buff *msg;
  9312. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  9313. if (!msg)
  9314. return;
  9315. if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
  9316. NL80211_CMD_TRIGGER_SCAN) < 0) {
  9317. nlmsg_free(msg);
  9318. return;
  9319. }
  9320. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9321. NL80211_MCGRP_SCAN, GFP_KERNEL);
  9322. }
  9323. struct sk_buff *nl80211_build_scan_msg(struct cfg80211_registered_device *rdev,
  9324. struct wireless_dev *wdev, bool aborted)
  9325. {
  9326. struct sk_buff *msg;
  9327. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  9328. if (!msg)
  9329. return NULL;
  9330. if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
  9331. aborted ? NL80211_CMD_SCAN_ABORTED :
  9332. NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
  9333. nlmsg_free(msg);
  9334. return NULL;
  9335. }
  9336. return msg;
  9337. }
  9338. void nl80211_send_scan_result(struct cfg80211_registered_device *rdev,
  9339. struct sk_buff *msg)
  9340. {
  9341. if (!msg)
  9342. return;
  9343. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9344. NL80211_MCGRP_SCAN, GFP_KERNEL);
  9345. }
  9346. void nl80211_send_sched_scan_results(struct cfg80211_registered_device *rdev,
  9347. struct net_device *netdev)
  9348. {
  9349. struct sk_buff *msg;
  9350. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  9351. if (!msg)
  9352. return;
  9353. if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0,
  9354. NL80211_CMD_SCHED_SCAN_RESULTS) < 0) {
  9355. nlmsg_free(msg);
  9356. return;
  9357. }
  9358. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9359. NL80211_MCGRP_SCAN, GFP_KERNEL);
  9360. }
  9361. void nl80211_send_sched_scan(struct cfg80211_registered_device *rdev,
  9362. struct net_device *netdev, u32 cmd)
  9363. {
  9364. struct sk_buff *msg;
  9365. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  9366. if (!msg)
  9367. return;
  9368. if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0, cmd) < 0) {
  9369. nlmsg_free(msg);
  9370. return;
  9371. }
  9372. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9373. NL80211_MCGRP_SCAN, GFP_KERNEL);
  9374. }
  9375. static bool nl80211_reg_change_event_fill(struct sk_buff *msg,
  9376. struct regulatory_request *request)
  9377. {
  9378. /* Userspace can always count this one always being set */
  9379. if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
  9380. goto nla_put_failure;
  9381. if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
  9382. if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
  9383. NL80211_REGDOM_TYPE_WORLD))
  9384. goto nla_put_failure;
  9385. } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
  9386. if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
  9387. NL80211_REGDOM_TYPE_CUSTOM_WORLD))
  9388. goto nla_put_failure;
  9389. } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
  9390. request->intersect) {
  9391. if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
  9392. NL80211_REGDOM_TYPE_INTERSECTION))
  9393. goto nla_put_failure;
  9394. } else {
  9395. if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
  9396. NL80211_REGDOM_TYPE_COUNTRY) ||
  9397. nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
  9398. request->alpha2))
  9399. goto nla_put_failure;
  9400. }
  9401. if (request->wiphy_idx != WIPHY_IDX_INVALID) {
  9402. struct wiphy *wiphy = wiphy_idx_to_wiphy(request->wiphy_idx);
  9403. if (wiphy &&
  9404. nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
  9405. goto nla_put_failure;
  9406. if (wiphy &&
  9407. wiphy->regulatory_flags & REGULATORY_WIPHY_SELF_MANAGED &&
  9408. nla_put_flag(msg, NL80211_ATTR_WIPHY_SELF_MANAGED_REG))
  9409. goto nla_put_failure;
  9410. }
  9411. return true;
  9412. nla_put_failure:
  9413. return false;
  9414. }
  9415. /*
  9416. * This can happen on global regulatory changes or device specific settings
  9417. * based on custom regulatory domains.
  9418. */
  9419. void nl80211_common_reg_change_event(enum nl80211_commands cmd_id,
  9420. struct regulatory_request *request)
  9421. {
  9422. struct sk_buff *msg;
  9423. void *hdr;
  9424. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  9425. if (!msg)
  9426. return;
  9427. hdr = nl80211hdr_put(msg, 0, 0, 0, cmd_id);
  9428. if (!hdr) {
  9429. nlmsg_free(msg);
  9430. return;
  9431. }
  9432. if (nl80211_reg_change_event_fill(msg, request) == false)
  9433. goto nla_put_failure;
  9434. genlmsg_end(msg, hdr);
  9435. rcu_read_lock();
  9436. genlmsg_multicast_allns(&nl80211_fam, msg, 0,
  9437. NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
  9438. rcu_read_unlock();
  9439. return;
  9440. nla_put_failure:
  9441. genlmsg_cancel(msg, hdr);
  9442. nlmsg_free(msg);
  9443. }
  9444. static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
  9445. struct net_device *netdev,
  9446. const u8 *buf, size_t len,
  9447. enum nl80211_commands cmd, gfp_t gfp,
  9448. int uapsd_queues)
  9449. {
  9450. struct sk_buff *msg;
  9451. void *hdr;
  9452. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  9453. if (!msg)
  9454. return;
  9455. hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
  9456. if (!hdr) {
  9457. nlmsg_free(msg);
  9458. return;
  9459. }
  9460. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9461. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
  9462. nla_put(msg, NL80211_ATTR_FRAME, len, buf))
  9463. goto nla_put_failure;
  9464. if (uapsd_queues >= 0) {
  9465. struct nlattr *nla_wmm =
  9466. nla_nest_start(msg, NL80211_ATTR_STA_WME);
  9467. if (!nla_wmm)
  9468. goto nla_put_failure;
  9469. if (nla_put_u8(msg, NL80211_STA_WME_UAPSD_QUEUES,
  9470. uapsd_queues))
  9471. goto nla_put_failure;
  9472. nla_nest_end(msg, nla_wmm);
  9473. }
  9474. genlmsg_end(msg, hdr);
  9475. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9476. NL80211_MCGRP_MLME, gfp);
  9477. return;
  9478. nla_put_failure:
  9479. genlmsg_cancel(msg, hdr);
  9480. nlmsg_free(msg);
  9481. }
  9482. void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
  9483. struct net_device *netdev, const u8 *buf,
  9484. size_t len, gfp_t gfp)
  9485. {
  9486. nl80211_send_mlme_event(rdev, netdev, buf, len,
  9487. NL80211_CMD_AUTHENTICATE, gfp, -1);
  9488. }
  9489. void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
  9490. struct net_device *netdev, const u8 *buf,
  9491. size_t len, gfp_t gfp, int uapsd_queues)
  9492. {
  9493. nl80211_send_mlme_event(rdev, netdev, buf, len,
  9494. NL80211_CMD_ASSOCIATE, gfp, uapsd_queues);
  9495. }
  9496. void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
  9497. struct net_device *netdev, const u8 *buf,
  9498. size_t len, gfp_t gfp)
  9499. {
  9500. nl80211_send_mlme_event(rdev, netdev, buf, len,
  9501. NL80211_CMD_DEAUTHENTICATE, gfp, -1);
  9502. }
  9503. void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
  9504. struct net_device *netdev, const u8 *buf,
  9505. size_t len, gfp_t gfp)
  9506. {
  9507. nl80211_send_mlme_event(rdev, netdev, buf, len,
  9508. NL80211_CMD_DISASSOCIATE, gfp, -1);
  9509. }
  9510. void cfg80211_rx_unprot_mlme_mgmt(struct net_device *dev, const u8 *buf,
  9511. size_t len)
  9512. {
  9513. struct wireless_dev *wdev = dev->ieee80211_ptr;
  9514. struct wiphy *wiphy = wdev->wiphy;
  9515. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  9516. const struct ieee80211_mgmt *mgmt = (void *)buf;
  9517. u32 cmd;
  9518. if (WARN_ON(len < 2))
  9519. return;
  9520. if (ieee80211_is_deauth(mgmt->frame_control))
  9521. cmd = NL80211_CMD_UNPROT_DEAUTHENTICATE;
  9522. else
  9523. cmd = NL80211_CMD_UNPROT_DISASSOCIATE;
  9524. trace_cfg80211_rx_unprot_mlme_mgmt(dev, buf, len);
  9525. nl80211_send_mlme_event(rdev, dev, buf, len, cmd, GFP_ATOMIC, -1);
  9526. }
  9527. EXPORT_SYMBOL(cfg80211_rx_unprot_mlme_mgmt);
  9528. static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
  9529. struct net_device *netdev, int cmd,
  9530. const u8 *addr, gfp_t gfp)
  9531. {
  9532. struct sk_buff *msg;
  9533. void *hdr;
  9534. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  9535. if (!msg)
  9536. return;
  9537. hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
  9538. if (!hdr) {
  9539. nlmsg_free(msg);
  9540. return;
  9541. }
  9542. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9543. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
  9544. nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
  9545. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
  9546. goto nla_put_failure;
  9547. genlmsg_end(msg, hdr);
  9548. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9549. NL80211_MCGRP_MLME, gfp);
  9550. return;
  9551. nla_put_failure:
  9552. genlmsg_cancel(msg, hdr);
  9553. nlmsg_free(msg);
  9554. }
  9555. void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
  9556. struct net_device *netdev, const u8 *addr,
  9557. gfp_t gfp)
  9558. {
  9559. nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
  9560. addr, gfp);
  9561. }
  9562. void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
  9563. struct net_device *netdev, const u8 *addr,
  9564. gfp_t gfp)
  9565. {
  9566. nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
  9567. addr, gfp);
  9568. }
  9569. void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
  9570. struct net_device *netdev, const u8 *bssid,
  9571. const u8 *req_ie, size_t req_ie_len,
  9572. const u8 *resp_ie, size_t resp_ie_len,
  9573. u16 status, gfp_t gfp)
  9574. {
  9575. struct sk_buff *msg;
  9576. void *hdr;
  9577. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  9578. if (!msg)
  9579. return;
  9580. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
  9581. if (!hdr) {
  9582. nlmsg_free(msg);
  9583. return;
  9584. }
  9585. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9586. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
  9587. (bssid && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid)) ||
  9588. nla_put_u16(msg, NL80211_ATTR_STATUS_CODE, status) ||
  9589. (req_ie &&
  9590. nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
  9591. (resp_ie &&
  9592. nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
  9593. goto nla_put_failure;
  9594. genlmsg_end(msg, hdr);
  9595. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9596. NL80211_MCGRP_MLME, gfp);
  9597. return;
  9598. nla_put_failure:
  9599. genlmsg_cancel(msg, hdr);
  9600. nlmsg_free(msg);
  9601. }
  9602. void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
  9603. struct net_device *netdev, const u8 *bssid,
  9604. const u8 *req_ie, size_t req_ie_len,
  9605. const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
  9606. {
  9607. struct sk_buff *msg;
  9608. void *hdr;
  9609. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  9610. if (!msg)
  9611. return;
  9612. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
  9613. if (!hdr) {
  9614. nlmsg_free(msg);
  9615. return;
  9616. }
  9617. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9618. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
  9619. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
  9620. (req_ie &&
  9621. nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
  9622. (resp_ie &&
  9623. nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
  9624. goto nla_put_failure;
  9625. genlmsg_end(msg, hdr);
  9626. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9627. NL80211_MCGRP_MLME, gfp);
  9628. return;
  9629. nla_put_failure:
  9630. genlmsg_cancel(msg, hdr);
  9631. nlmsg_free(msg);
  9632. }
  9633. void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
  9634. struct net_device *netdev, u16 reason,
  9635. const u8 *ie, size_t ie_len, bool from_ap)
  9636. {
  9637. struct sk_buff *msg;
  9638. void *hdr;
  9639. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  9640. if (!msg)
  9641. return;
  9642. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
  9643. if (!hdr) {
  9644. nlmsg_free(msg);
  9645. return;
  9646. }
  9647. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9648. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
  9649. (from_ap && reason &&
  9650. nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
  9651. (from_ap &&
  9652. nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
  9653. (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
  9654. goto nla_put_failure;
  9655. genlmsg_end(msg, hdr);
  9656. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9657. NL80211_MCGRP_MLME, GFP_KERNEL);
  9658. return;
  9659. nla_put_failure:
  9660. genlmsg_cancel(msg, hdr);
  9661. nlmsg_free(msg);
  9662. }
  9663. void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
  9664. struct net_device *netdev, const u8 *bssid,
  9665. gfp_t gfp)
  9666. {
  9667. struct sk_buff *msg;
  9668. void *hdr;
  9669. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  9670. if (!msg)
  9671. return;
  9672. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
  9673. if (!hdr) {
  9674. nlmsg_free(msg);
  9675. return;
  9676. }
  9677. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9678. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
  9679. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
  9680. goto nla_put_failure;
  9681. genlmsg_end(msg, hdr);
  9682. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9683. NL80211_MCGRP_MLME, gfp);
  9684. return;
  9685. nla_put_failure:
  9686. genlmsg_cancel(msg, hdr);
  9687. nlmsg_free(msg);
  9688. }
  9689. void cfg80211_notify_new_peer_candidate(struct net_device *dev, const u8 *addr,
  9690. const u8* ie, u8 ie_len, gfp_t gfp)
  9691. {
  9692. struct wireless_dev *wdev = dev->ieee80211_ptr;
  9693. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
  9694. struct sk_buff *msg;
  9695. void *hdr;
  9696. if (WARN_ON(wdev->iftype != NL80211_IFTYPE_MESH_POINT))
  9697. return;
  9698. trace_cfg80211_notify_new_peer_candidate(dev, addr);
  9699. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  9700. if (!msg)
  9701. return;
  9702. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
  9703. if (!hdr) {
  9704. nlmsg_free(msg);
  9705. return;
  9706. }
  9707. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9708. nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
  9709. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
  9710. (ie_len && ie &&
  9711. nla_put(msg, NL80211_ATTR_IE, ie_len , ie)))
  9712. goto nla_put_failure;
  9713. genlmsg_end(msg, hdr);
  9714. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9715. NL80211_MCGRP_MLME, gfp);
  9716. return;
  9717. nla_put_failure:
  9718. genlmsg_cancel(msg, hdr);
  9719. nlmsg_free(msg);
  9720. }
  9721. EXPORT_SYMBOL(cfg80211_notify_new_peer_candidate);
  9722. void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
  9723. struct net_device *netdev, const u8 *addr,
  9724. enum nl80211_key_type key_type, int key_id,
  9725. const u8 *tsc, gfp_t gfp)
  9726. {
  9727. struct sk_buff *msg;
  9728. void *hdr;
  9729. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  9730. if (!msg)
  9731. return;
  9732. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
  9733. if (!hdr) {
  9734. nlmsg_free(msg);
  9735. return;
  9736. }
  9737. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9738. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
  9739. (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
  9740. nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
  9741. (key_id != -1 &&
  9742. nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
  9743. (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
  9744. goto nla_put_failure;
  9745. genlmsg_end(msg, hdr);
  9746. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9747. NL80211_MCGRP_MLME, gfp);
  9748. return;
  9749. nla_put_failure:
  9750. genlmsg_cancel(msg, hdr);
  9751. nlmsg_free(msg);
  9752. }
  9753. void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
  9754. struct ieee80211_channel *channel_before,
  9755. struct ieee80211_channel *channel_after)
  9756. {
  9757. struct sk_buff *msg;
  9758. void *hdr;
  9759. struct nlattr *nl_freq;
  9760. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
  9761. if (!msg)
  9762. return;
  9763. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
  9764. if (!hdr) {
  9765. nlmsg_free(msg);
  9766. return;
  9767. }
  9768. /*
  9769. * Since we are applying the beacon hint to a wiphy we know its
  9770. * wiphy_idx is valid
  9771. */
  9772. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
  9773. goto nla_put_failure;
  9774. /* Before */
  9775. nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
  9776. if (!nl_freq)
  9777. goto nla_put_failure;
  9778. if (nl80211_msg_put_channel(msg, channel_before, false))
  9779. goto nla_put_failure;
  9780. nla_nest_end(msg, nl_freq);
  9781. /* After */
  9782. nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
  9783. if (!nl_freq)
  9784. goto nla_put_failure;
  9785. if (nl80211_msg_put_channel(msg, channel_after, false))
  9786. goto nla_put_failure;
  9787. nla_nest_end(msg, nl_freq);
  9788. genlmsg_end(msg, hdr);
  9789. rcu_read_lock();
  9790. genlmsg_multicast_allns(&nl80211_fam, msg, 0,
  9791. NL80211_MCGRP_REGULATORY, GFP_ATOMIC);
  9792. rcu_read_unlock();
  9793. return;
  9794. nla_put_failure:
  9795. genlmsg_cancel(msg, hdr);
  9796. nlmsg_free(msg);
  9797. }
  9798. static void nl80211_send_remain_on_chan_event(
  9799. int cmd, struct cfg80211_registered_device *rdev,
  9800. struct wireless_dev *wdev, u64 cookie,
  9801. struct ieee80211_channel *chan,
  9802. unsigned int duration, gfp_t gfp)
  9803. {
  9804. struct sk_buff *msg;
  9805. void *hdr;
  9806. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  9807. if (!msg)
  9808. return;
  9809. hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
  9810. if (!hdr) {
  9811. nlmsg_free(msg);
  9812. return;
  9813. }
  9814. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9815. (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
  9816. wdev->netdev->ifindex)) ||
  9817. nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
  9818. nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
  9819. nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
  9820. NL80211_CHAN_NO_HT) ||
  9821. nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
  9822. goto nla_put_failure;
  9823. if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
  9824. nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
  9825. goto nla_put_failure;
  9826. genlmsg_end(msg, hdr);
  9827. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9828. NL80211_MCGRP_MLME, gfp);
  9829. return;
  9830. nla_put_failure:
  9831. genlmsg_cancel(msg, hdr);
  9832. nlmsg_free(msg);
  9833. }
  9834. void cfg80211_ready_on_channel(struct wireless_dev *wdev, u64 cookie,
  9835. struct ieee80211_channel *chan,
  9836. unsigned int duration, gfp_t gfp)
  9837. {
  9838. struct wiphy *wiphy = wdev->wiphy;
  9839. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  9840. trace_cfg80211_ready_on_channel(wdev, cookie, chan, duration);
  9841. nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
  9842. rdev, wdev, cookie, chan,
  9843. duration, gfp);
  9844. }
  9845. EXPORT_SYMBOL(cfg80211_ready_on_channel);
  9846. void cfg80211_remain_on_channel_expired(struct wireless_dev *wdev, u64 cookie,
  9847. struct ieee80211_channel *chan,
  9848. gfp_t gfp)
  9849. {
  9850. struct wiphy *wiphy = wdev->wiphy;
  9851. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  9852. trace_cfg80211_ready_on_channel_expired(wdev, cookie, chan);
  9853. nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
  9854. rdev, wdev, cookie, chan, 0, gfp);
  9855. }
  9856. EXPORT_SYMBOL(cfg80211_remain_on_channel_expired);
  9857. void cfg80211_new_sta(struct net_device *dev, const u8 *mac_addr,
  9858. struct station_info *sinfo, gfp_t gfp)
  9859. {
  9860. struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
  9861. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  9862. struct sk_buff *msg;
  9863. trace_cfg80211_new_sta(dev, mac_addr, sinfo);
  9864. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  9865. if (!msg)
  9866. return;
  9867. if (nl80211_send_station(msg, NL80211_CMD_NEW_STATION, 0, 0, 0,
  9868. rdev, dev, mac_addr, sinfo) < 0) {
  9869. nlmsg_free(msg);
  9870. return;
  9871. }
  9872. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9873. NL80211_MCGRP_MLME, gfp);
  9874. }
  9875. EXPORT_SYMBOL(cfg80211_new_sta);
  9876. void cfg80211_del_sta_sinfo(struct net_device *dev, const u8 *mac_addr,
  9877. struct station_info *sinfo, gfp_t gfp)
  9878. {
  9879. struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
  9880. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  9881. struct sk_buff *msg;
  9882. struct station_info empty_sinfo = {};
  9883. if (!sinfo)
  9884. sinfo = &empty_sinfo;
  9885. trace_cfg80211_del_sta(dev, mac_addr);
  9886. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  9887. if (!msg)
  9888. return;
  9889. if (nl80211_send_station(msg, NL80211_CMD_DEL_STATION, 0, 0, 0,
  9890. rdev, dev, mac_addr, sinfo)) {
  9891. nlmsg_free(msg);
  9892. return;
  9893. }
  9894. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9895. NL80211_MCGRP_MLME, gfp);
  9896. }
  9897. EXPORT_SYMBOL(cfg80211_del_sta_sinfo);
  9898. void cfg80211_conn_failed(struct net_device *dev, const u8 *mac_addr,
  9899. enum nl80211_connect_failed_reason reason,
  9900. gfp_t gfp)
  9901. {
  9902. struct wiphy *wiphy = dev->ieee80211_ptr->wiphy;
  9903. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  9904. struct sk_buff *msg;
  9905. void *hdr;
  9906. msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
  9907. if (!msg)
  9908. return;
  9909. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
  9910. if (!hdr) {
  9911. nlmsg_free(msg);
  9912. return;
  9913. }
  9914. if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
  9915. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
  9916. nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
  9917. goto nla_put_failure;
  9918. genlmsg_end(msg, hdr);
  9919. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  9920. NL80211_MCGRP_MLME, gfp);
  9921. return;
  9922. nla_put_failure:
  9923. genlmsg_cancel(msg, hdr);
  9924. nlmsg_free(msg);
  9925. }
  9926. EXPORT_SYMBOL(cfg80211_conn_failed);
  9927. static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
  9928. const u8 *addr, gfp_t gfp)
  9929. {
  9930. struct wireless_dev *wdev = dev->ieee80211_ptr;
  9931. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
  9932. struct sk_buff *msg;
  9933. void *hdr;
  9934. u32 nlportid = ACCESS_ONCE(wdev->ap_unexpected_nlportid);
  9935. if (!nlportid)
  9936. return false;
  9937. msg = nlmsg_new(100, gfp);
  9938. if (!msg)
  9939. return true;
  9940. hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
  9941. if (!hdr) {
  9942. nlmsg_free(msg);
  9943. return true;
  9944. }
  9945. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  9946. nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
  9947. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
  9948. goto nla_put_failure;
  9949. genlmsg_end(msg, hdr);
  9950. genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
  9951. return true;
  9952. nla_put_failure:
  9953. genlmsg_cancel(msg, hdr);
  9954. nlmsg_free(msg);
  9955. return true;
  9956. }
  9957. bool cfg80211_rx_spurious_frame(struct net_device *dev,
  9958. const u8 *addr, gfp_t gfp)
  9959. {
  9960. struct wireless_dev *wdev = dev->ieee80211_ptr;
  9961. bool ret;
  9962. trace_cfg80211_rx_spurious_frame(dev, addr);
  9963. if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
  9964. wdev->iftype != NL80211_IFTYPE_P2P_GO)) {
  9965. trace_cfg80211_return_bool(false);
  9966. return false;
  9967. }
  9968. ret = __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
  9969. addr, gfp);
  9970. trace_cfg80211_return_bool(ret);
  9971. return ret;
  9972. }
  9973. EXPORT_SYMBOL(cfg80211_rx_spurious_frame);
  9974. bool cfg80211_rx_unexpected_4addr_frame(struct net_device *dev,
  9975. const u8 *addr, gfp_t gfp)
  9976. {
  9977. struct wireless_dev *wdev = dev->ieee80211_ptr;
  9978. bool ret;
  9979. trace_cfg80211_rx_unexpected_4addr_frame(dev, addr);
  9980. if (WARN_ON(wdev->iftype != NL80211_IFTYPE_AP &&
  9981. wdev->iftype != NL80211_IFTYPE_P2P_GO &&
  9982. wdev->iftype != NL80211_IFTYPE_AP_VLAN)) {
  9983. trace_cfg80211_return_bool(false);
  9984. return false;
  9985. }
  9986. ret = __nl80211_unexpected_frame(dev,
  9987. NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
  9988. addr, gfp);
  9989. trace_cfg80211_return_bool(ret);
  9990. return ret;
  9991. }
  9992. EXPORT_SYMBOL(cfg80211_rx_unexpected_4addr_frame);
  9993. int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
  9994. struct wireless_dev *wdev, u32 nlportid,
  9995. int freq, int sig_dbm,
  9996. const u8 *buf, size_t len, u32 flags, gfp_t gfp)
  9997. {
  9998. struct net_device *netdev = wdev->netdev;
  9999. struct sk_buff *msg;
  10000. void *hdr;
  10001. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  10002. if (!msg)
  10003. return -ENOMEM;
  10004. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
  10005. if (!hdr) {
  10006. nlmsg_free(msg);
  10007. return -ENOMEM;
  10008. }
  10009. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10010. (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
  10011. netdev->ifindex)) ||
  10012. nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
  10013. nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
  10014. (sig_dbm &&
  10015. nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
  10016. nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
  10017. (flags &&
  10018. nla_put_u32(msg, NL80211_ATTR_RXMGMT_FLAGS, flags)))
  10019. goto nla_put_failure;
  10020. genlmsg_end(msg, hdr);
  10021. return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
  10022. nla_put_failure:
  10023. genlmsg_cancel(msg, hdr);
  10024. nlmsg_free(msg);
  10025. return -ENOBUFS;
  10026. }
  10027. void cfg80211_mgmt_tx_status(struct wireless_dev *wdev, u64 cookie,
  10028. const u8 *buf, size_t len, bool ack, gfp_t gfp)
  10029. {
  10030. struct wiphy *wiphy = wdev->wiphy;
  10031. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  10032. struct net_device *netdev = wdev->netdev;
  10033. struct sk_buff *msg;
  10034. void *hdr;
  10035. trace_cfg80211_mgmt_tx_status(wdev, cookie, ack);
  10036. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  10037. if (!msg)
  10038. return;
  10039. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
  10040. if (!hdr) {
  10041. nlmsg_free(msg);
  10042. return;
  10043. }
  10044. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10045. (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
  10046. netdev->ifindex)) ||
  10047. nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
  10048. nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
  10049. nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
  10050. (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
  10051. goto nla_put_failure;
  10052. genlmsg_end(msg, hdr);
  10053. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  10054. NL80211_MCGRP_MLME, gfp);
  10055. return;
  10056. nla_put_failure:
  10057. genlmsg_cancel(msg, hdr);
  10058. nlmsg_free(msg);
  10059. }
  10060. EXPORT_SYMBOL(cfg80211_mgmt_tx_status);
  10061. static struct sk_buff *cfg80211_prepare_cqm(struct net_device *dev,
  10062. const char *mac, gfp_t gfp)
  10063. {
  10064. struct wireless_dev *wdev = dev->ieee80211_ptr;
  10065. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
  10066. struct sk_buff *msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  10067. void **cb;
  10068. if (!msg)
  10069. return NULL;
  10070. cb = (void **)msg->cb;
  10071. cb[0] = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
  10072. if (!cb[0]) {
  10073. nlmsg_free(msg);
  10074. return NULL;
  10075. }
  10076. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10077. nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
  10078. goto nla_put_failure;
  10079. if (mac && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac))
  10080. goto nla_put_failure;
  10081. cb[1] = nla_nest_start(msg, NL80211_ATTR_CQM);
  10082. if (!cb[1])
  10083. goto nla_put_failure;
  10084. cb[2] = rdev;
  10085. return msg;
  10086. nla_put_failure:
  10087. nlmsg_free(msg);
  10088. return NULL;
  10089. }
  10090. static void cfg80211_send_cqm(struct sk_buff *msg, gfp_t gfp)
  10091. {
  10092. void **cb = (void **)msg->cb;
  10093. struct cfg80211_registered_device *rdev = cb[2];
  10094. nla_nest_end(msg, cb[1]);
  10095. genlmsg_end(msg, cb[0]);
  10096. memset(msg->cb, 0, sizeof(msg->cb));
  10097. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  10098. NL80211_MCGRP_MLME, gfp);
  10099. }
  10100. void cfg80211_cqm_rssi_notify(struct net_device *dev,
  10101. enum nl80211_cqm_rssi_threshold_event rssi_event,
  10102. gfp_t gfp)
  10103. {
  10104. struct sk_buff *msg;
  10105. trace_cfg80211_cqm_rssi_notify(dev, rssi_event);
  10106. if (WARN_ON(rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW &&
  10107. rssi_event != NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH))
  10108. return;
  10109. msg = cfg80211_prepare_cqm(dev, NULL, gfp);
  10110. if (!msg)
  10111. return;
  10112. if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
  10113. rssi_event))
  10114. goto nla_put_failure;
  10115. cfg80211_send_cqm(msg, gfp);
  10116. return;
  10117. nla_put_failure:
  10118. nlmsg_free(msg);
  10119. }
  10120. EXPORT_SYMBOL(cfg80211_cqm_rssi_notify);
  10121. void cfg80211_cqm_txe_notify(struct net_device *dev,
  10122. const u8 *peer, u32 num_packets,
  10123. u32 rate, u32 intvl, gfp_t gfp)
  10124. {
  10125. struct sk_buff *msg;
  10126. msg = cfg80211_prepare_cqm(dev, peer, gfp);
  10127. if (!msg)
  10128. return;
  10129. if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
  10130. goto nla_put_failure;
  10131. if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
  10132. goto nla_put_failure;
  10133. if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
  10134. goto nla_put_failure;
  10135. cfg80211_send_cqm(msg, gfp);
  10136. return;
  10137. nla_put_failure:
  10138. nlmsg_free(msg);
  10139. }
  10140. EXPORT_SYMBOL(cfg80211_cqm_txe_notify);
  10141. void cfg80211_cqm_pktloss_notify(struct net_device *dev,
  10142. const u8 *peer, u32 num_packets, gfp_t gfp)
  10143. {
  10144. struct sk_buff *msg;
  10145. trace_cfg80211_cqm_pktloss_notify(dev, peer, num_packets);
  10146. msg = cfg80211_prepare_cqm(dev, peer, gfp);
  10147. if (!msg)
  10148. return;
  10149. if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
  10150. goto nla_put_failure;
  10151. cfg80211_send_cqm(msg, gfp);
  10152. return;
  10153. nla_put_failure:
  10154. nlmsg_free(msg);
  10155. }
  10156. EXPORT_SYMBOL(cfg80211_cqm_pktloss_notify);
  10157. void cfg80211_cqm_beacon_loss_notify(struct net_device *dev, gfp_t gfp)
  10158. {
  10159. struct sk_buff *msg;
  10160. msg = cfg80211_prepare_cqm(dev, NULL, gfp);
  10161. if (!msg)
  10162. return;
  10163. if (nla_put_flag(msg, NL80211_ATTR_CQM_BEACON_LOSS_EVENT))
  10164. goto nla_put_failure;
  10165. cfg80211_send_cqm(msg, gfp);
  10166. return;
  10167. nla_put_failure:
  10168. nlmsg_free(msg);
  10169. }
  10170. EXPORT_SYMBOL(cfg80211_cqm_beacon_loss_notify);
  10171. static void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
  10172. struct net_device *netdev, const u8 *bssid,
  10173. const u8 *replay_ctr, gfp_t gfp)
  10174. {
  10175. struct sk_buff *msg;
  10176. struct nlattr *rekey_attr;
  10177. void *hdr;
  10178. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  10179. if (!msg)
  10180. return;
  10181. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
  10182. if (!hdr) {
  10183. nlmsg_free(msg);
  10184. return;
  10185. }
  10186. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10187. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
  10188. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
  10189. goto nla_put_failure;
  10190. rekey_attr = nla_nest_start(msg, NL80211_ATTR_REKEY_DATA);
  10191. if (!rekey_attr)
  10192. goto nla_put_failure;
  10193. if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
  10194. NL80211_REPLAY_CTR_LEN, replay_ctr))
  10195. goto nla_put_failure;
  10196. nla_nest_end(msg, rekey_attr);
  10197. genlmsg_end(msg, hdr);
  10198. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  10199. NL80211_MCGRP_MLME, gfp);
  10200. return;
  10201. nla_put_failure:
  10202. genlmsg_cancel(msg, hdr);
  10203. nlmsg_free(msg);
  10204. }
  10205. void cfg80211_gtk_rekey_notify(struct net_device *dev, const u8 *bssid,
  10206. const u8 *replay_ctr, gfp_t gfp)
  10207. {
  10208. struct wireless_dev *wdev = dev->ieee80211_ptr;
  10209. struct wiphy *wiphy = wdev->wiphy;
  10210. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  10211. trace_cfg80211_gtk_rekey_notify(dev, bssid);
  10212. nl80211_gtk_rekey_notify(rdev, dev, bssid, replay_ctr, gfp);
  10213. }
  10214. EXPORT_SYMBOL(cfg80211_gtk_rekey_notify);
  10215. static void
  10216. nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
  10217. struct net_device *netdev, int index,
  10218. const u8 *bssid, bool preauth, gfp_t gfp)
  10219. {
  10220. struct sk_buff *msg;
  10221. struct nlattr *attr;
  10222. void *hdr;
  10223. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  10224. if (!msg)
  10225. return;
  10226. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
  10227. if (!hdr) {
  10228. nlmsg_free(msg);
  10229. return;
  10230. }
  10231. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10232. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
  10233. goto nla_put_failure;
  10234. attr = nla_nest_start(msg, NL80211_ATTR_PMKSA_CANDIDATE);
  10235. if (!attr)
  10236. goto nla_put_failure;
  10237. if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
  10238. nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
  10239. (preauth &&
  10240. nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
  10241. goto nla_put_failure;
  10242. nla_nest_end(msg, attr);
  10243. genlmsg_end(msg, hdr);
  10244. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  10245. NL80211_MCGRP_MLME, gfp);
  10246. return;
  10247. nla_put_failure:
  10248. genlmsg_cancel(msg, hdr);
  10249. nlmsg_free(msg);
  10250. }
  10251. void cfg80211_pmksa_candidate_notify(struct net_device *dev, int index,
  10252. const u8 *bssid, bool preauth, gfp_t gfp)
  10253. {
  10254. struct wireless_dev *wdev = dev->ieee80211_ptr;
  10255. struct wiphy *wiphy = wdev->wiphy;
  10256. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  10257. trace_cfg80211_pmksa_candidate_notify(dev, index, bssid, preauth);
  10258. nl80211_pmksa_candidate_notify(rdev, dev, index, bssid, preauth, gfp);
  10259. }
  10260. EXPORT_SYMBOL(cfg80211_pmksa_candidate_notify);
  10261. static void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
  10262. struct net_device *netdev,
  10263. struct cfg80211_chan_def *chandef,
  10264. gfp_t gfp,
  10265. enum nl80211_commands notif,
  10266. u8 count)
  10267. {
  10268. struct sk_buff *msg;
  10269. void *hdr;
  10270. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  10271. if (!msg)
  10272. return;
  10273. hdr = nl80211hdr_put(msg, 0, 0, 0, notif);
  10274. if (!hdr) {
  10275. nlmsg_free(msg);
  10276. return;
  10277. }
  10278. if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
  10279. goto nla_put_failure;
  10280. if (nl80211_send_chandef(msg, chandef))
  10281. goto nla_put_failure;
  10282. if ((notif == NL80211_CMD_CH_SWITCH_STARTED_NOTIFY) &&
  10283. (nla_put_u32(msg, NL80211_ATTR_CH_SWITCH_COUNT, count)))
  10284. goto nla_put_failure;
  10285. genlmsg_end(msg, hdr);
  10286. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  10287. NL80211_MCGRP_MLME, gfp);
  10288. return;
  10289. nla_put_failure:
  10290. genlmsg_cancel(msg, hdr);
  10291. nlmsg_free(msg);
  10292. }
  10293. void cfg80211_ch_switch_notify(struct net_device *dev,
  10294. struct cfg80211_chan_def *chandef)
  10295. {
  10296. struct wireless_dev *wdev = dev->ieee80211_ptr;
  10297. struct wiphy *wiphy = wdev->wiphy;
  10298. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  10299. ASSERT_WDEV_LOCK(wdev);
  10300. trace_cfg80211_ch_switch_notify(dev, chandef);
  10301. wdev->chandef = *chandef;
  10302. wdev->preset_chandef = *chandef;
  10303. nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
  10304. NL80211_CMD_CH_SWITCH_NOTIFY, 0);
  10305. }
  10306. EXPORT_SYMBOL(cfg80211_ch_switch_notify);
  10307. void cfg80211_ch_switch_started_notify(struct net_device *dev,
  10308. struct cfg80211_chan_def *chandef,
  10309. u8 count)
  10310. {
  10311. struct wireless_dev *wdev = dev->ieee80211_ptr;
  10312. struct wiphy *wiphy = wdev->wiphy;
  10313. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  10314. trace_cfg80211_ch_switch_started_notify(dev, chandef);
  10315. nl80211_ch_switch_notify(rdev, dev, chandef, GFP_KERNEL,
  10316. NL80211_CMD_CH_SWITCH_STARTED_NOTIFY, count);
  10317. }
  10318. EXPORT_SYMBOL(cfg80211_ch_switch_started_notify);
  10319. void
  10320. nl80211_radar_notify(struct cfg80211_registered_device *rdev,
  10321. const struct cfg80211_chan_def *chandef,
  10322. enum nl80211_radar_event event,
  10323. struct net_device *netdev, gfp_t gfp)
  10324. {
  10325. struct sk_buff *msg;
  10326. void *hdr;
  10327. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  10328. if (!msg)
  10329. return;
  10330. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_RADAR_DETECT);
  10331. if (!hdr) {
  10332. nlmsg_free(msg);
  10333. return;
  10334. }
  10335. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
  10336. goto nla_put_failure;
  10337. /* NOP and radar events don't need a netdev parameter */
  10338. if (netdev) {
  10339. struct wireless_dev *wdev = netdev->ieee80211_ptr;
  10340. if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
  10341. nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
  10342. goto nla_put_failure;
  10343. }
  10344. if (nla_put_u32(msg, NL80211_ATTR_RADAR_EVENT, event))
  10345. goto nla_put_failure;
  10346. if (nl80211_send_chandef(msg, chandef))
  10347. goto nla_put_failure;
  10348. genlmsg_end(msg, hdr);
  10349. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  10350. NL80211_MCGRP_MLME, gfp);
  10351. return;
  10352. nla_put_failure:
  10353. genlmsg_cancel(msg, hdr);
  10354. nlmsg_free(msg);
  10355. }
  10356. void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
  10357. u64 cookie, bool acked, gfp_t gfp)
  10358. {
  10359. struct wireless_dev *wdev = dev->ieee80211_ptr;
  10360. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
  10361. struct sk_buff *msg;
  10362. void *hdr;
  10363. trace_cfg80211_probe_status(dev, addr, cookie, acked);
  10364. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  10365. if (!msg)
  10366. return;
  10367. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
  10368. if (!hdr) {
  10369. nlmsg_free(msg);
  10370. return;
  10371. }
  10372. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10373. nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
  10374. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
  10375. nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
  10376. (acked && nla_put_flag(msg, NL80211_ATTR_ACK)))
  10377. goto nla_put_failure;
  10378. genlmsg_end(msg, hdr);
  10379. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  10380. NL80211_MCGRP_MLME, gfp);
  10381. return;
  10382. nla_put_failure:
  10383. genlmsg_cancel(msg, hdr);
  10384. nlmsg_free(msg);
  10385. }
  10386. EXPORT_SYMBOL(cfg80211_probe_status);
  10387. void cfg80211_report_obss_beacon(struct wiphy *wiphy,
  10388. const u8 *frame, size_t len,
  10389. int freq, int sig_dbm)
  10390. {
  10391. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  10392. struct sk_buff *msg;
  10393. void *hdr;
  10394. struct cfg80211_beacon_registration *reg;
  10395. trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
  10396. spin_lock_bh(&rdev->beacon_registrations_lock);
  10397. list_for_each_entry(reg, &rdev->beacon_registrations, list) {
  10398. msg = nlmsg_new(len + 100, GFP_ATOMIC);
  10399. if (!msg) {
  10400. spin_unlock_bh(&rdev->beacon_registrations_lock);
  10401. return;
  10402. }
  10403. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
  10404. if (!hdr)
  10405. goto nla_put_failure;
  10406. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10407. (freq &&
  10408. nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq)) ||
  10409. (sig_dbm &&
  10410. nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
  10411. nla_put(msg, NL80211_ATTR_FRAME, len, frame))
  10412. goto nla_put_failure;
  10413. genlmsg_end(msg, hdr);
  10414. genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
  10415. }
  10416. spin_unlock_bh(&rdev->beacon_registrations_lock);
  10417. return;
  10418. nla_put_failure:
  10419. spin_unlock_bh(&rdev->beacon_registrations_lock);
  10420. if (hdr)
  10421. genlmsg_cancel(msg, hdr);
  10422. nlmsg_free(msg);
  10423. }
  10424. EXPORT_SYMBOL(cfg80211_report_obss_beacon);
  10425. #ifdef CONFIG_PM
  10426. static int cfg80211_net_detect_results(struct sk_buff *msg,
  10427. struct cfg80211_wowlan_wakeup *wakeup)
  10428. {
  10429. struct cfg80211_wowlan_nd_info *nd = wakeup->net_detect;
  10430. struct nlattr *nl_results, *nl_match, *nl_freqs;
  10431. int i, j;
  10432. nl_results = nla_nest_start(
  10433. msg, NL80211_WOWLAN_TRIG_NET_DETECT_RESULTS);
  10434. if (!nl_results)
  10435. return -EMSGSIZE;
  10436. for (i = 0; i < nd->n_matches; i++) {
  10437. struct cfg80211_wowlan_nd_match *match = nd->matches[i];
  10438. nl_match = nla_nest_start(msg, i);
  10439. if (!nl_match)
  10440. break;
  10441. /* The SSID attribute is optional in nl80211, but for
  10442. * simplicity reasons it's always present in the
  10443. * cfg80211 structure. If a driver can't pass the
  10444. * SSID, that needs to be changed. A zero length SSID
  10445. * is still a valid SSID (wildcard), so it cannot be
  10446. * used for this purpose.
  10447. */
  10448. if (nla_put(msg, NL80211_ATTR_SSID, match->ssid.ssid_len,
  10449. match->ssid.ssid)) {
  10450. nla_nest_cancel(msg, nl_match);
  10451. goto out;
  10452. }
  10453. if (match->n_channels) {
  10454. nl_freqs = nla_nest_start(
  10455. msg, NL80211_ATTR_SCAN_FREQUENCIES);
  10456. if (!nl_freqs) {
  10457. nla_nest_cancel(msg, nl_match);
  10458. goto out;
  10459. }
  10460. for (j = 0; j < match->n_channels; j++) {
  10461. if (nla_put_u32(msg,
  10462. NL80211_ATTR_WIPHY_FREQ,
  10463. match->channels[j])) {
  10464. nla_nest_cancel(msg, nl_freqs);
  10465. nla_nest_cancel(msg, nl_match);
  10466. goto out;
  10467. }
  10468. }
  10469. nla_nest_end(msg, nl_freqs);
  10470. }
  10471. nla_nest_end(msg, nl_match);
  10472. }
  10473. out:
  10474. nla_nest_end(msg, nl_results);
  10475. return 0;
  10476. }
  10477. void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
  10478. struct cfg80211_wowlan_wakeup *wakeup,
  10479. gfp_t gfp)
  10480. {
  10481. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
  10482. struct sk_buff *msg;
  10483. void *hdr;
  10484. int size = 200;
  10485. trace_cfg80211_report_wowlan_wakeup(wdev->wiphy, wdev, wakeup);
  10486. if (wakeup)
  10487. size += wakeup->packet_present_len;
  10488. msg = nlmsg_new(size, gfp);
  10489. if (!msg)
  10490. return;
  10491. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_WOWLAN);
  10492. if (!hdr)
  10493. goto free_msg;
  10494. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10495. nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
  10496. goto free_msg;
  10497. if (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
  10498. wdev->netdev->ifindex))
  10499. goto free_msg;
  10500. if (wakeup) {
  10501. struct nlattr *reasons;
  10502. reasons = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
  10503. if (!reasons)
  10504. goto free_msg;
  10505. if (wakeup->disconnect &&
  10506. nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT))
  10507. goto free_msg;
  10508. if (wakeup->magic_pkt &&
  10509. nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT))
  10510. goto free_msg;
  10511. if (wakeup->gtk_rekey_failure &&
  10512. nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE))
  10513. goto free_msg;
  10514. if (wakeup->eap_identity_req &&
  10515. nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST))
  10516. goto free_msg;
  10517. if (wakeup->four_way_handshake &&
  10518. nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE))
  10519. goto free_msg;
  10520. if (wakeup->rfkill_release &&
  10521. nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE))
  10522. goto free_msg;
  10523. if (wakeup->pattern_idx >= 0 &&
  10524. nla_put_u32(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
  10525. wakeup->pattern_idx))
  10526. goto free_msg;
  10527. if (wakeup->tcp_match &&
  10528. nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_MATCH))
  10529. goto free_msg;
  10530. if (wakeup->tcp_connlost &&
  10531. nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_CONNLOST))
  10532. goto free_msg;
  10533. if (wakeup->tcp_nomoretokens &&
  10534. nla_put_flag(msg,
  10535. NL80211_WOWLAN_TRIG_WAKEUP_TCP_NOMORETOKENS))
  10536. goto free_msg;
  10537. if (wakeup->packet) {
  10538. u32 pkt_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211;
  10539. u32 len_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211_LEN;
  10540. if (!wakeup->packet_80211) {
  10541. pkt_attr =
  10542. NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023;
  10543. len_attr =
  10544. NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023_LEN;
  10545. }
  10546. if (wakeup->packet_len &&
  10547. nla_put_u32(msg, len_attr, wakeup->packet_len))
  10548. goto free_msg;
  10549. if (nla_put(msg, pkt_attr, wakeup->packet_present_len,
  10550. wakeup->packet))
  10551. goto free_msg;
  10552. }
  10553. if (wakeup->net_detect &&
  10554. cfg80211_net_detect_results(msg, wakeup))
  10555. goto free_msg;
  10556. nla_nest_end(msg, reasons);
  10557. }
  10558. genlmsg_end(msg, hdr);
  10559. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  10560. NL80211_MCGRP_MLME, gfp);
  10561. return;
  10562. free_msg:
  10563. nlmsg_free(msg);
  10564. }
  10565. EXPORT_SYMBOL(cfg80211_report_wowlan_wakeup);
  10566. #endif
  10567. void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
  10568. enum nl80211_tdls_operation oper,
  10569. u16 reason_code, gfp_t gfp)
  10570. {
  10571. struct wireless_dev *wdev = dev->ieee80211_ptr;
  10572. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
  10573. struct sk_buff *msg;
  10574. void *hdr;
  10575. trace_cfg80211_tdls_oper_request(wdev->wiphy, dev, peer, oper,
  10576. reason_code);
  10577. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  10578. if (!msg)
  10579. return;
  10580. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_TDLS_OPER);
  10581. if (!hdr) {
  10582. nlmsg_free(msg);
  10583. return;
  10584. }
  10585. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10586. nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
  10587. nla_put_u8(msg, NL80211_ATTR_TDLS_OPERATION, oper) ||
  10588. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer) ||
  10589. (reason_code > 0 &&
  10590. nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason_code)))
  10591. goto nla_put_failure;
  10592. genlmsg_end(msg, hdr);
  10593. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  10594. NL80211_MCGRP_MLME, gfp);
  10595. return;
  10596. nla_put_failure:
  10597. genlmsg_cancel(msg, hdr);
  10598. nlmsg_free(msg);
  10599. }
  10600. EXPORT_SYMBOL(cfg80211_tdls_oper_request);
  10601. static int nl80211_netlink_notify(struct notifier_block * nb,
  10602. unsigned long state,
  10603. void *_notify)
  10604. {
  10605. struct netlink_notify *notify = _notify;
  10606. struct cfg80211_registered_device *rdev;
  10607. struct wireless_dev *wdev;
  10608. struct cfg80211_beacon_registration *reg, *tmp;
  10609. if (state != NETLINK_URELEASE)
  10610. return NOTIFY_DONE;
  10611. rcu_read_lock();
  10612. list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
  10613. bool schedule_destroy_work = false;
  10614. bool schedule_scan_stop = false;
  10615. struct cfg80211_sched_scan_request *sched_scan_req =
  10616. rcu_dereference(rdev->sched_scan_req);
  10617. if (sched_scan_req && notify->portid &&
  10618. sched_scan_req->owner_nlportid == notify->portid)
  10619. schedule_scan_stop = true;
  10620. list_for_each_entry_rcu(wdev, &rdev->wdev_list, list) {
  10621. cfg80211_mlme_unregister_socket(wdev, notify->portid);
  10622. if (wdev->owner_nlportid == notify->portid)
  10623. schedule_destroy_work = true;
  10624. }
  10625. spin_lock_bh(&rdev->beacon_registrations_lock);
  10626. list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
  10627. list) {
  10628. if (reg->nlportid == notify->portid) {
  10629. list_del(&reg->list);
  10630. kfree(reg);
  10631. break;
  10632. }
  10633. }
  10634. spin_unlock_bh(&rdev->beacon_registrations_lock);
  10635. if (schedule_destroy_work) {
  10636. struct cfg80211_iface_destroy *destroy;
  10637. destroy = kzalloc(sizeof(*destroy), GFP_ATOMIC);
  10638. if (destroy) {
  10639. destroy->nlportid = notify->portid;
  10640. spin_lock(&rdev->destroy_list_lock);
  10641. list_add(&destroy->list, &rdev->destroy_list);
  10642. spin_unlock(&rdev->destroy_list_lock);
  10643. schedule_work(&rdev->destroy_work);
  10644. }
  10645. } else if (schedule_scan_stop) {
  10646. sched_scan_req->owner_nlportid = 0;
  10647. if (rdev->ops->sched_scan_stop &&
  10648. rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
  10649. schedule_work(&rdev->sched_scan_stop_wk);
  10650. }
  10651. }
  10652. rcu_read_unlock();
  10653. return NOTIFY_OK;
  10654. }
  10655. static struct notifier_block nl80211_netlink_notifier = {
  10656. .notifier_call = nl80211_netlink_notify,
  10657. };
  10658. void cfg80211_ft_event(struct net_device *netdev,
  10659. struct cfg80211_ft_event_params *ft_event)
  10660. {
  10661. struct wiphy *wiphy = netdev->ieee80211_ptr->wiphy;
  10662. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  10663. struct sk_buff *msg;
  10664. void *hdr;
  10665. trace_cfg80211_ft_event(wiphy, netdev, ft_event);
  10666. if (!ft_event->target_ap)
  10667. return;
  10668. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  10669. if (!msg)
  10670. return;
  10671. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FT_EVENT);
  10672. if (!hdr)
  10673. goto out;
  10674. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10675. nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
  10676. nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, ft_event->target_ap))
  10677. goto out;
  10678. if (ft_event->ies &&
  10679. nla_put(msg, NL80211_ATTR_IE, ft_event->ies_len, ft_event->ies))
  10680. goto out;
  10681. if (ft_event->ric_ies &&
  10682. nla_put(msg, NL80211_ATTR_IE_RIC, ft_event->ric_ies_len,
  10683. ft_event->ric_ies))
  10684. goto out;
  10685. genlmsg_end(msg, hdr);
  10686. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(&rdev->wiphy), msg, 0,
  10687. NL80211_MCGRP_MLME, GFP_KERNEL);
  10688. return;
  10689. out:
  10690. nlmsg_free(msg);
  10691. }
  10692. EXPORT_SYMBOL(cfg80211_ft_event);
  10693. void cfg80211_crit_proto_stopped(struct wireless_dev *wdev, gfp_t gfp)
  10694. {
  10695. struct cfg80211_registered_device *rdev;
  10696. struct sk_buff *msg;
  10697. void *hdr;
  10698. u32 nlportid;
  10699. rdev = wiphy_to_rdev(wdev->wiphy);
  10700. if (!rdev->crit_proto_nlportid)
  10701. return;
  10702. nlportid = rdev->crit_proto_nlportid;
  10703. rdev->crit_proto_nlportid = 0;
  10704. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  10705. if (!msg)
  10706. return;
  10707. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CRIT_PROTOCOL_STOP);
  10708. if (!hdr)
  10709. goto nla_put_failure;
  10710. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10711. nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
  10712. goto nla_put_failure;
  10713. genlmsg_end(msg, hdr);
  10714. genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
  10715. return;
  10716. nla_put_failure:
  10717. if (hdr)
  10718. genlmsg_cancel(msg, hdr);
  10719. nlmsg_free(msg);
  10720. }
  10721. EXPORT_SYMBOL(cfg80211_crit_proto_stopped);
  10722. void nl80211_send_ap_stopped(struct wireless_dev *wdev)
  10723. {
  10724. struct wiphy *wiphy = wdev->wiphy;
  10725. struct cfg80211_registered_device *rdev = wiphy_to_rdev(wiphy);
  10726. struct sk_buff *msg;
  10727. void *hdr;
  10728. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  10729. if (!msg)
  10730. return;
  10731. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_STOP_AP);
  10732. if (!hdr)
  10733. goto out;
  10734. if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
  10735. nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex) ||
  10736. nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
  10737. goto out;
  10738. genlmsg_end(msg, hdr);
  10739. genlmsg_multicast_netns(&nl80211_fam, wiphy_net(wiphy), msg, 0,
  10740. NL80211_MCGRP_MLME, GFP_KERNEL);
  10741. return;
  10742. out:
  10743. nlmsg_free(msg);
  10744. }
  10745. /* initialisation/exit functions */
  10746. int nl80211_init(void)
  10747. {
  10748. int err;
  10749. err = genl_register_family_with_ops_groups(&nl80211_fam, nl80211_ops,
  10750. nl80211_mcgrps);
  10751. if (err)
  10752. return err;
  10753. err = netlink_register_notifier(&nl80211_netlink_notifier);
  10754. if (err)
  10755. goto err_out;
  10756. return 0;
  10757. err_out:
  10758. genl_unregister_family(&nl80211_fam);
  10759. return err;
  10760. }
  10761. void nl80211_exit(void)
  10762. {
  10763. netlink_unregister_notifier(&nl80211_netlink_notifier);
  10764. genl_unregister_family(&nl80211_fam);
  10765. }