projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
tcp: plug dst leak in tcp_v6_conn_request()
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / net / wireless / nl80211.c
CommitLineData
55682965
JB		 1/*
2 * This is the new netlink-based wireless configuration interface.
3 *
026331c4 4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
55682965
JB		 5 */
6
7#include <linux/if.h>
8#include <linux/module.h>
9#include <linux/err.h>
5a0e3ad6 10#include <linux/slab.h>
55682965
JB		 11#include <linux/list.h>
12#include <linux/if_ether.h>
13#include <linux/ieee80211.h>
14#include <linux/nl80211.h>
15#include <linux/rtnetlink.h>
16#include <linux/netlink.h>
2a519311 17#include <linux/etherdevice.h>
463d0183 18#include <net/net_namespace.h>
55682965
JB		 19#include <net/genetlink.h>
20#include <net/cfg80211.h>
463d0183 21#include <net/sock.h>
55682965
JB		 22#include "core.h"
23#include "nl80211.h"
b2e1b302 24#include "reg.h"
55682965 25
5fb628e9
JM		 26static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type);
27static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
28 struct genl_info *info,
29 struct cfg80211_crypto_settings *settings,
30 int cipher_limit);
31
4c476991
JB		 32static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
33 struct genl_info *info);
34static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
35 struct genl_info *info);
36
55682965
JB		 37/* the netlink family */
38static struct genl_family nl80211_fam = {
39 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
40 .name = "nl80211", /* have users key off the name instead */
41 .hdrsize = 0, /* no private header */
42 .version = 1, /* no particular meaning now */
43 .maxattr = NL80211_ATTR_MAX,
463d0183 44 .netnsok = true,
4c476991
JB		 45 .pre_doit = nl80211_pre_doit,
46 .post_doit = nl80211_post_doit,
55682965
JB		 47};
48
79c97e97 49/* internal helper: get rdev and dev */
00918d33
JB		 50static int get_rdev_dev_by_ifindex(struct net *netns, struct nlattr **attrs,
51 struct cfg80211_registered_device **rdev,
52 struct net_device **dev)
55682965
JB		 53{
54 int ifindex;
55
bba95fef 56 if (!attrs[NL80211_ATTR_IFINDEX])
55682965
JB		 57 return -EINVAL;
58
bba95fef 59 ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
00918d33 60 *dev = dev_get_by_index(netns, ifindex);
55682965
JB		 61 if (!*dev)
62 return -ENODEV;
63
00918d33 64 *rdev = cfg80211_get_dev_from_ifindex(netns, ifindex);
79c97e97 65 if (IS_ERR(*rdev)) {
55682965 66 dev_put(*dev);
79c97e97 67 return PTR_ERR(*rdev);
55682965
JB		 68 }
69
70 return 0;
71}
72
73/* policy for the attributes */
b54452b0 74static const struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] = {
55682965
JB		 75 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
76 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
079e24ed 77 .len = 20-1 },
31888487 78 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
72bdcf34 79 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
094d05dc 80 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
b9a5f8ca
JM		 81 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
82 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
83 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
84 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
81077e82 85 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
55682965
JB		 86
87 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
88 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
89 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
41ade00f 90
e007b857
EP		 91 [NL80211_ATTR_MAC] = { .len = ETH_ALEN },
92 [NL80211_ATTR_PREV_BSSID] = { .len = ETH_ALEN },
41ade00f 93
b9454e83 94 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
41ade00f
JB		 95 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
96 .len = WLAN_MAX_KEY_LEN },
97 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
98 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
99 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
81962267 100 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
e31b8213 101 [NL80211_ATTR_KEY_TYPE] = { .type = NLA_U32 },
ed1b6cc7
JB		 102
103 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
104 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
105 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
106 .len = IEEE80211_MAX_DATA_LEN },
107 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
108 .len = IEEE80211_MAX_DATA_LEN },
5727ef1b
JB		 109 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
110 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
111 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
112 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
113 .len = NL80211_MAX_SUPP_RATES },
2ec600d6 114 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
5727ef1b 115 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
0a9542ee 116 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
2ec600d6
LCC		 117 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
118 .len = IEEE80211_MAX_MESH_ID_LEN },
119 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
9f1ba906 120
b2e1b302
LR		 121 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
122 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
123
9f1ba906
JM		 124 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
125 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
126 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
90c97a04
JM		 127 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
128 .len = NL80211_MAX_SUPP_RATES },
50b12f59 129 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
36aedc90 130
24bdd9f4 131 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
15d5dda6 132 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
93da9cc1 133
6c739419 134 [NL80211_ATTR_HT_CAPABILITY] = { .len = NL80211_HT_CAPABILITY_LEN },
9aed3cc1
JM		 135
136 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
137 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
138 .len = IEEE80211_MAX_DATA_LEN },
2a519311
JB		 139 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
140 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
636a5d36
JM		 141
142 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
143 .len = IEEE80211_MAX_SSID_LEN },
144 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
145 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
04a773ad 146 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
1965c853 147 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
dc6382ce 148 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
eccb8e8f
JB		 149 [NL80211_ATTR_STA_FLAGS2] = {
150 .len = sizeof(struct nl80211_sta_flag_update),
151 },
3f77316c 152 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
c0692b8f
JB		 153 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
154 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
b23aa676
SO		 155 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
156 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
157 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
463d0183 158 [NL80211_ATTR_PID] = { .type = NLA_U32 },
8b787643 159 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
67fbb16b
SO		 160 [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
161 .len = WLAN_PMKID_LEN },
9588bbd5
JM		 162 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
163 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
13ae75b1 164 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
026331c4
JM		 165 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
166 .len = IEEE80211_MAX_DATA_LEN },
167 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
ffb9eb3d 168 [NL80211_ATTR_PS_STATE] = { .type = NLA_U32 },
d6dc1a38 169 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
d5cdfacb 170 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
fd8aaaf3 171 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
98d2ff8b
JO		 172 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
173 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
2e161f78 174 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
afe0cbf8
BR		 175 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
176 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
885a46d0 177 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
f7ca38df 178 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
dbd2fd65 179 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
ff1b6e69 180 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
9c3990aa 181 [NL80211_ATTR_STA_PLINK_STATE] = { .type = NLA_U8 },
bbe6ad6d 182 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
e5497d76 183 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
34850ab2 184 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
32e9de84 185 [NL80211_ATTR_HIDDEN_SSID] = { .type = NLA_U32 },
9946ecfb
JM		 186 [NL80211_ATTR_IE_PROBE_RESP] = { .type = NLA_BINARY,
187 .len = IEEE80211_MAX_DATA_LEN },
188 [NL80211_ATTR_IE_ASSOC_RESP] = { .type = NLA_BINARY,
189 .len = IEEE80211_MAX_DATA_LEN },
f4b34b55 190 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
a1f1c21c 191 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
e9f935e3 192 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
109086ce
AN		 193 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
194 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
195 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
196 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
197 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
e247bd90 198 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
00f740e1
AN		 199 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
200 .len = IEEE80211_MAX_DATA_LEN },
8b60b078 201 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
7e7c8926
BG		 202 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
203 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
204 .len = NL80211_HT_CAPABILITY_LEN
205 },
1d9d9213 206 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
1b658f11 207 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
4486ea98 208 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
55682965
JB		 209};
210
e31b8213 211/* policy for the key attributes */
b54452b0 212static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
fffd0934 213 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
b9454e83
JB		 214 [NL80211_KEY_IDX] = { .type = NLA_U8 },
215 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
81962267 216 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
b9454e83
JB		 217 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
218 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
e31b8213 219 [NL80211_KEY_TYPE] = { .type = NLA_U32 },
dbd2fd65
JB		 220 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
221};
222
223/* policy for the key default flags */
224static const struct nla_policy
225nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
226 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
227 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
b9454e83
JB		 228};
229
ff1b6e69
JB		 230/* policy for WoWLAN attributes */
231static const struct nla_policy
232nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
233 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
234 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
235 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
236 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
77dbbb13
JB		 237 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
238 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
239 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
240 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
ff1b6e69
JB		 241};
242
e5497d76
JB		 243/* policy for GTK rekey offload attributes */
244static const struct nla_policy
245nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
246 [NL80211_REKEY_DATA_KEK] = { .len = NL80211_KEK_LEN },
247 [NL80211_REKEY_DATA_KCK] = { .len = NL80211_KCK_LEN },
248 [NL80211_REKEY_DATA_REPLAY_CTR] = { .len = NL80211_REPLAY_CTR_LEN },
249};
250
a1f1c21c
LC		 251static const struct nla_policy
252nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
253 [NL80211_ATTR_SCHED_SCAN_MATCH_SSID] = { .type = NLA_BINARY,
254 .len = IEEE80211_MAX_SSID_LEN },
255};
256
a043897a
HS		 257/* ifidx get helper */
258static int nl80211_get_ifidx(struct netlink_callback *cb)
259{
260 int res;
261
262 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
263 nl80211_fam.attrbuf, nl80211_fam.maxattr,
264 nl80211_policy);
265 if (res)
266 return res;
267
268 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
269 return -EINVAL;
270
271 res = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
272 if (!res)
273 return -EINVAL;
274 return res;
275}
276
67748893
JB		 277static int nl80211_prepare_netdev_dump(struct sk_buff *skb,
278 struct netlink_callback *cb,
279 struct cfg80211_registered_device **rdev,
280 struct net_device **dev)
281{
282 int ifidx = cb->args[0];
283 int err;
284
285 if (!ifidx)
286 ifidx = nl80211_get_ifidx(cb);
287 if (ifidx < 0)
288 return ifidx;
289
290 cb->args[0] = ifidx;
291
292 rtnl_lock();
293
294 *dev = __dev_get_by_index(sock_net(skb->sk), ifidx);
295 if (!*dev) {
296 err = -ENODEV;
297 goto out_rtnl;
298 }
299
300 *rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
3cc25e51
FF		 301 if (IS_ERR(*rdev)) {
302 err = PTR_ERR(*rdev);
67748893
JB		 303 goto out_rtnl;
304 }
305
306 return 0;
307 out_rtnl:
308 rtnl_unlock();
309 return err;
310}
311
312static void nl80211_finish_netdev_dump(struct cfg80211_registered_device *rdev)
313{
314 cfg80211_unlock_rdev(rdev);
315 rtnl_unlock();
316}
317
f4a11bb0
JB		 318/* IE validation */
319static bool is_valid_ie_attr(const struct nlattr *attr)
320{
321 const u8 *pos;
322 int len;
323
324 if (!attr)
325 return true;
326
327 pos = nla_data(attr);
328 len = nla_len(attr);
329
330 while (len) {
331 u8 elemlen;
332
333 if (len < 2)
334 return false;
335 len -= 2;
336
337 elemlen = pos[1];
338 if (elemlen > len)
339 return false;
340
341 len -= elemlen;
342 pos += 2 + elemlen;
343 }
344
345 return true;
346}
347
55682965
JB		 348/* message building helper */
349static inline void *nl80211hdr_put(struct sk_buff *skb, u32 pid, u32 seq,
350 int flags, u8 cmd)
351{
352 /* since there is no private header just add the generic one */
353 return genlmsg_put(skb, pid, seq, &nl80211_fam, flags, cmd);
354}
355
5dab3b8a
LR		 356static int nl80211_msg_put_channel(struct sk_buff *msg,
357 struct ieee80211_channel *chan)
358{
9360ffd1
DM		 359 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
360 chan->center_freq))
361 goto nla_put_failure;
5dab3b8a 362
9360ffd1
DM		 363 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
364 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
365 goto nla_put_failure;
366 if ((chan->flags & IEEE80211_CHAN_PASSIVE_SCAN) &&
367 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN))
368 goto nla_put_failure;
369 if ((chan->flags & IEEE80211_CHAN_NO_IBSS) &&
370 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IBSS))
371 goto nla_put_failure;
372 if ((chan->flags & IEEE80211_CHAN_RADAR) &&
373 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
374 goto nla_put_failure;
5dab3b8a 375
9360ffd1
DM		 376 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
377 DBM_TO_MBM(chan->max_power)))
378 goto nla_put_failure;
5dab3b8a
LR		 379
380 return 0;
381
382 nla_put_failure:
383 return -ENOBUFS;
384}
385
55682965
JB		 386/* netlink command implementations */
387
b9454e83
JB		 388struct key_parse {
389 struct key_params p;
390 int idx;
e31b8213 391 int type;
b9454e83 392 bool def, defmgmt;
dbd2fd65 393 bool def_uni, def_multi;
b9454e83
JB		 394};
395
396static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
397{
398 struct nlattr *tb[NL80211_KEY_MAX + 1];
399 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
400 nl80211_key_policy);
401 if (err)
402 return err;
403
404 k->def = !!tb[NL80211_KEY_DEFAULT];
405 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
406
dbd2fd65
JB		 407 if (k->def) {
408 k->def_uni = true;
409 k->def_multi = true;
410 }
411 if (k->defmgmt)
412 k->def_multi = true;
413
b9454e83
JB		 414 if (tb[NL80211_KEY_IDX])
415 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
416
417 if (tb[NL80211_KEY_DATA]) {
418 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
419 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
420 }
421
422 if (tb[NL80211_KEY_SEQ]) {
423 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
424 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
425 }
426
427 if (tb[NL80211_KEY_CIPHER])
428 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
429
e31b8213
JB		 430 if (tb[NL80211_KEY_TYPE]) {
431 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
432 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
433 return -EINVAL;
434 }
435
dbd2fd65
JB		 436 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
437 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
2da8f419
JB		 438 err = nla_parse_nested(kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
439 tb[NL80211_KEY_DEFAULT_TYPES],
440 nl80211_key_default_policy);
dbd2fd65
JB		 441 if (err)
442 return err;
443
444 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
445 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
446 }
447
b9454e83
JB		 448 return 0;
449}
450
451static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
452{
453 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
454 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
455 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
456 }
457
458 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
459 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
460 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
461 }
462
463 if (info->attrs[NL80211_ATTR_KEY_IDX])
464 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
465
466 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
467 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
468
469 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
470 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
471
dbd2fd65
JB		 472 if (k->def) {
473 k->def_uni = true;
474 k->def_multi = true;
475 }
476 if (k->defmgmt)
477 k->def_multi = true;
478
e31b8213
JB		 479 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
480 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
481 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
482 return -EINVAL;
483 }
484
dbd2fd65
JB		 485 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
486 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
487 int err = nla_parse_nested(
488 kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
489 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
490 nl80211_key_default_policy);
491 if (err)
492 return err;
493
494 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
495 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
496 }
497
b9454e83
JB		 498 return 0;
499}
500
501static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
502{
503 int err;
504
505 memset(k, 0, sizeof(*k));
506 k->idx = -1;
e31b8213 507 k->type = -1;
b9454e83
JB		 508
509 if (info->attrs[NL80211_ATTR_KEY])
510 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
511 else
512 err = nl80211_parse_key_old(info, k);
513
514 if (err)
515 return err;
516
517 if (k->def && k->defmgmt)
518 return -EINVAL;
519
dbd2fd65
JB		 520 if (k->defmgmt) {
521 if (k->def_uni || !k->def_multi)
522 return -EINVAL;
523 }
524
b9454e83
JB		 525 if (k->idx != -1) {
526 if (k->defmgmt) {
527 if (k->idx < 4 || k->idx > 5)
528 return -EINVAL;
529 } else if (k->def) {
530 if (k->idx < 0 || k->idx > 3)
531 return -EINVAL;
532 } else {
533 if (k->idx < 0 || k->idx > 5)
534 return -EINVAL;
535 }
536 }
537
538 return 0;
539}
540
fffd0934
JB		 541static struct cfg80211_cached_keys *
542nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
543 struct nlattr *keys)
544{
545 struct key_parse parse;
546 struct nlattr *key;
547 struct cfg80211_cached_keys *result;
548 int rem, err, def = 0;
549
550 result = kzalloc(sizeof(*result), GFP_KERNEL);
551 if (!result)
552 return ERR_PTR(-ENOMEM);
553
554 result->def = -1;
555 result->defmgmt = -1;
556
557 nla_for_each_nested(key, keys, rem) {
558 memset(&parse, 0, sizeof(parse));
559 parse.idx = -1;
560
561 err = nl80211_parse_key_new(key, &parse);
562 if (err)
563 goto error;
564 err = -EINVAL;
565 if (!parse.p.key)
566 goto error;
567 if (parse.idx < 0 || parse.idx > 4)
568 goto error;
569 if (parse.def) {
570 if (def)
571 goto error;
572 def = 1;
573 result->def = parse.idx;
dbd2fd65
JB		 574 if (!parse.def_uni || !parse.def_multi)
575 goto error;
fffd0934
JB		 576 } else if (parse.defmgmt)
577 goto error;
578 err = cfg80211_validate_key_settings(rdev, &parse.p,
e31b8213 579 parse.idx, false, NULL);
fffd0934
JB		 580 if (err)
581 goto error;
582 result->params[parse.idx].cipher = parse.p.cipher;
583 result->params[parse.idx].key_len = parse.p.key_len;
584 result->params[parse.idx].key = result->data[parse.idx];
585 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
586 }
587
588 return result;
589 error:
590 kfree(result);
591 return ERR_PTR(err);
592}
593
594static int nl80211_key_allowed(struct wireless_dev *wdev)
595{
596 ASSERT_WDEV_LOCK(wdev);
597
fffd0934
JB		 598 switch (wdev->iftype) {
599 case NL80211_IFTYPE_AP:
600 case NL80211_IFTYPE_AP_VLAN:
074ac8df 601 case NL80211_IFTYPE_P2P_GO:
ff973af7 602 case NL80211_IFTYPE_MESH_POINT:
fffd0934
JB		 603 break;
604 case NL80211_IFTYPE_ADHOC:
605 if (!wdev->current_bss)
606 return -ENOLINK;
607 break;
608 case NL80211_IFTYPE_STATION:
074ac8df 609 case NL80211_IFTYPE_P2P_CLIENT:
fffd0934
JB		 610 if (wdev->sme_state != CFG80211_SME_CONNECTED)
611 return -ENOLINK;
612 break;
613 default:
614 return -EINVAL;
615 }
616
617 return 0;
618}
619
7527a782
JB		 620static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
621{
622 struct nlattr *nl_modes = nla_nest_start(msg, attr);
623 int i;
624
625 if (!nl_modes)
626 goto nla_put_failure;
627
628 i = 0;
629 while (ifmodes) {
9360ffd1
DM		 630 if ((ifmodes & 1) && nla_put_flag(msg, i))
631 goto nla_put_failure;
7527a782
JB		 632 ifmodes >>= 1;
633 i++;
634 }
635
636 nla_nest_end(msg, nl_modes);
637 return 0;
638
639nla_put_failure:
640 return -ENOBUFS;
641}
642
643static int nl80211_put_iface_combinations(struct wiphy *wiphy,
644 struct sk_buff *msg)
645{
646 struct nlattr *nl_combis;
647 int i, j;
648
649 nl_combis = nla_nest_start(msg,
650 NL80211_ATTR_INTERFACE_COMBINATIONS);
651 if (!nl_combis)
652 goto nla_put_failure;
653
654 for (i = 0; i < wiphy->n_iface_combinations; i++) {
655 const struct ieee80211_iface_combination *c;
656 struct nlattr *nl_combi, *nl_limits;
657
658 c = &wiphy->iface_combinations[i];
659
660 nl_combi = nla_nest_start(msg, i + 1);
661 if (!nl_combi)
662 goto nla_put_failure;
663
664 nl_limits = nla_nest_start(msg, NL80211_IFACE_COMB_LIMITS);
665 if (!nl_limits)
666 goto nla_put_failure;
667
668 for (j = 0; j < c->n_limits; j++) {
669 struct nlattr *nl_limit;
670
671 nl_limit = nla_nest_start(msg, j + 1);
672 if (!nl_limit)
673 goto nla_put_failure;
9360ffd1
DM		 674 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
675 c->limits[j].max))
676 goto nla_put_failure;
7527a782
JB		 677 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
678 c->limits[j].types))
679 goto nla_put_failure;
680 nla_nest_end(msg, nl_limit);
681 }
682
683 nla_nest_end(msg, nl_limits);
684
9360ffd1
DM		 685 if (c->beacon_int_infra_match &&
686 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
687 goto nla_put_failure;
688 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
689 c->num_different_channels) ||
690 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
691 c->max_interfaces))
692 goto nla_put_failure;
7527a782
JB		 693
694 nla_nest_end(msg, nl_combi);
695 }
696
697 nla_nest_end(msg, nl_combis);
698
699 return 0;
700nla_put_failure:
701 return -ENOBUFS;
702}
703
55682965
JB		 704static int nl80211_send_wiphy(struct sk_buff *msg, u32 pid, u32 seq, int flags,
705 struct cfg80211_registered_device *dev)
706{
707 void *hdr;
ee688b00
JB		 708 struct nlattr *nl_bands, *nl_band;
709 struct nlattr *nl_freqs, *nl_freq;
710 struct nlattr *nl_rates, *nl_rate;
8fdc621d 711 struct nlattr *nl_cmds;
ee688b00
JB		 712 enum ieee80211_band band;
713 struct ieee80211_channel *chan;
714 struct ieee80211_rate *rate;
715 int i;
2e161f78
JB		 716 const struct ieee80211_txrx_stypes *mgmt_stypes =
717 dev->wiphy.mgmt_stypes;
55682965
JB		 718
719 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_WIPHY);
720 if (!hdr)
721 return -1;
722
9360ffd1
DM		 723 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx) ||
724 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy)) ||
725 nla_put_u32(msg, NL80211_ATTR_GENERATION,
726 cfg80211_rdev_list_generation) ||
727 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
728 dev->wiphy.retry_short) ||
729 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
730 dev->wiphy.retry_long) ||
731 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
732 dev->wiphy.frag_threshold) ||
733 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
734 dev->wiphy.rts_threshold) ||
735 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
736 dev->wiphy.coverage_class) ||
737 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
738 dev->wiphy.max_scan_ssids) ||
739 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
740 dev->wiphy.max_sched_scan_ssids) ||
741 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
742 dev->wiphy.max_scan_ie_len) ||
743 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
744 dev->wiphy.max_sched_scan_ie_len) ||
745 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
746 dev->wiphy.max_match_sets))
747 goto nla_put_failure;
748
749 if ((dev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
750 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
751 goto nla_put_failure;
752 if ((dev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
753 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
754 goto nla_put_failure;
755 if ((dev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
756 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
757 goto nla_put_failure;
758 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
759 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
760 goto nla_put_failure;
761 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
762 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
763 goto nla_put_failure;
764 if ((dev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
765 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
766 goto nla_put_failure;
767
768 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
769 sizeof(u32) * dev->wiphy.n_cipher_suites,
770 dev->wiphy.cipher_suites))
771 goto nla_put_failure;
772
773 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
774 dev->wiphy.max_num_pmkids))
775 goto nla_put_failure;
776
777 if ((dev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
778 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
779 goto nla_put_failure;
780
781 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
782 dev->wiphy.available_antennas_tx) ||
783 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
784 dev->wiphy.available_antennas_rx))
785 goto nla_put_failure;
786
787 if ((dev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
788 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
789 dev->wiphy.probe_resp_offload))
790 goto nla_put_failure;
87bbbe22 791
7f531e03
BR		 792 if ((dev->wiphy.available_antennas_tx ||
793 dev->wiphy.available_antennas_rx) && dev->ops->get_antenna) {
afe0cbf8
BR		 794 u32 tx_ant = 0, rx_ant = 0;
795 int res;
796 res = dev->ops->get_antenna(&dev->wiphy, &tx_ant, &rx_ant);
797 if (!res) {
9360ffd1
DM		 798 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_TX,
799 tx_ant) ||
800 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_RX,
801 rx_ant))
802 goto nla_put_failure;
afe0cbf8
BR		 803 }
804 }
805
7527a782
JB		 806 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
807 dev->wiphy.interface_modes))
f59ac048
LR		 808 goto nla_put_failure;
809
ee688b00
JB		 810 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
811 if (!nl_bands)
812 goto nla_put_failure;
813
814 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
815 if (!dev->wiphy.bands[band])
816 continue;
817
818 nl_band = nla_nest_start(msg, band);
819 if (!nl_band)
820 goto nla_put_failure;
821
d51626df 822 /* add HT info */
9360ffd1
DM		 823 if (dev->wiphy.bands[band]->ht_cap.ht_supported &&
824 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
825 sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
826 &dev->wiphy.bands[band]->ht_cap.mcs) ||
827 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
828 dev->wiphy.bands[band]->ht_cap.cap) ||
829 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
830 dev->wiphy.bands[band]->ht_cap.ampdu_factor) ||
831 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
832 dev->wiphy.bands[band]->ht_cap.ampdu_density)))
833 goto nla_put_failure;
d51626df 834
ee688b00
JB		 835 /* add frequencies */
836 nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
837 if (!nl_freqs)
838 goto nla_put_failure;
839
840 for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
841 nl_freq = nla_nest_start(msg, i);
842 if (!nl_freq)
843 goto nla_put_failure;
844
845 chan = &dev->wiphy.bands[band]->channels[i];
5dab3b8a
LR		 846
847 if (nl80211_msg_put_channel(msg, chan))
848 goto nla_put_failure;
e2f367f2 849
ee688b00
JB		 850 nla_nest_end(msg, nl_freq);
851 }
852
853 nla_nest_end(msg, nl_freqs);
854
855 /* add bitrates */
856 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
857 if (!nl_rates)
858 goto nla_put_failure;
859
860 for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
861 nl_rate = nla_nest_start(msg, i);
862 if (!nl_rate)
863 goto nla_put_failure;
864
865 rate = &dev->wiphy.bands[band]->bitrates[i];
9360ffd1
DM		 866 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
867 rate->bitrate))
868 goto nla_put_failure;
869 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
870 nla_put_flag(msg,
871 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
872 goto nla_put_failure;
ee688b00
JB		 873
874 nla_nest_end(msg, nl_rate);
875 }
876
877 nla_nest_end(msg, nl_rates);
878
879 nla_nest_end(msg, nl_band);
880 }
881 nla_nest_end(msg, nl_bands);
882
8fdc621d
JB		 883 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
884 if (!nl_cmds)
885 goto nla_put_failure;
886
887 i = 0;
888#define CMD(op, n) \
889 do { \
890 if (dev->ops->op) { \
891 i++; \
9360ffd1
DM		 892 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
893 goto nla_put_failure; \
8fdc621d
JB		 894 } \
895 } while (0)
896
897 CMD(add_virtual_intf, NEW_INTERFACE);
898 CMD(change_virtual_intf, SET_INTERFACE);
899 CMD(add_key, NEW_KEY);
8860020e 900 CMD(start_ap, START_AP);
8fdc621d
JB		 901 CMD(add_station, NEW_STATION);
902 CMD(add_mpath, NEW_MPATH);
24bdd9f4 903 CMD(update_mesh_config, SET_MESH_CONFIG);
8fdc621d 904 CMD(change_bss, SET_BSS);
636a5d36
JM		 905 CMD(auth, AUTHENTICATE);
906 CMD(assoc, ASSOCIATE);
907 CMD(deauth, DEAUTHENTICATE);
908 CMD(disassoc, DISASSOCIATE);
04a773ad 909 CMD(join_ibss, JOIN_IBSS);
29cbe68c 910 CMD(join_mesh, JOIN_MESH);
67fbb16b
SO		 911 CMD(set_pmksa, SET_PMKSA);
912 CMD(del_pmksa, DEL_PMKSA);
913 CMD(flush_pmksa, FLUSH_PMKSA);
7c4ef712
JB		 914 if (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
915 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
13ae75b1 916 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
2e161f78 917 CMD(mgmt_tx, FRAME);
f7ca38df 918 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
5be83de5 919 if (dev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
463d0183 920 i++;
9360ffd1
DM		 921 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
922 goto nla_put_failure;
463d0183 923 }
e8c9bd5b 924 if (dev->ops->set_monitor_channel || dev->ops->start_ap ||
cc1d2806 925 dev->ops->join_mesh) {
aa430da4
JB		 926 i++;
927 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
928 goto nla_put_failure;
929 }
e8347eba 930 CMD(set_wds_peer, SET_WDS_PEER);
109086ce
AN		 931 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
932 CMD(tdls_mgmt, TDLS_MGMT);
933 CMD(tdls_oper, TDLS_OPER);
934 }
807f8a8c
LC		 935 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
936 CMD(sched_scan_start, START_SCHED_SCAN);
7f6cf311 937 CMD(probe_client, PROBE_CLIENT);
1d9d9213 938 CMD(set_noack_map, SET_NOACK_MAP);
5e760230
JB		 939 if (dev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
940 i++;
9360ffd1
DM		 941 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
942 goto nla_put_failure;
5e760230 943 }
8fdc621d 944
4745fc09
KV		 945#ifdef CONFIG_NL80211_TESTMODE
946 CMD(testmode_cmd, TESTMODE);
947#endif
948
8fdc621d 949#undef CMD
b23aa676 950
6829c878 951 if (dev->ops->connect || dev->ops->auth) {
b23aa676 952 i++;
9360ffd1
DM		 953 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
954 goto nla_put_failure;
b23aa676
SO		 955 }
956
6829c878 957 if (dev->ops->disconnect || dev->ops->deauth) {
b23aa676 958 i++;
9360ffd1
DM		 959 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
960 goto nla_put_failure;
b23aa676
SO		 961 }
962
8fdc621d
JB		 963 nla_nest_end(msg, nl_cmds);
964
7c4ef712 965 if (dev->ops->remain_on_channel &&
9360ffd1
DM		 966 (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
967 nla_put_u32(msg, NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
968 dev->wiphy.max_remain_on_channel_duration))
969 goto nla_put_failure;
a293911d 970
9360ffd1
DM		 971 if ((dev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
972 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
973 goto nla_put_failure;
f7ca38df 974
2e161f78
JB		 975 if (mgmt_stypes) {
976 u16 stypes;
977 struct nlattr *nl_ftypes, *nl_ifs;
978 enum nl80211_iftype ift;
979
980 nl_ifs = nla_nest_start(msg, NL80211_ATTR_TX_FRAME_TYPES);
981 if (!nl_ifs)
982 goto nla_put_failure;
983
984 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
985 nl_ftypes = nla_nest_start(msg, ift);
986 if (!nl_ftypes)
987 goto nla_put_failure;
988 i = 0;
989 stypes = mgmt_stypes[ift].tx;
990 while (stypes) {
9360ffd1
DM		 991 if ((stypes & 1) &&
992 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
993 (i << 4) | IEEE80211_FTYPE_MGMT))
994 goto nla_put_failure;
2e161f78
JB		 995 stypes >>= 1;
996 i++;
997 }
998 nla_nest_end(msg, nl_ftypes);
999 }
1000
74b70a4e
JB		 1001 nla_nest_end(msg, nl_ifs);
1002
2e161f78
JB		 1003 nl_ifs = nla_nest_start(msg, NL80211_ATTR_RX_FRAME_TYPES);
1004 if (!nl_ifs)
1005 goto nla_put_failure;
1006
1007 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1008 nl_ftypes = nla_nest_start(msg, ift);
1009 if (!nl_ftypes)
1010 goto nla_put_failure;
1011 i = 0;
1012 stypes = mgmt_stypes[ift].rx;
1013 while (stypes) {
9360ffd1
DM		 1014 if ((stypes & 1) &&
1015 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1016 (i << 4) | IEEE80211_FTYPE_MGMT))
1017 goto nla_put_failure;
2e161f78
JB		 1018 stypes >>= 1;
1019 i++;
1020 }
1021 nla_nest_end(msg, nl_ftypes);
1022 }
1023 nla_nest_end(msg, nl_ifs);
1024 }
1025
ff1b6e69
JB		 1026 if (dev->wiphy.wowlan.flags || dev->wiphy.wowlan.n_patterns) {
1027 struct nlattr *nl_wowlan;
1028
1029 nl_wowlan = nla_nest_start(msg,
1030 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
1031 if (!nl_wowlan)
1032 goto nla_put_failure;
1033
9360ffd1
DM		 1034 if (((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_ANY) &&
1035 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1036 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_DISCONNECT) &&
1037 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1038 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_MAGIC_PKT) &&
1039 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1040 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
1041 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1042 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
1043 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1044 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
1045 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1046 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
1047 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1048 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
1049 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1050 goto nla_put_failure;
ff1b6e69
JB		 1051 if (dev->wiphy.wowlan.n_patterns) {
1052 struct nl80211_wowlan_pattern_support pat = {
1053 .max_patterns = dev->wiphy.wowlan.n_patterns,
1054 .min_pattern_len =
1055 dev->wiphy.wowlan.pattern_min_len,
1056 .max_pattern_len =
1057 dev->wiphy.wowlan.pattern_max_len,
1058 };
9360ffd1
DM		 1059 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1060 sizeof(pat), &pat))
1061 goto nla_put_failure;
ff1b6e69
JB		 1062 }
1063
1064 nla_nest_end(msg, nl_wowlan);
1065 }
1066
7527a782
JB		 1067 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1068 dev->wiphy.software_iftypes))
1069 goto nla_put_failure;
1070
1071 if (nl80211_put_iface_combinations(&dev->wiphy, msg))
1072 goto nla_put_failure;
1073
9360ffd1
DM		 1074 if ((dev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
1075 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1076 dev->wiphy.ap_sme_capa))
1077 goto nla_put_failure;
562a7480 1078
9360ffd1
DM		 1079 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS,
1080 dev->wiphy.features))
1081 goto nla_put_failure;
1f074bd8 1082
9360ffd1
DM		 1083 if (dev->wiphy.ht_capa_mod_mask &&
1084 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1085 sizeof(*dev->wiphy.ht_capa_mod_mask),
1086 dev->wiphy.ht_capa_mod_mask))
1087 goto nla_put_failure;
7e7c8926 1088
55682965
JB		 1089 return genlmsg_end(msg, hdr);
1090
1091 nla_put_failure:
bc3ed28c
TG		 1092 genlmsg_cancel(msg, hdr);
1093 return -EMSGSIZE;
55682965
JB		 1094}
1095
1096static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
1097{
1098 int idx = 0;
1099 int start = cb->args[0];
1100 struct cfg80211_registered_device *dev;
1101
a1794390 1102 mutex_lock(&cfg80211_mutex);
79c97e97 1103 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
463d0183
JB		 1104 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
1105 continue;
b4637271 1106 if (++idx <= start)
55682965
JB		 1107 continue;
1108 if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).pid,
1109 cb->nlh->nlmsg_seq, NLM_F_MULTI,
b4637271
JV		 1110 dev) < 0) {
1111 idx--;
55682965 1112 break;
b4637271 1113 }
55682965 1114 }
a1794390 1115 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1116
1117 cb->args[0] = idx;
1118
1119 return skb->len;
1120}
1121
1122static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
1123{
1124 struct sk_buff *msg;
4c476991 1125 struct cfg80211_registered_device *dev = info->user_ptr[0];
55682965 1126
fd2120ca 1127 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1128 if (!msg)
4c476991 1129 return -ENOMEM;
55682965 1130
4c476991
JB		 1131 if (nl80211_send_wiphy(msg, info->snd_pid, info->snd_seq, 0, dev) < 0) {
1132 nlmsg_free(msg);
1133 return -ENOBUFS;
1134 }
55682965 1135
134e6375 1136 return genlmsg_reply(msg, info);
55682965
JB		 1137}
1138
31888487
JM		 1139static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
1140 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
1141 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
1142 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
1143 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
1144 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
1145};
1146
1147static int parse_txq_params(struct nlattr *tb[],
1148 struct ieee80211_txq_params *txq_params)
1149{
a3304b0a 1150 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
31888487
JM		 1151 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
1152 !tb[NL80211_TXQ_ATTR_AIFS])
1153 return -EINVAL;
1154
a3304b0a 1155 txq_params->ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
31888487
JM		 1156 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
1157 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
1158 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
1159 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
1160
a3304b0a
JB		 1161 if (txq_params->ac >= NL80211_NUM_ACS)
1162 return -EINVAL;
1163
31888487
JM		 1164 return 0;
1165}
1166
f444de05
JB		 1167static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
1168{
1169 /*
cc1d2806
JB		 1170 * You can only set the channel explicitly for WDS interfaces,
1171 * all others have their channel managed via their respective
1172 * "establish a connection" command (connect, join, ...)
1173 *
1174 * For AP/GO and mesh mode, the channel can be set with the
1175 * channel userspace API, but is only stored and passed to the
1176 * low-level driver when the AP starts or the mesh is joined.
1177 * This is for backward compatibility, userspace can also give
1178 * the channel in the start-ap or join-mesh commands instead.
f444de05
JB		 1179 *
1180 * Monitors are special as they are normally slaved to
e8c9bd5b
JB		 1181 * whatever else is going on, so they have their own special
1182 * operation to set the monitor channel if possible.
f444de05
JB		 1183 */
1184 return !wdev ||
1185 wdev->iftype == NL80211_IFTYPE_AP ||
f444de05 1186 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
074ac8df
JB		 1187 wdev->iftype == NL80211_IFTYPE_MONITOR ||
1188 wdev->iftype == NL80211_IFTYPE_P2P_GO;
f444de05
JB		 1189}
1190
cd6c6598
JB		 1191static bool nl80211_valid_channel_type(struct genl_info *info,
1192 enum nl80211_channel_type *channel_type)
1193{
1194 enum nl80211_channel_type tmp;
1195
1196 if (!info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE])
1197 return false;
1198
1199 tmp = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1200 if (tmp != NL80211_CHAN_NO_HT &&
1201 tmp != NL80211_CHAN_HT20 &&
1202 tmp != NL80211_CHAN_HT40PLUS &&
1203 tmp != NL80211_CHAN_HT40MINUS)
1204 return false;
1205
1206 if (channel_type)
1207 *channel_type = tmp;
1208
1209 return true;
1210}
1211
f444de05
JB		 1212static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
1213 struct wireless_dev *wdev,
1214 struct genl_info *info)
1215{
aa430da4 1216 struct ieee80211_channel *channel;
f444de05
JB		 1217 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
1218 u32 freq;
1219 int result;
e8c9bd5b
JB		 1220 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
1221
1222 if (wdev)
1223 iftype = wdev->iftype;
f444de05
JB		 1224
1225 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
1226 return -EINVAL;
1227
1228 if (!nl80211_can_set_dev_channel(wdev))
1229 return -EOPNOTSUPP;
1230
cd6c6598
JB		 1231 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
1232 !nl80211_valid_channel_type(info, &channel_type))
1233 return -EINVAL;
f444de05
JB		 1234
1235 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
1236
1237 mutex_lock(&rdev->devlist_mtx);
e8c9bd5b 1238 switch (iftype) {
aa430da4
JB		 1239 case NL80211_IFTYPE_AP:
1240 case NL80211_IFTYPE_P2P_GO:
1241 if (wdev->beacon_interval) {
1242 result = -EBUSY;
1243 break;
1244 }
1245 channel = rdev_freq_to_chan(rdev, freq, channel_type);
1246 if (!channel || !cfg80211_can_beacon_sec_chan(&rdev->wiphy,
1247 channel,
1248 channel_type)) {
1249 result = -EINVAL;
1250 break;
1251 }
1252 wdev->preset_chan = channel;
1253 wdev->preset_chantype = channel_type;
1254 result = 0;
1255 break;
cc1d2806
JB		 1256 case NL80211_IFTYPE_MESH_POINT:
1257 result = cfg80211_set_mesh_freq(rdev, wdev, freq, channel_type);
1258 break;
e8c9bd5b
JB		 1259 case NL80211_IFTYPE_MONITOR:
1260 result = cfg80211_set_monitor_channel(rdev, freq, channel_type);
1261 break;
aa430da4 1262 default:
e8c9bd5b 1263 result = -EINVAL;
f444de05
JB		 1264 }
1265 mutex_unlock(&rdev->devlist_mtx);
1266
1267 return result;
1268}
1269
1270static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
1271{
4c476991
JB		 1272 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1273 struct net_device *netdev = info->user_ptr[1];
f444de05 1274
4c476991 1275 return __nl80211_set_channel(rdev, netdev->ieee80211_ptr, info);
f444de05
JB		 1276}
1277
e8347eba
BJ		 1278static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
1279{
43b19952
JB		 1280 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1281 struct net_device *dev = info->user_ptr[1];
1282 struct wireless_dev *wdev = dev->ieee80211_ptr;
388ac775 1283 const u8 *bssid;
e8347eba
BJ		 1284
1285 if (!info->attrs[NL80211_ATTR_MAC])
1286 return -EINVAL;
1287
43b19952
JB		 1288 if (netif_running(dev))
1289 return -EBUSY;
e8347eba 1290
43b19952
JB		 1291 if (!rdev->ops->set_wds_peer)
1292 return -EOPNOTSUPP;
e8347eba 1293
43b19952
JB		 1294 if (wdev->iftype != NL80211_IFTYPE_WDS)
1295 return -EOPNOTSUPP;
e8347eba
BJ		 1296
1297 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
43b19952 1298 return rdev->ops->set_wds_peer(wdev->wiphy, dev, bssid);
e8347eba
BJ		 1299}
1300
1301
55682965
JB		 1302static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
1303{
1304 struct cfg80211_registered_device *rdev;
f444de05
JB		 1305 struct net_device *netdev = NULL;
1306 struct wireless_dev *wdev;
a1e567c8 1307 int result = 0, rem_txq_params = 0;
31888487 1308 struct nlattr *nl_txq_params;
b9a5f8ca
JM		 1309 u32 changed;
1310 u8 retry_short = 0, retry_long = 0;
1311 u32 frag_threshold = 0, rts_threshold = 0;
81077e82 1312 u8 coverage_class = 0;
55682965 1313
f444de05
JB		 1314 /*
1315 * Try to find the wiphy and netdev. Normally this
1316 * function shouldn't need the netdev, but this is
1317 * done for backward compatibility -- previously
1318 * setting the channel was done per wiphy, but now
1319 * it is per netdev. Previous userland like hostapd
1320 * also passed a netdev to set_wiphy, so that it is
1321 * possible to let that go to the right netdev!
1322 */
4bbf4d56
JB		 1323 mutex_lock(&cfg80211_mutex);
1324
f444de05
JB		 1325 if (info->attrs[NL80211_ATTR_IFINDEX]) {
1326 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
1327
1328 netdev = dev_get_by_index(genl_info_net(info), ifindex);
1329 if (netdev && netdev->ieee80211_ptr) {
1330 rdev = wiphy_to_dev(netdev->ieee80211_ptr->wiphy);
1331 mutex_lock(&rdev->mtx);
1332 } else
1333 netdev = NULL;
4bbf4d56
JB		 1334 }
1335
f444de05
JB		 1336 if (!netdev) {
1337 rdev = __cfg80211_rdev_from_info(info);
1338 if (IS_ERR(rdev)) {
1339 mutex_unlock(&cfg80211_mutex);
4c476991 1340 return PTR_ERR(rdev);
f444de05
JB		 1341 }
1342 wdev = NULL;
1343 netdev = NULL;
1344 result = 0;
1345
1346 mutex_lock(&rdev->mtx);
cc1d2806 1347 } else if (nl80211_can_set_dev_channel(netdev->ieee80211_ptr))
f444de05
JB		 1348 wdev = netdev->ieee80211_ptr;
1349 else
1350 wdev = NULL;
1351
1352 /*
1353 * end workaround code, by now the rdev is available
1354 * and locked, and wdev may or may not be NULL.
1355 */
4bbf4d56
JB		 1356
1357 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
31888487
JM		 1358 result = cfg80211_dev_rename(
1359 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
4bbf4d56
JB		 1360
1361 mutex_unlock(&cfg80211_mutex);
1362
1363 if (result)
1364 goto bad_res;
31888487
JM		 1365
1366 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
1367 struct ieee80211_txq_params txq_params;
1368 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
1369
1370 if (!rdev->ops->set_txq_params) {
1371 result = -EOPNOTSUPP;
1372 goto bad_res;
1373 }
1374
f70f01c2
EP		 1375 if (!netdev) {
1376 result = -EINVAL;
1377 goto bad_res;
1378 }
1379
133a3ff2
JB		 1380 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
1381 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
1382 result = -EINVAL;
1383 goto bad_res;
1384 }
1385
2b5f8b0b
JB		 1386 if (!netif_running(netdev)) {
1387 result = -ENETDOWN;
1388 goto bad_res;
1389 }
1390
31888487
JM		 1391 nla_for_each_nested(nl_txq_params,
1392 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
1393 rem_txq_params) {
1394 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
1395 nla_data(nl_txq_params),
1396 nla_len(nl_txq_params),
1397 txq_params_policy);
1398 result = parse_txq_params(tb, &txq_params);
1399 if (result)
1400 goto bad_res;
1401
1402 result = rdev->ops->set_txq_params(&rdev->wiphy,
f70f01c2 1403 netdev,
31888487
JM		 1404 &txq_params);
1405 if (result)
1406 goto bad_res;
1407 }
1408 }
55682965 1409
72bdcf34 1410 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
f444de05 1411 result = __nl80211_set_channel(rdev, wdev, info);
72bdcf34
JM		 1412 if (result)
1413 goto bad_res;
1414 }
1415
98d2ff8b
JO		 1416 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
1417 enum nl80211_tx_power_setting type;
1418 int idx, mbm = 0;
1419
1420 if (!rdev->ops->set_tx_power) {
60ea385f 1421 result = -EOPNOTSUPP;
98d2ff8b
JO		 1422 goto bad_res;
1423 }
1424
1425 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
1426 type = nla_get_u32(info->attrs[idx]);
1427
1428 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
1429 (type != NL80211_TX_POWER_AUTOMATIC)) {
1430 result = -EINVAL;
1431 goto bad_res;
1432 }
1433
1434 if (type != NL80211_TX_POWER_AUTOMATIC) {
1435 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
1436 mbm = nla_get_u32(info->attrs[idx]);
1437 }
1438
1439 result = rdev->ops->set_tx_power(&rdev->wiphy, type, mbm);
1440 if (result)
1441 goto bad_res;
1442 }
1443
afe0cbf8
BR		 1444 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
1445 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
1446 u32 tx_ant, rx_ant;
7f531e03
BR		 1447 if ((!rdev->wiphy.available_antennas_tx &&
1448 !rdev->wiphy.available_antennas_rx) ||
1449 !rdev->ops->set_antenna) {
afe0cbf8
BR		 1450 result = -EOPNOTSUPP;
1451 goto bad_res;
1452 }
1453
1454 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
1455 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
1456
a7ffac95 1457 /* reject antenna configurations which don't match the
7f531e03
BR		 1458 * available antenna masks, except for the "all" mask */
1459 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
1460 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
a7ffac95
BR		 1461 result = -EINVAL;
1462 goto bad_res;
1463 }
1464
7f531e03
BR		 1465 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
1466 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
a7ffac95 1467
afe0cbf8
BR		 1468 result = rdev->ops->set_antenna(&rdev->wiphy, tx_ant, rx_ant);
1469 if (result)
1470 goto bad_res;
1471 }
1472
b9a5f8ca
JM		 1473 changed = 0;
1474
1475 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
1476 retry_short = nla_get_u8(
1477 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
1478 if (retry_short == 0) {
1479 result = -EINVAL;
1480 goto bad_res;
1481 }
1482 changed |= WIPHY_PARAM_RETRY_SHORT;
1483 }
1484
1485 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
1486 retry_long = nla_get_u8(
1487 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
1488 if (retry_long == 0) {
1489 result = -EINVAL;
1490 goto bad_res;
1491 }
1492 changed |= WIPHY_PARAM_RETRY_LONG;
1493 }
1494
1495 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
1496 frag_threshold = nla_get_u32(
1497 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
1498 if (frag_threshold < 256) {
1499 result = -EINVAL;
1500 goto bad_res;
1501 }
1502 if (frag_threshold != (u32) -1) {
1503 /*
1504 * Fragments (apart from the last one) are required to
1505 * have even length. Make the fragmentation code
1506 * simpler by stripping LSB should someone try to use
1507 * odd threshold value.
1508 */
1509 frag_threshold &= ~0x1;
1510 }
1511 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
1512 }
1513
1514 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
1515 rts_threshold = nla_get_u32(
1516 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
1517 changed |= WIPHY_PARAM_RTS_THRESHOLD;
1518 }
1519
81077e82
LT		 1520 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
1521 coverage_class = nla_get_u8(
1522 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
1523 changed |= WIPHY_PARAM_COVERAGE_CLASS;
1524 }
1525
b9a5f8ca
JM		 1526 if (changed) {
1527 u8 old_retry_short, old_retry_long;
1528 u32 old_frag_threshold, old_rts_threshold;
81077e82 1529 u8 old_coverage_class;
b9a5f8ca
JM		 1530
1531 if (!rdev->ops->set_wiphy_params) {
1532 result = -EOPNOTSUPP;
1533 goto bad_res;
1534 }
1535
1536 old_retry_short = rdev->wiphy.retry_short;
1537 old_retry_long = rdev->wiphy.retry_long;
1538 old_frag_threshold = rdev->wiphy.frag_threshold;
1539 old_rts_threshold = rdev->wiphy.rts_threshold;
81077e82 1540 old_coverage_class = rdev->wiphy.coverage_class;
b9a5f8ca
JM		 1541
1542 if (changed & WIPHY_PARAM_RETRY_SHORT)
1543 rdev->wiphy.retry_short = retry_short;
1544 if (changed & WIPHY_PARAM_RETRY_LONG)
1545 rdev->wiphy.retry_long = retry_long;
1546 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1547 rdev->wiphy.frag_threshold = frag_threshold;
1548 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1549 rdev->wiphy.rts_threshold = rts_threshold;
81077e82
LT		 1550 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1551 rdev->wiphy.coverage_class = coverage_class;
b9a5f8ca
JM		 1552
1553 result = rdev->ops->set_wiphy_params(&rdev->wiphy, changed);
1554 if (result) {
1555 rdev->wiphy.retry_short = old_retry_short;
1556 rdev->wiphy.retry_long = old_retry_long;
1557 rdev->wiphy.frag_threshold = old_frag_threshold;
1558 rdev->wiphy.rts_threshold = old_rts_threshold;
81077e82 1559 rdev->wiphy.coverage_class = old_coverage_class;
b9a5f8ca
JM		 1560 }
1561 }
72bdcf34 1562
306d6112 1563 bad_res:
4bbf4d56 1564 mutex_unlock(&rdev->mtx);
f444de05
JB		 1565 if (netdev)
1566 dev_put(netdev);
55682965
JB		 1567 return result;
1568}
1569
1570
1571static int nl80211_send_iface(struct sk_buff *msg, u32 pid, u32 seq, int flags,
d726405a 1572 struct cfg80211_registered_device *rdev,
55682965
JB		 1573 struct net_device *dev)
1574{
1575 void *hdr;
1576
1577 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_INTERFACE);
1578 if (!hdr)
1579 return -1;
1580
9360ffd1
DM		 1581 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
1582 nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
1583 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name) ||
1584 nla_put_u32(msg, NL80211_ATTR_IFTYPE,
1585 dev->ieee80211_ptr->iftype) ||
1586 nla_put_u32(msg, NL80211_ATTR_GENERATION,
1587 rdev->devlist_generation ^
1588 (cfg80211_rdev_list_generation << 2)))
1589 goto nla_put_failure;
f5ea9120 1590
d91df0e3
PF		 1591 if (rdev->ops->get_channel) {
1592 struct ieee80211_channel *chan;
1593 enum nl80211_channel_type channel_type;
1594
1595 chan = rdev->ops->get_channel(&rdev->wiphy, &channel_type);
59ef43e6
JL		 1596 if (chan &&
1597 (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
1598 chan->center_freq) ||
1599 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
1600 channel_type)))
1601 goto nla_put_failure;
d91df0e3
PF		 1602 }
1603
55682965
JB		 1604 return genlmsg_end(msg, hdr);
1605
1606 nla_put_failure:
bc3ed28c
TG		 1607 genlmsg_cancel(msg, hdr);
1608 return -EMSGSIZE;
55682965
JB		 1609}
1610
1611static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
1612{
1613 int wp_idx = 0;
1614 int if_idx = 0;
1615 int wp_start = cb->args[0];
1616 int if_start = cb->args[1];
f5ea9120 1617 struct cfg80211_registered_device *rdev;
55682965
JB		 1618 struct wireless_dev *wdev;
1619
a1794390 1620 mutex_lock(&cfg80211_mutex);
f5ea9120
JB		 1621 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1622 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
463d0183 1623 continue;
bba95fef
JB		 1624 if (wp_idx < wp_start) {
1625 wp_idx++;
55682965 1626 continue;
bba95fef 1627 }
55682965
JB		 1628 if_idx = 0;
1629
f5ea9120
JB		 1630 mutex_lock(&rdev->devlist_mtx);
1631 list_for_each_entry(wdev, &rdev->netdev_list, list) {
bba95fef
JB		 1632 if (if_idx < if_start) {
1633 if_idx++;
55682965 1634 continue;
bba95fef 1635 }
55682965
JB		 1636 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).pid,
1637 cb->nlh->nlmsg_seq, NLM_F_MULTI,
f5ea9120
JB		 1638 rdev, wdev->netdev) < 0) {
1639 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1640 goto out;
1641 }
1642 if_idx++;
55682965 1643 }
f5ea9120 1644 mutex_unlock(&rdev->devlist_mtx);
bba95fef
JB		 1645
1646 wp_idx++;
55682965 1647 }
bba95fef 1648 out:
a1794390 1649 mutex_unlock(&cfg80211_mutex);
55682965
JB		 1650
1651 cb->args[0] = wp_idx;
1652 cb->args[1] = if_idx;
1653
1654 return skb->len;
1655}
1656
1657static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
1658{
1659 struct sk_buff *msg;
4c476991
JB		 1660 struct cfg80211_registered_device *dev = info->user_ptr[0];
1661 struct net_device *netdev = info->user_ptr[1];
55682965 1662
fd2120ca 1663 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965 1664 if (!msg)
4c476991 1665 return -ENOMEM;
55682965 1666
d726405a 1667 if (nl80211_send_iface(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 1668 dev, netdev) < 0) {
1669 nlmsg_free(msg);
1670 return -ENOBUFS;
1671 }
55682965 1672
134e6375 1673 return genlmsg_reply(msg, info);
55682965
JB		 1674}
1675
66f7ac50
MW		 1676static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
1677 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
1678 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
1679 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
1680 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
1681 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
1682};
1683
1684static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
1685{
1686 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
1687 int flag;
1688
1689 *mntrflags = 0;
1690
1691 if (!nla)
1692 return -EINVAL;
1693
1694 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
1695 nla, mntr_flags_policy))
1696 return -EINVAL;
1697
1698 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
1699 if (flags[flag])
1700 *mntrflags |= (1<<flag);
1701
1702 return 0;
1703}
1704
9bc383de 1705static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
ad4bb6f8
JB		 1706 struct net_device *netdev, u8 use_4addr,
1707 enum nl80211_iftype iftype)
9bc383de 1708{
ad4bb6f8 1709 if (!use_4addr) {
f350a0a8 1710 if (netdev && (netdev->priv_flags & IFF_BRIDGE_PORT))
ad4bb6f8 1711 return -EBUSY;
9bc383de 1712 return 0;
ad4bb6f8 1713 }
9bc383de
JB		 1714
1715 switch (iftype) {
1716 case NL80211_IFTYPE_AP_VLAN:
1717 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
1718 return 0;
1719 break;
1720 case NL80211_IFTYPE_STATION:
1721 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
1722 return 0;
1723 break;
1724 default:
1725 break;
1726 }
1727
1728 return -EOPNOTSUPP;
1729}
1730
55682965
JB		 1731static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
1732{
4c476991 1733 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1734 struct vif_params params;
e36d56b6 1735 int err;
04a773ad 1736 enum nl80211_iftype otype, ntype;
4c476991 1737 struct net_device *dev = info->user_ptr[1];
92ffe055 1738 u32 _flags, *flags = NULL;
ac7f9cfa 1739 bool change = false;
55682965 1740
2ec600d6
LCC		 1741 memset(&params, 0, sizeof(params));
1742
04a773ad 1743 otype = ntype = dev->ieee80211_ptr->iftype;
55682965 1744
723b038d 1745 if (info->attrs[NL80211_ATTR_IFTYPE]) {
ac7f9cfa 1746 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
04a773ad 1747 if (otype != ntype)
ac7f9cfa 1748 change = true;
4c476991
JB		 1749 if (ntype > NL80211_IFTYPE_MAX)
1750 return -EINVAL;
723b038d
JB		 1751 }
1752
92ffe055 1753 if (info->attrs[NL80211_ATTR_MESH_ID]) {
29cbe68c
JB		 1754 struct wireless_dev *wdev = dev->ieee80211_ptr;
1755
4c476991
JB		 1756 if (ntype != NL80211_IFTYPE_MESH_POINT)
1757 return -EINVAL;
29cbe68c
JB		 1758 if (netif_running(dev))
1759 return -EBUSY;
1760
1761 wdev_lock(wdev);
1762 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1763 IEEE80211_MAX_MESH_ID_LEN);
1764 wdev->mesh_id_up_len =
1765 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1766 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1767 wdev->mesh_id_up_len);
1768 wdev_unlock(wdev);
2ec600d6
LCC		 1769 }
1770
8b787643
FF		 1771 if (info->attrs[NL80211_ATTR_4ADDR]) {
1772 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
1773 change = true;
ad4bb6f8 1774 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
9bc383de 1775 if (err)
4c476991 1776 return err;
8b787643
FF		 1777 } else {
1778 params.use_4addr = -1;
1779 }
1780
92ffe055 1781 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
4c476991
JB		 1782 if (ntype != NL80211_IFTYPE_MONITOR)
1783 return -EINVAL;
92ffe055
JB		 1784 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
1785 &_flags);
ac7f9cfa 1786 if (err)
4c476991 1787 return err;
ac7f9cfa
JB		 1788
1789 flags = &_flags;
1790 change = true;
92ffe055 1791 }
3b85875a 1792
ac7f9cfa 1793 if (change)
3d54d255 1794 err = cfg80211_change_iface(rdev, dev, ntype, flags, &params);
ac7f9cfa
JB		 1795 else
1796 err = 0;
60719ffd 1797
9bc383de
JB		 1798 if (!err && params.use_4addr != -1)
1799 dev->ieee80211_ptr->use_4addr = params.use_4addr;
1800
55682965
JB		 1801 return err;
1802}
1803
1804static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
1805{
4c476991 1806 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 1807 struct vif_params params;
f9e10ce4 1808 struct net_device *dev;
55682965
JB		 1809 int err;
1810 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
66f7ac50 1811 u32 flags;
55682965 1812
2ec600d6
LCC		 1813 memset(&params, 0, sizeof(params));
1814
55682965
JB		 1815 if (!info->attrs[NL80211_ATTR_IFNAME])
1816 return -EINVAL;
1817
1818 if (info->attrs[NL80211_ATTR_IFTYPE]) {
1819 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
1820 if (type > NL80211_IFTYPE_MAX)
1821 return -EINVAL;
1822 }
1823
79c97e97 1824 if (!rdev->ops->add_virtual_intf ||
4c476991
JB		 1825 !(rdev->wiphy.interface_modes & (1 << type)))
1826 return -EOPNOTSUPP;
55682965 1827
9bc383de 1828 if (info->attrs[NL80211_ATTR_4ADDR]) {
8b787643 1829 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
ad4bb6f8 1830 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
9bc383de 1831 if (err)
4c476991 1832 return err;
9bc383de 1833 }
8b787643 1834
66f7ac50
MW		 1835 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
1836 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
1837 &flags);
f9e10ce4 1838 dev = rdev->ops->add_virtual_intf(&rdev->wiphy,
66f7ac50 1839 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
2ec600d6 1840 type, err ? NULL : &flags, &params);
f9e10ce4
JB		 1841 if (IS_ERR(dev))
1842 return PTR_ERR(dev);
2ec600d6 1843
29cbe68c
JB		 1844 if (type == NL80211_IFTYPE_MESH_POINT &&
1845 info->attrs[NL80211_ATTR_MESH_ID]) {
1846 struct wireless_dev *wdev = dev->ieee80211_ptr;
1847
1848 wdev_lock(wdev);
1849 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
1850 IEEE80211_MAX_MESH_ID_LEN);
1851 wdev->mesh_id_up_len =
1852 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
1853 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
1854 wdev->mesh_id_up_len);
1855 wdev_unlock(wdev);
1856 }
1857
f9e10ce4 1858 return 0;
55682965
JB		 1859}
1860
1861static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
1862{
4c476991
JB		 1863 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1864 struct net_device *dev = info->user_ptr[1];
55682965 1865
4c476991
JB		 1866 if (!rdev->ops->del_virtual_intf)
1867 return -EOPNOTSUPP;
55682965 1868
4c476991 1869 return rdev->ops->del_virtual_intf(&rdev->wiphy, dev);
55682965
JB		 1870}
1871
1d9d9213
SW		 1872static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
1873{
1874 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1875 struct net_device *dev = info->user_ptr[1];
1876 u16 noack_map;
1877
1878 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
1879 return -EINVAL;
1880
1881 if (!rdev->ops->set_noack_map)
1882 return -EOPNOTSUPP;
1883
1884 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
1885
1886 return rdev->ops->set_noack_map(&rdev->wiphy, dev, noack_map);
1887}
1888
41ade00f
JB		 1889struct get_key_cookie {
1890 struct sk_buff *msg;
1891 int error;
b9454e83 1892 int idx;
41ade00f
JB		 1893};
1894
1895static void get_key_callback(void *c, struct key_params *params)
1896{
b9454e83 1897 struct nlattr *key;
41ade00f
JB		 1898 struct get_key_cookie *cookie = c;
1899
9360ffd1
DM		 1900 if ((params->key &&
1901 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
1902 params->key_len, params->key)) ||
1903 (params->seq &&
1904 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
1905 params->seq_len, params->seq)) ||
1906 (params->cipher &&
1907 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
1908 params->cipher)))
1909 goto nla_put_failure;
41ade00f 1910
b9454e83
JB		 1911 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
1912 if (!key)
1913 goto nla_put_failure;
1914
9360ffd1
DM		 1915 if ((params->key &&
1916 nla_put(cookie->msg, NL80211_KEY_DATA,
1917 params->key_len, params->key)) ||
1918 (params->seq &&
1919 nla_put(cookie->msg, NL80211_KEY_SEQ,
1920 params->seq_len, params->seq)) ||
1921 (params->cipher &&
1922 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
1923 params->cipher)))
1924 goto nla_put_failure;
b9454e83 1925
9360ffd1
DM		 1926 if (nla_put_u8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx))
1927 goto nla_put_failure;
b9454e83
JB		 1928
1929 nla_nest_end(cookie->msg, key);
1930
41ade00f
JB		 1931 return;
1932 nla_put_failure:
1933 cookie->error = 1;
1934}
1935
1936static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
1937{
4c476991 1938 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 1939 int err;
4c476991 1940 struct net_device *dev = info->user_ptr[1];
41ade00f 1941 u8 key_idx = 0;
e31b8213
JB		 1942 const u8 *mac_addr = NULL;
1943 bool pairwise;
41ade00f
JB		 1944 struct get_key_cookie cookie = {
1945 .error = 0,
1946 };
1947 void *hdr;
1948 struct sk_buff *msg;
1949
1950 if (info->attrs[NL80211_ATTR_KEY_IDX])
1951 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
1952
3cfcf6ac 1953 if (key_idx > 5)
41ade00f
JB		 1954 return -EINVAL;
1955
1956 if (info->attrs[NL80211_ATTR_MAC])
1957 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
1958
e31b8213
JB		 1959 pairwise = !!mac_addr;
1960 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
1961 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
1962 if (kt >= NUM_NL80211_KEYTYPES)
1963 return -EINVAL;
1964 if (kt != NL80211_KEYTYPE_GROUP &&
1965 kt != NL80211_KEYTYPE_PAIRWISE)
1966 return -EINVAL;
1967 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
1968 }
1969
4c476991
JB		 1970 if (!rdev->ops->get_key)
1971 return -EOPNOTSUPP;
41ade00f 1972
fd2120ca 1973 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 1974 if (!msg)
1975 return -ENOMEM;
41ade00f
JB		 1976
1977 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
1978 NL80211_CMD_NEW_KEY);
4c476991
JB		 1979 if (IS_ERR(hdr))
1980 return PTR_ERR(hdr);
41ade00f
JB		 1981
1982 cookie.msg = msg;
b9454e83 1983 cookie.idx = key_idx;
41ade00f 1984
9360ffd1
DM		 1985 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
1986 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
1987 goto nla_put_failure;
1988 if (mac_addr &&
1989 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
1990 goto nla_put_failure;
41ade00f 1991
e31b8213
JB		 1992 if (pairwise && mac_addr &&
1993 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
1994 return -ENOENT;
1995
1996 err = rdev->ops->get_key(&rdev->wiphy, dev, key_idx, pairwise,
1997 mac_addr, &cookie, get_key_callback);
41ade00f
JB		 1998
1999 if (err)
6c95e2a2 2000 goto free_msg;
41ade00f
JB		 2001
2002 if (cookie.error)
2003 goto nla_put_failure;
2004
2005 genlmsg_end(msg, hdr);
4c476991 2006 return genlmsg_reply(msg, info);
41ade00f
JB		 2007
2008 nla_put_failure:
2009 err = -ENOBUFS;
6c95e2a2 2010 free_msg:
41ade00f 2011 nlmsg_free(msg);
41ade00f
JB		 2012 return err;
2013}
2014
2015static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
2016{
4c476991 2017 struct cfg80211_registered_device *rdev = info->user_ptr[0];
b9454e83 2018 struct key_parse key;
41ade00f 2019 int err;
4c476991 2020 struct net_device *dev = info->user_ptr[1];
41ade00f 2021
b9454e83
JB		 2022 err = nl80211_parse_key(info, &key);
2023 if (err)
2024 return err;
41ade00f 2025
b9454e83 2026 if (key.idx < 0)
41ade00f
JB		 2027 return -EINVAL;
2028
b9454e83
JB		 2029 /* only support setting default key */
2030 if (!key.def && !key.defmgmt)
41ade00f
JB		 2031 return -EINVAL;
2032
dbd2fd65 2033 wdev_lock(dev->ieee80211_ptr);
3cfcf6ac 2034
dbd2fd65
JB		 2035 if (key.def) {
2036 if (!rdev->ops->set_default_key) {
2037 err = -EOPNOTSUPP;
2038 goto out;
2039 }
41ade00f 2040
dbd2fd65
JB		 2041 err = nl80211_key_allowed(dev->ieee80211_ptr);
2042 if (err)
2043 goto out;
2044
dbd2fd65
JB		 2045 err = rdev->ops->set_default_key(&rdev->wiphy, dev, key.idx,
2046 key.def_uni, key.def_multi);
2047
2048 if (err)
2049 goto out;
fffd0934 2050
3d23e349 2051#ifdef CONFIG_CFG80211_WEXT
dbd2fd65
JB		 2052 dev->ieee80211_ptr->wext.default_key = key.idx;
2053#endif
2054 } else {
2055 if (key.def_uni || !key.def_multi) {
2056 err = -EINVAL;
2057 goto out;
2058 }
2059
2060 if (!rdev->ops->set_default_mgmt_key) {
2061 err = -EOPNOTSUPP;
2062 goto out;
2063 }
2064
2065 err = nl80211_key_allowed(dev->ieee80211_ptr);
2066 if (err)
2067 goto out;
2068
2069 err = rdev->ops->set_default_mgmt_key(&rdev->wiphy,
2070 dev, key.idx);
2071 if (err)
2072 goto out;
2073
2074#ifdef CONFIG_CFG80211_WEXT
2075 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
08645126 2076#endif
dbd2fd65
JB		 2077 }
2078
2079 out:
fffd0934 2080 wdev_unlock(dev->ieee80211_ptr);
41ade00f 2081
41ade00f
JB		 2082 return err;
2083}
2084
2085static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
2086{
4c476991 2087 struct cfg80211_registered_device *rdev = info->user_ptr[0];
fffd0934 2088 int err;
4c476991 2089 struct net_device *dev = info->user_ptr[1];
b9454e83 2090 struct key_parse key;
e31b8213 2091 const u8 *mac_addr = NULL;
41ade00f 2092
b9454e83
JB		 2093 err = nl80211_parse_key(info, &key);
2094 if (err)
2095 return err;
41ade00f 2096
b9454e83 2097 if (!key.p.key)
41ade00f
JB		 2098 return -EINVAL;
2099
41ade00f
JB		 2100 if (info->attrs[NL80211_ATTR_MAC])
2101 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2102
e31b8213
JB		 2103 if (key.type == -1) {
2104 if (mac_addr)
2105 key.type = NL80211_KEYTYPE_PAIRWISE;
2106 else
2107 key.type = NL80211_KEYTYPE_GROUP;
2108 }
2109
2110 /* for now */
2111 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2112 key.type != NL80211_KEYTYPE_GROUP)
2113 return -EINVAL;
2114
4c476991
JB		 2115 if (!rdev->ops->add_key)
2116 return -EOPNOTSUPP;
25e47c18 2117
e31b8213
JB		 2118 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
2119 key.type == NL80211_KEYTYPE_PAIRWISE,
2120 mac_addr))
4c476991 2121 return -EINVAL;
41ade00f 2122
fffd0934
JB		 2123 wdev_lock(dev->ieee80211_ptr);
2124 err = nl80211_key_allowed(dev->ieee80211_ptr);
2125 if (!err)
2126 err = rdev->ops->add_key(&rdev->wiphy, dev, key.idx,
e31b8213 2127 key.type == NL80211_KEYTYPE_PAIRWISE,
fffd0934
JB		 2128 mac_addr, &key.p);
2129 wdev_unlock(dev->ieee80211_ptr);
41ade00f 2130
41ade00f
JB		 2131 return err;
2132}
2133
2134static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
2135{
4c476991 2136 struct cfg80211_registered_device *rdev = info->user_ptr[0];
41ade00f 2137 int err;
4c476991 2138 struct net_device *dev = info->user_ptr[1];
41ade00f 2139 u8 *mac_addr = NULL;
b9454e83 2140 struct key_parse key;
41ade00f 2141
b9454e83
JB		 2142 err = nl80211_parse_key(info, &key);
2143 if (err)
2144 return err;
41ade00f
JB		 2145
2146 if (info->attrs[NL80211_ATTR_MAC])
2147 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2148
e31b8213
JB		 2149 if (key.type == -1) {
2150 if (mac_addr)
2151 key.type = NL80211_KEYTYPE_PAIRWISE;
2152 else
2153 key.type = NL80211_KEYTYPE_GROUP;
2154 }
2155
2156 /* for now */
2157 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2158 key.type != NL80211_KEYTYPE_GROUP)
2159 return -EINVAL;
2160
4c476991
JB		 2161 if (!rdev->ops->del_key)
2162 return -EOPNOTSUPP;
41ade00f 2163
fffd0934
JB		 2164 wdev_lock(dev->ieee80211_ptr);
2165 err = nl80211_key_allowed(dev->ieee80211_ptr);
e31b8213
JB		 2166
2167 if (key.type == NL80211_KEYTYPE_PAIRWISE && mac_addr &&
2168 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2169 err = -ENOENT;
2170
fffd0934 2171 if (!err)
e31b8213
JB		 2172 err = rdev->ops->del_key(&rdev->wiphy, dev, key.idx,
2173 key.type == NL80211_KEYTYPE_PAIRWISE,
2174 mac_addr);
41ade00f 2175
3d23e349 2176#ifdef CONFIG_CFG80211_WEXT
08645126 2177 if (!err) {
b9454e83 2178 if (key.idx == dev->ieee80211_ptr->wext.default_key)
08645126 2179 dev->ieee80211_ptr->wext.default_key = -1;
b9454e83 2180 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
08645126
JB		 2181 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
2182 }
2183#endif
fffd0934 2184 wdev_unlock(dev->ieee80211_ptr);
08645126 2185
41ade00f
JB		 2186 return err;
2187}
2188
8860020e
JB		 2189static int nl80211_parse_beacon(struct genl_info *info,
2190 struct cfg80211_beacon_data *bcn)
ed1b6cc7 2191{
8860020e 2192 bool haveinfo = false;
ed1b6cc7 2193
9946ecfb
JM		 2194 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]) ||
2195 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]) ||
2196 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_PROBE_RESP]) ||
2197 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]))
f4a11bb0
JB		 2198 return -EINVAL;
2199
8860020e 2200 memset(bcn, 0, sizeof(*bcn));
ed1b6cc7 2201
ed1b6cc7 2202 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
8860020e
JB		 2203 bcn->head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2204 bcn->head_len = nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2205 if (!bcn->head_len)
2206 return -EINVAL;
2207 haveinfo = true;
ed1b6cc7
JB		 2208 }
2209
2210 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
8860020e
JB		 2211 bcn->tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2212 bcn->tail_len =
ed1b6cc7 2213 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
8860020e 2214 haveinfo = true;
ed1b6cc7
JB		 2215 }
2216
4c476991
JB		 2217 if (!haveinfo)
2218 return -EINVAL;
3b85875a 2219
9946ecfb 2220 if (info->attrs[NL80211_ATTR_IE]) {
8860020e
JB		 2221 bcn->beacon_ies = nla_data(info->attrs[NL80211_ATTR_IE]);
2222 bcn->beacon_ies_len = nla_len(info->attrs[NL80211_ATTR_IE]);
9946ecfb
JM		 2223 }
2224
2225 if (info->attrs[NL80211_ATTR_IE_PROBE_RESP]) {
8860020e 2226 bcn->proberesp_ies =
9946ecfb 2227 nla_data(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
8860020e 2228 bcn->proberesp_ies_len =
9946ecfb
JM		 2229 nla_len(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2230 }
2231
2232 if (info->attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
8860020e 2233 bcn->assocresp_ies =
9946ecfb 2234 nla_data(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
8860020e 2235 bcn->assocresp_ies_len =
9946ecfb
JM		 2236 nla_len(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2237 }
2238
00f740e1 2239 if (info->attrs[NL80211_ATTR_PROBE_RESP]) {
8860020e 2240 bcn->probe_resp =
00f740e1 2241 nla_data(info->attrs[NL80211_ATTR_PROBE_RESP]);
8860020e 2242 bcn->probe_resp_len =
00f740e1
AN		 2243 nla_len(info->attrs[NL80211_ATTR_PROBE_RESP]);
2244 }
2245
8860020e
JB		 2246 return 0;
2247}
2248
2249static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
2250{
2251 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2252 struct net_device *dev = info->user_ptr[1];
2253 struct wireless_dev *wdev = dev->ieee80211_ptr;
2254 struct cfg80211_ap_settings params;
2255 int err;
2256
2257 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2258 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2259 return -EOPNOTSUPP;
2260
2261 if (!rdev->ops->start_ap)
2262 return -EOPNOTSUPP;
2263
2264 if (wdev->beacon_interval)
2265 return -EALREADY;
2266
2267 memset(&params, 0, sizeof(params));
2268
2269 /* these are required for START_AP */
2270 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
2271 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
2272 !info->attrs[NL80211_ATTR_BEACON_HEAD])
2273 return -EINVAL;
2274
2275 err = nl80211_parse_beacon(info, &params.beacon);
2276 if (err)
2277 return err;
2278
2279 params.beacon_interval =
2280 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
2281 params.dtim_period =
2282 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
2283
2284 err = cfg80211_validate_beacon_int(rdev, params.beacon_interval);
2285 if (err)
2286 return err;
2287
2288 /*
2289 * In theory, some of these attributes should be required here
2290 * but since they were not used when the command was originally
2291 * added, keep them optional for old user space programs to let
2292 * them continue to work with drivers that do not need the
2293 * additional information -- drivers must check!
2294 */
2295 if (info->attrs[NL80211_ATTR_SSID]) {
2296 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
2297 params.ssid_len =
2298 nla_len(info->attrs[NL80211_ATTR_SSID]);
2299 if (params.ssid_len == 0 ||
2300 params.ssid_len > IEEE80211_MAX_SSID_LEN)
2301 return -EINVAL;
2302 }
2303
2304 if (info->attrs[NL80211_ATTR_HIDDEN_SSID]) {
2305 params.hidden_ssid = nla_get_u32(
2306 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
2307 if (params.hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE &&
2308 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_LEN &&
2309 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_CONTENTS)
2310 return -EINVAL;
2311 }
2312
2313 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
2314
2315 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
2316 params.auth_type = nla_get_u32(
2317 info->attrs[NL80211_ATTR_AUTH_TYPE]);
2318 if (!nl80211_valid_auth_type(params.auth_type))
2319 return -EINVAL;
2320 } else
2321 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
2322
2323 err = nl80211_crypto_settings(rdev, info, &params.crypto,
2324 NL80211_MAX_NR_CIPHER_SUITES);
2325 if (err)
2326 return err;
2327
1b658f11
VT		 2328 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
2329 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
2330 return -EOPNOTSUPP;
2331 params.inactivity_timeout = nla_get_u16(
2332 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
2333 }
2334
aa430da4
JB		 2335 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
2336 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
2337
2338 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
2339 !nl80211_valid_channel_type(info, &channel_type))
2340 return -EINVAL;
2341
2342 params.channel = rdev_freq_to_chan(rdev,
2343 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
2344 channel_type);
2345 if (!params.channel)
2346 return -EINVAL;
2347 params.channel_type = channel_type;
2348 } else if (wdev->preset_chan) {
2349 params.channel = wdev->preset_chan;
2350 params.channel_type = wdev->preset_chantype;
2351 } else
2352 return -EINVAL;
2353
2354 if (!cfg80211_can_beacon_sec_chan(&rdev->wiphy, params.channel,
2355 params.channel_type))
2356 return -EINVAL;
2357
8860020e
JB		 2358 err = rdev->ops->start_ap(&rdev->wiphy, dev, &params);
2359 if (!err)
2360 wdev->beacon_interval = params.beacon_interval;
56d1893d 2361 return err;
ed1b6cc7
JB		 2362}
2363
8860020e
JB		 2364static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
2365{
2366 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2367 struct net_device *dev = info->user_ptr[1];
2368 struct wireless_dev *wdev = dev->ieee80211_ptr;
2369 struct cfg80211_beacon_data params;
2370 int err;
2371
2372 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2373 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2374 return -EOPNOTSUPP;
2375
2376 if (!rdev->ops->change_beacon)
2377 return -EOPNOTSUPP;
2378
2379 if (!wdev->beacon_interval)
2380 return -EINVAL;
2381
2382 err = nl80211_parse_beacon(info, &params);
2383 if (err)
2384 return err;
2385
2386 return rdev->ops->change_beacon(&rdev->wiphy, dev, &params);
2387}
2388
2389static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
ed1b6cc7 2390{
4c476991
JB		 2391 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2392 struct net_device *dev = info->user_ptr[1];
56d1893d
JB		 2393 struct wireless_dev *wdev = dev->ieee80211_ptr;
2394 int err;
ed1b6cc7 2395
8860020e 2396 if (!rdev->ops->stop_ap)
4c476991 2397 return -EOPNOTSUPP;
ed1b6cc7 2398
074ac8df 2399 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 2400 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2401 return -EOPNOTSUPP;
3b85875a 2402
8860020e
JB		 2403 if (!wdev->beacon_interval)
2404 return -ENOENT;
2405
2406 err = rdev->ops->stop_ap(&rdev->wiphy, dev);
56d1893d
JB		 2407 if (!err)
2408 wdev->beacon_interval = 0;
2409 return err;
ed1b6cc7
JB		 2410}
2411
5727ef1b
JB		 2412static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
2413 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
2414 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
2415 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
0e46724a 2416 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
b39c48fa 2417 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
d83023da 2418 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
5727ef1b
JB		 2419};
2420
eccb8e8f 2421static int parse_station_flags(struct genl_info *info,
bdd3ae3d 2422 enum nl80211_iftype iftype,
eccb8e8f 2423 struct station_parameters *params)
5727ef1b
JB		 2424{
2425 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
eccb8e8f 2426 struct nlattr *nla;
5727ef1b
JB		 2427 int flag;
2428
eccb8e8f
JB		 2429 /*
2430 * Try parsing the new attribute first so userspace
2431 * can specify both for older kernels.
2432 */
2433 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
2434 if (nla) {
2435 struct nl80211_sta_flag_update *sta_flags;
2436
2437 sta_flags = nla_data(nla);
2438 params->sta_flags_mask = sta_flags->mask;
2439 params->sta_flags_set = sta_flags->set;
2440 if ((params->sta_flags_mask |
2441 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
2442 return -EINVAL;
2443 return 0;
2444 }
2445
2446 /* if present, parse the old attribute */
5727ef1b 2447
eccb8e8f 2448 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
5727ef1b
JB		 2449 if (!nla)
2450 return 0;
2451
2452 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
2453 nla, sta_flags_policy))
2454 return -EINVAL;
2455
bdd3ae3d
JB		 2456 /*
2457 * Only allow certain flags for interface types so that
2458 * other attributes are silently ignored. Remember that
2459 * this is backward compatibility code with old userspace
2460 * and shouldn't be hit in other cases anyway.
2461 */
2462 switch (iftype) {
2463 case NL80211_IFTYPE_AP:
2464 case NL80211_IFTYPE_AP_VLAN:
2465 case NL80211_IFTYPE_P2P_GO:
2466 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
2467 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
2468 BIT(NL80211_STA_FLAG_WME) |
2469 BIT(NL80211_STA_FLAG_MFP);
2470 break;
2471 case NL80211_IFTYPE_P2P_CLIENT:
2472 case NL80211_IFTYPE_STATION:
2473 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
2474 BIT(NL80211_STA_FLAG_TDLS_PEER);
2475 break;
2476 case NL80211_IFTYPE_MESH_POINT:
2477 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
2478 BIT(NL80211_STA_FLAG_MFP) |
2479 BIT(NL80211_STA_FLAG_AUTHORIZED);
2480 default:
2481 return -EINVAL;
2482 }
5727ef1b 2483
3383b5a6
JB		 2484 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
2485 if (flags[flag]) {
eccb8e8f 2486 params->sta_flags_set |= (1<<flag);
5727ef1b 2487
3383b5a6
JB		 2488 /* no longer support new API additions in old API */
2489 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
2490 return -EINVAL;
2491 }
2492 }
2493
5727ef1b
JB		 2494 return 0;
2495}
2496
c8dcfd8a
FF		 2497static bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info,
2498 int attr)
2499{
2500 struct nlattr *rate;
2501 u16 bitrate;
2502
2503 rate = nla_nest_start(msg, attr);
2504 if (!rate)
2505 goto nla_put_failure;
2506
2507 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
2508 bitrate = cfg80211_calculate_bitrate(info);
9360ffd1
DM		 2509 if ((bitrate > 0 &&
2510 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate)) ||
2511 ((info->flags & RATE_INFO_FLAGS_MCS) &&
2512 nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs)) ||
2513 ((info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH) &&
2514 nla_put_flag(msg, NL80211_RATE_INFO_40_MHZ_WIDTH)) ||
2515 ((info->flags & RATE_INFO_FLAGS_SHORT_GI) &&
2516 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI)))
2517 goto nla_put_failure;
c8dcfd8a
FF		 2518
2519 nla_nest_end(msg, rate);
2520 return true;
2521
2522nla_put_failure:
2523 return false;
2524}
2525
fd5b74dc 2526static int nl80211_send_station(struct sk_buff *msg, u32 pid, u32 seq,
66266b3a
JL		 2527 int flags,
2528 struct cfg80211_registered_device *rdev,
2529 struct net_device *dev,
98b62183 2530 const u8 *mac_addr, struct station_info *sinfo)
fd5b74dc
JB		 2531{
2532 void *hdr;
f4263c98 2533 struct nlattr *sinfoattr, *bss_param;
fd5b74dc
JB		 2534
2535 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
2536 if (!hdr)
2537 return -1;
2538
9360ffd1
DM		 2539 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
2540 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
2541 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
2542 goto nla_put_failure;
f5ea9120 2543
2ec600d6
LCC		 2544 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
2545 if (!sinfoattr)
fd5b74dc 2546 goto nla_put_failure;
9360ffd1
DM		 2547 if ((sinfo->filled & STATION_INFO_CONNECTED_TIME) &&
2548 nla_put_u32(msg, NL80211_STA_INFO_CONNECTED_TIME,
2549 sinfo->connected_time))
2550 goto nla_put_failure;
2551 if ((sinfo->filled & STATION_INFO_INACTIVE_TIME) &&
2552 nla_put_u32(msg, NL80211_STA_INFO_INACTIVE_TIME,
2553 sinfo->inactive_time))
2554 goto nla_put_failure;
2555 if ((sinfo->filled & STATION_INFO_RX_BYTES) &&
2556 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
2557 sinfo->rx_bytes))
2558 goto nla_put_failure;
2559 if ((sinfo->filled & STATION_INFO_TX_BYTES) &&
2560 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
2561 sinfo->tx_bytes))
2562 goto nla_put_failure;
2563 if ((sinfo->filled & STATION_INFO_LLID) &&
2564 nla_put_u16(msg, NL80211_STA_INFO_LLID, sinfo->llid))
2565 goto nla_put_failure;
2566 if ((sinfo->filled & STATION_INFO_PLID) &&
2567 nla_put_u16(msg, NL80211_STA_INFO_PLID, sinfo->plid))
2568 goto nla_put_failure;
2569 if ((sinfo->filled & STATION_INFO_PLINK_STATE) &&
2570 nla_put_u8(msg, NL80211_STA_INFO_PLINK_STATE,
2571 sinfo->plink_state))
2572 goto nla_put_failure;
66266b3a
JL		 2573 switch (rdev->wiphy.signal_type) {
2574 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 2575 if ((sinfo->filled & STATION_INFO_SIGNAL) &&
2576 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL,
2577 sinfo->signal))
2578 goto nla_put_failure;
2579 if ((sinfo->filled & STATION_INFO_SIGNAL_AVG) &&
2580 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL_AVG,
2581 sinfo->signal_avg))
2582 goto nla_put_failure;
66266b3a
JL		 2583 break;
2584 default:
2585 break;
2586 }
420e7fab 2587 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
c8dcfd8a
FF		 2588 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
2589 NL80211_STA_INFO_TX_BITRATE))
2590 goto nla_put_failure;
2591 }
2592 if (sinfo->filled & STATION_INFO_RX_BITRATE) {
2593 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
2594 NL80211_STA_INFO_RX_BITRATE))
420e7fab 2595 goto nla_put_failure;
420e7fab 2596 }
9360ffd1
DM		 2597 if ((sinfo->filled & STATION_INFO_RX_PACKETS) &&
2598 nla_put_u32(msg, NL80211_STA_INFO_RX_PACKETS,
2599 sinfo->rx_packets))
2600 goto nla_put_failure;
2601 if ((sinfo->filled & STATION_INFO_TX_PACKETS) &&
2602 nla_put_u32(msg, NL80211_STA_INFO_TX_PACKETS,
2603 sinfo->tx_packets))
2604 goto nla_put_failure;
2605 if ((sinfo->filled & STATION_INFO_TX_RETRIES) &&
2606 nla_put_u32(msg, NL80211_STA_INFO_TX_RETRIES,
2607 sinfo->tx_retries))
2608 goto nla_put_failure;
2609 if ((sinfo->filled & STATION_INFO_TX_FAILED) &&
2610 nla_put_u32(msg, NL80211_STA_INFO_TX_FAILED,
2611 sinfo->tx_failed))
2612 goto nla_put_failure;
2613 if ((sinfo->filled & STATION_INFO_BEACON_LOSS_COUNT) &&
2614 nla_put_u32(msg, NL80211_STA_INFO_BEACON_LOSS,
2615 sinfo->beacon_loss_count))
2616 goto nla_put_failure;
f4263c98
PS		 2617 if (sinfo->filled & STATION_INFO_BSS_PARAM) {
2618 bss_param = nla_nest_start(msg, NL80211_STA_INFO_BSS_PARAM);
2619 if (!bss_param)
2620 goto nla_put_failure;
2621
9360ffd1
DM		 2622 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
2623 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
2624 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
2625 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
2626 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
2627 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
2628 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
2629 sinfo->bss_param.dtim_period) ||
2630 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
2631 sinfo->bss_param.beacon_interval))
2632 goto nla_put_failure;
f4263c98
PS		 2633
2634 nla_nest_end(msg, bss_param);
2635 }
9360ffd1
DM		 2636 if ((sinfo->filled & STATION_INFO_STA_FLAGS) &&
2637 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
2638 sizeof(struct nl80211_sta_flag_update),
2639 &sinfo->sta_flags))
2640 goto nla_put_failure;
7eab0f64
JL		 2641 if ((sinfo->filled & STATION_INFO_T_OFFSET) &&
2642 nla_put_u64(msg, NL80211_STA_INFO_T_OFFSET,
2643 sinfo->t_offset))
2644 goto nla_put_failure;
2ec600d6 2645 nla_nest_end(msg, sinfoattr);
fd5b74dc 2646
9360ffd1
DM		 2647 if ((sinfo->filled & STATION_INFO_ASSOC_REQ_IES) &&
2648 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
2649 sinfo->assoc_req_ies))
2650 goto nla_put_failure;
50d3dfb7 2651
fd5b74dc
JB		 2652 return genlmsg_end(msg, hdr);
2653
2654 nla_put_failure:
bc3ed28c
TG		 2655 genlmsg_cancel(msg, hdr);
2656 return -EMSGSIZE;
fd5b74dc
JB		 2657}
2658
2ec600d6 2659static int nl80211_dump_station(struct sk_buff *skb,
bba95fef 2660 struct netlink_callback *cb)
2ec600d6 2661{
2ec600d6
LCC		 2662 struct station_info sinfo;
2663 struct cfg80211_registered_device *dev;
bba95fef 2664 struct net_device *netdev;
2ec600d6 2665 u8 mac_addr[ETH_ALEN];
bba95fef 2666 int sta_idx = cb->args[1];
2ec600d6 2667 int err;
2ec600d6 2668
67748893
JB		 2669 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
2670 if (err)
2671 return err;
bba95fef
JB		 2672
2673 if (!dev->ops->dump_station) {
eec60b03 2674 err = -EOPNOTSUPP;
bba95fef
JB		 2675 goto out_err;
2676 }
2677
bba95fef 2678 while (1) {
f612cedf 2679 memset(&sinfo, 0, sizeof(sinfo));
bba95fef
JB		 2680 err = dev->ops->dump_station(&dev->wiphy, netdev, sta_idx,
2681 mac_addr, &sinfo);
2682 if (err == -ENOENT)
2683 break;
2684 if (err)
3b85875a 2685 goto out_err;
bba95fef
JB		 2686
2687 if (nl80211_send_station(skb,
2688 NETLINK_CB(cb->skb).pid,
2689 cb->nlh->nlmsg_seq, NLM_F_MULTI,
66266b3a 2690 dev, netdev, mac_addr,
bba95fef
JB		 2691 &sinfo) < 0)
2692 goto out;
2693
2694 sta_idx++;
2695 }
2696
2697
2698 out:
2699 cb->args[1] = sta_idx;
2700 err = skb->len;
bba95fef 2701 out_err:
67748893 2702 nl80211_finish_netdev_dump(dev);
bba95fef
JB		 2703
2704 return err;
2ec600d6 2705}
fd5b74dc 2706
5727ef1b
JB		 2707static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
2708{
4c476991
JB		 2709 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2710 struct net_device *dev = info->user_ptr[1];
2ec600d6 2711 struct station_info sinfo;
fd5b74dc
JB		 2712 struct sk_buff *msg;
2713 u8 *mac_addr = NULL;
4c476991 2714 int err;
fd5b74dc 2715
2ec600d6 2716 memset(&sinfo, 0, sizeof(sinfo));
fd5b74dc
JB		 2717
2718 if (!info->attrs[NL80211_ATTR_MAC])
2719 return -EINVAL;
2720
2721 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2722
4c476991
JB		 2723 if (!rdev->ops->get_station)
2724 return -EOPNOTSUPP;
3b85875a 2725
4c476991 2726 err = rdev->ops->get_station(&rdev->wiphy, dev, mac_addr, &sinfo);
fd5b74dc 2727 if (err)
4c476991 2728 return err;
2ec600d6 2729
fd2120ca 2730 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
fd5b74dc 2731 if (!msg)
4c476991 2732 return -ENOMEM;
fd5b74dc
JB		 2733
2734 if (nl80211_send_station(msg, info->snd_pid, info->snd_seq, 0,
66266b3a 2735 rdev, dev, mac_addr, &sinfo) < 0) {
4c476991
JB		 2736 nlmsg_free(msg);
2737 return -ENOBUFS;
2738 }
3b85875a 2739
4c476991 2740 return genlmsg_reply(msg, info);
5727ef1b
JB		 2741}
2742
2743/*
c258d2de 2744 * Get vlan interface making sure it is running and on the right wiphy.
5727ef1b 2745 */
80b99899
JB		 2746static struct net_device *get_vlan(struct genl_info *info,
2747 struct cfg80211_registered_device *rdev)
5727ef1b 2748{
463d0183 2749 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
80b99899
JB		 2750 struct net_device *v;
2751 int ret;
2752
2753 if (!vlanattr)
2754 return NULL;
2755
2756 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
2757 if (!v)
2758 return ERR_PTR(-ENODEV);
2759
2760 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
2761 ret = -EINVAL;
2762 goto error;
5727ef1b 2763 }
80b99899
JB		 2764
2765 if (!netif_running(v)) {
2766 ret = -ENETDOWN;
2767 goto error;
2768 }
2769
2770 return v;
2771 error:
2772 dev_put(v);
2773 return ERR_PTR(ret);
5727ef1b
JB		 2774}
2775
2776static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
2777{
4c476991 2778 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 2779 int err;
4c476991 2780 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2781 struct station_parameters params;
2782 u8 *mac_addr = NULL;
2783
2784 memset(&params, 0, sizeof(params));
2785
2786 params.listen_interval = -1;
57cf8043 2787 params.plink_state = -1;
5727ef1b
JB		 2788
2789 if (info->attrs[NL80211_ATTR_STA_AID])
2790 return -EINVAL;
2791
2792 if (!info->attrs[NL80211_ATTR_MAC])
2793 return -EINVAL;
2794
2795 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2796
2797 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
2798 params.supported_rates =
2799 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2800 params.supported_rates_len =
2801 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2802 }
2803
2804 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
2805 params.listen_interval =
2806 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
2807
36aedc90
JM		 2808 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
2809 params.ht_capa =
2810 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
2811
bdd90d5e
JB		 2812 if (!rdev->ops->change_station)
2813 return -EOPNOTSUPP;
2814
bdd3ae3d 2815 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 2816 return -EINVAL;
2817
2ec600d6
LCC		 2818 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2819 params.plink_action =
2820 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2821
9c3990aa
JC		 2822 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE])
2823 params.plink_state =
2824 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
2825
a97f4424
JB		 2826 switch (dev->ieee80211_ptr->iftype) {
2827 case NL80211_IFTYPE_AP:
2828 case NL80211_IFTYPE_AP_VLAN:
074ac8df 2829 case NL80211_IFTYPE_P2P_GO:
a97f4424
JB		 2830 /* disallow mesh-specific things */
2831 if (params.plink_action)
bdd90d5e
JB		 2832 return -EINVAL;
2833
2834 /* TDLS can't be set, ... */
2835 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
2836 return -EINVAL;
2837 /*
2838 * ... but don't bother the driver with it. This works around
2839 * a hostapd/wpa_supplicant issue -- it always includes the
2840 * TLDS_PEER flag in the mask even for AP mode.
2841 */
2842 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
2843
2844 /* accept only the listed bits */
2845 if (params.sta_flags_mask &
2846 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
2847 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
2848 BIT(NL80211_STA_FLAG_WME) |
2849 BIT(NL80211_STA_FLAG_MFP)))
2850 return -EINVAL;
2851
2852 /* must be last in here for error handling */
2853 params.vlan = get_vlan(info, rdev);
2854 if (IS_ERR(params.vlan))
2855 return PTR_ERR(params.vlan);
a97f4424 2856 break;
074ac8df 2857 case NL80211_IFTYPE_P2P_CLIENT:
a97f4424 2858 case NL80211_IFTYPE_STATION:
bdd90d5e
JB		 2859 /*
2860 * Don't allow userspace to change the TDLS_PEER flag,
2861 * but silently ignore attempts to change it since we
2862 * don't have state here to verify that it doesn't try
2863 * to change the flag.
2864 */
2865 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
267335d6
AQ		 2866 /* fall through */
2867 case NL80211_IFTYPE_ADHOC:
2868 /* disallow things sta doesn't support */
2869 if (params.plink_action)
2870 return -EINVAL;
2871 if (params.ht_capa)
2872 return -EINVAL;
2873 if (params.listen_interval >= 0)
2874 return -EINVAL;
bdd90d5e
JB		 2875 /* reject any changes other than AUTHORIZED */
2876 if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
2877 return -EINVAL;
a97f4424
JB		 2878 break;
2879 case NL80211_IFTYPE_MESH_POINT:
2880 /* disallow things mesh doesn't support */
2881 if (params.vlan)
bdd90d5e 2882 return -EINVAL;
a97f4424 2883 if (params.ht_capa)
bdd90d5e 2884 return -EINVAL;
a97f4424 2885 if (params.listen_interval >= 0)
bdd90d5e
JB		 2886 return -EINVAL;
2887 /*
2888 * No special handling for TDLS here -- the userspace
2889 * mesh code doesn't have this bug.
2890 */
b39c48fa
JC		 2891 if (params.sta_flags_mask &
2892 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
8429828e 2893 BIT(NL80211_STA_FLAG_MFP) |
b39c48fa 2894 BIT(NL80211_STA_FLAG_AUTHORIZED)))
bdd90d5e 2895 return -EINVAL;
a97f4424
JB		 2896 break;
2897 default:
bdd90d5e 2898 return -EOPNOTSUPP;
034d655e
JB		 2899 }
2900
bdd90d5e 2901 /* be aware of params.vlan when changing code here */
5727ef1b 2902
79c97e97 2903 err = rdev->ops->change_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b 2904
5727ef1b
JB		 2905 if (params.vlan)
2906 dev_put(params.vlan);
3b85875a 2907
5727ef1b
JB		 2908 return err;
2909}
2910
c75786c9
EP		 2911static struct nla_policy
2912nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] __read_mostly = {
2913 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
2914 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
2915};
2916
5727ef1b
JB		 2917static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
2918{
4c476991 2919 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5727ef1b 2920 int err;
4c476991 2921 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 2922 struct station_parameters params;
2923 u8 *mac_addr = NULL;
2924
2925 memset(&params, 0, sizeof(params));
2926
2927 if (!info->attrs[NL80211_ATTR_MAC])
2928 return -EINVAL;
2929
5727ef1b
JB		 2930 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
2931 return -EINVAL;
2932
2933 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
2934 return -EINVAL;
2935
0e956c13
TLSC		 2936 if (!info->attrs[NL80211_ATTR_STA_AID])
2937 return -EINVAL;
2938
5727ef1b
JB		 2939 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2940 params.supported_rates =
2941 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2942 params.supported_rates_len =
2943 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
2944 params.listen_interval =
2945 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
51b50fbe 2946
0e956c13
TLSC		 2947 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
2948 if (!params.aid || params.aid > IEEE80211_MAX_AID)
2949 return -EINVAL;
51b50fbe 2950
36aedc90
JM		 2951 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
2952 params.ht_capa =
2953 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5727ef1b 2954
96b78dff
JC		 2955 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
2956 params.plink_action =
2957 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
2958
bdd90d5e
JB		 2959 if (!rdev->ops->add_station)
2960 return -EOPNOTSUPP;
2961
bdd3ae3d 2962 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, &params))
5727ef1b
JB		 2963 return -EINVAL;
2964
bdd90d5e
JB		 2965 switch (dev->ieee80211_ptr->iftype) {
2966 case NL80211_IFTYPE_AP:
2967 case NL80211_IFTYPE_AP_VLAN:
2968 case NL80211_IFTYPE_P2P_GO:
2969 /* parse WME attributes if sta is WME capable */
2970 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
2971 (params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)) &&
2972 info->attrs[NL80211_ATTR_STA_WME]) {
2973 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
2974 struct nlattr *nla;
2975
2976 nla = info->attrs[NL80211_ATTR_STA_WME];
2977 err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
2978 nl80211_sta_wme_policy);
2979 if (err)
2980 return err;
2981
2982 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
2983 params.uapsd_queues =
2984 nla_get_u8(tb[NL80211_STA_WME_UAPSD_QUEUES]);
2985 if (params.uapsd_queues &
2986 ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
2987 return -EINVAL;
c75786c9 2988
bdd90d5e
JB		 2989 if (tb[NL80211_STA_WME_MAX_SP])
2990 params.max_sp =
2991 nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
c75786c9 2992
bdd90d5e
JB		 2993 if (params.max_sp &
2994 ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
2995 return -EINVAL;
4319e193 2996
bdd90d5e
JB		 2997 params.sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
2998 }
2999 /* TDLS peers cannot be added */
3000 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
4319e193 3001 return -EINVAL;
bdd90d5e
JB		 3002 /* but don't bother the driver with it */
3003 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3b9ce80c 3004
bdd90d5e
JB		 3005 /* must be last in here for error handling */
3006 params.vlan = get_vlan(info, rdev);
3007 if (IS_ERR(params.vlan))
3008 return PTR_ERR(params.vlan);
3009 break;
3010 case NL80211_IFTYPE_MESH_POINT:
3011 /* TDLS peers cannot be added */
3012 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3013 return -EINVAL;
3014 break;
3015 case NL80211_IFTYPE_STATION:
3016 /* Only TDLS peers can be added */
3017 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
3018 return -EINVAL;
3019 /* Can only add if TDLS ... */
3020 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
3021 return -EOPNOTSUPP;
3022 /* ... with external setup is supported */
3023 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
3024 return -EOPNOTSUPP;
3025 break;
3026 default:
3027 return -EOPNOTSUPP;
c75786c9
EP		 3028 }
3029
bdd90d5e 3030 /* be aware of params.vlan when changing code here */
5727ef1b 3031
79c97e97 3032 err = rdev->ops->add_station(&rdev->wiphy, dev, mac_addr, &params);
5727ef1b 3033
5727ef1b
JB		 3034 if (params.vlan)
3035 dev_put(params.vlan);
5727ef1b
JB		 3036 return err;
3037}
3038
3039static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
3040{
4c476991
JB		 3041 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3042 struct net_device *dev = info->user_ptr[1];
5727ef1b
JB		 3043 u8 *mac_addr = NULL;
3044
3045 if (info->attrs[NL80211_ATTR_MAC])
3046 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3047
e80cf853 3048 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
d5d9de02 3049 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
074ac8df 3050 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 3051 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3052 return -EINVAL;
5727ef1b 3053
4c476991
JB		 3054 if (!rdev->ops->del_station)
3055 return -EOPNOTSUPP;
3b85875a 3056
4c476991 3057 return rdev->ops->del_station(&rdev->wiphy, dev, mac_addr);
5727ef1b
JB		 3058}
3059
2ec600d6
LCC		 3060static int nl80211_send_mpath(struct sk_buff *msg, u32 pid, u32 seq,
3061 int flags, struct net_device *dev,
3062 u8 *dst, u8 *next_hop,
3063 struct mpath_info *pinfo)
3064{
3065 void *hdr;
3066 struct nlattr *pinfoattr;
3067
3068 hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
3069 if (!hdr)
3070 return -1;
3071
9360ffd1
DM		 3072 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3073 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
3074 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
3075 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
3076 goto nla_put_failure;
f5ea9120 3077
2ec600d6
LCC		 3078 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
3079 if (!pinfoattr)
3080 goto nla_put_failure;
9360ffd1
DM		 3081 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
3082 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
3083 pinfo->frame_qlen))
3084 goto nla_put_failure;
3085 if (((pinfo->filled & MPATH_INFO_SN) &&
3086 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
3087 ((pinfo->filled & MPATH_INFO_METRIC) &&
3088 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
3089 pinfo->metric)) ||
3090 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
3091 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
3092 pinfo->exptime)) ||
3093 ((pinfo->filled & MPATH_INFO_FLAGS) &&
3094 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
3095 pinfo->flags)) ||
3096 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
3097 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
3098 pinfo->discovery_timeout)) ||
3099 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
3100 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
3101 pinfo->discovery_retries)))
3102 goto nla_put_failure;
2ec600d6
LCC		 3103
3104 nla_nest_end(msg, pinfoattr);
3105
3106 return genlmsg_end(msg, hdr);
3107
3108 nla_put_failure:
bc3ed28c
TG		 3109 genlmsg_cancel(msg, hdr);
3110 return -EMSGSIZE;
2ec600d6
LCC		 3111}
3112
3113static int nl80211_dump_mpath(struct sk_buff *skb,
bba95fef 3114 struct netlink_callback *cb)
2ec600d6 3115{
2ec600d6
LCC		 3116 struct mpath_info pinfo;
3117 struct cfg80211_registered_device *dev;
bba95fef 3118 struct net_device *netdev;
2ec600d6
LCC		 3119 u8 dst[ETH_ALEN];
3120 u8 next_hop[ETH_ALEN];
bba95fef 3121 int path_idx = cb->args[1];
2ec600d6 3122 int err;
2ec600d6 3123
67748893
JB		 3124 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
3125 if (err)
3126 return err;
bba95fef
JB		 3127
3128 if (!dev->ops->dump_mpath) {
eec60b03 3129 err = -EOPNOTSUPP;
bba95fef
JB		 3130 goto out_err;
3131 }
3132
eec60b03
JM		 3133 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
3134 err = -EOPNOTSUPP;
0448b5fc 3135 goto out_err;
eec60b03
JM		 3136 }
3137
bba95fef
JB		 3138 while (1) {
3139 err = dev->ops->dump_mpath(&dev->wiphy, netdev, path_idx,
3140 dst, next_hop, &pinfo);
3141 if (err == -ENOENT)
2ec600d6 3142 break;
bba95fef 3143 if (err)
3b85875a 3144 goto out_err;
2ec600d6 3145
bba95fef
JB		 3146 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).pid,
3147 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3148 netdev, dst, next_hop,
3149 &pinfo) < 0)
3150 goto out;
2ec600d6 3151
bba95fef 3152 path_idx++;
2ec600d6 3153 }
2ec600d6 3154
2ec600d6 3155
bba95fef
JB		 3156 out:
3157 cb->args[1] = path_idx;
3158 err = skb->len;
bba95fef 3159 out_err:
67748893 3160 nl80211_finish_netdev_dump(dev);
bba95fef 3161 return err;
2ec600d6
LCC		 3162}
3163
3164static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
3165{
4c476991 3166 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2ec600d6 3167 int err;
4c476991 3168 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3169 struct mpath_info pinfo;
3170 struct sk_buff *msg;
3171 u8 *dst = NULL;
3172 u8 next_hop[ETH_ALEN];
3173
3174 memset(&pinfo, 0, sizeof(pinfo));
3175
3176 if (!info->attrs[NL80211_ATTR_MAC])
3177 return -EINVAL;
3178
3179 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3180
4c476991
JB		 3181 if (!rdev->ops->get_mpath)
3182 return -EOPNOTSUPP;
2ec600d6 3183
4c476991
JB		 3184 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3185 return -EOPNOTSUPP;
eec60b03 3186
79c97e97 3187 err = rdev->ops->get_mpath(&rdev->wiphy, dev, dst, next_hop, &pinfo);
2ec600d6 3188 if (err)
4c476991 3189 return err;
2ec600d6 3190
fd2120ca 3191 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2ec600d6 3192 if (!msg)
4c476991 3193 return -ENOMEM;
2ec600d6
LCC		 3194
3195 if (nl80211_send_mpath(msg, info->snd_pid, info->snd_seq, 0,
4c476991
JB		 3196 dev, dst, next_hop, &pinfo) < 0) {
3197 nlmsg_free(msg);
3198 return -ENOBUFS;
3199 }
3b85875a 3200
4c476991 3201 return genlmsg_reply(msg, info);
2ec600d6
LCC		 3202}
3203
3204static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
3205{
4c476991
JB		 3206 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3207 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3208 u8 *dst = NULL;
3209 u8 *next_hop = NULL;
3210
3211 if (!info->attrs[NL80211_ATTR_MAC])
3212 return -EINVAL;
3213
3214 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
3215 return -EINVAL;
3216
3217 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3218 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
3219
4c476991
JB		 3220 if (!rdev->ops->change_mpath)
3221 return -EOPNOTSUPP;
35a8efe1 3222
4c476991
JB		 3223 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3224 return -EOPNOTSUPP;
2ec600d6 3225
4c476991 3226 return rdev->ops->change_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6 3227}
4c476991 3228
2ec600d6
LCC		 3229static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
3230{
4c476991
JB		 3231 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3232 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3233 u8 *dst = NULL;
3234 u8 *next_hop = NULL;
3235
3236 if (!info->attrs[NL80211_ATTR_MAC])
3237 return -EINVAL;
3238
3239 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
3240 return -EINVAL;
3241
3242 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3243 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
3244
4c476991
JB		 3245 if (!rdev->ops->add_mpath)
3246 return -EOPNOTSUPP;
35a8efe1 3247
4c476991
JB		 3248 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3249 return -EOPNOTSUPP;
2ec600d6 3250
4c476991 3251 return rdev->ops->add_mpath(&rdev->wiphy, dev, dst, next_hop);
2ec600d6
LCC		 3252}
3253
3254static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
3255{
4c476991
JB		 3256 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3257 struct net_device *dev = info->user_ptr[1];
2ec600d6
LCC		 3258 u8 *dst = NULL;
3259
3260 if (info->attrs[NL80211_ATTR_MAC])
3261 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3262
4c476991
JB		 3263 if (!rdev->ops->del_mpath)
3264 return -EOPNOTSUPP;
3b85875a 3265
4c476991 3266 return rdev->ops->del_mpath(&rdev->wiphy, dev, dst);
2ec600d6
LCC		 3267}
3268
9f1ba906
JM		 3269static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
3270{
4c476991
JB		 3271 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3272 struct net_device *dev = info->user_ptr[1];
9f1ba906
JM		 3273 struct bss_parameters params;
3274
3275 memset(&params, 0, sizeof(params));
3276 /* default to not changing parameters */
3277 params.use_cts_prot = -1;
3278 params.use_short_preamble = -1;
3279 params.use_short_slot_time = -1;
fd8aaaf3 3280 params.ap_isolate = -1;
50b12f59 3281 params.ht_opmode = -1;
9f1ba906
JM		 3282
3283 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
3284 params.use_cts_prot =
3285 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
3286 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
3287 params.use_short_preamble =
3288 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
3289 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
3290 params.use_short_slot_time =
3291 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
90c97a04
JM		 3292 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
3293 params.basic_rates =
3294 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
3295 params.basic_rates_len =
3296 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
3297 }
fd8aaaf3
FF		 3298 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
3299 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
50b12f59
HS		 3300 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
3301 params.ht_opmode =
3302 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
9f1ba906 3303
4c476991
JB		 3304 if (!rdev->ops->change_bss)
3305 return -EOPNOTSUPP;
9f1ba906 3306
074ac8df 3307 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4c476991
JB		 3308 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3309 return -EOPNOTSUPP;
3b85875a 3310
4c476991 3311 return rdev->ops->change_bss(&rdev->wiphy, dev, &params);
9f1ba906
JM		 3312}
3313
b54452b0 3314static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
b2e1b302
LR		 3315 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
3316 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
3317 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
3318 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
3319 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
3320 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
3321};
3322
3323static int parse_reg_rule(struct nlattr *tb[],
3324 struct ieee80211_reg_rule *reg_rule)
3325{
3326 struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
3327 struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
3328
3329 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
3330 return -EINVAL;
3331 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
3332 return -EINVAL;
3333 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
3334 return -EINVAL;
3335 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
3336 return -EINVAL;
3337 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
3338 return -EINVAL;
3339
3340 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
3341
3342 freq_range->start_freq_khz =
3343 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
3344 freq_range->end_freq_khz =
3345 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
3346 freq_range->max_bandwidth_khz =
3347 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
3348
3349 power_rule->max_eirp =
3350 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
3351
3352 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
3353 power_rule->max_antenna_gain =
3354 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
3355
3356 return 0;
3357}
3358
3359static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
3360{
3361 int r;
3362 char *data = NULL;
3363
80778f18
LR		 3364 /*
3365 * You should only get this when cfg80211 hasn't yet initialized
3366 * completely when built-in to the kernel right between the time
3367 * window between nl80211_init() and regulatory_init(), if that is
3368 * even possible.
3369 */
3370 mutex_lock(&cfg80211_mutex);
3371 if (unlikely(!cfg80211_regdomain)) {
fe33eb39
LR		 3372 mutex_unlock(&cfg80211_mutex);
3373 return -EINPROGRESS;
80778f18 3374 }
fe33eb39 3375 mutex_unlock(&cfg80211_mutex);
80778f18 3376
fe33eb39
LR		 3377 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
3378 return -EINVAL;
b2e1b302
LR		 3379
3380 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
3381
fe33eb39
LR		 3382 r = regulatory_hint_user(data);
3383
b2e1b302
LR		 3384 return r;
3385}
3386
24bdd9f4 3387static int nl80211_get_mesh_config(struct sk_buff *skb,
29cbe68c 3388 struct genl_info *info)
93da9cc1 3389{
4c476991 3390 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4c476991 3391 struct net_device *dev = info->user_ptr[1];
29cbe68c
JB		 3392 struct wireless_dev *wdev = dev->ieee80211_ptr;
3393 struct mesh_config cur_params;
3394 int err = 0;
93da9cc1 3395 void *hdr;
3396 struct nlattr *pinfoattr;
3397 struct sk_buff *msg;
3398
29cbe68c
JB		 3399 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3400 return -EOPNOTSUPP;
3401
24bdd9f4 3402 if (!rdev->ops->get_mesh_config)
4c476991 3403 return -EOPNOTSUPP;
f3f92586 3404
29cbe68c
JB		 3405 wdev_lock(wdev);
3406 /* If not connected, get default parameters */
3407 if (!wdev->mesh_id_len)
3408 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
3409 else
24bdd9f4 3410 err = rdev->ops->get_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 3411 &cur_params);
3412 wdev_unlock(wdev);
3413
93da9cc1 3414 if (err)
4c476991 3415 return err;
93da9cc1 3416
3417 /* Draw up a netlink message to send back */
fd2120ca 3418 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 3419 if (!msg)
3420 return -ENOMEM;
93da9cc1 3421 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
24bdd9f4 3422 NL80211_CMD_GET_MESH_CONFIG);
93da9cc1 3423 if (!hdr)
efe1cf0c 3424 goto out;
24bdd9f4 3425 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_CONFIG);
93da9cc1 3426 if (!pinfoattr)
3427 goto nla_put_failure;
9360ffd1
DM		 3428 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3429 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
3430 cur_params.dot11MeshRetryTimeout) ||
3431 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
3432 cur_params.dot11MeshConfirmTimeout) ||
3433 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
3434 cur_params.dot11MeshHoldingTimeout) ||
3435 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
3436 cur_params.dot11MeshMaxPeerLinks) ||
3437 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
3438 cur_params.dot11MeshMaxRetries) ||
3439 nla_put_u8(msg, NL80211_MESHCONF_TTL,
3440 cur_params.dot11MeshTTL) ||
3441 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
3442 cur_params.element_ttl) ||
3443 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
3444 cur_params.auto_open_plinks) ||
7eab0f64
JL		 3445 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
3446 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
9360ffd1
DM		 3447 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3448 cur_params.dot11MeshHWMPmaxPREQretries) ||
3449 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
3450 cur_params.path_refresh_time) ||
3451 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3452 cur_params.min_discovery_timeout) ||
3453 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3454 cur_params.dot11MeshHWMPactivePathTimeout) ||
3455 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3456 cur_params.dot11MeshHWMPpreqMinInterval) ||
3457 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
3458 cur_params.dot11MeshHWMPperrMinInterval) ||
3459 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3460 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
3461 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
3462 cur_params.dot11MeshHWMPRootMode) ||
3463 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3464 cur_params.dot11MeshHWMPRannInterval) ||
3465 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3466 cur_params.dot11MeshGateAnnouncementProtocol) ||
3467 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
3468 cur_params.dot11MeshForwarding) ||
3469 nla_put_u32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
70c33eaa
AN		 3470 cur_params.rssi_threshold) ||
3471 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
3472 cur_params.ht_opmode))
9360ffd1 3473 goto nla_put_failure;
93da9cc1 3474 nla_nest_end(msg, pinfoattr);
3475 genlmsg_end(msg, hdr);
4c476991 3476 return genlmsg_reply(msg, info);
93da9cc1 3477
3b85875a 3478 nla_put_failure:
93da9cc1 3479 genlmsg_cancel(msg, hdr);
efe1cf0c 3480 out:
d080e275 3481 nlmsg_free(msg);
4c476991 3482 return -ENOBUFS;
93da9cc1 3483}
3484
b54452b0 3485static const struct nla_policy nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
93da9cc1 3486 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
3487 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
3488 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
3489 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
3490 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
3491 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
45904f21 3492 [NL80211_MESHCONF_ELEMENT_TTL] = { .type = NLA_U8 },
93da9cc1 3493 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
d299a1f2 3494 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] = { .type = NLA_U32 },
93da9cc1 3495
3496 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
3497 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
3498 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
3499 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
3500 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
dca7e943 3501 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] = { .type = NLA_U16 },
93da9cc1 3502 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
699403db 3503 [NL80211_MESHCONF_HWMP_ROOTMODE] = { .type = NLA_U8 },
0507e159 3504 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] = { .type = NLA_U16 },
16dd7267 3505 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = { .type = NLA_U8 },
94f90656 3506 [NL80211_MESHCONF_FORWARDING] = { .type = NLA_U8 },
55335137 3507 [NL80211_MESHCONF_RSSI_THRESHOLD] = { .type = NLA_U32},
70c33eaa 3508 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16},
93da9cc1 3509};
3510
c80d545d
JC		 3511static const struct nla_policy
3512 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
d299a1f2 3513 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
c80d545d
JC		 3514 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
3515 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
15d5dda6 3516 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
581a8b0f 3517 [NL80211_MESH_SETUP_IE] = { .type = NLA_BINARY,
c80d545d 3518 .len = IEEE80211_MAX_DATA_LEN },
b130e5ce 3519 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
c80d545d
JC		 3520};
3521
24bdd9f4 3522static int nl80211_parse_mesh_config(struct genl_info *info,
bd90fdcc
JB		 3523 struct mesh_config *cfg,
3524 u32 *mask_out)
93da9cc1 3525{
93da9cc1 3526 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
bd90fdcc 3527 u32 mask = 0;
93da9cc1 3528
bd90fdcc
JB		 3529#define FILL_IN_MESH_PARAM_IF_SET(table, cfg, param, mask, attr_num, nla_fn) \
3530do {\
3531 if (table[attr_num]) {\
3532 cfg->param = nla_fn(table[attr_num]); \
3533 mask |= (1 << (attr_num - 1)); \
3534 } \
3535} while (0);\
3536
3537
24bdd9f4 3538 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
93da9cc1 3539 return -EINVAL;
3540 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
24bdd9f4 3541 info->attrs[NL80211_ATTR_MESH_CONFIG],
bd90fdcc 3542 nl80211_meshconf_params_policy))
93da9cc1 3543 return -EINVAL;
3544
93da9cc1 3545 /* This makes sure that there aren't more than 32 mesh config
3546 * parameters (otherwise our bitfield scheme would not work.) */
3547 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
3548
3549 /* Fill in the params struct */
93da9cc1 3550 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout,
3551 mask, NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
3552 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout,
3553 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT, nla_get_u16);
3554 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout,
3555 mask, NL80211_MESHCONF_HOLDING_TIMEOUT, nla_get_u16);
3556 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks,
3557 mask, NL80211_MESHCONF_MAX_PEER_LINKS, nla_get_u16);
3558 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries,
3559 mask, NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
3560 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL,
3561 mask, NL80211_MESHCONF_TTL, nla_get_u8);
45904f21
JC		 3562 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl,
3563 mask, NL80211_MESHCONF_ELEMENT_TTL, nla_get_u8);
93da9cc1 3564 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks,
3565 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS, nla_get_u8);
d299a1f2
JC		 3566 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
3567 mask, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
3568 nla_get_u32);
93da9cc1 3569 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries,
3570 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
3571 nla_get_u8);
3572 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time,
3573 mask, NL80211_MESHCONF_PATH_REFRESH_TIME, nla_get_u32);
3574 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout,
3575 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
3576 nla_get_u16);
3577 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
3578 mask, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
3579 nla_get_u32);
3580 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
3581 mask, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
3582 nla_get_u16);
dca7e943
TP		 3583 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval,
3584 mask, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
3585 nla_get_u16);
93da9cc1 3586 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3587 dot11MeshHWMPnetDiameterTraversalTime,
3588 mask, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
3589 nla_get_u16);
63c5723b
RP		 3590 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3591 dot11MeshHWMPRootMode, mask,
3592 NL80211_MESHCONF_HWMP_ROOTMODE,
3593 nla_get_u8);
0507e159
JC		 3594 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3595 dot11MeshHWMPRannInterval, mask,
3596 NL80211_MESHCONF_HWMP_RANN_INTERVAL,
3597 nla_get_u16);
16dd7267
JC		 3598 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
3599 dot11MeshGateAnnouncementProtocol, mask,
3600 NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
3601 nla_get_u8);
94f90656
CYY		 3602 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding,
3603 mask, NL80211_MESHCONF_FORWARDING, nla_get_u8);
55335137
AN		 3604 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold,
3605 mask, NL80211_MESHCONF_RSSI_THRESHOLD, nla_get_u32);
70c33eaa
AN		 3606 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, ht_opmode,
3607 mask, NL80211_MESHCONF_HT_OPMODE, nla_get_u16);
bd90fdcc
JB		 3608 if (mask_out)
3609 *mask_out = mask;
c80d545d 3610
bd90fdcc
JB		 3611 return 0;
3612
3613#undef FILL_IN_MESH_PARAM_IF_SET
3614}
3615
c80d545d
JC		 3616static int nl80211_parse_mesh_setup(struct genl_info *info,
3617 struct mesh_setup *setup)
3618{
3619 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
3620
3621 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
3622 return -EINVAL;
3623 if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
3624 info->attrs[NL80211_ATTR_MESH_SETUP],
3625 nl80211_mesh_setup_params_policy))
3626 return -EINVAL;
3627
d299a1f2
JC		 3628 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
3629 setup->sync_method =
3630 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
3631 IEEE80211_SYNC_METHOD_VENDOR :
3632 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
3633
c80d545d
JC		 3634 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
3635 setup->path_sel_proto =
3636 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
3637 IEEE80211_PATH_PROTOCOL_VENDOR :
3638 IEEE80211_PATH_PROTOCOL_HWMP;
3639
3640 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
3641 setup->path_metric =
3642 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
3643 IEEE80211_PATH_METRIC_VENDOR :
3644 IEEE80211_PATH_METRIC_AIRTIME;
3645
581a8b0f
JC		 3646
3647 if (tb[NL80211_MESH_SETUP_IE]) {
c80d545d 3648 struct nlattr *ieattr =
581a8b0f 3649 tb[NL80211_MESH_SETUP_IE];
c80d545d
JC		 3650 if (!is_valid_ie_attr(ieattr))
3651 return -EINVAL;
581a8b0f
JC		 3652 setup->ie = nla_data(ieattr);
3653 setup->ie_len = nla_len(ieattr);
c80d545d 3654 }
b130e5ce
JC		 3655 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
3656 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
c80d545d
JC		 3657
3658 return 0;
3659}
3660
24bdd9f4 3661static int nl80211_update_mesh_config(struct sk_buff *skb,
29cbe68c 3662 struct genl_info *info)
bd90fdcc
JB		 3663{
3664 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3665 struct net_device *dev = info->user_ptr[1];
29cbe68c 3666 struct wireless_dev *wdev = dev->ieee80211_ptr;
bd90fdcc
JB		 3667 struct mesh_config cfg;
3668 u32 mask;
3669 int err;
3670
29cbe68c
JB		 3671 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
3672 return -EOPNOTSUPP;
3673
24bdd9f4 3674 if (!rdev->ops->update_mesh_config)
bd90fdcc
JB		 3675 return -EOPNOTSUPP;
3676
24bdd9f4 3677 err = nl80211_parse_mesh_config(info, &cfg, &mask);
bd90fdcc
JB		 3678 if (err)
3679 return err;
3680
29cbe68c
JB		 3681 wdev_lock(wdev);
3682 if (!wdev->mesh_id_len)
3683 err = -ENOLINK;
3684
3685 if (!err)
24bdd9f4 3686 err = rdev->ops->update_mesh_config(&rdev->wiphy, dev,
29cbe68c
JB		 3687 mask, &cfg);
3688
3689 wdev_unlock(wdev);
3690
3691 return err;
93da9cc1 3692}
3693
f130347c
LR		 3694static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
3695{
3696 struct sk_buff *msg;
3697 void *hdr = NULL;
3698 struct nlattr *nl_reg_rules;
3699 unsigned int i;
3700 int err = -EINVAL;
3701
a1794390 3702 mutex_lock(&cfg80211_mutex);
f130347c
LR		 3703
3704 if (!cfg80211_regdomain)
3705 goto out;
3706
fd2120ca 3707 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
f130347c
LR		 3708 if (!msg) {
3709 err = -ENOBUFS;
3710 goto out;
3711 }
3712
3713 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
3714 NL80211_CMD_GET_REG);
3715 if (!hdr)
efe1cf0c 3716 goto put_failure;
f130347c 3717
9360ffd1
DM		 3718 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
3719 cfg80211_regdomain->alpha2) ||
3720 (cfg80211_regdomain->dfs_region &&
3721 nla_put_u8(msg, NL80211_ATTR_DFS_REGION,
3722 cfg80211_regdomain->dfs_region)))
3723 goto nla_put_failure;
f130347c
LR		 3724
3725 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
3726 if (!nl_reg_rules)
3727 goto nla_put_failure;
3728
3729 for (i = 0; i < cfg80211_regdomain->n_reg_rules; i++) {
3730 struct nlattr *nl_reg_rule;
3731 const struct ieee80211_reg_rule *reg_rule;
3732 const struct ieee80211_freq_range *freq_range;
3733 const struct ieee80211_power_rule *power_rule;
3734
3735 reg_rule = &cfg80211_regdomain->reg_rules[i];
3736 freq_range = &reg_rule->freq_range;
3737 power_rule = &reg_rule->power_rule;
3738
3739 nl_reg_rule = nla_nest_start(msg, i);
3740 if (!nl_reg_rule)
3741 goto nla_put_failure;
3742
9360ffd1
DM		 3743 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
3744 reg_rule->flags) ||
3745 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
3746 freq_range->start_freq_khz) ||
3747 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
3748 freq_range->end_freq_khz) ||
3749 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
3750 freq_range->max_bandwidth_khz) ||
3751 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
3752 power_rule->max_antenna_gain) ||
3753 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
3754 power_rule->max_eirp))
3755 goto nla_put_failure;
f130347c
LR		 3756
3757 nla_nest_end(msg, nl_reg_rule);
3758 }
3759
3760 nla_nest_end(msg, nl_reg_rules);
3761
3762 genlmsg_end(msg, hdr);
134e6375 3763 err = genlmsg_reply(msg, info);
f130347c
LR		 3764 goto out;
3765
3766nla_put_failure:
3767 genlmsg_cancel(msg, hdr);
efe1cf0c 3768put_failure:
d080e275 3769 nlmsg_free(msg);
f130347c
LR		 3770 err = -EMSGSIZE;
3771out:
a1794390 3772 mutex_unlock(&cfg80211_mutex);
f130347c
LR		 3773 return err;
3774}
3775
b2e1b302
LR		 3776static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
3777{
3778 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
3779 struct nlattr *nl_reg_rule;
3780 char *alpha2 = NULL;
3781 int rem_reg_rules = 0, r = 0;
3782 u32 num_rules = 0, rule_idx = 0, size_of_regd;
8b60b078 3783 u8 dfs_region = 0;
b2e1b302
LR		 3784 struct ieee80211_regdomain *rd = NULL;
3785
3786 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
3787 return -EINVAL;
3788
3789 if (!info->attrs[NL80211_ATTR_REG_RULES])
3790 return -EINVAL;
3791
3792 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
3793
8b60b078
LR		 3794 if (info->attrs[NL80211_ATTR_DFS_REGION])
3795 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
3796
b2e1b302
LR		 3797 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
3798 rem_reg_rules) {
3799 num_rules++;
3800 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4776c6e7 3801 return -EINVAL;
b2e1b302
LR		 3802 }
3803
61405e97
LR		 3804 mutex_lock(&cfg80211_mutex);
3805
d0e18f83
LR		 3806 if (!reg_is_valid_request(alpha2)) {
3807 r = -EINVAL;
3808 goto bad_reg;
3809 }
b2e1b302
LR		 3810
3811 size_of_regd = sizeof(struct ieee80211_regdomain) +
3812 (num_rules * sizeof(struct ieee80211_reg_rule));
3813
3814 rd = kzalloc(size_of_regd, GFP_KERNEL);
d0e18f83
LR		 3815 if (!rd) {
3816 r = -ENOMEM;
3817 goto bad_reg;
3818 }
b2e1b302
LR		 3819
3820 rd->n_reg_rules = num_rules;
3821 rd->alpha2[0] = alpha2[0];
3822 rd->alpha2[1] = alpha2[1];
3823
8b60b078
LR		 3824 /*
3825 * Disable DFS master mode if the DFS region was
3826 * not supported or known on this kernel.
3827 */
3828 if (reg_supported_dfs_region(dfs_region))
3829 rd->dfs_region = dfs_region;
3830
b2e1b302
LR		 3831 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
3832 rem_reg_rules) {
3833 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
3834 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
3835 reg_rule_policy);
3836 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
3837 if (r)
3838 goto bad_reg;
3839
3840 rule_idx++;
3841
d0e18f83
LR		 3842 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
3843 r = -EINVAL;
b2e1b302 3844 goto bad_reg;
d0e18f83 3845 }
b2e1b302
LR		 3846 }
3847
3848 BUG_ON(rule_idx != num_rules);
3849
b2e1b302 3850 r = set_regdom(rd);
61405e97 3851
a1794390 3852 mutex_unlock(&cfg80211_mutex);
d0e18f83 3853
b2e1b302
LR		 3854 return r;
3855
d2372b31 3856 bad_reg:
61405e97 3857 mutex_unlock(&cfg80211_mutex);
b2e1b302 3858 kfree(rd);
d0e18f83 3859 return r;
b2e1b302
LR		 3860}
3861
83f5e2cf
JB		 3862static int validate_scan_freqs(struct nlattr *freqs)
3863{
3864 struct nlattr *attr1, *attr2;
3865 int n_channels = 0, tmp1, tmp2;
3866
3867 nla_for_each_nested(attr1, freqs, tmp1) {
3868 n_channels++;
3869 /*
3870 * Some hardware has a limited channel list for
3871 * scanning, and it is pretty much nonsensical
3872 * to scan for a channel twice, so disallow that
3873 * and don't require drivers to check that the
3874 * channel list they get isn't longer than what
3875 * they can scan, as long as they can scan all
3876 * the channels they registered at once.
3877 */
3878 nla_for_each_nested(attr2, freqs, tmp2)
3879 if (attr1 != attr2 &&
3880 nla_get_u32(attr1) == nla_get_u32(attr2))
3881 return 0;
3882 }
3883
3884 return n_channels;
3885}
3886
2a519311
JB		 3887static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
3888{
4c476991
JB		 3889 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3890 struct net_device *dev = info->user_ptr[1];
2a519311 3891 struct cfg80211_scan_request *request;
2a519311
JB		 3892 struct nlattr *attr;
3893 struct wiphy *wiphy;
83f5e2cf 3894 int err, tmp, n_ssids = 0, n_channels, i;
70692ad2 3895 size_t ie_len;
2a519311 3896
f4a11bb0
JB		 3897 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
3898 return -EINVAL;
3899
79c97e97 3900 wiphy = &rdev->wiphy;
2a519311 3901
4c476991
JB		 3902 if (!rdev->ops->scan)
3903 return -EOPNOTSUPP;
2a519311 3904
4c476991
JB		 3905 if (rdev->scan_req)
3906 return -EBUSY;
2a519311
JB		 3907
3908 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
83f5e2cf
JB		 3909 n_channels = validate_scan_freqs(
3910 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4c476991
JB		 3911 if (!n_channels)
3912 return -EINVAL;
2a519311 3913 } else {
34850ab2 3914 enum ieee80211_band band;
83f5e2cf
JB		 3915 n_channels = 0;
3916
2a519311
JB		 3917 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
3918 if (wiphy->bands[band])
3919 n_channels += wiphy->bands[band]->n_channels;
3920 }
3921
3922 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
3923 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
3924 n_ssids++;
3925
4c476991
JB		 3926 if (n_ssids > wiphy->max_scan_ssids)
3927 return -EINVAL;
2a519311 3928
70692ad2
JM		 3929 if (info->attrs[NL80211_ATTR_IE])
3930 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
3931 else
3932 ie_len = 0;
3933
4c476991
JB		 3934 if (ie_len > wiphy->max_scan_ie_len)
3935 return -EINVAL;
18a83659 3936
2a519311 3937 request = kzalloc(sizeof(*request)
a2cd43c5
LC		 3938 + sizeof(*request->ssids) * n_ssids
3939 + sizeof(*request->channels) * n_channels
70692ad2 3940 + ie_len, GFP_KERNEL);
4c476991
JB		 3941 if (!request)
3942 return -ENOMEM;
2a519311 3943
2a519311 3944 if (n_ssids)
5ba63533 3945 request->ssids = (void *)&request->channels[n_channels];
2a519311 3946 request->n_ssids = n_ssids;
70692ad2
JM		 3947 if (ie_len) {
3948 if (request->ssids)
3949 request->ie = (void *)(request->ssids + n_ssids);
3950 else
3951 request->ie = (void *)(request->channels + n_channels);
3952 }
2a519311 3953
584991dc 3954 i = 0;
2a519311
JB		 3955 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
3956 /* user specified, bail out if channel not found */
2a519311 3957 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
584991dc
JB		 3958 struct ieee80211_channel *chan;
3959
3960 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
3961
3962 if (!chan) {
2a519311
JB		 3963 err = -EINVAL;
3964 goto out_free;
3965 }
584991dc
JB		 3966
3967 /* ignore disabled channels */
3968 if (chan->flags & IEEE80211_CHAN_DISABLED)
3969 continue;
3970
3971 request->channels[i] = chan;
2a519311
JB		 3972 i++;
3973 }
3974 } else {
34850ab2
JB		 3975 enum ieee80211_band band;
3976
2a519311 3977 /* all channels */
2a519311
JB		 3978 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
3979 int j;
3980 if (!wiphy->bands[band])
3981 continue;
3982 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
584991dc
JB		 3983 struct ieee80211_channel *chan;
3984
3985 chan = &wiphy->bands[band]->channels[j];
3986
3987 if (chan->flags & IEEE80211_CHAN_DISABLED)
3988 continue;
3989
3990 request->channels[i] = chan;
2a519311
JB		 3991 i++;
3992 }
3993 }
3994 }
3995
584991dc
JB		 3996 if (!i) {
3997 err = -EINVAL;
3998 goto out_free;
3999 }
4000
4001 request->n_channels = i;
4002
2a519311
JB		 4003 i = 0;
4004 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
4005 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
57a27e1d 4006 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
2a519311
JB		 4007 err = -EINVAL;
4008 goto out_free;
4009 }
57a27e1d 4010 request->ssids[i].ssid_len = nla_len(attr);
2a519311 4011 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
2a519311
JB		 4012 i++;
4013 }
4014 }
4015
70692ad2
JM		 4016 if (info->attrs[NL80211_ATTR_IE]) {
4017 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
de95a54b
JB		 4018 memcpy((void *)request->ie,
4019 nla_data(info->attrs[NL80211_ATTR_IE]),
70692ad2
JM		 4020 request->ie_len);
4021 }
4022
34850ab2 4023 for (i = 0; i < IEEE80211_NUM_BANDS; i++)
a401d2bb
JB		 4024 if (wiphy->bands[i])
4025 request->rates[i] =
4026 (1 << wiphy->bands[i]->n_bitrates) - 1;
34850ab2
JB		 4027
4028 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
4029 nla_for_each_nested(attr,
4030 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
4031 tmp) {
4032 enum ieee80211_band band = nla_type(attr);
4033
84404623 4034 if (band < 0 || band >= IEEE80211_NUM_BANDS) {
34850ab2
JB		 4035 err = -EINVAL;
4036 goto out_free;
4037 }
4038 err = ieee80211_get_ratemask(wiphy->bands[band],
4039 nla_data(attr),
4040 nla_len(attr),
4041 &request->rates[band]);
4042 if (err)
4043 goto out_free;
4044 }
4045 }
4046
e9f935e3
RM		 4047 request->no_cck =
4048 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
4049
463d0183 4050 request->dev = dev;
79c97e97 4051 request->wiphy = &rdev->wiphy;
2a519311 4052
79c97e97
JB		 4053 rdev->scan_req = request;
4054 err = rdev->ops->scan(&rdev->wiphy, dev, request);
2a519311 4055
463d0183 4056 if (!err) {
79c97e97 4057 nl80211_send_scan_start(rdev, dev);
463d0183 4058 dev_hold(dev);
4c476991 4059 } else {
2a519311 4060 out_free:
79c97e97 4061 rdev->scan_req = NULL;
2a519311
JB		 4062 kfree(request);
4063 }
3b85875a 4064
2a519311
JB		 4065 return err;
4066}
4067
807f8a8c
LC		 4068static int nl80211_start_sched_scan(struct sk_buff *skb,
4069 struct genl_info *info)
4070{
4071 struct cfg80211_sched_scan_request *request;
4072 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4073 struct net_device *dev = info->user_ptr[1];
807f8a8c
LC		 4074 struct nlattr *attr;
4075 struct wiphy *wiphy;
a1f1c21c 4076 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i;
bbe6ad6d 4077 u32 interval;
807f8a8c
LC		 4078 enum ieee80211_band band;
4079 size_t ie_len;
a1f1c21c 4080 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
807f8a8c
LC		 4081
4082 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
4083 !rdev->ops->sched_scan_start)
4084 return -EOPNOTSUPP;
4085
4086 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4087 return -EINVAL;
4088
bbe6ad6d
LC		 4089 if (!info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
4090 return -EINVAL;
4091
4092 interval = nla_get_u32(info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
4093 if (interval == 0)
4094 return -EINVAL;
4095
807f8a8c
LC		 4096 wiphy = &rdev->wiphy;
4097
4098 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4099 n_channels = validate_scan_freqs(
4100 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4101 if (!n_channels)
4102 return -EINVAL;
4103 } else {
4104 n_channels = 0;
4105
4106 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
4107 if (wiphy->bands[band])
4108 n_channels += wiphy->bands[band]->n_channels;
4109 }
4110
4111 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
4112 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
4113 tmp)
4114 n_ssids++;
4115
93b6aa69 4116 if (n_ssids > wiphy->max_sched_scan_ssids)
807f8a8c
LC		 4117 return -EINVAL;
4118
a1f1c21c
LC		 4119 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH])
4120 nla_for_each_nested(attr,
4121 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
4122 tmp)
4123 n_match_sets++;
4124
4125 if (n_match_sets > wiphy->max_match_sets)
4126 return -EINVAL;
4127
807f8a8c
LC		 4128 if (info->attrs[NL80211_ATTR_IE])
4129 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4130 else
4131 ie_len = 0;
4132
5a865bad 4133 if (ie_len > wiphy->max_sched_scan_ie_len)
807f8a8c
LC		 4134 return -EINVAL;
4135
c10841ca
LC		 4136 mutex_lock(&rdev->sched_scan_mtx);
4137
4138 if (rdev->sched_scan_req) {
4139 err = -EINPROGRESS;
4140 goto out;
4141 }
4142
807f8a8c 4143 request = kzalloc(sizeof(*request)
a2cd43c5 4144 + sizeof(*request->ssids) * n_ssids
a1f1c21c 4145 + sizeof(*request->match_sets) * n_match_sets
a2cd43c5 4146 + sizeof(*request->channels) * n_channels
807f8a8c 4147 + ie_len, GFP_KERNEL);
c10841ca
LC		 4148 if (!request) {
4149 err = -ENOMEM;
4150 goto out;
4151 }
807f8a8c
LC		 4152
4153 if (n_ssids)
4154 request->ssids = (void *)&request->channels[n_channels];
4155 request->n_ssids = n_ssids;
4156 if (ie_len) {
4157 if (request->ssids)
4158 request->ie = (void *)(request->ssids + n_ssids);
4159 else
4160 request->ie = (void *)(request->channels + n_channels);
4161 }
4162
a1f1c21c
LC		 4163 if (n_match_sets) {
4164 if (request->ie)
4165 request->match_sets = (void *)(request->ie + ie_len);
4166 else if (request->ssids)
4167 request->match_sets =
4168 (void *)(request->ssids + n_ssids);
4169 else
4170 request->match_sets =
4171 (void *)(request->channels + n_channels);
4172 }
4173 request->n_match_sets = n_match_sets;
4174
807f8a8c
LC		 4175 i = 0;
4176 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4177 /* user specified, bail out if channel not found */
4178 nla_for_each_nested(attr,
4179 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES],
4180 tmp) {
4181 struct ieee80211_channel *chan;
4182
4183 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
4184
4185 if (!chan) {
4186 err = -EINVAL;
4187 goto out_free;
4188 }
4189
4190 /* ignore disabled channels */
4191 if (chan->flags & IEEE80211_CHAN_DISABLED)
4192 continue;
4193
4194 request->channels[i] = chan;
4195 i++;
4196 }
4197 } else {
4198 /* all channels */
4199 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4200 int j;
4201 if (!wiphy->bands[band])
4202 continue;
4203 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
4204 struct ieee80211_channel *chan;
4205
4206 chan = &wiphy->bands[band]->channels[j];
4207
4208 if (chan->flags & IEEE80211_CHAN_DISABLED)
4209 continue;
4210
4211 request->channels[i] = chan;
4212 i++;
4213 }
4214 }
4215 }
4216
4217 if (!i) {
4218 err = -EINVAL;
4219 goto out_free;
4220 }
4221
4222 request->n_channels = i;
4223
4224 i = 0;
4225 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
4226 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
4227 tmp) {
57a27e1d 4228 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
807f8a8c
LC		 4229 err = -EINVAL;
4230 goto out_free;
4231 }
57a27e1d 4232 request->ssids[i].ssid_len = nla_len(attr);
807f8a8c
LC		 4233 memcpy(request->ssids[i].ssid, nla_data(attr),
4234 nla_len(attr));
807f8a8c
LC		 4235 i++;
4236 }
4237 }
4238
a1f1c21c
LC		 4239 i = 0;
4240 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
4241 nla_for_each_nested(attr,
4242 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
4243 tmp) {
4244 struct nlattr *ssid;
4245
4246 nla_parse(tb, NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
4247 nla_data(attr), nla_len(attr),
4248 nl80211_match_policy);
4249 ssid = tb[NL80211_ATTR_SCHED_SCAN_MATCH_SSID];
4250 if (ssid) {
4251 if (nla_len(ssid) > IEEE80211_MAX_SSID_LEN) {
4252 err = -EINVAL;
4253 goto out_free;
4254 }
4255 memcpy(request->match_sets[i].ssid.ssid,
4256 nla_data(ssid), nla_len(ssid));
4257 request->match_sets[i].ssid.ssid_len =
4258 nla_len(ssid);
4259 }
4260 i++;
4261 }
4262 }
4263
807f8a8c
LC		 4264 if (info->attrs[NL80211_ATTR_IE]) {
4265 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4266 memcpy((void *)request->ie,
4267 nla_data(info->attrs[NL80211_ATTR_IE]),
4268 request->ie_len);
4269 }
4270
4271 request->dev = dev;
4272 request->wiphy = &rdev->wiphy;
bbe6ad6d 4273 request->interval = interval;
807f8a8c
LC		 4274
4275 err = rdev->ops->sched_scan_start(&rdev->wiphy, dev, request);
4276 if (!err) {
4277 rdev->sched_scan_req = request;
4278 nl80211_send_sched_scan(rdev, dev,
4279 NL80211_CMD_START_SCHED_SCAN);
4280 goto out;
4281 }
4282
4283out_free:
4284 kfree(request);
4285out:
c10841ca 4286 mutex_unlock(&rdev->sched_scan_mtx);
807f8a8c
LC		 4287 return err;
4288}
4289
4290static int nl80211_stop_sched_scan(struct sk_buff *skb,
4291 struct genl_info *info)
4292{
4293 struct cfg80211_registered_device *rdev = info->user_ptr[0];
c10841ca 4294 int err;
807f8a8c
LC		 4295
4296 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
4297 !rdev->ops->sched_scan_stop)
4298 return -EOPNOTSUPP;
4299
c10841ca
LC		 4300 mutex_lock(&rdev->sched_scan_mtx);
4301 err = __cfg80211_stop_sched_scan(rdev, false);
4302 mutex_unlock(&rdev->sched_scan_mtx);
4303
4304 return err;
807f8a8c
LC		 4305}
4306
9720bb3a
JB		 4307static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
4308 u32 seq, int flags,
2a519311 4309 struct cfg80211_registered_device *rdev,
48ab905d
JB		 4310 struct wireless_dev *wdev,
4311 struct cfg80211_internal_bss *intbss)
2a519311 4312{
48ab905d 4313 struct cfg80211_bss *res = &intbss->pub;
2a519311
JB		 4314 void *hdr;
4315 struct nlattr *bss;
48ab905d
JB		 4316
4317 ASSERT_WDEV_LOCK(wdev);
2a519311 4318
9720bb3a 4319 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).pid, seq, flags,
2a519311
JB		 4320 NL80211_CMD_NEW_SCAN_RESULTS);
4321 if (!hdr)
4322 return -1;
4323
9720bb3a
JB		 4324 genl_dump_check_consistent(cb, hdr, &nl80211_fam);
4325
9360ffd1
DM		 4326 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation) ||
4327 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
4328 goto nla_put_failure;
2a519311
JB		 4329
4330 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
4331 if (!bss)
4332 goto nla_put_failure;
9360ffd1
DM		 4333 if ((!is_zero_ether_addr(res->bssid) &&
4334 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)) ||
4335 (res->information_elements && res->len_information_elements &&
4336 nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
4337 res->len_information_elements,
4338 res->information_elements)) ||
4339 (res->beacon_ies && res->len_beacon_ies &&
4340 res->beacon_ies != res->information_elements &&
4341 nla_put(msg, NL80211_BSS_BEACON_IES,
4342 res->len_beacon_ies, res->beacon_ies)))
4343 goto nla_put_failure;
4344 if (res->tsf &&
4345 nla_put_u64(msg, NL80211_BSS_TSF, res->tsf))
4346 goto nla_put_failure;
4347 if (res->beacon_interval &&
4348 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
4349 goto nla_put_failure;
4350 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
4351 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
4352 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
4353 jiffies_to_msecs(jiffies - intbss->ts)))
4354 goto nla_put_failure;
2a519311 4355
77965c97 4356 switch (rdev->wiphy.signal_type) {
2a519311 4357 case CFG80211_SIGNAL_TYPE_MBM:
9360ffd1
DM		 4358 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
4359 goto nla_put_failure;
2a519311
JB		 4360 break;
4361 case CFG80211_SIGNAL_TYPE_UNSPEC:
9360ffd1
DM		 4362 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
4363 goto nla_put_failure;
2a519311
JB		 4364 break;
4365 default:
4366 break;
4367 }
4368
48ab905d 4369 switch (wdev->iftype) {
074ac8df 4370 case NL80211_IFTYPE_P2P_CLIENT:
48ab905d 4371 case NL80211_IFTYPE_STATION:
9360ffd1
DM		 4372 if (intbss == wdev->current_bss &&
4373 nla_put_u32(msg, NL80211_BSS_STATUS,
4374 NL80211_BSS_STATUS_ASSOCIATED))
4375 goto nla_put_failure;
48ab905d
JB		 4376 break;
4377 case NL80211_IFTYPE_ADHOC:
9360ffd1
DM		 4378 if (intbss == wdev->current_bss &&
4379 nla_put_u32(msg, NL80211_BSS_STATUS,
4380 NL80211_BSS_STATUS_IBSS_JOINED))
4381 goto nla_put_failure;
48ab905d
JB		 4382 break;
4383 default:
4384 break;
4385 }
4386
2a519311
JB		 4387 nla_nest_end(msg, bss);
4388
4389 return genlmsg_end(msg, hdr);
4390
4391 nla_put_failure:
4392 genlmsg_cancel(msg, hdr);
4393 return -EMSGSIZE;
4394}
4395
4396static int nl80211_dump_scan(struct sk_buff *skb,
4397 struct netlink_callback *cb)
4398{
48ab905d
JB		 4399 struct cfg80211_registered_device *rdev;
4400 struct net_device *dev;
2a519311 4401 struct cfg80211_internal_bss *scan;
48ab905d 4402 struct wireless_dev *wdev;
2a519311
JB		 4403 int start = cb->args[1], idx = 0;
4404 int err;
4405
67748893
JB		 4406 err = nl80211_prepare_netdev_dump(skb, cb, &rdev, &dev);
4407 if (err)
4408 return err;
2a519311 4409
48ab905d 4410 wdev = dev->ieee80211_ptr;
2a519311 4411
48ab905d
JB		 4412 wdev_lock(wdev);
4413 spin_lock_bh(&rdev->bss_lock);
4414 cfg80211_bss_expire(rdev);
4415
9720bb3a
JB		 4416 cb->seq = rdev->bss_generation;
4417
48ab905d 4418 list_for_each_entry(scan, &rdev->bss_list, list) {
2a519311
JB		 4419 if (++idx <= start)
4420 continue;
9720bb3a 4421 if (nl80211_send_bss(skb, cb,
2a519311 4422 cb->nlh->nlmsg_seq, NLM_F_MULTI,
48ab905d 4423 rdev, wdev, scan) < 0) {
2a519311 4424 idx--;
67748893 4425 break;
2a519311
JB		 4426 }
4427 }
4428
48ab905d
JB		 4429 spin_unlock_bh(&rdev->bss_lock);
4430 wdev_unlock(wdev);
2a519311
JB		 4431
4432 cb->args[1] = idx;
67748893 4433 nl80211_finish_netdev_dump(rdev);
2a519311 4434
67748893 4435 return skb->len;
2a519311
JB		 4436}
4437
61fa713c
HS		 4438static int nl80211_send_survey(struct sk_buff *msg, u32 pid, u32 seq,
4439 int flags, struct net_device *dev,
4440 struct survey_info *survey)
4441{
4442 void *hdr;
4443 struct nlattr *infoattr;
4444
61fa713c
HS		 4445 hdr = nl80211hdr_put(msg, pid, seq, flags,
4446 NL80211_CMD_NEW_SURVEY_RESULTS);
4447 if (!hdr)
4448 return -ENOMEM;
4449
9360ffd1
DM		 4450 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
4451 goto nla_put_failure;
61fa713c
HS		 4452
4453 infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
4454 if (!infoattr)
4455 goto nla_put_failure;
4456
9360ffd1
DM		 4457 if (nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
4458 survey->channel->center_freq))
4459 goto nla_put_failure;
4460
4461 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
4462 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
4463 goto nla_put_failure;
4464 if ((survey->filled & SURVEY_INFO_IN_USE) &&
4465 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
4466 goto nla_put_failure;
4467 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME) &&
4468 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME,
4469 survey->channel_time))
4470 goto nla_put_failure;
4471 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_BUSY) &&
4472 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_BUSY,
4473 survey->channel_time_busy))
4474 goto nla_put_failure;
4475 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_EXT_BUSY) &&
4476 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_EXT_BUSY,
4477 survey->channel_time_ext_busy))
4478 goto nla_put_failure;
4479 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_RX) &&
4480 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_RX,
4481 survey->channel_time_rx))
4482 goto nla_put_failure;
4483 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_TX) &&
4484 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_TX,
4485 survey->channel_time_tx))
4486 goto nla_put_failure;
61fa713c
HS		 4487
4488 nla_nest_end(msg, infoattr);
4489
4490 return genlmsg_end(msg, hdr);
4491
4492 nla_put_failure:
4493 genlmsg_cancel(msg, hdr);
4494 return -EMSGSIZE;
4495}
4496
4497static int nl80211_dump_survey(struct sk_buff *skb,
4498 struct netlink_callback *cb)
4499{
4500 struct survey_info survey;
4501 struct cfg80211_registered_device *dev;
4502 struct net_device *netdev;
61fa713c
HS		 4503 int survey_idx = cb->args[1];
4504 int res;
4505
67748893
JB		 4506 res = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
4507 if (res)
4508 return res;
61fa713c
HS		 4509
4510 if (!dev->ops->dump_survey) {
4511 res = -EOPNOTSUPP;
4512 goto out_err;
4513 }
4514
4515 while (1) {
180cdc79
LR		 4516 struct ieee80211_channel *chan;
4517
61fa713c
HS		 4518 res = dev->ops->dump_survey(&dev->wiphy, netdev, survey_idx,
4519 &survey);
4520 if (res == -ENOENT)
4521 break;
4522 if (res)
4523 goto out_err;
4524
180cdc79
LR		 4525 /* Survey without a channel doesn't make sense */
4526 if (!survey.channel) {
4527 res = -EINVAL;
4528 goto out;
4529 }
4530
4531 chan = ieee80211_get_channel(&dev->wiphy,
4532 survey.channel->center_freq);
4533 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED) {
4534 survey_idx++;
4535 continue;
4536 }
4537
61fa713c
HS		 4538 if (nl80211_send_survey(skb,
4539 NETLINK_CB(cb->skb).pid,
4540 cb->nlh->nlmsg_seq, NLM_F_MULTI,
4541 netdev,
4542 &survey) < 0)
4543 goto out;
4544 survey_idx++;
4545 }
4546
4547 out:
4548 cb->args[1] = survey_idx;
4549 res = skb->len;
4550 out_err:
67748893 4551 nl80211_finish_netdev_dump(dev);
61fa713c
HS		 4552 return res;
4553}
4554
255e737e
JM		 4555static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type)
4556{
b23aa676
SO		 4557 return auth_type <= NL80211_AUTHTYPE_MAX;
4558}
4559
4560static bool nl80211_valid_wpa_versions(u32 wpa_versions)
4561{
4562 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
4563 NL80211_WPA_VERSION_2));
4564}
4565
636a5d36
JM		 4566static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
4567{
4c476991
JB		 4568 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4569 struct net_device *dev = info->user_ptr[1];
19957bb3
JB		 4570 struct ieee80211_channel *chan;
4571 const u8 *bssid, *ssid, *ie = NULL;
4572 int err, ssid_len, ie_len = 0;
4573 enum nl80211_auth_type auth_type;
fffd0934 4574 struct key_parse key;
d5cdfacb 4575 bool local_state_change;
636a5d36 4576
f4a11bb0
JB		 4577 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4578 return -EINVAL;
4579
4580 if (!info->attrs[NL80211_ATTR_MAC])
4581 return -EINVAL;
4582
1778092e
JM		 4583 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
4584 return -EINVAL;
4585
19957bb3
JB		 4586 if (!info->attrs[NL80211_ATTR_SSID])
4587 return -EINVAL;
4588
4589 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
4590 return -EINVAL;
4591
fffd0934
JB		 4592 err = nl80211_parse_key(info, &key);
4593 if (err)
4594 return err;
4595
4596 if (key.idx >= 0) {
e31b8213
JB		 4597 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
4598 return -EINVAL;
fffd0934
JB		 4599 if (!key.p.key || !key.p.key_len)
4600 return -EINVAL;
4601 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
4602 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
4603 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
4604 key.p.key_len != WLAN_KEY_LEN_WEP104))
4605 return -EINVAL;
4606 if (key.idx > 4)
4607 return -EINVAL;
4608 } else {
4609 key.p.key_len = 0;
4610 key.p.key = NULL;
4611 }
4612
afea0b7a
JB		 4613 if (key.idx >= 0) {
4614 int i;
4615 bool ok = false;
4616 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
4617 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
4618 ok = true;
4619 break;
4620 }
4621 }
4c476991
JB		 4622 if (!ok)
4623 return -EINVAL;
afea0b7a
JB		 4624 }
4625
4c476991
JB		 4626 if (!rdev->ops->auth)
4627 return -EOPNOTSUPP;
636a5d36 4628
074ac8df 4629 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4630 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4631 return -EOPNOTSUPP;
eec60b03 4632
19957bb3 4633 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
79c97e97 4634 chan = ieee80211_get_channel(&rdev->wiphy,
19957bb3 4635 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4636 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4637 return -EINVAL;
636a5d36 4638
19957bb3
JB		 4639 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4640 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4641
4642 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4643 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4644 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4645 }
4646
19957bb3 4647 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
4c476991
JB		 4648 if (!nl80211_valid_auth_type(auth_type))
4649 return -EINVAL;
636a5d36 4650
d5cdfacb
JM		 4651 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4652
95de817b
JB		 4653 /*
4654 * Since we no longer track auth state, ignore
4655 * requests to only change local state.
4656 */
4657 if (local_state_change)
4658 return 0;
4659
4c476991
JB		 4660 return cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
4661 ssid, ssid_len, ie, ie_len,
95de817b 4662 key.p.key, key.p.key_len, key.idx);
636a5d36
JM		 4663}
4664
c0692b8f
JB		 4665static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
4666 struct genl_info *info,
3dc27d25
JB		 4667 struct cfg80211_crypto_settings *settings,
4668 int cipher_limit)
b23aa676 4669{
c0b2bbd8
JB		 4670 memset(settings, 0, sizeof(*settings));
4671
b23aa676
SO		 4672 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
4673
c0692b8f
JB		 4674 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
4675 u16 proto;
4676 proto = nla_get_u16(
4677 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
4678 settings->control_port_ethertype = cpu_to_be16(proto);
4679 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
4680 proto != ETH_P_PAE)
4681 return -EINVAL;
4682 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
4683 settings->control_port_no_encrypt = true;
4684 } else
4685 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
4686
b23aa676
SO		 4687 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
4688 void *data;
4689 int len, i;
4690
4691 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
4692 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
4693 settings->n_ciphers_pairwise = len / sizeof(u32);
4694
4695 if (len % sizeof(u32))
4696 return -EINVAL;
4697
3dc27d25 4698 if (settings->n_ciphers_pairwise > cipher_limit)
b23aa676
SO		 4699 return -EINVAL;
4700
4701 memcpy(settings->ciphers_pairwise, data, len);
4702
4703 for (i = 0; i < settings->n_ciphers_pairwise; i++)
38ba3c57
JM		 4704 if (!cfg80211_supported_cipher_suite(
4705 &rdev->wiphy,
b23aa676
SO		 4706 settings->ciphers_pairwise[i]))
4707 return -EINVAL;
4708 }
4709
4710 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
4711 settings->cipher_group =
4712 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
38ba3c57
JM		 4713 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
4714 settings->cipher_group))
b23aa676
SO		 4715 return -EINVAL;
4716 }
4717
4718 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
4719 settings->wpa_versions =
4720 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
4721 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
4722 return -EINVAL;
4723 }
4724
4725 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
4726 void *data;
6d30240e 4727 int len;
b23aa676
SO		 4728
4729 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
4730 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
4731 settings->n_akm_suites = len / sizeof(u32);
4732
4733 if (len % sizeof(u32))
4734 return -EINVAL;
4735
1b9ca027
JM		 4736 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
4737 return -EINVAL;
4738
b23aa676 4739 memcpy(settings->akm_suites, data, len);
b23aa676
SO		 4740 }
4741
4742 return 0;
4743}
4744
636a5d36
JM		 4745static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
4746{
4c476991
JB		 4747 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4748 struct net_device *dev = info->user_ptr[1];
19957bb3 4749 struct cfg80211_crypto_settings crypto;
f444de05 4750 struct ieee80211_channel *chan;
3e5d7649 4751 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
19957bb3
JB		 4752 int err, ssid_len, ie_len = 0;
4753 bool use_mfp = false;
7e7c8926
BG		 4754 u32 flags = 0;
4755 struct ieee80211_ht_cap *ht_capa = NULL;
4756 struct ieee80211_ht_cap *ht_capa_mask = NULL;
636a5d36 4757
f4a11bb0
JB		 4758 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4759 return -EINVAL;
4760
4761 if (!info->attrs[NL80211_ATTR_MAC] ||
19957bb3
JB		 4762 !info->attrs[NL80211_ATTR_SSID] ||
4763 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
f4a11bb0
JB		 4764 return -EINVAL;
4765
4c476991
JB		 4766 if (!rdev->ops->assoc)
4767 return -EOPNOTSUPP;
636a5d36 4768
074ac8df 4769 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4770 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4771 return -EOPNOTSUPP;
eec60b03 4772
19957bb3 4773 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4774
19957bb3
JB		 4775 chan = ieee80211_get_channel(&rdev->wiphy,
4776 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
4c476991
JB		 4777 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
4778 return -EINVAL;
636a5d36 4779
19957bb3
JB		 4780 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4781 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
636a5d36
JM		 4782
4783 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4784 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4785 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4786 }
4787
dc6382ce 4788 if (info->attrs[NL80211_ATTR_USE_MFP]) {
4f5dadce 4789 enum nl80211_mfp mfp =
dc6382ce 4790 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
4f5dadce 4791 if (mfp == NL80211_MFP_REQUIRED)
19957bb3 4792 use_mfp = true;
4c476991
JB		 4793 else if (mfp != NL80211_MFP_NO)
4794 return -EINVAL;
dc6382ce
JM		 4795 }
4796
3e5d7649
JB		 4797 if (info->attrs[NL80211_ATTR_PREV_BSSID])
4798 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
4799
7e7c8926
BG		 4800 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
4801 flags |= ASSOC_REQ_DISABLE_HT;
4802
4803 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
4804 ht_capa_mask =
4805 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]);
4806
4807 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
4808 if (!ht_capa_mask)
4809 return -EINVAL;
4810 ht_capa = nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
4811 }
4812
c0692b8f 4813 err = nl80211_crypto_settings(rdev, info, &crypto, 1);
b23aa676 4814 if (!err)
3e5d7649
JB		 4815 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
4816 ssid, ssid_len, ie, ie_len, use_mfp,
7e7c8926
BG		 4817 &crypto, flags, ht_capa,
4818 ht_capa_mask);
636a5d36 4819
636a5d36
JM		 4820 return err;
4821}
4822
4823static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
4824{
4c476991
JB		 4825 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4826 struct net_device *dev = info->user_ptr[1];
19957bb3 4827 const u8 *ie = NULL, *bssid;
4c476991 4828 int ie_len = 0;
19957bb3 4829 u16 reason_code;
d5cdfacb 4830 bool local_state_change;
636a5d36 4831
f4a11bb0
JB		 4832 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4833 return -EINVAL;
4834
4835 if (!info->attrs[NL80211_ATTR_MAC])
4836 return -EINVAL;
4837
4838 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4839 return -EINVAL;
4840
4c476991
JB		 4841 if (!rdev->ops->deauth)
4842 return -EOPNOTSUPP;
636a5d36 4843
074ac8df 4844 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4845 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4846 return -EOPNOTSUPP;
eec60b03 4847
19957bb3 4848 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4849
19957bb3
JB		 4850 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4851 if (reason_code == 0) {
f4a11bb0 4852 /* Reason Code 0 is reserved */
4c476991 4853 return -EINVAL;
255e737e 4854 }
636a5d36
JM		 4855
4856 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4857 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4858 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4859 }
4860
d5cdfacb
JM		 4861 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4862
4c476991
JB		 4863 return cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
4864 local_state_change);
636a5d36
JM		 4865}
4866
4867static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
4868{
4c476991
JB		 4869 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4870 struct net_device *dev = info->user_ptr[1];
19957bb3 4871 const u8 *ie = NULL, *bssid;
4c476991 4872 int ie_len = 0;
19957bb3 4873 u16 reason_code;
d5cdfacb 4874 bool local_state_change;
636a5d36 4875
f4a11bb0
JB		 4876 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4877 return -EINVAL;
4878
4879 if (!info->attrs[NL80211_ATTR_MAC])
4880 return -EINVAL;
4881
4882 if (!info->attrs[NL80211_ATTR_REASON_CODE])
4883 return -EINVAL;
4884
4c476991
JB		 4885 if (!rdev->ops->disassoc)
4886 return -EOPNOTSUPP;
636a5d36 4887
074ac8df 4888 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 4889 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
4890 return -EOPNOTSUPP;
eec60b03 4891
19957bb3 4892 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
636a5d36 4893
19957bb3
JB		 4894 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
4895 if (reason_code == 0) {
f4a11bb0 4896 /* Reason Code 0 is reserved */
4c476991 4897 return -EINVAL;
255e737e 4898 }
636a5d36
JM		 4899
4900 if (info->attrs[NL80211_ATTR_IE]) {
19957bb3
JB		 4901 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4902 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
636a5d36
JM		 4903 }
4904
d5cdfacb
JM		 4905 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
4906
4c476991
JB		 4907 return cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
4908 local_state_change);
636a5d36
JM		 4909}
4910
dd5b4cc7
FF		 4911static bool
4912nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
4913 int mcast_rate[IEEE80211_NUM_BANDS],
4914 int rateval)
4915{
4916 struct wiphy *wiphy = &rdev->wiphy;
4917 bool found = false;
4918 int band, i;
4919
4920 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4921 struct ieee80211_supported_band *sband;
4922
4923 sband = wiphy->bands[band];
4924 if (!sband)
4925 continue;
4926
4927 for (i = 0; i < sband->n_bitrates; i++) {
4928 if (sband->bitrates[i].bitrate == rateval) {
4929 mcast_rate[band] = i + 1;
4930 found = true;
4931 break;
4932 }
4933 }
4934 }
4935
4936 return found;
4937}
4938
04a773ad
JB		 4939static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
4940{
4c476991
JB		 4941 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4942 struct net_device *dev = info->user_ptr[1];
04a773ad
JB		 4943 struct cfg80211_ibss_params ibss;
4944 struct wiphy *wiphy;
fffd0934 4945 struct cfg80211_cached_keys *connkeys = NULL;
04a773ad
JB		 4946 int err;
4947
8e30bc55
JB		 4948 memset(&ibss, 0, sizeof(ibss));
4949
04a773ad
JB		 4950 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4951 return -EINVAL;
4952
4953 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
4954 !info->attrs[NL80211_ATTR_SSID] ||
4955 !nla_len(info->attrs[NL80211_ATTR_SSID]))
4956 return -EINVAL;
4957
8e30bc55
JB		 4958 ibss.beacon_interval = 100;
4959
4960 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
4961 ibss.beacon_interval =
4962 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
4963 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
4964 return -EINVAL;
4965 }
4966
4c476991
JB		 4967 if (!rdev->ops->join_ibss)
4968 return -EOPNOTSUPP;
04a773ad 4969
4c476991
JB		 4970 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
4971 return -EOPNOTSUPP;
04a773ad 4972
79c97e97 4973 wiphy = &rdev->wiphy;
04a773ad 4974
39193498 4975 if (info->attrs[NL80211_ATTR_MAC]) {
04a773ad 4976 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
39193498
JB		 4977
4978 if (!is_valid_ether_addr(ibss.bssid))
4979 return -EINVAL;
4980 }
04a773ad
JB		 4981 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
4982 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
4983
4984 if (info->attrs[NL80211_ATTR_IE]) {
4985 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
4986 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4987 }
4988
54858ee5
AS		 4989 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
4990 enum nl80211_channel_type channel_type;
4991
cd6c6598 4992 if (!nl80211_valid_channel_type(info, &channel_type))
54858ee5
AS		 4993 return -EINVAL;
4994
4995 if (channel_type != NL80211_CHAN_NO_HT &&
4996 !(wiphy->features & NL80211_FEATURE_HT_IBSS))
4997 return -EINVAL;
4998
4999 ibss.channel_type = channel_type;
5000 } else {
5001 ibss.channel_type = NL80211_CHAN_NO_HT;
5002 }
5003
5004 ibss.channel = rdev_freq_to_chan(rdev,
5005 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
5006 ibss.channel_type);
04a773ad
JB		 5007 if (!ibss.channel ||
5008 ibss.channel->flags & IEEE80211_CHAN_NO_IBSS ||
4c476991
JB		 5009 ibss.channel->flags & IEEE80211_CHAN_DISABLED)
5010 return -EINVAL;
04a773ad 5011
54858ee5
AS		 5012 /* Both channels should be able to initiate communication */
5013 if ((ibss.channel_type == NL80211_CHAN_HT40PLUS ||
5014 ibss.channel_type == NL80211_CHAN_HT40MINUS) &&
5015 !cfg80211_can_beacon_sec_chan(&rdev->wiphy, ibss.channel,
5016 ibss.channel_type))
5017 return -EINVAL;
5018
04a773ad 5019 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
fffd0934
JB		 5020 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
5021
fbd2c8dc
TP		 5022 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
5023 u8 *rates =
5024 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
5025 int n_rates =
5026 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
5027 struct ieee80211_supported_band *sband =
5028 wiphy->bands[ibss.channel->band];
fbd2c8dc 5029
34850ab2
JB		 5030 err = ieee80211_get_ratemask(sband, rates, n_rates,
5031 &ibss.basic_rates);
5032 if (err)
5033 return err;
fbd2c8dc 5034 }
dd5b4cc7
FF		 5035
5036 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
5037 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
5038 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
5039 return -EINVAL;
fbd2c8dc 5040
4c476991
JB		 5041 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
5042 connkeys = nl80211_parse_connkeys(rdev,
5043 info->attrs[NL80211_ATTR_KEYS]);
5044 if (IS_ERR(connkeys))
5045 return PTR_ERR(connkeys);
5046 }
04a773ad 5047
267335d6
AQ		 5048 ibss.control_port =
5049 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
5050
4c476991 5051 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
fffd0934
JB		 5052 if (err)
5053 kfree(connkeys);
04a773ad
JB		 5054 return err;
5055}
5056
5057static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
5058{
4c476991
JB		 5059 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5060 struct net_device *dev = info->user_ptr[1];
04a773ad 5061
4c476991
JB		 5062 if (!rdev->ops->leave_ibss)
5063 return -EOPNOTSUPP;
04a773ad 5064
4c476991
JB		 5065 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
5066 return -EOPNOTSUPP;
04a773ad 5067
4c476991 5068 return cfg80211_leave_ibss(rdev, dev, false);
04a773ad
JB		 5069}
5070
aff89a9b
JB		 5071#ifdef CONFIG_NL80211_TESTMODE
5072static struct genl_multicast_group nl80211_testmode_mcgrp = {
5073 .name = "testmode",
5074};
5075
5076static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
5077{
4c476991 5078 struct cfg80211_registered_device *rdev = info->user_ptr[0];
aff89a9b
JB		 5079 int err;
5080
5081 if (!info->attrs[NL80211_ATTR_TESTDATA])
5082 return -EINVAL;
5083
aff89a9b
JB		 5084 err = -EOPNOTSUPP;
5085 if (rdev->ops->testmode_cmd) {
5086 rdev->testmode_info = info;
5087 err = rdev->ops->testmode_cmd(&rdev->wiphy,
5088 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
5089 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
5090 rdev->testmode_info = NULL;
5091 }
5092
aff89a9b
JB		 5093 return err;
5094}
5095
71063f0e
WYG		 5096static int nl80211_testmode_dump(struct sk_buff *skb,
5097 struct netlink_callback *cb)
5098{
00918d33 5099 struct cfg80211_registered_device *rdev;
71063f0e
WYG		 5100 int err;
5101 long phy_idx;
5102 void *data = NULL;
5103 int data_len = 0;
5104
5105 if (cb->args[0]) {
5106 /*
5107 * 0 is a valid index, but not valid for args[0],
5108 * so we need to offset by 1.
5109 */
5110 phy_idx = cb->args[0] - 1;
5111 } else {
5112 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
5113 nl80211_fam.attrbuf, nl80211_fam.maxattr,
5114 nl80211_policy);
5115 if (err)
5116 return err;
00918d33
JB		 5117 if (nl80211_fam.attrbuf[NL80211_ATTR_WIPHY]) {
5118 phy_idx = nla_get_u32(
5119 nl80211_fam.attrbuf[NL80211_ATTR_WIPHY]);
5120 } else {
5121 struct net_device *netdev;
5122
5123 err = get_rdev_dev_by_ifindex(sock_net(skb->sk),
5124 nl80211_fam.attrbuf,
5125 &rdev, &netdev);
5126 if (err)
5127 return err;
5128 dev_put(netdev);
5129 phy_idx = rdev->wiphy_idx;
5130 cfg80211_unlock_rdev(rdev);
5131 }
71063f0e
WYG		 5132 if (nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA])
5133 cb->args[1] =
5134 (long)nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA];
5135 }
5136
5137 if (cb->args[1]) {
5138 data = nla_data((void *)cb->args[1]);
5139 data_len = nla_len((void *)cb->args[1]);
5140 }
5141
5142 mutex_lock(&cfg80211_mutex);
00918d33
JB		 5143 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
5144 if (!rdev) {
71063f0e
WYG		 5145 mutex_unlock(&cfg80211_mutex);
5146 return -ENOENT;
5147 }
00918d33 5148 cfg80211_lock_rdev(rdev);
71063f0e
WYG		 5149 mutex_unlock(&cfg80211_mutex);
5150
00918d33 5151 if (!rdev->ops->testmode_dump) {
71063f0e
WYG		 5152 err = -EOPNOTSUPP;
5153 goto out_err;
5154 }
5155
5156 while (1) {
5157 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).pid,
5158 cb->nlh->nlmsg_seq, NLM_F_MULTI,
5159 NL80211_CMD_TESTMODE);
5160 struct nlattr *tmdata;
5161
9360ffd1 5162 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
71063f0e
WYG		 5163 genlmsg_cancel(skb, hdr);
5164 break;
5165 }
5166
5167 tmdata = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
5168 if (!tmdata) {
5169 genlmsg_cancel(skb, hdr);
5170 break;
5171 }
00918d33
JB		 5172 err = rdev->ops->testmode_dump(&rdev->wiphy, skb, cb,
5173 data, data_len);
71063f0e
WYG		 5174 nla_nest_end(skb, tmdata);
5175
5176 if (err == -ENOBUFS || err == -ENOENT) {
5177 genlmsg_cancel(skb, hdr);
5178 break;
5179 } else if (err) {
5180 genlmsg_cancel(skb, hdr);
5181 goto out_err;
5182 }
5183
5184 genlmsg_end(skb, hdr);
5185 }
5186
5187 err = skb->len;
5188 /* see above */
5189 cb->args[0] = phy_idx + 1;
5190 out_err:
00918d33 5191 cfg80211_unlock_rdev(rdev);
71063f0e
WYG		 5192 return err;
5193}
5194
aff89a9b
JB		 5195static struct sk_buff *
5196__cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
5197 int approxlen, u32 pid, u32 seq, gfp_t gfp)
5198{
5199 struct sk_buff *skb;
5200 void *hdr;
5201 struct nlattr *data;
5202
5203 skb = nlmsg_new(approxlen + 100, gfp);
5204 if (!skb)
5205 return NULL;
5206
5207 hdr = nl80211hdr_put(skb, pid, seq, 0, NL80211_CMD_TESTMODE);
5208 if (!hdr) {
5209 kfree_skb(skb);
5210 return NULL;
5211 }
5212
9360ffd1
DM		 5213 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
5214 goto nla_put_failure;
aff89a9b
JB		 5215 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
5216
5217 ((void **)skb->cb)[0] = rdev;
5218 ((void **)skb->cb)[1] = hdr;
5219 ((void **)skb->cb)[2] = data;
5220
5221 return skb;
5222
5223 nla_put_failure:
5224 kfree_skb(skb);
5225 return NULL;
5226}
5227
5228struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
5229 int approxlen)
5230{
5231 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
5232
5233 if (WARN_ON(!rdev->testmode_info))
5234 return NULL;
5235
5236 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
5237 rdev->testmode_info->snd_pid,
5238 rdev->testmode_info->snd_seq,
5239 GFP_KERNEL);
5240}
5241EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
5242
5243int cfg80211_testmode_reply(struct sk_buff *skb)
5244{
5245 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
5246 void *hdr = ((void **)skb->cb)[1];
5247 struct nlattr *data = ((void **)skb->cb)[2];
5248
5249 if (WARN_ON(!rdev->testmode_info)) {
5250 kfree_skb(skb);
5251 return -EINVAL;
5252 }
5253
5254 nla_nest_end(skb, data);
5255 genlmsg_end(skb, hdr);
5256 return genlmsg_reply(skb, rdev->testmode_info);
5257}
5258EXPORT_SYMBOL(cfg80211_testmode_reply);
5259
5260struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
5261 int approxlen, gfp_t gfp)
5262{
5263 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
5264
5265 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
5266}
5267EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
5268
5269void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
5270{
5271 void *hdr = ((void **)skb->cb)[1];
5272 struct nlattr *data = ((void **)skb->cb)[2];
5273
5274 nla_nest_end(skb, data);
5275 genlmsg_end(skb, hdr);
5276 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
5277}
5278EXPORT_SYMBOL(cfg80211_testmode_event);
5279#endif
5280
b23aa676
SO		 5281static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
5282{
4c476991
JB		 5283 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5284 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 5285 struct cfg80211_connect_params connect;
5286 struct wiphy *wiphy;
fffd0934 5287 struct cfg80211_cached_keys *connkeys = NULL;
b23aa676
SO		 5288 int err;
5289
5290 memset(&connect, 0, sizeof(connect));
5291
5292 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5293 return -EINVAL;
5294
5295 if (!info->attrs[NL80211_ATTR_SSID] ||
5296 !nla_len(info->attrs[NL80211_ATTR_SSID]))
5297 return -EINVAL;
5298
5299 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
5300 connect.auth_type =
5301 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
5302 if (!nl80211_valid_auth_type(connect.auth_type))
5303 return -EINVAL;
5304 } else
5305 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
5306
5307 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
5308
c0692b8f 5309 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
3dc27d25 5310 NL80211_MAX_NR_CIPHER_SUITES);
b23aa676
SO		 5311 if (err)
5312 return err;
b23aa676 5313
074ac8df 5314 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5315 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5316 return -EOPNOTSUPP;
b23aa676 5317
79c97e97 5318 wiphy = &rdev->wiphy;
b23aa676 5319
4486ea98
BS		 5320 connect.bg_scan_period = -1;
5321 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
5322 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
5323 connect.bg_scan_period =
5324 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
5325 }
5326
b23aa676
SO		 5327 if (info->attrs[NL80211_ATTR_MAC])
5328 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5329 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5330 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
5331
5332 if (info->attrs[NL80211_ATTR_IE]) {
5333 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5334 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5335 }
5336
5337 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
5338 connect.channel =
5339 ieee80211_get_channel(wiphy,
5340 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
5341 if (!connect.channel ||
4c476991
JB		 5342 connect.channel->flags & IEEE80211_CHAN_DISABLED)
5343 return -EINVAL;
b23aa676
SO		 5344 }
5345
fffd0934
JB		 5346 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
5347 connkeys = nl80211_parse_connkeys(rdev,
5348 info->attrs[NL80211_ATTR_KEYS]);
4c476991
JB		 5349 if (IS_ERR(connkeys))
5350 return PTR_ERR(connkeys);
fffd0934
JB		 5351 }
5352
7e7c8926
BG		 5353 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
5354 connect.flags |= ASSOC_REQ_DISABLE_HT;
5355
5356 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
5357 memcpy(&connect.ht_capa_mask,
5358 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
5359 sizeof(connect.ht_capa_mask));
5360
5361 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
5362 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
5363 return -EINVAL;
5364 memcpy(&connect.ht_capa,
5365 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
5366 sizeof(connect.ht_capa));
5367 }
5368
fffd0934 5369 err = cfg80211_connect(rdev, dev, &connect, connkeys);
fffd0934
JB		 5370 if (err)
5371 kfree(connkeys);
b23aa676
SO		 5372 return err;
5373}
5374
5375static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
5376{
4c476991
JB		 5377 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5378 struct net_device *dev = info->user_ptr[1];
b23aa676
SO		 5379 u16 reason;
5380
5381 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5382 reason = WLAN_REASON_DEAUTH_LEAVING;
5383 else
5384 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5385
5386 if (reason == 0)
5387 return -EINVAL;
5388
074ac8df 5389 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5390 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5391 return -EOPNOTSUPP;
b23aa676 5392
4c476991 5393 return cfg80211_disconnect(rdev, dev, reason, true);
b23aa676
SO		 5394}
5395
463d0183
JB		 5396static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
5397{
4c476991 5398 struct cfg80211_registered_device *rdev = info->user_ptr[0];
463d0183
JB		 5399 struct net *net;
5400 int err;
5401 u32 pid;
5402
5403 if (!info->attrs[NL80211_ATTR_PID])
5404 return -EINVAL;
5405
5406 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
5407
463d0183 5408 net = get_net_ns_by_pid(pid);
4c476991
JB		 5409 if (IS_ERR(net))
5410 return PTR_ERR(net);
463d0183
JB		 5411
5412 err = 0;
5413
5414 /* check if anything to do */
4c476991
JB		 5415 if (!net_eq(wiphy_net(&rdev->wiphy), net))
5416 err = cfg80211_switch_netns(rdev, net);
463d0183 5417
463d0183 5418 put_net(net);
463d0183
JB		 5419 return err;
5420}
5421
67fbb16b
SO		 5422static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
5423{
4c476991 5424 struct cfg80211_registered_device *rdev = info->user_ptr[0];
67fbb16b
SO		 5425 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
5426 struct cfg80211_pmksa *pmksa) = NULL;
4c476991 5427 struct net_device *dev = info->user_ptr[1];
67fbb16b
SO		 5428 struct cfg80211_pmksa pmksa;
5429
5430 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
5431
5432 if (!info->attrs[NL80211_ATTR_MAC])
5433 return -EINVAL;
5434
5435 if (!info->attrs[NL80211_ATTR_PMKID])
5436 return -EINVAL;
5437
67fbb16b
SO		 5438 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
5439 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5440
074ac8df 5441 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5442 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5443 return -EOPNOTSUPP;
67fbb16b
SO		 5444
5445 switch (info->genlhdr->cmd) {
5446 case NL80211_CMD_SET_PMKSA:
5447 rdev_ops = rdev->ops->set_pmksa;
5448 break;
5449 case NL80211_CMD_DEL_PMKSA:
5450 rdev_ops = rdev->ops->del_pmksa;
5451 break;
5452 default:
5453 WARN_ON(1);
5454 break;
5455 }
5456
4c476991
JB		 5457 if (!rdev_ops)
5458 return -EOPNOTSUPP;
67fbb16b 5459
4c476991 5460 return rdev_ops(&rdev->wiphy, dev, &pmksa);
67fbb16b
SO		 5461}
5462
5463static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
5464{
4c476991
JB		 5465 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5466 struct net_device *dev = info->user_ptr[1];
67fbb16b 5467
074ac8df 5468 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 5469 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5470 return -EOPNOTSUPP;
67fbb16b 5471
4c476991
JB		 5472 if (!rdev->ops->flush_pmksa)
5473 return -EOPNOTSUPP;
67fbb16b 5474
4c476991 5475 return rdev->ops->flush_pmksa(&rdev->wiphy, dev);
67fbb16b
SO		 5476}
5477
109086ce
AN		 5478static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
5479{
5480 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5481 struct net_device *dev = info->user_ptr[1];
5482 u8 action_code, dialog_token;
5483 u16 status_code;
5484 u8 *peer;
5485
5486 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
5487 !rdev->ops->tdls_mgmt)
5488 return -EOPNOTSUPP;
5489
5490 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
5491 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
5492 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
5493 !info->attrs[NL80211_ATTR_IE] ||
5494 !info->attrs[NL80211_ATTR_MAC])
5495 return -EINVAL;
5496
5497 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
5498 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
5499 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
5500 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
5501
5502 return rdev->ops->tdls_mgmt(&rdev->wiphy, dev, peer, action_code,
5503 dialog_token, status_code,
5504 nla_data(info->attrs[NL80211_ATTR_IE]),
5505 nla_len(info->attrs[NL80211_ATTR_IE]));
5506}
5507
5508static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
5509{
5510 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5511 struct net_device *dev = info->user_ptr[1];
5512 enum nl80211_tdls_operation operation;
5513 u8 *peer;
5514
5515 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
5516 !rdev->ops->tdls_oper)
5517 return -EOPNOTSUPP;
5518
5519 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
5520 !info->attrs[NL80211_ATTR_MAC])
5521 return -EINVAL;
5522
5523 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
5524 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
5525
5526 return rdev->ops->tdls_oper(&rdev->wiphy, dev, peer, operation);
5527}
5528
9588bbd5
JM		 5529static int nl80211_remain_on_channel(struct sk_buff *skb,
5530 struct genl_info *info)
5531{
4c476991
JB		 5532 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5533 struct net_device *dev = info->user_ptr[1];
9588bbd5
JM		 5534 struct ieee80211_channel *chan;
5535 struct sk_buff *msg;
5536 void *hdr;
5537 u64 cookie;
5538 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
5539 u32 freq, duration;
5540 int err;
5541
5542 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
5543 !info->attrs[NL80211_ATTR_DURATION])
5544 return -EINVAL;
5545
5546 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
5547
ebf348fc
JB		 5548 if (!rdev->ops->remain_on_channel ||
5549 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
5550 return -EOPNOTSUPP;
5551
9588bbd5 5552 /*
ebf348fc
JB		 5553 * We should be on that channel for at least a minimum amount of
5554 * time (10ms) but no longer than the driver supports.
9588bbd5 5555 */
ebf348fc 5556 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
a293911d 5557 duration > rdev->wiphy.max_remain_on_channel_duration)
9588bbd5
JM		 5558 return -EINVAL;
5559
cd6c6598
JB		 5560 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
5561 !nl80211_valid_channel_type(info, &channel_type))
5562 return -EINVAL;
9588bbd5
JM		 5563
5564 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
5565 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 5566 if (chan == NULL)
5567 return -EINVAL;
9588bbd5
JM		 5568
5569 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5570 if (!msg)
5571 return -ENOMEM;
9588bbd5
JM		 5572
5573 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5574 NL80211_CMD_REMAIN_ON_CHANNEL);
5575
5576 if (IS_ERR(hdr)) {
5577 err = PTR_ERR(hdr);
5578 goto free_msg;
5579 }
5580
5581 err = rdev->ops->remain_on_channel(&rdev->wiphy, dev, chan,
5582 channel_type, duration, &cookie);
5583
5584 if (err)
5585 goto free_msg;
5586
9360ffd1
DM		 5587 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
5588 goto nla_put_failure;
9588bbd5
JM		 5589
5590 genlmsg_end(msg, hdr);
4c476991
JB		 5591
5592 return genlmsg_reply(msg, info);
9588bbd5
JM		 5593
5594 nla_put_failure:
5595 err = -ENOBUFS;
5596 free_msg:
5597 nlmsg_free(msg);
9588bbd5
JM		 5598 return err;
5599}
5600
5601static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
5602 struct genl_info *info)
5603{
4c476991
JB		 5604 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5605 struct net_device *dev = info->user_ptr[1];
9588bbd5 5606 u64 cookie;
9588bbd5
JM		 5607
5608 if (!info->attrs[NL80211_ATTR_COOKIE])
5609 return -EINVAL;
5610
4c476991
JB		 5611 if (!rdev->ops->cancel_remain_on_channel)
5612 return -EOPNOTSUPP;
9588bbd5 5613
9588bbd5
JM		 5614 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
5615
4c476991 5616 return rdev->ops->cancel_remain_on_channel(&rdev->wiphy, dev, cookie);
9588bbd5
JM		 5617}
5618
13ae75b1
JM		 5619static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
5620 u8 *rates, u8 rates_len)
5621{
5622 u8 i;
5623 u32 mask = 0;
5624
5625 for (i = 0; i < rates_len; i++) {
5626 int rate = (rates[i] & 0x7f) * 5;
5627 int ridx;
5628 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
5629 struct ieee80211_rate *srate =
5630 &sband->bitrates[ridx];
5631 if (rate == srate->bitrate) {
5632 mask |= 1 << ridx;
5633 break;
5634 }
5635 }
5636 if (ridx == sband->n_bitrates)
5637 return 0; /* rate not found */
5638 }
5639
5640 return mask;
5641}
5642
24db78c0
SW		 5643static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
5644 u8 *rates, u8 rates_len,
5645 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
5646{
5647 u8 i;
5648
5649 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
5650
5651 for (i = 0; i < rates_len; i++) {
5652 int ridx, rbit;
5653
5654 ridx = rates[i] / 8;
5655 rbit = BIT(rates[i] % 8);
5656
5657 /* check validity */
910570b5 5658 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
24db78c0
SW		 5659 return false;
5660
5661 /* check availability */
5662 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
5663 mcs[ridx] |= rbit;
5664 else
5665 return false;
5666 }
5667
5668 return true;
5669}
5670
b54452b0 5671static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
13ae75b1
JM		 5672 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
5673 .len = NL80211_MAX_SUPP_RATES },
24db78c0
SW		 5674 [NL80211_TXRATE_MCS] = { .type = NLA_BINARY,
5675 .len = NL80211_MAX_SUPP_HT_RATES },
13ae75b1
JM		 5676};
5677
5678static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
5679 struct genl_info *info)
5680{
5681 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
4c476991 5682 struct cfg80211_registered_device *rdev = info->user_ptr[0];
13ae75b1 5683 struct cfg80211_bitrate_mask mask;
4c476991
JB		 5684 int rem, i;
5685 struct net_device *dev = info->user_ptr[1];
13ae75b1
JM		 5686 struct nlattr *tx_rates;
5687 struct ieee80211_supported_band *sband;
5688
5689 if (info->attrs[NL80211_ATTR_TX_RATES] == NULL)
5690 return -EINVAL;
5691
4c476991
JB		 5692 if (!rdev->ops->set_bitrate_mask)
5693 return -EOPNOTSUPP;
13ae75b1
JM		 5694
5695 memset(&mask, 0, sizeof(mask));
5696 /* Default to all rates enabled */
5697 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
5698 sband = rdev->wiphy.bands[i];
5699 mask.control[i].legacy =
5700 sband ? (1 << sband->n_bitrates) - 1 : 0;
24db78c0
SW		 5701 if (sband)
5702 memcpy(mask.control[i].mcs,
5703 sband->ht_cap.mcs.rx_mask,
5704 sizeof(mask.control[i].mcs));
5705 else
5706 memset(mask.control[i].mcs, 0,
5707 sizeof(mask.control[i].mcs));
13ae75b1
JM		 5708 }
5709
5710 /*
5711 * The nested attribute uses enum nl80211_band as the index. This maps
5712 * directly to the enum ieee80211_band values used in cfg80211.
5713 */
24db78c0 5714 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
13ae75b1
JM		 5715 nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem)
5716 {
5717 enum ieee80211_band band = nla_type(tx_rates);
4c476991
JB		 5718 if (band < 0 || band >= IEEE80211_NUM_BANDS)
5719 return -EINVAL;
13ae75b1 5720 sband = rdev->wiphy.bands[band];
4c476991
JB		 5721 if (sband == NULL)
5722 return -EINVAL;
13ae75b1
JM		 5723 nla_parse(tb, NL80211_TXRATE_MAX, nla_data(tx_rates),
5724 nla_len(tx_rates), nl80211_txattr_policy);
5725 if (tb[NL80211_TXRATE_LEGACY]) {
5726 mask.control[band].legacy = rateset_to_mask(
5727 sband,
5728 nla_data(tb[NL80211_TXRATE_LEGACY]),
5729 nla_len(tb[NL80211_TXRATE_LEGACY]));
218d2e26
BS		 5730 if ((mask.control[band].legacy == 0) &&
5731 nla_len(tb[NL80211_TXRATE_LEGACY]))
5732 return -EINVAL;
24db78c0
SW		 5733 }
5734 if (tb[NL80211_TXRATE_MCS]) {
5735 if (!ht_rateset_to_mask(
5736 sband,
5737 nla_data(tb[NL80211_TXRATE_MCS]),
5738 nla_len(tb[NL80211_TXRATE_MCS]),
5739 mask.control[band].mcs))
5740 return -EINVAL;
5741 }
5742
5743 if (mask.control[band].legacy == 0) {
5744 /* don't allow empty legacy rates if HT
5745 * is not even supported. */
5746 if (!rdev->wiphy.bands[band]->ht_cap.ht_supported)
5747 return -EINVAL;
5748
5749 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
5750 if (mask.control[band].mcs[i])
5751 break;
5752
5753 /* legacy and mcs rates may not be both empty */
5754 if (i == IEEE80211_HT_MCS_MASK_LEN)
4c476991 5755 return -EINVAL;
13ae75b1
JM		 5756 }
5757 }
5758
4c476991 5759 return rdev->ops->set_bitrate_mask(&rdev->wiphy, dev, NULL, &mask);
13ae75b1
JM		 5760}
5761
2e161f78 5762static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 5763{
4c476991
JB		 5764 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5765 struct net_device *dev = info->user_ptr[1];
2e161f78 5766 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
026331c4
JM		 5767
5768 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
5769 return -EINVAL;
5770
2e161f78
JB		 5771 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
5772 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
026331c4 5773
9d38d85d 5774 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
074ac8df 5775 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
663fcafd
JB		 5776 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5777 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5778 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
c7108a71 5779 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 5780 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5781 return -EOPNOTSUPP;
026331c4
JM		 5782
5783 /* not much point in registering if we can't reply */
4c476991
JB		 5784 if (!rdev->ops->mgmt_tx)
5785 return -EOPNOTSUPP;
026331c4 5786
4c476991 5787 return cfg80211_mlme_register_mgmt(dev->ieee80211_ptr, info->snd_pid,
2e161f78 5788 frame_type,
026331c4
JM		 5789 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
5790 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]));
026331c4
JM		 5791}
5792
2e161f78 5793static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
026331c4 5794{
4c476991
JB		 5795 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5796 struct net_device *dev = info->user_ptr[1];
026331c4
JM		 5797 struct ieee80211_channel *chan;
5798 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
252aa631 5799 bool channel_type_valid = false;
026331c4
JM		 5800 u32 freq;
5801 int err;
d64d373f 5802 void *hdr = NULL;
026331c4 5803 u64 cookie;
e247bd90 5804 struct sk_buff *msg = NULL;
f7ca38df 5805 unsigned int wait = 0;
e247bd90
JB		 5806 bool offchan, no_cck, dont_wait_for_ack;
5807
5808 dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
026331c4
JM		 5809
5810 if (!info->attrs[NL80211_ATTR_FRAME] ||
5811 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
5812 return -EINVAL;
5813
4c476991
JB		 5814 if (!rdev->ops->mgmt_tx)
5815 return -EOPNOTSUPP;
026331c4 5816
9d38d85d 5817 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
074ac8df 5818 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
663fcafd
JB		 5819 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5820 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5821 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
c7108a71 5822 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
4c476991
JB		 5823 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5824 return -EOPNOTSUPP;
026331c4 5825
f7ca38df 5826 if (info->attrs[NL80211_ATTR_DURATION]) {
7c4ef712 5827 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
f7ca38df
JB		 5828 return -EINVAL;
5829 wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
ebf348fc
JB		 5830
5831 /*
5832 * We should wait on the channel for at least a minimum amount
5833 * of time (10ms) but no longer than the driver supports.
5834 */
5835 if (wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
5836 wait > rdev->wiphy.max_remain_on_channel_duration)
5837 return -EINVAL;
5838
f7ca38df
JB		 5839 }
5840
026331c4 5841 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
cd6c6598 5842 if (!nl80211_valid_channel_type(info, &channel_type))
4c476991 5843 return -EINVAL;
252aa631 5844 channel_type_valid = true;
026331c4
JM		 5845 }
5846
f7ca38df
JB		 5847 offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
5848
7c4ef712
JB		 5849 if (offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
5850 return -EINVAL;
5851
e9f935e3
RM		 5852 no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
5853
026331c4
JM		 5854 freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
5855 chan = rdev_freq_to_chan(rdev, freq, channel_type);
4c476991
JB		 5856 if (chan == NULL)
5857 return -EINVAL;
026331c4 5858
e247bd90
JB		 5859 if (!dont_wait_for_ack) {
5860 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
5861 if (!msg)
5862 return -ENOMEM;
026331c4 5863
e247bd90
JB		 5864 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5865 NL80211_CMD_FRAME);
026331c4 5866
e247bd90
JB		 5867 if (IS_ERR(hdr)) {
5868 err = PTR_ERR(hdr);
5869 goto free_msg;
5870 }
026331c4 5871 }
e247bd90 5872
f7ca38df
JB		 5873 err = cfg80211_mlme_mgmt_tx(rdev, dev, chan, offchan, channel_type,
5874 channel_type_valid, wait,
2e161f78
JB		 5875 nla_data(info->attrs[NL80211_ATTR_FRAME]),
5876 nla_len(info->attrs[NL80211_ATTR_FRAME]),
e247bd90 5877 no_cck, dont_wait_for_ack, &cookie);
026331c4
JM		 5878 if (err)
5879 goto free_msg;
5880
e247bd90 5881 if (msg) {
9360ffd1
DM		 5882 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
5883 goto nla_put_failure;
026331c4 5884
e247bd90
JB		 5885 genlmsg_end(msg, hdr);
5886 return genlmsg_reply(msg, info);
5887 }
5888
5889 return 0;
026331c4
JM		 5890
5891 nla_put_failure:
5892 err = -ENOBUFS;
5893 free_msg:
5894 nlmsg_free(msg);
026331c4
JM		 5895 return err;
5896}
5897
f7ca38df
JB		 5898static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
5899{
5900 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5901 struct net_device *dev = info->user_ptr[1];
5902 u64 cookie;
5903
5904 if (!info->attrs[NL80211_ATTR_COOKIE])
5905 return -EINVAL;
5906
5907 if (!rdev->ops->mgmt_tx_cancel_wait)
5908 return -EOPNOTSUPP;
5909
5910 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
5911 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
5912 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT &&
5913 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
5914 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
5915 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
5916 return -EOPNOTSUPP;
5917
5918 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
5919
5920 return rdev->ops->mgmt_tx_cancel_wait(&rdev->wiphy, dev, cookie);
5921}
5922
ffb9eb3d
KV		 5923static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
5924{
4c476991 5925 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d 5926 struct wireless_dev *wdev;
4c476991 5927 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 5928 u8 ps_state;
5929 bool state;
5930 int err;
5931
4c476991
JB		 5932 if (!info->attrs[NL80211_ATTR_PS_STATE])
5933 return -EINVAL;
ffb9eb3d
KV		 5934
5935 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
5936
4c476991
JB		 5937 if (ps_state != NL80211_PS_DISABLED && ps_state != NL80211_PS_ENABLED)
5938 return -EINVAL;
ffb9eb3d
KV		 5939
5940 wdev = dev->ieee80211_ptr;
5941
4c476991
JB		 5942 if (!rdev->ops->set_power_mgmt)
5943 return -EOPNOTSUPP;
ffb9eb3d
KV		 5944
5945 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
5946
5947 if (state == wdev->ps)
4c476991 5948 return 0;
ffb9eb3d 5949
4c476991
JB		 5950 err = rdev->ops->set_power_mgmt(wdev->wiphy, dev, state,
5951 wdev->ps_timeout);
5952 if (!err)
5953 wdev->ps = state;
ffb9eb3d
KV		 5954 return err;
5955}
5956
5957static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
5958{
4c476991 5959 struct cfg80211_registered_device *rdev = info->user_ptr[0];
ffb9eb3d
KV		 5960 enum nl80211_ps_state ps_state;
5961 struct wireless_dev *wdev;
4c476991 5962 struct net_device *dev = info->user_ptr[1];
ffb9eb3d
KV		 5963 struct sk_buff *msg;
5964 void *hdr;
5965 int err;
5966
ffb9eb3d
KV		 5967 wdev = dev->ieee80211_ptr;
5968
4c476991
JB		 5969 if (!rdev->ops->set_power_mgmt)
5970 return -EOPNOTSUPP;
ffb9eb3d
KV		 5971
5972 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4c476991
JB		 5973 if (!msg)
5974 return -ENOMEM;
ffb9eb3d
KV		 5975
5976 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
5977 NL80211_CMD_GET_POWER_SAVE);
5978 if (!hdr) {
4c476991 5979 err = -ENOBUFS;
ffb9eb3d
KV		 5980 goto free_msg;
5981 }
5982
5983 if (wdev->ps)
5984 ps_state = NL80211_PS_ENABLED;
5985 else
5986 ps_state = NL80211_PS_DISABLED;
5987
9360ffd1
DM		 5988 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
5989 goto nla_put_failure;
ffb9eb3d
KV		 5990
5991 genlmsg_end(msg, hdr);
4c476991 5992 return genlmsg_reply(msg, info);
ffb9eb3d 5993
4c476991 5994 nla_put_failure:
ffb9eb3d 5995 err = -ENOBUFS;
4c476991 5996 free_msg:
ffb9eb3d 5997 nlmsg_free(msg);
ffb9eb3d
KV		 5998 return err;
5999}
6000
d6dc1a38
JO		 6001static struct nla_policy
6002nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] __read_mostly = {
6003 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
6004 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
6005 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
6006};
6007
6008static int nl80211_set_cqm_rssi(struct genl_info *info,
6009 s32 threshold, u32 hysteresis)
6010{
4c476991 6011 struct cfg80211_registered_device *rdev = info->user_ptr[0];
d6dc1a38 6012 struct wireless_dev *wdev;
4c476991 6013 struct net_device *dev = info->user_ptr[1];
d6dc1a38
JO		 6014
6015 if (threshold > 0)
6016 return -EINVAL;
6017
d6dc1a38
JO		 6018 wdev = dev->ieee80211_ptr;
6019
4c476991
JB		 6020 if (!rdev->ops->set_cqm_rssi_config)
6021 return -EOPNOTSUPP;
d6dc1a38 6022
074ac8df 6023 if (wdev->iftype != NL80211_IFTYPE_STATION &&
4c476991
JB		 6024 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
6025 return -EOPNOTSUPP;
d6dc1a38 6026
4c476991
JB		 6027 return rdev->ops->set_cqm_rssi_config(wdev->wiphy, dev,
6028 threshold, hysteresis);
d6dc1a38
JO		 6029}
6030
6031static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
6032{
6033 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
6034 struct nlattr *cqm;
6035 int err;
6036
6037 cqm = info->attrs[NL80211_ATTR_CQM];
6038 if (!cqm) {
6039 err = -EINVAL;
6040 goto out;
6041 }
6042
6043 err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
6044 nl80211_attr_cqm_policy);
6045 if (err)
6046 goto out;
6047
6048 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
6049 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
6050 s32 threshold;
6051 u32 hysteresis;
6052 threshold = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
6053 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
6054 err = nl80211_set_cqm_rssi(info, threshold, hysteresis);
6055 } else
6056 err = -EINVAL;
6057
6058out:
6059 return err;
6060}
6061
29cbe68c
JB		 6062static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
6063{
6064 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6065 struct net_device *dev = info->user_ptr[1];
6066 struct mesh_config cfg;
c80d545d 6067 struct mesh_setup setup;
29cbe68c
JB		 6068 int err;
6069
6070 /* start with default */
6071 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
c80d545d 6072 memcpy(&setup, &default_mesh_setup, sizeof(setup));
29cbe68c 6073
24bdd9f4 6074 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
29cbe68c 6075 /* and parse parameters if given */
24bdd9f4 6076 err = nl80211_parse_mesh_config(info, &cfg, NULL);
29cbe68c
JB		 6077 if (err)
6078 return err;
6079 }
6080
6081 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
6082 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
6083 return -EINVAL;
6084
c80d545d
JC		 6085 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
6086 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
6087
4bb62344
CYY		 6088 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
6089 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
6090 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
6091 return -EINVAL;
6092
c80d545d
JC		 6093 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
6094 /* parse additional setup parameters if given */
6095 err = nl80211_parse_mesh_setup(info, &setup);
6096 if (err)
6097 return err;
6098 }
6099
cc1d2806
JB		 6100 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
6101 enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
6102
6103 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE] &&
6104 !nl80211_valid_channel_type(info, &channel_type))
6105 return -EINVAL;
6106
6107 setup.channel = rdev_freq_to_chan(rdev,
6108 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]),
6109 channel_type);
6110 if (!setup.channel)
6111 return -EINVAL;
6112 setup.channel_type = channel_type;
6113 } else {
6114 /* cfg80211_join_mesh() will sort it out */
6115 setup.channel = NULL;
6116 }
6117
c80d545d 6118 return cfg80211_join_mesh(rdev, dev, &setup, &cfg);
29cbe68c
JB		 6119}
6120
6121static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
6122{
6123 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6124 struct net_device *dev = info->user_ptr[1];
6125
6126 return cfg80211_leave_mesh(rdev, dev);
6127}
6128
ff1b6e69
JB		 6129static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
6130{
6131 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6132 struct sk_buff *msg;
6133 void *hdr;
6134
6135 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
6136 return -EOPNOTSUPP;
6137
6138 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6139 if (!msg)
6140 return -ENOMEM;
6141
6142 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
6143 NL80211_CMD_GET_WOWLAN);
6144 if (!hdr)
6145 goto nla_put_failure;
6146
6147 if (rdev->wowlan) {
6148 struct nlattr *nl_wowlan;
6149
6150 nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
6151 if (!nl_wowlan)
6152 goto nla_put_failure;
6153
9360ffd1
DM		 6154 if ((rdev->wowlan->any &&
6155 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
6156 (rdev->wowlan->disconnect &&
6157 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
6158 (rdev->wowlan->magic_pkt &&
6159 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
6160 (rdev->wowlan->gtk_rekey_failure &&
6161 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
6162 (rdev->wowlan->eap_identity_req &&
6163 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
6164 (rdev->wowlan->four_way_handshake &&
6165 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
6166 (rdev->wowlan->rfkill_release &&
6167 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
6168 goto nla_put_failure;
ff1b6e69
JB		 6169 if (rdev->wowlan->n_patterns) {
6170 struct nlattr *nl_pats, *nl_pat;
6171 int i, pat_len;
6172
6173 nl_pats = nla_nest_start(msg,
6174 NL80211_WOWLAN_TRIG_PKT_PATTERN);
6175 if (!nl_pats)
6176 goto nla_put_failure;
6177
6178 for (i = 0; i < rdev->wowlan->n_patterns; i++) {
6179 nl_pat = nla_nest_start(msg, i + 1);
6180 if (!nl_pat)
6181 goto nla_put_failure;
6182 pat_len = rdev->wowlan->patterns[i].pattern_len;
9360ffd1
DM		 6183 if (nla_put(msg, NL80211_WOWLAN_PKTPAT_MASK,
6184 DIV_ROUND_UP(pat_len, 8),
6185 rdev->wowlan->patterns[i].mask) ||
6186 nla_put(msg, NL80211_WOWLAN_PKTPAT_PATTERN,
6187 pat_len,
6188 rdev->wowlan->patterns[i].pattern))
6189 goto nla_put_failure;
ff1b6e69
JB		 6190 nla_nest_end(msg, nl_pat);
6191 }
6192 nla_nest_end(msg, nl_pats);
6193 }
6194
6195 nla_nest_end(msg, nl_wowlan);
6196 }
6197
6198 genlmsg_end(msg, hdr);
6199 return genlmsg_reply(msg, info);
6200
6201nla_put_failure:
6202 nlmsg_free(msg);
6203 return -ENOBUFS;
6204}
6205
6206static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
6207{
6208 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6209 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
6210 struct cfg80211_wowlan no_triggers = {};
6211 struct cfg80211_wowlan new_triggers = {};
6212 struct wiphy_wowlan_support *wowlan = &rdev->wiphy.wowlan;
6213 int err, i;
6d52563f 6214 bool prev_enabled = rdev->wowlan;
ff1b6e69
JB		 6215
6216 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns)
6217 return -EOPNOTSUPP;
6218
6219 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS])
6220 goto no_triggers;
6221
6222 err = nla_parse(tb, MAX_NL80211_WOWLAN_TRIG,
6223 nla_data(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
6224 nla_len(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
6225 nl80211_wowlan_policy);
6226 if (err)
6227 return err;
6228
6229 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
6230 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
6231 return -EINVAL;
6232 new_triggers.any = true;
6233 }
6234
6235 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
6236 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
6237 return -EINVAL;
6238 new_triggers.disconnect = true;
6239 }
6240
6241 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
6242 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
6243 return -EINVAL;
6244 new_triggers.magic_pkt = true;
6245 }
6246
77dbbb13
JB		 6247 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
6248 return -EINVAL;
6249
6250 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
6251 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
6252 return -EINVAL;
6253 new_triggers.gtk_rekey_failure = true;
6254 }
6255
6256 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
6257 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
6258 return -EINVAL;
6259 new_triggers.eap_identity_req = true;
6260 }
6261
6262 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
6263 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
6264 return -EINVAL;
6265 new_triggers.four_way_handshake = true;
6266 }
6267
6268 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
6269 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
6270 return -EINVAL;
6271 new_triggers.rfkill_release = true;
6272 }
6273
ff1b6e69
JB		 6274 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
6275 struct nlattr *pat;
6276 int n_patterns = 0;
6277 int rem, pat_len, mask_len;
6278 struct nlattr *pat_tb[NUM_NL80211_WOWLAN_PKTPAT];
6279
6280 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
6281 rem)
6282 n_patterns++;
6283 if (n_patterns > wowlan->n_patterns)
6284 return -EINVAL;
6285
6286 new_triggers.patterns = kcalloc(n_patterns,
6287 sizeof(new_triggers.patterns[0]),
6288 GFP_KERNEL);
6289 if (!new_triggers.patterns)
6290 return -ENOMEM;
6291
6292 new_triggers.n_patterns = n_patterns;
6293 i = 0;
6294
6295 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
6296 rem) {
6297 nla_parse(pat_tb, MAX_NL80211_WOWLAN_PKTPAT,
6298 nla_data(pat), nla_len(pat), NULL);
6299 err = -EINVAL;
6300 if (!pat_tb[NL80211_WOWLAN_PKTPAT_MASK] ||
6301 !pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN])
6302 goto error;
6303 pat_len = nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]);
6304 mask_len = DIV_ROUND_UP(pat_len, 8);
6305 if (nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]) !=
6306 mask_len)
6307 goto error;
6308 if (pat_len > wowlan->pattern_max_len ||
6309 pat_len < wowlan->pattern_min_len)
6310 goto error;
6311
6312 new_triggers.patterns[i].mask =
6313 kmalloc(mask_len + pat_len, GFP_KERNEL);
6314 if (!new_triggers.patterns[i].mask) {
6315 err = -ENOMEM;
6316 goto error;
6317 }
6318 new_triggers.patterns[i].pattern =
6319 new_triggers.patterns[i].mask + mask_len;
6320 memcpy(new_triggers.patterns[i].mask,
6321 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]),
6322 mask_len);
6323 new_triggers.patterns[i].pattern_len = pat_len;
6324 memcpy(new_triggers.patterns[i].pattern,
6325 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]),
6326 pat_len);
6327 i++;
6328 }
6329 }
6330
6331 if (memcmp(&new_triggers, &no_triggers, sizeof(new_triggers))) {
6332 struct cfg80211_wowlan *ntrig;
6333 ntrig = kmemdup(&new_triggers, sizeof(new_triggers),
6334 GFP_KERNEL);
6335 if (!ntrig) {
6336 err = -ENOMEM;
6337 goto error;
6338 }
6339 cfg80211_rdev_free_wowlan(rdev);
6340 rdev->wowlan = ntrig;
6341 } else {
6342 no_triggers:
6343 cfg80211_rdev_free_wowlan(rdev);
6344 rdev->wowlan = NULL;
6345 }
6346
6d52563f
JB		 6347 if (rdev->ops->set_wakeup && prev_enabled != !!rdev->wowlan)
6348 rdev->ops->set_wakeup(&rdev->wiphy, rdev->wowlan);
6349
ff1b6e69
JB		 6350 return 0;
6351 error:
6352 for (i = 0; i < new_triggers.n_patterns; i++)
6353 kfree(new_triggers.patterns[i].mask);
6354 kfree(new_triggers.patterns);
6355 return err;
6356}
6357
e5497d76
JB		 6358static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
6359{
6360 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6361 struct net_device *dev = info->user_ptr[1];
6362 struct wireless_dev *wdev = dev->ieee80211_ptr;
6363 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
6364 struct cfg80211_gtk_rekey_data rekey_data;
6365 int err;
6366
6367 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
6368 return -EINVAL;
6369
6370 err = nla_parse(tb, MAX_NL80211_REKEY_DATA,
6371 nla_data(info->attrs[NL80211_ATTR_REKEY_DATA]),
6372 nla_len(info->attrs[NL80211_ATTR_REKEY_DATA]),
6373 nl80211_rekey_policy);
6374 if (err)
6375 return err;
6376
6377 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
6378 return -ERANGE;
6379 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
6380 return -ERANGE;
6381 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
6382 return -ERANGE;
6383
6384 memcpy(rekey_data.kek, nla_data(tb[NL80211_REKEY_DATA_KEK]),
6385 NL80211_KEK_LEN);
6386 memcpy(rekey_data.kck, nla_data(tb[NL80211_REKEY_DATA_KCK]),
6387 NL80211_KCK_LEN);
6388 memcpy(rekey_data.replay_ctr,
6389 nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]),
6390 NL80211_REPLAY_CTR_LEN);
6391
6392 wdev_lock(wdev);
6393 if (!wdev->current_bss) {
6394 err = -ENOTCONN;
6395 goto out;
6396 }
6397
6398 if (!rdev->ops->set_rekey_data) {
6399 err = -EOPNOTSUPP;
6400 goto out;
6401 }
6402
6403 err = rdev->ops->set_rekey_data(&rdev->wiphy, dev, &rekey_data);
6404 out:
6405 wdev_unlock(wdev);
6406 return err;
6407}
6408
28946da7
JB		 6409static int nl80211_register_unexpected_frame(struct sk_buff *skb,
6410 struct genl_info *info)
6411{
6412 struct net_device *dev = info->user_ptr[1];
6413 struct wireless_dev *wdev = dev->ieee80211_ptr;
6414
6415 if (wdev->iftype != NL80211_IFTYPE_AP &&
6416 wdev->iftype != NL80211_IFTYPE_P2P_GO)
6417 return -EINVAL;
6418
6419 if (wdev->ap_unexpected_nlpid)
6420 return -EBUSY;
6421
6422 wdev->ap_unexpected_nlpid = info->snd_pid;
6423 return 0;
6424}
6425
7f6cf311
JB		 6426static int nl80211_probe_client(struct sk_buff *skb,
6427 struct genl_info *info)
6428{
6429 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6430 struct net_device *dev = info->user_ptr[1];
6431 struct wireless_dev *wdev = dev->ieee80211_ptr;
6432 struct sk_buff *msg;
6433 void *hdr;
6434 const u8 *addr;
6435 u64 cookie;
6436 int err;
6437
6438 if (wdev->iftype != NL80211_IFTYPE_AP &&
6439 wdev->iftype != NL80211_IFTYPE_P2P_GO)
6440 return -EOPNOTSUPP;
6441
6442 if (!info->attrs[NL80211_ATTR_MAC])
6443 return -EINVAL;
6444
6445 if (!rdev->ops->probe_client)
6446 return -EOPNOTSUPP;
6447
6448 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6449 if (!msg)
6450 return -ENOMEM;
6451
6452 hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
6453 NL80211_CMD_PROBE_CLIENT);
6454
6455 if (IS_ERR(hdr)) {
6456 err = PTR_ERR(hdr);
6457 goto free_msg;
6458 }
6459
6460 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
6461
6462 err = rdev->ops->probe_client(&rdev->wiphy, dev, addr, &cookie);
6463 if (err)
6464 goto free_msg;
6465
9360ffd1
DM		 6466 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
6467 goto nla_put_failure;
7f6cf311
JB		 6468
6469 genlmsg_end(msg, hdr);
6470
6471 return genlmsg_reply(msg, info);
6472
6473 nla_put_failure:
6474 err = -ENOBUFS;
6475 free_msg:
6476 nlmsg_free(msg);
6477 return err;
6478}
6479
5e760230
JB		 6480static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
6481{
6482 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6483
6484 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
6485 return -EOPNOTSUPP;
6486
6487 if (rdev->ap_beacons_nlpid)
6488 return -EBUSY;
6489
6490 rdev->ap_beacons_nlpid = info->snd_pid;
6491
6492 return 0;
6493}
6494
4c476991
JB		 6495#define NL80211_FLAG_NEED_WIPHY 0x01
6496#define NL80211_FLAG_NEED_NETDEV 0x02
6497#define NL80211_FLAG_NEED_RTNL 0x04
41265714
JB		 6498#define NL80211_FLAG_CHECK_NETDEV_UP 0x08
6499#define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
6500 NL80211_FLAG_CHECK_NETDEV_UP)
4c476991
JB		 6501
6502static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
6503 struct genl_info *info)
6504{
6505 struct cfg80211_registered_device *rdev;
6506 struct net_device *dev;
6507 int err;
6508 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
6509
6510 if (rtnl)
6511 rtnl_lock();
6512
6513 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
6514 rdev = cfg80211_get_dev_from_info(info);
6515 if (IS_ERR(rdev)) {
6516 if (rtnl)
6517 rtnl_unlock();
6518 return PTR_ERR(rdev);
6519 }
6520 info->user_ptr[0] = rdev;
6521 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
00918d33
JB		 6522 err = get_rdev_dev_by_ifindex(genl_info_net(info), info->attrs,
6523 &rdev, &dev);
4c476991
JB		 6524 if (err) {
6525 if (rtnl)
6526 rtnl_unlock();
6527 return err;
6528 }
41265714
JB		 6529 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
6530 !netif_running(dev)) {
d537f5fd
JB		 6531 cfg80211_unlock_rdev(rdev);
6532 dev_put(dev);
41265714
JB		 6533 if (rtnl)
6534 rtnl_unlock();
6535 return -ENETDOWN;
6536 }
4c476991
JB		 6537 info->user_ptr[0] = rdev;
6538 info->user_ptr[1] = dev;
6539 }
6540
6541 return 0;
6542}
6543
6544static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
6545 struct genl_info *info)
6546{
6547 if (info->user_ptr[0])
6548 cfg80211_unlock_rdev(info->user_ptr[0]);
6549 if (info->user_ptr[1])
6550 dev_put(info->user_ptr[1]);
6551 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
6552 rtnl_unlock();
6553}
6554
55682965
JB		 6555static struct genl_ops nl80211_ops[] = {
6556 {
6557 .cmd = NL80211_CMD_GET_WIPHY,
6558 .doit = nl80211_get_wiphy,
6559 .dumpit = nl80211_dump_wiphy,
6560 .policy = nl80211_policy,
6561 /* can be retrieved by unprivileged users */
4c476991 6562 .internal_flags = NL80211_FLAG_NEED_WIPHY,
55682965
JB		 6563 },
6564 {
6565 .cmd = NL80211_CMD_SET_WIPHY,
6566 .doit = nl80211_set_wiphy,
6567 .policy = nl80211_policy,
6568 .flags = GENL_ADMIN_PERM,
4c476991 6569 .internal_flags = NL80211_FLAG_NEED_RTNL,
55682965
JB		 6570 },
6571 {
6572 .cmd = NL80211_CMD_GET_INTERFACE,
6573 .doit = nl80211_get_interface,
6574 .dumpit = nl80211_dump_interface,
6575 .policy = nl80211_policy,
6576 /* can be retrieved by unprivileged users */
4c476991 6577 .internal_flags = NL80211_FLAG_NEED_NETDEV,
55682965
JB		 6578 },
6579 {
6580 .cmd = NL80211_CMD_SET_INTERFACE,
6581 .doit = nl80211_set_interface,
6582 .policy = nl80211_policy,
6583 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6584 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6585 NL80211_FLAG_NEED_RTNL,
55682965
JB		 6586 },
6587 {
6588 .cmd = NL80211_CMD_NEW_INTERFACE,
6589 .doit = nl80211_new_interface,
6590 .policy = nl80211_policy,
6591 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6592 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6593 NL80211_FLAG_NEED_RTNL,
55682965
JB		 6594 },
6595 {
6596 .cmd = NL80211_CMD_DEL_INTERFACE,
6597 .doit = nl80211_del_interface,
6598 .policy = nl80211_policy,
41ade00f 6599 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6600 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6601 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 6602 },
6603 {
6604 .cmd = NL80211_CMD_GET_KEY,
6605 .doit = nl80211_get_key,
6606 .policy = nl80211_policy,
6607 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6608 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6609 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 6610 },
6611 {
6612 .cmd = NL80211_CMD_SET_KEY,
6613 .doit = nl80211_set_key,
6614 .policy = nl80211_policy,
6615 .flags = GENL_ADMIN_PERM,
41265714 6616 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6617 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 6618 },
6619 {
6620 .cmd = NL80211_CMD_NEW_KEY,
6621 .doit = nl80211_new_key,
6622 .policy = nl80211_policy,
6623 .flags = GENL_ADMIN_PERM,
41265714 6624 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6625 NL80211_FLAG_NEED_RTNL,
41ade00f
JB		 6626 },
6627 {
6628 .cmd = NL80211_CMD_DEL_KEY,
6629 .doit = nl80211_del_key,
6630 .policy = nl80211_policy,
55682965 6631 .flags = GENL_ADMIN_PERM,
41265714 6632 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6633 NL80211_FLAG_NEED_RTNL,
55682965 6634 },
ed1b6cc7
JB		 6635 {
6636 .cmd = NL80211_CMD_SET_BEACON,
6637 .policy = nl80211_policy,
6638 .flags = GENL_ADMIN_PERM,
8860020e 6639 .doit = nl80211_set_beacon,
2b5f8b0b 6640 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6641 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 6642 },
6643 {
8860020e 6644 .cmd = NL80211_CMD_START_AP,
ed1b6cc7
JB		 6645 .policy = nl80211_policy,
6646 .flags = GENL_ADMIN_PERM,
8860020e 6647 .doit = nl80211_start_ap,
2b5f8b0b 6648 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6649 NL80211_FLAG_NEED_RTNL,
ed1b6cc7
JB		 6650 },
6651 {
8860020e 6652 .cmd = NL80211_CMD_STOP_AP,
ed1b6cc7
JB		 6653 .policy = nl80211_policy,
6654 .flags = GENL_ADMIN_PERM,
8860020e 6655 .doit = nl80211_stop_ap,
2b5f8b0b 6656 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6657 NL80211_FLAG_NEED_RTNL,
ed1b6cc7 6658 },
5727ef1b
JB		 6659 {
6660 .cmd = NL80211_CMD_GET_STATION,
6661 .doit = nl80211_get_station,
2ec600d6 6662 .dumpit = nl80211_dump_station,
5727ef1b 6663 .policy = nl80211_policy,
4c476991
JB		 6664 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6665 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 6666 },
6667 {
6668 .cmd = NL80211_CMD_SET_STATION,
6669 .doit = nl80211_set_station,
6670 .policy = nl80211_policy,
6671 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6672 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6673 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 6674 },
6675 {
6676 .cmd = NL80211_CMD_NEW_STATION,
6677 .doit = nl80211_new_station,
6678 .policy = nl80211_policy,
6679 .flags = GENL_ADMIN_PERM,
41265714 6680 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6681 NL80211_FLAG_NEED_RTNL,
5727ef1b
JB		 6682 },
6683 {
6684 .cmd = NL80211_CMD_DEL_STATION,
6685 .doit = nl80211_del_station,
6686 .policy = nl80211_policy,
2ec600d6 6687 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6688 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6689 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 6690 },
6691 {
6692 .cmd = NL80211_CMD_GET_MPATH,
6693 .doit = nl80211_get_mpath,
6694 .dumpit = nl80211_dump_mpath,
6695 .policy = nl80211_policy,
6696 .flags = GENL_ADMIN_PERM,
41265714 6697 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6698 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 6699 },
6700 {
6701 .cmd = NL80211_CMD_SET_MPATH,
6702 .doit = nl80211_set_mpath,
6703 .policy = nl80211_policy,
6704 .flags = GENL_ADMIN_PERM,
41265714 6705 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6706 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 6707 },
6708 {
6709 .cmd = NL80211_CMD_NEW_MPATH,
6710 .doit = nl80211_new_mpath,
6711 .policy = nl80211_policy,
6712 .flags = GENL_ADMIN_PERM,
41265714 6713 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6714 NL80211_FLAG_NEED_RTNL,
2ec600d6
LCC		 6715 },
6716 {
6717 .cmd = NL80211_CMD_DEL_MPATH,
6718 .doit = nl80211_del_mpath,
6719 .policy = nl80211_policy,
9f1ba906 6720 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6721 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6722 NL80211_FLAG_NEED_RTNL,
9f1ba906
JM		 6723 },
6724 {
6725 .cmd = NL80211_CMD_SET_BSS,
6726 .doit = nl80211_set_bss,
6727 .policy = nl80211_policy,
b2e1b302 6728 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6729 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6730 NL80211_FLAG_NEED_RTNL,
b2e1b302 6731 },
f130347c
LR		 6732 {
6733 .cmd = NL80211_CMD_GET_REG,
6734 .doit = nl80211_get_reg,
6735 .policy = nl80211_policy,
6736 /* can be retrieved by unprivileged users */
6737 },
b2e1b302
LR		 6738 {
6739 .cmd = NL80211_CMD_SET_REG,
6740 .doit = nl80211_set_reg,
6741 .policy = nl80211_policy,
6742 .flags = GENL_ADMIN_PERM,
6743 },
6744 {
6745 .cmd = NL80211_CMD_REQ_SET_REG,
6746 .doit = nl80211_req_set_reg,
6747 .policy = nl80211_policy,
93da9cc1 6748 .flags = GENL_ADMIN_PERM,
6749 },
6750 {
24bdd9f4
JC		 6751 .cmd = NL80211_CMD_GET_MESH_CONFIG,
6752 .doit = nl80211_get_mesh_config,
93da9cc1 6753 .policy = nl80211_policy,
6754 /* can be retrieved by unprivileged users */
2b5f8b0b 6755 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6756 NL80211_FLAG_NEED_RTNL,
93da9cc1 6757 },
6758 {
24bdd9f4
JC		 6759 .cmd = NL80211_CMD_SET_MESH_CONFIG,
6760 .doit = nl80211_update_mesh_config,
93da9cc1 6761 .policy = nl80211_policy,
9aed3cc1 6762 .flags = GENL_ADMIN_PERM,
29cbe68c 6763 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6764 NL80211_FLAG_NEED_RTNL,
9aed3cc1 6765 },
2a519311
JB		 6766 {
6767 .cmd = NL80211_CMD_TRIGGER_SCAN,
6768 .doit = nl80211_trigger_scan,
6769 .policy = nl80211_policy,
6770 .flags = GENL_ADMIN_PERM,
41265714 6771 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6772 NL80211_FLAG_NEED_RTNL,
2a519311
JB		 6773 },
6774 {
6775 .cmd = NL80211_CMD_GET_SCAN,
6776 .policy = nl80211_policy,
6777 .dumpit = nl80211_dump_scan,
6778 },
807f8a8c
LC		 6779 {
6780 .cmd = NL80211_CMD_START_SCHED_SCAN,
6781 .doit = nl80211_start_sched_scan,
6782 .policy = nl80211_policy,
6783 .flags = GENL_ADMIN_PERM,
6784 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6785 NL80211_FLAG_NEED_RTNL,
6786 },
6787 {
6788 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
6789 .doit = nl80211_stop_sched_scan,
6790 .policy = nl80211_policy,
6791 .flags = GENL_ADMIN_PERM,
6792 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6793 NL80211_FLAG_NEED_RTNL,
6794 },
636a5d36
JM		 6795 {
6796 .cmd = NL80211_CMD_AUTHENTICATE,
6797 .doit = nl80211_authenticate,
6798 .policy = nl80211_policy,
6799 .flags = GENL_ADMIN_PERM,
41265714 6800 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6801 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 6802 },
6803 {
6804 .cmd = NL80211_CMD_ASSOCIATE,
6805 .doit = nl80211_associate,
6806 .policy = nl80211_policy,
6807 .flags = GENL_ADMIN_PERM,
41265714 6808 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6809 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 6810 },
6811 {
6812 .cmd = NL80211_CMD_DEAUTHENTICATE,
6813 .doit = nl80211_deauthenticate,
6814 .policy = nl80211_policy,
6815 .flags = GENL_ADMIN_PERM,
41265714 6816 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6817 NL80211_FLAG_NEED_RTNL,
636a5d36
JM		 6818 },
6819 {
6820 .cmd = NL80211_CMD_DISASSOCIATE,
6821 .doit = nl80211_disassociate,
6822 .policy = nl80211_policy,
6823 .flags = GENL_ADMIN_PERM,
41265714 6824 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6825 NL80211_FLAG_NEED_RTNL,
636a5d36 6826 },
04a773ad
JB		 6827 {
6828 .cmd = NL80211_CMD_JOIN_IBSS,
6829 .doit = nl80211_join_ibss,
6830 .policy = nl80211_policy,
6831 .flags = GENL_ADMIN_PERM,
41265714 6832 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6833 NL80211_FLAG_NEED_RTNL,
04a773ad
JB		 6834 },
6835 {
6836 .cmd = NL80211_CMD_LEAVE_IBSS,
6837 .doit = nl80211_leave_ibss,
6838 .policy = nl80211_policy,
6839 .flags = GENL_ADMIN_PERM,
41265714 6840 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6841 NL80211_FLAG_NEED_RTNL,
04a773ad 6842 },
aff89a9b
JB		 6843#ifdef CONFIG_NL80211_TESTMODE
6844 {
6845 .cmd = NL80211_CMD_TESTMODE,
6846 .doit = nl80211_testmode_do,
71063f0e 6847 .dumpit = nl80211_testmode_dump,
aff89a9b
JB		 6848 .policy = nl80211_policy,
6849 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6850 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6851 NL80211_FLAG_NEED_RTNL,
aff89a9b
JB		 6852 },
6853#endif
b23aa676
SO		 6854 {
6855 .cmd = NL80211_CMD_CONNECT,
6856 .doit = nl80211_connect,
6857 .policy = nl80211_policy,
6858 .flags = GENL_ADMIN_PERM,
41265714 6859 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6860 NL80211_FLAG_NEED_RTNL,
b23aa676
SO		 6861 },
6862 {
6863 .cmd = NL80211_CMD_DISCONNECT,
6864 .doit = nl80211_disconnect,
6865 .policy = nl80211_policy,
6866 .flags = GENL_ADMIN_PERM,
41265714 6867 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6868 NL80211_FLAG_NEED_RTNL,
b23aa676 6869 },
463d0183
JB		 6870 {
6871 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
6872 .doit = nl80211_wiphy_netns,
6873 .policy = nl80211_policy,
6874 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6875 .internal_flags = NL80211_FLAG_NEED_WIPHY |
6876 NL80211_FLAG_NEED_RTNL,
463d0183 6877 },
61fa713c
HS		 6878 {
6879 .cmd = NL80211_CMD_GET_SURVEY,
6880 .policy = nl80211_policy,
6881 .dumpit = nl80211_dump_survey,
6882 },
67fbb16b
SO		 6883 {
6884 .cmd = NL80211_CMD_SET_PMKSA,
6885 .doit = nl80211_setdel_pmksa,
6886 .policy = nl80211_policy,
6887 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6888 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6889 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 6890 },
6891 {
6892 .cmd = NL80211_CMD_DEL_PMKSA,
6893 .doit = nl80211_setdel_pmksa,
6894 .policy = nl80211_policy,
6895 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6896 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6897 NL80211_FLAG_NEED_RTNL,
67fbb16b
SO		 6898 },
6899 {
6900 .cmd = NL80211_CMD_FLUSH_PMKSA,
6901 .doit = nl80211_flush_pmksa,
6902 .policy = nl80211_policy,
6903 .flags = GENL_ADMIN_PERM,
2b5f8b0b 6904 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6905 NL80211_FLAG_NEED_RTNL,
67fbb16b 6906 },
9588bbd5
JM		 6907 {
6908 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
6909 .doit = nl80211_remain_on_channel,
6910 .policy = nl80211_policy,
6911 .flags = GENL_ADMIN_PERM,
41265714 6912 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6913 NL80211_FLAG_NEED_RTNL,
9588bbd5
JM		 6914 },
6915 {
6916 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
6917 .doit = nl80211_cancel_remain_on_channel,
6918 .policy = nl80211_policy,
6919 .flags = GENL_ADMIN_PERM,
41265714 6920 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6921 NL80211_FLAG_NEED_RTNL,
9588bbd5 6922 },
13ae75b1
JM		 6923 {
6924 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
6925 .doit = nl80211_set_tx_bitrate_mask,
6926 .policy = nl80211_policy,
6927 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6928 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6929 NL80211_FLAG_NEED_RTNL,
13ae75b1 6930 },
026331c4 6931 {
2e161f78
JB		 6932 .cmd = NL80211_CMD_REGISTER_FRAME,
6933 .doit = nl80211_register_mgmt,
026331c4
JM		 6934 .policy = nl80211_policy,
6935 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6936 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6937 NL80211_FLAG_NEED_RTNL,
026331c4
JM		 6938 },
6939 {
2e161f78
JB		 6940 .cmd = NL80211_CMD_FRAME,
6941 .doit = nl80211_tx_mgmt,
026331c4 6942 .policy = nl80211_policy,
f7ca38df
JB		 6943 .flags = GENL_ADMIN_PERM,
6944 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
6945 NL80211_FLAG_NEED_RTNL,
6946 },
6947 {
6948 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
6949 .doit = nl80211_tx_mgmt_cancel_wait,
6950 .policy = nl80211_policy,
026331c4 6951 .flags = GENL_ADMIN_PERM,
41265714 6952 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
4c476991 6953 NL80211_FLAG_NEED_RTNL,
026331c4 6954 },
ffb9eb3d
KV		 6955 {
6956 .cmd = NL80211_CMD_SET_POWER_SAVE,
6957 .doit = nl80211_set_power_save,
6958 .policy = nl80211_policy,
6959 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6960 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6961 NL80211_FLAG_NEED_RTNL,
ffb9eb3d
KV		 6962 },
6963 {
6964 .cmd = NL80211_CMD_GET_POWER_SAVE,
6965 .doit = nl80211_get_power_save,
6966 .policy = nl80211_policy,
6967 /* can be retrieved by unprivileged users */
4c476991
JB		 6968 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6969 NL80211_FLAG_NEED_RTNL,
ffb9eb3d 6970 },
d6dc1a38
JO		 6971 {
6972 .cmd = NL80211_CMD_SET_CQM,
6973 .doit = nl80211_set_cqm,
6974 .policy = nl80211_policy,
6975 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6976 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6977 NL80211_FLAG_NEED_RTNL,
d6dc1a38 6978 },
f444de05
JB		 6979 {
6980 .cmd = NL80211_CMD_SET_CHANNEL,
6981 .doit = nl80211_set_channel,
6982 .policy = nl80211_policy,
6983 .flags = GENL_ADMIN_PERM,
4c476991
JB		 6984 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6985 NL80211_FLAG_NEED_RTNL,
f444de05 6986 },
e8347eba
BJ		 6987 {
6988 .cmd = NL80211_CMD_SET_WDS_PEER,
6989 .doit = nl80211_set_wds_peer,
6990 .policy = nl80211_policy,
6991 .flags = GENL_ADMIN_PERM,
43b19952
JB		 6992 .internal_flags = NL80211_FLAG_NEED_NETDEV |
6993 NL80211_FLAG_NEED_RTNL,
e8347eba 6994 },
29cbe68c
JB		 6995 {
6996 .cmd = NL80211_CMD_JOIN_MESH,
6997 .doit = nl80211_join_mesh,
6998 .policy = nl80211_policy,
6999 .flags = GENL_ADMIN_PERM,
7000 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7001 NL80211_FLAG_NEED_RTNL,
7002 },
7003 {
7004 .cmd = NL80211_CMD_LEAVE_MESH,
7005 .doit = nl80211_leave_mesh,
7006 .policy = nl80211_policy,
7007 .flags = GENL_ADMIN_PERM,
7008 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7009 NL80211_FLAG_NEED_RTNL,
7010 },
ff1b6e69
JB		 7011 {
7012 .cmd = NL80211_CMD_GET_WOWLAN,
7013 .doit = nl80211_get_wowlan,
7014 .policy = nl80211_policy,
7015 /* can be retrieved by unprivileged users */
7016 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7017 NL80211_FLAG_NEED_RTNL,
7018 },
7019 {
7020 .cmd = NL80211_CMD_SET_WOWLAN,
7021 .doit = nl80211_set_wowlan,
7022 .policy = nl80211_policy,
7023 .flags = GENL_ADMIN_PERM,
7024 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7025 NL80211_FLAG_NEED_RTNL,
7026 },
e5497d76
JB		 7027 {
7028 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
7029 .doit = nl80211_set_rekey_data,
7030 .policy = nl80211_policy,
7031 .flags = GENL_ADMIN_PERM,
7032 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7033 NL80211_FLAG_NEED_RTNL,
7034 },
109086ce
AN		 7035 {
7036 .cmd = NL80211_CMD_TDLS_MGMT,
7037 .doit = nl80211_tdls_mgmt,
7038 .policy = nl80211_policy,
7039 .flags = GENL_ADMIN_PERM,
7040 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7041 NL80211_FLAG_NEED_RTNL,
7042 },
7043 {
7044 .cmd = NL80211_CMD_TDLS_OPER,
7045 .doit = nl80211_tdls_oper,
7046 .policy = nl80211_policy,
7047 .flags = GENL_ADMIN_PERM,
7048 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7049 NL80211_FLAG_NEED_RTNL,
7050 },
28946da7
JB		 7051 {
7052 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
7053 .doit = nl80211_register_unexpected_frame,
7054 .policy = nl80211_policy,
7055 .flags = GENL_ADMIN_PERM,
7056 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7057 NL80211_FLAG_NEED_RTNL,
7058 },
7f6cf311
JB		 7059 {
7060 .cmd = NL80211_CMD_PROBE_CLIENT,
7061 .doit = nl80211_probe_client,
7062 .policy = nl80211_policy,
7063 .flags = GENL_ADMIN_PERM,
2b5f8b0b 7064 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7f6cf311
JB		 7065 NL80211_FLAG_NEED_RTNL,
7066 },
5e760230
JB		 7067 {
7068 .cmd = NL80211_CMD_REGISTER_BEACONS,
7069 .doit = nl80211_register_beacons,
7070 .policy = nl80211_policy,
7071 .flags = GENL_ADMIN_PERM,
7072 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7073 NL80211_FLAG_NEED_RTNL,
7074 },
1d9d9213
SW		 7075 {
7076 .cmd = NL80211_CMD_SET_NOACK_MAP,
7077 .doit = nl80211_set_noack_map,
7078 .policy = nl80211_policy,
7079 .flags = GENL_ADMIN_PERM,
7080 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7081 NL80211_FLAG_NEED_RTNL,
7082 },
7083
55682965 7084};
9588bbd5 7085
6039f6d2
JM		 7086static struct genl_multicast_group nl80211_mlme_mcgrp = {
7087 .name = "mlme",
7088};
55682965
JB		 7089
7090/* multicast groups */
7091static struct genl_multicast_group nl80211_config_mcgrp = {
7092 .name = "config",
7093};
2a519311
JB		 7094static struct genl_multicast_group nl80211_scan_mcgrp = {
7095 .name = "scan",
7096};
73d54c9e
LR		 7097static struct genl_multicast_group nl80211_regulatory_mcgrp = {
7098 .name = "regulatory",
7099};
55682965
JB		 7100
7101/* notification functions */
7102
7103void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
7104{
7105 struct sk_buff *msg;
7106
fd2120ca 7107 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
55682965
JB		 7108 if (!msg)
7109 return;
7110
7111 if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
7112 nlmsg_free(msg);
7113 return;
7114 }
7115
463d0183
JB		 7116 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7117 nl80211_config_mcgrp.id, GFP_KERNEL);
55682965
JB		 7118}
7119
362a415d
JB		 7120static int nl80211_add_scan_req(struct sk_buff *msg,
7121 struct cfg80211_registered_device *rdev)
7122{
7123 struct cfg80211_scan_request *req = rdev->scan_req;
7124 struct nlattr *nest;
7125 int i;
7126
667503dd
JB		 7127 ASSERT_RDEV_LOCK(rdev);
7128
362a415d
JB		 7129 if (WARN_ON(!req))
7130 return 0;
7131
7132 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
7133 if (!nest)
7134 goto nla_put_failure;
9360ffd1
DM		 7135 for (i = 0; i < req->n_ssids; i++) {
7136 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
7137 goto nla_put_failure;
7138 }
362a415d
JB		 7139 nla_nest_end(msg, nest);
7140
7141 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
7142 if (!nest)
7143 goto nla_put_failure;
9360ffd1
DM		 7144 for (i = 0; i < req->n_channels; i++) {
7145 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
7146 goto nla_put_failure;
7147 }
362a415d
JB		 7148 nla_nest_end(msg, nest);
7149
9360ffd1
DM		 7150 if (req->ie &&
7151 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
7152 goto nla_put_failure;
362a415d
JB		 7153
7154 return 0;
7155 nla_put_failure:
7156 return -ENOBUFS;
7157}
7158
a538e2d5
JB		 7159static int nl80211_send_scan_msg(struct sk_buff *msg,
7160 struct cfg80211_registered_device *rdev,
7161 struct net_device *netdev,
7162 u32 pid, u32 seq, int flags,
7163 u32 cmd)
2a519311
JB		 7164{
7165 void *hdr;
7166
7167 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
7168 if (!hdr)
7169 return -1;
7170
9360ffd1
DM		 7171 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7172 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
7173 goto nla_put_failure;
2a519311 7174
362a415d
JB		 7175 /* ignore errors and send incomplete event anyway */
7176 nl80211_add_scan_req(msg, rdev);
2a519311
JB		 7177
7178 return genlmsg_end(msg, hdr);
7179
7180 nla_put_failure:
7181 genlmsg_cancel(msg, hdr);
7182 return -EMSGSIZE;
7183}
7184
807f8a8c
LC		 7185static int
7186nl80211_send_sched_scan_msg(struct sk_buff *msg,
7187 struct cfg80211_registered_device *rdev,
7188 struct net_device *netdev,
7189 u32 pid, u32 seq, int flags, u32 cmd)
7190{
7191 void *hdr;
7192
7193 hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
7194 if (!hdr)
7195 return -1;
7196
9360ffd1
DM		 7197 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7198 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
7199 goto nla_put_failure;
807f8a8c
LC		 7200
7201 return genlmsg_end(msg, hdr);
7202
7203 nla_put_failure:
7204 genlmsg_cancel(msg, hdr);
7205 return -EMSGSIZE;
7206}
7207
a538e2d5
JB		 7208void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
7209 struct net_device *netdev)
7210{
7211 struct sk_buff *msg;
7212
7213 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
7214 if (!msg)
7215 return;
7216
7217 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
7218 NL80211_CMD_TRIGGER_SCAN) < 0) {
7219 nlmsg_free(msg);
7220 return;
7221 }
7222
463d0183
JB		 7223 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7224 nl80211_scan_mcgrp.id, GFP_KERNEL);
a538e2d5
JB		 7225}
7226
2a519311
JB		 7227void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
7228 struct net_device *netdev)
7229{
7230 struct sk_buff *msg;
7231
fd2120ca 7232 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 7233 if (!msg)
7234 return;
7235
a538e2d5
JB		 7236 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
7237 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
2a519311
JB		 7238 nlmsg_free(msg);
7239 return;
7240 }
7241
463d0183
JB		 7242 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7243 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 7244}
7245
7246void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
7247 struct net_device *netdev)
7248{
7249 struct sk_buff *msg;
7250
fd2120ca 7251 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2a519311
JB		 7252 if (!msg)
7253 return;
7254
a538e2d5
JB		 7255 if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
7256 NL80211_CMD_SCAN_ABORTED) < 0) {
2a519311
JB		 7257 nlmsg_free(msg);
7258 return;
7259 }
7260
463d0183
JB		 7261 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7262 nl80211_scan_mcgrp.id, GFP_KERNEL);
2a519311
JB		 7263}
7264
807f8a8c
LC		 7265void nl80211_send_sched_scan_results(struct cfg80211_registered_device *rdev,
7266 struct net_device *netdev)
7267{
7268 struct sk_buff *msg;
7269
7270 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7271 if (!msg)
7272 return;
7273
7274 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0,
7275 NL80211_CMD_SCHED_SCAN_RESULTS) < 0) {
7276 nlmsg_free(msg);
7277 return;
7278 }
7279
7280 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7281 nl80211_scan_mcgrp.id, GFP_KERNEL);
7282}
7283
7284void nl80211_send_sched_scan(struct cfg80211_registered_device *rdev,
7285 struct net_device *netdev, u32 cmd)
7286{
7287 struct sk_buff *msg;
7288
7289 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
7290 if (!msg)
7291 return;
7292
7293 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0, cmd) < 0) {
7294 nlmsg_free(msg);
7295 return;
7296 }
7297
7298 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7299 nl80211_scan_mcgrp.id, GFP_KERNEL);
7300}
7301
73d54c9e
LR		 7302/*
7303 * This can happen on global regulatory changes or device specific settings
7304 * based on custom world regulatory domains.
7305 */
7306void nl80211_send_reg_change_event(struct regulatory_request *request)
7307{
7308 struct sk_buff *msg;
7309 void *hdr;
7310
fd2120ca 7311 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
73d54c9e
LR		 7312 if (!msg)
7313 return;
7314
7315 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
7316 if (!hdr) {
7317 nlmsg_free(msg);
7318 return;
7319 }
7320
7321 /* Userspace can always count this one always being set */
9360ffd1
DM		 7322 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
7323 goto nla_put_failure;
7324
7325 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
7326 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7327 NL80211_REGDOM_TYPE_WORLD))
7328 goto nla_put_failure;
7329 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
7330 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7331 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
7332 goto nla_put_failure;
7333 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
7334 request->intersect) {
7335 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7336 NL80211_REGDOM_TYPE_INTERSECTION))
7337 goto nla_put_failure;
7338 } else {
7339 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
7340 NL80211_REGDOM_TYPE_COUNTRY) ||
7341 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
7342 request->alpha2))
7343 goto nla_put_failure;
7344 }
7345
7346 if (wiphy_idx_valid(request->wiphy_idx) &&
7347 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
7348 goto nla_put_failure;
73d54c9e 7349
3b7b72ee 7350 genlmsg_end(msg, hdr);
73d54c9e 7351
bc43b28c 7352 rcu_read_lock();
463d0183 7353 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
bc43b28c
JB		 7354 GFP_ATOMIC);
7355 rcu_read_unlock();
73d54c9e
LR		 7356
7357 return;
7358
7359nla_put_failure:
7360 genlmsg_cancel(msg, hdr);
7361 nlmsg_free(msg);
7362}
7363
6039f6d2
JM		 7364static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
7365 struct net_device *netdev,
7366 const u8 *buf, size_t len,
e6d6e342 7367 enum nl80211_commands cmd, gfp_t gfp)
6039f6d2
JM		 7368{
7369 struct sk_buff *msg;
7370 void *hdr;
7371
e6d6e342 7372 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
6039f6d2
JM		 7373 if (!msg)
7374 return;
7375
7376 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
7377 if (!hdr) {
7378 nlmsg_free(msg);
7379 return;
7380 }
7381
9360ffd1
DM		 7382 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7383 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7384 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
7385 goto nla_put_failure;
6039f6d2 7386
3b7b72ee 7387 genlmsg_end(msg, hdr);
6039f6d2 7388
463d0183
JB		 7389 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7390 nl80211_mlme_mcgrp.id, gfp);
6039f6d2
JM		 7391 return;
7392
7393 nla_put_failure:
7394 genlmsg_cancel(msg, hdr);
7395 nlmsg_free(msg);
7396}
7397
7398void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7399 struct net_device *netdev, const u8 *buf,
7400 size_t len, gfp_t gfp)
6039f6d2
JM		 7401{
7402 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 7403 NL80211_CMD_AUTHENTICATE, gfp);
6039f6d2
JM		 7404}
7405
7406void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
7407 struct net_device *netdev, const u8 *buf,
e6d6e342 7408 size_t len, gfp_t gfp)
6039f6d2 7409{
e6d6e342
JB		 7410 nl80211_send_mlme_event(rdev, netdev, buf, len,
7411 NL80211_CMD_ASSOCIATE, gfp);
6039f6d2
JM		 7412}
7413
53b46b84 7414void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7415 struct net_device *netdev, const u8 *buf,
7416 size_t len, gfp_t gfp)
6039f6d2
JM		 7417{
7418 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 7419 NL80211_CMD_DEAUTHENTICATE, gfp);
6039f6d2
JM		 7420}
7421
53b46b84
JM		 7422void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
7423 struct net_device *netdev, const u8 *buf,
e6d6e342 7424 size_t len, gfp_t gfp)
6039f6d2
JM		 7425{
7426 nl80211_send_mlme_event(rdev, netdev, buf, len,
e6d6e342 7427 NL80211_CMD_DISASSOCIATE, gfp);
6039f6d2
JM		 7428}
7429
cf4e594e
JM		 7430void nl80211_send_unprot_deauth(struct cfg80211_registered_device *rdev,
7431 struct net_device *netdev, const u8 *buf,
7432 size_t len, gfp_t gfp)
7433{
7434 nl80211_send_mlme_event(rdev, netdev, buf, len,
7435 NL80211_CMD_UNPROT_DEAUTHENTICATE, gfp);
7436}
7437
7438void nl80211_send_unprot_disassoc(struct cfg80211_registered_device *rdev,
7439 struct net_device *netdev, const u8 *buf,
7440 size_t len, gfp_t gfp)
7441{
7442 nl80211_send_mlme_event(rdev, netdev, buf, len,
7443 NL80211_CMD_UNPROT_DISASSOCIATE, gfp);
7444}
7445
1b06bb40
LR		 7446static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
7447 struct net_device *netdev, int cmd,
e6d6e342 7448 const u8 *addr, gfp_t gfp)
1965c853
JM		 7449{
7450 struct sk_buff *msg;
7451 void *hdr;
7452
e6d6e342 7453 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
1965c853
JM		 7454 if (!msg)
7455 return;
7456
7457 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
7458 if (!hdr) {
7459 nlmsg_free(msg);
7460 return;
7461 }
7462
9360ffd1
DM		 7463 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7464 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7465 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
7466 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
7467 goto nla_put_failure;
1965c853 7468
3b7b72ee 7469 genlmsg_end(msg, hdr);
1965c853 7470
463d0183
JB		 7471 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7472 nl80211_mlme_mcgrp.id, gfp);
1965c853
JM		 7473 return;
7474
7475 nla_put_failure:
7476 genlmsg_cancel(msg, hdr);
7477 nlmsg_free(msg);
7478}
7479
7480void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7481 struct net_device *netdev, const u8 *addr,
7482 gfp_t gfp)
1965c853
JM		 7483{
7484 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
e6d6e342 7485 addr, gfp);
1965c853
JM		 7486}
7487
7488void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
e6d6e342
JB		 7489 struct net_device *netdev, const u8 *addr,
7490 gfp_t gfp)
1965c853 7491{
e6d6e342
JB		 7492 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
7493 addr, gfp);
1965c853
JM		 7494}
7495
b23aa676
SO		 7496void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
7497 struct net_device *netdev, const u8 *bssid,
7498 const u8 *req_ie, size_t req_ie_len,
7499 const u8 *resp_ie, size_t resp_ie_len,
7500 u16 status, gfp_t gfp)
7501{
7502 struct sk_buff *msg;
7503 void *hdr;
7504
7505 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7506 if (!msg)
7507 return;
7508
7509 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
7510 if (!hdr) {
7511 nlmsg_free(msg);
7512 return;
7513 }
7514
9360ffd1
DM		 7515 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7516 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7517 (bssid && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid)) ||
7518 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE, status) ||
7519 (req_ie &&
7520 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
7521 (resp_ie &&
7522 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
7523 goto nla_put_failure;
b23aa676 7524
3b7b72ee 7525 genlmsg_end(msg, hdr);
b23aa676 7526
463d0183
JB		 7527 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7528 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 7529 return;
7530
7531 nla_put_failure:
7532 genlmsg_cancel(msg, hdr);
7533 nlmsg_free(msg);
7534
7535}
7536
7537void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
7538 struct net_device *netdev, const u8 *bssid,
7539 const u8 *req_ie, size_t req_ie_len,
7540 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
7541{
7542 struct sk_buff *msg;
7543 void *hdr;
7544
7545 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7546 if (!msg)
7547 return;
7548
7549 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
7550 if (!hdr) {
7551 nlmsg_free(msg);
7552 return;
7553 }
7554
9360ffd1
DM		 7555 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7556 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7557 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
7558 (req_ie &&
7559 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
7560 (resp_ie &&
7561 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
7562 goto nla_put_failure;
b23aa676 7563
3b7b72ee 7564 genlmsg_end(msg, hdr);
b23aa676 7565
463d0183
JB		 7566 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7567 nl80211_mlme_mcgrp.id, gfp);
b23aa676
SO		 7568 return;
7569
7570 nla_put_failure:
7571 genlmsg_cancel(msg, hdr);
7572 nlmsg_free(msg);
7573
7574}
7575
7576void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
7577 struct net_device *netdev, u16 reason,
667503dd 7578 const u8 *ie, size_t ie_len, bool from_ap)
b23aa676
SO		 7579{
7580 struct sk_buff *msg;
7581 void *hdr;
7582
667503dd 7583 msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
b23aa676
SO		 7584 if (!msg)
7585 return;
7586
7587 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
7588 if (!hdr) {
7589 nlmsg_free(msg);
7590 return;
7591 }
7592
9360ffd1
DM		 7593 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7594 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7595 (from_ap && reason &&
7596 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
7597 (from_ap &&
7598 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
7599 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
7600 goto nla_put_failure;
b23aa676 7601
3b7b72ee 7602 genlmsg_end(msg, hdr);
b23aa676 7603
463d0183
JB		 7604 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7605 nl80211_mlme_mcgrp.id, GFP_KERNEL);
b23aa676
SO		 7606 return;
7607
7608 nla_put_failure:
7609 genlmsg_cancel(msg, hdr);
7610 nlmsg_free(msg);
7611
7612}
7613
04a773ad
JB		 7614void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
7615 struct net_device *netdev, const u8 *bssid,
7616 gfp_t gfp)
7617{
7618 struct sk_buff *msg;
7619 void *hdr;
7620
fd2120ca 7621 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
04a773ad
JB		 7622 if (!msg)
7623 return;
7624
7625 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
7626 if (!hdr) {
7627 nlmsg_free(msg);
7628 return;
7629 }
7630
9360ffd1
DM		 7631 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7632 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7633 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
7634 goto nla_put_failure;
04a773ad 7635
3b7b72ee 7636 genlmsg_end(msg, hdr);
04a773ad 7637
463d0183
JB		 7638 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7639 nl80211_mlme_mcgrp.id, gfp);
04a773ad
JB		 7640 return;
7641
7642 nla_put_failure:
7643 genlmsg_cancel(msg, hdr);
7644 nlmsg_free(msg);
7645}
7646
c93b5e71
JC		 7647void nl80211_send_new_peer_candidate(struct cfg80211_registered_device *rdev,
7648 struct net_device *netdev,
7649 const u8 *macaddr, const u8* ie, u8 ie_len,
7650 gfp_t gfp)
7651{
7652 struct sk_buff *msg;
7653 void *hdr;
7654
7655 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7656 if (!msg)
7657 return;
7658
7659 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
7660 if (!hdr) {
7661 nlmsg_free(msg);
7662 return;
7663 }
7664
9360ffd1
DM		 7665 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7666 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7667 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, macaddr) ||
7668 (ie_len && ie &&
7669 nla_put(msg, NL80211_ATTR_IE, ie_len , ie)))
7670 goto nla_put_failure;
c93b5e71 7671
3b7b72ee 7672 genlmsg_end(msg, hdr);
c93b5e71
JC		 7673
7674 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7675 nl80211_mlme_mcgrp.id, gfp);
7676 return;
7677
7678 nla_put_failure:
7679 genlmsg_cancel(msg, hdr);
7680 nlmsg_free(msg);
7681}
7682
a3b8b056
JM		 7683void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
7684 struct net_device *netdev, const u8 *addr,
7685 enum nl80211_key_type key_type, int key_id,
e6d6e342 7686 const u8 *tsc, gfp_t gfp)
a3b8b056
JM		 7687{
7688 struct sk_buff *msg;
7689 void *hdr;
7690
e6d6e342 7691 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
a3b8b056
JM		 7692 if (!msg)
7693 return;
7694
7695 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
7696 if (!hdr) {
7697 nlmsg_free(msg);
7698 return;
7699 }
7700
9360ffd1
DM		 7701 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7702 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7703 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
7704 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
7705 (key_id != -1 &&
7706 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
7707 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
7708 goto nla_put_failure;
a3b8b056 7709
3b7b72ee 7710 genlmsg_end(msg, hdr);
a3b8b056 7711
463d0183
JB		 7712 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7713 nl80211_mlme_mcgrp.id, gfp);
a3b8b056
JM		 7714 return;
7715
7716 nla_put_failure:
7717 genlmsg_cancel(msg, hdr);
7718 nlmsg_free(msg);
7719}
7720
6bad8766
LR		 7721void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
7722 struct ieee80211_channel *channel_before,
7723 struct ieee80211_channel *channel_after)
7724{
7725 struct sk_buff *msg;
7726 void *hdr;
7727 struct nlattr *nl_freq;
7728
fd2120ca 7729 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
6bad8766
LR		 7730 if (!msg)
7731 return;
7732
7733 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
7734 if (!hdr) {
7735 nlmsg_free(msg);
7736 return;
7737 }
7738
7739 /*
7740 * Since we are applying the beacon hint to a wiphy we know its
7741 * wiphy_idx is valid
7742 */
9360ffd1
DM		 7743 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
7744 goto nla_put_failure;
6bad8766
LR		 7745
7746 /* Before */
7747 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
7748 if (!nl_freq)
7749 goto nla_put_failure;
7750 if (nl80211_msg_put_channel(msg, channel_before))
7751 goto nla_put_failure;
7752 nla_nest_end(msg, nl_freq);
7753
7754 /* After */
7755 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
7756 if (!nl_freq)
7757 goto nla_put_failure;
7758 if (nl80211_msg_put_channel(msg, channel_after))
7759 goto nla_put_failure;
7760 nla_nest_end(msg, nl_freq);
7761
3b7b72ee 7762 genlmsg_end(msg, hdr);
6bad8766 7763
463d0183
JB		 7764 rcu_read_lock();
7765 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
7766 GFP_ATOMIC);
7767 rcu_read_unlock();
6bad8766
LR		 7768
7769 return;
7770
7771nla_put_failure:
7772 genlmsg_cancel(msg, hdr);
7773 nlmsg_free(msg);
7774}
7775
9588bbd5
JM		 7776static void nl80211_send_remain_on_chan_event(
7777 int cmd, struct cfg80211_registered_device *rdev,
7778 struct net_device *netdev, u64 cookie,
7779 struct ieee80211_channel *chan,
7780 enum nl80211_channel_type channel_type,
7781 unsigned int duration, gfp_t gfp)
7782{
7783 struct sk_buff *msg;
7784 void *hdr;
7785
7786 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7787 if (!msg)
7788 return;
7789
7790 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
7791 if (!hdr) {
7792 nlmsg_free(msg);
7793 return;
7794 }
7795
9360ffd1
DM		 7796 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7797 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7798 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
7799 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, channel_type) ||
7800 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
7801 goto nla_put_failure;
9588bbd5 7802
9360ffd1
DM		 7803 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
7804 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
7805 goto nla_put_failure;
9588bbd5 7806
3b7b72ee 7807 genlmsg_end(msg, hdr);
9588bbd5
JM		 7808
7809 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7810 nl80211_mlme_mcgrp.id, gfp);
7811 return;
7812
7813 nla_put_failure:
7814 genlmsg_cancel(msg, hdr);
7815 nlmsg_free(msg);
7816}
7817
7818void nl80211_send_remain_on_channel(struct cfg80211_registered_device *rdev,
7819 struct net_device *netdev, u64 cookie,
7820 struct ieee80211_channel *chan,
7821 enum nl80211_channel_type channel_type,
7822 unsigned int duration, gfp_t gfp)
7823{
7824 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
7825 rdev, netdev, cookie, chan,
7826 channel_type, duration, gfp);
7827}
7828
7829void nl80211_send_remain_on_channel_cancel(
7830 struct cfg80211_registered_device *rdev, struct net_device *netdev,
7831 u64 cookie, struct ieee80211_channel *chan,
7832 enum nl80211_channel_type channel_type, gfp_t gfp)
7833{
7834 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
7835 rdev, netdev, cookie, chan,
7836 channel_type, 0, gfp);
7837}
7838
98b62183
JB		 7839void nl80211_send_sta_event(struct cfg80211_registered_device *rdev,
7840 struct net_device *dev, const u8 *mac_addr,
7841 struct station_info *sinfo, gfp_t gfp)
7842{
7843 struct sk_buff *msg;
7844
7845 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7846 if (!msg)
7847 return;
7848
66266b3a
JL		 7849 if (nl80211_send_station(msg, 0, 0, 0,
7850 rdev, dev, mac_addr, sinfo) < 0) {
98b62183
JB		 7851 nlmsg_free(msg);
7852 return;
7853 }
7854
7855 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7856 nl80211_mlme_mcgrp.id, gfp);
7857}
7858
ec15e68b
JM		 7859void nl80211_send_sta_del_event(struct cfg80211_registered_device *rdev,
7860 struct net_device *dev, const u8 *mac_addr,
7861 gfp_t gfp)
7862{
7863 struct sk_buff *msg;
7864 void *hdr;
7865
7866 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
7867 if (!msg)
7868 return;
7869
7870 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_STATION);
7871 if (!hdr) {
7872 nlmsg_free(msg);
7873 return;
7874 }
7875
9360ffd1
DM		 7876 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
7877 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
7878 goto nla_put_failure;
ec15e68b 7879
3b7b72ee 7880 genlmsg_end(msg, hdr);
ec15e68b
JM		 7881
7882 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
7883 nl80211_mlme_mcgrp.id, gfp);
7884 return;
7885
7886 nla_put_failure:
7887 genlmsg_cancel(msg, hdr);
7888 nlmsg_free(msg);
7889}
7890
b92ab5d8
JB		 7891static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
7892 const u8 *addr, gfp_t gfp)
28946da7
JB		 7893{
7894 struct wireless_dev *wdev = dev->ieee80211_ptr;
7895 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
7896 struct sk_buff *msg;
7897 void *hdr;
7898 int err;
7899 u32 nlpid = ACCESS_ONCE(wdev->ap_unexpected_nlpid);
7900
7901 if (!nlpid)
7902 return false;
7903
7904 msg = nlmsg_new(100, gfp);
7905 if (!msg)
7906 return true;
7907
b92ab5d8 7908 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
28946da7
JB		 7909 if (!hdr) {
7910 nlmsg_free(msg);
7911 return true;
7912 }
7913
9360ffd1
DM		 7914 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7915 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
7916 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
7917 goto nla_put_failure;
28946da7
JB		 7918
7919 err = genlmsg_end(msg, hdr);
7920 if (err < 0) {
7921 nlmsg_free(msg);
7922 return true;
7923 }
7924
7925 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlpid);
7926 return true;
7927
7928 nla_put_failure:
7929 genlmsg_cancel(msg, hdr);
7930 nlmsg_free(msg);
7931 return true;
7932}
7933
b92ab5d8
JB		 7934bool nl80211_unexpected_frame(struct net_device *dev, const u8 *addr, gfp_t gfp)
7935{
7936 return __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
7937 addr, gfp);
7938}
7939
7940bool nl80211_unexpected_4addr_frame(struct net_device *dev,
7941 const u8 *addr, gfp_t gfp)
7942{
7943 return __nl80211_unexpected_frame(dev,
7944 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
7945 addr, gfp);
7946}
7947
2e161f78
JB		 7948int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
7949 struct net_device *netdev, u32 nlpid,
804483e9
JB		 7950 int freq, int sig_dbm,
7951 const u8 *buf, size_t len, gfp_t gfp)
026331c4
JM		 7952{
7953 struct sk_buff *msg;
7954 void *hdr;
026331c4
JM		 7955
7956 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7957 if (!msg)
7958 return -ENOMEM;
7959
2e161f78 7960 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
026331c4
JM		 7961 if (!hdr) {
7962 nlmsg_free(msg);
7963 return -ENOMEM;
7964 }
7965
9360ffd1
DM		 7966 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
7967 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
7968 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
7969 (sig_dbm &&
7970 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
7971 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
7972 goto nla_put_failure;
026331c4 7973
3b7b72ee 7974 genlmsg_end(msg, hdr);
026331c4 7975
3b7b72ee 7976 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlpid);
026331c4
JM		 7977
7978 nla_put_failure:
7979 genlmsg_cancel(msg, hdr);
7980 nlmsg_free(msg);
7981 return -ENOBUFS;
7982}
7983
2e161f78
JB		 7984void nl80211_send_mgmt_tx_status(struct cfg80211_registered_device *rdev,
7985 struct net_device *netdev, u64 cookie,
7986 const u8 *buf, size_t len, bool ack,
7987 gfp_t gfp)
026331c4
JM		 7988{
7989 struct sk_buff *msg;
7990 void *hdr;
7991
7992 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
7993 if (!msg)
7994 return;
7995
2e161f78 7996 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
026331c4
JM		 7997 if (!hdr) {
7998 nlmsg_free(msg);
7999 return;
8000 }
8001
9360ffd1
DM		 8002 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8003 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8004 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
8005 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
8006 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
8007 goto nla_put_failure;
026331c4 8008
3b7b72ee 8009 genlmsg_end(msg, hdr);
026331c4
JM		 8010
8011 genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
8012 return;
8013
8014 nla_put_failure:
8015 genlmsg_cancel(msg, hdr);
8016 nlmsg_free(msg);
8017}
8018
d6dc1a38
JO		 8019void
8020nl80211_send_cqm_rssi_notify(struct cfg80211_registered_device *rdev,
8021 struct net_device *netdev,
8022 enum nl80211_cqm_rssi_threshold_event rssi_event,
8023 gfp_t gfp)
8024{
8025 struct sk_buff *msg;
8026 struct nlattr *pinfoattr;
8027 void *hdr;
8028
8029 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8030 if (!msg)
8031 return;
8032
8033 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
8034 if (!hdr) {
8035 nlmsg_free(msg);
8036 return;
8037 }
8038
9360ffd1
DM		 8039 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8040 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
8041 goto nla_put_failure;
d6dc1a38
JO		 8042
8043 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
8044 if (!pinfoattr)
8045 goto nla_put_failure;
8046
9360ffd1
DM		 8047 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
8048 rssi_event))
8049 goto nla_put_failure;
d6dc1a38
JO		 8050
8051 nla_nest_end(msg, pinfoattr);
8052
3b7b72ee 8053 genlmsg_end(msg, hdr);
d6dc1a38
JO		 8054
8055 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8056 nl80211_mlme_mcgrp.id, gfp);
8057 return;
8058
8059 nla_put_failure:
8060 genlmsg_cancel(msg, hdr);
8061 nlmsg_free(msg);
8062}
8063
e5497d76
JB		 8064void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
8065 struct net_device *netdev, const u8 *bssid,
8066 const u8 *replay_ctr, gfp_t gfp)
8067{
8068 struct sk_buff *msg;
8069 struct nlattr *rekey_attr;
8070 void *hdr;
8071
8072 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8073 if (!msg)
8074 return;
8075
8076 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
8077 if (!hdr) {
8078 nlmsg_free(msg);
8079 return;
8080 }
8081
9360ffd1
DM		 8082 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8083 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8084 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
8085 goto nla_put_failure;
e5497d76
JB		 8086
8087 rekey_attr = nla_nest_start(msg, NL80211_ATTR_REKEY_DATA);
8088 if (!rekey_attr)
8089 goto nla_put_failure;
8090
9360ffd1
DM		 8091 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
8092 NL80211_REPLAY_CTR_LEN, replay_ctr))
8093 goto nla_put_failure;
e5497d76
JB		 8094
8095 nla_nest_end(msg, rekey_attr);
8096
3b7b72ee 8097 genlmsg_end(msg, hdr);
e5497d76
JB		 8098
8099 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8100 nl80211_mlme_mcgrp.id, gfp);
8101 return;
8102
8103 nla_put_failure:
8104 genlmsg_cancel(msg, hdr);
8105 nlmsg_free(msg);
8106}
8107
c9df56b4
JM		 8108void nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
8109 struct net_device *netdev, int index,
8110 const u8 *bssid, bool preauth, gfp_t gfp)
8111{
8112 struct sk_buff *msg;
8113 struct nlattr *attr;
8114 void *hdr;
8115
8116 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8117 if (!msg)
8118 return;
8119
8120 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
8121 if (!hdr) {
8122 nlmsg_free(msg);
8123 return;
8124 }
8125
9360ffd1
DM		 8126 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8127 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
8128 goto nla_put_failure;
c9df56b4
JM		 8129
8130 attr = nla_nest_start(msg, NL80211_ATTR_PMKSA_CANDIDATE);
8131 if (!attr)
8132 goto nla_put_failure;
8133
9360ffd1
DM		 8134 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
8135 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
8136 (preauth &&
8137 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
8138 goto nla_put_failure;
c9df56b4
JM		 8139
8140 nla_nest_end(msg, attr);
8141
3b7b72ee 8142 genlmsg_end(msg, hdr);
c9df56b4
JM		 8143
8144 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8145 nl80211_mlme_mcgrp.id, gfp);
8146 return;
8147
8148 nla_put_failure:
8149 genlmsg_cancel(msg, hdr);
8150 nlmsg_free(msg);
8151}
8152
5314526b
TP		 8153void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
8154 struct net_device *netdev, int freq,
8155 enum nl80211_channel_type type, gfp_t gfp)
8156{
8157 struct sk_buff *msg;
8158 void *hdr;
8159
8160 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8161 if (!msg)
8162 return;
8163
8164 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CH_SWITCH_NOTIFY);
8165 if (!hdr) {
8166 nlmsg_free(msg);
8167 return;
8168 }
8169
7eab0f64
JL		 8170 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8171 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
8172 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE, type))
8173 goto nla_put_failure;
5314526b
TP		 8174
8175 genlmsg_end(msg, hdr);
8176
8177 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8178 nl80211_mlme_mcgrp.id, gfp);
8179 return;
8180
8181 nla_put_failure:
8182 genlmsg_cancel(msg, hdr);
8183 nlmsg_free(msg);
8184}
8185
c063dbf5
JB		 8186void
8187nl80211_send_cqm_pktloss_notify(struct cfg80211_registered_device *rdev,
8188 struct net_device *netdev, const u8 *peer,
8189 u32 num_packets, gfp_t gfp)
8190{
8191 struct sk_buff *msg;
8192 struct nlattr *pinfoattr;
8193 void *hdr;
8194
8195 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8196 if (!msg)
8197 return;
8198
8199 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
8200 if (!hdr) {
8201 nlmsg_free(msg);
8202 return;
8203 }
8204
9360ffd1
DM		 8205 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8206 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8207 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer))
8208 goto nla_put_failure;
c063dbf5
JB		 8209
8210 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
8211 if (!pinfoattr)
8212 goto nla_put_failure;
8213
9360ffd1
DM		 8214 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
8215 goto nla_put_failure;
c063dbf5
JB		 8216
8217 nla_nest_end(msg, pinfoattr);
8218
3b7b72ee 8219 genlmsg_end(msg, hdr);
c063dbf5
JB		 8220
8221 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8222 nl80211_mlme_mcgrp.id, gfp);
8223 return;
8224
8225 nla_put_failure:
8226 genlmsg_cancel(msg, hdr);
8227 nlmsg_free(msg);
8228}
8229
7f6cf311
JB		 8230void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
8231 u64 cookie, bool acked, gfp_t gfp)
8232{
8233 struct wireless_dev *wdev = dev->ieee80211_ptr;
8234 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
8235 struct sk_buff *msg;
8236 void *hdr;
8237 int err;
8238
8239 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
8240 if (!msg)
8241 return;
8242
8243 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
8244 if (!hdr) {
8245 nlmsg_free(msg);
8246 return;
8247 }
8248
9360ffd1
DM		 8249 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8250 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
8251 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
8252 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
8253 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)))
8254 goto nla_put_failure;
7f6cf311
JB		 8255
8256 err = genlmsg_end(msg, hdr);
8257 if (err < 0) {
8258 nlmsg_free(msg);
8259 return;
8260 }
8261
8262 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8263 nl80211_mlme_mcgrp.id, gfp);
8264 return;
8265
8266 nla_put_failure:
8267 genlmsg_cancel(msg, hdr);
8268 nlmsg_free(msg);
8269}
8270EXPORT_SYMBOL(cfg80211_probe_status);
8271
5e760230
JB		 8272void cfg80211_report_obss_beacon(struct wiphy *wiphy,
8273 const u8 *frame, size_t len,
804483e9 8274 int freq, int sig_dbm, gfp_t gfp)
5e760230
JB		 8275{
8276 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
8277 struct sk_buff *msg;
8278 void *hdr;
8279 u32 nlpid = ACCESS_ONCE(rdev->ap_beacons_nlpid);
8280
8281 if (!nlpid)
8282 return;
8283
8284 msg = nlmsg_new(len + 100, gfp);
8285 if (!msg)
8286 return;
8287
8288 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
8289 if (!hdr) {
8290 nlmsg_free(msg);
8291 return;
8292 }
8293
9360ffd1
DM		 8294 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8295 (freq &&
8296 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq)) ||
8297 (sig_dbm &&
8298 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
8299 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
8300 goto nla_put_failure;
5e760230
JB		 8301
8302 genlmsg_end(msg, hdr);
8303
8304 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlpid);
8305 return;
8306
8307 nla_put_failure:
8308 genlmsg_cancel(msg, hdr);
8309 nlmsg_free(msg);
8310}
8311EXPORT_SYMBOL(cfg80211_report_obss_beacon);
8312
026331c4
JM		 8313static int nl80211_netlink_notify(struct notifier_block * nb,
8314 unsigned long state,
8315 void *_notify)
8316{
8317 struct netlink_notify *notify = _notify;
8318 struct cfg80211_registered_device *rdev;
8319 struct wireless_dev *wdev;
8320
8321 if (state != NETLINK_URELEASE)
8322 return NOTIFY_DONE;
8323
8324 rcu_read_lock();
8325
5e760230 8326 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
026331c4 8327 list_for_each_entry_rcu(wdev, &rdev->netdev_list, list)
2e161f78 8328 cfg80211_mlme_unregister_socket(wdev, notify->pid);
5e760230
JB		 8329 if (rdev->ap_beacons_nlpid == notify->pid)
8330 rdev->ap_beacons_nlpid = 0;
8331 }
026331c4
JM		 8332
8333 rcu_read_unlock();
8334
8335 return NOTIFY_DONE;
8336}
8337
8338static struct notifier_block nl80211_netlink_notifier = {
8339 .notifier_call = nl80211_netlink_notify,
8340};
8341
55682965
JB		 8342/* initialisation/exit functions */
8343
8344int nl80211_init(void)
8345{
0d63cbb5 8346 int err;
55682965 8347
0d63cbb5
MM		 8348 err = genl_register_family_with_ops(&nl80211_fam,
8349 nl80211_ops, ARRAY_SIZE(nl80211_ops));
55682965
JB		 8350 if (err)
8351 return err;
8352
55682965
JB		 8353 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
8354 if (err)
8355 goto err_out;
8356
2a519311
JB		 8357 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
8358 if (err)
8359 goto err_out;
8360
73d54c9e
LR		 8361 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
8362 if (err)
8363 goto err_out;
8364
6039f6d2
JM		 8365 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
8366 if (err)
8367 goto err_out;
8368
aff89a9b
JB		 8369#ifdef CONFIG_NL80211_TESTMODE
8370 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
8371 if (err)
8372 goto err_out;
8373#endif
8374
026331c4
JM		 8375 err = netlink_register_notifier(&nl80211_netlink_notifier);
8376 if (err)
8377 goto err_out;
8378
55682965
JB		 8379 return 0;
8380 err_out:
8381 genl_unregister_family(&nl80211_fam);
8382 return err;
8383}
8384
8385void nl80211_exit(void)
8386{
026331c4 8387 netlink_unregister_notifier(&nl80211_netlink_notifier);
55682965
JB		 8388 genl_unregister_family(&nl80211_fam);
8389}
kernel source for telekom puls (alcatel/mediatek)