net/wireless/core.c

   1 /*
   2  * This is the linux wireless configuration interface.
   3  *
   4  * Copyright 2006-2010          Johannes Berg <johannes@sipsolutions.net>
   5  */
   6
   7 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
   8
   9 #include <linux/if.h>
  10 #include <linux/module.h>
  11 #include <linux/err.h>
  12 #include <linux/list.h>
  13 #include <linux/slab.h>
  14 #include <linux/nl80211.h>
  15 #include <linux/debugfs.h>
  16 #include <linux/notifier.h>
  17 #include <linux/device.h>
  18 #include <linux/etherdevice.h>
  19 #include <linux/rtnetlink.h>
  20 #include <linux/sched.h>
  21 #include <net/genetlink.h>
  22 #include <net/cfg80211.h>
  23 #include "nl80211.h"
  24 #include "core.h"
  25 #include "sysfs.h"
  26 #include "debugfs.h"
  27 #include "wext-compat.h"
  28 #include "ethtool.h"
  29 #include "rdev-ops.h"
  30
  31 /* name for sysfs, %d is appended */
  32 #define PHY_NAME "phy"
  33
  34 MODULE_AUTHOR("Johannes Berg");
  35 MODULE_LICENSE("GPL");
  36 MODULE_DESCRIPTION("wireless configuration support");
  37
  38 /* RCU-protected (and cfg80211_mutex for writers) */
  39 LIST_HEAD(cfg80211_rdev_list);
  40 int cfg80211_rdev_list_generation;
  41
  42 DEFINE_MUTEX(cfg80211_mutex);
  43
  44 /* for debugfs */
  45 static struct dentry *ieee80211_debugfs_dir;
  46
  47 /* for the cleanup, scan and event works */
  48 struct workqueue_struct *cfg80211_wq;
  49
  50 static bool cfg80211_disable_40mhz_24ghz;
  51 module_param(cfg80211_disable_40mhz_24ghz, bool, 0644);
  52 MODULE_PARM_DESC(cfg80211_disable_40mhz_24ghz,
  53                  "Disable 40MHz support in the 2.4GHz band");
  54
  55 /* requires cfg80211_mutex to be held! */
  56 struct cfg80211_registered_device *cfg80211_rdev_by_wiphy_idx(int wiphy_idx)
  57 {
  58         struct cfg80211_registered_device *result = NULL, *rdev;
  59
  60         assert_cfg80211_lock();
  61
  62         list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
  63                 if (rdev->wiphy_idx == wiphy_idx) {
  64                         result = rdev;
  65                         break;
  66                 }
  67         }
  68
  69         return result;
  70 }
  71
  72 int get_wiphy_idx(struct wiphy *wiphy)
  73 {
  74         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
  75
  76         return rdev->wiphy_idx;
  77 }
  78
  79 /* requires cfg80211_rdev_mutex to be held! */
  80 struct wiphy *wiphy_idx_to_wiphy(int wiphy_idx)
  81 {
  82         struct cfg80211_registered_device *rdev;
  83
  84         assert_cfg80211_lock();
  85
  86         rdev = cfg80211_rdev_by_wiphy_idx(wiphy_idx);
  87         if (!rdev)
  88                 return NULL;
  89         return &rdev->wiphy;
  90 }
  91
  92 struct cfg80211_registered_device *
  93 cfg80211_get_dev_from_ifindex(struct net *net, int ifindex)
  94 {
  95         struct cfg80211_registered_device *rdev = ERR_PTR(-ENODEV);
  96         struct net_device *dev;
  97
  98         mutex_lock(&cfg80211_mutex);
  99         dev = dev_get_by_index(net, ifindex);
 100         if (!dev)
 101                 goto out;
 102         if (dev->ieee80211_ptr) {
 103                 rdev = wiphy_to_dev(dev->ieee80211_ptr->wiphy);
 104                 mutex_lock(&rdev->mtx);
 105         } else
 106                 rdev = ERR_PTR(-ENODEV);
 107         dev_put(dev);
 108  out:
 109         mutex_unlock(&cfg80211_mutex);
 110         return rdev;
 111 }
 112
 113 /* requires cfg80211_mutex to be held */
 114 int cfg80211_dev_rename(struct cfg80211_registered_device *rdev,
 115                         char *newname)
 116 {
 117         struct cfg80211_registered_device *rdev2;
 118         int wiphy_idx, taken = -1, result, digits;
 119
 120         assert_cfg80211_lock();
 121
 122         /* prohibit calling the thing phy%d when %d is not its number */
 123         sscanf(newname, PHY_NAME "%d%n", &wiphy_idx, &taken);
 124         if (taken == strlen(newname) && wiphy_idx != rdev->wiphy_idx) {
 125                 /* count number of places needed to print wiphy_idx */
 126                 digits = 1;
 127                 while (wiphy_idx /= 10)
 128                         digits++;
 129                 /*
 130                  * deny the name if it is phy<idx> where <idx> is printed
 131                  * without leading zeroes. taken == strlen(newname) here
 132                  */
 133                 if (taken == strlen(PHY_NAME) + digits)
 134                         return -EINVAL;
 135         }
 136
 137
 138         /* Ignore nop renames */
 139         if (strcmp(newname, dev_name(&rdev->wiphy.dev)) == 0)
 140                 return 0;
 141
 142         /* Ensure another device does not already have this name. */
 143         list_for_each_entry(rdev2, &cfg80211_rdev_list, list)
 144                 if (strcmp(newname, dev_name(&rdev2->wiphy.dev)) == 0)
 145                         return -EINVAL;
 146
 147         result = device_rename(&rdev->wiphy.dev, newname);
 148         if (result)
 149                 return result;
 150
 151         if (rdev->wiphy.debugfsdir &&
 152             !debugfs_rename(rdev->wiphy.debugfsdir->d_parent,
 153                             rdev->wiphy.debugfsdir,
 154                             rdev->wiphy.debugfsdir->d_parent,
 155                             newname))
 156                 pr_err("failed to rename debugfs dir to %s!\n", newname);
 157
 158         nl80211_notify_dev_rename(rdev);
 159
 160         return 0;
 161 }
 162
 163 int cfg80211_switch_netns(struct cfg80211_registered_device *rdev,
 164                           struct net *net)
 165 {
 166         struct wireless_dev *wdev;
 167         int err = 0;
 168
 169         if (!(rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK))
 170                 return -EOPNOTSUPP;
 171
 172         list_for_each_entry(wdev, &rdev->wdev_list, list) {
 173                 if (!wdev->netdev)
 174                         continue;
 175                 wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL;
 176                 err = dev_change_net_namespace(wdev->netdev, net, "wlan%d");
 177                 if (err)
 178                         break;
 179                 wdev->netdev->features |= NETIF_F_NETNS_LOCAL;
 180         }
 181
 182         if (err) {
 183                 /* failed -- clean up to old netns */
 184                 net = wiphy_net(&rdev->wiphy);
 185
 186                 list_for_each_entry_continue_reverse(wdev, &rdev->wdev_list,
 187                                                      list) {
 188                         if (!wdev->netdev)
 189                                 continue;
 190                         wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL;
 191                         err = dev_change_net_namespace(wdev->netdev, net,
 192                                                         "wlan%d");
 193                         WARN_ON(err);
 194                         wdev->netdev->features |= NETIF_F_NETNS_LOCAL;
 195                 }
 196
 197                 return err;
 198         }
 199
 200         wiphy_net_set(&rdev->wiphy, net);
 201
 202         err = device_rename(&rdev->wiphy.dev, dev_name(&rdev->wiphy.dev));
 203         WARN_ON(err);
 204
 205         return 0;
 206 }
 207
 208 static void cfg80211_rfkill_poll(struct rfkill *rfkill, void *data)
 209 {
 210         struct cfg80211_registered_device *rdev = data;
 211
 212         rdev_rfkill_poll(rdev);
 213 }
 214
 215 void cfg80211_stop_p2p_device(struct cfg80211_registered_device *rdev,
 216                               struct wireless_dev *wdev)
 217 {
 218         lockdep_assert_held(&rdev->devlist_mtx);
 219         lockdep_assert_held(&rdev->sched_scan_mtx);
 220
 221         if (WARN_ON(wdev->iftype != NL80211_IFTYPE_P2P_DEVICE))
 222                 return;
 223
 224         if (!wdev->p2p_started)
 225                 return;
 226
 227         rdev_stop_p2p_device(rdev, wdev);
 228         wdev->p2p_started = false;
 229
 230         rdev->opencount--;
 231
 232         if (rdev->scan_req && rdev->scan_req->wdev == wdev) {
 233                 bool busy = work_busy(&rdev->scan_done_wk);
 234
 235                 /*
 236                  * If the work isn't pending or running (in which case it would
 237                  * be waiting for the lock we hold) the driver didn't properly
 238                  * cancel the scan when the interface was removed. In this case
 239                  * warn and leak the scan request object to not crash later.
 240                  */
 241                 WARN_ON(!busy);
 242
 243                 rdev->scan_req->aborted = true;
 244                 ___cfg80211_scan_done(rdev, !busy);
 245         }
 246 }
 247
 248 static int cfg80211_rfkill_set_block(void *data, bool blocked)
 249 {
 250         struct cfg80211_registered_device *rdev = data;
 251         struct wireless_dev *wdev;
 252
 253         if (!blocked)
 254                 return 0;
 255
 256         rtnl_lock();
 257
 258         /* read-only iteration need not hold the devlist_mtx */
 259
 260         list_for_each_entry(wdev, &rdev->wdev_list, list) {
 261                 if (wdev->netdev) {
 262                         dev_close(wdev->netdev);
 263                         continue;
 264                 }
 265                 /* otherwise, check iftype */
 266                 switch (wdev->iftype) {
 267                 case NL80211_IFTYPE_P2P_DEVICE:
 268                         /* but this requires it */
 269                         mutex_lock(&rdev->devlist_mtx);
 270                         mutex_lock(&rdev->sched_scan_mtx);
 271                         cfg80211_stop_p2p_device(rdev, wdev);
 272                         mutex_unlock(&rdev->sched_scan_mtx);
 273                         mutex_unlock(&rdev->devlist_mtx);
 274                         break;
 275                 default:
 276                         break;
 277                 }
 278         }
 279
 280         rtnl_unlock();
 281
 282         return 0;
 283 }
 284
 285 static void cfg80211_rfkill_sync_work(struct work_struct *work)
 286 {
 287         struct cfg80211_registered_device *rdev;
 288
 289         rdev = container_of(work, struct cfg80211_registered_device, rfkill_sync);
 290         cfg80211_rfkill_set_block(rdev, rfkill_blocked(rdev->rfkill));
 291 }
 292
 293 static void cfg80211_event_work(struct work_struct *work)
 294 {
 295         struct cfg80211_registered_device *rdev;
 296
 297         rdev = container_of(work, struct cfg80211_registered_device,
 298                             event_work);
 299
 300         rtnl_lock();
 301         cfg80211_lock_rdev(rdev);
 302
 303         cfg80211_process_rdev_events(rdev);
 304         cfg80211_unlock_rdev(rdev);
 305         rtnl_unlock();
 306 }
 307
 308 /* exported functions */
 309
 310 struct wiphy *wiphy_new(const struct cfg80211_ops *ops, int sizeof_priv)
 311 {
 312         static int wiphy_counter;
 313
 314         struct cfg80211_registered_device *rdev;
 315         int alloc_size;
 316
 317         WARN_ON(ops->add_key && (!ops->del_key || !ops->set_default_key));
 318         WARN_ON(ops->auth && (!ops->assoc || !ops->deauth || !ops->disassoc));
 319         WARN_ON(ops->connect && !ops->disconnect);
 320         WARN_ON(ops->join_ibss && !ops->leave_ibss);
 321         WARN_ON(ops->add_virtual_intf && !ops->del_virtual_intf);
 322         WARN_ON(ops->add_station && !ops->del_station);
 323         WARN_ON(ops->add_mpath && !ops->del_mpath);
 324         WARN_ON(ops->join_mesh && !ops->leave_mesh);
 325
 326         alloc_size = sizeof(*rdev) + sizeof_priv;
 327
 328         rdev = kzalloc(alloc_size, GFP_KERNEL);
 329         if (!rdev)
 330                 return NULL;
 331
 332         rdev->ops = ops;
 333
 334         mutex_lock(&cfg80211_mutex);
 335
 336         rdev->wiphy_idx = wiphy_counter++;
 337
 338         if (unlikely(rdev->wiphy_idx < 0)) {
 339                 wiphy_counter--;
 340                 mutex_unlock(&cfg80211_mutex);
 341                 /* ugh, wrapped! */
 342                 kfree(rdev);
 343                 return NULL;
 344         }
 345
 346         mutex_unlock(&cfg80211_mutex);
 347
 348         /* give it a proper name */
 349         dev_set_name(&rdev->wiphy.dev, PHY_NAME "%d", rdev->wiphy_idx);
 350
 351         mutex_init(&rdev->mtx);
 352         mutex_init(&rdev->devlist_mtx);
 353         mutex_init(&rdev->sched_scan_mtx);
 354         INIT_LIST_HEAD(&rdev->wdev_list);
 355         INIT_LIST_HEAD(&rdev->beacon_registrations);
 356         spin_lock_init(&rdev->beacon_registrations_lock);
 357         spin_lock_init(&rdev->bss_lock);
 358         INIT_LIST_HEAD(&rdev->bss_list);
 359         INIT_WORK(&rdev->scan_done_wk, __cfg80211_scan_done);
 360         INIT_WORK(&rdev->sched_scan_results_wk, __cfg80211_sched_scan_results);
 361         INIT_DELAYED_WORK(&rdev->dfs_update_channels_wk,
 362                           cfg80211_dfs_channels_update_work);
 363 #ifdef CONFIG_CFG80211_WEXT
 364         rdev->wiphy.wext = &cfg80211_wext_handler;
 365 #endif
 366
 367         device_initialize(&rdev->wiphy.dev);
 368         rdev->wiphy.dev.class = &ieee80211_class;
 369         rdev->wiphy.dev.platform_data = rdev;
 370
 371 #ifdef CONFIG_CFG80211_DEFAULT_PS
 372         rdev->wiphy.flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
 373 #endif
 374
 375         wiphy_net_set(&rdev->wiphy, &init_net);
 376
 377         rdev->rfkill_ops.set_block = cfg80211_rfkill_set_block;
 378         rdev->rfkill = rfkill_alloc(dev_name(&rdev->wiphy.dev),
 379                                    &rdev->wiphy.dev, RFKILL_TYPE_WLAN,
 380                                    &rdev->rfkill_ops, rdev);
 381
 382         if (!rdev->rfkill) {
 383                 kfree(rdev);
 384                 return NULL;
 385         }
 386
 387         INIT_WORK(&rdev->rfkill_sync, cfg80211_rfkill_sync_work);
 388         INIT_WORK(&rdev->conn_work, cfg80211_conn_work);
 389         INIT_WORK(&rdev->event_work, cfg80211_event_work);
 390
 391         init_waitqueue_head(&rdev->dev_wait);
 392
 393         /*
 394          * Initialize wiphy parameters to IEEE 802.11 MIB default values.
 395          * Fragmentation and RTS threshold are disabled by default with the
 396          * special -1 value.
 397          */
 398         rdev->wiphy.retry_short = 7;
 399         rdev->wiphy.retry_long = 4;
 400         rdev->wiphy.frag_threshold = (u32) -1;
 401         rdev->wiphy.rts_threshold = (u32) -1;
 402         rdev->wiphy.coverage_class = 0;
 403
 404         rdev->wiphy.features = NL80211_FEATURE_SCAN_FLUSH;
 405
 406         return &rdev->wiphy;
 407 }
 408 EXPORT_SYMBOL(wiphy_new);
 409
 410 static int wiphy_verify_combinations(struct wiphy *wiphy)
 411 {
 412         const struct ieee80211_iface_combination *c;
 413         int i, j;
 414
 415         for (i = 0; i < wiphy->n_iface_combinations; i++) {
 416                 u32 cnt = 0;
 417                 u16 all_iftypes = 0;
 418
 419                 c = &wiphy->iface_combinations[i];
 420
 421                 /*
 422                  * Combinations with just one interface aren't real,
 423                  * however we make an exception for DFS.
 424                  */
 425                 if (WARN_ON((c->max_interfaces < 2) && !c->radar_detect_widths))
 426                         return -EINVAL;
 427
 428                 /* Need at least one channel */
 429                 if (WARN_ON(!c->num_different_channels))
 430                         return -EINVAL;
 431
 432                 /*
 433                  * Put a sane limit on maximum number of different
 434                  * channels to simplify channel accounting code.
 435                  */
 436                 if (WARN_ON(c->num_different_channels >
 437                                 CFG80211_MAX_NUM_DIFFERENT_CHANNELS))
 438                         return -EINVAL;
 439
 440                 /* DFS only works on one channel. */
 441                 if (WARN_ON(c->radar_detect_widths &&
 442                             (c->num_different_channels > 1)))
 443                         return -EINVAL;
 444
 445                 if (WARN_ON(!c->n_limits))
 446                         return -EINVAL;
 447
 448                 for (j = 0; j < c->n_limits; j++) {
 449                         u16 types = c->limits[j].types;
 450
 451                         /*
 452                          * interface types shouldn't overlap, this is
 453                          * used in cfg80211_can_change_interface()
 454                          */
 455                         if (WARN_ON(types & all_iftypes))
 456                                 return -EINVAL;
 457                         all_iftypes |= types;
 458
 459                         if (WARN_ON(!c->limits[j].max))
 460                                 return -EINVAL;
 461
 462                         /* Shouldn't list software iftypes in combinations! */
 463                         if (WARN_ON(wiphy->software_iftypes & types))
 464                                 return -EINVAL;
 465
 466                         /* Only a single P2P_DEVICE can be allowed */
 467                         if (WARN_ON(types & BIT(NL80211_IFTYPE_P2P_DEVICE) &&
 468                                     c->limits[j].max > 1))
 469                                 return -EINVAL;
 470
 471                         cnt += c->limits[j].max;
 472                         /*
 473                          * Don't advertise an unsupported type
 474                          * in a combination.
 475                          */
 476                         if (WARN_ON((wiphy->interface_modes & types) != types))
 477                                 return -EINVAL;
 478                 }
 479
 480                 /* You can't even choose that many! */
 481                 if (WARN_ON(cnt < c->max_interfaces))
 482                         return -EINVAL;
 483         }
 484
 485         return 0;
 486 }
 487
 488 int wiphy_register(struct wiphy *wiphy)
 489 {
 490         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
 491         int res;
 492         enum ieee80211_band band;
 493         struct ieee80211_supported_band *sband;
 494         bool have_band = false;
 495         int i;
 496         u16 ifmodes = wiphy->interface_modes;
 497
 498 #ifdef CONFIG_PM
 499         if (WARN_ON((wiphy->wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
 500                     !(wiphy->wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY)))
 501                 return -EINVAL;
 502 #endif
 503
 504         if (WARN_ON(wiphy->ap_sme_capa &&
 505                     !(wiphy->flags & WIPHY_FLAG_HAVE_AP_SME)))
 506                 return -EINVAL;
 507
 508         if (WARN_ON(wiphy->addresses && !wiphy->n_addresses))
 509                 return -EINVAL;
 510
 511         if (WARN_ON(wiphy->addresses &&
 512                     !is_zero_ether_addr(wiphy->perm_addr) &&
 513                     memcmp(wiphy->perm_addr, wiphy->addresses[0].addr,
 514                            ETH_ALEN)))
 515                 return -EINVAL;
 516
 517         if (WARN_ON(wiphy->max_acl_mac_addrs &&
 518                     (!(wiphy->flags & WIPHY_FLAG_HAVE_AP_SME) ||
 519                      !rdev->ops->set_mac_acl)))
 520                 return -EINVAL;
 521
 522         if (wiphy->addresses)
 523                 memcpy(wiphy->perm_addr, wiphy->addresses[0].addr, ETH_ALEN);
 524
 525         /* sanity check ifmodes */
 526         WARN_ON(!ifmodes);
 527         ifmodes &= ((1 << NUM_NL80211_IFTYPES) - 1) & ~1;
 528         if (WARN_ON(ifmodes != wiphy->interface_modes))
 529                 wiphy->interface_modes = ifmodes;
 530
 531         res = wiphy_verify_combinations(wiphy);
 532         if (res)
 533                 return res;
 534
 535         /* sanity check supported bands/channels */
 536         for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
 537                 sband = wiphy->bands[band];
 538                 if (!sband)
 539                         continue;
 540
 541                 sband->band = band;
 542                 if (WARN_ON(!sband->n_channels))
 543                         return -EINVAL;
 544                 /*
 545                  * on 60gHz band, there are no legacy rates, so
 546                  * n_bitrates is 0
 547                  */
 548                 if (WARN_ON(band != IEEE80211_BAND_60GHZ &&
 549                             !sband->n_bitrates))
 550                         return -EINVAL;
 551
 552                 /*
 553                  * Since cfg80211_disable_40mhz_24ghz is global, we can
 554                  * modify the sband's ht data even if the driver uses a
 555                  * global structure for that.
 556                  */
 557                 if (cfg80211_disable_40mhz_24ghz &&
 558                     band == IEEE80211_BAND_2GHZ &&
 559                     sband->ht_cap.ht_supported) {
 560                         sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
 561                         sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SGI_40;
 562                 }
 563
 564                 /*
 565                  * Since we use a u32 for rate bitmaps in
 566                  * ieee80211_get_response_rate, we cannot
 567                  * have more than 32 legacy rates.
 568                  */
 569                 if (WARN_ON(sband->n_bitrates > 32))
 570                         return -EINVAL;
 571
 572                 for (i = 0; i < sband->n_channels; i++) {
 573                         sband->channels[i].orig_flags =
 574                                 sband->channels[i].flags;
 575                         sband->channels[i].orig_mag = INT_MAX;
 576                         sband->channels[i].orig_mpwr =
 577                                 sband->channels[i].max_power;
 578                         sband->channels[i].band = band;
 579                 }
 580
 581                 have_band = true;
 582         }
 583
 584         if (!have_band) {
 585                 WARN_ON(1);
 586                 return -EINVAL;
 587         }
 588
 589 #ifdef CONFIG_PM
 590         if (rdev->wiphy.wowlan.n_patterns) {
 591                 if (WARN_ON(!rdev->wiphy.wowlan.pattern_min_len ||
 592                             rdev->wiphy.wowlan.pattern_min_len >
 593                             rdev->wiphy.wowlan.pattern_max_len))
 594                         return -EINVAL;
 595         }
 596 #endif
 597
 598         /* check and set up bitrates */
 599         ieee80211_set_bitrate_flags(wiphy);
 600
 601         mutex_lock(&cfg80211_mutex);
 602
 603         res = device_add(&rdev->wiphy.dev);
 604         if (res) {
 605                 mutex_unlock(&cfg80211_mutex);
 606                 return res;
 607         }
 608
 609         /* set up regulatory info */
 610         wiphy_regulatory_register(wiphy);
 611
 612         list_add_rcu(&rdev->list, &cfg80211_rdev_list);
 613         cfg80211_rdev_list_generation++;
 614
 615         /* add to debugfs */
 616         rdev->wiphy.debugfsdir =
 617                 debugfs_create_dir(wiphy_name(&rdev->wiphy),
 618                                    ieee80211_debugfs_dir);
 619         if (IS_ERR(rdev->wiphy.debugfsdir))
 620                 rdev->wiphy.debugfsdir = NULL;
 621
 622         if (wiphy->flags & WIPHY_FLAG_CUSTOM_REGULATORY) {
 623                 struct regulatory_request request;
 624
 625                 request.wiphy_idx = get_wiphy_idx(wiphy);
 626                 request.initiator = NL80211_REGDOM_SET_BY_DRIVER;
 627                 request.alpha2[0] = '9';
 628                 request.alpha2[1] = '9';
 629
 630                 nl80211_send_reg_change_event(&request);
 631         }
 632
 633         cfg80211_debugfs_rdev_add(rdev);
 634         mutex_unlock(&cfg80211_mutex);
 635
 636         /*
 637          * due to a locking dependency this has to be outside of the
 638          * cfg80211_mutex lock
 639          */
 640         res = rfkill_register(rdev->rfkill);
 641         if (res) {
 642                 device_del(&rdev->wiphy.dev);
 643
 644                 mutex_lock(&cfg80211_mutex);
 645                 debugfs_remove_recursive(rdev->wiphy.debugfsdir);
 646                 list_del_rcu(&rdev->list);
 647                 wiphy_regulatory_deregister(wiphy);
 648                 mutex_unlock(&cfg80211_mutex);
 649                 return res;
 650         }
 651
 652         rtnl_lock();
 653         rdev->wiphy.registered = true;
 654         rtnl_unlock();
 655         return 0;
 656 }
 657 EXPORT_SYMBOL(wiphy_register);
 658
 659 void wiphy_rfkill_start_polling(struct wiphy *wiphy)
 660 {
 661         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
 662
 663         if (!rdev->ops->rfkill_poll)
 664                 return;
 665         rdev->rfkill_ops.poll = cfg80211_rfkill_poll;
 666         rfkill_resume_polling(rdev->rfkill);
 667 }
 668 EXPORT_SYMBOL(wiphy_rfkill_start_polling);
 669
 670 void wiphy_rfkill_stop_polling(struct wiphy *wiphy)
 671 {
 672         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
 673
 674         rfkill_pause_polling(rdev->rfkill);
 675 }
 676 EXPORT_SYMBOL(wiphy_rfkill_stop_polling);
 677
 678 void wiphy_unregister(struct wiphy *wiphy)
 679 {
 680         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
 681
 682         rtnl_lock();
 683         rdev->wiphy.registered = false;
 684         rtnl_unlock();
 685
 686         rfkill_unregister(rdev->rfkill);
 687
 688         /* protect the device list */
 689         mutex_lock(&cfg80211_mutex);
 690
 691         wait_event(rdev->dev_wait, ({
 692                 int __count;
 693                 mutex_lock(&rdev->devlist_mtx);
 694                 __count = rdev->opencount;
 695                 mutex_unlock(&rdev->devlist_mtx);
 696                 __count == 0; }));
 697
 698         mutex_lock(&rdev->devlist_mtx);
 699         BUG_ON(!list_empty(&rdev->wdev_list));
 700         mutex_unlock(&rdev->devlist_mtx);
 701
 702         /*
 703          * First remove the hardware from everywhere, this makes
 704          * it impossible to find from userspace.
 705          */
 706         debugfs_remove_recursive(rdev->wiphy.debugfsdir);
 707         list_del_rcu(&rdev->list);
 708         synchronize_rcu();
 709
 710         /*
 711          * Try to grab rdev->mtx. If a command is still in progress,
 712          * hopefully the driver will refuse it since it's tearing
 713          * down the device already. We wait for this command to complete
 714          * before unlinking the item from the list.
 715          * Note: as codified by the BUG_ON above we cannot get here if
 716          * a virtual interface is still present. Hence, we can only get
 717          * to lock contention here if userspace issues a command that
 718          * identified the hardware by wiphy index.
 719          */
 720         cfg80211_lock_rdev(rdev);
 721         /* nothing */
 722         cfg80211_unlock_rdev(rdev);
 723
 724         /*
 725          * If this device got a regulatory hint tell core its
 726          * free to listen now to a new shiny device regulatory hint
 727          */
 728         wiphy_regulatory_deregister(wiphy);
 729
 730         cfg80211_rdev_list_generation++;
 731         device_del(&rdev->wiphy.dev);
 732
 733         mutex_unlock(&cfg80211_mutex);
 734
 735         flush_work(&rdev->scan_done_wk);
 736         cancel_work_sync(&rdev->conn_work);
 737         flush_work(&rdev->event_work);
 738         cancel_delayed_work_sync(&rdev->dfs_update_channels_wk);
 739
 740         if (rdev->wowlan && rdev->ops->set_wakeup)
 741                 rdev_set_wakeup(rdev, false);
 742         cfg80211_rdev_free_wowlan(rdev);
 743 }
 744 EXPORT_SYMBOL(wiphy_unregister);
 745
 746 void cfg80211_dev_free(struct cfg80211_registered_device *rdev)
 747 {
 748         struct cfg80211_internal_bss *scan, *tmp;
 749         struct cfg80211_beacon_registration *reg, *treg;
 750         rfkill_destroy(rdev->rfkill);
 751         mutex_destroy(&rdev->mtx);
 752         mutex_destroy(&rdev->devlist_mtx);
 753         mutex_destroy(&rdev->sched_scan_mtx);
 754         list_for_each_entry_safe(reg, treg, &rdev->beacon_registrations, list) {
 755                 list_del(&reg->list);
 756                 kfree(reg);
 757         }
 758         list_for_each_entry_safe(scan, tmp, &rdev->bss_list, list)
 759                 cfg80211_put_bss(&rdev->wiphy, &scan->pub);
 760         kfree(rdev);
 761 }
 762
 763 void wiphy_free(struct wiphy *wiphy)
 764 {
 765         put_device(&wiphy->dev);
 766 }
 767 EXPORT_SYMBOL(wiphy_free);
 768
 769 void wiphy_rfkill_set_hw_state(struct wiphy *wiphy, bool blocked)
 770 {
 771         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
 772
 773         if (rfkill_set_hw_state(rdev->rfkill, blocked))
 774                 schedule_work(&rdev->rfkill_sync);
 775 }
 776 EXPORT_SYMBOL(wiphy_rfkill_set_hw_state);
 777
 778 static void wdev_cleanup_work(struct work_struct *work)
 779 {
 780         struct wireless_dev *wdev;
 781         struct cfg80211_registered_device *rdev;
 782
 783         wdev = container_of(work, struct wireless_dev, cleanup_work);
 784         rdev = wiphy_to_dev(wdev->wiphy);
 785
 786         mutex_lock(&rdev->sched_scan_mtx);
 787
 788         if (WARN_ON(rdev->scan_req && rdev->scan_req->wdev == wdev)) {
 789                 rdev->scan_req->aborted = true;
 790                 ___cfg80211_scan_done(rdev, true);
 791         }
 792
 793         if (WARN_ON(rdev->sched_scan_req &&
 794                     rdev->sched_scan_req->dev == wdev->netdev)) {
 795                 __cfg80211_stop_sched_scan(rdev, false);
 796         }
 797
 798         mutex_unlock(&rdev->sched_scan_mtx);
 799
 800         mutex_lock(&rdev->devlist_mtx);
 801         rdev->opencount--;
 802         mutex_unlock(&rdev->devlist_mtx);
 803         wake_up(&rdev->dev_wait);
 804
 805         dev_put(wdev->netdev);
 806 }
 807
 808 void cfg80211_unregister_wdev(struct wireless_dev *wdev)
 809 {
 810         struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
 811
 812         ASSERT_RTNL();
 813
 814         if (WARN_ON(wdev->netdev))
 815                 return;
 816
 817         mutex_lock(&rdev->devlist_mtx);
 818         mutex_lock(&rdev->sched_scan_mtx);
 819         list_del_rcu(&wdev->list);
 820         rdev->devlist_generation++;
 821
 822         switch (wdev->iftype) {
 823         case NL80211_IFTYPE_P2P_DEVICE:
 824                 cfg80211_stop_p2p_device(rdev, wdev);
 825                 break;
 826         default:
 827                 WARN_ON_ONCE(1);
 828                 break;
 829         }
 830         mutex_unlock(&rdev->sched_scan_mtx);
 831         mutex_unlock(&rdev->devlist_mtx);
 832 }
 833 EXPORT_SYMBOL(cfg80211_unregister_wdev);
 834
 835 static struct device_type wiphy_type = {
 836         .name   = "wlan",
 837 };
 838
 839 void cfg80211_update_iface_num(struct cfg80211_registered_device *rdev,
 840                                enum nl80211_iftype iftype, int num)
 841 {
 842         ASSERT_RTNL();
 843
 844         rdev->num_running_ifaces += num;
 845         if (iftype == NL80211_IFTYPE_MONITOR)
 846                 rdev->num_running_monitor_ifaces += num;
 847 }
 848
 849 void cfg80211_leave(struct cfg80211_registered_device *rdev,
 850                    struct wireless_dev *wdev)
 851 {
 852         struct net_device *dev = wdev->netdev;
 853
 854         switch (wdev->iftype) {
 855         case NL80211_IFTYPE_ADHOC:
 856                 cfg80211_leave_ibss(rdev, dev, true);
 857                 break;
 858         case NL80211_IFTYPE_P2P_CLIENT:
 859         case NL80211_IFTYPE_STATION:
 860                 mutex_lock(&rdev->sched_scan_mtx);
 861                 __cfg80211_stop_sched_scan(rdev, false);
 862                 mutex_unlock(&rdev->sched_scan_mtx);
 863
 864                 wdev_lock(wdev);
 865 #ifdef CONFIG_CFG80211_WEXT
 866                 kfree(wdev->wext.ie);
 867                 wdev->wext.ie = NULL;
 868                 wdev->wext.ie_len = 0;
 869                 wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
 870 #endif
 871                 __cfg80211_disconnect(rdev, dev,
 872                                       WLAN_REASON_DEAUTH_LEAVING, true);
 873                 wdev_unlock(wdev);
 874                 break;
 875         case NL80211_IFTYPE_MESH_POINT:
 876                 cfg80211_leave_mesh(rdev, dev);
 877                 break;
 878         case NL80211_IFTYPE_AP:
 879         case NL80211_IFTYPE_P2P_GO:
 880                 cfg80211_stop_ap(rdev, dev);
 881                 break;
 882         default:
 883                 break;
 884         }
 885
 886         wdev->beacon_interval = 0;
 887 }
 888
 889 static int cfg80211_netdev_notifier_call(struct notifier_block *nb,
 890                                          unsigned long state,
 891                                          void *ndev)
 892 {
 893         struct net_device *dev = ndev;
 894         struct wireless_dev *wdev = dev->ieee80211_ptr;
 895         struct cfg80211_registered_device *rdev;
 896         int ret;
 897
 898         if (!wdev)
 899                 return NOTIFY_DONE;
 900
 901         rdev = wiphy_to_dev(wdev->wiphy);
 902
 903         WARN_ON(wdev->iftype == NL80211_IFTYPE_UNSPECIFIED);
 904
 905         switch (state) {
 906         case NETDEV_POST_INIT:
 907                 SET_NETDEV_DEVTYPE(dev, &wiphy_type);
 908                 break;
 909         case NETDEV_REGISTER:
 910                 /*
 911                  * NB: cannot take rdev->mtx here because this may be
 912                  * called within code protected by it when interfaces
 913                  * are added with nl80211.
 914                  */
 915                 mutex_init(&wdev->mtx);
 916                 INIT_WORK(&wdev->cleanup_work, wdev_cleanup_work);
 917                 INIT_LIST_HEAD(&wdev->event_list);
 918                 spin_lock_init(&wdev->event_lock);
 919                 INIT_LIST_HEAD(&wdev->mgmt_registrations);
 920                 spin_lock_init(&wdev->mgmt_registrations_lock);
 921
 922                 mutex_lock(&rdev->devlist_mtx);
 923                 wdev->identifier = ++rdev->wdev_id;
 924                 list_add_rcu(&wdev->list, &rdev->wdev_list);
 925                 rdev->devlist_generation++;
 926                 /* can only change netns with wiphy */
 927                 dev->features |= NETIF_F_NETNS_LOCAL;
 928
 929                 if (sysfs_create_link(&dev->dev.kobj, &rdev->wiphy.dev.kobj,
 930                                       "phy80211")) {
 931                         pr_err("failed to add phy80211 symlink to netdev!\n");
 932                 }
 933                 wdev->netdev = dev;
 934                 wdev->sme_state = CFG80211_SME_IDLE;
 935                 mutex_unlock(&rdev->devlist_mtx);
 936 #ifdef CONFIG_CFG80211_WEXT
 937                 wdev->wext.default_key = -1;
 938                 wdev->wext.default_mgmt_key = -1;
 939                 wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
 940 #endif
 941
 942                 if (wdev->wiphy->flags & WIPHY_FLAG_PS_ON_BY_DEFAULT)
 943                         wdev->ps = true;
 944                 else
 945                         wdev->ps = false;
 946                 /* allow mac80211 to determine the timeout */
 947                 wdev->ps_timeout = -1;
 948
 949                 netdev_set_default_ethtool_ops(dev, &cfg80211_ethtool_ops);
 950
 951                 if ((wdev->iftype == NL80211_IFTYPE_STATION ||
 952                      wdev->iftype == NL80211_IFTYPE_P2P_CLIENT ||
 953                      wdev->iftype == NL80211_IFTYPE_ADHOC) && !wdev->use_4addr)
 954                         dev->priv_flags |= IFF_DONT_BRIDGE;
 955                 break;
 956         case NETDEV_GOING_DOWN:
 957                 cfg80211_leave(rdev, wdev);
 958                 break;
 959         case NETDEV_DOWN:
 960                 cfg80211_update_iface_num(rdev, wdev->iftype, -1);
 961                 dev_hold(dev);
 962                 queue_work(cfg80211_wq, &wdev->cleanup_work);
 963                 break;
 964         case NETDEV_UP:
 965                 /*
 966                  * If we have a really quick DOWN/UP succession we may
 967                  * have this work still pending ... cancel it and see
 968                  * if it was pending, in which case we need to account
 969                  * for some of the work it would have done.
 970                  */
 971                 if (cancel_work_sync(&wdev->cleanup_work)) {
 972                         mutex_lock(&rdev->devlist_mtx);
 973                         rdev->opencount--;
 974                         mutex_unlock(&rdev->devlist_mtx);
 975                         dev_put(dev);
 976                 }
 977                 cfg80211_update_iface_num(rdev, wdev->iftype, 1);
 978                 cfg80211_lock_rdev(rdev);
 979                 mutex_lock(&rdev->devlist_mtx);
 980                 mutex_lock(&rdev->sched_scan_mtx);
 981                 wdev_lock(wdev);
 982                 switch (wdev->iftype) {
 983 #ifdef CONFIG_CFG80211_WEXT
 984                 case NL80211_IFTYPE_ADHOC:
 985                         cfg80211_ibss_wext_join(rdev, wdev);
 986                         break;
 987                 case NL80211_IFTYPE_STATION:
 988                         cfg80211_mgd_wext_connect(rdev, wdev);
 989                         break;
 990 #endif
 991 #ifdef CONFIG_MAC80211_MESH
 992                 case NL80211_IFTYPE_MESH_POINT:
 993                         {
 994                                 /* backward compat code... */
 995                                 struct mesh_setup setup;
 996                                 memcpy(&setup, &default_mesh_setup,
 997                                                 sizeof(setup));
 998                                  /* back compat only needed for mesh_id */
 999                                 setup.mesh_id = wdev->ssid;
1000                                 setup.mesh_id_len = wdev->mesh_id_up_len;
1001                                 if (wdev->mesh_id_up_len)
1002                                         __cfg80211_join_mesh(rdev, dev,
1003                                                         &setup,
1004                                                         &default_mesh_config);
1005                                 break;
1006                         }
1007 #endif
1008                 default:
1009                         break;
1010                 }
1011                 wdev_unlock(wdev);
1012                 mutex_unlock(&rdev->sched_scan_mtx);
1013                 rdev->opencount++;
1014                 mutex_unlock(&rdev->devlist_mtx);
1015                 cfg80211_unlock_rdev(rdev);
1016
1017                 /*
1018                  * Configure power management to the driver here so that its
1019                  * correctly set also after interface type changes etc.
1020                  */
1021                 if ((wdev->iftype == NL80211_IFTYPE_STATION ||
1022                      wdev->iftype == NL80211_IFTYPE_P2P_CLIENT) &&
1023                     rdev->ops->set_power_mgmt)
1024                         if (rdev_set_power_mgmt(rdev, dev, wdev->ps,
1025                                                 wdev->ps_timeout)) {
1026                                 /* assume this means it's off */
1027                                 wdev->ps = false;
1028                         }
1029                 break;
1030         case NETDEV_UNREGISTER:
1031                 /*
1032                  * NB: cannot take rdev->mtx here because this may be
1033                  * called within code protected by it when interfaces
1034                  * are removed with nl80211.
1035                  */
1036                 mutex_lock(&rdev->devlist_mtx);
1037                 /*
1038                  * It is possible to get NETDEV_UNREGISTER
1039                  * multiple times. To detect that, check
1040                  * that the interface is still on the list
1041                  * of registered interfaces, and only then
1042                  * remove and clean it up.
1043                  */
1044                 if (!list_empty(&wdev->list)) {
1045                         sysfs_remove_link(&dev->dev.kobj, "phy80211");
1046                         list_del_rcu(&wdev->list);
1047                         rdev->devlist_generation++;
1048                         cfg80211_mlme_purge_registrations(wdev);
1049 #ifdef CONFIG_CFG80211_WEXT
1050                         kfree(wdev->wext.keys);
1051 #endif
1052                 }
1053                 mutex_unlock(&rdev->devlist_mtx);
1054                 /*
1055                  * synchronise (so that we won't find this netdev
1056                  * from other code any more) and then clear the list
1057                  * head so that the above code can safely check for
1058                  * !list_empty() to avoid double-cleanup.
1059                  */
1060                 synchronize_rcu();
1061                 INIT_LIST_HEAD(&wdev->list);
1062                 /*
1063                  * Ensure that all events have been processed and
1064                  * freed.
1065                  */
1066                 cfg80211_process_wdev_events(wdev);
1067                 break;
1068         case NETDEV_PRE_UP:
1069                 if (!(wdev->wiphy->interface_modes & BIT(wdev->iftype)))
1070                         return notifier_from_errno(-EOPNOTSUPP);
1071                 if (rfkill_blocked(rdev->rfkill))
1072                         return notifier_from_errno(-ERFKILL);
1073                 mutex_lock(&rdev->devlist_mtx);
1074                 ret = cfg80211_can_add_interface(rdev, wdev->iftype);
1075                 mutex_unlock(&rdev->devlist_mtx);
1076                 if (ret)
1077                         return notifier_from_errno(ret);
1078                 break;
1079         }
1080
1081         return NOTIFY_DONE;
1082 }
1083
1084 static struct notifier_block cfg80211_netdev_notifier = {
1085         .notifier_call = cfg80211_netdev_notifier_call,
1086 };
1087
1088 static void __net_exit cfg80211_pernet_exit(struct net *net)
1089 {
1090         struct cfg80211_registered_device *rdev;
1091
1092         rtnl_lock();
1093         mutex_lock(&cfg80211_mutex);
1094         list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1095                 if (net_eq(wiphy_net(&rdev->wiphy), net))
1096                         WARN_ON(cfg80211_switch_netns(rdev, &init_net));
1097         }
1098         mutex_unlock(&cfg80211_mutex);
1099         rtnl_unlock();
1100 }
1101
1102 static struct pernet_operations cfg80211_pernet_ops = {
1103         .exit = cfg80211_pernet_exit,
1104 };
1105
1106 static int __init cfg80211_init(void)
1107 {
1108         int err;
1109
1110         err = register_pernet_device(&cfg80211_pernet_ops);
1111         if (err)
1112                 goto out_fail_pernet;
1113
1114         err = wiphy_sysfs_init();
1115         if (err)
1116                 goto out_fail_sysfs;
1117
1118         err = register_netdevice_notifier(&cfg80211_netdev_notifier);
1119         if (err)
1120                 goto out_fail_notifier;
1121
1122         err = nl80211_init();
1123         if (err)
1124                 goto out_fail_nl80211;
1125
1126         ieee80211_debugfs_dir = debugfs_create_dir("ieee80211", NULL);
1127
1128         err = regulatory_init();
1129         if (err)
1130                 goto out_fail_reg;
1131
1132         cfg80211_wq = create_singlethread_workqueue("cfg80211");
1133         if (!cfg80211_wq) {
1134                 err = -ENOMEM;
1135                 goto out_fail_wq;
1136         }
1137
1138         return 0;
1139
1140 out_fail_wq:
1141         regulatory_exit();
1142 out_fail_reg:
1143         debugfs_remove(ieee80211_debugfs_dir);
1144 out_fail_nl80211:
1145         unregister_netdevice_notifier(&cfg80211_netdev_notifier);
1146 out_fail_notifier:
1147         wiphy_sysfs_exit();
1148 out_fail_sysfs:
1149         unregister_pernet_device(&cfg80211_pernet_ops);
1150 out_fail_pernet:
1151         return err;
1152 }
1153 subsys_initcall(cfg80211_init);
1154
1155 static void __exit cfg80211_exit(void)
1156 {
1157         debugfs_remove(ieee80211_debugfs_dir);
1158         nl80211_exit();
1159         unregister_netdevice_notifier(&cfg80211_netdev_notifier);
1160         wiphy_sysfs_exit();
1161         regulatory_exit();
1162         unregister_pernet_device(&cfg80211_pernet_ops);
1163         destroy_workqueue(cfg80211_wq);
1164 }
1165 module_exit(cfg80211_exit);