fat: fix oops on corrupted vfat fs
[deliverable/linux.git] / net / mac80211 / iface.c
1 /*
2 * Interface handling
3 *
4 * Copyright 2002-2005, Instant802 Networks, Inc.
5 * Copyright 2005-2006, Devicescape Software, Inc.
6 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
7 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
8 * Copyright 2013-2014 Intel Mobile Communications GmbH
9 *
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License version 2 as
12 * published by the Free Software Foundation.
13 */
14 #include <linux/slab.h>
15 #include <linux/kernel.h>
16 #include <linux/if_arp.h>
17 #include <linux/netdevice.h>
18 #include <linux/rtnetlink.h>
19 #include <net/mac80211.h>
20 #include <net/ieee80211_radiotap.h>
21 #include "ieee80211_i.h"
22 #include "sta_info.h"
23 #include "debugfs_netdev.h"
24 #include "mesh.h"
25 #include "led.h"
26 #include "driver-ops.h"
27 #include "wme.h"
28 #include "rate.h"
29
30 /**
31 * DOC: Interface list locking
32 *
33 * The interface list in each struct ieee80211_local is protected
34 * three-fold:
35 *
36 * (1) modifications may only be done under the RTNL
37 * (2) modifications and readers are protected against each other by
38 * the iflist_mtx.
39 * (3) modifications are done in an RCU manner so atomic readers
40 * can traverse the list in RCU-safe blocks.
41 *
42 * As a consequence, reads (traversals) of the list can be protected
43 * by either the RTNL, the iflist_mtx or RCU.
44 */
45
46 bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
47 {
48 struct ieee80211_chanctx_conf *chanctx_conf;
49 int power;
50
51 rcu_read_lock();
52 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
53 if (!chanctx_conf) {
54 rcu_read_unlock();
55 return false;
56 }
57
58 power = ieee80211_chandef_max_power(&chanctx_conf->def);
59 rcu_read_unlock();
60
61 if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
62 power = min(power, sdata->user_power_level);
63
64 if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
65 power = min(power, sdata->ap_power_level);
66
67 if (power != sdata->vif.bss_conf.txpower) {
68 sdata->vif.bss_conf.txpower = power;
69 ieee80211_hw_config(sdata->local, 0);
70 return true;
71 }
72
73 return false;
74 }
75
76 void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
77 {
78 if (__ieee80211_recalc_txpower(sdata))
79 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER);
80 }
81
82 static u32 __ieee80211_idle_off(struct ieee80211_local *local)
83 {
84 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
85 return 0;
86
87 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
88 return IEEE80211_CONF_CHANGE_IDLE;
89 }
90
91 static u32 __ieee80211_idle_on(struct ieee80211_local *local)
92 {
93 if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
94 return 0;
95
96 ieee80211_flush_queues(local, NULL);
97
98 local->hw.conf.flags |= IEEE80211_CONF_IDLE;
99 return IEEE80211_CONF_CHANGE_IDLE;
100 }
101
102 static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
103 bool force_active)
104 {
105 bool working, scanning, active;
106 unsigned int led_trig_start = 0, led_trig_stop = 0;
107
108 lockdep_assert_held(&local->mtx);
109
110 active = force_active ||
111 !list_empty(&local->chanctx_list) ||
112 local->monitors;
113
114 working = !local->ops->remain_on_channel &&
115 !list_empty(&local->roc_list);
116
117 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
118 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
119
120 if (working || scanning)
121 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
122 else
123 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
124
125 if (active)
126 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
127 else
128 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
129
130 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
131
132 if (working || scanning || active)
133 return __ieee80211_idle_off(local);
134 return __ieee80211_idle_on(local);
135 }
136
137 u32 ieee80211_idle_off(struct ieee80211_local *local)
138 {
139 return __ieee80211_recalc_idle(local, true);
140 }
141
142 void ieee80211_recalc_idle(struct ieee80211_local *local)
143 {
144 u32 change = __ieee80211_recalc_idle(local, false);
145 if (change)
146 ieee80211_hw_config(local, change);
147 }
148
149 static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
150 {
151 if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN)
152 return -EINVAL;
153
154 dev->mtu = new_mtu;
155 return 0;
156 }
157
158 static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
159 bool check_dup)
160 {
161 struct ieee80211_local *local = sdata->local;
162 struct ieee80211_sub_if_data *iter;
163 u64 new, mask, tmp;
164 u8 *m;
165 int ret = 0;
166
167 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
168 return 0;
169
170 m = addr;
171 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
172 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
173 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
174
175 m = local->hw.wiphy->addr_mask;
176 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
177 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
178 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
179
180 if (!check_dup)
181 return ret;
182
183 mutex_lock(&local->iflist_mtx);
184 list_for_each_entry(iter, &local->interfaces, list) {
185 if (iter == sdata)
186 continue;
187
188 if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
189 !(iter->u.mntr_flags & MONITOR_FLAG_ACTIVE))
190 continue;
191
192 m = iter->vif.addr;
193 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
194 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
195 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
196
197 if ((new & ~mask) != (tmp & ~mask)) {
198 ret = -EINVAL;
199 break;
200 }
201 }
202 mutex_unlock(&local->iflist_mtx);
203
204 return ret;
205 }
206
207 static int ieee80211_change_mac(struct net_device *dev, void *addr)
208 {
209 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
210 struct sockaddr *sa = addr;
211 bool check_dup = true;
212 int ret;
213
214 if (ieee80211_sdata_running(sdata))
215 return -EBUSY;
216
217 if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
218 !(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
219 check_dup = false;
220
221 ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
222 if (ret)
223 return ret;
224
225 ret = eth_mac_addr(dev, sa);
226
227 if (ret == 0)
228 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
229
230 return ret;
231 }
232
233 static inline int identical_mac_addr_allowed(int type1, int type2)
234 {
235 return type1 == NL80211_IFTYPE_MONITOR ||
236 type2 == NL80211_IFTYPE_MONITOR ||
237 type1 == NL80211_IFTYPE_P2P_DEVICE ||
238 type2 == NL80211_IFTYPE_P2P_DEVICE ||
239 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) ||
240 (type1 == NL80211_IFTYPE_WDS &&
241 (type2 == NL80211_IFTYPE_WDS ||
242 type2 == NL80211_IFTYPE_AP)) ||
243 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
244 (type1 == NL80211_IFTYPE_AP_VLAN &&
245 (type2 == NL80211_IFTYPE_AP ||
246 type2 == NL80211_IFTYPE_AP_VLAN));
247 }
248
249 static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
250 enum nl80211_iftype iftype)
251 {
252 struct ieee80211_local *local = sdata->local;
253 struct ieee80211_sub_if_data *nsdata;
254 int ret;
255
256 ASSERT_RTNL();
257
258 /* we hold the RTNL here so can safely walk the list */
259 list_for_each_entry(nsdata, &local->interfaces, list) {
260 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
261 /*
262 * Allow only a single IBSS interface to be up at any
263 * time. This is restricted because beacon distribution
264 * cannot work properly if both are in the same IBSS.
265 *
266 * To remove this restriction we'd have to disallow them
267 * from setting the same SSID on different IBSS interfaces
268 * belonging to the same hardware. Then, however, we're
269 * faced with having to adopt two different TSF timers...
270 */
271 if (iftype == NL80211_IFTYPE_ADHOC &&
272 nsdata->vif.type == NL80211_IFTYPE_ADHOC)
273 return -EBUSY;
274 /*
275 * will not add another interface while any channel
276 * switch is active.
277 */
278 if (nsdata->vif.csa_active)
279 return -EBUSY;
280
281 /*
282 * The remaining checks are only performed for interfaces
283 * with the same MAC address.
284 */
285 if (!ether_addr_equal(sdata->vif.addr,
286 nsdata->vif.addr))
287 continue;
288
289 /*
290 * check whether it may have the same address
291 */
292 if (!identical_mac_addr_allowed(iftype,
293 nsdata->vif.type))
294 return -ENOTUNIQ;
295
296 /*
297 * can only add VLANs to enabled APs
298 */
299 if (iftype == NL80211_IFTYPE_AP_VLAN &&
300 nsdata->vif.type == NL80211_IFTYPE_AP)
301 sdata->bss = &nsdata->u.ap;
302 }
303 }
304
305 mutex_lock(&local->chanctx_mtx);
306 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
307 mutex_unlock(&local->chanctx_mtx);
308 return ret;
309 }
310
311 static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata,
312 enum nl80211_iftype iftype)
313 {
314 int n_queues = sdata->local->hw.queues;
315 int i;
316
317 if (iftype != NL80211_IFTYPE_P2P_DEVICE) {
318 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
319 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
320 IEEE80211_INVAL_HW_QUEUE))
321 return -EINVAL;
322 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
323 n_queues))
324 return -EINVAL;
325 }
326 }
327
328 if ((iftype != NL80211_IFTYPE_AP &&
329 iftype != NL80211_IFTYPE_P2P_GO &&
330 iftype != NL80211_IFTYPE_MESH_POINT) ||
331 !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) {
332 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
333 return 0;
334 }
335
336 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
337 return -EINVAL;
338
339 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
340 return -EINVAL;
341
342 return 0;
343 }
344
345 void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
346 const int offset)
347 {
348 struct ieee80211_local *local = sdata->local;
349 u32 flags = sdata->u.mntr_flags;
350
351 #define ADJUST(_f, _s) do { \
352 if (flags & MONITOR_FLAG_##_f) \
353 local->fif_##_s += offset; \
354 } while (0)
355
356 ADJUST(FCSFAIL, fcsfail);
357 ADJUST(PLCPFAIL, plcpfail);
358 ADJUST(CONTROL, control);
359 ADJUST(CONTROL, pspoll);
360 ADJUST(OTHER_BSS, other_bss);
361
362 #undef ADJUST
363 }
364
365 static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
366 {
367 struct ieee80211_local *local = sdata->local;
368 int i;
369
370 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
371 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
372 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
373 else if (local->hw.queues >= IEEE80211_NUM_ACS)
374 sdata->vif.hw_queue[i] = i;
375 else
376 sdata->vif.hw_queue[i] = 0;
377 }
378 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
379 }
380
381 int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
382 {
383 struct ieee80211_sub_if_data *sdata;
384 int ret;
385
386 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
387 return 0;
388
389 ASSERT_RTNL();
390
391 if (local->monitor_sdata)
392 return 0;
393
394 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
395 if (!sdata)
396 return -ENOMEM;
397
398 /* set up data */
399 sdata->local = local;
400 sdata->vif.type = NL80211_IFTYPE_MONITOR;
401 snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
402 wiphy_name(local->hw.wiphy));
403 sdata->wdev.iftype = NL80211_IFTYPE_MONITOR;
404
405 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
406
407 ieee80211_set_default_queues(sdata);
408
409 ret = drv_add_interface(local, sdata);
410 if (WARN_ON(ret)) {
411 /* ok .. stupid driver, it asked for this! */
412 kfree(sdata);
413 return ret;
414 }
415
416 ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR);
417 if (ret) {
418 kfree(sdata);
419 return ret;
420 }
421
422 mutex_lock(&local->iflist_mtx);
423 rcu_assign_pointer(local->monitor_sdata, sdata);
424 mutex_unlock(&local->iflist_mtx);
425
426 mutex_lock(&local->mtx);
427 ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef,
428 IEEE80211_CHANCTX_EXCLUSIVE);
429 mutex_unlock(&local->mtx);
430 if (ret) {
431 mutex_lock(&local->iflist_mtx);
432 RCU_INIT_POINTER(local->monitor_sdata, NULL);
433 mutex_unlock(&local->iflist_mtx);
434 synchronize_net();
435 drv_remove_interface(local, sdata);
436 kfree(sdata);
437 return ret;
438 }
439
440 return 0;
441 }
442
443 void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
444 {
445 struct ieee80211_sub_if_data *sdata;
446
447 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
448 return;
449
450 ASSERT_RTNL();
451
452 mutex_lock(&local->iflist_mtx);
453
454 sdata = rcu_dereference_protected(local->monitor_sdata,
455 lockdep_is_held(&local->iflist_mtx));
456 if (!sdata) {
457 mutex_unlock(&local->iflist_mtx);
458 return;
459 }
460
461 RCU_INIT_POINTER(local->monitor_sdata, NULL);
462 mutex_unlock(&local->iflist_mtx);
463
464 synchronize_net();
465
466 mutex_lock(&local->mtx);
467 ieee80211_vif_release_channel(sdata);
468 mutex_unlock(&local->mtx);
469
470 drv_remove_interface(local, sdata);
471
472 kfree(sdata);
473 }
474
475 /*
476 * NOTE: Be very careful when changing this function, it must NOT return
477 * an error on interface type changes that have been pre-checked, so most
478 * checks should be in ieee80211_check_concurrent_iface.
479 */
480 int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
481 {
482 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
483 struct net_device *dev = wdev->netdev;
484 struct ieee80211_local *local = sdata->local;
485 struct sta_info *sta;
486 u32 changed = 0;
487 int res;
488 u32 hw_reconf_flags = 0;
489
490 switch (sdata->vif.type) {
491 case NL80211_IFTYPE_WDS:
492 if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
493 return -ENOLINK;
494 break;
495 case NL80211_IFTYPE_AP_VLAN: {
496 struct ieee80211_sub_if_data *master;
497
498 if (!sdata->bss)
499 return -ENOLINK;
500
501 mutex_lock(&local->mtx);
502 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
503 mutex_unlock(&local->mtx);
504
505 master = container_of(sdata->bss,
506 struct ieee80211_sub_if_data, u.ap);
507 sdata->control_port_protocol =
508 master->control_port_protocol;
509 sdata->control_port_no_encrypt =
510 master->control_port_no_encrypt;
511 sdata->vif.cab_queue = master->vif.cab_queue;
512 memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
513 sizeof(sdata->vif.hw_queue));
514 break;
515 }
516 case NL80211_IFTYPE_AP:
517 sdata->bss = &sdata->u.ap;
518 break;
519 case NL80211_IFTYPE_MESH_POINT:
520 case NL80211_IFTYPE_STATION:
521 case NL80211_IFTYPE_MONITOR:
522 case NL80211_IFTYPE_ADHOC:
523 case NL80211_IFTYPE_P2P_DEVICE:
524 /* no special treatment */
525 break;
526 case NL80211_IFTYPE_UNSPECIFIED:
527 case NUM_NL80211_IFTYPES:
528 case NL80211_IFTYPE_P2P_CLIENT:
529 case NL80211_IFTYPE_P2P_GO:
530 /* cannot happen */
531 WARN_ON(1);
532 break;
533 }
534
535 if (local->open_count == 0) {
536 res = drv_start(local);
537 if (res)
538 goto err_del_bss;
539 /* we're brought up, everything changes */
540 hw_reconf_flags = ~0;
541 ieee80211_led_radio(local, true);
542 ieee80211_mod_tpt_led_trig(local,
543 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
544 }
545
546 /*
547 * Copy the hopefully now-present MAC address to
548 * this interface, if it has the special null one.
549 */
550 if (dev && is_zero_ether_addr(dev->dev_addr)) {
551 memcpy(dev->dev_addr,
552 local->hw.wiphy->perm_addr,
553 ETH_ALEN);
554 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
555
556 if (!is_valid_ether_addr(dev->dev_addr)) {
557 res = -EADDRNOTAVAIL;
558 goto err_stop;
559 }
560 }
561
562 switch (sdata->vif.type) {
563 case NL80211_IFTYPE_AP_VLAN:
564 /* no need to tell driver, but set carrier and chanctx */
565 if (rtnl_dereference(sdata->bss->beacon)) {
566 ieee80211_vif_vlan_copy_chanctx(sdata);
567 netif_carrier_on(dev);
568 } else {
569 netif_carrier_off(dev);
570 }
571 break;
572 case NL80211_IFTYPE_MONITOR:
573 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
574 local->cooked_mntrs++;
575 break;
576 }
577
578 if (sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE) {
579 res = drv_add_interface(local, sdata);
580 if (res)
581 goto err_stop;
582 } else if (local->monitors == 0 && local->open_count == 0) {
583 res = ieee80211_add_virtual_monitor(local);
584 if (res)
585 goto err_stop;
586 }
587
588 /* must be before the call to ieee80211_configure_filter */
589 local->monitors++;
590 if (local->monitors == 1) {
591 local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
592 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
593 }
594
595 ieee80211_adjust_monitor_flags(sdata, 1);
596 ieee80211_configure_filter(local);
597 mutex_lock(&local->mtx);
598 ieee80211_recalc_idle(local);
599 mutex_unlock(&local->mtx);
600
601 netif_carrier_on(dev);
602 break;
603 default:
604 if (coming_up) {
605 ieee80211_del_virtual_monitor(local);
606
607 res = drv_add_interface(local, sdata);
608 if (res)
609 goto err_stop;
610 res = ieee80211_check_queues(sdata,
611 ieee80211_vif_type_p2p(&sdata->vif));
612 if (res)
613 goto err_del_interface;
614 }
615
616 if (sdata->vif.type == NL80211_IFTYPE_AP) {
617 local->fif_pspoll++;
618 local->fif_probe_req++;
619
620 ieee80211_configure_filter(local);
621 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
622 local->fif_probe_req++;
623 }
624
625 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
626 changed |= ieee80211_reset_erp_info(sdata);
627 ieee80211_bss_info_change_notify(sdata, changed);
628
629 switch (sdata->vif.type) {
630 case NL80211_IFTYPE_STATION:
631 case NL80211_IFTYPE_ADHOC:
632 case NL80211_IFTYPE_AP:
633 case NL80211_IFTYPE_MESH_POINT:
634 netif_carrier_off(dev);
635 break;
636 case NL80211_IFTYPE_WDS:
637 case NL80211_IFTYPE_P2P_DEVICE:
638 break;
639 default:
640 /* not reached */
641 WARN_ON(1);
642 }
643
644 /*
645 * set default queue parameters so drivers don't
646 * need to initialise the hardware if the hardware
647 * doesn't start up with sane defaults
648 */
649 ieee80211_set_wmm_default(sdata, true);
650 }
651
652 set_bit(SDATA_STATE_RUNNING, &sdata->state);
653
654 if (sdata->vif.type == NL80211_IFTYPE_WDS) {
655 /* Create STA entry for the WDS peer */
656 sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
657 GFP_KERNEL);
658 if (!sta) {
659 res = -ENOMEM;
660 goto err_del_interface;
661 }
662
663 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
664 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
665 sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
666
667 res = sta_info_insert(sta);
668 if (res) {
669 /* STA has been freed */
670 goto err_del_interface;
671 }
672
673 rate_control_rate_init(sta);
674 netif_carrier_on(dev);
675 } else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) {
676 rcu_assign_pointer(local->p2p_sdata, sdata);
677 }
678
679 /*
680 * set_multicast_list will be invoked by the networking core
681 * which will check whether any increments here were done in
682 * error and sync them down to the hardware as filter flags.
683 */
684 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
685 atomic_inc(&local->iff_allmultis);
686
687 if (sdata->flags & IEEE80211_SDATA_PROMISC)
688 atomic_inc(&local->iff_promiscs);
689
690 if (coming_up)
691 local->open_count++;
692
693 if (hw_reconf_flags)
694 ieee80211_hw_config(local, hw_reconf_flags);
695
696 ieee80211_recalc_ps(local, -1);
697
698 if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
699 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
700 /* XXX: for AP_VLAN, actually track AP queues */
701 netif_tx_start_all_queues(dev);
702 } else if (dev) {
703 unsigned long flags;
704 int n_acs = IEEE80211_NUM_ACS;
705 int ac;
706
707 if (local->hw.queues < IEEE80211_NUM_ACS)
708 n_acs = 1;
709
710 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
711 if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE ||
712 (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 &&
713 skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) {
714 for (ac = 0; ac < n_acs; ac++) {
715 int ac_queue = sdata->vif.hw_queue[ac];
716
717 if (local->queue_stop_reasons[ac_queue] == 0 &&
718 skb_queue_empty(&local->pending[ac_queue]))
719 netif_start_subqueue(dev, ac);
720 }
721 }
722 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
723 }
724
725 return 0;
726 err_del_interface:
727 drv_remove_interface(local, sdata);
728 err_stop:
729 if (!local->open_count)
730 drv_stop(local);
731 err_del_bss:
732 sdata->bss = NULL;
733 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
734 mutex_lock(&local->mtx);
735 list_del(&sdata->u.vlan.list);
736 mutex_unlock(&local->mtx);
737 }
738 /* might already be clear but that doesn't matter */
739 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
740 return res;
741 }
742
743 static int ieee80211_open(struct net_device *dev)
744 {
745 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
746 int err;
747
748 /* fail early if user set an invalid address */
749 if (!is_valid_ether_addr(dev->dev_addr))
750 return -EADDRNOTAVAIL;
751
752 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
753 if (err)
754 return err;
755
756 return ieee80211_do_open(&sdata->wdev, true);
757 }
758
759 static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata,
760 bool going_down)
761 {
762 struct ieee80211_local *local = sdata->local;
763 unsigned long flags;
764 struct sk_buff *skb, *tmp;
765 u32 hw_reconf_flags = 0;
766 int i, flushed;
767 struct ps_data *ps;
768 struct cfg80211_chan_def chandef;
769 bool cancel_scan;
770
771 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
772
773 cancel_scan = rcu_access_pointer(local->scan_sdata) == sdata;
774 if (cancel_scan)
775 ieee80211_scan_cancel(local);
776
777 /*
778 * Stop TX on this interface first.
779 */
780 if (sdata->dev)
781 netif_tx_stop_all_queues(sdata->dev);
782
783 ieee80211_roc_purge(local, sdata);
784
785 switch (sdata->vif.type) {
786 case NL80211_IFTYPE_STATION:
787 ieee80211_mgd_stop(sdata);
788 break;
789 case NL80211_IFTYPE_ADHOC:
790 ieee80211_ibss_stop(sdata);
791 break;
792 case NL80211_IFTYPE_AP:
793 cancel_work_sync(&sdata->u.ap.request_smps_work);
794 break;
795 default:
796 break;
797 }
798
799 /*
800 * Remove all stations associated with this interface.
801 *
802 * This must be done before calling ops->remove_interface()
803 * because otherwise we can later invoke ops->sta_notify()
804 * whenever the STAs are removed, and that invalidates driver
805 * assumptions about always getting a vif pointer that is valid
806 * (because if we remove a STA after ops->remove_interface()
807 * the driver will have removed the vif info already!)
808 *
809 * This is relevant only in WDS mode, in all other modes we've
810 * already removed all stations when disconnecting or similar,
811 * so warn otherwise.
812 */
813 flushed = sta_info_flush(sdata);
814 WARN_ON_ONCE((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) ||
815 (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1));
816
817 /* don't count this interface for promisc/allmulti while it is down */
818 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
819 atomic_dec(&local->iff_allmultis);
820
821 if (sdata->flags & IEEE80211_SDATA_PROMISC)
822 atomic_dec(&local->iff_promiscs);
823
824 if (sdata->vif.type == NL80211_IFTYPE_AP) {
825 local->fif_pspoll--;
826 local->fif_probe_req--;
827 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
828 local->fif_probe_req--;
829 }
830
831 if (sdata->dev) {
832 netif_addr_lock_bh(sdata->dev);
833 spin_lock_bh(&local->filter_lock);
834 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
835 sdata->dev->addr_len);
836 spin_unlock_bh(&local->filter_lock);
837 netif_addr_unlock_bh(sdata->dev);
838 }
839
840 del_timer_sync(&local->dynamic_ps_timer);
841 cancel_work_sync(&local->dynamic_ps_enable_work);
842
843 cancel_work_sync(&sdata->recalc_smps);
844 sdata_lock(sdata);
845 mutex_lock(&local->mtx);
846 sdata->vif.csa_active = false;
847 if (sdata->csa_block_tx) {
848 ieee80211_wake_vif_queues(local, sdata,
849 IEEE80211_QUEUE_STOP_REASON_CSA);
850 sdata->csa_block_tx = false;
851 }
852 mutex_unlock(&local->mtx);
853 sdata_unlock(sdata);
854
855 cancel_work_sync(&sdata->csa_finalize_work);
856
857 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
858
859 if (sdata->wdev.cac_started) {
860 chandef = sdata->vif.bss_conf.chandef;
861 WARN_ON(local->suspended);
862 mutex_lock(&local->mtx);
863 ieee80211_vif_release_channel(sdata);
864 mutex_unlock(&local->mtx);
865 cfg80211_cac_event(sdata->dev, &chandef,
866 NL80211_RADAR_CAC_ABORTED,
867 GFP_KERNEL);
868 }
869
870 /* APs need special treatment */
871 if (sdata->vif.type == NL80211_IFTYPE_AP) {
872 struct ieee80211_sub_if_data *vlan, *tmpsdata;
873
874 /* down all dependent devices, that is VLANs */
875 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
876 u.vlan.list)
877 dev_close(vlan->dev);
878 WARN_ON(!list_empty(&sdata->u.ap.vlans));
879 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
880 /* remove all packets in parent bc_buf pointing to this dev */
881 ps = &sdata->bss->ps;
882
883 spin_lock_irqsave(&ps->bc_buf.lock, flags);
884 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
885 if (skb->dev == sdata->dev) {
886 __skb_unlink(skb, &ps->bc_buf);
887 local->total_ps_buffered--;
888 ieee80211_free_txskb(&local->hw, skb);
889 }
890 }
891 spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
892 }
893
894 if (going_down)
895 local->open_count--;
896
897 switch (sdata->vif.type) {
898 case NL80211_IFTYPE_AP_VLAN:
899 mutex_lock(&local->mtx);
900 list_del(&sdata->u.vlan.list);
901 mutex_unlock(&local->mtx);
902 RCU_INIT_POINTER(sdata->vif.chanctx_conf, NULL);
903 /* see comment in the default case below */
904 ieee80211_free_keys(sdata, true);
905 /* no need to tell driver */
906 break;
907 case NL80211_IFTYPE_MONITOR:
908 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
909 local->cooked_mntrs--;
910 break;
911 }
912
913 local->monitors--;
914 if (local->monitors == 0) {
915 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
916 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
917 }
918
919 ieee80211_adjust_monitor_flags(sdata, -1);
920 break;
921 case NL80211_IFTYPE_P2P_DEVICE:
922 /* relies on synchronize_rcu() below */
923 RCU_INIT_POINTER(local->p2p_sdata, NULL);
924 /* fall through */
925 default:
926 cancel_work_sync(&sdata->work);
927 /*
928 * When we get here, the interface is marked down.
929 * Free the remaining keys, if there are any
930 * (which can happen in AP mode if userspace sets
931 * keys before the interface is operating, and maybe
932 * also in WDS mode)
933 *
934 * Force the key freeing to always synchronize_net()
935 * to wait for the RX path in case it is using this
936 * interface enqueuing frames at this very time on
937 * another CPU.
938 */
939 ieee80211_free_keys(sdata, true);
940 skb_queue_purge(&sdata->skb_queue);
941 }
942
943 sdata->bss = NULL;
944
945 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
946 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
947 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
948 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
949 if (info->control.vif == &sdata->vif) {
950 __skb_unlink(skb, &local->pending[i]);
951 ieee80211_free_txskb(&local->hw, skb);
952 }
953 }
954 }
955 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
956
957 if (local->open_count == 0)
958 ieee80211_clear_tx_pending(local);
959
960 /*
961 * If the interface goes down while suspended, presumably because
962 * the device was unplugged and that happens before our resume,
963 * then the driver is already unconfigured and the remainder of
964 * this function isn't needed.
965 * XXX: what about WoWLAN? If the device has software state, e.g.
966 * memory allocated, it might expect teardown commands from
967 * mac80211 here?
968 */
969 if (local->suspended) {
970 WARN_ON(local->wowlan);
971 WARN_ON(rtnl_dereference(local->monitor_sdata));
972 return;
973 }
974
975 switch (sdata->vif.type) {
976 case NL80211_IFTYPE_AP_VLAN:
977 break;
978 case NL80211_IFTYPE_MONITOR:
979 if (local->monitors == 0)
980 ieee80211_del_virtual_monitor(local);
981
982 mutex_lock(&local->mtx);
983 ieee80211_recalc_idle(local);
984 mutex_unlock(&local->mtx);
985
986 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
987 break;
988
989 /* fall through */
990 default:
991 if (going_down)
992 drv_remove_interface(local, sdata);
993 }
994
995 ieee80211_recalc_ps(local, -1);
996
997 if (cancel_scan)
998 flush_delayed_work(&local->scan_work);
999
1000 if (local->open_count == 0) {
1001 ieee80211_stop_device(local);
1002
1003 /* no reconfiguring after stop! */
1004 return;
1005 }
1006
1007 /* do after stop to avoid reconfiguring when we stop anyway */
1008 ieee80211_configure_filter(local);
1009 ieee80211_hw_config(local, hw_reconf_flags);
1010
1011 if (local->monitors == local->open_count)
1012 ieee80211_add_virtual_monitor(local);
1013 }
1014
1015 static int ieee80211_stop(struct net_device *dev)
1016 {
1017 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1018
1019 ieee80211_do_stop(sdata, true);
1020
1021 return 0;
1022 }
1023
1024 static void ieee80211_set_multicast_list(struct net_device *dev)
1025 {
1026 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1027 struct ieee80211_local *local = sdata->local;
1028 int allmulti, promisc, sdata_allmulti, sdata_promisc;
1029
1030 allmulti = !!(dev->flags & IFF_ALLMULTI);
1031 promisc = !!(dev->flags & IFF_PROMISC);
1032 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
1033 sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);
1034
1035 if (allmulti != sdata_allmulti) {
1036 if (dev->flags & IFF_ALLMULTI)
1037 atomic_inc(&local->iff_allmultis);
1038 else
1039 atomic_dec(&local->iff_allmultis);
1040 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
1041 }
1042
1043 if (promisc != sdata_promisc) {
1044 if (dev->flags & IFF_PROMISC)
1045 atomic_inc(&local->iff_promiscs);
1046 else
1047 atomic_dec(&local->iff_promiscs);
1048 sdata->flags ^= IEEE80211_SDATA_PROMISC;
1049 }
1050 spin_lock_bh(&local->filter_lock);
1051 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
1052 spin_unlock_bh(&local->filter_lock);
1053 ieee80211_queue_work(&local->hw, &local->reconfig_filter);
1054 }
1055
1056 /*
1057 * Called when the netdev is removed or, by the code below, before
1058 * the interface type changes.
1059 */
1060 static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
1061 {
1062 int i;
1063
1064 /* free extra data */
1065 ieee80211_free_keys(sdata, false);
1066
1067 ieee80211_debugfs_remove_netdev(sdata);
1068
1069 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1070 __skb_queue_purge(&sdata->fragments[i].skb_list);
1071 sdata->fragment_next = 0;
1072
1073 if (ieee80211_vif_is_mesh(&sdata->vif))
1074 mesh_rmc_free(sdata);
1075 }
1076
1077 static void ieee80211_uninit(struct net_device *dev)
1078 {
1079 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
1080 }
1081
1082 static u16 ieee80211_netdev_select_queue(struct net_device *dev,
1083 struct sk_buff *skb,
1084 void *accel_priv,
1085 select_queue_fallback_t fallback)
1086 {
1087 return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb);
1088 }
1089
1090 static const struct net_device_ops ieee80211_dataif_ops = {
1091 .ndo_open = ieee80211_open,
1092 .ndo_stop = ieee80211_stop,
1093 .ndo_uninit = ieee80211_uninit,
1094 .ndo_start_xmit = ieee80211_subif_start_xmit,
1095 .ndo_set_rx_mode = ieee80211_set_multicast_list,
1096 .ndo_change_mtu = ieee80211_change_mtu,
1097 .ndo_set_mac_address = ieee80211_change_mac,
1098 .ndo_select_queue = ieee80211_netdev_select_queue,
1099 };
1100
1101 static u16 ieee80211_monitor_select_queue(struct net_device *dev,
1102 struct sk_buff *skb,
1103 void *accel_priv,
1104 select_queue_fallback_t fallback)
1105 {
1106 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1107 struct ieee80211_local *local = sdata->local;
1108 struct ieee80211_hdr *hdr;
1109 struct ieee80211_radiotap_header *rtap = (void *)skb->data;
1110
1111 if (local->hw.queues < IEEE80211_NUM_ACS)
1112 return 0;
1113
1114 if (skb->len < 4 ||
1115 skb->len < le16_to_cpu(rtap->it_len) + 2 /* frame control */)
1116 return 0; /* doesn't matter, frame will be dropped */
1117
1118 hdr = (void *)((u8 *)skb->data + le16_to_cpu(rtap->it_len));
1119
1120 return ieee80211_select_queue_80211(sdata, skb, hdr);
1121 }
1122
1123 static const struct net_device_ops ieee80211_monitorif_ops = {
1124 .ndo_open = ieee80211_open,
1125 .ndo_stop = ieee80211_stop,
1126 .ndo_uninit = ieee80211_uninit,
1127 .ndo_start_xmit = ieee80211_monitor_start_xmit,
1128 .ndo_set_rx_mode = ieee80211_set_multicast_list,
1129 .ndo_change_mtu = ieee80211_change_mtu,
1130 .ndo_set_mac_address = ieee80211_change_mac,
1131 .ndo_select_queue = ieee80211_monitor_select_queue,
1132 };
1133
1134 static void ieee80211_if_setup(struct net_device *dev)
1135 {
1136 ether_setup(dev);
1137 dev->priv_flags &= ~IFF_TX_SKB_SHARING;
1138 dev->netdev_ops = &ieee80211_dataif_ops;
1139 dev->destructor = free_netdev;
1140 }
1141
1142 static void ieee80211_iface_work(struct work_struct *work)
1143 {
1144 struct ieee80211_sub_if_data *sdata =
1145 container_of(work, struct ieee80211_sub_if_data, work);
1146 struct ieee80211_local *local = sdata->local;
1147 struct sk_buff *skb;
1148 struct sta_info *sta;
1149 struct ieee80211_ra_tid *ra_tid;
1150 struct ieee80211_rx_agg *rx_agg;
1151
1152 if (!ieee80211_sdata_running(sdata))
1153 return;
1154
1155 if (local->scanning)
1156 return;
1157
1158 /*
1159 * ieee80211_queue_work() should have picked up most cases,
1160 * here we'll pick the rest.
1161 */
1162 if (WARN(local->suspended,
1163 "interface work scheduled while going to suspend\n"))
1164 return;
1165
1166 /* first process frames */
1167 while ((skb = skb_dequeue(&sdata->skb_queue))) {
1168 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1169
1170 if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_START) {
1171 ra_tid = (void *)&skb->cb;
1172 ieee80211_start_tx_ba_cb(&sdata->vif, ra_tid->ra,
1173 ra_tid->tid);
1174 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_STOP) {
1175 ra_tid = (void *)&skb->cb;
1176 ieee80211_stop_tx_ba_cb(&sdata->vif, ra_tid->ra,
1177 ra_tid->tid);
1178 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_START) {
1179 rx_agg = (void *)&skb->cb;
1180 mutex_lock(&local->sta_mtx);
1181 sta = sta_info_get_bss(sdata, rx_agg->addr);
1182 if (sta)
1183 __ieee80211_start_rx_ba_session(sta,
1184 0, 0, 0, 1, rx_agg->tid,
1185 IEEE80211_MAX_AMPDU_BUF,
1186 false, true);
1187 mutex_unlock(&local->sta_mtx);
1188 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_STOP) {
1189 rx_agg = (void *)&skb->cb;
1190 mutex_lock(&local->sta_mtx);
1191 sta = sta_info_get_bss(sdata, rx_agg->addr);
1192 if (sta)
1193 __ieee80211_stop_rx_ba_session(sta,
1194 rx_agg->tid,
1195 WLAN_BACK_RECIPIENT, 0,
1196 false);
1197 mutex_unlock(&local->sta_mtx);
1198 } else if (ieee80211_is_action(mgmt->frame_control) &&
1199 mgmt->u.action.category == WLAN_CATEGORY_BACK) {
1200 int len = skb->len;
1201
1202 mutex_lock(&local->sta_mtx);
1203 sta = sta_info_get_bss(sdata, mgmt->sa);
1204 if (sta) {
1205 switch (mgmt->u.action.u.addba_req.action_code) {
1206 case WLAN_ACTION_ADDBA_REQ:
1207 ieee80211_process_addba_request(
1208 local, sta, mgmt, len);
1209 break;
1210 case WLAN_ACTION_ADDBA_RESP:
1211 ieee80211_process_addba_resp(local, sta,
1212 mgmt, len);
1213 break;
1214 case WLAN_ACTION_DELBA:
1215 ieee80211_process_delba(sdata, sta,
1216 mgmt, len);
1217 break;
1218 default:
1219 WARN_ON(1);
1220 break;
1221 }
1222 }
1223 mutex_unlock(&local->sta_mtx);
1224 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
1225 struct ieee80211_hdr *hdr = (void *)mgmt;
1226 /*
1227 * So the frame isn't mgmt, but frame_control
1228 * is at the right place anyway, of course, so
1229 * the if statement is correct.
1230 *
1231 * Warn if we have other data frame types here,
1232 * they must not get here.
1233 */
1234 WARN_ON(hdr->frame_control &
1235 cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
1236 WARN_ON(!(hdr->seq_ctrl &
1237 cpu_to_le16(IEEE80211_SCTL_FRAG)));
1238 /*
1239 * This was a fragment of a frame, received while
1240 * a block-ack session was active. That cannot be
1241 * right, so terminate the session.
1242 */
1243 mutex_lock(&local->sta_mtx);
1244 sta = sta_info_get_bss(sdata, mgmt->sa);
1245 if (sta) {
1246 u16 tid = *ieee80211_get_qos_ctl(hdr) &
1247 IEEE80211_QOS_CTL_TID_MASK;
1248
1249 __ieee80211_stop_rx_ba_session(
1250 sta, tid, WLAN_BACK_RECIPIENT,
1251 WLAN_REASON_QSTA_REQUIRE_SETUP,
1252 true);
1253 }
1254 mutex_unlock(&local->sta_mtx);
1255 } else switch (sdata->vif.type) {
1256 case NL80211_IFTYPE_STATION:
1257 ieee80211_sta_rx_queued_mgmt(sdata, skb);
1258 break;
1259 case NL80211_IFTYPE_ADHOC:
1260 ieee80211_ibss_rx_queued_mgmt(sdata, skb);
1261 break;
1262 case NL80211_IFTYPE_MESH_POINT:
1263 if (!ieee80211_vif_is_mesh(&sdata->vif))
1264 break;
1265 ieee80211_mesh_rx_queued_mgmt(sdata, skb);
1266 break;
1267 default:
1268 WARN(1, "frame for unexpected interface type");
1269 break;
1270 }
1271
1272 kfree_skb(skb);
1273 }
1274
1275 /* then other type-dependent work */
1276 switch (sdata->vif.type) {
1277 case NL80211_IFTYPE_STATION:
1278 ieee80211_sta_work(sdata);
1279 break;
1280 case NL80211_IFTYPE_ADHOC:
1281 ieee80211_ibss_work(sdata);
1282 break;
1283 case NL80211_IFTYPE_MESH_POINT:
1284 if (!ieee80211_vif_is_mesh(&sdata->vif))
1285 break;
1286 ieee80211_mesh_work(sdata);
1287 break;
1288 default:
1289 break;
1290 }
1291 }
1292
1293 static void ieee80211_recalc_smps_work(struct work_struct *work)
1294 {
1295 struct ieee80211_sub_if_data *sdata =
1296 container_of(work, struct ieee80211_sub_if_data, recalc_smps);
1297
1298 ieee80211_recalc_smps(sdata);
1299 }
1300
1301 /*
1302 * Helper function to initialise an interface to a specific type.
1303 */
1304 static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
1305 enum nl80211_iftype type)
1306 {
1307 /* clear type-dependent union */
1308 memset(&sdata->u, 0, sizeof(sdata->u));
1309
1310 /* and set some type-dependent values */
1311 sdata->vif.type = type;
1312 sdata->vif.p2p = false;
1313 sdata->wdev.iftype = type;
1314
1315 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
1316 sdata->control_port_no_encrypt = false;
1317 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
1318 sdata->vif.bss_conf.idle = true;
1319
1320 sdata->noack_map = 0;
1321
1322 /* only monitor/p2p-device differ */
1323 if (sdata->dev) {
1324 sdata->dev->netdev_ops = &ieee80211_dataif_ops;
1325 sdata->dev->type = ARPHRD_ETHER;
1326 }
1327
1328 skb_queue_head_init(&sdata->skb_queue);
1329 INIT_WORK(&sdata->work, ieee80211_iface_work);
1330 INIT_WORK(&sdata->recalc_smps, ieee80211_recalc_smps_work);
1331 INIT_WORK(&sdata->csa_finalize_work, ieee80211_csa_finalize_work);
1332 INIT_LIST_HEAD(&sdata->assigned_chanctx_list);
1333 INIT_LIST_HEAD(&sdata->reserved_chanctx_list);
1334
1335 switch (type) {
1336 case NL80211_IFTYPE_P2P_GO:
1337 type = NL80211_IFTYPE_AP;
1338 sdata->vif.type = type;
1339 sdata->vif.p2p = true;
1340 /* fall through */
1341 case NL80211_IFTYPE_AP:
1342 skb_queue_head_init(&sdata->u.ap.ps.bc_buf);
1343 INIT_LIST_HEAD(&sdata->u.ap.vlans);
1344 INIT_WORK(&sdata->u.ap.request_smps_work,
1345 ieee80211_request_smps_ap_work);
1346 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1347 sdata->u.ap.req_smps = IEEE80211_SMPS_OFF;
1348 break;
1349 case NL80211_IFTYPE_P2P_CLIENT:
1350 type = NL80211_IFTYPE_STATION;
1351 sdata->vif.type = type;
1352 sdata->vif.p2p = true;
1353 /* fall through */
1354 case NL80211_IFTYPE_STATION:
1355 sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid;
1356 ieee80211_sta_setup_sdata(sdata);
1357 break;
1358 case NL80211_IFTYPE_ADHOC:
1359 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
1360 ieee80211_ibss_setup_sdata(sdata);
1361 break;
1362 case NL80211_IFTYPE_MESH_POINT:
1363 if (ieee80211_vif_is_mesh(&sdata->vif))
1364 ieee80211_mesh_init_sdata(sdata);
1365 break;
1366 case NL80211_IFTYPE_MONITOR:
1367 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
1368 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
1369 sdata->u.mntr_flags = MONITOR_FLAG_CONTROL |
1370 MONITOR_FLAG_OTHER_BSS;
1371 break;
1372 case NL80211_IFTYPE_WDS:
1373 sdata->vif.bss_conf.bssid = NULL;
1374 break;
1375 case NL80211_IFTYPE_AP_VLAN:
1376 case NL80211_IFTYPE_P2P_DEVICE:
1377 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1378 break;
1379 case NL80211_IFTYPE_UNSPECIFIED:
1380 case NUM_NL80211_IFTYPES:
1381 BUG();
1382 break;
1383 }
1384
1385 ieee80211_debugfs_add_netdev(sdata);
1386 }
1387
1388 static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1389 enum nl80211_iftype type)
1390 {
1391 struct ieee80211_local *local = sdata->local;
1392 int ret, err;
1393 enum nl80211_iftype internal_type = type;
1394 bool p2p = false;
1395
1396 ASSERT_RTNL();
1397
1398 if (!local->ops->change_interface)
1399 return -EBUSY;
1400
1401 switch (sdata->vif.type) {
1402 case NL80211_IFTYPE_AP:
1403 case NL80211_IFTYPE_STATION:
1404 case NL80211_IFTYPE_ADHOC:
1405 /*
1406 * Could maybe also all others here?
1407 * Just not sure how that interacts
1408 * with the RX/config path e.g. for
1409 * mesh.
1410 */
1411 break;
1412 default:
1413 return -EBUSY;
1414 }
1415
1416 switch (type) {
1417 case NL80211_IFTYPE_AP:
1418 case NL80211_IFTYPE_STATION:
1419 case NL80211_IFTYPE_ADHOC:
1420 /*
1421 * Could probably support everything
1422 * but WDS here (WDS do_open can fail
1423 * under memory pressure, which this
1424 * code isn't prepared to handle).
1425 */
1426 break;
1427 case NL80211_IFTYPE_P2P_CLIENT:
1428 p2p = true;
1429 internal_type = NL80211_IFTYPE_STATION;
1430 break;
1431 case NL80211_IFTYPE_P2P_GO:
1432 p2p = true;
1433 internal_type = NL80211_IFTYPE_AP;
1434 break;
1435 default:
1436 return -EBUSY;
1437 }
1438
1439 ret = ieee80211_check_concurrent_iface(sdata, internal_type);
1440 if (ret)
1441 return ret;
1442
1443 ieee80211_do_stop(sdata, false);
1444
1445 ieee80211_teardown_sdata(sdata);
1446
1447 ret = drv_change_interface(local, sdata, internal_type, p2p);
1448 if (ret)
1449 type = ieee80211_vif_type_p2p(&sdata->vif);
1450
1451 /*
1452 * Ignore return value here, there's not much we can do since
1453 * the driver changed the interface type internally already.
1454 * The warnings will hopefully make driver authors fix it :-)
1455 */
1456 ieee80211_check_queues(sdata, type);
1457
1458 ieee80211_setup_sdata(sdata, type);
1459
1460 err = ieee80211_do_open(&sdata->wdev, false);
1461 WARN(err, "type change: do_open returned %d", err);
1462
1463 return ret;
1464 }
1465
1466 int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
1467 enum nl80211_iftype type)
1468 {
1469 int ret;
1470
1471 ASSERT_RTNL();
1472
1473 if (type == ieee80211_vif_type_p2p(&sdata->vif))
1474 return 0;
1475
1476 if (ieee80211_sdata_running(sdata)) {
1477 ret = ieee80211_runtime_change_iftype(sdata, type);
1478 if (ret)
1479 return ret;
1480 } else {
1481 /* Purge and reset type-dependent state. */
1482 ieee80211_teardown_sdata(sdata);
1483 ieee80211_setup_sdata(sdata, type);
1484 }
1485
1486 /* reset some values that shouldn't be kept across type changes */
1487 sdata->drop_unencrypted = 0;
1488 if (type == NL80211_IFTYPE_STATION)
1489 sdata->u.mgd.use_4addr = false;
1490
1491 return 0;
1492 }
1493
1494 static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
1495 u8 *perm_addr, enum nl80211_iftype type)
1496 {
1497 struct ieee80211_sub_if_data *sdata;
1498 u64 mask, start, addr, val, inc;
1499 u8 *m;
1500 u8 tmp_addr[ETH_ALEN];
1501 int i;
1502
1503 /* default ... something at least */
1504 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
1505
1506 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1507 local->hw.wiphy->n_addresses <= 1)
1508 return;
1509
1510 mutex_lock(&local->iflist_mtx);
1511
1512 switch (type) {
1513 case NL80211_IFTYPE_MONITOR:
1514 /* doesn't matter */
1515 break;
1516 case NL80211_IFTYPE_WDS:
1517 case NL80211_IFTYPE_AP_VLAN:
1518 /* match up with an AP interface */
1519 list_for_each_entry(sdata, &local->interfaces, list) {
1520 if (sdata->vif.type != NL80211_IFTYPE_AP)
1521 continue;
1522 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1523 break;
1524 }
1525 /* keep default if no AP interface present */
1526 break;
1527 case NL80211_IFTYPE_P2P_CLIENT:
1528 case NL80211_IFTYPE_P2P_GO:
1529 if (local->hw.flags & IEEE80211_HW_P2P_DEV_ADDR_FOR_INTF) {
1530 list_for_each_entry(sdata, &local->interfaces, list) {
1531 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
1532 continue;
1533 if (!ieee80211_sdata_running(sdata))
1534 continue;
1535 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1536 goto out_unlock;
1537 }
1538 }
1539 /* otherwise fall through */
1540 default:
1541 /* assign a new address if possible -- try n_addresses first */
1542 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1543 bool used = false;
1544
1545 list_for_each_entry(sdata, &local->interfaces, list) {
1546 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr,
1547 sdata->vif.addr)) {
1548 used = true;
1549 break;
1550 }
1551 }
1552
1553 if (!used) {
1554 memcpy(perm_addr,
1555 local->hw.wiphy->addresses[i].addr,
1556 ETH_ALEN);
1557 break;
1558 }
1559 }
1560
1561 /* try mask if available */
1562 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
1563 break;
1564
1565 m = local->hw.wiphy->addr_mask;
1566 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1567 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1568 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1569
1570 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
1571 /* not a contiguous mask ... not handled now! */
1572 pr_info("not contiguous\n");
1573 break;
1574 }
1575
1576 /*
1577 * Pick address of existing interface in case user changed
1578 * MAC address manually, default to perm_addr.
1579 */
1580 m = local->hw.wiphy->perm_addr;
1581 list_for_each_entry(sdata, &local->interfaces, list) {
1582 if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
1583 continue;
1584 m = sdata->vif.addr;
1585 break;
1586 }
1587 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1588 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1589 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1590
1591 inc = 1ULL<<__ffs64(mask);
1592 val = (start & mask);
1593 addr = (start & ~mask) | (val & mask);
1594 do {
1595 bool used = false;
1596
1597 tmp_addr[5] = addr >> 0*8;
1598 tmp_addr[4] = addr >> 1*8;
1599 tmp_addr[3] = addr >> 2*8;
1600 tmp_addr[2] = addr >> 3*8;
1601 tmp_addr[1] = addr >> 4*8;
1602 tmp_addr[0] = addr >> 5*8;
1603
1604 val += inc;
1605
1606 list_for_each_entry(sdata, &local->interfaces, list) {
1607 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) {
1608 used = true;
1609 break;
1610 }
1611 }
1612
1613 if (!used) {
1614 memcpy(perm_addr, tmp_addr, ETH_ALEN);
1615 break;
1616 }
1617 addr = (start & ~mask) | (val & mask);
1618 } while (addr != start);
1619
1620 break;
1621 }
1622
1623 out_unlock:
1624 mutex_unlock(&local->iflist_mtx);
1625 }
1626
1627 int ieee80211_if_add(struct ieee80211_local *local, const char *name,
1628 struct wireless_dev **new_wdev, enum nl80211_iftype type,
1629 struct vif_params *params)
1630 {
1631 struct net_device *ndev = NULL;
1632 struct ieee80211_sub_if_data *sdata = NULL;
1633 int ret, i;
1634 int txqs = 1;
1635
1636 ASSERT_RTNL();
1637
1638 if (type == NL80211_IFTYPE_P2P_DEVICE) {
1639 struct wireless_dev *wdev;
1640
1641 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size,
1642 GFP_KERNEL);
1643 if (!sdata)
1644 return -ENOMEM;
1645 wdev = &sdata->wdev;
1646
1647 sdata->dev = NULL;
1648 strlcpy(sdata->name, name, IFNAMSIZ);
1649 ieee80211_assign_perm_addr(local, wdev->address, type);
1650 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN);
1651 } else {
1652 if (local->hw.queues >= IEEE80211_NUM_ACS)
1653 txqs = IEEE80211_NUM_ACS;
1654
1655 ndev = alloc_netdev_mqs(sizeof(*sdata) + local->hw.vif_data_size,
1656 name, NET_NAME_UNKNOWN,
1657 ieee80211_if_setup, txqs, 1);
1658 if (!ndev)
1659 return -ENOMEM;
1660 dev_net_set(ndev, wiphy_net(local->hw.wiphy));
1661
1662 ndev->needed_headroom = local->tx_headroom +
1663 4*6 /* four MAC addresses */
1664 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
1665 + 6 /* mesh */
1666 + 8 /* rfc1042/bridge tunnel */
1667 - ETH_HLEN /* ethernet hard_header_len */
1668 + IEEE80211_ENCRYPT_HEADROOM;
1669 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
1670
1671 ret = dev_alloc_name(ndev, ndev->name);
1672 if (ret < 0) {
1673 free_netdev(ndev);
1674 return ret;
1675 }
1676
1677 ieee80211_assign_perm_addr(local, ndev->perm_addr, type);
1678 memcpy(ndev->dev_addr, ndev->perm_addr, ETH_ALEN);
1679 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
1680
1681 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */
1682 sdata = netdev_priv(ndev);
1683 ndev->ieee80211_ptr = &sdata->wdev;
1684 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
1685 memcpy(sdata->name, ndev->name, IFNAMSIZ);
1686
1687 sdata->dev = ndev;
1688 }
1689
1690 /* initialise type-independent data */
1691 sdata->wdev.wiphy = local->hw.wiphy;
1692 sdata->local = local;
1693
1694 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1695 skb_queue_head_init(&sdata->fragments[i].skb_list);
1696
1697 INIT_LIST_HEAD(&sdata->key_list);
1698
1699 INIT_DELAYED_WORK(&sdata->dfs_cac_timer_work,
1700 ieee80211_dfs_cac_timer_work);
1701 INIT_DELAYED_WORK(&sdata->dec_tailroom_needed_wk,
1702 ieee80211_delayed_tailroom_dec);
1703
1704 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
1705 struct ieee80211_supported_band *sband;
1706 sband = local->hw.wiphy->bands[i];
1707 sdata->rc_rateidx_mask[i] =
1708 sband ? (1 << sband->n_bitrates) - 1 : 0;
1709 if (sband)
1710 memcpy(sdata->rc_rateidx_mcs_mask[i],
1711 sband->ht_cap.mcs.rx_mask,
1712 sizeof(sdata->rc_rateidx_mcs_mask[i]));
1713 else
1714 memset(sdata->rc_rateidx_mcs_mask[i], 0,
1715 sizeof(sdata->rc_rateidx_mcs_mask[i]));
1716 }
1717
1718 ieee80211_set_default_queues(sdata);
1719
1720 sdata->ap_power_level = IEEE80211_UNSET_POWER_LEVEL;
1721 sdata->user_power_level = local->user_power_level;
1722
1723 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
1724
1725 /* setup type-dependent data */
1726 ieee80211_setup_sdata(sdata, type);
1727
1728 if (ndev) {
1729 if (params) {
1730 ndev->ieee80211_ptr->use_4addr = params->use_4addr;
1731 if (type == NL80211_IFTYPE_STATION)
1732 sdata->u.mgd.use_4addr = params->use_4addr;
1733 }
1734
1735 ndev->features |= local->hw.netdev_features;
1736
1737 netdev_set_default_ethtool_ops(ndev, &ieee80211_ethtool_ops);
1738
1739 ret = register_netdevice(ndev);
1740 if (ret) {
1741 free_netdev(ndev);
1742 return ret;
1743 }
1744 }
1745
1746 mutex_lock(&local->iflist_mtx);
1747 list_add_tail_rcu(&sdata->list, &local->interfaces);
1748 mutex_unlock(&local->iflist_mtx);
1749
1750 if (new_wdev)
1751 *new_wdev = &sdata->wdev;
1752
1753 return 0;
1754 }
1755
1756 void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
1757 {
1758 ASSERT_RTNL();
1759
1760 mutex_lock(&sdata->local->iflist_mtx);
1761 list_del_rcu(&sdata->list);
1762 mutex_unlock(&sdata->local->iflist_mtx);
1763
1764 synchronize_rcu();
1765
1766 if (sdata->dev) {
1767 unregister_netdevice(sdata->dev);
1768 } else {
1769 cfg80211_unregister_wdev(&sdata->wdev);
1770 kfree(sdata);
1771 }
1772 }
1773
1774 void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata)
1775 {
1776 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state)))
1777 return;
1778 ieee80211_do_stop(sdata, true);
1779 ieee80211_teardown_sdata(sdata);
1780 }
1781
1782 /*
1783 * Remove all interfaces, may only be called at hardware unregistration
1784 * time because it doesn't do RCU-safe list removals.
1785 */
1786 void ieee80211_remove_interfaces(struct ieee80211_local *local)
1787 {
1788 struct ieee80211_sub_if_data *sdata, *tmp;
1789 LIST_HEAD(unreg_list);
1790 LIST_HEAD(wdev_list);
1791
1792 ASSERT_RTNL();
1793
1794 /*
1795 * Close all AP_VLAN interfaces first, as otherwise they
1796 * might be closed while the AP interface they belong to
1797 * is closed, causing unregister_netdevice_many() to crash.
1798 */
1799 list_for_each_entry(sdata, &local->interfaces, list)
1800 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
1801 dev_close(sdata->dev);
1802
1803 mutex_lock(&local->iflist_mtx);
1804 list_for_each_entry_safe(sdata, tmp, &local->interfaces, list) {
1805 list_del(&sdata->list);
1806
1807 if (sdata->dev)
1808 unregister_netdevice_queue(sdata->dev, &unreg_list);
1809 else
1810 list_add(&sdata->list, &wdev_list);
1811 }
1812 mutex_unlock(&local->iflist_mtx);
1813 unregister_netdevice_many(&unreg_list);
1814
1815 list_for_each_entry_safe(sdata, tmp, &wdev_list, list) {
1816 list_del(&sdata->list);
1817 cfg80211_unregister_wdev(&sdata->wdev);
1818 kfree(sdata);
1819 }
1820 }
1821
1822 static int netdev_notify(struct notifier_block *nb,
1823 unsigned long state, void *ptr)
1824 {
1825 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
1826 struct ieee80211_sub_if_data *sdata;
1827
1828 if (state != NETDEV_CHANGENAME)
1829 return NOTIFY_DONE;
1830
1831 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
1832 return NOTIFY_DONE;
1833
1834 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
1835 return NOTIFY_DONE;
1836
1837 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1838 memcpy(sdata->name, dev->name, IFNAMSIZ);
1839 ieee80211_debugfs_rename_netdev(sdata);
1840
1841 return NOTIFY_OK;
1842 }
1843
1844 static struct notifier_block mac80211_netdev_notifier = {
1845 .notifier_call = netdev_notify,
1846 };
1847
1848 int ieee80211_iface_init(void)
1849 {
1850 return register_netdevice_notifier(&mac80211_netdev_notifier);
1851 }
1852
1853 void ieee80211_iface_exit(void)
1854 {
1855 unregister_netdevice_notifier(&mac80211_netdev_notifier);
1856 }
This page took 0.106095 seconds and 5 git commands to generate.