1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3 * Interface handling
4 *
5 * Copyright 2002-2005, Instant802 Networks, Inc.
6 * Copyright 2005-2006, Devicescape Software, Inc.
7 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
8 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
9 * Copyright 2013-2014 Intel Mobile Communications GmbH
10 * Copyright (c) 2016 Intel Deutschland GmbH
11 * Copyright (C) 2018-2024 Intel Corporation
12 */
13 #include <linux/slab.h>
14 #include <linux/kernel.h>
15 #include <linux/if_arp.h>
16 #include <linux/netdevice.h>
17 #include <linux/rtnetlink.h>
18 #include <linux/kcov.h>
19 #include <net/mac80211.h>
20 #include <net/ieee80211_radiotap.h>
21 #include "ieee80211_i.h"
22 #include "sta_info.h"
23 #include "debugfs_netdev.h"
24 #include "mesh.h"
25 #include "led.h"
26 #include "driver-ops.h"
27 #include "wme.h"
28 #include "rate.h"
29
30 /**
31 * DOC: Interface list locking
32 *
33 * The interface list in each struct ieee80211_local is protected
34 * three-fold:
35 *
36 * (1) modifications may only be done under the RTNL *and* wiphy mutex
37 * *and* iflist_mtx
38 * (2) modifications are done in an RCU manner so atomic readers
39 * can traverse the list in RCU-safe blocks.
40 *
41 * As a consequence, reads (traversals) of the list can be protected
42 * by either the RTNL, the wiphy mutex, the iflist_mtx or RCU.
43 */
44
45 static void ieee80211_iface_work(struct wiphy *wiphy, struct wiphy_work *work);
46
__ieee80211_recalc_txpower(struct ieee80211_sub_if_data * sdata)47 bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
48 {
49 struct ieee80211_chanctx_conf *chanctx_conf;
50 int power;
51
52 rcu_read_lock();
53 chanctx_conf = rcu_dereference(sdata->vif.bss_conf.chanctx_conf);
54 if (!chanctx_conf) {
55 rcu_read_unlock();
56 return false;
57 }
58
59 power = ieee80211_chandef_max_power(&chanctx_conf->def);
60 rcu_read_unlock();
61
62 if (sdata->deflink.user_power_level != IEEE80211_UNSET_POWER_LEVEL)
63 power = min(power, sdata->deflink.user_power_level);
64
65 if (sdata->deflink.ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
66 power = min(power, sdata->deflink.ap_power_level);
67
68 if (power != sdata->vif.bss_conf.txpower) {
69 sdata->vif.bss_conf.txpower = power;
70 ieee80211_hw_config(sdata->local, 0);
71 return true;
72 }
73
74 return false;
75 }
76
ieee80211_recalc_txpower(struct ieee80211_sub_if_data * sdata,bool update_bss)77 void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata,
78 bool update_bss)
79 {
80 if (__ieee80211_recalc_txpower(sdata) ||
81 (update_bss && ieee80211_sdata_running(sdata)))
82 ieee80211_link_info_change_notify(sdata, &sdata->deflink,
83 BSS_CHANGED_TXPOWER);
84 }
85
__ieee80211_idle_off(struct ieee80211_local * local)86 static u32 __ieee80211_idle_off(struct ieee80211_local *local)
87 {
88 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
89 return 0;
90
91 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
92 return IEEE80211_CONF_CHANGE_IDLE;
93 }
94
__ieee80211_idle_on(struct ieee80211_local * local)95 static u32 __ieee80211_idle_on(struct ieee80211_local *local)
96 {
97 if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
98 return 0;
99
100 ieee80211_flush_queues(local, NULL, false);
101
102 local->hw.conf.flags |= IEEE80211_CONF_IDLE;
103 return IEEE80211_CONF_CHANGE_IDLE;
104 }
105
__ieee80211_recalc_idle(struct ieee80211_local * local,bool force_active)106 static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
107 bool force_active)
108 {
109 bool working, scanning, active;
110 unsigned int led_trig_start = 0, led_trig_stop = 0;
111
112 lockdep_assert_wiphy(local->hw.wiphy);
113
114 active = force_active ||
115 !list_empty(&local->chanctx_list) ||
116 local->monitors;
117
118 working = !local->ops->remain_on_channel &&
119 !list_empty(&local->roc_list);
120
121 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
122 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
123
124 if (working || scanning)
125 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
126 else
127 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
128
129 if (active)
130 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
131 else
132 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
133
134 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
135
136 if (working || scanning || active)
137 return __ieee80211_idle_off(local);
138 return __ieee80211_idle_on(local);
139 }
140
ieee80211_idle_off(struct ieee80211_local * local)141 u32 ieee80211_idle_off(struct ieee80211_local *local)
142 {
143 return __ieee80211_recalc_idle(local, true);
144 }
145
ieee80211_recalc_idle(struct ieee80211_local * local)146 void ieee80211_recalc_idle(struct ieee80211_local *local)
147 {
148 u32 change = __ieee80211_recalc_idle(local, false);
149 if (change)
150 ieee80211_hw_config(local, change);
151 }
152
ieee80211_verify_mac(struct ieee80211_sub_if_data * sdata,u8 * addr,bool check_dup)153 static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
154 bool check_dup)
155 {
156 struct ieee80211_local *local = sdata->local;
157 struct ieee80211_sub_if_data *iter;
158 u64 new, mask, tmp;
159 u8 *m;
160 int ret = 0;
161
162 lockdep_assert_wiphy(local->hw.wiphy);
163
164 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
165 return 0;
166
167 m = addr;
168 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
169 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
170 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
171
172 m = local->hw.wiphy->addr_mask;
173 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
174 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
175 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
176
177 if (!check_dup)
178 return ret;
179
180 list_for_each_entry(iter, &local->interfaces, list) {
181 if (iter == sdata)
182 continue;
183
184 if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
185 !(iter->u.mntr.flags & MONITOR_FLAG_ACTIVE))
186 continue;
187
188 m = iter->vif.addr;
189 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
190 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
191 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
192
193 if ((new & ~mask) != (tmp & ~mask)) {
194 ret = -EINVAL;
195 break;
196 }
197 }
198
199 return ret;
200 }
201
ieee80211_can_powered_addr_change(struct ieee80211_sub_if_data * sdata)202 static int ieee80211_can_powered_addr_change(struct ieee80211_sub_if_data *sdata)
203 {
204 struct ieee80211_roc_work *roc;
205 struct ieee80211_local *local = sdata->local;
206 struct ieee80211_sub_if_data *scan_sdata;
207 int ret = 0;
208
209 lockdep_assert_wiphy(local->hw.wiphy);
210
211 /* To be the most flexible here we want to only limit changing the
212 * address if the specific interface is doing offchannel work or
213 * scanning.
214 */
215 if (netif_carrier_ok(sdata->dev))
216 return -EBUSY;
217
218 /* First check no ROC work is happening on this iface */
219 list_for_each_entry(roc, &local->roc_list, list) {
220 if (roc->sdata != sdata)
221 continue;
222
223 if (roc->started) {
224 ret = -EBUSY;
225 goto unlock;
226 }
227 }
228
229 /* And if this iface is scanning */
230 if (local->scanning) {
231 scan_sdata = rcu_dereference_protected(local->scan_sdata,
232 lockdep_is_held(&local->hw.wiphy->mtx));
233 if (sdata == scan_sdata)
234 ret = -EBUSY;
235 }
236
237 switch (sdata->vif.type) {
238 case NL80211_IFTYPE_STATION:
239 case NL80211_IFTYPE_P2P_CLIENT:
240 /* More interface types could be added here but changing the
241 * address while powered makes the most sense in client modes.
242 */
243 break;
244 default:
245 ret = -EOPNOTSUPP;
246 }
247
248 unlock:
249 return ret;
250 }
251
_ieee80211_change_mac(struct ieee80211_sub_if_data * sdata,void * addr)252 static int _ieee80211_change_mac(struct ieee80211_sub_if_data *sdata,
253 void *addr)
254 {
255 struct ieee80211_local *local = sdata->local;
256 struct sockaddr *sa = addr;
257 bool check_dup = true;
258 bool live = false;
259 int ret;
260
261 if (ieee80211_sdata_running(sdata)) {
262 ret = ieee80211_can_powered_addr_change(sdata);
263 if (ret)
264 return ret;
265
266 live = true;
267 }
268
269 if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
270 !(sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE))
271 check_dup = false;
272
273 ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
274 if (ret)
275 return ret;
276
277 if (live)
278 drv_remove_interface(local, sdata);
279 ret = eth_mac_addr(sdata->dev, sa);
280
281 if (ret == 0) {
282 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
283 ether_addr_copy(sdata->vif.bss_conf.addr, sdata->vif.addr);
284 }
285
286 /* Regardless of eth_mac_addr() return we still want to add the
287 * interface back. This should not fail...
288 */
289 if (live)
290 WARN_ON(drv_add_interface(local, sdata));
291
292 return ret;
293 }
294
ieee80211_change_mac(struct net_device * dev,void * addr)295 static int ieee80211_change_mac(struct net_device *dev, void *addr)
296 {
297 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
298 struct ieee80211_local *local = sdata->local;
299 int ret;
300
301 /*
302 * This happens during unregistration if there's a bond device
303 * active (maybe other cases?) and we must get removed from it.
304 * But we really don't care anymore if it's not registered now.
305 */
306 if (!dev->ieee80211_ptr->registered)
307 return 0;
308
309 wiphy_lock(local->hw.wiphy);
310 ret = _ieee80211_change_mac(sdata, addr);
311 wiphy_unlock(local->hw.wiphy);
312
313 return ret;
314 }
315
identical_mac_addr_allowed(int type1,int type2)316 static inline int identical_mac_addr_allowed(int type1, int type2)
317 {
318 return type1 == NL80211_IFTYPE_MONITOR ||
319 type2 == NL80211_IFTYPE_MONITOR ||
320 type1 == NL80211_IFTYPE_P2P_DEVICE ||
321 type2 == NL80211_IFTYPE_P2P_DEVICE ||
322 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
323 (type1 == NL80211_IFTYPE_AP_VLAN &&
324 (type2 == NL80211_IFTYPE_AP ||
325 type2 == NL80211_IFTYPE_AP_VLAN));
326 }
327
ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype iftype)328 static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
329 enum nl80211_iftype iftype)
330 {
331 struct ieee80211_local *local = sdata->local;
332 struct ieee80211_sub_if_data *nsdata;
333
334 ASSERT_RTNL();
335 lockdep_assert_wiphy(local->hw.wiphy);
336
337 /* we hold the RTNL here so can safely walk the list */
338 list_for_each_entry(nsdata, &local->interfaces, list) {
339 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
340 /*
341 * Only OCB and monitor mode may coexist
342 */
343 if ((sdata->vif.type == NL80211_IFTYPE_OCB &&
344 nsdata->vif.type != NL80211_IFTYPE_MONITOR) ||
345 (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
346 nsdata->vif.type == NL80211_IFTYPE_OCB))
347 return -EBUSY;
348
349 /*
350 * Allow only a single IBSS interface to be up at any
351 * time. This is restricted because beacon distribution
352 * cannot work properly if both are in the same IBSS.
353 *
354 * To remove this restriction we'd have to disallow them
355 * from setting the same SSID on different IBSS interfaces
356 * belonging to the same hardware. Then, however, we're
357 * faced with having to adopt two different TSF timers...
358 */
359 if (iftype == NL80211_IFTYPE_ADHOC &&
360 nsdata->vif.type == NL80211_IFTYPE_ADHOC)
361 return -EBUSY;
362 /*
363 * will not add another interface while any channel
364 * switch is active.
365 */
366 if (nsdata->vif.bss_conf.csa_active)
367 return -EBUSY;
368
369 /*
370 * The remaining checks are only performed for interfaces
371 * with the same MAC address.
372 */
373 if (!ether_addr_equal(sdata->vif.addr,
374 nsdata->vif.addr))
375 continue;
376
377 /*
378 * check whether it may have the same address
379 */
380 if (!identical_mac_addr_allowed(iftype,
381 nsdata->vif.type))
382 return -ENOTUNIQ;
383
384 /* No support for VLAN with MLO yet */
385 if (iftype == NL80211_IFTYPE_AP_VLAN &&
386 sdata->wdev.use_4addr &&
387 nsdata->vif.type == NL80211_IFTYPE_AP &&
388 nsdata->vif.valid_links)
389 return -EOPNOTSUPP;
390
391 /*
392 * can only add VLANs to enabled APs
393 */
394 if (iftype == NL80211_IFTYPE_AP_VLAN &&
395 nsdata->vif.type == NL80211_IFTYPE_AP)
396 sdata->bss = &nsdata->u.ap;
397 }
398 }
399
400 return ieee80211_check_combinations(sdata, NULL, 0, 0, -1);
401 }
402
ieee80211_check_queues(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype iftype)403 static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata,
404 enum nl80211_iftype iftype)
405 {
406 int n_queues = sdata->local->hw.queues;
407 int i;
408
409 if (iftype == NL80211_IFTYPE_NAN)
410 return 0;
411
412 if (iftype != NL80211_IFTYPE_P2P_DEVICE) {
413 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
414 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
415 IEEE80211_INVAL_HW_QUEUE))
416 return -EINVAL;
417 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
418 n_queues))
419 return -EINVAL;
420 }
421 }
422
423 if ((iftype != NL80211_IFTYPE_AP &&
424 iftype != NL80211_IFTYPE_P2P_GO &&
425 iftype != NL80211_IFTYPE_MESH_POINT) ||
426 !ieee80211_hw_check(&sdata->local->hw, QUEUE_CONTROL)) {
427 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
428 return 0;
429 }
430
431 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
432 return -EINVAL;
433
434 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
435 return -EINVAL;
436
437 return 0;
438 }
439
ieee80211_open(struct net_device * dev)440 static int ieee80211_open(struct net_device *dev)
441 {
442 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
443 int err;
444
445 /* fail early if user set an invalid address */
446 if (!is_valid_ether_addr(dev->dev_addr))
447 return -EADDRNOTAVAIL;
448
449 wiphy_lock(sdata->local->hw.wiphy);
450 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
451 if (err)
452 goto out;
453
454 err = ieee80211_do_open(&sdata->wdev, true);
455 out:
456 wiphy_unlock(sdata->local->hw.wiphy);
457
458 return err;
459 }
460
ieee80211_do_stop(struct ieee80211_sub_if_data * sdata,bool going_down)461 static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata, bool going_down)
462 {
463 struct ieee80211_local *local = sdata->local;
464 unsigned long flags;
465 struct sk_buff_head freeq;
466 struct sk_buff *skb, *tmp;
467 u32 hw_reconf_flags = 0;
468 int i, flushed;
469 struct ps_data *ps;
470 struct cfg80211_chan_def chandef;
471 bool cancel_scan;
472 struct cfg80211_nan_func *func;
473
474 lockdep_assert_wiphy(local->hw.wiphy);
475
476 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
477 synchronize_rcu(); /* flush _ieee80211_wake_txqs() */
478
479 cancel_scan = rcu_access_pointer(local->scan_sdata) == sdata;
480 if (cancel_scan)
481 ieee80211_scan_cancel(local);
482
483 ieee80211_roc_purge(local, sdata);
484
485 switch (sdata->vif.type) {
486 case NL80211_IFTYPE_STATION:
487 ieee80211_mgd_stop(sdata);
488 break;
489 case NL80211_IFTYPE_ADHOC:
490 ieee80211_ibss_stop(sdata);
491 break;
492 case NL80211_IFTYPE_MONITOR:
493 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES)
494 break;
495 list_del_rcu(&sdata->u.mntr.list);
496 break;
497 default:
498 break;
499 }
500
501 /*
502 * Remove all stations associated with this interface.
503 *
504 * This must be done before calling ops->remove_interface()
505 * because otherwise we can later invoke ops->sta_notify()
506 * whenever the STAs are removed, and that invalidates driver
507 * assumptions about always getting a vif pointer that is valid
508 * (because if we remove a STA after ops->remove_interface()
509 * the driver will have removed the vif info already!)
510 *
511 * For AP_VLANs stations may exist since there's nothing else that
512 * would have removed them, but in other modes there shouldn't
513 * be any stations.
514 */
515 flushed = sta_info_flush(sdata, -1);
516 WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP_VLAN && flushed > 0);
517
518 /* don't count this interface for allmulti while it is down */
519 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
520 atomic_dec(&local->iff_allmultis);
521
522 if (sdata->vif.type == NL80211_IFTYPE_AP) {
523 local->fif_pspoll--;
524 local->fif_probe_req--;
525 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
526 local->fif_probe_req--;
527 }
528
529 if (sdata->dev) {
530 netif_addr_lock_bh(sdata->dev);
531 spin_lock_bh(&local->filter_lock);
532 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
533 sdata->dev->addr_len);
534 spin_unlock_bh(&local->filter_lock);
535 netif_addr_unlock_bh(sdata->dev);
536 }
537
538 del_timer_sync(&local->dynamic_ps_timer);
539 wiphy_work_cancel(local->hw.wiphy, &local->dynamic_ps_enable_work);
540
541 WARN(ieee80211_vif_is_mld(&sdata->vif),
542 "destroying interface with valid links 0x%04x\n",
543 sdata->vif.valid_links);
544
545 sdata->vif.bss_conf.csa_active = false;
546 if (sdata->vif.type == NL80211_IFTYPE_STATION)
547 sdata->deflink.u.mgd.csa.waiting_bcn = false;
548 ieee80211_vif_unblock_queues_csa(sdata);
549
550 wiphy_work_cancel(local->hw.wiphy, &sdata->deflink.csa.finalize_work);
551 wiphy_work_cancel(local->hw.wiphy,
552 &sdata->deflink.color_change_finalize_work);
553 wiphy_delayed_work_cancel(local->hw.wiphy,
554 &sdata->deflink.dfs_cac_timer_work);
555
556 if (sdata->wdev.links[0].cac_started) {
557 chandef = sdata->vif.bss_conf.chanreq.oper;
558 WARN_ON(local->suspended);
559 ieee80211_link_release_channel(&sdata->deflink);
560 cfg80211_cac_event(sdata->dev, &chandef,
561 NL80211_RADAR_CAC_ABORTED,
562 GFP_KERNEL, 0);
563 }
564
565 if (sdata->vif.type == NL80211_IFTYPE_AP) {
566 WARN_ON(!list_empty(&sdata->u.ap.vlans));
567 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
568 /* remove all packets in parent bc_buf pointing to this dev */
569 ps = &sdata->bss->ps;
570
571 spin_lock_irqsave(&ps->bc_buf.lock, flags);
572 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
573 if (skb->dev == sdata->dev) {
574 __skb_unlink(skb, &ps->bc_buf);
575 local->total_ps_buffered--;
576 ieee80211_free_txskb(&local->hw, skb);
577 }
578 }
579 spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
580 }
581
582 if (going_down)
583 local->open_count--;
584
585 switch (sdata->vif.type) {
586 case NL80211_IFTYPE_AP_VLAN:
587 list_del(&sdata->u.vlan.list);
588 RCU_INIT_POINTER(sdata->vif.bss_conf.chanctx_conf, NULL);
589 /* see comment in the default case below */
590 ieee80211_free_keys(sdata, true);
591 /* no need to tell driver */
592 break;
593 case NL80211_IFTYPE_MONITOR:
594 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES) {
595 local->cooked_mntrs--;
596 break;
597 }
598
599 local->monitors--;
600 if (local->monitors == 0) {
601 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
602 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
603 }
604
605 ieee80211_adjust_monitor_flags(sdata, -1);
606 break;
607 case NL80211_IFTYPE_NAN:
608 /* clean all the functions */
609 spin_lock_bh(&sdata->u.nan.func_lock);
610
611 idr_for_each_entry(&sdata->u.nan.function_inst_ids, func, i) {
612 idr_remove(&sdata->u.nan.function_inst_ids, i);
613 cfg80211_free_nan_func(func);
614 }
615 idr_destroy(&sdata->u.nan.function_inst_ids);
616
617 spin_unlock_bh(&sdata->u.nan.func_lock);
618 break;
619 case NL80211_IFTYPE_P2P_DEVICE:
620 /* relies on synchronize_rcu() below */
621 RCU_INIT_POINTER(local->p2p_sdata, NULL);
622 fallthrough;
623 default:
624 wiphy_work_cancel(sdata->local->hw.wiphy, &sdata->work);
625 /*
626 * When we get here, the interface is marked down.
627 * Free the remaining keys, if there are any
628 * (which can happen in AP mode if userspace sets
629 * keys before the interface is operating)
630 *
631 * Force the key freeing to always synchronize_net()
632 * to wait for the RX path in case it is using this
633 * interface enqueuing frames at this very time on
634 * another CPU.
635 */
636 ieee80211_free_keys(sdata, true);
637 skb_queue_purge(&sdata->skb_queue);
638 skb_queue_purge(&sdata->status_queue);
639 }
640
641 /*
642 * Since ieee80211_free_txskb() may issue __dev_queue_xmit()
643 * which should be called with interrupts enabled, reclamation
644 * is done in two phases:
645 */
646 __skb_queue_head_init(&freeq);
647
648 /* unlink from local queues... */
649 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
650 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
651 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
652 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
653 if (info->control.vif == &sdata->vif) {
654 __skb_unlink(skb, &local->pending[i]);
655 __skb_queue_tail(&freeq, skb);
656 }
657 }
658 }
659 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
660
661 /* ... and perform actual reclamation with interrupts enabled. */
662 skb_queue_walk_safe(&freeq, skb, tmp) {
663 __skb_unlink(skb, &freeq);
664 ieee80211_free_txskb(&local->hw, skb);
665 }
666
667 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
668 ieee80211_txq_remove_vlan(local, sdata);
669
670 sdata->bss = NULL;
671
672 if (local->open_count == 0)
673 ieee80211_clear_tx_pending(local);
674
675 sdata->vif.bss_conf.beacon_int = 0;
676
677 /*
678 * If the interface goes down while suspended, presumably because
679 * the device was unplugged and that happens before our resume,
680 * then the driver is already unconfigured and the remainder of
681 * this function isn't needed.
682 * XXX: what about WoWLAN? If the device has software state, e.g.
683 * memory allocated, it might expect teardown commands from
684 * mac80211 here?
685 */
686 if (local->suspended) {
687 WARN_ON(local->wowlan);
688 WARN_ON(rcu_access_pointer(local->monitor_sdata));
689 return;
690 }
691
692 switch (sdata->vif.type) {
693 case NL80211_IFTYPE_AP_VLAN:
694 break;
695 case NL80211_IFTYPE_MONITOR:
696 if (local->monitors == 0)
697 ieee80211_del_virtual_monitor(local);
698
699 ieee80211_recalc_idle(local);
700 ieee80211_recalc_offload(local);
701
702 if (!(sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE))
703 break;
704
705 fallthrough;
706 default:
707 if (!going_down)
708 break;
709 drv_remove_interface(local, sdata);
710
711 /* Clear private driver data to prevent reuse */
712 memset(sdata->vif.drv_priv, 0, local->hw.vif_data_size);
713 }
714
715 ieee80211_recalc_ps(local);
716
717 if (cancel_scan)
718 wiphy_delayed_work_flush(local->hw.wiphy, &local->scan_work);
719
720 if (local->open_count == 0) {
721 ieee80211_stop_device(local, false);
722
723 /* no reconfiguring after stop! */
724 return;
725 }
726
727 /* do after stop to avoid reconfiguring when we stop anyway */
728 ieee80211_configure_filter(local);
729 ieee80211_hw_config(local, hw_reconf_flags);
730
731 if (local->monitors == local->open_count)
732 ieee80211_add_virtual_monitor(local);
733 }
734
ieee80211_stop_mbssid(struct ieee80211_sub_if_data * sdata)735 static void ieee80211_stop_mbssid(struct ieee80211_sub_if_data *sdata)
736 {
737 struct ieee80211_sub_if_data *tx_sdata, *non_tx_sdata, *tmp_sdata;
738 struct ieee80211_vif *tx_vif = sdata->vif.mbssid_tx_vif;
739
740 if (!tx_vif)
741 return;
742
743 tx_sdata = vif_to_sdata(tx_vif);
744 sdata->vif.mbssid_tx_vif = NULL;
745
746 list_for_each_entry_safe(non_tx_sdata, tmp_sdata,
747 &tx_sdata->local->interfaces, list) {
748 if (non_tx_sdata != sdata && non_tx_sdata != tx_sdata &&
749 non_tx_sdata->vif.mbssid_tx_vif == tx_vif &&
750 ieee80211_sdata_running(non_tx_sdata)) {
751 non_tx_sdata->vif.mbssid_tx_vif = NULL;
752 dev_close(non_tx_sdata->wdev.netdev);
753 }
754 }
755
756 if (sdata != tx_sdata && ieee80211_sdata_running(tx_sdata)) {
757 tx_sdata->vif.mbssid_tx_vif = NULL;
758 dev_close(tx_sdata->wdev.netdev);
759 }
760 }
761
ieee80211_stop(struct net_device * dev)762 static int ieee80211_stop(struct net_device *dev)
763 {
764 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
765
766 /* close dependent VLAN and MBSSID interfaces before locking wiphy */
767 if (sdata->vif.type == NL80211_IFTYPE_AP) {
768 struct ieee80211_sub_if_data *vlan, *tmpsdata;
769
770 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
771 u.vlan.list)
772 dev_close(vlan->dev);
773
774 ieee80211_stop_mbssid(sdata);
775 }
776
777 wiphy_lock(sdata->local->hw.wiphy);
778 wiphy_work_cancel(sdata->local->hw.wiphy, &sdata->activate_links_work);
779
780 ieee80211_do_stop(sdata, true);
781 wiphy_unlock(sdata->local->hw.wiphy);
782
783 return 0;
784 }
785
ieee80211_set_multicast_list(struct net_device * dev)786 static void ieee80211_set_multicast_list(struct net_device *dev)
787 {
788 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
789 struct ieee80211_local *local = sdata->local;
790 int allmulti, sdata_allmulti;
791
792 allmulti = !!(dev->flags & IFF_ALLMULTI);
793 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
794
795 if (allmulti != sdata_allmulti) {
796 if (dev->flags & IFF_ALLMULTI)
797 atomic_inc(&local->iff_allmultis);
798 else
799 atomic_dec(&local->iff_allmultis);
800 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
801 }
802
803 spin_lock_bh(&local->filter_lock);
804 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
805 spin_unlock_bh(&local->filter_lock);
806 wiphy_work_queue(local->hw.wiphy, &local->reconfig_filter);
807 }
808
809 /*
810 * Called when the netdev is removed or, by the code below, before
811 * the interface type changes.
812 */
ieee80211_teardown_sdata(struct ieee80211_sub_if_data * sdata)813 static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
814 {
815 /* free extra data */
816 ieee80211_free_keys(sdata, false);
817
818 ieee80211_debugfs_remove_netdev(sdata);
819
820 ieee80211_destroy_frag_cache(&sdata->frags);
821
822 if (ieee80211_vif_is_mesh(&sdata->vif))
823 ieee80211_mesh_teardown_sdata(sdata);
824
825 ieee80211_vif_clear_links(sdata);
826 ieee80211_link_stop(&sdata->deflink);
827 }
828
ieee80211_uninit(struct net_device * dev)829 static void ieee80211_uninit(struct net_device *dev)
830 {
831 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
832 }
833
ieee80211_netdev_setup_tc(struct net_device * dev,enum tc_setup_type type,void * type_data)834 static int ieee80211_netdev_setup_tc(struct net_device *dev,
835 enum tc_setup_type type, void *type_data)
836 {
837 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
838 struct ieee80211_local *local = sdata->local;
839
840 return drv_net_setup_tc(local, sdata, dev, type, type_data);
841 }
842
843 static const struct net_device_ops ieee80211_dataif_ops = {
844 .ndo_open = ieee80211_open,
845 .ndo_stop = ieee80211_stop,
846 .ndo_uninit = ieee80211_uninit,
847 .ndo_start_xmit = ieee80211_subif_start_xmit,
848 .ndo_set_rx_mode = ieee80211_set_multicast_list,
849 .ndo_set_mac_address = ieee80211_change_mac,
850 .ndo_setup_tc = ieee80211_netdev_setup_tc,
851 };
852
ieee80211_monitor_select_queue(struct net_device * dev,struct sk_buff * skb,struct net_device * sb_dev)853 static u16 ieee80211_monitor_select_queue(struct net_device *dev,
854 struct sk_buff *skb,
855 struct net_device *sb_dev)
856 {
857 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
858 struct ieee80211_local *local = sdata->local;
859 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
860 struct ieee80211_hdr *hdr;
861 int len_rthdr;
862
863 if (local->hw.queues < IEEE80211_NUM_ACS)
864 return 0;
865
866 /* reset flags and info before parsing radiotap header */
867 memset(info, 0, sizeof(*info));
868
869 if (!ieee80211_parse_tx_radiotap(skb, dev))
870 return 0; /* doesn't matter, frame will be dropped */
871
872 len_rthdr = ieee80211_get_radiotap_len(skb->data);
873 hdr = (struct ieee80211_hdr *)(skb->data + len_rthdr);
874 if (skb->len < len_rthdr + 2 ||
875 skb->len < len_rthdr + ieee80211_hdrlen(hdr->frame_control))
876 return 0; /* doesn't matter, frame will be dropped */
877
878 return ieee80211_select_queue_80211(sdata, skb, hdr);
879 }
880
881 static const struct net_device_ops ieee80211_monitorif_ops = {
882 .ndo_open = ieee80211_open,
883 .ndo_stop = ieee80211_stop,
884 .ndo_uninit = ieee80211_uninit,
885 .ndo_start_xmit = ieee80211_monitor_start_xmit,
886 .ndo_set_rx_mode = ieee80211_set_multicast_list,
887 .ndo_set_mac_address = ieee80211_change_mac,
888 .ndo_select_queue = ieee80211_monitor_select_queue,
889 };
890
ieee80211_netdev_fill_forward_path(struct net_device_path_ctx * ctx,struct net_device_path * path)891 static int ieee80211_netdev_fill_forward_path(struct net_device_path_ctx *ctx,
892 struct net_device_path *path)
893 {
894 struct ieee80211_sub_if_data *sdata;
895 struct ieee80211_local *local;
896 struct sta_info *sta;
897 int ret = -ENOENT;
898
899 sdata = IEEE80211_DEV_TO_SUB_IF(ctx->dev);
900 local = sdata->local;
901
902 if (!local->ops->net_fill_forward_path)
903 return -EOPNOTSUPP;
904
905 rcu_read_lock();
906 switch (sdata->vif.type) {
907 case NL80211_IFTYPE_AP_VLAN:
908 sta = rcu_dereference(sdata->u.vlan.sta);
909 if (sta)
910 break;
911 if (sdata->wdev.use_4addr)
912 goto out;
913 if (is_multicast_ether_addr(ctx->daddr))
914 goto out;
915 sta = sta_info_get_bss(sdata, ctx->daddr);
916 break;
917 case NL80211_IFTYPE_AP:
918 if (is_multicast_ether_addr(ctx->daddr))
919 goto out;
920 sta = sta_info_get(sdata, ctx->daddr);
921 break;
922 case NL80211_IFTYPE_STATION:
923 if (sdata->wdev.wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS) {
924 sta = sta_info_get(sdata, ctx->daddr);
925 if (sta && test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
926 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH))
927 goto out;
928
929 break;
930 }
931 }
932
933 sta = sta_info_get(sdata, sdata->deflink.u.mgd.bssid);
934 break;
935 default:
936 goto out;
937 }
938
939 if (!sta)
940 goto out;
941
942 ret = drv_net_fill_forward_path(local, sdata, &sta->sta, ctx, path);
943 out:
944 rcu_read_unlock();
945
946 return ret;
947 }
948
949 static const struct net_device_ops ieee80211_dataif_8023_ops = {
950 .ndo_open = ieee80211_open,
951 .ndo_stop = ieee80211_stop,
952 .ndo_uninit = ieee80211_uninit,
953 .ndo_start_xmit = ieee80211_subif_start_xmit_8023,
954 .ndo_set_rx_mode = ieee80211_set_multicast_list,
955 .ndo_set_mac_address = ieee80211_change_mac,
956 .ndo_fill_forward_path = ieee80211_netdev_fill_forward_path,
957 .ndo_setup_tc = ieee80211_netdev_setup_tc,
958 };
959
ieee80211_iftype_supports_hdr_offload(enum nl80211_iftype iftype)960 static bool ieee80211_iftype_supports_hdr_offload(enum nl80211_iftype iftype)
961 {
962 switch (iftype) {
963 /* P2P GO and client are mapped to AP/STATION types */
964 case NL80211_IFTYPE_AP:
965 case NL80211_IFTYPE_STATION:
966 return true;
967 default:
968 return false;
969 }
970 }
971
ieee80211_set_sdata_offload_flags(struct ieee80211_sub_if_data * sdata)972 static bool ieee80211_set_sdata_offload_flags(struct ieee80211_sub_if_data *sdata)
973 {
974 struct ieee80211_local *local = sdata->local;
975 u32 flags;
976
977 flags = sdata->vif.offload_flags;
978
979 if (ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD) &&
980 ieee80211_iftype_supports_hdr_offload(sdata->vif.type)) {
981 flags |= IEEE80211_OFFLOAD_ENCAP_ENABLED;
982
983 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_FRAG) &&
984 local->hw.wiphy->frag_threshold != (u32)-1)
985 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
986
987 if (local->monitors)
988 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
989 } else {
990 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
991 }
992
993 if (ieee80211_hw_check(&local->hw, SUPPORTS_RX_DECAP_OFFLOAD) &&
994 ieee80211_iftype_supports_hdr_offload(sdata->vif.type)) {
995 flags |= IEEE80211_OFFLOAD_DECAP_ENABLED;
996
997 if (local->monitors &&
998 !ieee80211_hw_check(&local->hw, SUPPORTS_CONC_MON_RX_DECAP))
999 flags &= ~IEEE80211_OFFLOAD_DECAP_ENABLED;
1000 } else {
1001 flags &= ~IEEE80211_OFFLOAD_DECAP_ENABLED;
1002 }
1003
1004 if (sdata->vif.offload_flags == flags)
1005 return false;
1006
1007 sdata->vif.offload_flags = flags;
1008 ieee80211_check_fast_rx_iface(sdata);
1009 return true;
1010 }
1011
ieee80211_set_vif_encap_ops(struct ieee80211_sub_if_data * sdata)1012 static void ieee80211_set_vif_encap_ops(struct ieee80211_sub_if_data *sdata)
1013 {
1014 struct ieee80211_local *local = sdata->local;
1015 struct ieee80211_sub_if_data *bss = sdata;
1016 bool enabled;
1017
1018 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
1019 if (!sdata->bss)
1020 return;
1021
1022 bss = container_of(sdata->bss, struct ieee80211_sub_if_data, u.ap);
1023 }
1024
1025 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD) ||
1026 !ieee80211_iftype_supports_hdr_offload(bss->vif.type))
1027 return;
1028
1029 enabled = bss->vif.offload_flags & IEEE80211_OFFLOAD_ENCAP_ENABLED;
1030 if (sdata->wdev.use_4addr &&
1031 !(bss->vif.offload_flags & IEEE80211_OFFLOAD_ENCAP_4ADDR))
1032 enabled = false;
1033
1034 sdata->dev->netdev_ops = enabled ? &ieee80211_dataif_8023_ops :
1035 &ieee80211_dataif_ops;
1036 }
1037
ieee80211_recalc_sdata_offload(struct ieee80211_sub_if_data * sdata)1038 static void ieee80211_recalc_sdata_offload(struct ieee80211_sub_if_data *sdata)
1039 {
1040 struct ieee80211_local *local = sdata->local;
1041 struct ieee80211_sub_if_data *vsdata;
1042
1043 if (ieee80211_set_sdata_offload_flags(sdata)) {
1044 drv_update_vif_offload(local, sdata);
1045 ieee80211_set_vif_encap_ops(sdata);
1046 }
1047
1048 list_for_each_entry(vsdata, &local->interfaces, list) {
1049 if (vsdata->vif.type != NL80211_IFTYPE_AP_VLAN ||
1050 vsdata->bss != &sdata->u.ap)
1051 continue;
1052
1053 ieee80211_set_vif_encap_ops(vsdata);
1054 }
1055 }
1056
ieee80211_recalc_offload(struct ieee80211_local * local)1057 void ieee80211_recalc_offload(struct ieee80211_local *local)
1058 {
1059 struct ieee80211_sub_if_data *sdata;
1060
1061 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD))
1062 return;
1063
1064 lockdep_assert_wiphy(local->hw.wiphy);
1065
1066 list_for_each_entry(sdata, &local->interfaces, list) {
1067 if (!ieee80211_sdata_running(sdata))
1068 continue;
1069
1070 ieee80211_recalc_sdata_offload(sdata);
1071 }
1072 }
1073
ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data * sdata,const int offset)1074 void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
1075 const int offset)
1076 {
1077 struct ieee80211_local *local = sdata->local;
1078 u32 flags = sdata->u.mntr.flags;
1079
1080 #define ADJUST(_f, _s) do { \
1081 if (flags & MONITOR_FLAG_##_f) \
1082 local->fif_##_s += offset; \
1083 } while (0)
1084
1085 ADJUST(FCSFAIL, fcsfail);
1086 ADJUST(PLCPFAIL, plcpfail);
1087 ADJUST(CONTROL, control);
1088 ADJUST(CONTROL, pspoll);
1089 ADJUST(OTHER_BSS, other_bss);
1090
1091 #undef ADJUST
1092 }
1093
ieee80211_set_default_queues(struct ieee80211_sub_if_data * sdata)1094 static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
1095 {
1096 struct ieee80211_local *local = sdata->local;
1097 int i;
1098
1099 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
1100 if (ieee80211_hw_check(&local->hw, QUEUE_CONTROL))
1101 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
1102 else if (local->hw.queues >= IEEE80211_NUM_ACS)
1103 sdata->vif.hw_queue[i] = i;
1104 else
1105 sdata->vif.hw_queue[i] = 0;
1106 }
1107 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
1108 }
1109
ieee80211_sdata_init(struct ieee80211_local * local,struct ieee80211_sub_if_data * sdata)1110 static void ieee80211_sdata_init(struct ieee80211_local *local,
1111 struct ieee80211_sub_if_data *sdata)
1112 {
1113 sdata->local = local;
1114
1115 /*
1116 * Initialize the default link, so we can use link_id 0 for non-MLD,
1117 * and that continues to work for non-MLD-aware drivers that use just
1118 * vif.bss_conf instead of vif.link_conf.
1119 *
1120 * Note that we never change this, so if link ID 0 isn't used in an
1121 * MLD connection, we get a separate allocation for it.
1122 */
1123 ieee80211_link_init(sdata, -1, &sdata->deflink, &sdata->vif.bss_conf);
1124 }
1125
ieee80211_add_virtual_monitor(struct ieee80211_local * local)1126 int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
1127 {
1128 struct ieee80211_sub_if_data *sdata;
1129 int ret;
1130
1131 ASSERT_RTNL();
1132 lockdep_assert_wiphy(local->hw.wiphy);
1133
1134 if (local->monitor_sdata)
1135 return 0;
1136
1137 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
1138 if (!sdata)
1139 return -ENOMEM;
1140
1141 /* set up data */
1142 sdata->vif.type = NL80211_IFTYPE_MONITOR;
1143 snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
1144 wiphy_name(local->hw.wiphy));
1145 sdata->wdev.iftype = NL80211_IFTYPE_MONITOR;
1146 sdata->wdev.wiphy = local->hw.wiphy;
1147
1148 ieee80211_sdata_init(local, sdata);
1149
1150 ieee80211_set_default_queues(sdata);
1151
1152 if (ieee80211_hw_check(&local->hw, WANT_MONITOR_VIF)) {
1153 ret = drv_add_interface(local, sdata);
1154 if (WARN_ON(ret)) {
1155 /* ok .. stupid driver, it asked for this! */
1156 kfree(sdata);
1157 return ret;
1158 }
1159 }
1160
1161 set_bit(SDATA_STATE_RUNNING, &sdata->state);
1162
1163 ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR);
1164 if (ret) {
1165 kfree(sdata);
1166 return ret;
1167 }
1168
1169 mutex_lock(&local->iflist_mtx);
1170 rcu_assign_pointer(local->monitor_sdata, sdata);
1171 mutex_unlock(&local->iflist_mtx);
1172
1173 ret = ieee80211_link_use_channel(&sdata->deflink, &local->monitor_chanreq,
1174 IEEE80211_CHANCTX_EXCLUSIVE);
1175 if (ret) {
1176 mutex_lock(&local->iflist_mtx);
1177 RCU_INIT_POINTER(local->monitor_sdata, NULL);
1178 mutex_unlock(&local->iflist_mtx);
1179 synchronize_net();
1180 drv_remove_interface(local, sdata);
1181 kfree(sdata);
1182 return ret;
1183 }
1184
1185 skb_queue_head_init(&sdata->skb_queue);
1186 skb_queue_head_init(&sdata->status_queue);
1187 wiphy_work_init(&sdata->work, ieee80211_iface_work);
1188
1189 return 0;
1190 }
1191
ieee80211_del_virtual_monitor(struct ieee80211_local * local)1192 void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
1193 {
1194 struct ieee80211_sub_if_data *sdata;
1195
1196 ASSERT_RTNL();
1197 lockdep_assert_wiphy(local->hw.wiphy);
1198
1199 mutex_lock(&local->iflist_mtx);
1200
1201 sdata = rcu_dereference_protected(local->monitor_sdata,
1202 lockdep_is_held(&local->iflist_mtx));
1203 if (!sdata) {
1204 mutex_unlock(&local->iflist_mtx);
1205 return;
1206 }
1207
1208 RCU_INIT_POINTER(local->monitor_sdata, NULL);
1209 mutex_unlock(&local->iflist_mtx);
1210
1211 synchronize_net();
1212
1213 ieee80211_link_release_channel(&sdata->deflink);
1214
1215 if (ieee80211_hw_check(&local->hw, WANT_MONITOR_VIF))
1216 drv_remove_interface(local, sdata);
1217
1218 kfree(sdata);
1219 }
1220
1221 /*
1222 * NOTE: Be very careful when changing this function, it must NOT return
1223 * an error on interface type changes that have been pre-checked, so most
1224 * checks should be in ieee80211_check_concurrent_iface.
1225 */
ieee80211_do_open(struct wireless_dev * wdev,bool coming_up)1226 int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
1227 {
1228 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
1229 struct net_device *dev = wdev->netdev;
1230 struct ieee80211_local *local = sdata->local;
1231 u64 changed = 0;
1232 int res;
1233 u32 hw_reconf_flags = 0;
1234
1235 lockdep_assert_wiphy(local->hw.wiphy);
1236
1237 switch (sdata->vif.type) {
1238 case NL80211_IFTYPE_AP_VLAN: {
1239 struct ieee80211_sub_if_data *master;
1240
1241 if (!sdata->bss)
1242 return -ENOLINK;
1243
1244 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
1245
1246 master = container_of(sdata->bss,
1247 struct ieee80211_sub_if_data, u.ap);
1248 sdata->control_port_protocol =
1249 master->control_port_protocol;
1250 sdata->control_port_no_encrypt =
1251 master->control_port_no_encrypt;
1252 sdata->control_port_over_nl80211 =
1253 master->control_port_over_nl80211;
1254 sdata->control_port_no_preauth =
1255 master->control_port_no_preauth;
1256 sdata->vif.cab_queue = master->vif.cab_queue;
1257 memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
1258 sizeof(sdata->vif.hw_queue));
1259 sdata->vif.bss_conf.chanreq = master->vif.bss_conf.chanreq;
1260
1261 sdata->crypto_tx_tailroom_needed_cnt +=
1262 master->crypto_tx_tailroom_needed_cnt;
1263
1264 break;
1265 }
1266 case NL80211_IFTYPE_AP:
1267 sdata->bss = &sdata->u.ap;
1268 break;
1269 case NL80211_IFTYPE_MESH_POINT:
1270 case NL80211_IFTYPE_STATION:
1271 case NL80211_IFTYPE_MONITOR:
1272 case NL80211_IFTYPE_ADHOC:
1273 case NL80211_IFTYPE_P2P_DEVICE:
1274 case NL80211_IFTYPE_OCB:
1275 case NL80211_IFTYPE_NAN:
1276 /* no special treatment */
1277 break;
1278 case NL80211_IFTYPE_UNSPECIFIED:
1279 case NUM_NL80211_IFTYPES:
1280 case NL80211_IFTYPE_P2P_CLIENT:
1281 case NL80211_IFTYPE_P2P_GO:
1282 case NL80211_IFTYPE_WDS:
1283 /* cannot happen */
1284 WARN_ON(1);
1285 break;
1286 }
1287
1288 if (local->open_count == 0) {
1289 /* here we can consider everything in good order (again) */
1290 local->reconfig_failure = false;
1291
1292 res = drv_start(local);
1293 if (res)
1294 goto err_del_bss;
1295 ieee80211_led_radio(local, true);
1296 ieee80211_mod_tpt_led_trig(local,
1297 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
1298 }
1299
1300 /*
1301 * Copy the hopefully now-present MAC address to
1302 * this interface, if it has the special null one.
1303 */
1304 if (dev && is_zero_ether_addr(dev->dev_addr)) {
1305 eth_hw_addr_set(dev, local->hw.wiphy->perm_addr);
1306 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
1307
1308 if (!is_valid_ether_addr(dev->dev_addr)) {
1309 res = -EADDRNOTAVAIL;
1310 goto err_stop;
1311 }
1312 }
1313
1314 switch (sdata->vif.type) {
1315 case NL80211_IFTYPE_AP_VLAN:
1316 /* no need to tell driver, but set carrier and chanctx */
1317 if (sdata->bss->active) {
1318 ieee80211_link_vlan_copy_chanctx(&sdata->deflink);
1319 netif_carrier_on(dev);
1320 ieee80211_set_vif_encap_ops(sdata);
1321 } else {
1322 netif_carrier_off(dev);
1323 }
1324 break;
1325 case NL80211_IFTYPE_MONITOR:
1326 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES) {
1327 local->cooked_mntrs++;
1328 break;
1329 }
1330
1331 if (sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE) {
1332 res = drv_add_interface(local, sdata);
1333 if (res)
1334 goto err_stop;
1335 } else if (local->monitors == 0 && local->open_count == 0) {
1336 res = ieee80211_add_virtual_monitor(local);
1337 if (res)
1338 goto err_stop;
1339 }
1340
1341 /* must be before the call to ieee80211_configure_filter */
1342 local->monitors++;
1343 if (local->monitors == 1) {
1344 local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
1345 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
1346 }
1347
1348 ieee80211_adjust_monitor_flags(sdata, 1);
1349 ieee80211_configure_filter(local);
1350 ieee80211_recalc_offload(local);
1351 ieee80211_recalc_idle(local);
1352
1353 netif_carrier_on(dev);
1354 break;
1355 default:
1356 if (coming_up) {
1357 ieee80211_del_virtual_monitor(local);
1358 ieee80211_set_sdata_offload_flags(sdata);
1359
1360 res = drv_add_interface(local, sdata);
1361 if (res)
1362 goto err_stop;
1363
1364 ieee80211_set_vif_encap_ops(sdata);
1365 res = ieee80211_check_queues(sdata,
1366 ieee80211_vif_type_p2p(&sdata->vif));
1367 if (res)
1368 goto err_del_interface;
1369 }
1370
1371 if (sdata->vif.type == NL80211_IFTYPE_AP) {
1372 local->fif_pspoll++;
1373 local->fif_probe_req++;
1374
1375 ieee80211_configure_filter(local);
1376 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
1377 local->fif_probe_req++;
1378 }
1379
1380 if (sdata->vif.probe_req_reg)
1381 drv_config_iface_filter(local, sdata,
1382 FIF_PROBE_REQ,
1383 FIF_PROBE_REQ);
1384
1385 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE &&
1386 sdata->vif.type != NL80211_IFTYPE_NAN)
1387 changed |= ieee80211_reset_erp_info(sdata);
1388 ieee80211_link_info_change_notify(sdata, &sdata->deflink,
1389 changed);
1390
1391 switch (sdata->vif.type) {
1392 case NL80211_IFTYPE_STATION:
1393 case NL80211_IFTYPE_ADHOC:
1394 case NL80211_IFTYPE_AP:
1395 case NL80211_IFTYPE_MESH_POINT:
1396 case NL80211_IFTYPE_OCB:
1397 netif_carrier_off(dev);
1398 break;
1399 case NL80211_IFTYPE_P2P_DEVICE:
1400 case NL80211_IFTYPE_NAN:
1401 break;
1402 default:
1403 /* not reached */
1404 WARN_ON(1);
1405 }
1406
1407 /*
1408 * Set default queue parameters so drivers don't
1409 * need to initialise the hardware if the hardware
1410 * doesn't start up with sane defaults.
1411 * Enable QoS for anything but station interfaces.
1412 */
1413 ieee80211_set_wmm_default(&sdata->deflink, true,
1414 sdata->vif.type != NL80211_IFTYPE_STATION);
1415 }
1416
1417 switch (sdata->vif.type) {
1418 case NL80211_IFTYPE_P2P_DEVICE:
1419 rcu_assign_pointer(local->p2p_sdata, sdata);
1420 break;
1421 case NL80211_IFTYPE_MONITOR:
1422 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES)
1423 break;
1424 list_add_tail_rcu(&sdata->u.mntr.list, &local->mon_list);
1425 break;
1426 default:
1427 break;
1428 }
1429
1430 /*
1431 * set_multicast_list will be invoked by the networking core
1432 * which will check whether any increments here were done in
1433 * error and sync them down to the hardware as filter flags.
1434 */
1435 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
1436 atomic_inc(&local->iff_allmultis);
1437
1438 if (coming_up)
1439 local->open_count++;
1440
1441 if (local->open_count == 1)
1442 ieee80211_hw_conf_init(local);
1443 else if (hw_reconf_flags)
1444 ieee80211_hw_config(local, hw_reconf_flags);
1445
1446 ieee80211_recalc_ps(local);
1447
1448 set_bit(SDATA_STATE_RUNNING, &sdata->state);
1449
1450 return 0;
1451 err_del_interface:
1452 drv_remove_interface(local, sdata);
1453 err_stop:
1454 if (!local->open_count)
1455 drv_stop(local, false);
1456 err_del_bss:
1457 sdata->bss = NULL;
1458 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
1459 list_del(&sdata->u.vlan.list);
1460 /* might already be clear but that doesn't matter */
1461 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
1462 return res;
1463 }
1464
ieee80211_if_setup(struct net_device * dev)1465 static void ieee80211_if_setup(struct net_device *dev)
1466 {
1467 ether_setup(dev);
1468 dev->priv_flags &= ~IFF_TX_SKB_SHARING;
1469 dev->priv_flags |= IFF_NO_QUEUE;
1470 dev->netdev_ops = &ieee80211_dataif_ops;
1471 dev->needs_free_netdev = true;
1472 }
1473
ieee80211_iface_process_skb(struct ieee80211_local * local,struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)1474 static void ieee80211_iface_process_skb(struct ieee80211_local *local,
1475 struct ieee80211_sub_if_data *sdata,
1476 struct sk_buff *skb)
1477 {
1478 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1479
1480 lockdep_assert_wiphy(local->hw.wiphy);
1481
1482 if (ieee80211_is_action(mgmt->frame_control) &&
1483 mgmt->u.action.category == WLAN_CATEGORY_BACK) {
1484 struct sta_info *sta;
1485 int len = skb->len;
1486
1487 sta = sta_info_get_bss(sdata, mgmt->sa);
1488 if (sta) {
1489 switch (mgmt->u.action.u.addba_req.action_code) {
1490 case WLAN_ACTION_ADDBA_REQ:
1491 ieee80211_process_addba_request(local, sta,
1492 mgmt, len);
1493 break;
1494 case WLAN_ACTION_ADDBA_RESP:
1495 ieee80211_process_addba_resp(local, sta,
1496 mgmt, len);
1497 break;
1498 case WLAN_ACTION_DELBA:
1499 ieee80211_process_delba(sdata, sta,
1500 mgmt, len);
1501 break;
1502 default:
1503 WARN_ON(1);
1504 break;
1505 }
1506 }
1507 } else if (ieee80211_is_action(mgmt->frame_control) &&
1508 mgmt->u.action.category == WLAN_CATEGORY_VHT) {
1509 switch (mgmt->u.action.u.vht_group_notif.action_code) {
1510 case WLAN_VHT_ACTION_OPMODE_NOTIF: {
1511 struct ieee80211_rx_status *status;
1512 enum nl80211_band band;
1513 struct sta_info *sta;
1514 u8 opmode;
1515
1516 status = IEEE80211_SKB_RXCB(skb);
1517 band = status->band;
1518 opmode = mgmt->u.action.u.vht_opmode_notif.operating_mode;
1519
1520 sta = sta_info_get_bss(sdata, mgmt->sa);
1521
1522 if (sta)
1523 ieee80211_vht_handle_opmode(sdata,
1524 &sta->deflink,
1525 opmode, band);
1526
1527 break;
1528 }
1529 case WLAN_VHT_ACTION_GROUPID_MGMT:
1530 ieee80211_process_mu_groups(sdata, &sdata->deflink,
1531 mgmt);
1532 break;
1533 default:
1534 WARN_ON(1);
1535 break;
1536 }
1537 } else if (ieee80211_is_action(mgmt->frame_control) &&
1538 mgmt->u.action.category == WLAN_CATEGORY_S1G) {
1539 switch (mgmt->u.action.u.s1g.action_code) {
1540 case WLAN_S1G_TWT_TEARDOWN:
1541 case WLAN_S1G_TWT_SETUP:
1542 ieee80211_s1g_rx_twt_action(sdata, skb);
1543 break;
1544 default:
1545 break;
1546 }
1547 } else if (ieee80211_is_action(mgmt->frame_control) &&
1548 mgmt->u.action.category == WLAN_CATEGORY_PROTECTED_EHT) {
1549 if (sdata->vif.type == NL80211_IFTYPE_STATION) {
1550 switch (mgmt->u.action.u.ttlm_req.action_code) {
1551 case WLAN_PROTECTED_EHT_ACTION_TTLM_REQ:
1552 ieee80211_process_neg_ttlm_req(sdata, mgmt,
1553 skb->len);
1554 break;
1555 case WLAN_PROTECTED_EHT_ACTION_TTLM_RES:
1556 ieee80211_process_neg_ttlm_res(sdata, mgmt,
1557 skb->len);
1558 break;
1559 default:
1560 break;
1561 }
1562 }
1563 } else if (ieee80211_is_ext(mgmt->frame_control)) {
1564 if (sdata->vif.type == NL80211_IFTYPE_STATION)
1565 ieee80211_sta_rx_queued_ext(sdata, skb);
1566 else
1567 WARN_ON(1);
1568 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
1569 struct ieee80211_hdr *hdr = (void *)mgmt;
1570 struct sta_info *sta;
1571
1572 /*
1573 * So the frame isn't mgmt, but frame_control
1574 * is at the right place anyway, of course, so
1575 * the if statement is correct.
1576 *
1577 * Warn if we have other data frame types here,
1578 * they must not get here.
1579 */
1580 WARN_ON(hdr->frame_control &
1581 cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
1582 WARN_ON(!(hdr->seq_ctrl &
1583 cpu_to_le16(IEEE80211_SCTL_FRAG)));
1584 /*
1585 * This was a fragment of a frame, received while
1586 * a block-ack session was active. That cannot be
1587 * right, so terminate the session.
1588 */
1589 sta = sta_info_get_bss(sdata, mgmt->sa);
1590 if (sta) {
1591 u16 tid = ieee80211_get_tid(hdr);
1592
1593 __ieee80211_stop_rx_ba_session(
1594 sta, tid, WLAN_BACK_RECIPIENT,
1595 WLAN_REASON_QSTA_REQUIRE_SETUP,
1596 true);
1597 }
1598 } else switch (sdata->vif.type) {
1599 case NL80211_IFTYPE_STATION:
1600 ieee80211_sta_rx_queued_mgmt(sdata, skb);
1601 break;
1602 case NL80211_IFTYPE_ADHOC:
1603 ieee80211_ibss_rx_queued_mgmt(sdata, skb);
1604 break;
1605 case NL80211_IFTYPE_MESH_POINT:
1606 if (!ieee80211_vif_is_mesh(&sdata->vif))
1607 break;
1608 ieee80211_mesh_rx_queued_mgmt(sdata, skb);
1609 break;
1610 default:
1611 WARN(1, "frame for unexpected interface type");
1612 break;
1613 }
1614 }
1615
ieee80211_iface_process_status(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)1616 static void ieee80211_iface_process_status(struct ieee80211_sub_if_data *sdata,
1617 struct sk_buff *skb)
1618 {
1619 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1620
1621 if (ieee80211_is_action(mgmt->frame_control) &&
1622 mgmt->u.action.category == WLAN_CATEGORY_S1G) {
1623 switch (mgmt->u.action.u.s1g.action_code) {
1624 case WLAN_S1G_TWT_TEARDOWN:
1625 case WLAN_S1G_TWT_SETUP:
1626 ieee80211_s1g_status_twt_action(sdata, skb);
1627 break;
1628 default:
1629 break;
1630 }
1631 }
1632 }
1633
ieee80211_iface_work(struct wiphy * wiphy,struct wiphy_work * work)1634 static void ieee80211_iface_work(struct wiphy *wiphy, struct wiphy_work *work)
1635 {
1636 struct ieee80211_sub_if_data *sdata =
1637 container_of(work, struct ieee80211_sub_if_data, work);
1638 struct ieee80211_local *local = sdata->local;
1639 struct sk_buff *skb;
1640
1641 if (!ieee80211_sdata_running(sdata))
1642 return;
1643
1644 if (test_bit(SCAN_SW_SCANNING, &local->scanning))
1645 return;
1646
1647 if (!ieee80211_can_run_worker(local))
1648 return;
1649
1650 /* first process frames */
1651 while ((skb = skb_dequeue(&sdata->skb_queue))) {
1652 kcov_remote_start_common(skb_get_kcov_handle(skb));
1653
1654 if (skb->protocol == cpu_to_be16(ETH_P_TDLS))
1655 ieee80211_process_tdls_channel_switch(sdata, skb);
1656 else
1657 ieee80211_iface_process_skb(local, sdata, skb);
1658
1659 kfree_skb(skb);
1660 kcov_remote_stop();
1661 }
1662
1663 /* process status queue */
1664 while ((skb = skb_dequeue(&sdata->status_queue))) {
1665 kcov_remote_start_common(skb_get_kcov_handle(skb));
1666
1667 ieee80211_iface_process_status(sdata, skb);
1668 kfree_skb(skb);
1669
1670 kcov_remote_stop();
1671 }
1672
1673 /* then other type-dependent work */
1674 switch (sdata->vif.type) {
1675 case NL80211_IFTYPE_STATION:
1676 ieee80211_sta_work(sdata);
1677 break;
1678 case NL80211_IFTYPE_ADHOC:
1679 ieee80211_ibss_work(sdata);
1680 break;
1681 case NL80211_IFTYPE_MESH_POINT:
1682 if (!ieee80211_vif_is_mesh(&sdata->vif))
1683 break;
1684 ieee80211_mesh_work(sdata);
1685 break;
1686 case NL80211_IFTYPE_OCB:
1687 ieee80211_ocb_work(sdata);
1688 break;
1689 default:
1690 break;
1691 }
1692 }
1693
ieee80211_activate_links_work(struct wiphy * wiphy,struct wiphy_work * work)1694 static void ieee80211_activate_links_work(struct wiphy *wiphy,
1695 struct wiphy_work *work)
1696 {
1697 struct ieee80211_sub_if_data *sdata =
1698 container_of(work, struct ieee80211_sub_if_data,
1699 activate_links_work);
1700 struct ieee80211_local *local = wiphy_priv(wiphy);
1701
1702 if (local->in_reconfig)
1703 return;
1704
1705 ieee80211_set_active_links(&sdata->vif, sdata->desired_active_links);
1706 sdata->desired_active_links = 0;
1707 }
1708
1709 /*
1710 * Helper function to initialise an interface to a specific type.
1711 */
ieee80211_setup_sdata(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype type)1712 static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
1713 enum nl80211_iftype type)
1714 {
1715 static const u8 bssid_wildcard[ETH_ALEN] = {0xff, 0xff, 0xff,
1716 0xff, 0xff, 0xff};
1717
1718 /* clear type-dependent unions */
1719 memset(&sdata->u, 0, sizeof(sdata->u));
1720 memset(&sdata->deflink.u, 0, sizeof(sdata->deflink.u));
1721
1722 /* and set some type-dependent values */
1723 sdata->vif.type = type;
1724 sdata->vif.p2p = false;
1725 sdata->wdev.iftype = type;
1726
1727 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
1728 sdata->control_port_no_encrypt = false;
1729 sdata->control_port_over_nl80211 = false;
1730 sdata->control_port_no_preauth = false;
1731 sdata->vif.cfg.idle = true;
1732 sdata->vif.bss_conf.txpower = INT_MIN; /* unset */
1733
1734 sdata->noack_map = 0;
1735
1736 /* only monitor/p2p-device differ */
1737 if (sdata->dev) {
1738 sdata->dev->netdev_ops = &ieee80211_dataif_ops;
1739 sdata->dev->type = ARPHRD_ETHER;
1740 }
1741
1742 skb_queue_head_init(&sdata->skb_queue);
1743 skb_queue_head_init(&sdata->status_queue);
1744 wiphy_work_init(&sdata->work, ieee80211_iface_work);
1745 wiphy_work_init(&sdata->activate_links_work,
1746 ieee80211_activate_links_work);
1747
1748 switch (type) {
1749 case NL80211_IFTYPE_P2P_GO:
1750 type = NL80211_IFTYPE_AP;
1751 sdata->vif.type = type;
1752 sdata->vif.p2p = true;
1753 fallthrough;
1754 case NL80211_IFTYPE_AP:
1755 skb_queue_head_init(&sdata->u.ap.ps.bc_buf);
1756 INIT_LIST_HEAD(&sdata->u.ap.vlans);
1757 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1758 break;
1759 case NL80211_IFTYPE_P2P_CLIENT:
1760 type = NL80211_IFTYPE_STATION;
1761 sdata->vif.type = type;
1762 sdata->vif.p2p = true;
1763 fallthrough;
1764 case NL80211_IFTYPE_STATION:
1765 sdata->vif.bss_conf.bssid = sdata->deflink.u.mgd.bssid;
1766 ieee80211_sta_setup_sdata(sdata);
1767 break;
1768 case NL80211_IFTYPE_OCB:
1769 sdata->vif.bss_conf.bssid = bssid_wildcard;
1770 ieee80211_ocb_setup_sdata(sdata);
1771 break;
1772 case NL80211_IFTYPE_ADHOC:
1773 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
1774 ieee80211_ibss_setup_sdata(sdata);
1775 break;
1776 case NL80211_IFTYPE_MESH_POINT:
1777 if (ieee80211_vif_is_mesh(&sdata->vif))
1778 ieee80211_mesh_init_sdata(sdata);
1779 break;
1780 case NL80211_IFTYPE_MONITOR:
1781 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
1782 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
1783 sdata->u.mntr.flags = MONITOR_FLAG_CONTROL |
1784 MONITOR_FLAG_OTHER_BSS;
1785 break;
1786 case NL80211_IFTYPE_NAN:
1787 idr_init(&sdata->u.nan.function_inst_ids);
1788 spin_lock_init(&sdata->u.nan.func_lock);
1789 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1790 break;
1791 case NL80211_IFTYPE_AP_VLAN:
1792 case NL80211_IFTYPE_P2P_DEVICE:
1793 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1794 break;
1795 case NL80211_IFTYPE_UNSPECIFIED:
1796 case NL80211_IFTYPE_WDS:
1797 case NUM_NL80211_IFTYPES:
1798 WARN_ON(1);
1799 break;
1800 }
1801
1802 /* need to do this after the switch so vif.type is correct */
1803 ieee80211_link_setup(&sdata->deflink);
1804
1805 ieee80211_debugfs_recreate_netdev(sdata, false);
1806 }
1807
ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype type)1808 static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1809 enum nl80211_iftype type)
1810 {
1811 struct ieee80211_local *local = sdata->local;
1812 int ret, err;
1813 enum nl80211_iftype internal_type = type;
1814 bool p2p = false;
1815
1816 ASSERT_RTNL();
1817
1818 if (!local->ops->change_interface)
1819 return -EBUSY;
1820
1821 /* for now, don't support changing while links exist */
1822 if (ieee80211_vif_is_mld(&sdata->vif))
1823 return -EBUSY;
1824
1825 switch (sdata->vif.type) {
1826 case NL80211_IFTYPE_AP:
1827 if (!list_empty(&sdata->u.ap.vlans))
1828 return -EBUSY;
1829 break;
1830 case NL80211_IFTYPE_STATION:
1831 case NL80211_IFTYPE_ADHOC:
1832 case NL80211_IFTYPE_OCB:
1833 /*
1834 * Could maybe also all others here?
1835 * Just not sure how that interacts
1836 * with the RX/config path e.g. for
1837 * mesh.
1838 */
1839 break;
1840 default:
1841 return -EBUSY;
1842 }
1843
1844 switch (type) {
1845 case NL80211_IFTYPE_AP:
1846 case NL80211_IFTYPE_STATION:
1847 case NL80211_IFTYPE_ADHOC:
1848 case NL80211_IFTYPE_OCB:
1849 /*
1850 * Could probably support everything
1851 * but here.
1852 */
1853 break;
1854 case NL80211_IFTYPE_P2P_CLIENT:
1855 p2p = true;
1856 internal_type = NL80211_IFTYPE_STATION;
1857 break;
1858 case NL80211_IFTYPE_P2P_GO:
1859 p2p = true;
1860 internal_type = NL80211_IFTYPE_AP;
1861 break;
1862 default:
1863 return -EBUSY;
1864 }
1865
1866 ret = ieee80211_check_concurrent_iface(sdata, internal_type);
1867 if (ret)
1868 return ret;
1869
1870 ieee80211_stop_vif_queues(local, sdata,
1871 IEEE80211_QUEUE_STOP_REASON_IFTYPE_CHANGE);
1872 /* do_stop will synchronize_rcu() first thing */
1873 ieee80211_do_stop(sdata, false);
1874
1875 ieee80211_teardown_sdata(sdata);
1876
1877 ieee80211_set_sdata_offload_flags(sdata);
1878 ret = drv_change_interface(local, sdata, internal_type, p2p);
1879 if (ret)
1880 type = ieee80211_vif_type_p2p(&sdata->vif);
1881
1882 /*
1883 * Ignore return value here, there's not much we can do since
1884 * the driver changed the interface type internally already.
1885 * The warnings will hopefully make driver authors fix it :-)
1886 */
1887 ieee80211_check_queues(sdata, type);
1888
1889 ieee80211_setup_sdata(sdata, type);
1890 ieee80211_set_vif_encap_ops(sdata);
1891
1892 err = ieee80211_do_open(&sdata->wdev, false);
1893 WARN(err, "type change: do_open returned %d", err);
1894
1895 ieee80211_wake_vif_queues(local, sdata,
1896 IEEE80211_QUEUE_STOP_REASON_IFTYPE_CHANGE);
1897 return ret;
1898 }
1899
ieee80211_if_change_type(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype type)1900 int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
1901 enum nl80211_iftype type)
1902 {
1903 int ret;
1904
1905 ASSERT_RTNL();
1906
1907 if (type == ieee80211_vif_type_p2p(&sdata->vif))
1908 return 0;
1909
1910 if (ieee80211_sdata_running(sdata)) {
1911 ret = ieee80211_runtime_change_iftype(sdata, type);
1912 if (ret)
1913 return ret;
1914 } else {
1915 /* Purge and reset type-dependent state. */
1916 ieee80211_teardown_sdata(sdata);
1917 ieee80211_setup_sdata(sdata, type);
1918 }
1919
1920 /* reset some values that shouldn't be kept across type changes */
1921 if (type == NL80211_IFTYPE_STATION)
1922 sdata->u.mgd.use_4addr = false;
1923
1924 return 0;
1925 }
1926
ieee80211_assign_perm_addr(struct ieee80211_local * local,u8 * perm_addr,enum nl80211_iftype type)1927 static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
1928 u8 *perm_addr, enum nl80211_iftype type)
1929 {
1930 struct ieee80211_sub_if_data *sdata;
1931 u64 mask, start, addr, val, inc;
1932 u8 *m;
1933 u8 tmp_addr[ETH_ALEN];
1934 int i;
1935
1936 lockdep_assert_wiphy(local->hw.wiphy);
1937
1938 /* default ... something at least */
1939 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
1940
1941 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1942 local->hw.wiphy->n_addresses <= 1)
1943 return;
1944
1945 switch (type) {
1946 case NL80211_IFTYPE_MONITOR:
1947 /* doesn't matter */
1948 break;
1949 case NL80211_IFTYPE_AP_VLAN:
1950 /* match up with an AP interface */
1951 list_for_each_entry(sdata, &local->interfaces, list) {
1952 if (sdata->vif.type != NL80211_IFTYPE_AP)
1953 continue;
1954 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1955 break;
1956 }
1957 /* keep default if no AP interface present */
1958 break;
1959 case NL80211_IFTYPE_P2P_CLIENT:
1960 case NL80211_IFTYPE_P2P_GO:
1961 if (ieee80211_hw_check(&local->hw, P2P_DEV_ADDR_FOR_INTF)) {
1962 list_for_each_entry(sdata, &local->interfaces, list) {
1963 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
1964 continue;
1965 if (!ieee80211_sdata_running(sdata))
1966 continue;
1967 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1968 return;
1969 }
1970 }
1971 fallthrough;
1972 default:
1973 /* assign a new address if possible -- try n_addresses first */
1974 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1975 bool used = false;
1976
1977 list_for_each_entry(sdata, &local->interfaces, list) {
1978 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr,
1979 sdata->vif.addr)) {
1980 used = true;
1981 break;
1982 }
1983 }
1984
1985 if (!used) {
1986 memcpy(perm_addr,
1987 local->hw.wiphy->addresses[i].addr,
1988 ETH_ALEN);
1989 break;
1990 }
1991 }
1992
1993 /* try mask if available */
1994 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
1995 break;
1996
1997 m = local->hw.wiphy->addr_mask;
1998 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1999 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
2000 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
2001
2002 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
2003 /* not a contiguous mask ... not handled now! */
2004 pr_info("not contiguous\n");
2005 break;
2006 }
2007
2008 /*
2009 * Pick address of existing interface in case user changed
2010 * MAC address manually, default to perm_addr.
2011 */
2012 m = local->hw.wiphy->perm_addr;
2013 list_for_each_entry(sdata, &local->interfaces, list) {
2014 if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
2015 continue;
2016 m = sdata->vif.addr;
2017 break;
2018 }
2019 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
2020 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
2021 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
2022
2023 inc = 1ULL<<__ffs64(mask);
2024 val = (start & mask);
2025 addr = (start & ~mask) | (val & mask);
2026 do {
2027 bool used = false;
2028
2029 tmp_addr[5] = addr >> 0*8;
2030 tmp_addr[4] = addr >> 1*8;
2031 tmp_addr[3] = addr >> 2*8;
2032 tmp_addr[2] = addr >> 3*8;
2033 tmp_addr[1] = addr >> 4*8;
2034 tmp_addr[0] = addr >> 5*8;
2035
2036 val += inc;
2037
2038 list_for_each_entry(sdata, &local->interfaces, list) {
2039 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) {
2040 used = true;
2041 break;
2042 }
2043 }
2044
2045 if (!used) {
2046 memcpy(perm_addr, tmp_addr, ETH_ALEN);
2047 break;
2048 }
2049 addr = (start & ~mask) | (val & mask);
2050 } while (addr != start);
2051
2052 break;
2053 }
2054 }
2055
ieee80211_if_add(struct ieee80211_local * local,const char * name,unsigned char name_assign_type,struct wireless_dev ** new_wdev,enum nl80211_iftype type,struct vif_params * params)2056 int ieee80211_if_add(struct ieee80211_local *local, const char *name,
2057 unsigned char name_assign_type,
2058 struct wireless_dev **new_wdev, enum nl80211_iftype type,
2059 struct vif_params *params)
2060 {
2061 struct net_device *ndev = NULL;
2062 struct ieee80211_sub_if_data *sdata = NULL;
2063 struct txq_info *txqi;
2064 int ret, i;
2065
2066 ASSERT_RTNL();
2067 lockdep_assert_wiphy(local->hw.wiphy);
2068
2069 if (type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN) {
2070 struct wireless_dev *wdev;
2071
2072 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size,
2073 GFP_KERNEL);
2074 if (!sdata)
2075 return -ENOMEM;
2076 wdev = &sdata->wdev;
2077
2078 sdata->dev = NULL;
2079 strscpy(sdata->name, name, IFNAMSIZ);
2080 ieee80211_assign_perm_addr(local, wdev->address, type);
2081 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN);
2082 ether_addr_copy(sdata->vif.bss_conf.addr, sdata->vif.addr);
2083 } else {
2084 int size = ALIGN(sizeof(*sdata) + local->hw.vif_data_size,
2085 sizeof(void *));
2086 int txq_size = 0;
2087
2088 if (type != NL80211_IFTYPE_AP_VLAN &&
2089 (type != NL80211_IFTYPE_MONITOR ||
2090 (params->flags & MONITOR_FLAG_ACTIVE)))
2091 txq_size += sizeof(struct txq_info) +
2092 local->hw.txq_data_size;
2093
2094 ndev = alloc_netdev_mqs(size + txq_size,
2095 name, name_assign_type,
2096 ieee80211_if_setup, 1, 1);
2097 if (!ndev)
2098 return -ENOMEM;
2099
2100 dev_net_set(ndev, wiphy_net(local->hw.wiphy));
2101
2102 ndev->pcpu_stat_type = NETDEV_PCPU_STAT_TSTATS;
2103
2104 ndev->needed_headroom = local->tx_headroom +
2105 4*6 /* four MAC addresses */
2106 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
2107 + 6 /* mesh */
2108 + 8 /* rfc1042/bridge tunnel */
2109 - ETH_HLEN /* ethernet hard_header_len */
2110 + IEEE80211_ENCRYPT_HEADROOM;
2111 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
2112
2113 ret = dev_alloc_name(ndev, ndev->name);
2114 if (ret < 0) {
2115 free_netdev(ndev);
2116 return ret;
2117 }
2118
2119 ieee80211_assign_perm_addr(local, ndev->perm_addr, type);
2120 if (is_valid_ether_addr(params->macaddr))
2121 eth_hw_addr_set(ndev, params->macaddr);
2122 else
2123 eth_hw_addr_set(ndev, ndev->perm_addr);
2124 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
2125
2126 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */
2127 sdata = netdev_priv(ndev);
2128 ndev->ieee80211_ptr = &sdata->wdev;
2129 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
2130 ether_addr_copy(sdata->vif.bss_conf.addr, sdata->vif.addr);
2131 memcpy(sdata->name, ndev->name, IFNAMSIZ);
2132
2133 if (txq_size) {
2134 txqi = netdev_priv(ndev) + size;
2135 ieee80211_txq_init(sdata, NULL, txqi, 0);
2136 }
2137
2138 sdata->dev = ndev;
2139 }
2140
2141 /* initialise type-independent data */
2142 sdata->wdev.wiphy = local->hw.wiphy;
2143
2144 ieee80211_sdata_init(local, sdata);
2145
2146 ieee80211_init_frag_cache(&sdata->frags);
2147
2148 INIT_LIST_HEAD(&sdata->key_list);
2149
2150 wiphy_delayed_work_init(&sdata->dec_tailroom_needed_wk,
2151 ieee80211_delayed_tailroom_dec);
2152
2153 for (i = 0; i < NUM_NL80211_BANDS; i++) {
2154 struct ieee80211_supported_band *sband;
2155 sband = local->hw.wiphy->bands[i];
2156 sdata->rc_rateidx_mask[i] =
2157 sband ? (1 << sband->n_bitrates) - 1 : 0;
2158 if (sband) {
2159 __le16 cap;
2160 u16 *vht_rate_mask;
2161
2162 memcpy(sdata->rc_rateidx_mcs_mask[i],
2163 sband->ht_cap.mcs.rx_mask,
2164 sizeof(sdata->rc_rateidx_mcs_mask[i]));
2165
2166 cap = sband->vht_cap.vht_mcs.rx_mcs_map;
2167 vht_rate_mask = sdata->rc_rateidx_vht_mcs_mask[i];
2168 ieee80211_get_vht_mask_from_cap(cap, vht_rate_mask);
2169 } else {
2170 memset(sdata->rc_rateidx_mcs_mask[i], 0,
2171 sizeof(sdata->rc_rateidx_mcs_mask[i]));
2172 memset(sdata->rc_rateidx_vht_mcs_mask[i], 0,
2173 sizeof(sdata->rc_rateidx_vht_mcs_mask[i]));
2174 }
2175 }
2176
2177 ieee80211_set_default_queues(sdata);
2178
2179 sdata->deflink.ap_power_level = IEEE80211_UNSET_POWER_LEVEL;
2180 sdata->deflink.user_power_level = local->user_power_level;
2181
2182 /* setup type-dependent data */
2183 ieee80211_setup_sdata(sdata, type);
2184
2185 if (ndev) {
2186 ndev->ieee80211_ptr->use_4addr = params->use_4addr;
2187 if (type == NL80211_IFTYPE_STATION)
2188 sdata->u.mgd.use_4addr = params->use_4addr;
2189
2190 ndev->features |= local->hw.netdev_features;
2191 ndev->priv_flags |= IFF_LIVE_ADDR_CHANGE;
2192 ndev->hw_features |= ndev->features &
2193 MAC80211_SUPPORTED_FEATURES_TX;
2194 sdata->vif.netdev_features = local->hw.netdev_features;
2195
2196 netdev_set_default_ethtool_ops(ndev, &ieee80211_ethtool_ops);
2197
2198 /* MTU range is normally 256 - 2304, where the upper limit is
2199 * the maximum MSDU size. Monitor interfaces send and receive
2200 * MPDU and A-MSDU frames which may be much larger so we do
2201 * not impose an upper limit in that case.
2202 */
2203 ndev->min_mtu = 256;
2204 if (type == NL80211_IFTYPE_MONITOR)
2205 ndev->max_mtu = 0;
2206 else
2207 ndev->max_mtu = local->hw.max_mtu;
2208
2209 ret = cfg80211_register_netdevice(ndev);
2210 if (ret) {
2211 free_netdev(ndev);
2212 return ret;
2213 }
2214 }
2215
2216 mutex_lock(&local->iflist_mtx);
2217 list_add_tail_rcu(&sdata->list, &local->interfaces);
2218 mutex_unlock(&local->iflist_mtx);
2219
2220 if (new_wdev)
2221 *new_wdev = &sdata->wdev;
2222
2223 return 0;
2224 }
2225
ieee80211_if_remove(struct ieee80211_sub_if_data * sdata)2226 void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
2227 {
2228 ASSERT_RTNL();
2229 lockdep_assert_wiphy(sdata->local->hw.wiphy);
2230
2231 mutex_lock(&sdata->local->iflist_mtx);
2232 list_del_rcu(&sdata->list);
2233 mutex_unlock(&sdata->local->iflist_mtx);
2234
2235 if (sdata->vif.txq)
2236 ieee80211_txq_purge(sdata->local, to_txq_info(sdata->vif.txq));
2237
2238 synchronize_rcu();
2239
2240 cfg80211_unregister_wdev(&sdata->wdev);
2241
2242 if (!sdata->dev) {
2243 ieee80211_teardown_sdata(sdata);
2244 kfree(sdata);
2245 }
2246 }
2247
ieee80211_sdata_stop(struct ieee80211_sub_if_data * sdata)2248 void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata)
2249 {
2250 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state)))
2251 return;
2252 ieee80211_do_stop(sdata, true);
2253 }
2254
ieee80211_remove_interfaces(struct ieee80211_local * local)2255 void ieee80211_remove_interfaces(struct ieee80211_local *local)
2256 {
2257 struct ieee80211_sub_if_data *sdata, *tmp;
2258 LIST_HEAD(unreg_list);
2259
2260 ASSERT_RTNL();
2261
2262 /* Before destroying the interfaces, make sure they're all stopped so
2263 * that the hardware is stopped. Otherwise, the driver might still be
2264 * iterating the interfaces during the shutdown, e.g. from a worker
2265 * or from RX processing or similar, and if it does so (using atomic
2266 * iteration) while we're manipulating the list, the iteration will
2267 * crash.
2268 *
2269 * After this, the hardware should be stopped and the driver should
2270 * have stopped all of its activities, so that we can do RCU-unaware
2271 * manipulations of the interface list below.
2272 */
2273 cfg80211_shutdown_all_interfaces(local->hw.wiphy);
2274
2275 wiphy_lock(local->hw.wiphy);
2276
2277 WARN(local->open_count, "%s: open count remains %d\n",
2278 wiphy_name(local->hw.wiphy), local->open_count);
2279
2280 mutex_lock(&local->iflist_mtx);
2281 list_splice_init(&local->interfaces, &unreg_list);
2282 mutex_unlock(&local->iflist_mtx);
2283
2284 list_for_each_entry_safe(sdata, tmp, &unreg_list, list) {
2285 bool netdev = sdata->dev;
2286
2287 /*
2288 * Remove IP addresses explicitly, since the notifier will
2289 * skip the callbacks if wdev->registered is false, since
2290 * we can't acquire the wiphy_lock() again there if already
2291 * inside this locked section.
2292 */
2293 sdata->vif.cfg.arp_addr_cnt = 0;
2294 if (sdata->vif.type == NL80211_IFTYPE_STATION &&
2295 sdata->u.mgd.associated)
2296 ieee80211_vif_cfg_change_notify(sdata,
2297 BSS_CHANGED_ARP_FILTER);
2298
2299 list_del(&sdata->list);
2300 cfg80211_unregister_wdev(&sdata->wdev);
2301
2302 if (!netdev)
2303 kfree(sdata);
2304 }
2305 wiphy_unlock(local->hw.wiphy);
2306 }
2307
netdev_notify(struct notifier_block * nb,unsigned long state,void * ptr)2308 static int netdev_notify(struct notifier_block *nb,
2309 unsigned long state, void *ptr)
2310 {
2311 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
2312 struct ieee80211_sub_if_data *sdata;
2313
2314 if (state != NETDEV_CHANGENAME)
2315 return NOTIFY_DONE;
2316
2317 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
2318 return NOTIFY_DONE;
2319
2320 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
2321 return NOTIFY_DONE;
2322
2323 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2324 memcpy(sdata->name, dev->name, IFNAMSIZ);
2325 ieee80211_debugfs_rename_netdev(sdata);
2326
2327 return NOTIFY_OK;
2328 }
2329
2330 static struct notifier_block mac80211_netdev_notifier = {
2331 .notifier_call = netdev_notify,
2332 };
2333
ieee80211_iface_init(void)2334 int ieee80211_iface_init(void)
2335 {
2336 return register_netdevice_notifier(&mac80211_netdev_notifier);
2337 }
2338
ieee80211_iface_exit(void)2339 void ieee80211_iface_exit(void)
2340 {
2341 unregister_netdevice_notifier(&mac80211_netdev_notifier);
2342 }
2343
ieee80211_vif_inc_num_mcast(struct ieee80211_sub_if_data * sdata)2344 void ieee80211_vif_inc_num_mcast(struct ieee80211_sub_if_data *sdata)
2345 {
2346 if (sdata->vif.type == NL80211_IFTYPE_AP)
2347 atomic_inc(&sdata->u.ap.num_mcast_sta);
2348 else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
2349 atomic_inc(&sdata->u.vlan.num_mcast_sta);
2350 }
2351
ieee80211_vif_dec_num_mcast(struct ieee80211_sub_if_data * sdata)2352 void ieee80211_vif_dec_num_mcast(struct ieee80211_sub_if_data *sdata)
2353 {
2354 if (sdata->vif.type == NL80211_IFTYPE_AP)
2355 atomic_dec(&sdata->u.ap.num_mcast_sta);
2356 else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
2357 atomic_dec(&sdata->u.vlan.num_mcast_sta);
2358 }
2359
ieee80211_vif_block_queues_csa(struct ieee80211_sub_if_data * sdata)2360 void ieee80211_vif_block_queues_csa(struct ieee80211_sub_if_data *sdata)
2361 {
2362 struct ieee80211_local *local = sdata->local;
2363
2364 if (ieee80211_hw_check(&local->hw, HANDLES_QUIET_CSA))
2365 return;
2366
2367 ieee80211_stop_vif_queues(local, sdata,
2368 IEEE80211_QUEUE_STOP_REASON_CSA);
2369 sdata->csa_blocked_queues = true;
2370 }
2371
ieee80211_vif_unblock_queues_csa(struct ieee80211_sub_if_data * sdata)2372 void ieee80211_vif_unblock_queues_csa(struct ieee80211_sub_if_data *sdata)
2373 {
2374 struct ieee80211_local *local = sdata->local;
2375
2376 if (sdata->csa_blocked_queues) {
2377 ieee80211_wake_vif_queues(local, sdata,
2378 IEEE80211_QUEUE_STOP_REASON_CSA);
2379 sdata->csa_blocked_queues = false;
2380 }
2381 }
2382