1 /* 2 * Interface handling 3 * 4 * Copyright 2002-2005, Instant802 Networks, Inc. 5 * Copyright 2005-2006, Devicescape Software, Inc. 6 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz> 7 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net> 8 * Copyright 2013-2014 Intel Mobile Communications GmbH 9 * 10 * This program is free software; you can redistribute it and/or modify 11 * it under the terms of the GNU General Public License version 2 as 12 * published by the Free Software Foundation. 13 */ 14 #include <linux/slab.h> 15 #include <linux/kernel.h> 16 #include <linux/if_arp.h> 17 #include <linux/netdevice.h> 18 #include <linux/rtnetlink.h> 19 #include <net/mac80211.h> 20 #include <net/ieee80211_radiotap.h> 21 #include "ieee80211_i.h" 22 #include "sta_info.h" 23 #include "debugfs_netdev.h" 24 #include "mesh.h" 25 #include "led.h" 26 #include "driver-ops.h" 27 #include "wme.h" 28 #include "rate.h" 29 30 /** 31 * DOC: Interface list locking 32 * 33 * The interface list in each struct ieee80211_local is protected 34 * three-fold: 35 * 36 * (1) modifications may only be done under the RTNL 37 * (2) modifications and readers are protected against each other by 38 * the iflist_mtx. 39 * (3) modifications are done in an RCU manner so atomic readers 40 * can traverse the list in RCU-safe blocks. 41 * 42 * As a consequence, reads (traversals) of the list can be protected 43 * by either the RTNL, the iflist_mtx or RCU. 44 */ 45 46 bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata) 47 { 48 struct ieee80211_chanctx_conf *chanctx_conf; 49 int power; 50 51 rcu_read_lock(); 52 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf); 53 if (!chanctx_conf) { 54 rcu_read_unlock(); 55 return false; 56 } 57 58 power = ieee80211_chandef_max_power(&chanctx_conf->def); 59 rcu_read_unlock(); 60 61 if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL) 62 power = min(power, sdata->user_power_level); 63 64 if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL) 65 power = min(power, sdata->ap_power_level); 66 67 if (power != sdata->vif.bss_conf.txpower) { 68 sdata->vif.bss_conf.txpower = power; 69 ieee80211_hw_config(sdata->local, 0); 70 return true; 71 } 72 73 return false; 74 } 75 76 void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata, 77 bool update_bss) 78 { 79 if (__ieee80211_recalc_txpower(sdata) || update_bss) 80 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER); 81 } 82 83 static u32 __ieee80211_idle_off(struct ieee80211_local *local) 84 { 85 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE)) 86 return 0; 87 88 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE; 89 return IEEE80211_CONF_CHANGE_IDLE; 90 } 91 92 static u32 __ieee80211_idle_on(struct ieee80211_local *local) 93 { 94 if (local->hw.conf.flags & IEEE80211_CONF_IDLE) 95 return 0; 96 97 ieee80211_flush_queues(local, NULL, false); 98 99 local->hw.conf.flags |= IEEE80211_CONF_IDLE; 100 return IEEE80211_CONF_CHANGE_IDLE; 101 } 102 103 static u32 __ieee80211_recalc_idle(struct ieee80211_local *local, 104 bool force_active) 105 { 106 bool working, scanning, active; 107 unsigned int led_trig_start = 0, led_trig_stop = 0; 108 109 lockdep_assert_held(&local->mtx); 110 111 active = force_active || 112 !list_empty(&local->chanctx_list) || 113 local->monitors; 114 115 working = !local->ops->remain_on_channel && 116 !list_empty(&local->roc_list); 117 118 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) || 119 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning); 120 121 if (working || scanning) 122 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK; 123 else 124 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK; 125 126 if (active) 127 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED; 128 else 129 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED; 130 131 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop); 132 133 if (working || scanning || active) 134 return __ieee80211_idle_off(local); 135 return __ieee80211_idle_on(local); 136 } 137 138 u32 ieee80211_idle_off(struct ieee80211_local *local) 139 { 140 return __ieee80211_recalc_idle(local, true); 141 } 142 143 void ieee80211_recalc_idle(struct ieee80211_local *local) 144 { 145 u32 change = __ieee80211_recalc_idle(local, false); 146 if (change) 147 ieee80211_hw_config(local, change); 148 } 149 150 static int ieee80211_change_mtu(struct net_device *dev, int new_mtu) 151 { 152 if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN) 153 return -EINVAL; 154 155 dev->mtu = new_mtu; 156 return 0; 157 } 158 159 static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr, 160 bool check_dup) 161 { 162 struct ieee80211_local *local = sdata->local; 163 struct ieee80211_sub_if_data *iter; 164 u64 new, mask, tmp; 165 u8 *m; 166 int ret = 0; 167 168 if (is_zero_ether_addr(local->hw.wiphy->addr_mask)) 169 return 0; 170 171 m = addr; 172 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) | 173 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) | 174 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8); 175 176 m = local->hw.wiphy->addr_mask; 177 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) | 178 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) | 179 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8); 180 181 if (!check_dup) 182 return ret; 183 184 mutex_lock(&local->iflist_mtx); 185 list_for_each_entry(iter, &local->interfaces, list) { 186 if (iter == sdata) 187 continue; 188 189 if (iter->vif.type == NL80211_IFTYPE_MONITOR && 190 !(iter->u.mntr_flags & MONITOR_FLAG_ACTIVE)) 191 continue; 192 193 m = iter->vif.addr; 194 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) | 195 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) | 196 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8); 197 198 if ((new & ~mask) != (tmp & ~mask)) { 199 ret = -EINVAL; 200 break; 201 } 202 } 203 mutex_unlock(&local->iflist_mtx); 204 205 return ret; 206 } 207 208 static int ieee80211_change_mac(struct net_device *dev, void *addr) 209 { 210 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 211 struct sockaddr *sa = addr; 212 bool check_dup = true; 213 int ret; 214 215 if (ieee80211_sdata_running(sdata)) 216 return -EBUSY; 217 218 if (sdata->vif.type == NL80211_IFTYPE_MONITOR && 219 !(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE)) 220 check_dup = false; 221 222 ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup); 223 if (ret) 224 return ret; 225 226 ret = eth_mac_addr(dev, sa); 227 228 if (ret == 0) 229 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN); 230 231 return ret; 232 } 233 234 static inline int identical_mac_addr_allowed(int type1, int type2) 235 { 236 return type1 == NL80211_IFTYPE_MONITOR || 237 type2 == NL80211_IFTYPE_MONITOR || 238 type1 == NL80211_IFTYPE_P2P_DEVICE || 239 type2 == NL80211_IFTYPE_P2P_DEVICE || 240 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) || 241 (type1 == NL80211_IFTYPE_WDS && 242 (type2 == NL80211_IFTYPE_WDS || 243 type2 == NL80211_IFTYPE_AP)) || 244 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) || 245 (type1 == NL80211_IFTYPE_AP_VLAN && 246 (type2 == NL80211_IFTYPE_AP || 247 type2 == NL80211_IFTYPE_AP_VLAN)); 248 } 249 250 static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata, 251 enum nl80211_iftype iftype) 252 { 253 struct ieee80211_local *local = sdata->local; 254 struct ieee80211_sub_if_data *nsdata; 255 int ret; 256 257 ASSERT_RTNL(); 258 259 /* we hold the RTNL here so can safely walk the list */ 260 list_for_each_entry(nsdata, &local->interfaces, list) { 261 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) { 262 /* 263 * Only OCB and monitor mode may coexist 264 */ 265 if ((sdata->vif.type == NL80211_IFTYPE_OCB && 266 nsdata->vif.type != NL80211_IFTYPE_MONITOR) || 267 (sdata->vif.type != NL80211_IFTYPE_MONITOR && 268 nsdata->vif.type == NL80211_IFTYPE_OCB)) 269 return -EBUSY; 270 271 /* 272 * Allow only a single IBSS interface to be up at any 273 * time. This is restricted because beacon distribution 274 * cannot work properly if both are in the same IBSS. 275 * 276 * To remove this restriction we'd have to disallow them 277 * from setting the same SSID on different IBSS interfaces 278 * belonging to the same hardware. Then, however, we're 279 * faced with having to adopt two different TSF timers... 280 */ 281 if (iftype == NL80211_IFTYPE_ADHOC && 282 nsdata->vif.type == NL80211_IFTYPE_ADHOC) 283 return -EBUSY; 284 /* 285 * will not add another interface while any channel 286 * switch is active. 287 */ 288 if (nsdata->vif.csa_active) 289 return -EBUSY; 290 291 /* 292 * The remaining checks are only performed for interfaces 293 * with the same MAC address. 294 */ 295 if (!ether_addr_equal(sdata->vif.addr, 296 nsdata->vif.addr)) 297 continue; 298 299 /* 300 * check whether it may have the same address 301 */ 302 if (!identical_mac_addr_allowed(iftype, 303 nsdata->vif.type)) 304 return -ENOTUNIQ; 305 306 /* 307 * can only add VLANs to enabled APs 308 */ 309 if (iftype == NL80211_IFTYPE_AP_VLAN && 310 nsdata->vif.type == NL80211_IFTYPE_AP) 311 sdata->bss = &nsdata->u.ap; 312 } 313 } 314 315 mutex_lock(&local->chanctx_mtx); 316 ret = ieee80211_check_combinations(sdata, NULL, 0, 0); 317 mutex_unlock(&local->chanctx_mtx); 318 return ret; 319 } 320 321 static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata, 322 enum nl80211_iftype iftype) 323 { 324 int n_queues = sdata->local->hw.queues; 325 int i; 326 327 if (iftype != NL80211_IFTYPE_P2P_DEVICE) { 328 for (i = 0; i < IEEE80211_NUM_ACS; i++) { 329 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] == 330 IEEE80211_INVAL_HW_QUEUE)) 331 return -EINVAL; 332 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >= 333 n_queues)) 334 return -EINVAL; 335 } 336 } 337 338 if ((iftype != NL80211_IFTYPE_AP && 339 iftype != NL80211_IFTYPE_P2P_GO && 340 iftype != NL80211_IFTYPE_MESH_POINT) || 341 !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) { 342 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE; 343 return 0; 344 } 345 346 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE)) 347 return -EINVAL; 348 349 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues)) 350 return -EINVAL; 351 352 return 0; 353 } 354 355 void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata, 356 const int offset) 357 { 358 struct ieee80211_local *local = sdata->local; 359 u32 flags = sdata->u.mntr_flags; 360 361 #define ADJUST(_f, _s) do { \ 362 if (flags & MONITOR_FLAG_##_f) \ 363 local->fif_##_s += offset; \ 364 } while (0) 365 366 ADJUST(FCSFAIL, fcsfail); 367 ADJUST(PLCPFAIL, plcpfail); 368 ADJUST(CONTROL, control); 369 ADJUST(CONTROL, pspoll); 370 ADJUST(OTHER_BSS, other_bss); 371 372 #undef ADJUST 373 } 374 375 static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata) 376 { 377 struct ieee80211_local *local = sdata->local; 378 int i; 379 380 for (i = 0; i < IEEE80211_NUM_ACS; i++) { 381 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL) 382 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE; 383 else if (local->hw.queues >= IEEE80211_NUM_ACS) 384 sdata->vif.hw_queue[i] = i; 385 else 386 sdata->vif.hw_queue[i] = 0; 387 } 388 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE; 389 } 390 391 int ieee80211_add_virtual_monitor(struct ieee80211_local *local) 392 { 393 struct ieee80211_sub_if_data *sdata; 394 int ret; 395 396 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF)) 397 return 0; 398 399 ASSERT_RTNL(); 400 401 if (local->monitor_sdata) 402 return 0; 403 404 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL); 405 if (!sdata) 406 return -ENOMEM; 407 408 /* set up data */ 409 sdata->local = local; 410 sdata->vif.type = NL80211_IFTYPE_MONITOR; 411 snprintf(sdata->name, IFNAMSIZ, "%s-monitor", 412 wiphy_name(local->hw.wiphy)); 413 sdata->wdev.iftype = NL80211_IFTYPE_MONITOR; 414 415 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM; 416 417 ieee80211_set_default_queues(sdata); 418 419 ret = drv_add_interface(local, sdata); 420 if (WARN_ON(ret)) { 421 /* ok .. stupid driver, it asked for this! */ 422 kfree(sdata); 423 return ret; 424 } 425 426 ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR); 427 if (ret) { 428 kfree(sdata); 429 return ret; 430 } 431 432 mutex_lock(&local->iflist_mtx); 433 rcu_assign_pointer(local->monitor_sdata, sdata); 434 mutex_unlock(&local->iflist_mtx); 435 436 mutex_lock(&local->mtx); 437 ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef, 438 IEEE80211_CHANCTX_EXCLUSIVE); 439 mutex_unlock(&local->mtx); 440 if (ret) { 441 mutex_lock(&local->iflist_mtx); 442 RCU_INIT_POINTER(local->monitor_sdata, NULL); 443 mutex_unlock(&local->iflist_mtx); 444 synchronize_net(); 445 drv_remove_interface(local, sdata); 446 kfree(sdata); 447 return ret; 448 } 449 450 return 0; 451 } 452 453 void ieee80211_del_virtual_monitor(struct ieee80211_local *local) 454 { 455 struct ieee80211_sub_if_data *sdata; 456 457 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF)) 458 return; 459 460 ASSERT_RTNL(); 461 462 mutex_lock(&local->iflist_mtx); 463 464 sdata = rcu_dereference_protected(local->monitor_sdata, 465 lockdep_is_held(&local->iflist_mtx)); 466 if (!sdata) { 467 mutex_unlock(&local->iflist_mtx); 468 return; 469 } 470 471 RCU_INIT_POINTER(local->monitor_sdata, NULL); 472 mutex_unlock(&local->iflist_mtx); 473 474 synchronize_net(); 475 476 mutex_lock(&local->mtx); 477 ieee80211_vif_release_channel(sdata); 478 mutex_unlock(&local->mtx); 479 480 drv_remove_interface(local, sdata); 481 482 kfree(sdata); 483 } 484 485 /* 486 * NOTE: Be very careful when changing this function, it must NOT return 487 * an error on interface type changes that have been pre-checked, so most 488 * checks should be in ieee80211_check_concurrent_iface. 489 */ 490 int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up) 491 { 492 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev); 493 struct net_device *dev = wdev->netdev; 494 struct ieee80211_local *local = sdata->local; 495 struct sta_info *sta; 496 u32 changed = 0; 497 int res; 498 u32 hw_reconf_flags = 0; 499 500 switch (sdata->vif.type) { 501 case NL80211_IFTYPE_WDS: 502 if (!is_valid_ether_addr(sdata->u.wds.remote_addr)) 503 return -ENOLINK; 504 break; 505 case NL80211_IFTYPE_AP_VLAN: { 506 struct ieee80211_sub_if_data *master; 507 508 if (!sdata->bss) 509 return -ENOLINK; 510 511 mutex_lock(&local->mtx); 512 list_add(&sdata->u.vlan.list, &sdata->bss->vlans); 513 mutex_unlock(&local->mtx); 514 515 master = container_of(sdata->bss, 516 struct ieee80211_sub_if_data, u.ap); 517 sdata->control_port_protocol = 518 master->control_port_protocol; 519 sdata->control_port_no_encrypt = 520 master->control_port_no_encrypt; 521 sdata->vif.cab_queue = master->vif.cab_queue; 522 memcpy(sdata->vif.hw_queue, master->vif.hw_queue, 523 sizeof(sdata->vif.hw_queue)); 524 sdata->vif.bss_conf.chandef = master->vif.bss_conf.chandef; 525 break; 526 } 527 case NL80211_IFTYPE_AP: 528 sdata->bss = &sdata->u.ap; 529 break; 530 case NL80211_IFTYPE_MESH_POINT: 531 case NL80211_IFTYPE_STATION: 532 case NL80211_IFTYPE_MONITOR: 533 case NL80211_IFTYPE_ADHOC: 534 case NL80211_IFTYPE_P2P_DEVICE: 535 case NL80211_IFTYPE_OCB: 536 /* no special treatment */ 537 break; 538 case NL80211_IFTYPE_UNSPECIFIED: 539 case NUM_NL80211_IFTYPES: 540 case NL80211_IFTYPE_P2P_CLIENT: 541 case NL80211_IFTYPE_P2P_GO: 542 /* cannot happen */ 543 WARN_ON(1); 544 break; 545 } 546 547 if (local->open_count == 0) { 548 res = drv_start(local); 549 if (res) 550 goto err_del_bss; 551 /* we're brought up, everything changes */ 552 hw_reconf_flags = ~0; 553 ieee80211_led_radio(local, true); 554 ieee80211_mod_tpt_led_trig(local, 555 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0); 556 } 557 558 /* 559 * Copy the hopefully now-present MAC address to 560 * this interface, if it has the special null one. 561 */ 562 if (dev && is_zero_ether_addr(dev->dev_addr)) { 563 memcpy(dev->dev_addr, 564 local->hw.wiphy->perm_addr, 565 ETH_ALEN); 566 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN); 567 568 if (!is_valid_ether_addr(dev->dev_addr)) { 569 res = -EADDRNOTAVAIL; 570 goto err_stop; 571 } 572 } 573 574 switch (sdata->vif.type) { 575 case NL80211_IFTYPE_AP_VLAN: 576 /* no need to tell driver, but set carrier and chanctx */ 577 if (rtnl_dereference(sdata->bss->beacon)) { 578 ieee80211_vif_vlan_copy_chanctx(sdata); 579 netif_carrier_on(dev); 580 } else { 581 netif_carrier_off(dev); 582 } 583 break; 584 case NL80211_IFTYPE_MONITOR: 585 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) { 586 local->cooked_mntrs++; 587 break; 588 } 589 590 if (sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE) { 591 res = drv_add_interface(local, sdata); 592 if (res) 593 goto err_stop; 594 } else if (local->monitors == 0 && local->open_count == 0) { 595 res = ieee80211_add_virtual_monitor(local); 596 if (res) 597 goto err_stop; 598 } 599 600 /* must be before the call to ieee80211_configure_filter */ 601 local->monitors++; 602 if (local->monitors == 1) { 603 local->hw.conf.flags |= IEEE80211_CONF_MONITOR; 604 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR; 605 } 606 607 ieee80211_adjust_monitor_flags(sdata, 1); 608 ieee80211_configure_filter(local); 609 mutex_lock(&local->mtx); 610 ieee80211_recalc_idle(local); 611 mutex_unlock(&local->mtx); 612 613 netif_carrier_on(dev); 614 break; 615 default: 616 if (coming_up) { 617 ieee80211_del_virtual_monitor(local); 618 619 res = drv_add_interface(local, sdata); 620 if (res) 621 goto err_stop; 622 res = ieee80211_check_queues(sdata, 623 ieee80211_vif_type_p2p(&sdata->vif)); 624 if (res) 625 goto err_del_interface; 626 } 627 628 if (sdata->vif.type == NL80211_IFTYPE_AP) { 629 local->fif_pspoll++; 630 local->fif_probe_req++; 631 632 ieee80211_configure_filter(local); 633 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) { 634 local->fif_probe_req++; 635 } 636 637 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) 638 changed |= ieee80211_reset_erp_info(sdata); 639 ieee80211_bss_info_change_notify(sdata, changed); 640 641 switch (sdata->vif.type) { 642 case NL80211_IFTYPE_STATION: 643 case NL80211_IFTYPE_ADHOC: 644 case NL80211_IFTYPE_AP: 645 case NL80211_IFTYPE_MESH_POINT: 646 case NL80211_IFTYPE_OCB: 647 netif_carrier_off(dev); 648 break; 649 case NL80211_IFTYPE_WDS: 650 case NL80211_IFTYPE_P2P_DEVICE: 651 break; 652 default: 653 /* not reached */ 654 WARN_ON(1); 655 } 656 657 /* 658 * set default queue parameters so drivers don't 659 * need to initialise the hardware if the hardware 660 * doesn't start up with sane defaults 661 */ 662 ieee80211_set_wmm_default(sdata, true); 663 } 664 665 set_bit(SDATA_STATE_RUNNING, &sdata->state); 666 667 if (sdata->vif.type == NL80211_IFTYPE_WDS) { 668 /* Create STA entry for the WDS peer */ 669 sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr, 670 GFP_KERNEL); 671 if (!sta) { 672 res = -ENOMEM; 673 goto err_del_interface; 674 } 675 676 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH); 677 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC); 678 sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED); 679 680 res = sta_info_insert(sta); 681 if (res) { 682 /* STA has been freed */ 683 goto err_del_interface; 684 } 685 686 rate_control_rate_init(sta); 687 netif_carrier_on(dev); 688 } else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) { 689 rcu_assign_pointer(local->p2p_sdata, sdata); 690 } 691 692 /* 693 * set_multicast_list will be invoked by the networking core 694 * which will check whether any increments here were done in 695 * error and sync them down to the hardware as filter flags. 696 */ 697 if (sdata->flags & IEEE80211_SDATA_ALLMULTI) 698 atomic_inc(&local->iff_allmultis); 699 700 if (sdata->flags & IEEE80211_SDATA_PROMISC) 701 atomic_inc(&local->iff_promiscs); 702 703 if (coming_up) 704 local->open_count++; 705 706 if (hw_reconf_flags) 707 ieee80211_hw_config(local, hw_reconf_flags); 708 709 ieee80211_recalc_ps(local, -1); 710 711 if (sdata->vif.type == NL80211_IFTYPE_MONITOR || 712 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) { 713 /* XXX: for AP_VLAN, actually track AP queues */ 714 netif_tx_start_all_queues(dev); 715 } else if (dev) { 716 unsigned long flags; 717 int n_acs = IEEE80211_NUM_ACS; 718 int ac; 719 720 if (local->hw.queues < IEEE80211_NUM_ACS) 721 n_acs = 1; 722 723 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 724 if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE || 725 (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 && 726 skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) { 727 for (ac = 0; ac < n_acs; ac++) { 728 int ac_queue = sdata->vif.hw_queue[ac]; 729 730 if (local->queue_stop_reasons[ac_queue] == 0 && 731 skb_queue_empty(&local->pending[ac_queue])) 732 netif_start_subqueue(dev, ac); 733 } 734 } 735 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 736 } 737 738 return 0; 739 err_del_interface: 740 drv_remove_interface(local, sdata); 741 err_stop: 742 if (!local->open_count) 743 drv_stop(local); 744 err_del_bss: 745 sdata->bss = NULL; 746 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) { 747 mutex_lock(&local->mtx); 748 list_del(&sdata->u.vlan.list); 749 mutex_unlock(&local->mtx); 750 } 751 /* might already be clear but that doesn't matter */ 752 clear_bit(SDATA_STATE_RUNNING, &sdata->state); 753 return res; 754 } 755 756 static int ieee80211_open(struct net_device *dev) 757 { 758 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 759 int err; 760 761 /* fail early if user set an invalid address */ 762 if (!is_valid_ether_addr(dev->dev_addr)) 763 return -EADDRNOTAVAIL; 764 765 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type); 766 if (err) 767 return err; 768 769 return ieee80211_do_open(&sdata->wdev, true); 770 } 771 772 static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata, 773 bool going_down) 774 { 775 struct ieee80211_local *local = sdata->local; 776 unsigned long flags; 777 struct sk_buff *skb, *tmp; 778 u32 hw_reconf_flags = 0; 779 int i, flushed; 780 struct ps_data *ps; 781 struct cfg80211_chan_def chandef; 782 bool cancel_scan; 783 784 clear_bit(SDATA_STATE_RUNNING, &sdata->state); 785 786 cancel_scan = rcu_access_pointer(local->scan_sdata) == sdata; 787 if (cancel_scan) 788 ieee80211_scan_cancel(local); 789 790 /* 791 * Stop TX on this interface first. 792 */ 793 if (sdata->dev) 794 netif_tx_stop_all_queues(sdata->dev); 795 796 ieee80211_roc_purge(local, sdata); 797 798 switch (sdata->vif.type) { 799 case NL80211_IFTYPE_STATION: 800 ieee80211_mgd_stop(sdata); 801 break; 802 case NL80211_IFTYPE_ADHOC: 803 ieee80211_ibss_stop(sdata); 804 break; 805 case NL80211_IFTYPE_AP: 806 cancel_work_sync(&sdata->u.ap.request_smps_work); 807 break; 808 default: 809 break; 810 } 811 812 /* 813 * Remove all stations associated with this interface. 814 * 815 * This must be done before calling ops->remove_interface() 816 * because otherwise we can later invoke ops->sta_notify() 817 * whenever the STAs are removed, and that invalidates driver 818 * assumptions about always getting a vif pointer that is valid 819 * (because if we remove a STA after ops->remove_interface() 820 * the driver will have removed the vif info already!) 821 * 822 * This is relevant only in WDS mode, in all other modes we've 823 * already removed all stations when disconnecting or similar, 824 * so warn otherwise. 825 */ 826 flushed = sta_info_flush(sdata); 827 WARN_ON_ONCE((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) || 828 (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1)); 829 830 /* don't count this interface for promisc/allmulti while it is down */ 831 if (sdata->flags & IEEE80211_SDATA_ALLMULTI) 832 atomic_dec(&local->iff_allmultis); 833 834 if (sdata->flags & IEEE80211_SDATA_PROMISC) 835 atomic_dec(&local->iff_promiscs); 836 837 if (sdata->vif.type == NL80211_IFTYPE_AP) { 838 local->fif_pspoll--; 839 local->fif_probe_req--; 840 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) { 841 local->fif_probe_req--; 842 } 843 844 if (sdata->dev) { 845 netif_addr_lock_bh(sdata->dev); 846 spin_lock_bh(&local->filter_lock); 847 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc, 848 sdata->dev->addr_len); 849 spin_unlock_bh(&local->filter_lock); 850 netif_addr_unlock_bh(sdata->dev); 851 } 852 853 del_timer_sync(&local->dynamic_ps_timer); 854 cancel_work_sync(&local->dynamic_ps_enable_work); 855 856 cancel_work_sync(&sdata->recalc_smps); 857 sdata_lock(sdata); 858 mutex_lock(&local->mtx); 859 sdata->vif.csa_active = false; 860 if (sdata->vif.type == NL80211_IFTYPE_STATION) 861 sdata->u.mgd.csa_waiting_bcn = false; 862 if (sdata->csa_block_tx) { 863 ieee80211_wake_vif_queues(local, sdata, 864 IEEE80211_QUEUE_STOP_REASON_CSA); 865 sdata->csa_block_tx = false; 866 } 867 mutex_unlock(&local->mtx); 868 sdata_unlock(sdata); 869 870 cancel_work_sync(&sdata->csa_finalize_work); 871 872 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work); 873 874 if (sdata->wdev.cac_started) { 875 chandef = sdata->vif.bss_conf.chandef; 876 WARN_ON(local->suspended); 877 mutex_lock(&local->mtx); 878 ieee80211_vif_release_channel(sdata); 879 mutex_unlock(&local->mtx); 880 cfg80211_cac_event(sdata->dev, &chandef, 881 NL80211_RADAR_CAC_ABORTED, 882 GFP_KERNEL); 883 } 884 885 /* APs need special treatment */ 886 if (sdata->vif.type == NL80211_IFTYPE_AP) { 887 struct ieee80211_sub_if_data *vlan, *tmpsdata; 888 889 /* down all dependent devices, that is VLANs */ 890 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans, 891 u.vlan.list) 892 dev_close(vlan->dev); 893 WARN_ON(!list_empty(&sdata->u.ap.vlans)); 894 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) { 895 /* remove all packets in parent bc_buf pointing to this dev */ 896 ps = &sdata->bss->ps; 897 898 spin_lock_irqsave(&ps->bc_buf.lock, flags); 899 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) { 900 if (skb->dev == sdata->dev) { 901 __skb_unlink(skb, &ps->bc_buf); 902 local->total_ps_buffered--; 903 ieee80211_free_txskb(&local->hw, skb); 904 } 905 } 906 spin_unlock_irqrestore(&ps->bc_buf.lock, flags); 907 } 908 909 if (going_down) 910 local->open_count--; 911 912 switch (sdata->vif.type) { 913 case NL80211_IFTYPE_AP_VLAN: 914 mutex_lock(&local->mtx); 915 list_del(&sdata->u.vlan.list); 916 mutex_unlock(&local->mtx); 917 RCU_INIT_POINTER(sdata->vif.chanctx_conf, NULL); 918 /* see comment in the default case below */ 919 ieee80211_free_keys(sdata, true); 920 /* no need to tell driver */ 921 break; 922 case NL80211_IFTYPE_MONITOR: 923 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) { 924 local->cooked_mntrs--; 925 break; 926 } 927 928 local->monitors--; 929 if (local->monitors == 0) { 930 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR; 931 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR; 932 } 933 934 ieee80211_adjust_monitor_flags(sdata, -1); 935 break; 936 case NL80211_IFTYPE_P2P_DEVICE: 937 /* relies on synchronize_rcu() below */ 938 RCU_INIT_POINTER(local->p2p_sdata, NULL); 939 /* fall through */ 940 default: 941 cancel_work_sync(&sdata->work); 942 /* 943 * When we get here, the interface is marked down. 944 * Free the remaining keys, if there are any 945 * (which can happen in AP mode if userspace sets 946 * keys before the interface is operating, and maybe 947 * also in WDS mode) 948 * 949 * Force the key freeing to always synchronize_net() 950 * to wait for the RX path in case it is using this 951 * interface enqueuing frames at this very time on 952 * another CPU. 953 */ 954 ieee80211_free_keys(sdata, true); 955 skb_queue_purge(&sdata->skb_queue); 956 } 957 958 sdata->bss = NULL; 959 960 spin_lock_irqsave(&local->queue_stop_reason_lock, flags); 961 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) { 962 skb_queue_walk_safe(&local->pending[i], skb, tmp) { 963 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 964 if (info->control.vif == &sdata->vif) { 965 __skb_unlink(skb, &local->pending[i]); 966 ieee80211_free_txskb(&local->hw, skb); 967 } 968 } 969 } 970 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags); 971 972 if (local->open_count == 0) 973 ieee80211_clear_tx_pending(local); 974 975 /* 976 * If the interface goes down while suspended, presumably because 977 * the device was unplugged and that happens before our resume, 978 * then the driver is already unconfigured and the remainder of 979 * this function isn't needed. 980 * XXX: what about WoWLAN? If the device has software state, e.g. 981 * memory allocated, it might expect teardown commands from 982 * mac80211 here? 983 */ 984 if (local->suspended) { 985 WARN_ON(local->wowlan); 986 WARN_ON(rtnl_dereference(local->monitor_sdata)); 987 return; 988 } 989 990 switch (sdata->vif.type) { 991 case NL80211_IFTYPE_AP_VLAN: 992 break; 993 case NL80211_IFTYPE_MONITOR: 994 if (local->monitors == 0) 995 ieee80211_del_virtual_monitor(local); 996 997 mutex_lock(&local->mtx); 998 ieee80211_recalc_idle(local); 999 mutex_unlock(&local->mtx); 1000 1001 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE)) 1002 break; 1003 1004 /* fall through */ 1005 default: 1006 if (going_down) 1007 drv_remove_interface(local, sdata); 1008 } 1009 1010 ieee80211_recalc_ps(local, -1); 1011 1012 if (cancel_scan) 1013 flush_delayed_work(&local->scan_work); 1014 1015 if (local->open_count == 0) { 1016 ieee80211_stop_device(local); 1017 1018 /* no reconfiguring after stop! */ 1019 return; 1020 } 1021 1022 /* do after stop to avoid reconfiguring when we stop anyway */ 1023 ieee80211_configure_filter(local); 1024 ieee80211_hw_config(local, hw_reconf_flags); 1025 1026 if (local->monitors == local->open_count) 1027 ieee80211_add_virtual_monitor(local); 1028 } 1029 1030 static int ieee80211_stop(struct net_device *dev) 1031 { 1032 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1033 1034 ieee80211_do_stop(sdata, true); 1035 1036 return 0; 1037 } 1038 1039 static void ieee80211_set_multicast_list(struct net_device *dev) 1040 { 1041 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1042 struct ieee80211_local *local = sdata->local; 1043 int allmulti, promisc, sdata_allmulti, sdata_promisc; 1044 1045 allmulti = !!(dev->flags & IFF_ALLMULTI); 1046 promisc = !!(dev->flags & IFF_PROMISC); 1047 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI); 1048 sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC); 1049 1050 if (allmulti != sdata_allmulti) { 1051 if (dev->flags & IFF_ALLMULTI) 1052 atomic_inc(&local->iff_allmultis); 1053 else 1054 atomic_dec(&local->iff_allmultis); 1055 sdata->flags ^= IEEE80211_SDATA_ALLMULTI; 1056 } 1057 1058 if (promisc != sdata_promisc) { 1059 if (dev->flags & IFF_PROMISC) 1060 atomic_inc(&local->iff_promiscs); 1061 else 1062 atomic_dec(&local->iff_promiscs); 1063 sdata->flags ^= IEEE80211_SDATA_PROMISC; 1064 } 1065 spin_lock_bh(&local->filter_lock); 1066 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len); 1067 spin_unlock_bh(&local->filter_lock); 1068 ieee80211_queue_work(&local->hw, &local->reconfig_filter); 1069 } 1070 1071 /* 1072 * Called when the netdev is removed or, by the code below, before 1073 * the interface type changes. 1074 */ 1075 static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata) 1076 { 1077 int i; 1078 1079 /* free extra data */ 1080 ieee80211_free_keys(sdata, false); 1081 1082 ieee80211_debugfs_remove_netdev(sdata); 1083 1084 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++) 1085 __skb_queue_purge(&sdata->fragments[i].skb_list); 1086 sdata->fragment_next = 0; 1087 1088 if (ieee80211_vif_is_mesh(&sdata->vif)) 1089 mesh_rmc_free(sdata); 1090 } 1091 1092 static void ieee80211_uninit(struct net_device *dev) 1093 { 1094 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev)); 1095 } 1096 1097 static u16 ieee80211_netdev_select_queue(struct net_device *dev, 1098 struct sk_buff *skb, 1099 void *accel_priv, 1100 select_queue_fallback_t fallback) 1101 { 1102 return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb); 1103 } 1104 1105 static const struct net_device_ops ieee80211_dataif_ops = { 1106 .ndo_open = ieee80211_open, 1107 .ndo_stop = ieee80211_stop, 1108 .ndo_uninit = ieee80211_uninit, 1109 .ndo_start_xmit = ieee80211_subif_start_xmit, 1110 .ndo_set_rx_mode = ieee80211_set_multicast_list, 1111 .ndo_change_mtu = ieee80211_change_mtu, 1112 .ndo_set_mac_address = ieee80211_change_mac, 1113 .ndo_select_queue = ieee80211_netdev_select_queue, 1114 }; 1115 1116 static u16 ieee80211_monitor_select_queue(struct net_device *dev, 1117 struct sk_buff *skb, 1118 void *accel_priv, 1119 select_queue_fallback_t fallback) 1120 { 1121 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1122 struct ieee80211_local *local = sdata->local; 1123 struct ieee80211_hdr *hdr; 1124 struct ieee80211_radiotap_header *rtap = (void *)skb->data; 1125 1126 if (local->hw.queues < IEEE80211_NUM_ACS) 1127 return 0; 1128 1129 if (skb->len < 4 || 1130 skb->len < le16_to_cpu(rtap->it_len) + 2 /* frame control */) 1131 return 0; /* doesn't matter, frame will be dropped */ 1132 1133 hdr = (void *)((u8 *)skb->data + le16_to_cpu(rtap->it_len)); 1134 1135 return ieee80211_select_queue_80211(sdata, skb, hdr); 1136 } 1137 1138 static const struct net_device_ops ieee80211_monitorif_ops = { 1139 .ndo_open = ieee80211_open, 1140 .ndo_stop = ieee80211_stop, 1141 .ndo_uninit = ieee80211_uninit, 1142 .ndo_start_xmit = ieee80211_monitor_start_xmit, 1143 .ndo_set_rx_mode = ieee80211_set_multicast_list, 1144 .ndo_change_mtu = ieee80211_change_mtu, 1145 .ndo_set_mac_address = ieee80211_change_mac, 1146 .ndo_select_queue = ieee80211_monitor_select_queue, 1147 }; 1148 1149 static void ieee80211_if_setup(struct net_device *dev) 1150 { 1151 ether_setup(dev); 1152 dev->priv_flags &= ~IFF_TX_SKB_SHARING; 1153 dev->netdev_ops = &ieee80211_dataif_ops; 1154 dev->destructor = free_netdev; 1155 } 1156 1157 static void ieee80211_iface_work(struct work_struct *work) 1158 { 1159 struct ieee80211_sub_if_data *sdata = 1160 container_of(work, struct ieee80211_sub_if_data, work); 1161 struct ieee80211_local *local = sdata->local; 1162 struct sk_buff *skb; 1163 struct sta_info *sta; 1164 struct ieee80211_ra_tid *ra_tid; 1165 struct ieee80211_rx_agg *rx_agg; 1166 1167 if (!ieee80211_sdata_running(sdata)) 1168 return; 1169 1170 if (local->scanning) 1171 return; 1172 1173 if (!ieee80211_can_run_worker(local)) 1174 return; 1175 1176 /* first process frames */ 1177 while ((skb = skb_dequeue(&sdata->skb_queue))) { 1178 struct ieee80211_mgmt *mgmt = (void *)skb->data; 1179 1180 if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_START) { 1181 ra_tid = (void *)&skb->cb; 1182 ieee80211_start_tx_ba_cb(&sdata->vif, ra_tid->ra, 1183 ra_tid->tid); 1184 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_STOP) { 1185 ra_tid = (void *)&skb->cb; 1186 ieee80211_stop_tx_ba_cb(&sdata->vif, ra_tid->ra, 1187 ra_tid->tid); 1188 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_START) { 1189 rx_agg = (void *)&skb->cb; 1190 mutex_lock(&local->sta_mtx); 1191 sta = sta_info_get_bss(sdata, rx_agg->addr); 1192 if (sta) 1193 __ieee80211_start_rx_ba_session(sta, 1194 0, 0, 0, 1, rx_agg->tid, 1195 IEEE80211_MAX_AMPDU_BUF, 1196 false, true); 1197 mutex_unlock(&local->sta_mtx); 1198 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_STOP) { 1199 rx_agg = (void *)&skb->cb; 1200 mutex_lock(&local->sta_mtx); 1201 sta = sta_info_get_bss(sdata, rx_agg->addr); 1202 if (sta) 1203 __ieee80211_stop_rx_ba_session(sta, 1204 rx_agg->tid, 1205 WLAN_BACK_RECIPIENT, 0, 1206 false); 1207 mutex_unlock(&local->sta_mtx); 1208 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_TDLS_CHSW) { 1209 ieee80211_process_tdls_channel_switch(sdata, skb); 1210 } else if (ieee80211_is_action(mgmt->frame_control) && 1211 mgmt->u.action.category == WLAN_CATEGORY_BACK) { 1212 int len = skb->len; 1213 1214 mutex_lock(&local->sta_mtx); 1215 sta = sta_info_get_bss(sdata, mgmt->sa); 1216 if (sta) { 1217 switch (mgmt->u.action.u.addba_req.action_code) { 1218 case WLAN_ACTION_ADDBA_REQ: 1219 ieee80211_process_addba_request( 1220 local, sta, mgmt, len); 1221 break; 1222 case WLAN_ACTION_ADDBA_RESP: 1223 ieee80211_process_addba_resp(local, sta, 1224 mgmt, len); 1225 break; 1226 case WLAN_ACTION_DELBA: 1227 ieee80211_process_delba(sdata, sta, 1228 mgmt, len); 1229 break; 1230 default: 1231 WARN_ON(1); 1232 break; 1233 } 1234 } 1235 mutex_unlock(&local->sta_mtx); 1236 } else if (ieee80211_is_data_qos(mgmt->frame_control)) { 1237 struct ieee80211_hdr *hdr = (void *)mgmt; 1238 /* 1239 * So the frame isn't mgmt, but frame_control 1240 * is at the right place anyway, of course, so 1241 * the if statement is correct. 1242 * 1243 * Warn if we have other data frame types here, 1244 * they must not get here. 1245 */ 1246 WARN_ON(hdr->frame_control & 1247 cpu_to_le16(IEEE80211_STYPE_NULLFUNC)); 1248 WARN_ON(!(hdr->seq_ctrl & 1249 cpu_to_le16(IEEE80211_SCTL_FRAG))); 1250 /* 1251 * This was a fragment of a frame, received while 1252 * a block-ack session was active. That cannot be 1253 * right, so terminate the session. 1254 */ 1255 mutex_lock(&local->sta_mtx); 1256 sta = sta_info_get_bss(sdata, mgmt->sa); 1257 if (sta) { 1258 u16 tid = *ieee80211_get_qos_ctl(hdr) & 1259 IEEE80211_QOS_CTL_TID_MASK; 1260 1261 __ieee80211_stop_rx_ba_session( 1262 sta, tid, WLAN_BACK_RECIPIENT, 1263 WLAN_REASON_QSTA_REQUIRE_SETUP, 1264 true); 1265 } 1266 mutex_unlock(&local->sta_mtx); 1267 } else switch (sdata->vif.type) { 1268 case NL80211_IFTYPE_STATION: 1269 ieee80211_sta_rx_queued_mgmt(sdata, skb); 1270 break; 1271 case NL80211_IFTYPE_ADHOC: 1272 ieee80211_ibss_rx_queued_mgmt(sdata, skb); 1273 break; 1274 case NL80211_IFTYPE_MESH_POINT: 1275 if (!ieee80211_vif_is_mesh(&sdata->vif)) 1276 break; 1277 ieee80211_mesh_rx_queued_mgmt(sdata, skb); 1278 break; 1279 default: 1280 WARN(1, "frame for unexpected interface type"); 1281 break; 1282 } 1283 1284 kfree_skb(skb); 1285 } 1286 1287 /* then other type-dependent work */ 1288 switch (sdata->vif.type) { 1289 case NL80211_IFTYPE_STATION: 1290 ieee80211_sta_work(sdata); 1291 break; 1292 case NL80211_IFTYPE_ADHOC: 1293 ieee80211_ibss_work(sdata); 1294 break; 1295 case NL80211_IFTYPE_MESH_POINT: 1296 if (!ieee80211_vif_is_mesh(&sdata->vif)) 1297 break; 1298 ieee80211_mesh_work(sdata); 1299 break; 1300 case NL80211_IFTYPE_OCB: 1301 ieee80211_ocb_work(sdata); 1302 break; 1303 default: 1304 break; 1305 } 1306 } 1307 1308 static void ieee80211_recalc_smps_work(struct work_struct *work) 1309 { 1310 struct ieee80211_sub_if_data *sdata = 1311 container_of(work, struct ieee80211_sub_if_data, recalc_smps); 1312 1313 ieee80211_recalc_smps(sdata); 1314 } 1315 1316 /* 1317 * Helper function to initialise an interface to a specific type. 1318 */ 1319 static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata, 1320 enum nl80211_iftype type) 1321 { 1322 static const u8 bssid_wildcard[ETH_ALEN] = {0xff, 0xff, 0xff, 1323 0xff, 0xff, 0xff}; 1324 1325 /* clear type-dependent union */ 1326 memset(&sdata->u, 0, sizeof(sdata->u)); 1327 1328 /* and set some type-dependent values */ 1329 sdata->vif.type = type; 1330 sdata->vif.p2p = false; 1331 sdata->wdev.iftype = type; 1332 1333 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE); 1334 sdata->control_port_no_encrypt = false; 1335 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM; 1336 sdata->vif.bss_conf.idle = true; 1337 1338 sdata->noack_map = 0; 1339 1340 /* only monitor/p2p-device differ */ 1341 if (sdata->dev) { 1342 sdata->dev->netdev_ops = &ieee80211_dataif_ops; 1343 sdata->dev->type = ARPHRD_ETHER; 1344 } 1345 1346 skb_queue_head_init(&sdata->skb_queue); 1347 INIT_WORK(&sdata->work, ieee80211_iface_work); 1348 INIT_WORK(&sdata->recalc_smps, ieee80211_recalc_smps_work); 1349 INIT_WORK(&sdata->csa_finalize_work, ieee80211_csa_finalize_work); 1350 INIT_LIST_HEAD(&sdata->assigned_chanctx_list); 1351 INIT_LIST_HEAD(&sdata->reserved_chanctx_list); 1352 1353 switch (type) { 1354 case NL80211_IFTYPE_P2P_GO: 1355 type = NL80211_IFTYPE_AP; 1356 sdata->vif.type = type; 1357 sdata->vif.p2p = true; 1358 /* fall through */ 1359 case NL80211_IFTYPE_AP: 1360 skb_queue_head_init(&sdata->u.ap.ps.bc_buf); 1361 INIT_LIST_HEAD(&sdata->u.ap.vlans); 1362 INIT_WORK(&sdata->u.ap.request_smps_work, 1363 ieee80211_request_smps_ap_work); 1364 sdata->vif.bss_conf.bssid = sdata->vif.addr; 1365 sdata->u.ap.req_smps = IEEE80211_SMPS_OFF; 1366 break; 1367 case NL80211_IFTYPE_P2P_CLIENT: 1368 type = NL80211_IFTYPE_STATION; 1369 sdata->vif.type = type; 1370 sdata->vif.p2p = true; 1371 /* fall through */ 1372 case NL80211_IFTYPE_STATION: 1373 sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid; 1374 ieee80211_sta_setup_sdata(sdata); 1375 break; 1376 case NL80211_IFTYPE_OCB: 1377 sdata->vif.bss_conf.bssid = bssid_wildcard; 1378 ieee80211_ocb_setup_sdata(sdata); 1379 break; 1380 case NL80211_IFTYPE_ADHOC: 1381 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid; 1382 ieee80211_ibss_setup_sdata(sdata); 1383 break; 1384 case NL80211_IFTYPE_MESH_POINT: 1385 if (ieee80211_vif_is_mesh(&sdata->vif)) 1386 ieee80211_mesh_init_sdata(sdata); 1387 break; 1388 case NL80211_IFTYPE_MONITOR: 1389 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP; 1390 sdata->dev->netdev_ops = &ieee80211_monitorif_ops; 1391 sdata->u.mntr_flags = MONITOR_FLAG_CONTROL | 1392 MONITOR_FLAG_OTHER_BSS; 1393 break; 1394 case NL80211_IFTYPE_WDS: 1395 sdata->vif.bss_conf.bssid = NULL; 1396 break; 1397 case NL80211_IFTYPE_AP_VLAN: 1398 case NL80211_IFTYPE_P2P_DEVICE: 1399 sdata->vif.bss_conf.bssid = sdata->vif.addr; 1400 break; 1401 case NL80211_IFTYPE_UNSPECIFIED: 1402 case NUM_NL80211_IFTYPES: 1403 BUG(); 1404 break; 1405 } 1406 1407 ieee80211_debugfs_add_netdev(sdata); 1408 } 1409 1410 static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata, 1411 enum nl80211_iftype type) 1412 { 1413 struct ieee80211_local *local = sdata->local; 1414 int ret, err; 1415 enum nl80211_iftype internal_type = type; 1416 bool p2p = false; 1417 1418 ASSERT_RTNL(); 1419 1420 if (!local->ops->change_interface) 1421 return -EBUSY; 1422 1423 switch (sdata->vif.type) { 1424 case NL80211_IFTYPE_AP: 1425 case NL80211_IFTYPE_STATION: 1426 case NL80211_IFTYPE_ADHOC: 1427 case NL80211_IFTYPE_OCB: 1428 /* 1429 * Could maybe also all others here? 1430 * Just not sure how that interacts 1431 * with the RX/config path e.g. for 1432 * mesh. 1433 */ 1434 break; 1435 default: 1436 return -EBUSY; 1437 } 1438 1439 switch (type) { 1440 case NL80211_IFTYPE_AP: 1441 case NL80211_IFTYPE_STATION: 1442 case NL80211_IFTYPE_ADHOC: 1443 case NL80211_IFTYPE_OCB: 1444 /* 1445 * Could probably support everything 1446 * but WDS here (WDS do_open can fail 1447 * under memory pressure, which this 1448 * code isn't prepared to handle). 1449 */ 1450 break; 1451 case NL80211_IFTYPE_P2P_CLIENT: 1452 p2p = true; 1453 internal_type = NL80211_IFTYPE_STATION; 1454 break; 1455 case NL80211_IFTYPE_P2P_GO: 1456 p2p = true; 1457 internal_type = NL80211_IFTYPE_AP; 1458 break; 1459 default: 1460 return -EBUSY; 1461 } 1462 1463 ret = ieee80211_check_concurrent_iface(sdata, internal_type); 1464 if (ret) 1465 return ret; 1466 1467 ieee80211_do_stop(sdata, false); 1468 1469 ieee80211_teardown_sdata(sdata); 1470 1471 ret = drv_change_interface(local, sdata, internal_type, p2p); 1472 if (ret) 1473 type = ieee80211_vif_type_p2p(&sdata->vif); 1474 1475 /* 1476 * Ignore return value here, there's not much we can do since 1477 * the driver changed the interface type internally already. 1478 * The warnings will hopefully make driver authors fix it :-) 1479 */ 1480 ieee80211_check_queues(sdata, type); 1481 1482 ieee80211_setup_sdata(sdata, type); 1483 1484 err = ieee80211_do_open(&sdata->wdev, false); 1485 WARN(err, "type change: do_open returned %d", err); 1486 1487 return ret; 1488 } 1489 1490 int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata, 1491 enum nl80211_iftype type) 1492 { 1493 int ret; 1494 1495 ASSERT_RTNL(); 1496 1497 if (type == ieee80211_vif_type_p2p(&sdata->vif)) 1498 return 0; 1499 1500 if (ieee80211_sdata_running(sdata)) { 1501 ret = ieee80211_runtime_change_iftype(sdata, type); 1502 if (ret) 1503 return ret; 1504 } else { 1505 /* Purge and reset type-dependent state. */ 1506 ieee80211_teardown_sdata(sdata); 1507 ieee80211_setup_sdata(sdata, type); 1508 } 1509 1510 /* reset some values that shouldn't be kept across type changes */ 1511 sdata->drop_unencrypted = 0; 1512 if (type == NL80211_IFTYPE_STATION) 1513 sdata->u.mgd.use_4addr = false; 1514 1515 return 0; 1516 } 1517 1518 static void ieee80211_assign_perm_addr(struct ieee80211_local *local, 1519 u8 *perm_addr, enum nl80211_iftype type) 1520 { 1521 struct ieee80211_sub_if_data *sdata; 1522 u64 mask, start, addr, val, inc; 1523 u8 *m; 1524 u8 tmp_addr[ETH_ALEN]; 1525 int i; 1526 1527 /* default ... something at least */ 1528 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN); 1529 1530 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) && 1531 local->hw.wiphy->n_addresses <= 1) 1532 return; 1533 1534 mutex_lock(&local->iflist_mtx); 1535 1536 switch (type) { 1537 case NL80211_IFTYPE_MONITOR: 1538 /* doesn't matter */ 1539 break; 1540 case NL80211_IFTYPE_WDS: 1541 case NL80211_IFTYPE_AP_VLAN: 1542 /* match up with an AP interface */ 1543 list_for_each_entry(sdata, &local->interfaces, list) { 1544 if (sdata->vif.type != NL80211_IFTYPE_AP) 1545 continue; 1546 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN); 1547 break; 1548 } 1549 /* keep default if no AP interface present */ 1550 break; 1551 case NL80211_IFTYPE_P2P_CLIENT: 1552 case NL80211_IFTYPE_P2P_GO: 1553 if (local->hw.flags & IEEE80211_HW_P2P_DEV_ADDR_FOR_INTF) { 1554 list_for_each_entry(sdata, &local->interfaces, list) { 1555 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) 1556 continue; 1557 if (!ieee80211_sdata_running(sdata)) 1558 continue; 1559 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN); 1560 goto out_unlock; 1561 } 1562 } 1563 /* otherwise fall through */ 1564 default: 1565 /* assign a new address if possible -- try n_addresses first */ 1566 for (i = 0; i < local->hw.wiphy->n_addresses; i++) { 1567 bool used = false; 1568 1569 list_for_each_entry(sdata, &local->interfaces, list) { 1570 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr, 1571 sdata->vif.addr)) { 1572 used = true; 1573 break; 1574 } 1575 } 1576 1577 if (!used) { 1578 memcpy(perm_addr, 1579 local->hw.wiphy->addresses[i].addr, 1580 ETH_ALEN); 1581 break; 1582 } 1583 } 1584 1585 /* try mask if available */ 1586 if (is_zero_ether_addr(local->hw.wiphy->addr_mask)) 1587 break; 1588 1589 m = local->hw.wiphy->addr_mask; 1590 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) | 1591 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) | 1592 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8); 1593 1594 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) { 1595 /* not a contiguous mask ... not handled now! */ 1596 pr_info("not contiguous\n"); 1597 break; 1598 } 1599 1600 /* 1601 * Pick address of existing interface in case user changed 1602 * MAC address manually, default to perm_addr. 1603 */ 1604 m = local->hw.wiphy->perm_addr; 1605 list_for_each_entry(sdata, &local->interfaces, list) { 1606 if (sdata->vif.type == NL80211_IFTYPE_MONITOR) 1607 continue; 1608 m = sdata->vif.addr; 1609 break; 1610 } 1611 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) | 1612 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) | 1613 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8); 1614 1615 inc = 1ULL<<__ffs64(mask); 1616 val = (start & mask); 1617 addr = (start & ~mask) | (val & mask); 1618 do { 1619 bool used = false; 1620 1621 tmp_addr[5] = addr >> 0*8; 1622 tmp_addr[4] = addr >> 1*8; 1623 tmp_addr[3] = addr >> 2*8; 1624 tmp_addr[2] = addr >> 3*8; 1625 tmp_addr[1] = addr >> 4*8; 1626 tmp_addr[0] = addr >> 5*8; 1627 1628 val += inc; 1629 1630 list_for_each_entry(sdata, &local->interfaces, list) { 1631 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) { 1632 used = true; 1633 break; 1634 } 1635 } 1636 1637 if (!used) { 1638 memcpy(perm_addr, tmp_addr, ETH_ALEN); 1639 break; 1640 } 1641 addr = (start & ~mask) | (val & mask); 1642 } while (addr != start); 1643 1644 break; 1645 } 1646 1647 out_unlock: 1648 mutex_unlock(&local->iflist_mtx); 1649 } 1650 1651 int ieee80211_if_add(struct ieee80211_local *local, const char *name, 1652 struct wireless_dev **new_wdev, enum nl80211_iftype type, 1653 struct vif_params *params) 1654 { 1655 struct net_device *ndev = NULL; 1656 struct ieee80211_sub_if_data *sdata = NULL; 1657 int ret, i; 1658 int txqs = 1; 1659 1660 ASSERT_RTNL(); 1661 1662 if (type == NL80211_IFTYPE_P2P_DEVICE) { 1663 struct wireless_dev *wdev; 1664 1665 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, 1666 GFP_KERNEL); 1667 if (!sdata) 1668 return -ENOMEM; 1669 wdev = &sdata->wdev; 1670 1671 sdata->dev = NULL; 1672 strlcpy(sdata->name, name, IFNAMSIZ); 1673 ieee80211_assign_perm_addr(local, wdev->address, type); 1674 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN); 1675 } else { 1676 if (local->hw.queues >= IEEE80211_NUM_ACS) 1677 txqs = IEEE80211_NUM_ACS; 1678 1679 ndev = alloc_netdev_mqs(sizeof(*sdata) + local->hw.vif_data_size, 1680 name, NET_NAME_UNKNOWN, 1681 ieee80211_if_setup, txqs, 1); 1682 if (!ndev) 1683 return -ENOMEM; 1684 dev_net_set(ndev, wiphy_net(local->hw.wiphy)); 1685 1686 ndev->needed_headroom = local->tx_headroom + 1687 4*6 /* four MAC addresses */ 1688 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */ 1689 + 6 /* mesh */ 1690 + 8 /* rfc1042/bridge tunnel */ 1691 - ETH_HLEN /* ethernet hard_header_len */ 1692 + IEEE80211_ENCRYPT_HEADROOM; 1693 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM; 1694 1695 ret = dev_alloc_name(ndev, ndev->name); 1696 if (ret < 0) { 1697 free_netdev(ndev); 1698 return ret; 1699 } 1700 1701 ieee80211_assign_perm_addr(local, ndev->perm_addr, type); 1702 if (params && is_valid_ether_addr(params->macaddr)) 1703 memcpy(ndev->dev_addr, params->macaddr, ETH_ALEN); 1704 else 1705 memcpy(ndev->dev_addr, ndev->perm_addr, ETH_ALEN); 1706 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy)); 1707 1708 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */ 1709 sdata = netdev_priv(ndev); 1710 ndev->ieee80211_ptr = &sdata->wdev; 1711 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN); 1712 memcpy(sdata->name, ndev->name, IFNAMSIZ); 1713 1714 sdata->dev = ndev; 1715 } 1716 1717 /* initialise type-independent data */ 1718 sdata->wdev.wiphy = local->hw.wiphy; 1719 sdata->local = local; 1720 1721 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++) 1722 skb_queue_head_init(&sdata->fragments[i].skb_list); 1723 1724 INIT_LIST_HEAD(&sdata->key_list); 1725 1726 INIT_DELAYED_WORK(&sdata->dfs_cac_timer_work, 1727 ieee80211_dfs_cac_timer_work); 1728 INIT_DELAYED_WORK(&sdata->dec_tailroom_needed_wk, 1729 ieee80211_delayed_tailroom_dec); 1730 1731 for (i = 0; i < IEEE80211_NUM_BANDS; i++) { 1732 struct ieee80211_supported_band *sband; 1733 sband = local->hw.wiphy->bands[i]; 1734 sdata->rc_rateidx_mask[i] = 1735 sband ? (1 << sband->n_bitrates) - 1 : 0; 1736 if (sband) 1737 memcpy(sdata->rc_rateidx_mcs_mask[i], 1738 sband->ht_cap.mcs.rx_mask, 1739 sizeof(sdata->rc_rateidx_mcs_mask[i])); 1740 else 1741 memset(sdata->rc_rateidx_mcs_mask[i], 0, 1742 sizeof(sdata->rc_rateidx_mcs_mask[i])); 1743 } 1744 1745 ieee80211_set_default_queues(sdata); 1746 1747 sdata->ap_power_level = IEEE80211_UNSET_POWER_LEVEL; 1748 sdata->user_power_level = local->user_power_level; 1749 1750 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM; 1751 1752 /* setup type-dependent data */ 1753 ieee80211_setup_sdata(sdata, type); 1754 1755 if (ndev) { 1756 if (params) { 1757 ndev->ieee80211_ptr->use_4addr = params->use_4addr; 1758 if (type == NL80211_IFTYPE_STATION) 1759 sdata->u.mgd.use_4addr = params->use_4addr; 1760 } 1761 1762 ndev->features |= local->hw.netdev_features; 1763 1764 netdev_set_default_ethtool_ops(ndev, &ieee80211_ethtool_ops); 1765 1766 ret = register_netdevice(ndev); 1767 if (ret) { 1768 free_netdev(ndev); 1769 return ret; 1770 } 1771 } 1772 1773 mutex_lock(&local->iflist_mtx); 1774 list_add_tail_rcu(&sdata->list, &local->interfaces); 1775 mutex_unlock(&local->iflist_mtx); 1776 1777 if (new_wdev) 1778 *new_wdev = &sdata->wdev; 1779 1780 return 0; 1781 } 1782 1783 void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata) 1784 { 1785 ASSERT_RTNL(); 1786 1787 mutex_lock(&sdata->local->iflist_mtx); 1788 list_del_rcu(&sdata->list); 1789 mutex_unlock(&sdata->local->iflist_mtx); 1790 1791 synchronize_rcu(); 1792 1793 if (sdata->dev) { 1794 unregister_netdevice(sdata->dev); 1795 } else { 1796 cfg80211_unregister_wdev(&sdata->wdev); 1797 kfree(sdata); 1798 } 1799 } 1800 1801 void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata) 1802 { 1803 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state))) 1804 return; 1805 ieee80211_do_stop(sdata, true); 1806 ieee80211_teardown_sdata(sdata); 1807 } 1808 1809 /* 1810 * Remove all interfaces, may only be called at hardware unregistration 1811 * time because it doesn't do RCU-safe list removals. 1812 */ 1813 void ieee80211_remove_interfaces(struct ieee80211_local *local) 1814 { 1815 struct ieee80211_sub_if_data *sdata, *tmp; 1816 LIST_HEAD(unreg_list); 1817 LIST_HEAD(wdev_list); 1818 1819 ASSERT_RTNL(); 1820 1821 /* 1822 * Close all AP_VLAN interfaces first, as otherwise they 1823 * might be closed while the AP interface they belong to 1824 * is closed, causing unregister_netdevice_many() to crash. 1825 */ 1826 list_for_each_entry(sdata, &local->interfaces, list) 1827 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) 1828 dev_close(sdata->dev); 1829 1830 mutex_lock(&local->iflist_mtx); 1831 list_for_each_entry_safe(sdata, tmp, &local->interfaces, list) { 1832 list_del(&sdata->list); 1833 1834 if (sdata->dev) 1835 unregister_netdevice_queue(sdata->dev, &unreg_list); 1836 else 1837 list_add(&sdata->list, &wdev_list); 1838 } 1839 mutex_unlock(&local->iflist_mtx); 1840 unregister_netdevice_many(&unreg_list); 1841 1842 list_for_each_entry_safe(sdata, tmp, &wdev_list, list) { 1843 list_del(&sdata->list); 1844 cfg80211_unregister_wdev(&sdata->wdev); 1845 kfree(sdata); 1846 } 1847 } 1848 1849 static int netdev_notify(struct notifier_block *nb, 1850 unsigned long state, void *ptr) 1851 { 1852 struct net_device *dev = netdev_notifier_info_to_dev(ptr); 1853 struct ieee80211_sub_if_data *sdata; 1854 1855 if (state != NETDEV_CHANGENAME) 1856 return NOTIFY_DONE; 1857 1858 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy) 1859 return NOTIFY_DONE; 1860 1861 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid) 1862 return NOTIFY_DONE; 1863 1864 sdata = IEEE80211_DEV_TO_SUB_IF(dev); 1865 memcpy(sdata->name, dev->name, IFNAMSIZ); 1866 ieee80211_debugfs_rename_netdev(sdata); 1867 1868 return NOTIFY_OK; 1869 } 1870 1871 static struct notifier_block mac80211_netdev_notifier = { 1872 .notifier_call = netdev_notify, 1873 }; 1874 1875 int ieee80211_iface_init(void) 1876 { 1877 return register_netdevice_notifier(&mac80211_netdev_notifier); 1878 } 1879 1880 void ieee80211_iface_exit(void) 1881 { 1882 unregister_netdevice_notifier(&mac80211_netdev_notifier); 1883 } 1884