xref: /linux/net/mac80211/main.c (revision ce7240e445303de3ca66e6d08f17a2ec278a5bf6)
1 /*
2  * Copyright 2002-2005, Instant802 Networks, Inc.
3  * Copyright 2005-2006, Devicescape Software, Inc.
4  * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
5  *
6  * This program is free software; you can redistribute it and/or modify
7  * it under the terms of the GNU General Public License version 2 as
8  * published by the Free Software Foundation.
9  */
10 
11 #include <net/mac80211.h>
12 #include <linux/module.h>
13 #include <linux/init.h>
14 #include <linux/netdevice.h>
15 #include <linux/types.h>
16 #include <linux/slab.h>
17 #include <linux/skbuff.h>
18 #include <linux/etherdevice.h>
19 #include <linux/if_arp.h>
20 #include <linux/rtnetlink.h>
21 #include <linux/bitmap.h>
22 #include <linux/pm_qos.h>
23 #include <linux/inetdevice.h>
24 #include <net/net_namespace.h>
25 #include <net/cfg80211.h>
26 
27 #include "ieee80211_i.h"
28 #include "driver-ops.h"
29 #include "rate.h"
30 #include "mesh.h"
31 #include "wep.h"
32 #include "led.h"
33 #include "cfg.h"
34 #include "debugfs.h"
35 
36 static struct lock_class_key ieee80211_rx_skb_queue_class;
37 
38 void ieee80211_configure_filter(struct ieee80211_local *local)
39 {
40 	u64 mc;
41 	unsigned int changed_flags;
42 	unsigned int new_flags = 0;
43 
44 	if (atomic_read(&local->iff_promiscs))
45 		new_flags |= FIF_PROMISC_IN_BSS;
46 
47 	if (atomic_read(&local->iff_allmultis))
48 		new_flags |= FIF_ALLMULTI;
49 
50 	if (local->monitors || test_bit(SCAN_SW_SCANNING, &local->scanning) ||
51 	    test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning))
52 		new_flags |= FIF_BCN_PRBRESP_PROMISC;
53 
54 	if (local->fif_probe_req || local->probe_req_reg)
55 		new_flags |= FIF_PROBE_REQ;
56 
57 	if (local->fif_fcsfail)
58 		new_flags |= FIF_FCSFAIL;
59 
60 	if (local->fif_plcpfail)
61 		new_flags |= FIF_PLCPFAIL;
62 
63 	if (local->fif_control)
64 		new_flags |= FIF_CONTROL;
65 
66 	if (local->fif_other_bss)
67 		new_flags |= FIF_OTHER_BSS;
68 
69 	if (local->fif_pspoll)
70 		new_flags |= FIF_PSPOLL;
71 
72 	spin_lock_bh(&local->filter_lock);
73 	changed_flags = local->filter_flags ^ new_flags;
74 
75 	mc = drv_prepare_multicast(local, &local->mc_list);
76 	spin_unlock_bh(&local->filter_lock);
77 
78 	/* be a bit nasty */
79 	new_flags |= (1<<31);
80 
81 	drv_configure_filter(local, changed_flags, &new_flags, mc);
82 
83 	WARN_ON(new_flags & (1<<31));
84 
85 	local->filter_flags = new_flags & ~(1<<31);
86 }
87 
88 static void ieee80211_reconfig_filter(struct work_struct *work)
89 {
90 	struct ieee80211_local *local =
91 		container_of(work, struct ieee80211_local, reconfig_filter);
92 
93 	ieee80211_configure_filter(local);
94 }
95 
96 int ieee80211_hw_config(struct ieee80211_local *local, u32 changed)
97 {
98 	struct ieee80211_channel *chan;
99 	int ret = 0;
100 	int power;
101 	enum nl80211_channel_type channel_type;
102 	u32 offchannel_flag;
103 
104 	might_sleep();
105 
106 	offchannel_flag = local->hw.conf.flags & IEEE80211_CONF_OFFCHANNEL;
107 	if (local->scan_channel) {
108 		chan = local->scan_channel;
109 		/* If scanning on oper channel, use whatever channel-type
110 		 * is currently in use.
111 		 */
112 		if (chan == local->oper_channel)
113 			channel_type = local->_oper_channel_type;
114 		else
115 			channel_type = NL80211_CHAN_NO_HT;
116 	} else if (local->tmp_channel) {
117 		chan = local->tmp_channel;
118 		channel_type = local->tmp_channel_type;
119 	} else {
120 		chan = local->oper_channel;
121 		channel_type = local->_oper_channel_type;
122 	}
123 
124 	if (chan != local->oper_channel ||
125 	    channel_type != local->_oper_channel_type)
126 		local->hw.conf.flags |= IEEE80211_CONF_OFFCHANNEL;
127 	else
128 		local->hw.conf.flags &= ~IEEE80211_CONF_OFFCHANNEL;
129 
130 	offchannel_flag ^= local->hw.conf.flags & IEEE80211_CONF_OFFCHANNEL;
131 
132 	if (offchannel_flag || chan != local->hw.conf.channel ||
133 	    channel_type != local->hw.conf.channel_type) {
134 		local->hw.conf.channel = chan;
135 		local->hw.conf.channel_type = channel_type;
136 		changed |= IEEE80211_CONF_CHANGE_CHANNEL;
137 	}
138 
139 	if (!conf_is_ht(&local->hw.conf)) {
140 		/*
141 		 * mac80211.h documents that this is only valid
142 		 * when the channel is set to an HT type, and
143 		 * that otherwise STATIC is used.
144 		 */
145 		local->hw.conf.smps_mode = IEEE80211_SMPS_STATIC;
146 	} else if (local->hw.conf.smps_mode != local->smps_mode) {
147 		local->hw.conf.smps_mode = local->smps_mode;
148 		changed |= IEEE80211_CONF_CHANGE_SMPS;
149 	}
150 
151 	if (test_bit(SCAN_SW_SCANNING, &local->scanning) ||
152 	    test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning) ||
153 	    test_bit(SCAN_HW_SCANNING, &local->scanning))
154 		power = chan->max_power;
155 	else
156 		power = local->power_constr_level ?
157 			min(chan->max_power,
158 				(chan->max_reg_power  - local->power_constr_level)) :
159 			chan->max_power;
160 
161 	if (local->user_power_level >= 0)
162 		power = min(power, local->user_power_level);
163 
164 	if (local->hw.conf.power_level != power) {
165 		changed |= IEEE80211_CONF_CHANGE_POWER;
166 		local->hw.conf.power_level = power;
167 	}
168 
169 	if (changed && local->open_count) {
170 		ret = drv_config(local, changed);
171 		/*
172 		 * Goal:
173 		 * HW reconfiguration should never fail, the driver has told
174 		 * us what it can support so it should live up to that promise.
175 		 *
176 		 * Current status:
177 		 * rfkill is not integrated with mac80211 and a
178 		 * configuration command can thus fail if hardware rfkill
179 		 * is enabled
180 		 *
181 		 * FIXME: integrate rfkill with mac80211 and then add this
182 		 * WARN_ON() back
183 		 *
184 		 */
185 		/* WARN_ON(ret); */
186 	}
187 
188 	return ret;
189 }
190 
191 void ieee80211_bss_info_change_notify(struct ieee80211_sub_if_data *sdata,
192 				      u32 changed)
193 {
194 	struct ieee80211_local *local = sdata->local;
195 	static const u8 zero[ETH_ALEN] = { 0 };
196 
197 	if (!changed)
198 		return;
199 
200 	if (sdata->vif.type == NL80211_IFTYPE_STATION) {
201 		sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid;
202 	} else if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
203 		sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
204 	else if (sdata->vif.type == NL80211_IFTYPE_AP)
205 		sdata->vif.bss_conf.bssid = sdata->vif.addr;
206 	else if (sdata->vif.type == NL80211_IFTYPE_WDS)
207 		sdata->vif.bss_conf.bssid = NULL;
208 	else if (ieee80211_vif_is_mesh(&sdata->vif)) {
209 		sdata->vif.bss_conf.bssid = zero;
210 	} else {
211 		WARN_ON(1);
212 		return;
213 	}
214 
215 	switch (sdata->vif.type) {
216 	case NL80211_IFTYPE_AP:
217 	case NL80211_IFTYPE_ADHOC:
218 	case NL80211_IFTYPE_WDS:
219 	case NL80211_IFTYPE_MESH_POINT:
220 		break;
221 	default:
222 		/* do not warn to simplify caller in scan.c */
223 		changed &= ~BSS_CHANGED_BEACON_ENABLED;
224 		if (WARN_ON(changed & BSS_CHANGED_BEACON))
225 			return;
226 		break;
227 	}
228 
229 	if (changed & BSS_CHANGED_BEACON_ENABLED) {
230 		if (local->quiescing || !ieee80211_sdata_running(sdata) ||
231 		    test_bit(SDATA_STATE_OFFCHANNEL, &sdata->state)) {
232 			sdata->vif.bss_conf.enable_beacon = false;
233 		} else {
234 			/*
235 			 * Beacon should be enabled, but AP mode must
236 			 * check whether there is a beacon configured.
237 			 */
238 			switch (sdata->vif.type) {
239 			case NL80211_IFTYPE_AP:
240 				sdata->vif.bss_conf.enable_beacon =
241 					!!sdata->u.ap.beacon;
242 				break;
243 			case NL80211_IFTYPE_ADHOC:
244 				sdata->vif.bss_conf.enable_beacon =
245 					!!sdata->u.ibss.presp;
246 				break;
247 #ifdef CONFIG_MAC80211_MESH
248 			case NL80211_IFTYPE_MESH_POINT:
249 				sdata->vif.bss_conf.enable_beacon =
250 					!!sdata->u.mesh.mesh_id_len;
251 				break;
252 #endif
253 			default:
254 				/* not reached */
255 				WARN_ON(1);
256 				break;
257 			}
258 		}
259 	}
260 
261 	drv_bss_info_changed(local, sdata, &sdata->vif.bss_conf, changed);
262 }
263 
264 u32 ieee80211_reset_erp_info(struct ieee80211_sub_if_data *sdata)
265 {
266 	sdata->vif.bss_conf.use_cts_prot = false;
267 	sdata->vif.bss_conf.use_short_preamble = false;
268 	sdata->vif.bss_conf.use_short_slot = false;
269 	return BSS_CHANGED_ERP_CTS_PROT |
270 	       BSS_CHANGED_ERP_PREAMBLE |
271 	       BSS_CHANGED_ERP_SLOT;
272 }
273 
274 static void ieee80211_tasklet_handler(unsigned long data)
275 {
276 	struct ieee80211_local *local = (struct ieee80211_local *) data;
277 	struct sta_info *sta, *tmp;
278 	struct skb_eosp_msg_data *eosp_data;
279 	struct sk_buff *skb;
280 
281 	while ((skb = skb_dequeue(&local->skb_queue)) ||
282 	       (skb = skb_dequeue(&local->skb_queue_unreliable))) {
283 		switch (skb->pkt_type) {
284 		case IEEE80211_RX_MSG:
285 			/* Clear skb->pkt_type in order to not confuse kernel
286 			 * netstack. */
287 			skb->pkt_type = 0;
288 			ieee80211_rx(&local->hw, skb);
289 			break;
290 		case IEEE80211_TX_STATUS_MSG:
291 			skb->pkt_type = 0;
292 			ieee80211_tx_status(&local->hw, skb);
293 			break;
294 		case IEEE80211_EOSP_MSG:
295 			eosp_data = (void *)skb->cb;
296 			for_each_sta_info(local, eosp_data->sta, sta, tmp) {
297 				/* skip wrong virtual interface */
298 				if (memcmp(eosp_data->iface,
299 					   sta->sdata->vif.addr, ETH_ALEN))
300 					continue;
301 				clear_sta_flag(sta, WLAN_STA_SP);
302 				break;
303 			}
304 			dev_kfree_skb(skb);
305 			break;
306 		default:
307 			WARN(1, "mac80211: Packet is of unknown type %d\n",
308 			     skb->pkt_type);
309 			dev_kfree_skb(skb);
310 			break;
311 		}
312 	}
313 }
314 
315 static void ieee80211_restart_work(struct work_struct *work)
316 {
317 	struct ieee80211_local *local =
318 		container_of(work, struct ieee80211_local, restart_work);
319 
320 	/* wait for scan work complete */
321 	flush_workqueue(local->workqueue);
322 
323 	mutex_lock(&local->mtx);
324 	WARN(test_bit(SCAN_HW_SCANNING, &local->scanning) ||
325 	     local->sched_scanning,
326 		"%s called with hardware scan in progress\n", __func__);
327 	mutex_unlock(&local->mtx);
328 
329 	rtnl_lock();
330 	ieee80211_scan_cancel(local);
331 	ieee80211_reconfig(local);
332 	rtnl_unlock();
333 }
334 
335 void ieee80211_restart_hw(struct ieee80211_hw *hw)
336 {
337 	struct ieee80211_local *local = hw_to_local(hw);
338 
339 	trace_api_restart_hw(local);
340 
341 	wiphy_info(hw->wiphy,
342 		   "Hardware restart was requested\n");
343 
344 	/* use this reason, ieee80211_reconfig will unblock it */
345 	ieee80211_stop_queues_by_reason(hw,
346 		IEEE80211_QUEUE_STOP_REASON_SUSPEND);
347 
348 	schedule_work(&local->restart_work);
349 }
350 EXPORT_SYMBOL(ieee80211_restart_hw);
351 
352 static void ieee80211_recalc_smps_work(struct work_struct *work)
353 {
354 	struct ieee80211_local *local =
355 		container_of(work, struct ieee80211_local, recalc_smps);
356 
357 	mutex_lock(&local->iflist_mtx);
358 	ieee80211_recalc_smps(local);
359 	mutex_unlock(&local->iflist_mtx);
360 }
361 
362 #ifdef CONFIG_INET
363 static int ieee80211_ifa_changed(struct notifier_block *nb,
364 				 unsigned long data, void *arg)
365 {
366 	struct in_ifaddr *ifa = arg;
367 	struct ieee80211_local *local =
368 		container_of(nb, struct ieee80211_local,
369 			     ifa_notifier);
370 	struct net_device *ndev = ifa->ifa_dev->dev;
371 	struct wireless_dev *wdev = ndev->ieee80211_ptr;
372 	struct in_device *idev;
373 	struct ieee80211_sub_if_data *sdata;
374 	struct ieee80211_bss_conf *bss_conf;
375 	struct ieee80211_if_managed *ifmgd;
376 	int c = 0;
377 
378 	/* Make sure it's our interface that got changed */
379 	if (!wdev)
380 		return NOTIFY_DONE;
381 
382 	if (wdev->wiphy != local->hw.wiphy)
383 		return NOTIFY_DONE;
384 
385 	sdata = IEEE80211_DEV_TO_SUB_IF(ndev);
386 	bss_conf = &sdata->vif.bss_conf;
387 
388 	/* ARP filtering is only supported in managed mode */
389 	if (sdata->vif.type != NL80211_IFTYPE_STATION)
390 		return NOTIFY_DONE;
391 
392 	idev = __in_dev_get_rtnl(sdata->dev);
393 	if (!idev)
394 		return NOTIFY_DONE;
395 
396 	ifmgd = &sdata->u.mgd;
397 	mutex_lock(&ifmgd->mtx);
398 
399 	/* Copy the addresses to the bss_conf list */
400 	ifa = idev->ifa_list;
401 	while (c < IEEE80211_BSS_ARP_ADDR_LIST_LEN && ifa) {
402 		bss_conf->arp_addr_list[c] = ifa->ifa_address;
403 		ifa = ifa->ifa_next;
404 		c++;
405 	}
406 
407 	/* If not all addresses fit the list, disable filtering */
408 	if (ifa) {
409 		sdata->arp_filter_state = false;
410 		c = 0;
411 	} else {
412 		sdata->arp_filter_state = true;
413 	}
414 	bss_conf->arp_addr_cnt = c;
415 
416 	/* Configure driver only if associated (which also implies it is up) */
417 	if (ifmgd->associated) {
418 		bss_conf->arp_filter_enabled = sdata->arp_filter_state;
419 		ieee80211_bss_info_change_notify(sdata,
420 						 BSS_CHANGED_ARP_FILTER);
421 	}
422 
423 	mutex_unlock(&ifmgd->mtx);
424 
425 	return NOTIFY_DONE;
426 }
427 #endif
428 
429 static int ieee80211_napi_poll(struct napi_struct *napi, int budget)
430 {
431 	struct ieee80211_local *local =
432 		container_of(napi, struct ieee80211_local, napi);
433 
434 	return local->ops->napi_poll(&local->hw, budget);
435 }
436 
437 void ieee80211_napi_schedule(struct ieee80211_hw *hw)
438 {
439 	struct ieee80211_local *local = hw_to_local(hw);
440 
441 	napi_schedule(&local->napi);
442 }
443 EXPORT_SYMBOL(ieee80211_napi_schedule);
444 
445 void ieee80211_napi_complete(struct ieee80211_hw *hw)
446 {
447 	struct ieee80211_local *local = hw_to_local(hw);
448 
449 	napi_complete(&local->napi);
450 }
451 EXPORT_SYMBOL(ieee80211_napi_complete);
452 
453 /* There isn't a lot of sense in it, but you can transmit anything you like */
454 static const struct ieee80211_txrx_stypes
455 ieee80211_default_mgmt_stypes[NUM_NL80211_IFTYPES] = {
456 	[NL80211_IFTYPE_ADHOC] = {
457 		.tx = 0xffff,
458 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4),
459 	},
460 	[NL80211_IFTYPE_STATION] = {
461 		.tx = 0xffff,
462 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
463 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4),
464 	},
465 	[NL80211_IFTYPE_AP] = {
466 		.tx = 0xffff,
467 		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
468 			BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
469 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
470 			BIT(IEEE80211_STYPE_DISASSOC >> 4) |
471 			BIT(IEEE80211_STYPE_AUTH >> 4) |
472 			BIT(IEEE80211_STYPE_DEAUTH >> 4) |
473 			BIT(IEEE80211_STYPE_ACTION >> 4),
474 	},
475 	[NL80211_IFTYPE_AP_VLAN] = {
476 		/* copy AP */
477 		.tx = 0xffff,
478 		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
479 			BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
480 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
481 			BIT(IEEE80211_STYPE_DISASSOC >> 4) |
482 			BIT(IEEE80211_STYPE_AUTH >> 4) |
483 			BIT(IEEE80211_STYPE_DEAUTH >> 4) |
484 			BIT(IEEE80211_STYPE_ACTION >> 4),
485 	},
486 	[NL80211_IFTYPE_P2P_CLIENT] = {
487 		.tx = 0xffff,
488 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
489 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4),
490 	},
491 	[NL80211_IFTYPE_P2P_GO] = {
492 		.tx = 0xffff,
493 		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
494 			BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
495 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
496 			BIT(IEEE80211_STYPE_DISASSOC >> 4) |
497 			BIT(IEEE80211_STYPE_AUTH >> 4) |
498 			BIT(IEEE80211_STYPE_DEAUTH >> 4) |
499 			BIT(IEEE80211_STYPE_ACTION >> 4),
500 	},
501 	[NL80211_IFTYPE_MESH_POINT] = {
502 		.tx = 0xffff,
503 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
504 			BIT(IEEE80211_STYPE_AUTH >> 4) |
505 			BIT(IEEE80211_STYPE_DEAUTH >> 4),
506 	},
507 };
508 
509 static const struct ieee80211_ht_cap mac80211_ht_capa_mod_mask = {
510 	.ampdu_params_info = IEEE80211_HT_AMPDU_PARM_FACTOR |
511 			     IEEE80211_HT_AMPDU_PARM_DENSITY,
512 
513 	.cap_info = cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
514 				IEEE80211_HT_CAP_MAX_AMSDU |
515 				IEEE80211_HT_CAP_SGI_40),
516 	.mcs = {
517 		.rx_mask = { 0xff, 0xff, 0xff, 0xff, 0xff,
518 			     0xff, 0xff, 0xff, 0xff, 0xff, },
519 	},
520 };
521 
522 struct ieee80211_hw *ieee80211_alloc_hw(size_t priv_data_len,
523 					const struct ieee80211_ops *ops)
524 {
525 	struct ieee80211_local *local;
526 	int priv_size, i;
527 	struct wiphy *wiphy;
528 
529 	if (WARN_ON(ops->sta_state && (ops->sta_add || ops->sta_remove)))
530 		return NULL;
531 
532 	/* Ensure 32-byte alignment of our private data and hw private data.
533 	 * We use the wiphy priv data for both our ieee80211_local and for
534 	 * the driver's private data
535 	 *
536 	 * In memory it'll be like this:
537 	 *
538 	 * +-------------------------+
539 	 * | struct wiphy	    |
540 	 * +-------------------------+
541 	 * | struct ieee80211_local  |
542 	 * +-------------------------+
543 	 * | driver's private data   |
544 	 * +-------------------------+
545 	 *
546 	 */
547 	priv_size = ALIGN(sizeof(*local), NETDEV_ALIGN) + priv_data_len;
548 
549 	wiphy = wiphy_new(&mac80211_config_ops, priv_size);
550 
551 	if (!wiphy)
552 		return NULL;
553 
554 	wiphy->mgmt_stypes = ieee80211_default_mgmt_stypes;
555 
556 	wiphy->privid = mac80211_wiphy_privid;
557 
558 	wiphy->flags |= WIPHY_FLAG_NETNS_OK |
559 			WIPHY_FLAG_4ADDR_AP |
560 			WIPHY_FLAG_4ADDR_STATION |
561 			WIPHY_FLAG_REPORTS_OBSS |
562 			WIPHY_FLAG_OFFCHAN_TX;
563 
564 	if (ops->remain_on_channel)
565 		wiphy->flags |= WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL;
566 
567 	wiphy->features = NL80211_FEATURE_SK_TX_STATUS |
568 			  NL80211_FEATURE_HT_IBSS;
569 
570 	if (!ops->set_key)
571 		wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
572 
573 	wiphy->bss_priv_size = sizeof(struct ieee80211_bss);
574 
575 	local = wiphy_priv(wiphy);
576 
577 	local->hw.wiphy = wiphy;
578 
579 	local->hw.priv = (char *)local + ALIGN(sizeof(*local), NETDEV_ALIGN);
580 
581 	BUG_ON(!ops->tx && !ops->tx_frags);
582 	BUG_ON(!ops->start);
583 	BUG_ON(!ops->stop);
584 	BUG_ON(!ops->config);
585 	BUG_ON(!ops->add_interface);
586 	BUG_ON(!ops->remove_interface);
587 	BUG_ON(!ops->configure_filter);
588 	local->ops = ops;
589 
590 	/* set up some defaults */
591 	local->hw.queues = 1;
592 	local->hw.max_rates = 1;
593 	local->hw.max_report_rates = 0;
594 	local->hw.max_rx_aggregation_subframes = IEEE80211_MAX_AMPDU_BUF;
595 	local->hw.max_tx_aggregation_subframes = IEEE80211_MAX_AMPDU_BUF;
596 	local->hw.offchannel_tx_hw_queue = IEEE80211_INVAL_HW_QUEUE;
597 	local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
598 	local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
599 	local->hw.radiotap_mcs_details = IEEE80211_RADIOTAP_MCS_HAVE_MCS |
600 					 IEEE80211_RADIOTAP_MCS_HAVE_GI |
601 					 IEEE80211_RADIOTAP_MCS_HAVE_BW;
602 	local->user_power_level = -1;
603 	wiphy->ht_capa_mod_mask = &mac80211_ht_capa_mod_mask;
604 
605 	INIT_LIST_HEAD(&local->interfaces);
606 
607 	__hw_addr_init(&local->mc_list);
608 
609 	mutex_init(&local->iflist_mtx);
610 	mutex_init(&local->mtx);
611 
612 	mutex_init(&local->key_mtx);
613 	spin_lock_init(&local->filter_lock);
614 	spin_lock_init(&local->queue_stop_reason_lock);
615 
616 	/*
617 	 * The rx_skb_queue is only accessed from tasklets,
618 	 * but other SKB queues are used from within IRQ
619 	 * context. Therefore, this one needs a different
620 	 * locking class so our direct, non-irq-safe use of
621 	 * the queue's lock doesn't throw lockdep warnings.
622 	 */
623 	skb_queue_head_init_class(&local->rx_skb_queue,
624 				  &ieee80211_rx_skb_queue_class);
625 
626 	INIT_DELAYED_WORK(&local->scan_work, ieee80211_scan_work);
627 
628 	ieee80211_work_init(local);
629 
630 	INIT_WORK(&local->restart_work, ieee80211_restart_work);
631 
632 	INIT_WORK(&local->reconfig_filter, ieee80211_reconfig_filter);
633 	INIT_WORK(&local->recalc_smps, ieee80211_recalc_smps_work);
634 	local->smps_mode = IEEE80211_SMPS_OFF;
635 
636 	INIT_WORK(&local->dynamic_ps_enable_work,
637 		  ieee80211_dynamic_ps_enable_work);
638 	INIT_WORK(&local->dynamic_ps_disable_work,
639 		  ieee80211_dynamic_ps_disable_work);
640 	setup_timer(&local->dynamic_ps_timer,
641 		    ieee80211_dynamic_ps_timer, (unsigned long) local);
642 
643 	INIT_WORK(&local->sched_scan_stopped_work,
644 		  ieee80211_sched_scan_stopped_work);
645 
646 	spin_lock_init(&local->ack_status_lock);
647 	idr_init(&local->ack_status_frames);
648 	/* preallocate at least one entry */
649 	idr_pre_get(&local->ack_status_frames, GFP_KERNEL);
650 
651 	sta_info_init(local);
652 
653 	for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
654 		skb_queue_head_init(&local->pending[i]);
655 		atomic_set(&local->agg_queue_stop[i], 0);
656 	}
657 	tasklet_init(&local->tx_pending_tasklet, ieee80211_tx_pending,
658 		     (unsigned long)local);
659 
660 	tasklet_init(&local->tasklet,
661 		     ieee80211_tasklet_handler,
662 		     (unsigned long) local);
663 
664 	skb_queue_head_init(&local->skb_queue);
665 	skb_queue_head_init(&local->skb_queue_unreliable);
666 
667 	/* init dummy netdev for use w/ NAPI */
668 	init_dummy_netdev(&local->napi_dev);
669 
670 	ieee80211_led_names(local);
671 
672 	ieee80211_hw_roc_setup(local);
673 
674 	return &local->hw;
675 }
676 EXPORT_SYMBOL(ieee80211_alloc_hw);
677 
678 int ieee80211_register_hw(struct ieee80211_hw *hw)
679 {
680 	struct ieee80211_local *local = hw_to_local(hw);
681 	int result, i;
682 	enum ieee80211_band band;
683 	int channels, max_bitrates;
684 	bool supp_ht;
685 	static const u32 cipher_suites[] = {
686 		/* keep WEP first, it may be removed below */
687 		WLAN_CIPHER_SUITE_WEP40,
688 		WLAN_CIPHER_SUITE_WEP104,
689 		WLAN_CIPHER_SUITE_TKIP,
690 		WLAN_CIPHER_SUITE_CCMP,
691 
692 		/* keep last -- depends on hw flags! */
693 		WLAN_CIPHER_SUITE_AES_CMAC
694 	};
695 
696 	if (hw->flags & IEEE80211_HW_QUEUE_CONTROL &&
697 	    (local->hw.offchannel_tx_hw_queue == IEEE80211_INVAL_HW_QUEUE ||
698 	     local->hw.offchannel_tx_hw_queue >= local->hw.queues))
699 		return -EINVAL;
700 
701 	if ((hw->wiphy->wowlan.flags || hw->wiphy->wowlan.n_patterns)
702 #ifdef CONFIG_PM
703 	    && (!local->ops->suspend || !local->ops->resume)
704 #endif
705 	    )
706 		return -EINVAL;
707 
708 	if ((hw->flags & IEEE80211_HW_SCAN_WHILE_IDLE) && !local->ops->hw_scan)
709 		return -EINVAL;
710 
711 	if (hw->max_report_rates == 0)
712 		hw->max_report_rates = hw->max_rates;
713 
714 	/*
715 	 * generic code guarantees at least one band,
716 	 * set this very early because much code assumes
717 	 * that hw.conf.channel is assigned
718 	 */
719 	channels = 0;
720 	max_bitrates = 0;
721 	supp_ht = false;
722 	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
723 		struct ieee80211_supported_band *sband;
724 
725 		sband = local->hw.wiphy->bands[band];
726 		if (!sband)
727 			continue;
728 		if (!local->oper_channel) {
729 			/* init channel we're on */
730 			local->hw.conf.channel =
731 			local->oper_channel = &sband->channels[0];
732 			local->hw.conf.channel_type = NL80211_CHAN_NO_HT;
733 		}
734 		channels += sband->n_channels;
735 
736 		if (max_bitrates < sband->n_bitrates)
737 			max_bitrates = sband->n_bitrates;
738 		supp_ht = supp_ht || sband->ht_cap.ht_supported;
739 	}
740 
741 	local->int_scan_req = kzalloc(sizeof(*local->int_scan_req) +
742 				      sizeof(void *) * channels, GFP_KERNEL);
743 	if (!local->int_scan_req)
744 		return -ENOMEM;
745 
746 	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
747 		if (!local->hw.wiphy->bands[band])
748 			continue;
749 		local->int_scan_req->rates[band] = (u32) -1;
750 	}
751 
752 	/* if low-level driver supports AP, we also support VLAN */
753 	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
754 		hw->wiphy->interface_modes |= BIT(NL80211_IFTYPE_AP_VLAN);
755 		hw->wiphy->software_iftypes |= BIT(NL80211_IFTYPE_AP_VLAN);
756 	}
757 
758 	/* mac80211 always supports monitor */
759 	hw->wiphy->interface_modes |= BIT(NL80211_IFTYPE_MONITOR);
760 	hw->wiphy->software_iftypes |= BIT(NL80211_IFTYPE_MONITOR);
761 
762 	/*
763 	 * mac80211 doesn't support more than 1 channel, and also not more
764 	 * than one IBSS interface
765 	 */
766 	for (i = 0; i < hw->wiphy->n_iface_combinations; i++) {
767 		const struct ieee80211_iface_combination *c;
768 		int j;
769 
770 		c = &hw->wiphy->iface_combinations[i];
771 
772 		if (c->num_different_channels > 1)
773 			return -EINVAL;
774 
775 		for (j = 0; j < c->n_limits; j++)
776 			if ((c->limits[j].types & BIT(NL80211_IFTYPE_ADHOC)) &&
777 			    c->limits[j].max > 1)
778 				return -EINVAL;
779 	}
780 
781 #ifndef CONFIG_MAC80211_MESH
782 	/* mesh depends on Kconfig, but drivers should set it if they want */
783 	local->hw.wiphy->interface_modes &= ~BIT(NL80211_IFTYPE_MESH_POINT);
784 #endif
785 
786 	/* if the underlying driver supports mesh, mac80211 will (at least)
787 	 * provide routing of mesh authentication frames to userspace */
788 	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_MESH_POINT))
789 		local->hw.wiphy->flags |= WIPHY_FLAG_MESH_AUTH;
790 
791 	/* mac80211 supports control port protocol changing */
792 	local->hw.wiphy->flags |= WIPHY_FLAG_CONTROL_PORT_PROTOCOL;
793 
794 	if (local->hw.flags & IEEE80211_HW_SIGNAL_DBM)
795 		local->hw.wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
796 	else if (local->hw.flags & IEEE80211_HW_SIGNAL_UNSPEC)
797 		local->hw.wiphy->signal_type = CFG80211_SIGNAL_TYPE_UNSPEC;
798 
799 	WARN((local->hw.flags & IEEE80211_HW_SUPPORTS_UAPSD)
800 	     && (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK),
801 	     "U-APSD not supported with HW_PS_NULLFUNC_STACK\n");
802 
803 	/*
804 	 * Calculate scan IE length -- we need this to alloc
805 	 * memory and to subtract from the driver limit. It
806 	 * includes the DS Params, (extended) supported rates, and HT
807 	 * information -- SSID is the driver's responsibility.
808 	 */
809 	local->scan_ies_len = 4 + max_bitrates /* (ext) supp rates */ +
810 		3 /* DS Params */;
811 	if (supp_ht)
812 		local->scan_ies_len += 2 + sizeof(struct ieee80211_ht_cap);
813 
814 	if (!local->ops->hw_scan) {
815 		/* For hw_scan, driver needs to set these up. */
816 		local->hw.wiphy->max_scan_ssids = 4;
817 		local->hw.wiphy->max_scan_ie_len = IEEE80211_MAX_DATA_LEN;
818 	}
819 
820 	/*
821 	 * If the driver supports any scan IEs, then assume the
822 	 * limit includes the IEs mac80211 will add, otherwise
823 	 * leave it at zero and let the driver sort it out; we
824 	 * still pass our IEs to the driver but userspace will
825 	 * not be allowed to in that case.
826 	 */
827 	if (local->hw.wiphy->max_scan_ie_len)
828 		local->hw.wiphy->max_scan_ie_len -= local->scan_ies_len;
829 
830 	/* Set up cipher suites unless driver already did */
831 	if (!local->hw.wiphy->cipher_suites) {
832 		local->hw.wiphy->cipher_suites = cipher_suites;
833 		local->hw.wiphy->n_cipher_suites = ARRAY_SIZE(cipher_suites);
834 		if (!(local->hw.flags & IEEE80211_HW_MFP_CAPABLE))
835 			local->hw.wiphy->n_cipher_suites--;
836 	}
837 	if (IS_ERR(local->wep_tx_tfm) || IS_ERR(local->wep_rx_tfm)) {
838 		if (local->hw.wiphy->cipher_suites == cipher_suites) {
839 			local->hw.wiphy->cipher_suites += 2;
840 			local->hw.wiphy->n_cipher_suites -= 2;
841 		} else {
842 			u32 *suites;
843 			int r, w = 0;
844 
845 			/* Filter out WEP */
846 
847 			suites = kmemdup(
848 				local->hw.wiphy->cipher_suites,
849 				sizeof(u32) * local->hw.wiphy->n_cipher_suites,
850 				GFP_KERNEL);
851 			if (!suites)
852 				return -ENOMEM;
853 			for (r = 0; r < local->hw.wiphy->n_cipher_suites; r++) {
854 				u32 suite = local->hw.wiphy->cipher_suites[r];
855 				if (suite == WLAN_CIPHER_SUITE_WEP40 ||
856 				    suite == WLAN_CIPHER_SUITE_WEP104)
857 					continue;
858 				suites[w++] = suite;
859 			}
860 			local->hw.wiphy->cipher_suites = suites;
861 			local->hw.wiphy->n_cipher_suites = w;
862 			local->wiphy_ciphers_allocated = true;
863 		}
864 	}
865 
866 	if (!local->ops->remain_on_channel)
867 		local->hw.wiphy->max_remain_on_channel_duration = 5000;
868 
869 	if (local->ops->sched_scan_start)
870 		local->hw.wiphy->flags |= WIPHY_FLAG_SUPPORTS_SCHED_SCAN;
871 
872 	/* mac80211 based drivers don't support internal TDLS setup */
873 	if (local->hw.wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS)
874 		local->hw.wiphy->flags |= WIPHY_FLAG_TDLS_EXTERNAL_SETUP;
875 
876 	result = wiphy_register(local->hw.wiphy);
877 	if (result < 0)
878 		goto fail_wiphy_register;
879 
880 	/*
881 	 * We use the number of queues for feature tests (QoS, HT) internally
882 	 * so restrict them appropriately.
883 	 */
884 	if (hw->queues > IEEE80211_MAX_QUEUES)
885 		hw->queues = IEEE80211_MAX_QUEUES;
886 
887 	local->workqueue =
888 		alloc_ordered_workqueue(wiphy_name(local->hw.wiphy), 0);
889 	if (!local->workqueue) {
890 		result = -ENOMEM;
891 		goto fail_workqueue;
892 	}
893 
894 	/*
895 	 * The hardware needs headroom for sending the frame,
896 	 * and we need some headroom for passing the frame to monitor
897 	 * interfaces, but never both at the same time.
898 	 */
899 	local->tx_headroom = max_t(unsigned int , local->hw.extra_tx_headroom,
900 				   IEEE80211_TX_STATUS_HEADROOM);
901 
902 	debugfs_hw_add(local);
903 
904 	/*
905 	 * if the driver doesn't specify a max listen interval we
906 	 * use 5 which should be a safe default
907 	 */
908 	if (local->hw.max_listen_interval == 0)
909 		local->hw.max_listen_interval = 5;
910 
911 	local->hw.conf.listen_interval = local->hw.max_listen_interval;
912 
913 	local->dynamic_ps_forced_timeout = -1;
914 
915 	result = ieee80211_wep_init(local);
916 	if (result < 0)
917 		wiphy_debug(local->hw.wiphy, "Failed to initialize wep: %d\n",
918 			    result);
919 
920 	ieee80211_led_init(local);
921 
922 	rtnl_lock();
923 
924 	result = ieee80211_init_rate_ctrl_alg(local,
925 					      hw->rate_control_algorithm);
926 	if (result < 0) {
927 		wiphy_debug(local->hw.wiphy,
928 			    "Failed to initialize rate control algorithm\n");
929 		goto fail_rate;
930 	}
931 
932 	/* add one default STA interface if supported */
933 	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_STATION)) {
934 		result = ieee80211_if_add(local, "wlan%d", NULL,
935 					  NL80211_IFTYPE_STATION, NULL);
936 		if (result)
937 			wiphy_warn(local->hw.wiphy,
938 				   "Failed to add default virtual iface\n");
939 	}
940 
941 	rtnl_unlock();
942 
943 	local->network_latency_notifier.notifier_call =
944 		ieee80211_max_network_latency;
945 	result = pm_qos_add_notifier(PM_QOS_NETWORK_LATENCY,
946 				     &local->network_latency_notifier);
947 	if (result) {
948 		rtnl_lock();
949 		goto fail_pm_qos;
950 	}
951 
952 #ifdef CONFIG_INET
953 	local->ifa_notifier.notifier_call = ieee80211_ifa_changed;
954 	result = register_inetaddr_notifier(&local->ifa_notifier);
955 	if (result)
956 		goto fail_ifa;
957 #endif
958 
959 	netif_napi_add(&local->napi_dev, &local->napi, ieee80211_napi_poll,
960 			local->hw.napi_weight);
961 
962 	return 0;
963 
964 #ifdef CONFIG_INET
965  fail_ifa:
966 	pm_qos_remove_notifier(PM_QOS_NETWORK_LATENCY,
967 			       &local->network_latency_notifier);
968 	rtnl_lock();
969 #endif
970  fail_pm_qos:
971 	ieee80211_led_exit(local);
972 	ieee80211_remove_interfaces(local);
973  fail_rate:
974 	rtnl_unlock();
975 	ieee80211_wep_free(local);
976 	sta_info_stop(local);
977 	destroy_workqueue(local->workqueue);
978  fail_workqueue:
979 	wiphy_unregister(local->hw.wiphy);
980  fail_wiphy_register:
981 	if (local->wiphy_ciphers_allocated)
982 		kfree(local->hw.wiphy->cipher_suites);
983 	kfree(local->int_scan_req);
984 	return result;
985 }
986 EXPORT_SYMBOL(ieee80211_register_hw);
987 
988 void ieee80211_unregister_hw(struct ieee80211_hw *hw)
989 {
990 	struct ieee80211_local *local = hw_to_local(hw);
991 
992 	tasklet_kill(&local->tx_pending_tasklet);
993 	tasklet_kill(&local->tasklet);
994 
995 	pm_qos_remove_notifier(PM_QOS_NETWORK_LATENCY,
996 			       &local->network_latency_notifier);
997 #ifdef CONFIG_INET
998 	unregister_inetaddr_notifier(&local->ifa_notifier);
999 #endif
1000 
1001 	rtnl_lock();
1002 
1003 	/*
1004 	 * At this point, interface list manipulations are fine
1005 	 * because the driver cannot be handing us frames any
1006 	 * more and the tasklet is killed.
1007 	 */
1008 	ieee80211_remove_interfaces(local);
1009 
1010 	rtnl_unlock();
1011 
1012 	/*
1013 	 * Now all work items will be gone, but the
1014 	 * timer might still be armed, so delete it
1015 	 */
1016 	del_timer_sync(&local->work_timer);
1017 
1018 	cancel_work_sync(&local->restart_work);
1019 	cancel_work_sync(&local->reconfig_filter);
1020 
1021 	ieee80211_clear_tx_pending(local);
1022 	rate_control_deinitialize(local);
1023 
1024 	if (skb_queue_len(&local->skb_queue) ||
1025 	    skb_queue_len(&local->skb_queue_unreliable))
1026 		wiphy_warn(local->hw.wiphy, "skb_queue not empty\n");
1027 	skb_queue_purge(&local->skb_queue);
1028 	skb_queue_purge(&local->skb_queue_unreliable);
1029 	skb_queue_purge(&local->rx_skb_queue);
1030 
1031 	destroy_workqueue(local->workqueue);
1032 	wiphy_unregister(local->hw.wiphy);
1033 	sta_info_stop(local);
1034 	ieee80211_wep_free(local);
1035 	ieee80211_led_exit(local);
1036 	kfree(local->int_scan_req);
1037 }
1038 EXPORT_SYMBOL(ieee80211_unregister_hw);
1039 
1040 static int ieee80211_free_ack_frame(int id, void *p, void *data)
1041 {
1042 	WARN_ONCE(1, "Have pending ack frames!\n");
1043 	kfree_skb(p);
1044 	return 0;
1045 }
1046 
1047 void ieee80211_free_hw(struct ieee80211_hw *hw)
1048 {
1049 	struct ieee80211_local *local = hw_to_local(hw);
1050 
1051 	mutex_destroy(&local->iflist_mtx);
1052 	mutex_destroy(&local->mtx);
1053 
1054 	if (local->wiphy_ciphers_allocated)
1055 		kfree(local->hw.wiphy->cipher_suites);
1056 
1057 	idr_for_each(&local->ack_status_frames,
1058 		     ieee80211_free_ack_frame, NULL);
1059 	idr_destroy(&local->ack_status_frames);
1060 
1061 	wiphy_free(local->hw.wiphy);
1062 }
1063 EXPORT_SYMBOL(ieee80211_free_hw);
1064 
1065 static int __init ieee80211_init(void)
1066 {
1067 	struct sk_buff *skb;
1068 	int ret;
1069 
1070 	BUILD_BUG_ON(sizeof(struct ieee80211_tx_info) > sizeof(skb->cb));
1071 	BUILD_BUG_ON(offsetof(struct ieee80211_tx_info, driver_data) +
1072 		     IEEE80211_TX_INFO_DRIVER_DATA_SIZE > sizeof(skb->cb));
1073 
1074 	ret = rc80211_minstrel_init();
1075 	if (ret)
1076 		return ret;
1077 
1078 	ret = rc80211_minstrel_ht_init();
1079 	if (ret)
1080 		goto err_minstrel;
1081 
1082 	ret = rc80211_pid_init();
1083 	if (ret)
1084 		goto err_pid;
1085 
1086 	ret = ieee80211_iface_init();
1087 	if (ret)
1088 		goto err_netdev;
1089 
1090 	return 0;
1091  err_netdev:
1092 	rc80211_pid_exit();
1093  err_pid:
1094 	rc80211_minstrel_ht_exit();
1095  err_minstrel:
1096 	rc80211_minstrel_exit();
1097 
1098 	return ret;
1099 }
1100 
1101 static void __exit ieee80211_exit(void)
1102 {
1103 	rc80211_pid_exit();
1104 	rc80211_minstrel_ht_exit();
1105 	rc80211_minstrel_exit();
1106 
1107 	if (mesh_allocated)
1108 		ieee80211s_stop();
1109 
1110 	ieee80211_iface_exit();
1111 
1112 	rcu_barrier();
1113 }
1114 
1115 
1116 subsys_initcall(ieee80211_init);
1117 module_exit(ieee80211_exit);
1118 
1119 MODULE_DESCRIPTION("IEEE 802.11 subsystem");
1120 MODULE_LICENSE("GPL");
1121