xref: /linux/net/wireless/wext-compat.c (revision 6beeaf48db6c548fcfc2ad32739d33af2fef3a5b)
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * cfg80211 - wext compat code
4  *
5  * This is temporary code until all wireless functionality is migrated
6  * into cfg80211, when that happens all the exports here go away and
7  * we directly assign the wireless handlers of wireless interfaces.
8  *
9  * Copyright 2008-2009	Johannes Berg <johannes@sipsolutions.net>
10  * Copyright (C) 2019-2021 Intel Corporation
11  */
12 
13 #include <linux/export.h>
14 #include <linux/wireless.h>
15 #include <linux/nl80211.h>
16 #include <linux/if_arp.h>
17 #include <linux/etherdevice.h>
18 #include <linux/slab.h>
19 #include <net/iw_handler.h>
20 #include <net/cfg80211.h>
21 #include <net/cfg80211-wext.h>
22 #include "wext-compat.h"
23 #include "core.h"
24 #include "rdev-ops.h"
25 
26 int cfg80211_wext_giwname(struct net_device *dev,
27 			  struct iw_request_info *info,
28 			  char *name, char *extra)
29 {
30 	strcpy(name, "IEEE 802.11");
31 	return 0;
32 }
33 EXPORT_WEXT_HANDLER(cfg80211_wext_giwname);
34 
35 int cfg80211_wext_siwmode(struct net_device *dev, struct iw_request_info *info,
36 			  u32 *mode, char *extra)
37 {
38 	struct wireless_dev *wdev = dev->ieee80211_ptr;
39 	struct cfg80211_registered_device *rdev;
40 	struct vif_params vifparams;
41 	enum nl80211_iftype type;
42 	int ret;
43 
44 	rdev = wiphy_to_rdev(wdev->wiphy);
45 
46 	switch (*mode) {
47 	case IW_MODE_INFRA:
48 		type = NL80211_IFTYPE_STATION;
49 		break;
50 	case IW_MODE_ADHOC:
51 		type = NL80211_IFTYPE_ADHOC;
52 		break;
53 	case IW_MODE_MONITOR:
54 		type = NL80211_IFTYPE_MONITOR;
55 		break;
56 	default:
57 		return -EINVAL;
58 	}
59 
60 	if (type == wdev->iftype)
61 		return 0;
62 
63 	memset(&vifparams, 0, sizeof(vifparams));
64 
65 	wiphy_lock(wdev->wiphy);
66 	ret = cfg80211_change_iface(rdev, dev, type, &vifparams);
67 	wiphy_unlock(wdev->wiphy);
68 
69 	return ret;
70 }
71 EXPORT_WEXT_HANDLER(cfg80211_wext_siwmode);
72 
73 int cfg80211_wext_giwmode(struct net_device *dev, struct iw_request_info *info,
74 			  u32 *mode, char *extra)
75 {
76 	struct wireless_dev *wdev = dev->ieee80211_ptr;
77 
78 	if (!wdev)
79 		return -EOPNOTSUPP;
80 
81 	switch (wdev->iftype) {
82 	case NL80211_IFTYPE_AP:
83 		*mode = IW_MODE_MASTER;
84 		break;
85 	case NL80211_IFTYPE_STATION:
86 		*mode = IW_MODE_INFRA;
87 		break;
88 	case NL80211_IFTYPE_ADHOC:
89 		*mode = IW_MODE_ADHOC;
90 		break;
91 	case NL80211_IFTYPE_MONITOR:
92 		*mode = IW_MODE_MONITOR;
93 		break;
94 	case NL80211_IFTYPE_WDS:
95 		*mode = IW_MODE_REPEAT;
96 		break;
97 	case NL80211_IFTYPE_AP_VLAN:
98 		*mode = IW_MODE_SECOND;		/* FIXME */
99 		break;
100 	default:
101 		*mode = IW_MODE_AUTO;
102 		break;
103 	}
104 	return 0;
105 }
106 EXPORT_WEXT_HANDLER(cfg80211_wext_giwmode);
107 
108 
109 int cfg80211_wext_giwrange(struct net_device *dev,
110 			   struct iw_request_info *info,
111 			   struct iw_point *data, char *extra)
112 {
113 	struct wireless_dev *wdev = dev->ieee80211_ptr;
114 	struct iw_range *range = (struct iw_range *) extra;
115 	enum nl80211_band band;
116 	int i, c = 0;
117 
118 	if (!wdev)
119 		return -EOPNOTSUPP;
120 
121 	data->length = sizeof(struct iw_range);
122 	memset(range, 0, sizeof(struct iw_range));
123 
124 	range->we_version_compiled = WIRELESS_EXT;
125 	range->we_version_source = 21;
126 	range->retry_capa = IW_RETRY_LIMIT;
127 	range->retry_flags = IW_RETRY_LIMIT;
128 	range->min_retry = 0;
129 	range->max_retry = 255;
130 	range->min_rts = 0;
131 	range->max_rts = 2347;
132 	range->min_frag = 256;
133 	range->max_frag = 2346;
134 
135 	range->max_encoding_tokens = 4;
136 
137 	range->max_qual.updated = IW_QUAL_NOISE_INVALID;
138 
139 	switch (wdev->wiphy->signal_type) {
140 	case CFG80211_SIGNAL_TYPE_NONE:
141 		break;
142 	case CFG80211_SIGNAL_TYPE_MBM:
143 		range->max_qual.level = (u8)-110;
144 		range->max_qual.qual = 70;
145 		range->avg_qual.qual = 35;
146 		range->max_qual.updated |= IW_QUAL_DBM;
147 		range->max_qual.updated |= IW_QUAL_QUAL_UPDATED;
148 		range->max_qual.updated |= IW_QUAL_LEVEL_UPDATED;
149 		break;
150 	case CFG80211_SIGNAL_TYPE_UNSPEC:
151 		range->max_qual.level = 100;
152 		range->max_qual.qual = 100;
153 		range->avg_qual.qual = 50;
154 		range->max_qual.updated |= IW_QUAL_QUAL_UPDATED;
155 		range->max_qual.updated |= IW_QUAL_LEVEL_UPDATED;
156 		break;
157 	}
158 
159 	range->avg_qual.level = range->max_qual.level / 2;
160 	range->avg_qual.noise = range->max_qual.noise / 2;
161 	range->avg_qual.updated = range->max_qual.updated;
162 
163 	for (i = 0; i < wdev->wiphy->n_cipher_suites; i++) {
164 		switch (wdev->wiphy->cipher_suites[i]) {
165 		case WLAN_CIPHER_SUITE_TKIP:
166 			range->enc_capa |= (IW_ENC_CAPA_CIPHER_TKIP |
167 					    IW_ENC_CAPA_WPA);
168 			break;
169 
170 		case WLAN_CIPHER_SUITE_CCMP:
171 			range->enc_capa |= (IW_ENC_CAPA_CIPHER_CCMP |
172 					    IW_ENC_CAPA_WPA2);
173 			break;
174 
175 		case WLAN_CIPHER_SUITE_WEP40:
176 			range->encoding_size[range->num_encoding_sizes++] =
177 				WLAN_KEY_LEN_WEP40;
178 			break;
179 
180 		case WLAN_CIPHER_SUITE_WEP104:
181 			range->encoding_size[range->num_encoding_sizes++] =
182 				WLAN_KEY_LEN_WEP104;
183 			break;
184 		}
185 	}
186 
187 	for (band = 0; band < NUM_NL80211_BANDS; band ++) {
188 		struct ieee80211_supported_band *sband;
189 
190 		sband = wdev->wiphy->bands[band];
191 
192 		if (!sband)
193 			continue;
194 
195 		for (i = 0; i < sband->n_channels && c < IW_MAX_FREQUENCIES; i++) {
196 			struct ieee80211_channel *chan = &sband->channels[i];
197 
198 			if (!(chan->flags & IEEE80211_CHAN_DISABLED)) {
199 				range->freq[c].i =
200 					ieee80211_frequency_to_channel(
201 						chan->center_freq);
202 				range->freq[c].m = chan->center_freq;
203 				range->freq[c].e = 6;
204 				c++;
205 			}
206 		}
207 	}
208 	range->num_channels = c;
209 	range->num_frequency = c;
210 
211 	IW_EVENT_CAPA_SET_KERNEL(range->event_capa);
212 	IW_EVENT_CAPA_SET(range->event_capa, SIOCGIWAP);
213 	IW_EVENT_CAPA_SET(range->event_capa, SIOCGIWSCAN);
214 
215 	if (wdev->wiphy->max_scan_ssids > 0)
216 		range->scan_capa |= IW_SCAN_CAPA_ESSID;
217 
218 	return 0;
219 }
220 EXPORT_WEXT_HANDLER(cfg80211_wext_giwrange);
221 
222 
223 /**
224  * cfg80211_wext_freq - get wext frequency for non-"auto"
225  * @freq: the wext freq encoding
226  *
227  * Returns a frequency, or a negative error code, or 0 for auto.
228  */
229 int cfg80211_wext_freq(struct iw_freq *freq)
230 {
231 	/*
232 	 * Parse frequency - return 0 for auto and
233 	 * -EINVAL for impossible things.
234 	 */
235 	if (freq->e == 0) {
236 		enum nl80211_band band = NL80211_BAND_2GHZ;
237 		if (freq->m < 0)
238 			return 0;
239 		if (freq->m > 14)
240 			band = NL80211_BAND_5GHZ;
241 		return ieee80211_channel_to_frequency(freq->m, band);
242 	} else {
243 		int i, div = 1000000;
244 		for (i = 0; i < freq->e; i++)
245 			div /= 10;
246 		if (div <= 0)
247 			return -EINVAL;
248 		return freq->m / div;
249 	}
250 }
251 
252 int cfg80211_wext_siwrts(struct net_device *dev,
253 			 struct iw_request_info *info,
254 			 struct iw_param *rts, char *extra)
255 {
256 	struct wireless_dev *wdev = dev->ieee80211_ptr;
257 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
258 	u32 orts = wdev->wiphy->rts_threshold;
259 	int err;
260 
261 	wiphy_lock(&rdev->wiphy);
262 	if (rts->disabled || !rts->fixed) {
263 		wdev->wiphy->rts_threshold = (u32) -1;
264 	} else if (rts->value < 0) {
265 		err = -EINVAL;
266 		goto out;
267 	} else {
268 		wdev->wiphy->rts_threshold = rts->value;
269 	}
270 
271 	err = rdev_set_wiphy_params(rdev, WIPHY_PARAM_RTS_THRESHOLD);
272 
273 	if (err)
274 		wdev->wiphy->rts_threshold = orts;
275 
276 out:
277 	wiphy_unlock(&rdev->wiphy);
278 	return err;
279 }
280 EXPORT_WEXT_HANDLER(cfg80211_wext_siwrts);
281 
282 int cfg80211_wext_giwrts(struct net_device *dev,
283 			 struct iw_request_info *info,
284 			 struct iw_param *rts, char *extra)
285 {
286 	struct wireless_dev *wdev = dev->ieee80211_ptr;
287 
288 	rts->value = wdev->wiphy->rts_threshold;
289 	rts->disabled = rts->value == (u32) -1;
290 	rts->fixed = 1;
291 
292 	return 0;
293 }
294 EXPORT_WEXT_HANDLER(cfg80211_wext_giwrts);
295 
296 int cfg80211_wext_siwfrag(struct net_device *dev,
297 			  struct iw_request_info *info,
298 			  struct iw_param *frag, char *extra)
299 {
300 	struct wireless_dev *wdev = dev->ieee80211_ptr;
301 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
302 	u32 ofrag = wdev->wiphy->frag_threshold;
303 	int err;
304 
305 	wiphy_lock(&rdev->wiphy);
306 	if (frag->disabled || !frag->fixed) {
307 		wdev->wiphy->frag_threshold = (u32) -1;
308 	} else if (frag->value < 256) {
309 		err = -EINVAL;
310 		goto out;
311 	} else {
312 		/* Fragment length must be even, so strip LSB. */
313 		wdev->wiphy->frag_threshold = frag->value & ~0x1;
314 	}
315 
316 	err = rdev_set_wiphy_params(rdev, WIPHY_PARAM_FRAG_THRESHOLD);
317 	if (err)
318 		wdev->wiphy->frag_threshold = ofrag;
319 out:
320 	wiphy_unlock(&rdev->wiphy);
321 
322 	return err;
323 }
324 EXPORT_WEXT_HANDLER(cfg80211_wext_siwfrag);
325 
326 int cfg80211_wext_giwfrag(struct net_device *dev,
327 			  struct iw_request_info *info,
328 			  struct iw_param *frag, char *extra)
329 {
330 	struct wireless_dev *wdev = dev->ieee80211_ptr;
331 
332 	frag->value = wdev->wiphy->frag_threshold;
333 	frag->disabled = frag->value == (u32) -1;
334 	frag->fixed = 1;
335 
336 	return 0;
337 }
338 EXPORT_WEXT_HANDLER(cfg80211_wext_giwfrag);
339 
340 static int cfg80211_wext_siwretry(struct net_device *dev,
341 				  struct iw_request_info *info,
342 				  struct iw_param *retry, char *extra)
343 {
344 	struct wireless_dev *wdev = dev->ieee80211_ptr;
345 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
346 	u32 changed = 0;
347 	u8 olong = wdev->wiphy->retry_long;
348 	u8 oshort = wdev->wiphy->retry_short;
349 	int err;
350 
351 	if (retry->disabled || retry->value < 1 || retry->value > 255 ||
352 	    (retry->flags & IW_RETRY_TYPE) != IW_RETRY_LIMIT)
353 		return -EINVAL;
354 
355 	wiphy_lock(&rdev->wiphy);
356 	if (retry->flags & IW_RETRY_LONG) {
357 		wdev->wiphy->retry_long = retry->value;
358 		changed |= WIPHY_PARAM_RETRY_LONG;
359 	} else if (retry->flags & IW_RETRY_SHORT) {
360 		wdev->wiphy->retry_short = retry->value;
361 		changed |= WIPHY_PARAM_RETRY_SHORT;
362 	} else {
363 		wdev->wiphy->retry_short = retry->value;
364 		wdev->wiphy->retry_long = retry->value;
365 		changed |= WIPHY_PARAM_RETRY_LONG;
366 		changed |= WIPHY_PARAM_RETRY_SHORT;
367 	}
368 
369 	err = rdev_set_wiphy_params(rdev, changed);
370 	if (err) {
371 		wdev->wiphy->retry_short = oshort;
372 		wdev->wiphy->retry_long = olong;
373 	}
374 	wiphy_unlock(&rdev->wiphy);
375 
376 	return err;
377 }
378 
379 int cfg80211_wext_giwretry(struct net_device *dev,
380 			   struct iw_request_info *info,
381 			   struct iw_param *retry, char *extra)
382 {
383 	struct wireless_dev *wdev = dev->ieee80211_ptr;
384 
385 	retry->disabled = 0;
386 
387 	if (retry->flags == 0 || (retry->flags & IW_RETRY_SHORT)) {
388 		/*
389 		 * First return short value, iwconfig will ask long value
390 		 * later if needed
391 		 */
392 		retry->flags |= IW_RETRY_LIMIT | IW_RETRY_SHORT;
393 		retry->value = wdev->wiphy->retry_short;
394 		if (wdev->wiphy->retry_long == wdev->wiphy->retry_short)
395 			retry->flags |= IW_RETRY_LONG;
396 
397 		return 0;
398 	}
399 
400 	if (retry->flags & IW_RETRY_LONG) {
401 		retry->flags = IW_RETRY_LIMIT | IW_RETRY_LONG;
402 		retry->value = wdev->wiphy->retry_long;
403 	}
404 
405 	return 0;
406 }
407 EXPORT_WEXT_HANDLER(cfg80211_wext_giwretry);
408 
409 static int __cfg80211_set_encryption(struct cfg80211_registered_device *rdev,
410 				     struct net_device *dev, bool pairwise,
411 				     const u8 *addr, bool remove, bool tx_key,
412 				     int idx, struct key_params *params)
413 {
414 	struct wireless_dev *wdev = dev->ieee80211_ptr;
415 	int err, i;
416 	bool rejoin = false;
417 
418 	if (pairwise && !addr)
419 		return -EINVAL;
420 
421 	/*
422 	 * In many cases we won't actually need this, but it's better
423 	 * to do it first in case the allocation fails. Don't use wext.
424 	 */
425 	if (!wdev->wext.keys) {
426 		wdev->wext.keys = kzalloc(sizeof(*wdev->wext.keys),
427 					  GFP_KERNEL);
428 		if (!wdev->wext.keys)
429 			return -ENOMEM;
430 		for (i = 0; i < CFG80211_MAX_WEP_KEYS; i++)
431 			wdev->wext.keys->params[i].key =
432 				wdev->wext.keys->data[i];
433 	}
434 
435 	if (wdev->iftype != NL80211_IFTYPE_ADHOC &&
436 	    wdev->iftype != NL80211_IFTYPE_STATION)
437 		return -EOPNOTSUPP;
438 
439 	if (params->cipher == WLAN_CIPHER_SUITE_AES_CMAC) {
440 		if (!wdev->current_bss)
441 			return -ENOLINK;
442 
443 		if (!rdev->ops->set_default_mgmt_key)
444 			return -EOPNOTSUPP;
445 
446 		if (idx < 4 || idx > 5)
447 			return -EINVAL;
448 	} else if (idx < 0 || idx > 3)
449 		return -EINVAL;
450 
451 	if (remove) {
452 		err = 0;
453 		if (wdev->current_bss) {
454 			/*
455 			 * If removing the current TX key, we will need to
456 			 * join a new IBSS without the privacy bit clear.
457 			 */
458 			if (idx == wdev->wext.default_key &&
459 			    wdev->iftype == NL80211_IFTYPE_ADHOC) {
460 				__cfg80211_leave_ibss(rdev, wdev->netdev, true);
461 				rejoin = true;
462 			}
463 
464 			if (!pairwise && addr &&
465 			    !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
466 				err = -ENOENT;
467 			else
468 				err = rdev_del_key(rdev, dev, idx, pairwise,
469 						   addr);
470 		}
471 		wdev->wext.connect.privacy = false;
472 		/*
473 		 * Applications using wireless extensions expect to be
474 		 * able to delete keys that don't exist, so allow that.
475 		 */
476 		if (err == -ENOENT)
477 			err = 0;
478 		if (!err) {
479 			if (!addr && idx < 4) {
480 				memset(wdev->wext.keys->data[idx], 0,
481 				       sizeof(wdev->wext.keys->data[idx]));
482 				wdev->wext.keys->params[idx].key_len = 0;
483 				wdev->wext.keys->params[idx].cipher = 0;
484 			}
485 			if (idx == wdev->wext.default_key)
486 				wdev->wext.default_key = -1;
487 			else if (idx == wdev->wext.default_mgmt_key)
488 				wdev->wext.default_mgmt_key = -1;
489 		}
490 
491 		if (!err && rejoin)
492 			err = cfg80211_ibss_wext_join(rdev, wdev);
493 
494 		return err;
495 	}
496 
497 	if (addr)
498 		tx_key = false;
499 
500 	if (cfg80211_validate_key_settings(rdev, params, idx, pairwise, addr))
501 		return -EINVAL;
502 
503 	err = 0;
504 	if (wdev->current_bss)
505 		err = rdev_add_key(rdev, dev, idx, pairwise, addr, params);
506 	else if (params->cipher != WLAN_CIPHER_SUITE_WEP40 &&
507 		 params->cipher != WLAN_CIPHER_SUITE_WEP104)
508 		return -EINVAL;
509 	if (err)
510 		return err;
511 
512 	/*
513 	 * We only need to store WEP keys, since they're the only keys that
514 	 * can be set before a connection is established and persist after
515 	 * disconnecting.
516 	 */
517 	if (!addr && (params->cipher == WLAN_CIPHER_SUITE_WEP40 ||
518 		      params->cipher == WLAN_CIPHER_SUITE_WEP104)) {
519 		wdev->wext.keys->params[idx] = *params;
520 		memcpy(wdev->wext.keys->data[idx],
521 			params->key, params->key_len);
522 		wdev->wext.keys->params[idx].key =
523 			wdev->wext.keys->data[idx];
524 	}
525 
526 	if ((params->cipher == WLAN_CIPHER_SUITE_WEP40 ||
527 	     params->cipher == WLAN_CIPHER_SUITE_WEP104) &&
528 	    (tx_key || (!addr && wdev->wext.default_key == -1))) {
529 		if (wdev->current_bss) {
530 			/*
531 			 * If we are getting a new TX key from not having
532 			 * had one before we need to join a new IBSS with
533 			 * the privacy bit set.
534 			 */
535 			if (wdev->iftype == NL80211_IFTYPE_ADHOC &&
536 			    wdev->wext.default_key == -1) {
537 				__cfg80211_leave_ibss(rdev, wdev->netdev, true);
538 				rejoin = true;
539 			}
540 			err = rdev_set_default_key(rdev, dev, idx, true, true);
541 		}
542 		if (!err) {
543 			wdev->wext.default_key = idx;
544 			if (rejoin)
545 				err = cfg80211_ibss_wext_join(rdev, wdev);
546 		}
547 		return err;
548 	}
549 
550 	if (params->cipher == WLAN_CIPHER_SUITE_AES_CMAC &&
551 	    (tx_key || (!addr && wdev->wext.default_mgmt_key == -1))) {
552 		if (wdev->current_bss)
553 			err = rdev_set_default_mgmt_key(rdev, dev, idx);
554 		if (!err)
555 			wdev->wext.default_mgmt_key = idx;
556 		return err;
557 	}
558 
559 	return 0;
560 }
561 
562 static int cfg80211_set_encryption(struct cfg80211_registered_device *rdev,
563 				   struct net_device *dev, bool pairwise,
564 				   const u8 *addr, bool remove, bool tx_key,
565 				   int idx, struct key_params *params)
566 {
567 	int err;
568 
569 	wdev_lock(dev->ieee80211_ptr);
570 	err = __cfg80211_set_encryption(rdev, dev, pairwise, addr,
571 					remove, tx_key, idx, params);
572 	wdev_unlock(dev->ieee80211_ptr);
573 
574 	return err;
575 }
576 
577 static int cfg80211_wext_siwencode(struct net_device *dev,
578 				   struct iw_request_info *info,
579 				   struct iw_point *erq, char *keybuf)
580 {
581 	struct wireless_dev *wdev = dev->ieee80211_ptr;
582 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
583 	int idx, err;
584 	bool remove = false;
585 	struct key_params params;
586 
587 	if (wdev->iftype != NL80211_IFTYPE_STATION &&
588 	    wdev->iftype != NL80211_IFTYPE_ADHOC)
589 		return -EOPNOTSUPP;
590 
591 	/* no use -- only MFP (set_default_mgmt_key) is optional */
592 	if (!rdev->ops->del_key ||
593 	    !rdev->ops->add_key ||
594 	    !rdev->ops->set_default_key)
595 		return -EOPNOTSUPP;
596 
597 	wiphy_lock(&rdev->wiphy);
598 	idx = erq->flags & IW_ENCODE_INDEX;
599 	if (idx == 0) {
600 		idx = wdev->wext.default_key;
601 		if (idx < 0)
602 			idx = 0;
603 	} else if (idx < 1 || idx > 4) {
604 		err = -EINVAL;
605 		goto out;
606 	} else {
607 		idx--;
608 	}
609 
610 	if (erq->flags & IW_ENCODE_DISABLED)
611 		remove = true;
612 	else if (erq->length == 0) {
613 		/* No key data - just set the default TX key index */
614 		err = 0;
615 		wdev_lock(wdev);
616 		if (wdev->current_bss)
617 			err = rdev_set_default_key(rdev, dev, idx, true,
618 						   true);
619 		if (!err)
620 			wdev->wext.default_key = idx;
621 		wdev_unlock(wdev);
622 		goto out;
623 	}
624 
625 	memset(&params, 0, sizeof(params));
626 	params.key = keybuf;
627 	params.key_len = erq->length;
628 	if (erq->length == 5) {
629 		params.cipher = WLAN_CIPHER_SUITE_WEP40;
630 	} else if (erq->length == 13) {
631 		params.cipher = WLAN_CIPHER_SUITE_WEP104;
632 	} else if (!remove) {
633 		err = -EINVAL;
634 		goto out;
635 	}
636 
637 	err = cfg80211_set_encryption(rdev, dev, false, NULL, remove,
638 				      wdev->wext.default_key == -1,
639 				      idx, &params);
640 out:
641 	wiphy_unlock(&rdev->wiphy);
642 
643 	return err;
644 }
645 
646 static int cfg80211_wext_siwencodeext(struct net_device *dev,
647 				      struct iw_request_info *info,
648 				      struct iw_point *erq, char *extra)
649 {
650 	struct wireless_dev *wdev = dev->ieee80211_ptr;
651 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
652 	struct iw_encode_ext *ext = (struct iw_encode_ext *) extra;
653 	const u8 *addr;
654 	int idx;
655 	bool remove = false;
656 	struct key_params params;
657 	u32 cipher;
658 	int ret;
659 
660 	if (wdev->iftype != NL80211_IFTYPE_STATION &&
661 	    wdev->iftype != NL80211_IFTYPE_ADHOC)
662 		return -EOPNOTSUPP;
663 
664 	/* no use -- only MFP (set_default_mgmt_key) is optional */
665 	if (!rdev->ops->del_key ||
666 	    !rdev->ops->add_key ||
667 	    !rdev->ops->set_default_key)
668 		return -EOPNOTSUPP;
669 
670 	switch (ext->alg) {
671 	case IW_ENCODE_ALG_NONE:
672 		remove = true;
673 		cipher = 0;
674 		break;
675 	case IW_ENCODE_ALG_WEP:
676 		if (ext->key_len == 5)
677 			cipher = WLAN_CIPHER_SUITE_WEP40;
678 		else if (ext->key_len == 13)
679 			cipher = WLAN_CIPHER_SUITE_WEP104;
680 		else
681 			return -EINVAL;
682 		break;
683 	case IW_ENCODE_ALG_TKIP:
684 		cipher = WLAN_CIPHER_SUITE_TKIP;
685 		break;
686 	case IW_ENCODE_ALG_CCMP:
687 		cipher = WLAN_CIPHER_SUITE_CCMP;
688 		break;
689 	case IW_ENCODE_ALG_AES_CMAC:
690 		cipher = WLAN_CIPHER_SUITE_AES_CMAC;
691 		break;
692 	default:
693 		return -EOPNOTSUPP;
694 	}
695 
696 	if (erq->flags & IW_ENCODE_DISABLED)
697 		remove = true;
698 
699 	idx = erq->flags & IW_ENCODE_INDEX;
700 	if (cipher == WLAN_CIPHER_SUITE_AES_CMAC) {
701 		if (idx < 4 || idx > 5) {
702 			idx = wdev->wext.default_mgmt_key;
703 			if (idx < 0)
704 				return -EINVAL;
705 		} else
706 			idx--;
707 	} else {
708 		if (idx < 1 || idx > 4) {
709 			idx = wdev->wext.default_key;
710 			if (idx < 0)
711 				return -EINVAL;
712 		} else
713 			idx--;
714 	}
715 
716 	addr = ext->addr.sa_data;
717 	if (is_broadcast_ether_addr(addr))
718 		addr = NULL;
719 
720 	memset(&params, 0, sizeof(params));
721 	params.key = ext->key;
722 	params.key_len = ext->key_len;
723 	params.cipher = cipher;
724 
725 	if (ext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID) {
726 		params.seq = ext->rx_seq;
727 		params.seq_len = 6;
728 	}
729 
730 	wiphy_lock(wdev->wiphy);
731 	ret = cfg80211_set_encryption(
732 			rdev, dev,
733 			!(ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY),
734 			addr, remove,
735 			ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY,
736 			idx, &params);
737 	wiphy_unlock(wdev->wiphy);
738 
739 	return ret;
740 }
741 
742 static int cfg80211_wext_giwencode(struct net_device *dev,
743 				   struct iw_request_info *info,
744 				   struct iw_point *erq, char *keybuf)
745 {
746 	struct wireless_dev *wdev = dev->ieee80211_ptr;
747 	int idx;
748 
749 	if (wdev->iftype != NL80211_IFTYPE_STATION &&
750 	    wdev->iftype != NL80211_IFTYPE_ADHOC)
751 		return -EOPNOTSUPP;
752 
753 	idx = erq->flags & IW_ENCODE_INDEX;
754 	if (idx == 0) {
755 		idx = wdev->wext.default_key;
756 		if (idx < 0)
757 			idx = 0;
758 	} else if (idx < 1 || idx > 4)
759 		return -EINVAL;
760 	else
761 		idx--;
762 
763 	erq->flags = idx + 1;
764 
765 	if (!wdev->wext.keys || !wdev->wext.keys->params[idx].cipher) {
766 		erq->flags |= IW_ENCODE_DISABLED;
767 		erq->length = 0;
768 		return 0;
769 	}
770 
771 	erq->length = min_t(size_t, erq->length,
772 			    wdev->wext.keys->params[idx].key_len);
773 	memcpy(keybuf, wdev->wext.keys->params[idx].key, erq->length);
774 	erq->flags |= IW_ENCODE_ENABLED;
775 
776 	return 0;
777 }
778 
779 static int cfg80211_wext_siwfreq(struct net_device *dev,
780 				 struct iw_request_info *info,
781 				 struct iw_freq *wextfreq, char *extra)
782 {
783 	struct wireless_dev *wdev = dev->ieee80211_ptr;
784 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
785 	struct cfg80211_chan_def chandef = {
786 		.width = NL80211_CHAN_WIDTH_20_NOHT,
787 	};
788 	int freq, ret;
789 
790 	wiphy_lock(&rdev->wiphy);
791 
792 	switch (wdev->iftype) {
793 	case NL80211_IFTYPE_STATION:
794 		ret = cfg80211_mgd_wext_siwfreq(dev, info, wextfreq, extra);
795 		break;
796 	case NL80211_IFTYPE_ADHOC:
797 		ret = cfg80211_ibss_wext_siwfreq(dev, info, wextfreq, extra);
798 		break;
799 	case NL80211_IFTYPE_MONITOR:
800 		freq = cfg80211_wext_freq(wextfreq);
801 		if (freq < 0) {
802 			ret = freq;
803 			break;
804 		}
805 		if (freq == 0) {
806 			ret = -EINVAL;
807 			break;
808 		}
809 		chandef.center_freq1 = freq;
810 		chandef.chan = ieee80211_get_channel(&rdev->wiphy, freq);
811 		if (!chandef.chan) {
812 			ret = -EINVAL;
813 			break;
814 		}
815 		ret = cfg80211_set_monitor_channel(rdev, &chandef);
816 		break;
817 	case NL80211_IFTYPE_MESH_POINT:
818 		freq = cfg80211_wext_freq(wextfreq);
819 		if (freq < 0) {
820 			ret = freq;
821 			break;
822 		}
823 		if (freq == 0) {
824 			ret = -EINVAL;
825 			break;
826 		}
827 		chandef.center_freq1 = freq;
828 		chandef.chan = ieee80211_get_channel(&rdev->wiphy, freq);
829 		if (!chandef.chan) {
830 			ret = -EINVAL;
831 			break;
832 		}
833 		ret = cfg80211_set_mesh_channel(rdev, wdev, &chandef);
834 		break;
835 	default:
836 		ret = -EOPNOTSUPP;
837 		break;
838 	}
839 
840 	wiphy_unlock(&rdev->wiphy);
841 
842 	return ret;
843 }
844 
845 static int cfg80211_wext_giwfreq(struct net_device *dev,
846 				 struct iw_request_info *info,
847 				 struct iw_freq *freq, char *extra)
848 {
849 	struct wireless_dev *wdev = dev->ieee80211_ptr;
850 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
851 	struct cfg80211_chan_def chandef = {};
852 	int ret;
853 
854 	wiphy_lock(&rdev->wiphy);
855 	switch (wdev->iftype) {
856 	case NL80211_IFTYPE_STATION:
857 		ret = cfg80211_mgd_wext_giwfreq(dev, info, freq, extra);
858 		break;
859 	case NL80211_IFTYPE_ADHOC:
860 		ret = cfg80211_ibss_wext_giwfreq(dev, info, freq, extra);
861 		break;
862 	case NL80211_IFTYPE_MONITOR:
863 		if (!rdev->ops->get_channel) {
864 			ret = -EINVAL;
865 			break;
866 		}
867 
868 		ret = rdev_get_channel(rdev, wdev, &chandef);
869 		if (ret)
870 			break;
871 		freq->m = chandef.chan->center_freq;
872 		freq->e = 6;
873 		ret = 0;
874 		break;
875 	default:
876 		ret = -EINVAL;
877 		break;
878 	}
879 
880 	wiphy_unlock(&rdev->wiphy);
881 
882 	return ret;
883 }
884 
885 static int cfg80211_wext_siwtxpower(struct net_device *dev,
886 				    struct iw_request_info *info,
887 				    union iwreq_data *data, char *extra)
888 {
889 	struct wireless_dev *wdev = dev->ieee80211_ptr;
890 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
891 	enum nl80211_tx_power_setting type;
892 	int dbm = 0;
893 	int ret;
894 
895 	if ((data->txpower.flags & IW_TXPOW_TYPE) != IW_TXPOW_DBM)
896 		return -EINVAL;
897 	if (data->txpower.flags & IW_TXPOW_RANGE)
898 		return -EINVAL;
899 
900 	if (!rdev->ops->set_tx_power)
901 		return -EOPNOTSUPP;
902 
903 	/* only change when not disabling */
904 	if (!data->txpower.disabled) {
905 		rfkill_set_sw_state(rdev->wiphy.rfkill, false);
906 
907 		if (data->txpower.fixed) {
908 			/*
909 			 * wext doesn't support negative values, see
910 			 * below where it's for automatic
911 			 */
912 			if (data->txpower.value < 0)
913 				return -EINVAL;
914 			dbm = data->txpower.value;
915 			type = NL80211_TX_POWER_FIXED;
916 			/* TODO: do regulatory check! */
917 		} else {
918 			/*
919 			 * Automatic power level setting, max being the value
920 			 * passed in from userland.
921 			 */
922 			if (data->txpower.value < 0) {
923 				type = NL80211_TX_POWER_AUTOMATIC;
924 			} else {
925 				dbm = data->txpower.value;
926 				type = NL80211_TX_POWER_LIMITED;
927 			}
928 		}
929 	} else {
930 		if (rfkill_set_sw_state(rdev->wiphy.rfkill, true))
931 			schedule_work(&rdev->rfkill_block);
932 		return 0;
933 	}
934 
935 	wiphy_lock(&rdev->wiphy);
936 	ret = rdev_set_tx_power(rdev, wdev, type, DBM_TO_MBM(dbm));
937 	wiphy_unlock(&rdev->wiphy);
938 
939 	return ret;
940 }
941 
942 static int cfg80211_wext_giwtxpower(struct net_device *dev,
943 				    struct iw_request_info *info,
944 				    union iwreq_data *data, char *extra)
945 {
946 	struct wireless_dev *wdev = dev->ieee80211_ptr;
947 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
948 	int err, val;
949 
950 	if ((data->txpower.flags & IW_TXPOW_TYPE) != IW_TXPOW_DBM)
951 		return -EINVAL;
952 	if (data->txpower.flags & IW_TXPOW_RANGE)
953 		return -EINVAL;
954 
955 	if (!rdev->ops->get_tx_power)
956 		return -EOPNOTSUPP;
957 
958 	wiphy_lock(&rdev->wiphy);
959 	err = rdev_get_tx_power(rdev, wdev, &val);
960 	wiphy_unlock(&rdev->wiphy);
961 	if (err)
962 		return err;
963 
964 	/* well... oh well */
965 	data->txpower.fixed = 1;
966 	data->txpower.disabled = rfkill_blocked(rdev->wiphy.rfkill);
967 	data->txpower.value = val;
968 	data->txpower.flags = IW_TXPOW_DBM;
969 
970 	return 0;
971 }
972 
973 static int cfg80211_set_auth_alg(struct wireless_dev *wdev,
974 				 s32 auth_alg)
975 {
976 	int nr_alg = 0;
977 
978 	if (!auth_alg)
979 		return -EINVAL;
980 
981 	if (auth_alg & ~(IW_AUTH_ALG_OPEN_SYSTEM |
982 			 IW_AUTH_ALG_SHARED_KEY |
983 			 IW_AUTH_ALG_LEAP))
984 		return -EINVAL;
985 
986 	if (auth_alg & IW_AUTH_ALG_OPEN_SYSTEM) {
987 		nr_alg++;
988 		wdev->wext.connect.auth_type = NL80211_AUTHTYPE_OPEN_SYSTEM;
989 	}
990 
991 	if (auth_alg & IW_AUTH_ALG_SHARED_KEY) {
992 		nr_alg++;
993 		wdev->wext.connect.auth_type = NL80211_AUTHTYPE_SHARED_KEY;
994 	}
995 
996 	if (auth_alg & IW_AUTH_ALG_LEAP) {
997 		nr_alg++;
998 		wdev->wext.connect.auth_type = NL80211_AUTHTYPE_NETWORK_EAP;
999 	}
1000 
1001 	if (nr_alg > 1)
1002 		wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
1003 
1004 	return 0;
1005 }
1006 
1007 static int cfg80211_set_wpa_version(struct wireless_dev *wdev, u32 wpa_versions)
1008 {
1009 	if (wpa_versions & ~(IW_AUTH_WPA_VERSION_WPA |
1010 			     IW_AUTH_WPA_VERSION_WPA2|
1011 		             IW_AUTH_WPA_VERSION_DISABLED))
1012 		return -EINVAL;
1013 
1014 	if ((wpa_versions & IW_AUTH_WPA_VERSION_DISABLED) &&
1015 	    (wpa_versions & (IW_AUTH_WPA_VERSION_WPA|
1016 			     IW_AUTH_WPA_VERSION_WPA2)))
1017 		return -EINVAL;
1018 
1019 	if (wpa_versions & IW_AUTH_WPA_VERSION_DISABLED)
1020 		wdev->wext.connect.crypto.wpa_versions &=
1021 			~(NL80211_WPA_VERSION_1|NL80211_WPA_VERSION_2);
1022 
1023 	if (wpa_versions & IW_AUTH_WPA_VERSION_WPA)
1024 		wdev->wext.connect.crypto.wpa_versions |=
1025 			NL80211_WPA_VERSION_1;
1026 
1027 	if (wpa_versions & IW_AUTH_WPA_VERSION_WPA2)
1028 		wdev->wext.connect.crypto.wpa_versions |=
1029 			NL80211_WPA_VERSION_2;
1030 
1031 	return 0;
1032 }
1033 
1034 static int cfg80211_set_cipher_group(struct wireless_dev *wdev, u32 cipher)
1035 {
1036 	if (cipher & IW_AUTH_CIPHER_WEP40)
1037 		wdev->wext.connect.crypto.cipher_group =
1038 			WLAN_CIPHER_SUITE_WEP40;
1039 	else if (cipher & IW_AUTH_CIPHER_WEP104)
1040 		wdev->wext.connect.crypto.cipher_group =
1041 			WLAN_CIPHER_SUITE_WEP104;
1042 	else if (cipher & IW_AUTH_CIPHER_TKIP)
1043 		wdev->wext.connect.crypto.cipher_group =
1044 			WLAN_CIPHER_SUITE_TKIP;
1045 	else if (cipher & IW_AUTH_CIPHER_CCMP)
1046 		wdev->wext.connect.crypto.cipher_group =
1047 			WLAN_CIPHER_SUITE_CCMP;
1048 	else if (cipher & IW_AUTH_CIPHER_AES_CMAC)
1049 		wdev->wext.connect.crypto.cipher_group =
1050 			WLAN_CIPHER_SUITE_AES_CMAC;
1051 	else if (cipher & IW_AUTH_CIPHER_NONE)
1052 		wdev->wext.connect.crypto.cipher_group = 0;
1053 	else
1054 		return -EINVAL;
1055 
1056 	return 0;
1057 }
1058 
1059 static int cfg80211_set_cipher_pairwise(struct wireless_dev *wdev, u32 cipher)
1060 {
1061 	int nr_ciphers = 0;
1062 	u32 *ciphers_pairwise = wdev->wext.connect.crypto.ciphers_pairwise;
1063 
1064 	if (cipher & IW_AUTH_CIPHER_WEP40) {
1065 		ciphers_pairwise[nr_ciphers] = WLAN_CIPHER_SUITE_WEP40;
1066 		nr_ciphers++;
1067 	}
1068 
1069 	if (cipher & IW_AUTH_CIPHER_WEP104) {
1070 		ciphers_pairwise[nr_ciphers] = WLAN_CIPHER_SUITE_WEP104;
1071 		nr_ciphers++;
1072 	}
1073 
1074 	if (cipher & IW_AUTH_CIPHER_TKIP) {
1075 		ciphers_pairwise[nr_ciphers] = WLAN_CIPHER_SUITE_TKIP;
1076 		nr_ciphers++;
1077 	}
1078 
1079 	if (cipher & IW_AUTH_CIPHER_CCMP) {
1080 		ciphers_pairwise[nr_ciphers] = WLAN_CIPHER_SUITE_CCMP;
1081 		nr_ciphers++;
1082 	}
1083 
1084 	if (cipher & IW_AUTH_CIPHER_AES_CMAC) {
1085 		ciphers_pairwise[nr_ciphers] = WLAN_CIPHER_SUITE_AES_CMAC;
1086 		nr_ciphers++;
1087 	}
1088 
1089 	BUILD_BUG_ON(NL80211_MAX_NR_CIPHER_SUITES < 5);
1090 
1091 	wdev->wext.connect.crypto.n_ciphers_pairwise = nr_ciphers;
1092 
1093 	return 0;
1094 }
1095 
1096 
1097 static int cfg80211_set_key_mgt(struct wireless_dev *wdev, u32 key_mgt)
1098 {
1099 	int nr_akm_suites = 0;
1100 
1101 	if (key_mgt & ~(IW_AUTH_KEY_MGMT_802_1X |
1102 			IW_AUTH_KEY_MGMT_PSK))
1103 		return -EINVAL;
1104 
1105 	if (key_mgt & IW_AUTH_KEY_MGMT_802_1X) {
1106 		wdev->wext.connect.crypto.akm_suites[nr_akm_suites] =
1107 			WLAN_AKM_SUITE_8021X;
1108 		nr_akm_suites++;
1109 	}
1110 
1111 	if (key_mgt & IW_AUTH_KEY_MGMT_PSK) {
1112 		wdev->wext.connect.crypto.akm_suites[nr_akm_suites] =
1113 			WLAN_AKM_SUITE_PSK;
1114 		nr_akm_suites++;
1115 	}
1116 
1117 	wdev->wext.connect.crypto.n_akm_suites = nr_akm_suites;
1118 
1119 	return 0;
1120 }
1121 
1122 static int cfg80211_wext_siwauth(struct net_device *dev,
1123 				 struct iw_request_info *info,
1124 				 struct iw_param *data, char *extra)
1125 {
1126 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1127 
1128 	if (wdev->iftype != NL80211_IFTYPE_STATION)
1129 		return -EOPNOTSUPP;
1130 
1131 	switch (data->flags & IW_AUTH_INDEX) {
1132 	case IW_AUTH_PRIVACY_INVOKED:
1133 		wdev->wext.connect.privacy = data->value;
1134 		return 0;
1135 	case IW_AUTH_WPA_VERSION:
1136 		return cfg80211_set_wpa_version(wdev, data->value);
1137 	case IW_AUTH_CIPHER_GROUP:
1138 		return cfg80211_set_cipher_group(wdev, data->value);
1139 	case IW_AUTH_KEY_MGMT:
1140 		return cfg80211_set_key_mgt(wdev, data->value);
1141 	case IW_AUTH_CIPHER_PAIRWISE:
1142 		return cfg80211_set_cipher_pairwise(wdev, data->value);
1143 	case IW_AUTH_80211_AUTH_ALG:
1144 		return cfg80211_set_auth_alg(wdev, data->value);
1145 	case IW_AUTH_WPA_ENABLED:
1146 	case IW_AUTH_RX_UNENCRYPTED_EAPOL:
1147 	case IW_AUTH_DROP_UNENCRYPTED:
1148 	case IW_AUTH_MFP:
1149 		return 0;
1150 	default:
1151 		return -EOPNOTSUPP;
1152 	}
1153 }
1154 
1155 static int cfg80211_wext_giwauth(struct net_device *dev,
1156 				 struct iw_request_info *info,
1157 				 struct iw_param *data, char *extra)
1158 {
1159 	/* XXX: what do we need? */
1160 
1161 	return -EOPNOTSUPP;
1162 }
1163 
1164 static int cfg80211_wext_siwpower(struct net_device *dev,
1165 				  struct iw_request_info *info,
1166 				  struct iw_param *wrq, char *extra)
1167 {
1168 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1169 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
1170 	bool ps;
1171 	int timeout = wdev->ps_timeout;
1172 	int err;
1173 
1174 	if (wdev->iftype != NL80211_IFTYPE_STATION)
1175 		return -EINVAL;
1176 
1177 	if (!rdev->ops->set_power_mgmt)
1178 		return -EOPNOTSUPP;
1179 
1180 	if (wrq->disabled) {
1181 		ps = false;
1182 	} else {
1183 		switch (wrq->flags & IW_POWER_MODE) {
1184 		case IW_POWER_ON:       /* If not specified */
1185 		case IW_POWER_MODE:     /* If set all mask */
1186 		case IW_POWER_ALL_R:    /* If explicitely state all */
1187 			ps = true;
1188 			break;
1189 		default:                /* Otherwise we ignore */
1190 			return -EINVAL;
1191 		}
1192 
1193 		if (wrq->flags & ~(IW_POWER_MODE | IW_POWER_TIMEOUT))
1194 			return -EINVAL;
1195 
1196 		if (wrq->flags & IW_POWER_TIMEOUT)
1197 			timeout = wrq->value / 1000;
1198 	}
1199 
1200 	wiphy_lock(&rdev->wiphy);
1201 	err = rdev_set_power_mgmt(rdev, dev, ps, timeout);
1202 	wiphy_unlock(&rdev->wiphy);
1203 	if (err)
1204 		return err;
1205 
1206 	wdev->ps = ps;
1207 	wdev->ps_timeout = timeout;
1208 
1209 	return 0;
1210 
1211 }
1212 
1213 static int cfg80211_wext_giwpower(struct net_device *dev,
1214 				  struct iw_request_info *info,
1215 				  struct iw_param *wrq, char *extra)
1216 {
1217 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1218 
1219 	wrq->disabled = !wdev->ps;
1220 
1221 	return 0;
1222 }
1223 
1224 static int cfg80211_wext_siwrate(struct net_device *dev,
1225 				 struct iw_request_info *info,
1226 				 struct iw_param *rate, char *extra)
1227 {
1228 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1229 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
1230 	struct cfg80211_bitrate_mask mask;
1231 	u32 fixed, maxrate;
1232 	struct ieee80211_supported_band *sband;
1233 	int band, ridx, ret;
1234 	bool match = false;
1235 
1236 	if (!rdev->ops->set_bitrate_mask)
1237 		return -EOPNOTSUPP;
1238 
1239 	memset(&mask, 0, sizeof(mask));
1240 	fixed = 0;
1241 	maxrate = (u32)-1;
1242 
1243 	if (rate->value < 0) {
1244 		/* nothing */
1245 	} else if (rate->fixed) {
1246 		fixed = rate->value / 100000;
1247 	} else {
1248 		maxrate = rate->value / 100000;
1249 	}
1250 
1251 	for (band = 0; band < NUM_NL80211_BANDS; band++) {
1252 		sband = wdev->wiphy->bands[band];
1253 		if (sband == NULL)
1254 			continue;
1255 		for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
1256 			struct ieee80211_rate *srate = &sband->bitrates[ridx];
1257 			if (fixed == srate->bitrate) {
1258 				mask.control[band].legacy = 1 << ridx;
1259 				match = true;
1260 				break;
1261 			}
1262 			if (srate->bitrate <= maxrate) {
1263 				mask.control[band].legacy |= 1 << ridx;
1264 				match = true;
1265 			}
1266 		}
1267 	}
1268 
1269 	if (!match)
1270 		return -EINVAL;
1271 
1272 	wiphy_lock(&rdev->wiphy);
1273 	ret = rdev_set_bitrate_mask(rdev, dev, NULL, &mask);
1274 	wiphy_unlock(&rdev->wiphy);
1275 
1276 	return ret;
1277 }
1278 
1279 static int cfg80211_wext_giwrate(struct net_device *dev,
1280 				 struct iw_request_info *info,
1281 				 struct iw_param *rate, char *extra)
1282 {
1283 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1284 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
1285 	struct station_info sinfo = {};
1286 	u8 addr[ETH_ALEN];
1287 	int err;
1288 
1289 	if (wdev->iftype != NL80211_IFTYPE_STATION)
1290 		return -EOPNOTSUPP;
1291 
1292 	if (!rdev->ops->get_station)
1293 		return -EOPNOTSUPP;
1294 
1295 	err = 0;
1296 	wdev_lock(wdev);
1297 	if (wdev->current_bss)
1298 		memcpy(addr, wdev->current_bss->pub.bssid, ETH_ALEN);
1299 	else
1300 		err = -EOPNOTSUPP;
1301 	wdev_unlock(wdev);
1302 	if (err)
1303 		return err;
1304 
1305 	wiphy_lock(&rdev->wiphy);
1306 	err = rdev_get_station(rdev, dev, addr, &sinfo);
1307 	wiphy_unlock(&rdev->wiphy);
1308 	if (err)
1309 		return err;
1310 
1311 	if (!(sinfo.filled & BIT_ULL(NL80211_STA_INFO_TX_BITRATE))) {
1312 		err = -EOPNOTSUPP;
1313 		goto free;
1314 	}
1315 
1316 	rate->value = 100000 * cfg80211_calculate_bitrate(&sinfo.txrate);
1317 
1318 free:
1319 	cfg80211_sinfo_release_content(&sinfo);
1320 	return err;
1321 }
1322 
1323 /* Get wireless statistics.  Called by /proc/net/wireless and by SIOCGIWSTATS */
1324 static struct iw_statistics *cfg80211_wireless_stats(struct net_device *dev)
1325 {
1326 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1327 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
1328 	/* we are under RTNL - globally locked - so can use static structs */
1329 	static struct iw_statistics wstats;
1330 	static struct station_info sinfo = {};
1331 	u8 bssid[ETH_ALEN];
1332 	int ret;
1333 
1334 	if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION)
1335 		return NULL;
1336 
1337 	if (!rdev->ops->get_station)
1338 		return NULL;
1339 
1340 	/* Grab BSSID of current BSS, if any */
1341 	wdev_lock(wdev);
1342 	if (!wdev->current_bss) {
1343 		wdev_unlock(wdev);
1344 		return NULL;
1345 	}
1346 	memcpy(bssid, wdev->current_bss->pub.bssid, ETH_ALEN);
1347 	wdev_unlock(wdev);
1348 
1349 	memset(&sinfo, 0, sizeof(sinfo));
1350 
1351 	wiphy_lock(&rdev->wiphy);
1352 	ret = rdev_get_station(rdev, dev, bssid, &sinfo);
1353 	wiphy_unlock(&rdev->wiphy);
1354 
1355 	if (ret)
1356 		return NULL;
1357 
1358 	memset(&wstats, 0, sizeof(wstats));
1359 
1360 	switch (rdev->wiphy.signal_type) {
1361 	case CFG80211_SIGNAL_TYPE_MBM:
1362 		if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_SIGNAL)) {
1363 			int sig = sinfo.signal;
1364 			wstats.qual.updated |= IW_QUAL_LEVEL_UPDATED;
1365 			wstats.qual.updated |= IW_QUAL_QUAL_UPDATED;
1366 			wstats.qual.updated |= IW_QUAL_DBM;
1367 			wstats.qual.level = sig;
1368 			if (sig < -110)
1369 				sig = -110;
1370 			else if (sig > -40)
1371 				sig = -40;
1372 			wstats.qual.qual = sig + 110;
1373 			break;
1374 		}
1375 		fallthrough;
1376 	case CFG80211_SIGNAL_TYPE_UNSPEC:
1377 		if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_SIGNAL)) {
1378 			wstats.qual.updated |= IW_QUAL_LEVEL_UPDATED;
1379 			wstats.qual.updated |= IW_QUAL_QUAL_UPDATED;
1380 			wstats.qual.level = sinfo.signal;
1381 			wstats.qual.qual = sinfo.signal;
1382 			break;
1383 		}
1384 		fallthrough;
1385 	default:
1386 		wstats.qual.updated |= IW_QUAL_LEVEL_INVALID;
1387 		wstats.qual.updated |= IW_QUAL_QUAL_INVALID;
1388 	}
1389 
1390 	wstats.qual.updated |= IW_QUAL_NOISE_INVALID;
1391 	if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_RX_DROP_MISC))
1392 		wstats.discard.misc = sinfo.rx_dropped_misc;
1393 	if (sinfo.filled & BIT_ULL(NL80211_STA_INFO_TX_FAILED))
1394 		wstats.discard.retries = sinfo.tx_failed;
1395 
1396 	cfg80211_sinfo_release_content(&sinfo);
1397 
1398 	return &wstats;
1399 }
1400 
1401 static int cfg80211_wext_siwap(struct net_device *dev,
1402 			       struct iw_request_info *info,
1403 			       struct sockaddr *ap_addr, char *extra)
1404 {
1405 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1406 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
1407 	int ret;
1408 
1409 	wiphy_lock(&rdev->wiphy);
1410 	switch (wdev->iftype) {
1411 	case NL80211_IFTYPE_ADHOC:
1412 		ret = cfg80211_ibss_wext_siwap(dev, info, ap_addr, extra);
1413 		break;
1414 	case NL80211_IFTYPE_STATION:
1415 		ret = cfg80211_mgd_wext_siwap(dev, info, ap_addr, extra);
1416 		break;
1417 	default:
1418 		ret = -EOPNOTSUPP;
1419 		break;
1420 	}
1421 	wiphy_unlock(&rdev->wiphy);
1422 
1423 	return ret;
1424 }
1425 
1426 static int cfg80211_wext_giwap(struct net_device *dev,
1427 			       struct iw_request_info *info,
1428 			       struct sockaddr *ap_addr, char *extra)
1429 {
1430 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1431 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
1432 	int ret;
1433 
1434 	wiphy_lock(&rdev->wiphy);
1435 	switch (wdev->iftype) {
1436 	case NL80211_IFTYPE_ADHOC:
1437 		ret = cfg80211_ibss_wext_giwap(dev, info, ap_addr, extra);
1438 		break;
1439 	case NL80211_IFTYPE_STATION:
1440 		ret = cfg80211_mgd_wext_giwap(dev, info, ap_addr, extra);
1441 		break;
1442 	default:
1443 		ret = -EOPNOTSUPP;
1444 		break;
1445 	}
1446 	wiphy_unlock(&rdev->wiphy);
1447 
1448 	return ret;
1449 }
1450 
1451 static int cfg80211_wext_siwessid(struct net_device *dev,
1452 				  struct iw_request_info *info,
1453 				  struct iw_point *data, char *ssid)
1454 {
1455 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1456 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
1457 	int ret;
1458 
1459 	wiphy_lock(&rdev->wiphy);
1460 	switch (wdev->iftype) {
1461 	case NL80211_IFTYPE_ADHOC:
1462 		ret = cfg80211_ibss_wext_siwessid(dev, info, data, ssid);
1463 		break;
1464 	case NL80211_IFTYPE_STATION:
1465 		ret = cfg80211_mgd_wext_siwessid(dev, info, data, ssid);
1466 		break;
1467 	default:
1468 		ret = -EOPNOTSUPP;
1469 		break;
1470 	}
1471 	wiphy_unlock(&rdev->wiphy);
1472 
1473 	return ret;
1474 }
1475 
1476 static int cfg80211_wext_giwessid(struct net_device *dev,
1477 				  struct iw_request_info *info,
1478 				  struct iw_point *data, char *ssid)
1479 {
1480 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1481 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
1482 	int ret;
1483 
1484 	data->flags = 0;
1485 	data->length = 0;
1486 
1487 	wiphy_lock(&rdev->wiphy);
1488 	switch (wdev->iftype) {
1489 	case NL80211_IFTYPE_ADHOC:
1490 		ret = cfg80211_ibss_wext_giwessid(dev, info, data, ssid);
1491 		break;
1492 	case NL80211_IFTYPE_STATION:
1493 		ret = cfg80211_mgd_wext_giwessid(dev, info, data, ssid);
1494 		break;
1495 	default:
1496 		ret = -EOPNOTSUPP;
1497 		break;
1498 	}
1499 	wiphy_unlock(&rdev->wiphy);
1500 
1501 	return ret;
1502 }
1503 
1504 static int cfg80211_wext_siwpmksa(struct net_device *dev,
1505 				  struct iw_request_info *info,
1506 				  struct iw_point *data, char *extra)
1507 {
1508 	struct wireless_dev *wdev = dev->ieee80211_ptr;
1509 	struct cfg80211_registered_device *rdev = wiphy_to_rdev(wdev->wiphy);
1510 	struct cfg80211_pmksa cfg_pmksa;
1511 	struct iw_pmksa *pmksa = (struct iw_pmksa *)extra;
1512 	int ret;
1513 
1514 	memset(&cfg_pmksa, 0, sizeof(struct cfg80211_pmksa));
1515 
1516 	if (wdev->iftype != NL80211_IFTYPE_STATION)
1517 		return -EINVAL;
1518 
1519 	cfg_pmksa.bssid = pmksa->bssid.sa_data;
1520 	cfg_pmksa.pmkid = pmksa->pmkid;
1521 
1522 	wiphy_lock(&rdev->wiphy);
1523 	switch (pmksa->cmd) {
1524 	case IW_PMKSA_ADD:
1525 		if (!rdev->ops->set_pmksa) {
1526 			ret = -EOPNOTSUPP;
1527 			break;
1528 		}
1529 
1530 		ret = rdev_set_pmksa(rdev, dev, &cfg_pmksa);
1531 		break;
1532 	case IW_PMKSA_REMOVE:
1533 		if (!rdev->ops->del_pmksa) {
1534 			ret = -EOPNOTSUPP;
1535 			break;
1536 		}
1537 
1538 		ret = rdev_del_pmksa(rdev, dev, &cfg_pmksa);
1539 		break;
1540 	case IW_PMKSA_FLUSH:
1541 		if (!rdev->ops->flush_pmksa) {
1542 			ret = -EOPNOTSUPP;
1543 			break;
1544 		}
1545 
1546 		ret = rdev_flush_pmksa(rdev, dev);
1547 		break;
1548 	default:
1549 		ret = -EOPNOTSUPP;
1550 		break;
1551 	}
1552 	wiphy_unlock(&rdev->wiphy);
1553 
1554 	return ret;
1555 }
1556 
1557 #define DEFINE_WEXT_COMPAT_STUB(func, type)			\
1558 	static int __ ## func(struct net_device *dev,		\
1559 			      struct iw_request_info *info,	\
1560 			      union iwreq_data *wrqu,		\
1561 			      char *extra)			\
1562 	{							\
1563 		return func(dev, info, (type *)wrqu, extra);	\
1564 	}
1565 
1566 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwname, char)
1567 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwfreq, struct iw_freq)
1568 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwfreq, struct iw_freq)
1569 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwmode, u32)
1570 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwmode, u32)
1571 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwrange, struct iw_point)
1572 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwap, struct sockaddr)
1573 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwap, struct sockaddr)
1574 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwmlme, struct iw_point)
1575 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwscan, struct iw_point)
1576 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwessid, struct iw_point)
1577 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwessid, struct iw_point)
1578 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwrate, struct iw_param)
1579 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwrate, struct iw_param)
1580 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwrts, struct iw_param)
1581 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwrts, struct iw_param)
1582 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwfrag, struct iw_param)
1583 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwfrag, struct iw_param)
1584 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwretry, struct iw_param)
1585 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwretry, struct iw_param)
1586 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwencode, struct iw_point)
1587 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwencode, struct iw_point)
1588 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwpower, struct iw_param)
1589 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwpower, struct iw_param)
1590 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwgenie, struct iw_point)
1591 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_giwauth, struct iw_param)
1592 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwauth, struct iw_param)
1593 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwencodeext, struct iw_point)
1594 DEFINE_WEXT_COMPAT_STUB(cfg80211_wext_siwpmksa, struct iw_point)
1595 
1596 static const iw_handler cfg80211_handlers[] = {
1597 	[IW_IOCTL_IDX(SIOCGIWNAME)]	= __cfg80211_wext_giwname,
1598 	[IW_IOCTL_IDX(SIOCSIWFREQ)]	= __cfg80211_wext_siwfreq,
1599 	[IW_IOCTL_IDX(SIOCGIWFREQ)]	= __cfg80211_wext_giwfreq,
1600 	[IW_IOCTL_IDX(SIOCSIWMODE)]	= __cfg80211_wext_siwmode,
1601 	[IW_IOCTL_IDX(SIOCGIWMODE)]	= __cfg80211_wext_giwmode,
1602 	[IW_IOCTL_IDX(SIOCGIWRANGE)]	= __cfg80211_wext_giwrange,
1603 	[IW_IOCTL_IDX(SIOCSIWAP)]	= __cfg80211_wext_siwap,
1604 	[IW_IOCTL_IDX(SIOCGIWAP)]	= __cfg80211_wext_giwap,
1605 	[IW_IOCTL_IDX(SIOCSIWMLME)]	= __cfg80211_wext_siwmlme,
1606 	[IW_IOCTL_IDX(SIOCSIWSCAN)]	= cfg80211_wext_siwscan,
1607 	[IW_IOCTL_IDX(SIOCGIWSCAN)]	= __cfg80211_wext_giwscan,
1608 	[IW_IOCTL_IDX(SIOCSIWESSID)]	= __cfg80211_wext_siwessid,
1609 	[IW_IOCTL_IDX(SIOCGIWESSID)]	= __cfg80211_wext_giwessid,
1610 	[IW_IOCTL_IDX(SIOCSIWRATE)]	= __cfg80211_wext_siwrate,
1611 	[IW_IOCTL_IDX(SIOCGIWRATE)]	= __cfg80211_wext_giwrate,
1612 	[IW_IOCTL_IDX(SIOCSIWRTS)]	= __cfg80211_wext_siwrts,
1613 	[IW_IOCTL_IDX(SIOCGIWRTS)]	= __cfg80211_wext_giwrts,
1614 	[IW_IOCTL_IDX(SIOCSIWFRAG)]	= __cfg80211_wext_siwfrag,
1615 	[IW_IOCTL_IDX(SIOCGIWFRAG)]	= __cfg80211_wext_giwfrag,
1616 	[IW_IOCTL_IDX(SIOCSIWTXPOW)]	= cfg80211_wext_siwtxpower,
1617 	[IW_IOCTL_IDX(SIOCGIWTXPOW)]	= cfg80211_wext_giwtxpower,
1618 	[IW_IOCTL_IDX(SIOCSIWRETRY)]	= __cfg80211_wext_siwretry,
1619 	[IW_IOCTL_IDX(SIOCGIWRETRY)]	= __cfg80211_wext_giwretry,
1620 	[IW_IOCTL_IDX(SIOCSIWENCODE)]	= __cfg80211_wext_siwencode,
1621 	[IW_IOCTL_IDX(SIOCGIWENCODE)]	= __cfg80211_wext_giwencode,
1622 	[IW_IOCTL_IDX(SIOCSIWPOWER)]	= __cfg80211_wext_siwpower,
1623 	[IW_IOCTL_IDX(SIOCGIWPOWER)]	= __cfg80211_wext_giwpower,
1624 	[IW_IOCTL_IDX(SIOCSIWGENIE)]	= __cfg80211_wext_siwgenie,
1625 	[IW_IOCTL_IDX(SIOCSIWAUTH)]	= __cfg80211_wext_siwauth,
1626 	[IW_IOCTL_IDX(SIOCGIWAUTH)]	= __cfg80211_wext_giwauth,
1627 	[IW_IOCTL_IDX(SIOCSIWENCODEEXT)]= __cfg80211_wext_siwencodeext,
1628 	[IW_IOCTL_IDX(SIOCSIWPMKSA)]	= __cfg80211_wext_siwpmksa,
1629 };
1630 
1631 const struct iw_handler_def cfg80211_wext_handler = {
1632 	.num_standard		= ARRAY_SIZE(cfg80211_handlers),
1633 	.standard		= cfg80211_handlers,
1634 	.get_wireless_stats = cfg80211_wireless_stats,
1635 };
1636