2 * This is the new netlink-based wireless configuration interface.
4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
8 #include <linux/module.h>
10 #include <linux/slab.h>
11 #include <linux/list.h>
12 #include <linux/if_ether.h>
13 #include <linux/ieee80211.h>
14 #include <linux/nl80211.h>
15 #include <linux/rtnetlink.h>
16 #include <linux/netlink.h>
17 #include <linux/etherdevice.h>
18 #include <net/net_namespace.h>
19 #include <net/genetlink.h>
20 #include <net/cfg80211.h>
22 #include <net/inet_connection_sock.h>
28 static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
29 struct genl_info *info,
30 struct cfg80211_crypto_settings *settings,
33 static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
34 struct genl_info *info);
35 static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
36 struct genl_info *info);
38 /* the netlink family */
39 static struct genl_family nl80211_fam = {
40 .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
41 .name = "nl80211", /* have users key off the name instead */
42 .hdrsize = 0, /* no private header */
43 .version = 1, /* no particular meaning now */
44 .maxattr = NL80211_ATTR_MAX,
46 .pre_doit = nl80211_pre_doit,
47 .post_doit = nl80211_post_doit,
50 /* returns ERR_PTR values */
51 static struct wireless_dev *
52 __cfg80211_wdev_from_attrs(struct net *netns, struct nlattr **attrs)
54 struct cfg80211_registered_device *rdev;
55 struct wireless_dev *result = NULL;
56 bool have_ifidx = attrs[NL80211_ATTR_IFINDEX];
57 bool have_wdev_id = attrs[NL80211_ATTR_WDEV];
62 assert_cfg80211_lock();
64 if (!have_ifidx && !have_wdev_id)
65 return ERR_PTR(-EINVAL);
68 ifidx = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
70 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
71 wiphy_idx = wdev_id >> 32;
74 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
75 struct wireless_dev *wdev;
77 if (wiphy_net(&rdev->wiphy) != netns)
80 if (have_wdev_id && rdev->wiphy_idx != wiphy_idx)
83 mutex_lock(&rdev->devlist_mtx);
84 list_for_each_entry(wdev, &rdev->wdev_list, list) {
85 if (have_ifidx && wdev->netdev &&
86 wdev->netdev->ifindex == ifidx) {
90 if (have_wdev_id && wdev->identifier == (u32)wdev_id) {
95 mutex_unlock(&rdev->devlist_mtx);
103 return ERR_PTR(-ENODEV);
106 static struct cfg80211_registered_device *
107 __cfg80211_rdev_from_attrs(struct net *netns, struct nlattr **attrs)
109 struct cfg80211_registered_device *rdev = NULL, *tmp;
110 struct net_device *netdev;
112 assert_cfg80211_lock();
114 if (!attrs[NL80211_ATTR_WIPHY] &&
115 !attrs[NL80211_ATTR_IFINDEX] &&
116 !attrs[NL80211_ATTR_WDEV])
117 return ERR_PTR(-EINVAL);
119 if (attrs[NL80211_ATTR_WIPHY])
120 rdev = cfg80211_rdev_by_wiphy_idx(
121 nla_get_u32(attrs[NL80211_ATTR_WIPHY]));
123 if (attrs[NL80211_ATTR_WDEV]) {
124 u64 wdev_id = nla_get_u64(attrs[NL80211_ATTR_WDEV]);
125 struct wireless_dev *wdev;
128 tmp = cfg80211_rdev_by_wiphy_idx(wdev_id >> 32);
130 /* make sure wdev exists */
131 mutex_lock(&tmp->devlist_mtx);
132 list_for_each_entry(wdev, &tmp->wdev_list, list) {
133 if (wdev->identifier != (u32)wdev_id)
138 mutex_unlock(&tmp->devlist_mtx);
143 if (rdev && tmp != rdev)
144 return ERR_PTR(-EINVAL);
149 if (attrs[NL80211_ATTR_IFINDEX]) {
150 int ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
151 netdev = dev_get_by_index(netns, ifindex);
153 if (netdev->ieee80211_ptr)
155 netdev->ieee80211_ptr->wiphy);
161 /* not wireless device -- return error */
163 return ERR_PTR(-EINVAL);
165 /* mismatch -- return error */
166 if (rdev && tmp != rdev)
167 return ERR_PTR(-EINVAL);
174 return ERR_PTR(-ENODEV);
176 if (netns != wiphy_net(&rdev->wiphy))
177 return ERR_PTR(-ENODEV);
183 * This function returns a pointer to the driver
184 * that the genl_info item that is passed refers to.
185 * If successful, it returns non-NULL and also locks
186 * the driver's mutex!
188 * This means that you need to call cfg80211_unlock_rdev()
189 * before being allowed to acquire &cfg80211_mutex!
191 * This is necessary because we need to lock the global
192 * mutex to get an item off the list safely, and then
193 * we lock the rdev mutex so it doesn't go away under us.
195 * We don't want to keep cfg80211_mutex locked
196 * for all the time in order to allow requests on
197 * other interfaces to go through at the same time.
199 * The result of this can be a PTR_ERR and hence must
200 * be checked with IS_ERR() for errors.
202 static struct cfg80211_registered_device *
203 cfg80211_get_dev_from_info(struct net *netns, struct genl_info *info)
205 struct cfg80211_registered_device *rdev;
207 mutex_lock(&cfg80211_mutex);
208 rdev = __cfg80211_rdev_from_attrs(netns, info->attrs);
210 /* if it is not an error we grab the lock on
211 * it to assure it won't be going away while
212 * we operate on it */
214 mutex_lock(&rdev->mtx);
216 mutex_unlock(&cfg80211_mutex);
221 /* policy for the attributes */
222 static const struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] = {
223 [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
224 [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
226 [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
228 [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
229 [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
230 [NL80211_ATTR_CHANNEL_WIDTH] = { .type = NLA_U32 },
231 [NL80211_ATTR_CENTER_FREQ1] = { .type = NLA_U32 },
232 [NL80211_ATTR_CENTER_FREQ2] = { .type = NLA_U32 },
234 [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
235 [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
236 [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
237 [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
238 [NL80211_ATTR_WIPHY_COVERAGE_CLASS] = { .type = NLA_U8 },
240 [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
241 [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
242 [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
244 [NL80211_ATTR_MAC] = { .len = ETH_ALEN },
245 [NL80211_ATTR_PREV_BSSID] = { .len = ETH_ALEN },
247 [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
248 [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
249 .len = WLAN_MAX_KEY_LEN },
250 [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
251 [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
252 [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
253 [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
254 [NL80211_ATTR_KEY_TYPE] = { .type = NLA_U32 },
256 [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
257 [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
258 [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
259 .len = IEEE80211_MAX_DATA_LEN },
260 [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
261 .len = IEEE80211_MAX_DATA_LEN },
262 [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
263 [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
264 [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
265 [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
266 .len = NL80211_MAX_SUPP_RATES },
267 [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
268 [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
269 [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
270 [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
271 .len = IEEE80211_MAX_MESH_ID_LEN },
272 [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
274 [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
275 [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
277 [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
278 [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
279 [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
280 [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
281 .len = NL80211_MAX_SUPP_RATES },
282 [NL80211_ATTR_BSS_HT_OPMODE] = { .type = NLA_U16 },
284 [NL80211_ATTR_MESH_CONFIG] = { .type = NLA_NESTED },
285 [NL80211_ATTR_SUPPORT_MESH_AUTH] = { .type = NLA_FLAG },
287 [NL80211_ATTR_HT_CAPABILITY] = { .len = NL80211_HT_CAPABILITY_LEN },
289 [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
290 [NL80211_ATTR_IE] = { .type = NLA_BINARY,
291 .len = IEEE80211_MAX_DATA_LEN },
292 [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
293 [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
295 [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
296 .len = IEEE80211_MAX_SSID_LEN },
297 [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
298 [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
299 [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
300 [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
301 [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
302 [NL80211_ATTR_STA_FLAGS2] = {
303 .len = sizeof(struct nl80211_sta_flag_update),
305 [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
306 [NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },
307 [NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },
308 [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
309 [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
310 [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
311 [NL80211_ATTR_PID] = { .type = NLA_U32 },
312 [NL80211_ATTR_4ADDR] = { .type = NLA_U8 },
313 [NL80211_ATTR_PMKID] = { .type = NLA_BINARY,
314 .len = WLAN_PMKID_LEN },
315 [NL80211_ATTR_DURATION] = { .type = NLA_U32 },
316 [NL80211_ATTR_COOKIE] = { .type = NLA_U64 },
317 [NL80211_ATTR_TX_RATES] = { .type = NLA_NESTED },
318 [NL80211_ATTR_FRAME] = { .type = NLA_BINARY,
319 .len = IEEE80211_MAX_DATA_LEN },
320 [NL80211_ATTR_FRAME_MATCH] = { .type = NLA_BINARY, },
321 [NL80211_ATTR_PS_STATE] = { .type = NLA_U32 },
322 [NL80211_ATTR_CQM] = { .type = NLA_NESTED, },
323 [NL80211_ATTR_LOCAL_STATE_CHANGE] = { .type = NLA_FLAG },
324 [NL80211_ATTR_AP_ISOLATE] = { .type = NLA_U8 },
325 [NL80211_ATTR_WIPHY_TX_POWER_SETTING] = { .type = NLA_U32 },
326 [NL80211_ATTR_WIPHY_TX_POWER_LEVEL] = { .type = NLA_U32 },
327 [NL80211_ATTR_FRAME_TYPE] = { .type = NLA_U16 },
328 [NL80211_ATTR_WIPHY_ANTENNA_TX] = { .type = NLA_U32 },
329 [NL80211_ATTR_WIPHY_ANTENNA_RX] = { .type = NLA_U32 },
330 [NL80211_ATTR_MCAST_RATE] = { .type = NLA_U32 },
331 [NL80211_ATTR_OFFCHANNEL_TX_OK] = { .type = NLA_FLAG },
332 [NL80211_ATTR_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
333 [NL80211_ATTR_WOWLAN_TRIGGERS] = { .type = NLA_NESTED },
334 [NL80211_ATTR_STA_PLINK_STATE] = { .type = NLA_U8 },
335 [NL80211_ATTR_SCHED_SCAN_INTERVAL] = { .type = NLA_U32 },
336 [NL80211_ATTR_REKEY_DATA] = { .type = NLA_NESTED },
337 [NL80211_ATTR_SCAN_SUPP_RATES] = { .type = NLA_NESTED },
338 [NL80211_ATTR_HIDDEN_SSID] = { .type = NLA_U32 },
339 [NL80211_ATTR_IE_PROBE_RESP] = { .type = NLA_BINARY,
340 .len = IEEE80211_MAX_DATA_LEN },
341 [NL80211_ATTR_IE_ASSOC_RESP] = { .type = NLA_BINARY,
342 .len = IEEE80211_MAX_DATA_LEN },
343 [NL80211_ATTR_ROAM_SUPPORT] = { .type = NLA_FLAG },
344 [NL80211_ATTR_SCHED_SCAN_MATCH] = { .type = NLA_NESTED },
345 [NL80211_ATTR_TX_NO_CCK_RATE] = { .type = NLA_FLAG },
346 [NL80211_ATTR_TDLS_ACTION] = { .type = NLA_U8 },
347 [NL80211_ATTR_TDLS_DIALOG_TOKEN] = { .type = NLA_U8 },
348 [NL80211_ATTR_TDLS_OPERATION] = { .type = NLA_U8 },
349 [NL80211_ATTR_TDLS_SUPPORT] = { .type = NLA_FLAG },
350 [NL80211_ATTR_TDLS_EXTERNAL_SETUP] = { .type = NLA_FLAG },
351 [NL80211_ATTR_DONT_WAIT_FOR_ACK] = { .type = NLA_FLAG },
352 [NL80211_ATTR_PROBE_RESP] = { .type = NLA_BINARY,
353 .len = IEEE80211_MAX_DATA_LEN },
354 [NL80211_ATTR_DFS_REGION] = { .type = NLA_U8 },
355 [NL80211_ATTR_DISABLE_HT] = { .type = NLA_FLAG },
356 [NL80211_ATTR_HT_CAPABILITY_MASK] = {
357 .len = NL80211_HT_CAPABILITY_LEN
359 [NL80211_ATTR_NOACK_MAP] = { .type = NLA_U16 },
360 [NL80211_ATTR_INACTIVITY_TIMEOUT] = { .type = NLA_U16 },
361 [NL80211_ATTR_BG_SCAN_PERIOD] = { .type = NLA_U16 },
362 [NL80211_ATTR_WDEV] = { .type = NLA_U64 },
363 [NL80211_ATTR_USER_REG_HINT_TYPE] = { .type = NLA_U32 },
364 [NL80211_ATTR_SAE_DATA] = { .type = NLA_BINARY, },
365 [NL80211_ATTR_VHT_CAPABILITY] = { .len = NL80211_VHT_CAPABILITY_LEN },
366 [NL80211_ATTR_SCAN_FLAGS] = { .type = NLA_U32 },
367 [NL80211_ATTR_P2P_CTWINDOW] = { .type = NLA_U8 },
368 [NL80211_ATTR_P2P_OPPPS] = { .type = NLA_U8 },
369 [NL80211_ATTR_ACL_POLICY] = {. type = NLA_U32 },
370 [NL80211_ATTR_MAC_ADDRS] = { .type = NLA_NESTED },
371 [NL80211_ATTR_STA_CAPABILITY] = { .type = NLA_U16 },
372 [NL80211_ATTR_STA_EXT_CAPABILITY] = { .type = NLA_BINARY, },
375 /* policy for the key attributes */
376 static const struct nla_policy nl80211_key_policy[NL80211_KEY_MAX + 1] = {
377 [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
378 [NL80211_KEY_IDX] = { .type = NLA_U8 },
379 [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
380 [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 16 },
381 [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
382 [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
383 [NL80211_KEY_TYPE] = { .type = NLA_U32 },
384 [NL80211_KEY_DEFAULT_TYPES] = { .type = NLA_NESTED },
387 /* policy for the key default flags */
388 static const struct nla_policy
389 nl80211_key_default_policy[NUM_NL80211_KEY_DEFAULT_TYPES] = {
390 [NL80211_KEY_DEFAULT_TYPE_UNICAST] = { .type = NLA_FLAG },
391 [NL80211_KEY_DEFAULT_TYPE_MULTICAST] = { .type = NLA_FLAG },
394 /* policy for WoWLAN attributes */
395 static const struct nla_policy
396 nl80211_wowlan_policy[NUM_NL80211_WOWLAN_TRIG] = {
397 [NL80211_WOWLAN_TRIG_ANY] = { .type = NLA_FLAG },
398 [NL80211_WOWLAN_TRIG_DISCONNECT] = { .type = NLA_FLAG },
399 [NL80211_WOWLAN_TRIG_MAGIC_PKT] = { .type = NLA_FLAG },
400 [NL80211_WOWLAN_TRIG_PKT_PATTERN] = { .type = NLA_NESTED },
401 [NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE] = { .type = NLA_FLAG },
402 [NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST] = { .type = NLA_FLAG },
403 [NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE] = { .type = NLA_FLAG },
404 [NL80211_WOWLAN_TRIG_RFKILL_RELEASE] = { .type = NLA_FLAG },
405 [NL80211_WOWLAN_TRIG_TCP_CONNECTION] = { .type = NLA_NESTED },
408 static const struct nla_policy
409 nl80211_wowlan_tcp_policy[NUM_NL80211_WOWLAN_TCP] = {
410 [NL80211_WOWLAN_TCP_SRC_IPV4] = { .type = NLA_U32 },
411 [NL80211_WOWLAN_TCP_DST_IPV4] = { .type = NLA_U32 },
412 [NL80211_WOWLAN_TCP_DST_MAC] = { .len = ETH_ALEN },
413 [NL80211_WOWLAN_TCP_SRC_PORT] = { .type = NLA_U16 },
414 [NL80211_WOWLAN_TCP_DST_PORT] = { .type = NLA_U16 },
415 [NL80211_WOWLAN_TCP_DATA_PAYLOAD] = { .len = 1 },
416 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ] = {
417 .len = sizeof(struct nl80211_wowlan_tcp_data_seq)
419 [NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN] = {
420 .len = sizeof(struct nl80211_wowlan_tcp_data_token)
422 [NL80211_WOWLAN_TCP_DATA_INTERVAL] = { .type = NLA_U32 },
423 [NL80211_WOWLAN_TCP_WAKE_PAYLOAD] = { .len = 1 },
424 [NL80211_WOWLAN_TCP_WAKE_MASK] = { .len = 1 },
427 /* policy for GTK rekey offload attributes */
428 static const struct nla_policy
429 nl80211_rekey_policy[NUM_NL80211_REKEY_DATA] = {
430 [NL80211_REKEY_DATA_KEK] = { .len = NL80211_KEK_LEN },
431 [NL80211_REKEY_DATA_KCK] = { .len = NL80211_KCK_LEN },
432 [NL80211_REKEY_DATA_REPLAY_CTR] = { .len = NL80211_REPLAY_CTR_LEN },
435 static const struct nla_policy
436 nl80211_match_policy[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1] = {
437 [NL80211_SCHED_SCAN_MATCH_ATTR_SSID] = { .type = NLA_BINARY,
438 .len = IEEE80211_MAX_SSID_LEN },
439 [NL80211_SCHED_SCAN_MATCH_ATTR_RSSI] = { .type = NLA_U32 },
442 /* ifidx get helper */
443 static int nl80211_get_ifidx(struct netlink_callback *cb)
447 res = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
448 nl80211_fam.attrbuf, nl80211_fam.maxattr,
453 if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
456 res = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
462 static int nl80211_prepare_netdev_dump(struct sk_buff *skb,
463 struct netlink_callback *cb,
464 struct cfg80211_registered_device **rdev,
465 struct net_device **dev)
467 int ifidx = cb->args[0];
471 ifidx = nl80211_get_ifidx(cb);
479 *dev = __dev_get_by_index(sock_net(skb->sk), ifidx);
485 *rdev = cfg80211_get_dev_from_ifindex(sock_net(skb->sk), ifidx);
487 err = PTR_ERR(*rdev);
497 static void nl80211_finish_netdev_dump(struct cfg80211_registered_device *rdev)
499 cfg80211_unlock_rdev(rdev);
504 static bool is_valid_ie_attr(const struct nlattr *attr)
512 pos = nla_data(attr);
533 /* message building helper */
534 static inline void *nl80211hdr_put(struct sk_buff *skb, u32 portid, u32 seq,
537 /* since there is no private header just add the generic one */
538 return genlmsg_put(skb, portid, seq, &nl80211_fam, flags, cmd);
541 static int nl80211_msg_put_channel(struct sk_buff *msg,
542 struct ieee80211_channel *chan)
544 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_FREQ,
546 goto nla_put_failure;
548 if ((chan->flags & IEEE80211_CHAN_DISABLED) &&
549 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_DISABLED))
550 goto nla_put_failure;
551 if ((chan->flags & IEEE80211_CHAN_PASSIVE_SCAN) &&
552 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN))
553 goto nla_put_failure;
554 if ((chan->flags & IEEE80211_CHAN_NO_IBSS) &&
555 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_IBSS))
556 goto nla_put_failure;
557 if ((chan->flags & IEEE80211_CHAN_RADAR) &&
558 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_RADAR))
559 goto nla_put_failure;
560 if ((chan->flags & IEEE80211_CHAN_NO_HT40MINUS) &&
561 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_MINUS))
562 goto nla_put_failure;
563 if ((chan->flags & IEEE80211_CHAN_NO_HT40PLUS) &&
564 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_HT40_PLUS))
565 goto nla_put_failure;
566 if ((chan->flags & IEEE80211_CHAN_NO_80MHZ) &&
567 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_80MHZ))
568 goto nla_put_failure;
569 if ((chan->flags & IEEE80211_CHAN_NO_160MHZ) &&
570 nla_put_flag(msg, NL80211_FREQUENCY_ATTR_NO_160MHZ))
571 goto nla_put_failure;
573 if (nla_put_u32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
574 DBM_TO_MBM(chan->max_power)))
575 goto nla_put_failure;
583 /* netlink command implementations */
590 bool def_uni, def_multi;
593 static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
595 struct nlattr *tb[NL80211_KEY_MAX + 1];
596 int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
601 k->def = !!tb[NL80211_KEY_DEFAULT];
602 k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
611 if (tb[NL80211_KEY_IDX])
612 k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
614 if (tb[NL80211_KEY_DATA]) {
615 k->p.key = nla_data(tb[NL80211_KEY_DATA]);
616 k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
619 if (tb[NL80211_KEY_SEQ]) {
620 k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
621 k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
624 if (tb[NL80211_KEY_CIPHER])
625 k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
627 if (tb[NL80211_KEY_TYPE]) {
628 k->type = nla_get_u32(tb[NL80211_KEY_TYPE]);
629 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
633 if (tb[NL80211_KEY_DEFAULT_TYPES]) {
634 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
635 err = nla_parse_nested(kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
636 tb[NL80211_KEY_DEFAULT_TYPES],
637 nl80211_key_default_policy);
641 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
642 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
648 static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
650 if (info->attrs[NL80211_ATTR_KEY_DATA]) {
651 k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
652 k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
655 if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
656 k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
657 k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
660 if (info->attrs[NL80211_ATTR_KEY_IDX])
661 k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
663 if (info->attrs[NL80211_ATTR_KEY_CIPHER])
664 k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
666 k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
667 k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
676 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
677 k->type = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
678 if (k->type < 0 || k->type >= NUM_NL80211_KEYTYPES)
682 if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
683 struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
684 int err = nla_parse_nested(
685 kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
686 info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
687 nl80211_key_default_policy);
691 k->def_uni = kdt[NL80211_KEY_DEFAULT_TYPE_UNICAST];
692 k->def_multi = kdt[NL80211_KEY_DEFAULT_TYPE_MULTICAST];
698 static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
702 memset(k, 0, sizeof(*k));
706 if (info->attrs[NL80211_ATTR_KEY])
707 err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
709 err = nl80211_parse_key_old(info, k);
714 if (k->def && k->defmgmt)
718 if (k->def_uni || !k->def_multi)
724 if (k->idx < 4 || k->idx > 5)
727 if (k->idx < 0 || k->idx > 3)
730 if (k->idx < 0 || k->idx > 5)
738 static struct cfg80211_cached_keys *
739 nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
740 struct nlattr *keys, bool *no_ht)
742 struct key_parse parse;
744 struct cfg80211_cached_keys *result;
745 int rem, err, def = 0;
747 result = kzalloc(sizeof(*result), GFP_KERNEL);
749 return ERR_PTR(-ENOMEM);
752 result->defmgmt = -1;
754 nla_for_each_nested(key, keys, rem) {
755 memset(&parse, 0, sizeof(parse));
758 err = nl80211_parse_key_new(key, &parse);
764 if (parse.idx < 0 || parse.idx > 4)
770 result->def = parse.idx;
771 if (!parse.def_uni || !parse.def_multi)
773 } else if (parse.defmgmt)
775 err = cfg80211_validate_key_settings(rdev, &parse.p,
776 parse.idx, false, NULL);
779 result->params[parse.idx].cipher = parse.p.cipher;
780 result->params[parse.idx].key_len = parse.p.key_len;
781 result->params[parse.idx].key = result->data[parse.idx];
782 memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
784 if (parse.p.cipher == WLAN_CIPHER_SUITE_WEP40 ||
785 parse.p.cipher == WLAN_CIPHER_SUITE_WEP104) {
797 static int nl80211_key_allowed(struct wireless_dev *wdev)
799 ASSERT_WDEV_LOCK(wdev);
801 switch (wdev->iftype) {
802 case NL80211_IFTYPE_AP:
803 case NL80211_IFTYPE_AP_VLAN:
804 case NL80211_IFTYPE_P2P_GO:
805 case NL80211_IFTYPE_MESH_POINT:
807 case NL80211_IFTYPE_ADHOC:
808 if (!wdev->current_bss)
811 case NL80211_IFTYPE_STATION:
812 case NL80211_IFTYPE_P2P_CLIENT:
813 if (wdev->sme_state != CFG80211_SME_CONNECTED)
823 static int nl80211_put_iftypes(struct sk_buff *msg, u32 attr, u16 ifmodes)
825 struct nlattr *nl_modes = nla_nest_start(msg, attr);
829 goto nla_put_failure;
833 if ((ifmodes & 1) && nla_put_flag(msg, i))
834 goto nla_put_failure;
839 nla_nest_end(msg, nl_modes);
846 static int nl80211_put_iface_combinations(struct wiphy *wiphy,
849 struct nlattr *nl_combis;
852 nl_combis = nla_nest_start(msg,
853 NL80211_ATTR_INTERFACE_COMBINATIONS);
855 goto nla_put_failure;
857 for (i = 0; i < wiphy->n_iface_combinations; i++) {
858 const struct ieee80211_iface_combination *c;
859 struct nlattr *nl_combi, *nl_limits;
861 c = &wiphy->iface_combinations[i];
863 nl_combi = nla_nest_start(msg, i + 1);
865 goto nla_put_failure;
867 nl_limits = nla_nest_start(msg, NL80211_IFACE_COMB_LIMITS);
869 goto nla_put_failure;
871 for (j = 0; j < c->n_limits; j++) {
872 struct nlattr *nl_limit;
874 nl_limit = nla_nest_start(msg, j + 1);
876 goto nla_put_failure;
877 if (nla_put_u32(msg, NL80211_IFACE_LIMIT_MAX,
879 goto nla_put_failure;
880 if (nl80211_put_iftypes(msg, NL80211_IFACE_LIMIT_TYPES,
882 goto nla_put_failure;
883 nla_nest_end(msg, nl_limit);
886 nla_nest_end(msg, nl_limits);
888 if (c->beacon_int_infra_match &&
889 nla_put_flag(msg, NL80211_IFACE_COMB_STA_AP_BI_MATCH))
890 goto nla_put_failure;
891 if (nla_put_u32(msg, NL80211_IFACE_COMB_NUM_CHANNELS,
892 c->num_different_channels) ||
893 nla_put_u32(msg, NL80211_IFACE_COMB_MAXNUM,
895 goto nla_put_failure;
897 nla_nest_end(msg, nl_combi);
900 nla_nest_end(msg, nl_combis);
907 static int nl80211_send_wiphy(struct sk_buff *msg, u32 portid, u32 seq, int flags,
908 struct cfg80211_registered_device *dev)
911 struct nlattr *nl_bands, *nl_band;
912 struct nlattr *nl_freqs, *nl_freq;
913 struct nlattr *nl_rates, *nl_rate;
914 struct nlattr *nl_cmds;
915 enum ieee80211_band band;
916 struct ieee80211_channel *chan;
917 struct ieee80211_rate *rate;
919 const struct ieee80211_txrx_stypes *mgmt_stypes =
920 dev->wiphy.mgmt_stypes;
922 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_WIPHY);
926 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx) ||
927 nla_put_string(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy)) ||
928 nla_put_u32(msg, NL80211_ATTR_GENERATION,
929 cfg80211_rdev_list_generation) ||
930 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
931 dev->wiphy.retry_short) ||
932 nla_put_u8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
933 dev->wiphy.retry_long) ||
934 nla_put_u32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
935 dev->wiphy.frag_threshold) ||
936 nla_put_u32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
937 dev->wiphy.rts_threshold) ||
938 nla_put_u8(msg, NL80211_ATTR_WIPHY_COVERAGE_CLASS,
939 dev->wiphy.coverage_class) ||
940 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
941 dev->wiphy.max_scan_ssids) ||
942 nla_put_u8(msg, NL80211_ATTR_MAX_NUM_SCHED_SCAN_SSIDS,
943 dev->wiphy.max_sched_scan_ssids) ||
944 nla_put_u16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
945 dev->wiphy.max_scan_ie_len) ||
946 nla_put_u16(msg, NL80211_ATTR_MAX_SCHED_SCAN_IE_LEN,
947 dev->wiphy.max_sched_scan_ie_len) ||
948 nla_put_u8(msg, NL80211_ATTR_MAX_MATCH_SETS,
949 dev->wiphy.max_match_sets))
950 goto nla_put_failure;
952 if ((dev->wiphy.flags & WIPHY_FLAG_IBSS_RSN) &&
953 nla_put_flag(msg, NL80211_ATTR_SUPPORT_IBSS_RSN))
954 goto nla_put_failure;
955 if ((dev->wiphy.flags & WIPHY_FLAG_MESH_AUTH) &&
956 nla_put_flag(msg, NL80211_ATTR_SUPPORT_MESH_AUTH))
957 goto nla_put_failure;
958 if ((dev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
959 nla_put_flag(msg, NL80211_ATTR_SUPPORT_AP_UAPSD))
960 goto nla_put_failure;
961 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_FW_ROAM) &&
962 nla_put_flag(msg, NL80211_ATTR_ROAM_SUPPORT))
963 goto nla_put_failure;
964 if ((dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) &&
965 nla_put_flag(msg, NL80211_ATTR_TDLS_SUPPORT))
966 goto nla_put_failure;
967 if ((dev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP) &&
968 nla_put_flag(msg, NL80211_ATTR_TDLS_EXTERNAL_SETUP))
969 goto nla_put_failure;
971 if (nla_put(msg, NL80211_ATTR_CIPHER_SUITES,
972 sizeof(u32) * dev->wiphy.n_cipher_suites,
973 dev->wiphy.cipher_suites))
974 goto nla_put_failure;
976 if (nla_put_u8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,
977 dev->wiphy.max_num_pmkids))
978 goto nla_put_failure;
980 if ((dev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
981 nla_put_flag(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE))
982 goto nla_put_failure;
984 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_TX,
985 dev->wiphy.available_antennas_tx) ||
986 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_AVAIL_RX,
987 dev->wiphy.available_antennas_rx))
988 goto nla_put_failure;
990 if ((dev->wiphy.flags & WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD) &&
991 nla_put_u32(msg, NL80211_ATTR_PROBE_RESP_OFFLOAD,
992 dev->wiphy.probe_resp_offload))
993 goto nla_put_failure;
995 if ((dev->wiphy.available_antennas_tx ||
996 dev->wiphy.available_antennas_rx) && dev->ops->get_antenna) {
997 u32 tx_ant = 0, rx_ant = 0;
999 res = rdev_get_antenna(dev, &tx_ant, &rx_ant);
1001 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_TX,
1003 nla_put_u32(msg, NL80211_ATTR_WIPHY_ANTENNA_RX,
1005 goto nla_put_failure;
1009 if (nl80211_put_iftypes(msg, NL80211_ATTR_SUPPORTED_IFTYPES,
1010 dev->wiphy.interface_modes))
1011 goto nla_put_failure;
1013 nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
1015 goto nla_put_failure;
1017 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
1018 if (!dev->wiphy.bands[band])
1021 nl_band = nla_nest_start(msg, band);
1023 goto nla_put_failure;
1026 if (dev->wiphy.bands[band]->ht_cap.ht_supported &&
1027 (nla_put(msg, NL80211_BAND_ATTR_HT_MCS_SET,
1028 sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
1029 &dev->wiphy.bands[band]->ht_cap.mcs) ||
1030 nla_put_u16(msg, NL80211_BAND_ATTR_HT_CAPA,
1031 dev->wiphy.bands[band]->ht_cap.cap) ||
1032 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
1033 dev->wiphy.bands[band]->ht_cap.ampdu_factor) ||
1034 nla_put_u8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
1035 dev->wiphy.bands[band]->ht_cap.ampdu_density)))
1036 goto nla_put_failure;
1039 if (dev->wiphy.bands[band]->vht_cap.vht_supported &&
1040 (nla_put(msg, NL80211_BAND_ATTR_VHT_MCS_SET,
1041 sizeof(dev->wiphy.bands[band]->vht_cap.vht_mcs),
1042 &dev->wiphy.bands[band]->vht_cap.vht_mcs) ||
1043 nla_put_u32(msg, NL80211_BAND_ATTR_VHT_CAPA,
1044 dev->wiphy.bands[band]->vht_cap.cap)))
1045 goto nla_put_failure;
1047 /* add frequencies */
1048 nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
1050 goto nla_put_failure;
1052 for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
1053 nl_freq = nla_nest_start(msg, i);
1055 goto nla_put_failure;
1057 chan = &dev->wiphy.bands[band]->channels[i];
1059 if (nl80211_msg_put_channel(msg, chan))
1060 goto nla_put_failure;
1062 nla_nest_end(msg, nl_freq);
1065 nla_nest_end(msg, nl_freqs);
1068 nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
1070 goto nla_put_failure;
1072 for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
1073 nl_rate = nla_nest_start(msg, i);
1075 goto nla_put_failure;
1077 rate = &dev->wiphy.bands[band]->bitrates[i];
1078 if (nla_put_u32(msg, NL80211_BITRATE_ATTR_RATE,
1080 goto nla_put_failure;
1081 if ((rate->flags & IEEE80211_RATE_SHORT_PREAMBLE) &&
1083 NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE))
1084 goto nla_put_failure;
1086 nla_nest_end(msg, nl_rate);
1089 nla_nest_end(msg, nl_rates);
1091 nla_nest_end(msg, nl_band);
1093 nla_nest_end(msg, nl_bands);
1095 nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
1097 goto nla_put_failure;
1100 #define CMD(op, n) \
1102 if (dev->ops->op) { \
1104 if (nla_put_u32(msg, i, NL80211_CMD_ ## n)) \
1105 goto nla_put_failure; \
1109 CMD(add_virtual_intf, NEW_INTERFACE);
1110 CMD(change_virtual_intf, SET_INTERFACE);
1111 CMD(add_key, NEW_KEY);
1112 CMD(start_ap, START_AP);
1113 CMD(add_station, NEW_STATION);
1114 CMD(add_mpath, NEW_MPATH);
1115 CMD(update_mesh_config, SET_MESH_CONFIG);
1116 CMD(change_bss, SET_BSS);
1117 CMD(auth, AUTHENTICATE);
1118 CMD(assoc, ASSOCIATE);
1119 CMD(deauth, DEAUTHENTICATE);
1120 CMD(disassoc, DISASSOCIATE);
1121 CMD(join_ibss, JOIN_IBSS);
1122 CMD(join_mesh, JOIN_MESH);
1123 CMD(set_pmksa, SET_PMKSA);
1124 CMD(del_pmksa, DEL_PMKSA);
1125 CMD(flush_pmksa, FLUSH_PMKSA);
1126 if (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL)
1127 CMD(remain_on_channel, REMAIN_ON_CHANNEL);
1128 CMD(set_bitrate_mask, SET_TX_BITRATE_MASK);
1129 CMD(mgmt_tx, FRAME);
1130 CMD(mgmt_tx_cancel_wait, FRAME_WAIT_CANCEL);
1131 if (dev->wiphy.flags & WIPHY_FLAG_NETNS_OK) {
1133 if (nla_put_u32(msg, i, NL80211_CMD_SET_WIPHY_NETNS))
1134 goto nla_put_failure;
1136 if (dev->ops->set_monitor_channel || dev->ops->start_ap ||
1137 dev->ops->join_mesh) {
1139 if (nla_put_u32(msg, i, NL80211_CMD_SET_CHANNEL))
1140 goto nla_put_failure;
1142 CMD(set_wds_peer, SET_WDS_PEER);
1143 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) {
1144 CMD(tdls_mgmt, TDLS_MGMT);
1145 CMD(tdls_oper, TDLS_OPER);
1147 if (dev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN)
1148 CMD(sched_scan_start, START_SCHED_SCAN);
1149 CMD(probe_client, PROBE_CLIENT);
1150 CMD(set_noack_map, SET_NOACK_MAP);
1151 if (dev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS) {
1153 if (nla_put_u32(msg, i, NL80211_CMD_REGISTER_BEACONS))
1154 goto nla_put_failure;
1156 CMD(start_p2p_device, START_P2P_DEVICE);
1157 CMD(set_mcast_rate, SET_MCAST_RATE);
1159 #ifdef CONFIG_NL80211_TESTMODE
1160 CMD(testmode_cmd, TESTMODE);
1165 if (dev->ops->connect || dev->ops->auth) {
1167 if (nla_put_u32(msg, i, NL80211_CMD_CONNECT))
1168 goto nla_put_failure;
1171 if (dev->ops->disconnect || dev->ops->deauth) {
1173 if (nla_put_u32(msg, i, NL80211_CMD_DISCONNECT))
1174 goto nla_put_failure;
1177 nla_nest_end(msg, nl_cmds);
1179 if (dev->ops->remain_on_channel &&
1180 (dev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL) &&
1181 nla_put_u32(msg, NL80211_ATTR_MAX_REMAIN_ON_CHANNEL_DURATION,
1182 dev->wiphy.max_remain_on_channel_duration))
1183 goto nla_put_failure;
1185 if ((dev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX) &&
1186 nla_put_flag(msg, NL80211_ATTR_OFFCHANNEL_TX_OK))
1187 goto nla_put_failure;
1191 struct nlattr *nl_ftypes, *nl_ifs;
1192 enum nl80211_iftype ift;
1194 nl_ifs = nla_nest_start(msg, NL80211_ATTR_TX_FRAME_TYPES);
1196 goto nla_put_failure;
1198 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1199 nl_ftypes = nla_nest_start(msg, ift);
1201 goto nla_put_failure;
1203 stypes = mgmt_stypes[ift].tx;
1206 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1207 (i << 4) | IEEE80211_FTYPE_MGMT))
1208 goto nla_put_failure;
1212 nla_nest_end(msg, nl_ftypes);
1215 nla_nest_end(msg, nl_ifs);
1217 nl_ifs = nla_nest_start(msg, NL80211_ATTR_RX_FRAME_TYPES);
1219 goto nla_put_failure;
1221 for (ift = 0; ift < NUM_NL80211_IFTYPES; ift++) {
1222 nl_ftypes = nla_nest_start(msg, ift);
1224 goto nla_put_failure;
1226 stypes = mgmt_stypes[ift].rx;
1229 nla_put_u16(msg, NL80211_ATTR_FRAME_TYPE,
1230 (i << 4) | IEEE80211_FTYPE_MGMT))
1231 goto nla_put_failure;
1235 nla_nest_end(msg, nl_ftypes);
1237 nla_nest_end(msg, nl_ifs);
1241 if (dev->wiphy.wowlan.flags || dev->wiphy.wowlan.n_patterns) {
1242 struct nlattr *nl_wowlan;
1244 nl_wowlan = nla_nest_start(msg,
1245 NL80211_ATTR_WOWLAN_TRIGGERS_SUPPORTED);
1247 goto nla_put_failure;
1249 if (((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_ANY) &&
1250 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
1251 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_DISCONNECT) &&
1252 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
1253 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_MAGIC_PKT) &&
1254 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
1255 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY) &&
1256 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED)) ||
1257 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
1258 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
1259 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ) &&
1260 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
1261 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_4WAY_HANDSHAKE) &&
1262 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
1263 ((dev->wiphy.wowlan.flags & WIPHY_WOWLAN_RFKILL_RELEASE) &&
1264 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
1265 goto nla_put_failure;
1266 if (dev->wiphy.wowlan.n_patterns) {
1267 struct nl80211_wowlan_pattern_support pat = {
1268 .max_patterns = dev->wiphy.wowlan.n_patterns,
1270 dev->wiphy.wowlan.pattern_min_len,
1272 dev->wiphy.wowlan.pattern_max_len,
1274 dev->wiphy.wowlan.max_pkt_offset,
1276 if (nla_put(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
1278 goto nla_put_failure;
1281 nla_nest_end(msg, nl_wowlan);
1285 if (nl80211_put_iftypes(msg, NL80211_ATTR_SOFTWARE_IFTYPES,
1286 dev->wiphy.software_iftypes))
1287 goto nla_put_failure;
1289 if (nl80211_put_iface_combinations(&dev->wiphy, msg))
1290 goto nla_put_failure;
1292 if ((dev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME) &&
1293 nla_put_u32(msg, NL80211_ATTR_DEVICE_AP_SME,
1294 dev->wiphy.ap_sme_capa))
1295 goto nla_put_failure;
1297 if (nla_put_u32(msg, NL80211_ATTR_FEATURE_FLAGS,
1298 dev->wiphy.features))
1299 goto nla_put_failure;
1301 if (dev->wiphy.ht_capa_mod_mask &&
1302 nla_put(msg, NL80211_ATTR_HT_CAPABILITY_MASK,
1303 sizeof(*dev->wiphy.ht_capa_mod_mask),
1304 dev->wiphy.ht_capa_mod_mask))
1305 goto nla_put_failure;
1307 if (dev->wiphy.flags & WIPHY_FLAG_HAVE_AP_SME &&
1308 dev->wiphy.max_acl_mac_addrs &&
1309 nla_put_u32(msg, NL80211_ATTR_MAC_ACL_MAX,
1310 dev->wiphy.max_acl_mac_addrs))
1311 goto nla_put_failure;
1313 if (dev->wiphy.extended_capabilities &&
1314 (nla_put(msg, NL80211_ATTR_EXT_CAPA,
1315 dev->wiphy.extended_capabilities_len,
1316 dev->wiphy.extended_capabilities) ||
1317 nla_put(msg, NL80211_ATTR_EXT_CAPA_MASK,
1318 dev->wiphy.extended_capabilities_len,
1319 dev->wiphy.extended_capabilities_mask)))
1320 goto nla_put_failure;
1322 return genlmsg_end(msg, hdr);
1325 genlmsg_cancel(msg, hdr);
1329 static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
1332 int start = cb->args[0];
1333 struct cfg80211_registered_device *dev;
1335 mutex_lock(&cfg80211_mutex);
1336 list_for_each_entry(dev, &cfg80211_rdev_list, list) {
1337 if (!net_eq(wiphy_net(&dev->wiphy), sock_net(skb->sk)))
1341 if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).portid,
1342 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1348 mutex_unlock(&cfg80211_mutex);
1355 static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
1357 struct sk_buff *msg;
1358 struct cfg80211_registered_device *dev = info->user_ptr[0];
1360 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1364 if (nl80211_send_wiphy(msg, info->snd_portid, info->snd_seq, 0, dev) < 0) {
1369 return genlmsg_reply(msg, info);
1372 static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
1373 [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
1374 [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
1375 [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
1376 [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
1377 [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
1380 static int parse_txq_params(struct nlattr *tb[],
1381 struct ieee80211_txq_params *txq_params)
1383 if (!tb[NL80211_TXQ_ATTR_AC] || !tb[NL80211_TXQ_ATTR_TXOP] ||
1384 !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
1385 !tb[NL80211_TXQ_ATTR_AIFS])
1388 txq_params->ac = nla_get_u8(tb[NL80211_TXQ_ATTR_AC]);
1389 txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
1390 txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
1391 txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
1392 txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
1394 if (txq_params->ac >= NL80211_NUM_ACS)
1400 static bool nl80211_can_set_dev_channel(struct wireless_dev *wdev)
1403 * You can only set the channel explicitly for WDS interfaces,
1404 * all others have their channel managed via their respective
1405 * "establish a connection" command (connect, join, ...)
1407 * For AP/GO and mesh mode, the channel can be set with the
1408 * channel userspace API, but is only stored and passed to the
1409 * low-level driver when the AP starts or the mesh is joined.
1410 * This is for backward compatibility, userspace can also give
1411 * the channel in the start-ap or join-mesh commands instead.
1413 * Monitors are special as they are normally slaved to
1414 * whatever else is going on, so they have their own special
1415 * operation to set the monitor channel if possible.
1418 wdev->iftype == NL80211_IFTYPE_AP ||
1419 wdev->iftype == NL80211_IFTYPE_MESH_POINT ||
1420 wdev->iftype == NL80211_IFTYPE_MONITOR ||
1421 wdev->iftype == NL80211_IFTYPE_P2P_GO;
1424 static int nl80211_parse_chandef(struct cfg80211_registered_device *rdev,
1425 struct genl_info *info,
1426 struct cfg80211_chan_def *chandef)
1430 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
1433 control_freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
1435 chandef->chan = ieee80211_get_channel(&rdev->wiphy, control_freq);
1436 chandef->width = NL80211_CHAN_WIDTH_20_NOHT;
1437 chandef->center_freq1 = control_freq;
1438 chandef->center_freq2 = 0;
1440 /* Primary channel not allowed */
1441 if (!chandef->chan || chandef->chan->flags & IEEE80211_CHAN_DISABLED)
1444 if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
1445 enum nl80211_channel_type chantype;
1447 chantype = nla_get_u32(
1448 info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
1451 case NL80211_CHAN_NO_HT:
1452 case NL80211_CHAN_HT20:
1453 case NL80211_CHAN_HT40PLUS:
1454 case NL80211_CHAN_HT40MINUS:
1455 cfg80211_chandef_create(chandef, chandef->chan,
1461 } else if (info->attrs[NL80211_ATTR_CHANNEL_WIDTH]) {
1463 nla_get_u32(info->attrs[NL80211_ATTR_CHANNEL_WIDTH]);
1464 if (info->attrs[NL80211_ATTR_CENTER_FREQ1])
1465 chandef->center_freq1 =
1467 info->attrs[NL80211_ATTR_CENTER_FREQ1]);
1468 if (info->attrs[NL80211_ATTR_CENTER_FREQ2])
1469 chandef->center_freq2 =
1471 info->attrs[NL80211_ATTR_CENTER_FREQ2]);
1474 if (!cfg80211_chandef_valid(chandef))
1477 if (!cfg80211_chandef_usable(&rdev->wiphy, chandef,
1478 IEEE80211_CHAN_DISABLED))
1484 static int __nl80211_set_channel(struct cfg80211_registered_device *rdev,
1485 struct wireless_dev *wdev,
1486 struct genl_info *info)
1488 struct cfg80211_chan_def chandef;
1490 enum nl80211_iftype iftype = NL80211_IFTYPE_MONITOR;
1493 iftype = wdev->iftype;
1495 if (!nl80211_can_set_dev_channel(wdev))
1498 result = nl80211_parse_chandef(rdev, info, &chandef);
1502 mutex_lock(&rdev->devlist_mtx);
1504 case NL80211_IFTYPE_AP:
1505 case NL80211_IFTYPE_P2P_GO:
1506 if (wdev->beacon_interval) {
1510 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &chandef)) {
1514 wdev->preset_chandef = chandef;
1517 case NL80211_IFTYPE_MESH_POINT:
1518 result = cfg80211_set_mesh_channel(rdev, wdev, &chandef);
1520 case NL80211_IFTYPE_MONITOR:
1521 result = cfg80211_set_monitor_channel(rdev, &chandef);
1526 mutex_unlock(&rdev->devlist_mtx);
1531 static int nl80211_set_channel(struct sk_buff *skb, struct genl_info *info)
1533 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1534 struct net_device *netdev = info->user_ptr[1];
1536 return __nl80211_set_channel(rdev, netdev->ieee80211_ptr, info);
1539 static int nl80211_set_wds_peer(struct sk_buff *skb, struct genl_info *info)
1541 struct cfg80211_registered_device *rdev = info->user_ptr[0];
1542 struct net_device *dev = info->user_ptr[1];
1543 struct wireless_dev *wdev = dev->ieee80211_ptr;
1546 if (!info->attrs[NL80211_ATTR_MAC])
1549 if (netif_running(dev))
1552 if (!rdev->ops->set_wds_peer)
1555 if (wdev->iftype != NL80211_IFTYPE_WDS)
1558 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
1559 return rdev_set_wds_peer(rdev, dev, bssid);
1563 static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
1565 struct cfg80211_registered_device *rdev;
1566 struct net_device *netdev = NULL;
1567 struct wireless_dev *wdev;
1568 int result = 0, rem_txq_params = 0;
1569 struct nlattr *nl_txq_params;
1571 u8 retry_short = 0, retry_long = 0;
1572 u32 frag_threshold = 0, rts_threshold = 0;
1573 u8 coverage_class = 0;
1576 * Try to find the wiphy and netdev. Normally this
1577 * function shouldn't need the netdev, but this is
1578 * done for backward compatibility -- previously
1579 * setting the channel was done per wiphy, but now
1580 * it is per netdev. Previous userland like hostapd
1581 * also passed a netdev to set_wiphy, so that it is
1582 * possible to let that go to the right netdev!
1584 mutex_lock(&cfg80211_mutex);
1586 if (info->attrs[NL80211_ATTR_IFINDEX]) {
1587 int ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
1589 netdev = dev_get_by_index(genl_info_net(info), ifindex);
1590 if (netdev && netdev->ieee80211_ptr) {
1591 rdev = wiphy_to_dev(netdev->ieee80211_ptr->wiphy);
1592 mutex_lock(&rdev->mtx);
1598 rdev = __cfg80211_rdev_from_attrs(genl_info_net(info),
1601 mutex_unlock(&cfg80211_mutex);
1602 return PTR_ERR(rdev);
1608 mutex_lock(&rdev->mtx);
1610 wdev = netdev->ieee80211_ptr;
1613 * end workaround code, by now the rdev is available
1614 * and locked, and wdev may or may not be NULL.
1617 if (info->attrs[NL80211_ATTR_WIPHY_NAME])
1618 result = cfg80211_dev_rename(
1619 rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
1621 mutex_unlock(&cfg80211_mutex);
1626 if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
1627 struct ieee80211_txq_params txq_params;
1628 struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
1630 if (!rdev->ops->set_txq_params) {
1631 result = -EOPNOTSUPP;
1640 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
1641 netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO) {
1646 if (!netif_running(netdev)) {
1651 nla_for_each_nested(nl_txq_params,
1652 info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
1654 nla_parse(tb, NL80211_TXQ_ATTR_MAX,
1655 nla_data(nl_txq_params),
1656 nla_len(nl_txq_params),
1658 result = parse_txq_params(tb, &txq_params);
1662 result = rdev_set_txq_params(rdev, netdev,
1669 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
1670 result = __nl80211_set_channel(rdev,
1671 nl80211_can_set_dev_channel(wdev) ? wdev : NULL,
1677 if (info->attrs[NL80211_ATTR_WIPHY_TX_POWER_SETTING]) {
1678 struct wireless_dev *txp_wdev = wdev;
1679 enum nl80211_tx_power_setting type;
1682 if (!(rdev->wiphy.features & NL80211_FEATURE_VIF_TXPOWER))
1685 if (!rdev->ops->set_tx_power) {
1686 result = -EOPNOTSUPP;
1690 idx = NL80211_ATTR_WIPHY_TX_POWER_SETTING;
1691 type = nla_get_u32(info->attrs[idx]);
1693 if (!info->attrs[NL80211_ATTR_WIPHY_TX_POWER_LEVEL] &&
1694 (type != NL80211_TX_POWER_AUTOMATIC)) {
1699 if (type != NL80211_TX_POWER_AUTOMATIC) {
1700 idx = NL80211_ATTR_WIPHY_TX_POWER_LEVEL;
1701 mbm = nla_get_u32(info->attrs[idx]);
1704 result = rdev_set_tx_power(rdev, txp_wdev, type, mbm);
1709 if (info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX] &&
1710 info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]) {
1712 if ((!rdev->wiphy.available_antennas_tx &&
1713 !rdev->wiphy.available_antennas_rx) ||
1714 !rdev->ops->set_antenna) {
1715 result = -EOPNOTSUPP;
1719 tx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_TX]);
1720 rx_ant = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_ANTENNA_RX]);
1722 /* reject antenna configurations which don't match the
1723 * available antenna masks, except for the "all" mask */
1724 if ((~tx_ant && (tx_ant & ~rdev->wiphy.available_antennas_tx)) ||
1725 (~rx_ant && (rx_ant & ~rdev->wiphy.available_antennas_rx))) {
1730 tx_ant = tx_ant & rdev->wiphy.available_antennas_tx;
1731 rx_ant = rx_ant & rdev->wiphy.available_antennas_rx;
1733 result = rdev_set_antenna(rdev, tx_ant, rx_ant);
1740 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
1741 retry_short = nla_get_u8(
1742 info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
1743 if (retry_short == 0) {
1747 changed |= WIPHY_PARAM_RETRY_SHORT;
1750 if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
1751 retry_long = nla_get_u8(
1752 info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
1753 if (retry_long == 0) {
1757 changed |= WIPHY_PARAM_RETRY_LONG;
1760 if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
1761 frag_threshold = nla_get_u32(
1762 info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
1763 if (frag_threshold < 256) {
1767 if (frag_threshold != (u32) -1) {
1769 * Fragments (apart from the last one) are required to
1770 * have even length. Make the fragmentation code
1771 * simpler by stripping LSB should someone try to use
1772 * odd threshold value.
1774 frag_threshold &= ~0x1;
1776 changed |= WIPHY_PARAM_FRAG_THRESHOLD;
1779 if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
1780 rts_threshold = nla_get_u32(
1781 info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
1782 changed |= WIPHY_PARAM_RTS_THRESHOLD;
1785 if (info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]) {
1786 coverage_class = nla_get_u8(
1787 info->attrs[NL80211_ATTR_WIPHY_COVERAGE_CLASS]);
1788 changed |= WIPHY_PARAM_COVERAGE_CLASS;
1792 u8 old_retry_short, old_retry_long;
1793 u32 old_frag_threshold, old_rts_threshold;
1794 u8 old_coverage_class;
1796 if (!rdev->ops->set_wiphy_params) {
1797 result = -EOPNOTSUPP;
1801 old_retry_short = rdev->wiphy.retry_short;
1802 old_retry_long = rdev->wiphy.retry_long;
1803 old_frag_threshold = rdev->wiphy.frag_threshold;
1804 old_rts_threshold = rdev->wiphy.rts_threshold;
1805 old_coverage_class = rdev->wiphy.coverage_class;
1807 if (changed & WIPHY_PARAM_RETRY_SHORT)
1808 rdev->wiphy.retry_short = retry_short;
1809 if (changed & WIPHY_PARAM_RETRY_LONG)
1810 rdev->wiphy.retry_long = retry_long;
1811 if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1812 rdev->wiphy.frag_threshold = frag_threshold;
1813 if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1814 rdev->wiphy.rts_threshold = rts_threshold;
1815 if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1816 rdev->wiphy.coverage_class = coverage_class;
1818 result = rdev_set_wiphy_params(rdev, changed);
1820 rdev->wiphy.retry_short = old_retry_short;
1821 rdev->wiphy.retry_long = old_retry_long;
1822 rdev->wiphy.frag_threshold = old_frag_threshold;
1823 rdev->wiphy.rts_threshold = old_rts_threshold;
1824 rdev->wiphy.coverage_class = old_coverage_class;
1829 mutex_unlock(&rdev->mtx);
1835 static inline u64 wdev_id(struct wireless_dev *wdev)
1837 return (u64)wdev->identifier |
1838 ((u64)wiphy_to_dev(wdev->wiphy)->wiphy_idx << 32);
1841 static int nl80211_send_chandef(struct sk_buff *msg,
1842 struct cfg80211_chan_def *chandef)
1844 WARN_ON(!cfg80211_chandef_valid(chandef));
1846 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ,
1847 chandef->chan->center_freq))
1849 switch (chandef->width) {
1850 case NL80211_CHAN_WIDTH_20_NOHT:
1851 case NL80211_CHAN_WIDTH_20:
1852 case NL80211_CHAN_WIDTH_40:
1853 if (nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
1854 cfg80211_get_chandef_type(chandef)))
1860 if (nla_put_u32(msg, NL80211_ATTR_CHANNEL_WIDTH, chandef->width))
1862 if (nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ1, chandef->center_freq1))
1864 if (chandef->center_freq2 &&
1865 nla_put_u32(msg, NL80211_ATTR_CENTER_FREQ2, chandef->center_freq2))
1870 static int nl80211_send_iface(struct sk_buff *msg, u32 portid, u32 seq, int flags,
1871 struct cfg80211_registered_device *rdev,
1872 struct wireless_dev *wdev)
1874 struct net_device *dev = wdev->netdev;
1877 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_INTERFACE);
1882 (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
1883 nla_put_string(msg, NL80211_ATTR_IFNAME, dev->name)))
1884 goto nla_put_failure;
1886 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
1887 nla_put_u32(msg, NL80211_ATTR_IFTYPE, wdev->iftype) ||
1888 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
1889 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, wdev_address(wdev)) ||
1890 nla_put_u32(msg, NL80211_ATTR_GENERATION,
1891 rdev->devlist_generation ^
1892 (cfg80211_rdev_list_generation << 2)))
1893 goto nla_put_failure;
1895 if (rdev->ops->get_channel) {
1897 struct cfg80211_chan_def chandef;
1899 ret = rdev_get_channel(rdev, wdev, &chandef);
1901 if (nl80211_send_chandef(msg, &chandef))
1902 goto nla_put_failure;
1906 if (wdev->ssid_len) {
1907 if (nla_put(msg, NL80211_ATTR_SSID, wdev->ssid_len, wdev->ssid))
1908 goto nla_put_failure;
1911 return genlmsg_end(msg, hdr);
1914 genlmsg_cancel(msg, hdr);
1918 static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
1922 int wp_start = cb->args[0];
1923 int if_start = cb->args[1];
1924 struct cfg80211_registered_device *rdev;
1925 struct wireless_dev *wdev;
1927 mutex_lock(&cfg80211_mutex);
1928 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1929 if (!net_eq(wiphy_net(&rdev->wiphy), sock_net(skb->sk)))
1931 if (wp_idx < wp_start) {
1937 mutex_lock(&rdev->devlist_mtx);
1938 list_for_each_entry(wdev, &rdev->wdev_list, list) {
1939 if (if_idx < if_start) {
1943 if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).portid,
1944 cb->nlh->nlmsg_seq, NLM_F_MULTI,
1946 mutex_unlock(&rdev->devlist_mtx);
1951 mutex_unlock(&rdev->devlist_mtx);
1956 mutex_unlock(&cfg80211_mutex);
1958 cb->args[0] = wp_idx;
1959 cb->args[1] = if_idx;
1964 static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
1966 struct sk_buff *msg;
1967 struct cfg80211_registered_device *dev = info->user_ptr[0];
1968 struct wireless_dev *wdev = info->user_ptr[1];
1970 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
1974 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
1980 return genlmsg_reply(msg, info);
1983 static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
1984 [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
1985 [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
1986 [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
1987 [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
1988 [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
1991 static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
1993 struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
2001 if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
2002 nla, mntr_flags_policy))
2005 for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
2007 *mntrflags |= (1<<flag);
2012 static int nl80211_valid_4addr(struct cfg80211_registered_device *rdev,
2013 struct net_device *netdev, u8 use_4addr,
2014 enum nl80211_iftype iftype)
2017 if (netdev && (netdev->priv_flags & IFF_BRIDGE_PORT))
2023 case NL80211_IFTYPE_AP_VLAN:
2024 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_AP)
2027 case NL80211_IFTYPE_STATION:
2028 if (rdev->wiphy.flags & WIPHY_FLAG_4ADDR_STATION)
2038 static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
2040 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2041 struct vif_params params;
2043 enum nl80211_iftype otype, ntype;
2044 struct net_device *dev = info->user_ptr[1];
2045 u32 _flags, *flags = NULL;
2046 bool change = false;
2048 memset(¶ms, 0, sizeof(params));
2050 otype = ntype = dev->ieee80211_ptr->iftype;
2052 if (info->attrs[NL80211_ATTR_IFTYPE]) {
2053 ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
2056 if (ntype > NL80211_IFTYPE_MAX)
2060 if (info->attrs[NL80211_ATTR_MESH_ID]) {
2061 struct wireless_dev *wdev = dev->ieee80211_ptr;
2063 if (ntype != NL80211_IFTYPE_MESH_POINT)
2065 if (netif_running(dev))
2069 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
2070 IEEE80211_MAX_MESH_ID_LEN);
2071 wdev->mesh_id_up_len =
2072 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
2073 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
2074 wdev->mesh_id_up_len);
2078 if (info->attrs[NL80211_ATTR_4ADDR]) {
2079 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
2081 err = nl80211_valid_4addr(rdev, dev, params.use_4addr, ntype);
2085 params.use_4addr = -1;
2088 if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
2089 if (ntype != NL80211_IFTYPE_MONITOR)
2091 err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
2101 err = cfg80211_change_iface(rdev, dev, ntype, flags, ¶ms);
2105 if (!err && params.use_4addr != -1)
2106 dev->ieee80211_ptr->use_4addr = params.use_4addr;
2111 static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
2113 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2114 struct vif_params params;
2115 struct wireless_dev *wdev;
2116 struct sk_buff *msg;
2118 enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
2121 memset(¶ms, 0, sizeof(params));
2123 if (!info->attrs[NL80211_ATTR_IFNAME])
2126 if (info->attrs[NL80211_ATTR_IFTYPE]) {
2127 type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
2128 if (type > NL80211_IFTYPE_MAX)
2132 if (!rdev->ops->add_virtual_intf ||
2133 !(rdev->wiphy.interface_modes & (1 << type)))
2136 if (type == NL80211_IFTYPE_P2P_DEVICE && info->attrs[NL80211_ATTR_MAC]) {
2137 nla_memcpy(params.macaddr, info->attrs[NL80211_ATTR_MAC],
2139 if (!is_valid_ether_addr(params.macaddr))
2140 return -EADDRNOTAVAIL;
2143 if (info->attrs[NL80211_ATTR_4ADDR]) {
2144 params.use_4addr = !!nla_get_u8(info->attrs[NL80211_ATTR_4ADDR]);
2145 err = nl80211_valid_4addr(rdev, NULL, params.use_4addr, type);
2150 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2154 err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
2155 info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
2157 wdev = rdev_add_virtual_intf(rdev,
2158 nla_data(info->attrs[NL80211_ATTR_IFNAME]),
2159 type, err ? NULL : &flags, ¶ms);
2162 return PTR_ERR(wdev);
2166 case NL80211_IFTYPE_MESH_POINT:
2167 if (!info->attrs[NL80211_ATTR_MESH_ID])
2170 BUILD_BUG_ON(IEEE80211_MAX_SSID_LEN !=
2171 IEEE80211_MAX_MESH_ID_LEN);
2172 wdev->mesh_id_up_len =
2173 nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
2174 memcpy(wdev->ssid, nla_data(info->attrs[NL80211_ATTR_MESH_ID]),
2175 wdev->mesh_id_up_len);
2178 case NL80211_IFTYPE_P2P_DEVICE:
2180 * P2P Device doesn't have a netdev, so doesn't go
2181 * through the netdev notifier and must be added here
2183 mutex_init(&wdev->mtx);
2184 INIT_LIST_HEAD(&wdev->event_list);
2185 spin_lock_init(&wdev->event_lock);
2186 INIT_LIST_HEAD(&wdev->mgmt_registrations);
2187 spin_lock_init(&wdev->mgmt_registrations_lock);
2189 mutex_lock(&rdev->devlist_mtx);
2190 wdev->identifier = ++rdev->wdev_id;
2191 list_add_rcu(&wdev->list, &rdev->wdev_list);
2192 rdev->devlist_generation++;
2193 mutex_unlock(&rdev->devlist_mtx);
2199 if (nl80211_send_iface(msg, info->snd_portid, info->snd_seq, 0,
2205 return genlmsg_reply(msg, info);
2208 static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
2210 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2211 struct wireless_dev *wdev = info->user_ptr[1];
2213 if (!rdev->ops->del_virtual_intf)
2217 * If we remove a wireless device without a netdev then clear
2218 * user_ptr[1] so that nl80211_post_doit won't dereference it
2219 * to check if it needs to do dev_put(). Otherwise it crashes
2220 * since the wdev has been freed, unlike with a netdev where
2221 * we need the dev_put() for the netdev to really be freed.
2224 info->user_ptr[1] = NULL;
2226 return rdev_del_virtual_intf(rdev, wdev);
2229 static int nl80211_set_noack_map(struct sk_buff *skb, struct genl_info *info)
2231 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2232 struct net_device *dev = info->user_ptr[1];
2235 if (!info->attrs[NL80211_ATTR_NOACK_MAP])
2238 if (!rdev->ops->set_noack_map)
2241 noack_map = nla_get_u16(info->attrs[NL80211_ATTR_NOACK_MAP]);
2243 return rdev_set_noack_map(rdev, dev, noack_map);
2246 struct get_key_cookie {
2247 struct sk_buff *msg;
2252 static void get_key_callback(void *c, struct key_params *params)
2255 struct get_key_cookie *cookie = c;
2258 nla_put(cookie->msg, NL80211_ATTR_KEY_DATA,
2259 params->key_len, params->key)) ||
2261 nla_put(cookie->msg, NL80211_ATTR_KEY_SEQ,
2262 params->seq_len, params->seq)) ||
2264 nla_put_u32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
2266 goto nla_put_failure;
2268 key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
2270 goto nla_put_failure;
2273 nla_put(cookie->msg, NL80211_KEY_DATA,
2274 params->key_len, params->key)) ||
2276 nla_put(cookie->msg, NL80211_KEY_SEQ,
2277 params->seq_len, params->seq)) ||
2279 nla_put_u32(cookie->msg, NL80211_KEY_CIPHER,
2281 goto nla_put_failure;
2283 if (nla_put_u8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx))
2284 goto nla_put_failure;
2286 nla_nest_end(cookie->msg, key);
2293 static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
2295 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2297 struct net_device *dev = info->user_ptr[1];
2299 const u8 *mac_addr = NULL;
2301 struct get_key_cookie cookie = {
2305 struct sk_buff *msg;
2307 if (info->attrs[NL80211_ATTR_KEY_IDX])
2308 key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
2313 if (info->attrs[NL80211_ATTR_MAC])
2314 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2316 pairwise = !!mac_addr;
2317 if (info->attrs[NL80211_ATTR_KEY_TYPE]) {
2318 u32 kt = nla_get_u32(info->attrs[NL80211_ATTR_KEY_TYPE]);
2319 if (kt >= NUM_NL80211_KEYTYPES)
2321 if (kt != NL80211_KEYTYPE_GROUP &&
2322 kt != NL80211_KEYTYPE_PAIRWISE)
2324 pairwise = kt == NL80211_KEYTYPE_PAIRWISE;
2327 if (!rdev->ops->get_key)
2330 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
2334 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
2335 NL80211_CMD_NEW_KEY);
2337 return PTR_ERR(hdr);
2340 cookie.idx = key_idx;
2342 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
2343 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_idx))
2344 goto nla_put_failure;
2346 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
2347 goto nla_put_failure;
2349 if (pairwise && mac_addr &&
2350 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2353 err = rdev_get_key(rdev, dev, key_idx, pairwise, mac_addr, &cookie,
2360 goto nla_put_failure;
2362 genlmsg_end(msg, hdr);
2363 return genlmsg_reply(msg, info);
2372 static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
2374 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2375 struct key_parse key;
2377 struct net_device *dev = info->user_ptr[1];
2379 err = nl80211_parse_key(info, &key);
2386 /* only support setting default key */
2387 if (!key.def && !key.defmgmt)
2390 wdev_lock(dev->ieee80211_ptr);
2393 if (!rdev->ops->set_default_key) {
2398 err = nl80211_key_allowed(dev->ieee80211_ptr);
2402 err = rdev_set_default_key(rdev, dev, key.idx,
2403 key.def_uni, key.def_multi);
2408 #ifdef CONFIG_CFG80211_WEXT
2409 dev->ieee80211_ptr->wext.default_key = key.idx;
2412 if (key.def_uni || !key.def_multi) {
2417 if (!rdev->ops->set_default_mgmt_key) {
2422 err = nl80211_key_allowed(dev->ieee80211_ptr);
2426 err = rdev_set_default_mgmt_key(rdev, dev, key.idx);
2430 #ifdef CONFIG_CFG80211_WEXT
2431 dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
2436 wdev_unlock(dev->ieee80211_ptr);
2441 static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
2443 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2445 struct net_device *dev = info->user_ptr[1];
2446 struct key_parse key;
2447 const u8 *mac_addr = NULL;
2449 err = nl80211_parse_key(info, &key);
2456 if (info->attrs[NL80211_ATTR_MAC])
2457 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2459 if (key.type == -1) {
2461 key.type = NL80211_KEYTYPE_PAIRWISE;
2463 key.type = NL80211_KEYTYPE_GROUP;
2467 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2468 key.type != NL80211_KEYTYPE_GROUP)
2471 if (!rdev->ops->add_key)
2474 if (cfg80211_validate_key_settings(rdev, &key.p, key.idx,
2475 key.type == NL80211_KEYTYPE_PAIRWISE,
2479 wdev_lock(dev->ieee80211_ptr);
2480 err = nl80211_key_allowed(dev->ieee80211_ptr);
2482 err = rdev_add_key(rdev, dev, key.idx,
2483 key.type == NL80211_KEYTYPE_PAIRWISE,
2485 wdev_unlock(dev->ieee80211_ptr);
2490 static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
2492 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2494 struct net_device *dev = info->user_ptr[1];
2495 u8 *mac_addr = NULL;
2496 struct key_parse key;
2498 err = nl80211_parse_key(info, &key);
2502 if (info->attrs[NL80211_ATTR_MAC])
2503 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
2505 if (key.type == -1) {
2507 key.type = NL80211_KEYTYPE_PAIRWISE;
2509 key.type = NL80211_KEYTYPE_GROUP;
2513 if (key.type != NL80211_KEYTYPE_PAIRWISE &&
2514 key.type != NL80211_KEYTYPE_GROUP)
2517 if (!rdev->ops->del_key)
2520 wdev_lock(dev->ieee80211_ptr);
2521 err = nl80211_key_allowed(dev->ieee80211_ptr);
2523 if (key.type == NL80211_KEYTYPE_PAIRWISE && mac_addr &&
2524 !(rdev->wiphy.flags & WIPHY_FLAG_IBSS_RSN))
2528 err = rdev_del_key(rdev, dev, key.idx,
2529 key.type == NL80211_KEYTYPE_PAIRWISE,
2532 #ifdef CONFIG_CFG80211_WEXT
2534 if (key.idx == dev->ieee80211_ptr->wext.default_key)
2535 dev->ieee80211_ptr->wext.default_key = -1;
2536 else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
2537 dev->ieee80211_ptr->wext.default_mgmt_key = -1;
2540 wdev_unlock(dev->ieee80211_ptr);
2545 /* This function returns an error or the number of nested attributes */
2546 static int validate_acl_mac_addrs(struct nlattr *nl_attr)
2548 struct nlattr *attr;
2549 int n_entries = 0, tmp;
2551 nla_for_each_nested(attr, nl_attr, tmp) {
2552 if (nla_len(attr) != ETH_ALEN)
2562 * This function parses ACL information and allocates memory for ACL data.
2563 * On successful return, the calling function is responsible to free the
2564 * ACL buffer returned by this function.
2566 static struct cfg80211_acl_data *parse_acl_data(struct wiphy *wiphy,
2567 struct genl_info *info)
2569 enum nl80211_acl_policy acl_policy;
2570 struct nlattr *attr;
2571 struct cfg80211_acl_data *acl;
2572 int i = 0, n_entries, tmp;
2574 if (!wiphy->max_acl_mac_addrs)
2575 return ERR_PTR(-EOPNOTSUPP);
2577 if (!info->attrs[NL80211_ATTR_ACL_POLICY])
2578 return ERR_PTR(-EINVAL);
2580 acl_policy = nla_get_u32(info->attrs[NL80211_ATTR_ACL_POLICY]);
2581 if (acl_policy != NL80211_ACL_POLICY_ACCEPT_UNLESS_LISTED &&
2582 acl_policy != NL80211_ACL_POLICY_DENY_UNLESS_LISTED)
2583 return ERR_PTR(-EINVAL);
2585 if (!info->attrs[NL80211_ATTR_MAC_ADDRS])
2586 return ERR_PTR(-EINVAL);
2588 n_entries = validate_acl_mac_addrs(info->attrs[NL80211_ATTR_MAC_ADDRS]);
2590 return ERR_PTR(n_entries);
2592 if (n_entries > wiphy->max_acl_mac_addrs)
2593 return ERR_PTR(-ENOTSUPP);
2595 acl = kzalloc(sizeof(*acl) + (sizeof(struct mac_address) * n_entries),
2598 return ERR_PTR(-ENOMEM);
2600 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_MAC_ADDRS], tmp) {
2601 memcpy(acl->mac_addrs[i].addr, nla_data(attr), ETH_ALEN);
2605 acl->n_acl_entries = n_entries;
2606 acl->acl_policy = acl_policy;
2611 static int nl80211_set_mac_acl(struct sk_buff *skb, struct genl_info *info)
2613 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2614 struct net_device *dev = info->user_ptr[1];
2615 struct cfg80211_acl_data *acl;
2618 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2619 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2622 if (!dev->ieee80211_ptr->beacon_interval)
2625 acl = parse_acl_data(&rdev->wiphy, info);
2627 return PTR_ERR(acl);
2629 err = rdev_set_mac_acl(rdev, dev, acl);
2636 static int nl80211_parse_beacon(struct genl_info *info,
2637 struct cfg80211_beacon_data *bcn)
2639 bool haveinfo = false;
2641 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]) ||
2642 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]) ||
2643 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_PROBE_RESP]) ||
2644 !is_valid_ie_attr(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]))
2647 memset(bcn, 0, sizeof(*bcn));
2649 if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
2650 bcn->head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2651 bcn->head_len = nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
2657 if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
2658 bcn->tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2660 nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
2667 if (info->attrs[NL80211_ATTR_IE]) {
2668 bcn->beacon_ies = nla_data(info->attrs[NL80211_ATTR_IE]);
2669 bcn->beacon_ies_len = nla_len(info->attrs[NL80211_ATTR_IE]);
2672 if (info->attrs[NL80211_ATTR_IE_PROBE_RESP]) {
2673 bcn->proberesp_ies =
2674 nla_data(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2675 bcn->proberesp_ies_len =
2676 nla_len(info->attrs[NL80211_ATTR_IE_PROBE_RESP]);
2679 if (info->attrs[NL80211_ATTR_IE_ASSOC_RESP]) {
2680 bcn->assocresp_ies =
2681 nla_data(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2682 bcn->assocresp_ies_len =
2683 nla_len(info->attrs[NL80211_ATTR_IE_ASSOC_RESP]);
2686 if (info->attrs[NL80211_ATTR_PROBE_RESP]) {
2688 nla_data(info->attrs[NL80211_ATTR_PROBE_RESP]);
2689 bcn->probe_resp_len =
2690 nla_len(info->attrs[NL80211_ATTR_PROBE_RESP]);
2696 static bool nl80211_get_ap_channel(struct cfg80211_registered_device *rdev,
2697 struct cfg80211_ap_settings *params)
2699 struct wireless_dev *wdev;
2702 mutex_lock(&rdev->devlist_mtx);
2704 list_for_each_entry(wdev, &rdev->wdev_list, list) {
2705 if (wdev->iftype != NL80211_IFTYPE_AP &&
2706 wdev->iftype != NL80211_IFTYPE_P2P_GO)
2709 if (!wdev->preset_chandef.chan)
2712 params->chandef = wdev->preset_chandef;
2717 mutex_unlock(&rdev->devlist_mtx);
2722 static bool nl80211_valid_auth_type(struct cfg80211_registered_device *rdev,
2723 enum nl80211_auth_type auth_type,
2724 enum nl80211_commands cmd)
2726 if (auth_type > NL80211_AUTHTYPE_MAX)
2730 case NL80211_CMD_AUTHENTICATE:
2731 if (!(rdev->wiphy.features & NL80211_FEATURE_SAE) &&
2732 auth_type == NL80211_AUTHTYPE_SAE)
2735 case NL80211_CMD_CONNECT:
2736 case NL80211_CMD_START_AP:
2737 /* SAE not supported yet */
2738 if (auth_type == NL80211_AUTHTYPE_SAE)
2746 static int nl80211_start_ap(struct sk_buff *skb, struct genl_info *info)
2748 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2749 struct net_device *dev = info->user_ptr[1];
2750 struct wireless_dev *wdev = dev->ieee80211_ptr;
2751 struct cfg80211_ap_settings params;
2753 u8 radar_detect_width = 0;
2755 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2756 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2759 if (!rdev->ops->start_ap)
2762 if (wdev->beacon_interval)
2765 memset(¶ms, 0, sizeof(params));
2767 /* these are required for START_AP */
2768 if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
2769 !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
2770 !info->attrs[NL80211_ATTR_BEACON_HEAD])
2773 err = nl80211_parse_beacon(info, ¶ms.beacon);
2777 params.beacon_interval =
2778 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
2779 params.dtim_period =
2780 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
2782 err = cfg80211_validate_beacon_int(rdev, params.beacon_interval);
2787 * In theory, some of these attributes should be required here
2788 * but since they were not used when the command was originally
2789 * added, keep them optional for old user space programs to let
2790 * them continue to work with drivers that do not need the
2791 * additional information -- drivers must check!
2793 if (info->attrs[NL80211_ATTR_SSID]) {
2794 params.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
2796 nla_len(info->attrs[NL80211_ATTR_SSID]);
2797 if (params.ssid_len == 0 ||
2798 params.ssid_len > IEEE80211_MAX_SSID_LEN)
2802 if (info->attrs[NL80211_ATTR_HIDDEN_SSID]) {
2803 params.hidden_ssid = nla_get_u32(
2804 info->attrs[NL80211_ATTR_HIDDEN_SSID]);
2805 if (params.hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE &&
2806 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_LEN &&
2807 params.hidden_ssid != NL80211_HIDDEN_SSID_ZERO_CONTENTS)
2811 params.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
2813 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
2814 params.auth_type = nla_get_u32(
2815 info->attrs[NL80211_ATTR_AUTH_TYPE]);
2816 if (!nl80211_valid_auth_type(rdev, params.auth_type,
2817 NL80211_CMD_START_AP))
2820 params.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
2822 err = nl80211_crypto_settings(rdev, info, ¶ms.crypto,
2823 NL80211_MAX_NR_CIPHER_SUITES);
2827 if (info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]) {
2828 if (!(rdev->wiphy.features & NL80211_FEATURE_INACTIVITY_TIMER))
2830 params.inactivity_timeout = nla_get_u16(
2831 info->attrs[NL80211_ATTR_INACTIVITY_TIMEOUT]);
2834 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
2835 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2837 params.p2p_ctwindow =
2838 nla_get_u8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
2839 if (params.p2p_ctwindow > 127)
2841 if (params.p2p_ctwindow != 0 &&
2842 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
2846 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
2849 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2851 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
2854 params.p2p_opp_ps = tmp;
2855 if (params.p2p_opp_ps != 0 &&
2856 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
2860 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
2861 err = nl80211_parse_chandef(rdev, info, ¶ms.chandef);
2864 } else if (wdev->preset_chandef.chan) {
2865 params.chandef = wdev->preset_chandef;
2866 } else if (!nl80211_get_ap_channel(rdev, ¶ms))
2869 if (!cfg80211_reg_can_beacon(&rdev->wiphy, ¶ms.chandef))
2872 err = cfg80211_chandef_dfs_required(wdev->wiphy, ¶ms.chandef);
2876 radar_detect_width = BIT(params.chandef.width);
2877 params.radar_required = true;
2880 mutex_lock(&rdev->devlist_mtx);
2881 err = cfg80211_can_use_iftype_chan(rdev, wdev, wdev->iftype,
2882 params.chandef.chan,
2884 radar_detect_width);
2885 mutex_unlock(&rdev->devlist_mtx);
2890 if (info->attrs[NL80211_ATTR_ACL_POLICY]) {
2891 params.acl = parse_acl_data(&rdev->wiphy, info);
2892 if (IS_ERR(params.acl))
2893 return PTR_ERR(params.acl);
2896 err = rdev_start_ap(rdev, dev, ¶ms);
2898 wdev->preset_chandef = params.chandef;
2899 wdev->beacon_interval = params.beacon_interval;
2900 wdev->channel = params.chandef.chan;
2901 wdev->ssid_len = params.ssid_len;
2902 memcpy(wdev->ssid, params.ssid, wdev->ssid_len);
2910 static int nl80211_set_beacon(struct sk_buff *skb, struct genl_info *info)
2912 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2913 struct net_device *dev = info->user_ptr[1];
2914 struct wireless_dev *wdev = dev->ieee80211_ptr;
2915 struct cfg80211_beacon_data params;
2918 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
2919 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
2922 if (!rdev->ops->change_beacon)
2925 if (!wdev->beacon_interval)
2928 err = nl80211_parse_beacon(info, ¶ms);
2932 return rdev_change_beacon(rdev, dev, ¶ms);
2935 static int nl80211_stop_ap(struct sk_buff *skb, struct genl_info *info)
2937 struct cfg80211_registered_device *rdev = info->user_ptr[0];
2938 struct net_device *dev = info->user_ptr[1];
2940 return cfg80211_stop_ap(rdev, dev);
2943 static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
2944 [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
2945 [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
2946 [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
2947 [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
2948 [NL80211_STA_FLAG_AUTHENTICATED] = { .type = NLA_FLAG },
2949 [NL80211_STA_FLAG_TDLS_PEER] = { .type = NLA_FLAG },
2952 static int parse_station_flags(struct genl_info *info,
2953 enum nl80211_iftype iftype,
2954 struct station_parameters *params)
2956 struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
2961 * Try parsing the new attribute first so userspace
2962 * can specify both for older kernels.
2964 nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
2966 struct nl80211_sta_flag_update *sta_flags;
2968 sta_flags = nla_data(nla);
2969 params->sta_flags_mask = sta_flags->mask;
2970 params->sta_flags_set = sta_flags->set;
2971 if ((params->sta_flags_mask |
2972 params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
2977 /* if present, parse the old attribute */
2979 nla = info->attrs[NL80211_ATTR_STA_FLAGS];
2983 if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
2984 nla, sta_flags_policy))
2988 * Only allow certain flags for interface types so that
2989 * other attributes are silently ignored. Remember that
2990 * this is backward compatibility code with old userspace
2991 * and shouldn't be hit in other cases anyway.
2994 case NL80211_IFTYPE_AP:
2995 case NL80211_IFTYPE_AP_VLAN:
2996 case NL80211_IFTYPE_P2P_GO:
2997 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
2998 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
2999 BIT(NL80211_STA_FLAG_WME) |
3000 BIT(NL80211_STA_FLAG_MFP);
3002 case NL80211_IFTYPE_P2P_CLIENT:
3003 case NL80211_IFTYPE_STATION:
3004 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
3005 BIT(NL80211_STA_FLAG_TDLS_PEER);
3007 case NL80211_IFTYPE_MESH_POINT:
3008 params->sta_flags_mask = BIT(NL80211_STA_FLAG_AUTHENTICATED) |
3009 BIT(NL80211_STA_FLAG_MFP) |
3010 BIT(NL80211_STA_FLAG_AUTHORIZED);
3015 for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++) {
3017 params->sta_flags_set |= (1<<flag);
3019 /* no longer support new API additions in old API */
3020 if (flag > NL80211_STA_FLAG_MAX_OLD_API)
3028 static bool nl80211_put_sta_rate(struct sk_buff *msg, struct rate_info *info,
3031 struct nlattr *rate;
3035 rate = nla_nest_start(msg, attr);
3039 /* cfg80211_calculate_bitrate will return 0 for mcs >= 32 */
3040 bitrate = cfg80211_calculate_bitrate(info);
3041 /* report 16-bit bitrate only if we can */
3042 bitrate_compat = bitrate < (1UL << 16) ? bitrate : 0;
3044 nla_put_u32(msg, NL80211_RATE_INFO_BITRATE32, bitrate))
3046 if (bitrate_compat > 0 &&
3047 nla_put_u16(msg, NL80211_RATE_INFO_BITRATE, bitrate_compat))
3050 if (info->flags & RATE_INFO_FLAGS_MCS) {
3051 if (nla_put_u8(msg, NL80211_RATE_INFO_MCS, info->mcs))
3053 if (info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH &&
3054 nla_put_flag(msg, NL80211_RATE_INFO_40_MHZ_WIDTH))
3056 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
3057 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
3059 } else if (info->flags & RATE_INFO_FLAGS_VHT_MCS) {
3060 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_MCS, info->mcs))
3062 if (nla_put_u8(msg, NL80211_RATE_INFO_VHT_NSS, info->nss))
3064 if (info->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH &&
3065 nla_put_flag(msg, NL80211_RATE_INFO_40_MHZ_WIDTH))
3067 if (info->flags & RATE_INFO_FLAGS_80_MHZ_WIDTH &&
3068 nla_put_flag(msg, NL80211_RATE_INFO_80_MHZ_WIDTH))
3070 if (info->flags & RATE_INFO_FLAGS_80P80_MHZ_WIDTH &&
3071 nla_put_flag(msg, NL80211_RATE_INFO_80P80_MHZ_WIDTH))
3073 if (info->flags & RATE_INFO_FLAGS_160_MHZ_WIDTH &&
3074 nla_put_flag(msg, NL80211_RATE_INFO_160_MHZ_WIDTH))
3076 if (info->flags & RATE_INFO_FLAGS_SHORT_GI &&
3077 nla_put_flag(msg, NL80211_RATE_INFO_SHORT_GI))
3081 nla_nest_end(msg, rate);
3085 static int nl80211_send_station(struct sk_buff *msg, u32 portid, u32 seq,
3087 struct cfg80211_registered_device *rdev,
3088 struct net_device *dev,
3089 const u8 *mac_addr, struct station_info *sinfo)
3092 struct nlattr *sinfoattr, *bss_param;
3094 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_STATION);
3098 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3099 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
3100 nla_put_u32(msg, NL80211_ATTR_GENERATION, sinfo->generation))
3101 goto nla_put_failure;
3103 sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
3105 goto nla_put_failure;
3106 if ((sinfo->filled & STATION_INFO_CONNECTED_TIME) &&
3107 nla_put_u32(msg, NL80211_STA_INFO_CONNECTED_TIME,
3108 sinfo->connected_time))
3109 goto nla_put_failure;
3110 if ((sinfo->filled & STATION_INFO_INACTIVE_TIME) &&
3111 nla_put_u32(msg, NL80211_STA_INFO_INACTIVE_TIME,
3112 sinfo->inactive_time))
3113 goto nla_put_failure;
3114 if ((sinfo->filled & (STATION_INFO_RX_BYTES |
3115 STATION_INFO_RX_BYTES64)) &&
3116 nla_put_u32(msg, NL80211_STA_INFO_RX_BYTES,
3117 (u32)sinfo->rx_bytes))
3118 goto nla_put_failure;
3119 if ((sinfo->filled & (STATION_INFO_TX_BYTES |
3120 NL80211_STA_INFO_TX_BYTES64)) &&
3121 nla_put_u32(msg, NL80211_STA_INFO_TX_BYTES,
3122 (u32)sinfo->tx_bytes))
3123 goto nla_put_failure;
3124 if ((sinfo->filled & STATION_INFO_RX_BYTES64) &&
3125 nla_put_u64(msg, NL80211_STA_INFO_RX_BYTES64,
3127 goto nla_put_failure;
3128 if ((sinfo->filled & STATION_INFO_TX_BYTES64) &&
3129 nla_put_u64(msg, NL80211_STA_INFO_TX_BYTES64,
3131 goto nla_put_failure;
3132 if ((sinfo->filled & STATION_INFO_LLID) &&
3133 nla_put_u16(msg, NL80211_STA_INFO_LLID, sinfo->llid))
3134 goto nla_put_failure;
3135 if ((sinfo->filled & STATION_INFO_PLID) &&
3136 nla_put_u16(msg, NL80211_STA_INFO_PLID, sinfo->plid))
3137 goto nla_put_failure;
3138 if ((sinfo->filled & STATION_INFO_PLINK_STATE) &&
3139 nla_put_u8(msg, NL80211_STA_INFO_PLINK_STATE,
3140 sinfo->plink_state))
3141 goto nla_put_failure;
3142 switch (rdev->wiphy.signal_type) {
3143 case CFG80211_SIGNAL_TYPE_MBM:
3144 if ((sinfo->filled & STATION_INFO_SIGNAL) &&
3145 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL,
3147 goto nla_put_failure;
3148 if ((sinfo->filled & STATION_INFO_SIGNAL_AVG) &&
3149 nla_put_u8(msg, NL80211_STA_INFO_SIGNAL_AVG,
3151 goto nla_put_failure;
3156 if (sinfo->filled & STATION_INFO_TX_BITRATE) {
3157 if (!nl80211_put_sta_rate(msg, &sinfo->txrate,
3158 NL80211_STA_INFO_TX_BITRATE))
3159 goto nla_put_failure;
3161 if (sinfo->filled & STATION_INFO_RX_BITRATE) {
3162 if (!nl80211_put_sta_rate(msg, &sinfo->rxrate,
3163 NL80211_STA_INFO_RX_BITRATE))
3164 goto nla_put_failure;
3166 if ((sinfo->filled & STATION_INFO_RX_PACKETS) &&
3167 nla_put_u32(msg, NL80211_STA_INFO_RX_PACKETS,
3169 goto nla_put_failure;
3170 if ((sinfo->filled & STATION_INFO_TX_PACKETS) &&
3171 nla_put_u32(msg, NL80211_STA_INFO_TX_PACKETS,
3173 goto nla_put_failure;
3174 if ((sinfo->filled & STATION_INFO_TX_RETRIES) &&
3175 nla_put_u32(msg, NL80211_STA_INFO_TX_RETRIES,
3177 goto nla_put_failure;
3178 if ((sinfo->filled & STATION_INFO_TX_FAILED) &&
3179 nla_put_u32(msg, NL80211_STA_INFO_TX_FAILED,
3181 goto nla_put_failure;
3182 if ((sinfo->filled & STATION_INFO_BEACON_LOSS_COUNT) &&
3183 nla_put_u32(msg, NL80211_STA_INFO_BEACON_LOSS,
3184 sinfo->beacon_loss_count))
3185 goto nla_put_failure;
3186 if ((sinfo->filled & STATION_INFO_LOCAL_PM) &&
3187 nla_put_u32(msg, NL80211_STA_INFO_LOCAL_PM,
3189 goto nla_put_failure;
3190 if ((sinfo->filled & STATION_INFO_PEER_PM) &&
3191 nla_put_u32(msg, NL80211_STA_INFO_PEER_PM,
3193 goto nla_put_failure;
3194 if ((sinfo->filled & STATION_INFO_NONPEER_PM) &&
3195 nla_put_u32(msg, NL80211_STA_INFO_NONPEER_PM,
3197 goto nla_put_failure;
3198 if (sinfo->filled & STATION_INFO_BSS_PARAM) {
3199 bss_param = nla_nest_start(msg, NL80211_STA_INFO_BSS_PARAM);
3201 goto nla_put_failure;
3203 if (((sinfo->bss_param.flags & BSS_PARAM_FLAGS_CTS_PROT) &&
3204 nla_put_flag(msg, NL80211_STA_BSS_PARAM_CTS_PROT)) ||
3205 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_PREAMBLE) &&
3206 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_PREAMBLE)) ||
3207 ((sinfo->bss_param.flags & BSS_PARAM_FLAGS_SHORT_SLOT_TIME) &&
3208 nla_put_flag(msg, NL80211_STA_BSS_PARAM_SHORT_SLOT_TIME)) ||
3209 nla_put_u8(msg, NL80211_STA_BSS_PARAM_DTIM_PERIOD,
3210 sinfo->bss_param.dtim_period) ||
3211 nla_put_u16(msg, NL80211_STA_BSS_PARAM_BEACON_INTERVAL,
3212 sinfo->bss_param.beacon_interval))
3213 goto nla_put_failure;
3215 nla_nest_end(msg, bss_param);
3217 if ((sinfo->filled & STATION_INFO_STA_FLAGS) &&
3218 nla_put(msg, NL80211_STA_INFO_STA_FLAGS,
3219 sizeof(struct nl80211_sta_flag_update),
3221 goto nla_put_failure;
3222 if ((sinfo->filled & STATION_INFO_T_OFFSET) &&
3223 nla_put_u64(msg, NL80211_STA_INFO_T_OFFSET,
3225 goto nla_put_failure;
3226 nla_nest_end(msg, sinfoattr);
3228 if ((sinfo->filled & STATION_INFO_ASSOC_REQ_IES) &&
3229 nla_put(msg, NL80211_ATTR_IE, sinfo->assoc_req_ies_len,
3230 sinfo->assoc_req_ies))
3231 goto nla_put_failure;
3233 return genlmsg_end(msg, hdr);
3236 genlmsg_cancel(msg, hdr);
3240 static int nl80211_dump_station(struct sk_buff *skb,
3241 struct netlink_callback *cb)
3243 struct station_info sinfo;
3244 struct cfg80211_registered_device *dev;
3245 struct net_device *netdev;
3246 u8 mac_addr[ETH_ALEN];
3247 int sta_idx = cb->args[1];
3250 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
3254 if (!dev->ops->dump_station) {
3260 memset(&sinfo, 0, sizeof(sinfo));
3261 err = rdev_dump_station(dev, netdev, sta_idx,
3268 if (nl80211_send_station(skb,
3269 NETLINK_CB(cb->skb).portid,
3270 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3271 dev, netdev, mac_addr,
3280 cb->args[1] = sta_idx;
3283 nl80211_finish_netdev_dump(dev);
3288 static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
3290 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3291 struct net_device *dev = info->user_ptr[1];
3292 struct station_info sinfo;
3293 struct sk_buff *msg;
3294 u8 *mac_addr = NULL;
3297 memset(&sinfo, 0, sizeof(sinfo));
3299 if (!info->attrs[NL80211_ATTR_MAC])
3302 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3304 if (!rdev->ops->get_station)
3307 err = rdev_get_station(rdev, dev, mac_addr, &sinfo);
3311 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
3315 if (nl80211_send_station(msg, info->snd_portid, info->snd_seq, 0,
3316 rdev, dev, mac_addr, &sinfo) < 0) {
3321 return genlmsg_reply(msg, info);
3325 * Get vlan interface making sure it is running and on the right wiphy.
3327 static struct net_device *get_vlan(struct genl_info *info,
3328 struct cfg80211_registered_device *rdev)
3330 struct nlattr *vlanattr = info->attrs[NL80211_ATTR_STA_VLAN];
3331 struct net_device *v;
3337 v = dev_get_by_index(genl_info_net(info), nla_get_u32(vlanattr));
3339 return ERR_PTR(-ENODEV);
3341 if (!v->ieee80211_ptr || v->ieee80211_ptr->wiphy != &rdev->wiphy) {
3346 if (!netif_running(v)) {
3354 return ERR_PTR(ret);
3357 static struct nla_policy
3358 nl80211_sta_wme_policy[NL80211_STA_WME_MAX + 1] __read_mostly = {
3359 [NL80211_STA_WME_UAPSD_QUEUES] = { .type = NLA_U8 },
3360 [NL80211_STA_WME_MAX_SP] = { .type = NLA_U8 },
3363 static int nl80211_set_station_tdls(struct genl_info *info,
3364 struct station_parameters *params)
3366 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
3370 /* Dummy STA entry gets updated once the peer capabilities are known */
3371 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
3373 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
3374 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
3376 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
3378 /* parse WME attributes if present */
3379 if (!info->attrs[NL80211_ATTR_STA_WME])
3382 nla = info->attrs[NL80211_ATTR_STA_WME];
3383 err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
3384 nl80211_sta_wme_policy);
3388 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
3389 params->uapsd_queues = nla_get_u8(
3390 tb[NL80211_STA_WME_UAPSD_QUEUES]);
3391 if (params->uapsd_queues & ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
3394 if (tb[NL80211_STA_WME_MAX_SP])
3395 params->max_sp = nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
3397 if (params->max_sp & ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
3400 params->sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
3405 static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
3407 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3409 struct net_device *dev = info->user_ptr[1];
3410 struct station_parameters params;
3411 u8 *mac_addr = NULL;
3413 memset(¶ms, 0, sizeof(params));
3415 params.listen_interval = -1;
3416 params.plink_state = -1;
3418 if (info->attrs[NL80211_ATTR_STA_AID])
3421 if (!info->attrs[NL80211_ATTR_MAC])
3424 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3426 if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
3427 params.supported_rates =
3428 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3429 params.supported_rates_len =
3430 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3433 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
3435 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
3436 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
3439 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
3441 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
3442 params.ext_capab_len =
3443 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
3446 if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
3449 if (!rdev->ops->change_station)
3452 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, ¶ms))
3455 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
3456 params.plink_action =
3457 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
3459 if (info->attrs[NL80211_ATTR_STA_PLINK_STATE])
3460 params.plink_state =
3461 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_STATE]);
3463 if (info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]) {
3464 enum nl80211_mesh_power_mode pm = nla_get_u32(
3465 info->attrs[NL80211_ATTR_LOCAL_MESH_POWER_MODE]);
3467 if (pm <= NL80211_MESH_POWER_UNKNOWN ||
3468 pm > NL80211_MESH_POWER_MAX)
3471 params.local_pm = pm;
3474 switch (dev->ieee80211_ptr->iftype) {
3475 case NL80211_IFTYPE_AP:
3476 case NL80211_IFTYPE_AP_VLAN:
3477 case NL80211_IFTYPE_P2P_GO:
3478 /* disallow mesh-specific things */
3479 if (params.plink_action)
3481 if (params.local_pm)
3484 /* TDLS can't be set, ... */
3485 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3488 * ... but don't bother the driver with it. This works around
3489 * a hostapd/wpa_supplicant issue -- it always includes the
3490 * TLDS_PEER flag in the mask even for AP mode.
3492 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3494 /* accept only the listed bits */
3495 if (params.sta_flags_mask &
3496 ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
3497 BIT(NL80211_STA_FLAG_AUTHENTICATED) |
3498 BIT(NL80211_STA_FLAG_ASSOCIATED) |
3499 BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
3500 BIT(NL80211_STA_FLAG_WME) |
3501 BIT(NL80211_STA_FLAG_MFP)))
3504 /* but authenticated/associated only if driver handles it */
3505 if (!(rdev->wiphy.features &
3506 NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
3507 params.sta_flags_mask &
3508 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
3509 BIT(NL80211_STA_FLAG_ASSOCIATED)))
3512 /* reject other things that can't change */
3513 if (params.supported_rates)
3515 if (info->attrs[NL80211_ATTR_STA_CAPABILITY])
3517 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY])
3519 if (info->attrs[NL80211_ATTR_HT_CAPABILITY] ||
3520 info->attrs[NL80211_ATTR_VHT_CAPABILITY])
3523 /* must be last in here for error handling */
3524 params.vlan = get_vlan(info, rdev);
3525 if (IS_ERR(params.vlan))
3526 return PTR_ERR(params.vlan);
3528 case NL80211_IFTYPE_P2P_CLIENT:
3529 case NL80211_IFTYPE_STATION:
3531 * Don't allow userspace to change the TDLS_PEER flag,
3532 * but silently ignore attempts to change it since we
3533 * don't have state here to verify that it doesn't try
3534 * to change the flag.
3536 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3537 /* Include parameters for TDLS peer (driver will check) */
3538 err = nl80211_set_station_tdls(info, ¶ms);
3541 /* disallow things sta doesn't support */
3542 if (params.plink_action)
3544 if (params.local_pm)
3546 /* reject any changes other than AUTHORIZED or WME (for TDLS) */
3547 if (params.sta_flags_mask & ~(BIT(NL80211_STA_FLAG_AUTHORIZED) |
3548 BIT(NL80211_STA_FLAG_WME)))
3551 case NL80211_IFTYPE_ADHOC:
3552 /* disallow things sta doesn't support */
3553 if (params.plink_action)
3555 if (params.local_pm)
3557 if (info->attrs[NL80211_ATTR_HT_CAPABILITY] ||
3558 info->attrs[NL80211_ATTR_VHT_CAPABILITY])
3560 /* reject any changes other than AUTHORIZED */
3561 if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
3564 case NL80211_IFTYPE_MESH_POINT:
3565 /* disallow things mesh doesn't support */
3568 if (params.supported_rates)
3570 if (info->attrs[NL80211_ATTR_STA_CAPABILITY])
3572 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY])
3574 if (info->attrs[NL80211_ATTR_HT_CAPABILITY] ||
3575 info->attrs[NL80211_ATTR_VHT_CAPABILITY])
3578 * No special handling for TDLS here -- the userspace
3579 * mesh code doesn't have this bug.
3581 if (params.sta_flags_mask &
3582 ~(BIT(NL80211_STA_FLAG_AUTHENTICATED) |
3583 BIT(NL80211_STA_FLAG_MFP) |
3584 BIT(NL80211_STA_FLAG_AUTHORIZED)))
3591 /* be aware of params.vlan when changing code here */
3593 err = rdev_change_station(rdev, dev, mac_addr, ¶ms);
3596 dev_put(params.vlan);
3601 static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
3603 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3605 struct net_device *dev = info->user_ptr[1];
3606 struct station_parameters params;
3607 u8 *mac_addr = NULL;
3609 memset(¶ms, 0, sizeof(params));
3611 if (!info->attrs[NL80211_ATTR_MAC])
3614 if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
3617 if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
3620 if (!info->attrs[NL80211_ATTR_STA_AID])
3623 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3624 params.supported_rates =
3625 nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3626 params.supported_rates_len =
3627 nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
3628 params.listen_interval =
3629 nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
3631 params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
3632 if (!params.aid || params.aid > IEEE80211_MAX_AID)
3635 if (info->attrs[NL80211_ATTR_STA_CAPABILITY]) {
3637 nla_get_u16(info->attrs[NL80211_ATTR_STA_CAPABILITY]);
3638 params.sta_modify_mask |= STATION_PARAM_APPLY_CAPABILITY;
3641 if (info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]) {
3643 nla_data(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
3644 params.ext_capab_len =
3645 nla_len(info->attrs[NL80211_ATTR_STA_EXT_CAPABILITY]);
3648 if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
3650 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
3652 if (info->attrs[NL80211_ATTR_VHT_CAPABILITY])
3654 nla_data(info->attrs[NL80211_ATTR_VHT_CAPABILITY]);
3656 if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
3657 params.plink_action =
3658 nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
3660 if (!rdev->ops->add_station)
3663 if (parse_station_flags(info, dev->ieee80211_ptr->iftype, ¶ms))
3666 switch (dev->ieee80211_ptr->iftype) {
3667 case NL80211_IFTYPE_AP:
3668 case NL80211_IFTYPE_AP_VLAN:
3669 case NL80211_IFTYPE_P2P_GO:
3670 /* parse WME attributes if sta is WME capable */
3671 if ((rdev->wiphy.flags & WIPHY_FLAG_AP_UAPSD) &&
3672 (params.sta_flags_set & BIT(NL80211_STA_FLAG_WME)) &&
3673 info->attrs[NL80211_ATTR_STA_WME]) {
3674 struct nlattr *tb[NL80211_STA_WME_MAX + 1];
3677 nla = info->attrs[NL80211_ATTR_STA_WME];
3678 err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
3679 nl80211_sta_wme_policy);
3683 if (tb[NL80211_STA_WME_UAPSD_QUEUES])
3684 params.uapsd_queues =
3685 nla_get_u8(tb[NL80211_STA_WME_UAPSD_QUEUES]);
3686 if (params.uapsd_queues &
3687 ~IEEE80211_WMM_IE_STA_QOSINFO_AC_MASK)
3690 if (tb[NL80211_STA_WME_MAX_SP])
3692 nla_get_u8(tb[NL80211_STA_WME_MAX_SP]);
3695 ~IEEE80211_WMM_IE_STA_QOSINFO_SP_MASK)
3698 params.sta_modify_mask |= STATION_PARAM_APPLY_UAPSD;
3700 /* TDLS peers cannot be added */
3701 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3703 /* but don't bother the driver with it */
3704 params.sta_flags_mask &= ~BIT(NL80211_STA_FLAG_TDLS_PEER);
3706 /* allow authenticated/associated only if driver handles it */
3707 if (!(rdev->wiphy.features &
3708 NL80211_FEATURE_FULL_AP_CLIENT_STATE) &&
3709 params.sta_flags_mask &
3710 (BIT(NL80211_STA_FLAG_AUTHENTICATED) |
3711 BIT(NL80211_STA_FLAG_ASSOCIATED)))
3714 /* must be last in here for error handling */
3715 params.vlan = get_vlan(info, rdev);
3716 if (IS_ERR(params.vlan))
3717 return PTR_ERR(params.vlan);
3719 case NL80211_IFTYPE_MESH_POINT:
3720 /* associated is disallowed */
3721 if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
3723 /* TDLS peers cannot be added */
3724 if (params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))
3727 case NL80211_IFTYPE_STATION:
3728 /* associated is disallowed */
3729 if (params.sta_flags_mask & BIT(NL80211_STA_FLAG_ASSOCIATED))
3731 /* Only TDLS peers can be added */
3732 if (!(params.sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER)))
3734 /* Can only add if TDLS ... */
3735 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS))
3737 /* ... with external setup is supported */
3738 if (!(rdev->wiphy.flags & WIPHY_FLAG_TDLS_EXTERNAL_SETUP))
3745 /* be aware of params.vlan when changing code here */
3747 err = rdev_add_station(rdev, dev, mac_addr, ¶ms);
3750 dev_put(params.vlan);
3754 static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
3756 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3757 struct net_device *dev = info->user_ptr[1];
3758 u8 *mac_addr = NULL;
3760 if (info->attrs[NL80211_ATTR_MAC])
3761 mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
3763 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
3764 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
3765 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT &&
3766 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
3769 if (!rdev->ops->del_station)
3772 return rdev_del_station(rdev, dev, mac_addr);
3775 static int nl80211_send_mpath(struct sk_buff *msg, u32 portid, u32 seq,
3776 int flags, struct net_device *dev,
3777 u8 *dst, u8 *next_hop,
3778 struct mpath_info *pinfo)
3781 struct nlattr *pinfoattr;
3783 hdr = nl80211hdr_put(msg, portid, seq, flags, NL80211_CMD_NEW_STATION);
3787 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
3788 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, dst) ||
3789 nla_put(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop) ||
3790 nla_put_u32(msg, NL80211_ATTR_GENERATION, pinfo->generation))
3791 goto nla_put_failure;
3793 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
3795 goto nla_put_failure;
3796 if ((pinfo->filled & MPATH_INFO_FRAME_QLEN) &&
3797 nla_put_u32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
3799 goto nla_put_failure;
3800 if (((pinfo->filled & MPATH_INFO_SN) &&
3801 nla_put_u32(msg, NL80211_MPATH_INFO_SN, pinfo->sn)) ||
3802 ((pinfo->filled & MPATH_INFO_METRIC) &&
3803 nla_put_u32(msg, NL80211_MPATH_INFO_METRIC,
3805 ((pinfo->filled & MPATH_INFO_EXPTIME) &&
3806 nla_put_u32(msg, NL80211_MPATH_INFO_EXPTIME,
3808 ((pinfo->filled & MPATH_INFO_FLAGS) &&
3809 nla_put_u8(msg, NL80211_MPATH_INFO_FLAGS,
3811 ((pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT) &&
3812 nla_put_u32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
3813 pinfo->discovery_timeout)) ||
3814 ((pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES) &&
3815 nla_put_u8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
3816 pinfo->discovery_retries)))
3817 goto nla_put_failure;
3819 nla_nest_end(msg, pinfoattr);
3821 return genlmsg_end(msg, hdr);
3824 genlmsg_cancel(msg, hdr);
3828 static int nl80211_dump_mpath(struct sk_buff *skb,
3829 struct netlink_callback *cb)
3831 struct mpath_info pinfo;
3832 struct cfg80211_registered_device *dev;
3833 struct net_device *netdev;
3835 u8 next_hop[ETH_ALEN];
3836 int path_idx = cb->args[1];
3839 err = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
3843 if (!dev->ops->dump_mpath) {
3848 if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
3854 err = rdev_dump_mpath(dev, netdev, path_idx, dst, next_hop,
3861 if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).portid,
3862 cb->nlh->nlmsg_seq, NLM_F_MULTI,
3863 netdev, dst, next_hop,
3872 cb->args[1] = path_idx;
3875 nl80211_finish_netdev_dump(dev);
3879 static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
3881 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3883 struct net_device *dev = info->user_ptr[1];
3884 struct mpath_info pinfo;
3885 struct sk_buff *msg;
3887 u8 next_hop[ETH_ALEN];
3889 memset(&pinfo, 0, sizeof(pinfo));
3891 if (!info->attrs[NL80211_ATTR_MAC])
3894 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3896 if (!rdev->ops->get_mpath)
3899 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3902 err = rdev_get_mpath(rdev, dev, dst, next_hop, &pinfo);
3906 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
3910 if (nl80211_send_mpath(msg, info->snd_portid, info->snd_seq, 0,
3911 dev, dst, next_hop, &pinfo) < 0) {
3916 return genlmsg_reply(msg, info);
3919 static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
3921 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3922 struct net_device *dev = info->user_ptr[1];
3924 u8 *next_hop = NULL;
3926 if (!info->attrs[NL80211_ATTR_MAC])
3929 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
3932 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3933 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
3935 if (!rdev->ops->change_mpath)
3938 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3941 return rdev_change_mpath(rdev, dev, dst, next_hop);
3944 static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
3946 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3947 struct net_device *dev = info->user_ptr[1];
3949 u8 *next_hop = NULL;
3951 if (!info->attrs[NL80211_ATTR_MAC])
3954 if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
3957 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3958 next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
3960 if (!rdev->ops->add_mpath)
3963 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
3966 return rdev_add_mpath(rdev, dev, dst, next_hop);
3969 static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
3971 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3972 struct net_device *dev = info->user_ptr[1];
3975 if (info->attrs[NL80211_ATTR_MAC])
3976 dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
3978 if (!rdev->ops->del_mpath)
3981 return rdev_del_mpath(rdev, dev, dst);
3984 static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
3986 struct cfg80211_registered_device *rdev = info->user_ptr[0];
3987 struct net_device *dev = info->user_ptr[1];
3988 struct bss_parameters params;
3990 memset(¶ms, 0, sizeof(params));
3991 /* default to not changing parameters */
3992 params.use_cts_prot = -1;
3993 params.use_short_preamble = -1;
3994 params.use_short_slot_time = -1;
3995 params.ap_isolate = -1;
3996 params.ht_opmode = -1;
3997 params.p2p_ctwindow = -1;
3998 params.p2p_opp_ps = -1;
4000 if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
4001 params.use_cts_prot =
4002 nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
4003 if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
4004 params.use_short_preamble =
4005 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
4006 if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
4007 params.use_short_slot_time =
4008 nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
4009 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
4010 params.basic_rates =
4011 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
4012 params.basic_rates_len =
4013 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
4015 if (info->attrs[NL80211_ATTR_AP_ISOLATE])
4016 params.ap_isolate = !!nla_get_u8(info->attrs[NL80211_ATTR_AP_ISOLATE]);
4017 if (info->attrs[NL80211_ATTR_BSS_HT_OPMODE])
4019 nla_get_u16(info->attrs[NL80211_ATTR_BSS_HT_OPMODE]);
4021 if (info->attrs[NL80211_ATTR_P2P_CTWINDOW]) {
4022 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4024 params.p2p_ctwindow =
4025 nla_get_s8(info->attrs[NL80211_ATTR_P2P_CTWINDOW]);
4026 if (params.p2p_ctwindow < 0)
4028 if (params.p2p_ctwindow != 0 &&
4029 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_CTWIN))
4033 if (info->attrs[NL80211_ATTR_P2P_OPPPS]) {
4036 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4038 tmp = nla_get_u8(info->attrs[NL80211_ATTR_P2P_OPPPS]);
4041 params.p2p_opp_ps = tmp;
4042 if (params.p2p_opp_ps &&
4043 !(rdev->wiphy.features & NL80211_FEATURE_P2P_GO_OPPPS))
4047 if (!rdev->ops->change_bss)
4050 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
4051 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_GO)
4054 return rdev_change_bss(rdev, dev, ¶ms);
4057 static const struct nla_policy reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
4058 [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
4059 [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
4060 [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
4061 [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
4062 [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
4063 [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
4066 static int parse_reg_rule(struct nlattr *tb[],
4067 struct ieee80211_reg_rule *reg_rule)
4069 struct ieee80211_freq_range *freq_range = ®_rule->freq_range;
4070 struct ieee80211_power_rule *power_rule = ®_rule->power_rule;
4072 if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
4074 if (!tb[NL80211_ATTR_FREQ_RANGE_START])
4076 if (!tb[NL80211_ATTR_FREQ_RANGE_END])
4078 if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
4080 if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
4083 reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
4085 freq_range->start_freq_khz =
4086 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
4087 freq_range->end_freq_khz =
4088 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
4089 freq_range->max_bandwidth_khz =
4090 nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
4092 power_rule->max_eirp =
4093 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
4095 if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
4096 power_rule->max_antenna_gain =
4097 nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
4102 static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
4106 enum nl80211_user_reg_hint_type user_reg_hint_type;
4109 * You should only get this when cfg80211 hasn't yet initialized
4110 * completely when built-in to the kernel right between the time
4111 * window between nl80211_init() and regulatory_init(), if that is
4114 if (unlikely(!rcu_access_pointer(cfg80211_regdomain)))
4115 return -EINPROGRESS;
4117 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
4120 data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
4122 if (info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE])
4123 user_reg_hint_type =
4124 nla_get_u32(info->attrs[NL80211_ATTR_USER_REG_HINT_TYPE]);
4126 user_reg_hint_type = NL80211_USER_REG_HINT_USER;
4128 switch (user_reg_hint_type) {
4129 case NL80211_USER_REG_HINT_USER:
4130 case NL80211_USER_REG_HINT_CELL_BASE:
4136 r = regulatory_hint_user(data, user_reg_hint_type);
4141 static int nl80211_get_mesh_config(struct sk_buff *skb,
4142 struct genl_info *info)
4144 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4145 struct net_device *dev = info->user_ptr[1];
4146 struct wireless_dev *wdev = dev->ieee80211_ptr;
4147 struct mesh_config cur_params;
4150 struct nlattr *pinfoattr;
4151 struct sk_buff *msg;
4153 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
4156 if (!rdev->ops->get_mesh_config)
4160 /* If not connected, get default parameters */
4161 if (!wdev->mesh_id_len)
4162 memcpy(&cur_params, &default_mesh_config, sizeof(cur_params));
4164 err = rdev_get_mesh_config(rdev, dev, &cur_params);
4170 /* Draw up a netlink message to send back */
4171 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4174 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
4175 NL80211_CMD_GET_MESH_CONFIG);
4178 pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_CONFIG);
4180 goto nla_put_failure;
4181 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
4182 nla_put_u16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
4183 cur_params.dot11MeshRetryTimeout) ||
4184 nla_put_u16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
4185 cur_params.dot11MeshConfirmTimeout) ||
4186 nla_put_u16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
4187 cur_params.dot11MeshHoldingTimeout) ||
4188 nla_put_u16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
4189 cur_params.dot11MeshMaxPeerLinks) ||
4190 nla_put_u8(msg, NL80211_MESHCONF_MAX_RETRIES,
4191 cur_params.dot11MeshMaxRetries) ||
4192 nla_put_u8(msg, NL80211_MESHCONF_TTL,
4193 cur_params.dot11MeshTTL) ||
4194 nla_put_u8(msg, NL80211_MESHCONF_ELEMENT_TTL,
4195 cur_params.element_ttl) ||
4196 nla_put_u8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
4197 cur_params.auto_open_plinks) ||
4198 nla_put_u32(msg, NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
4199 cur_params.dot11MeshNbrOffsetMaxNeighbor) ||
4200 nla_put_u8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
4201 cur_params.dot11MeshHWMPmaxPREQretries) ||
4202 nla_put_u32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
4203 cur_params.path_refresh_time) ||
4204 nla_put_u16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
4205 cur_params.min_discovery_timeout) ||
4206 nla_put_u32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
4207 cur_params.dot11MeshHWMPactivePathTimeout) ||
4208 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
4209 cur_params.dot11MeshHWMPpreqMinInterval) ||
4210 nla_put_u16(msg, NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
4211 cur_params.dot11MeshHWMPperrMinInterval) ||
4212 nla_put_u16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
4213 cur_params.dot11MeshHWMPnetDiameterTraversalTime) ||
4214 nla_put_u8(msg, NL80211_MESHCONF_HWMP_ROOTMODE,
4215 cur_params.dot11MeshHWMPRootMode) ||
4216 nla_put_u16(msg, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
4217 cur_params.dot11MeshHWMPRannInterval) ||
4218 nla_put_u8(msg, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
4219 cur_params.dot11MeshGateAnnouncementProtocol) ||
4220 nla_put_u8(msg, NL80211_MESHCONF_FORWARDING,
4221 cur_params.dot11MeshForwarding) ||
4222 nla_put_u32(msg, NL80211_MESHCONF_RSSI_THRESHOLD,
4223 cur_params.rssi_threshold) ||
4224 nla_put_u32(msg, NL80211_MESHCONF_HT_OPMODE,
4225 cur_params.ht_opmode) ||
4226 nla_put_u32(msg, NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
4227 cur_params.dot11MeshHWMPactivePathToRootTimeout) ||
4228 nla_put_u16(msg, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
4229 cur_params.dot11MeshHWMProotInterval) ||
4230 nla_put_u16(msg, NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
4231 cur_params.dot11MeshHWMPconfirmationInterval) ||
4232 nla_put_u32(msg, NL80211_MESHCONF_POWER_MODE,
4233 cur_params.power_mode) ||
4234 nla_put_u16(msg, NL80211_MESHCONF_AWAKE_WINDOW,
4235 cur_params.dot11MeshAwakeWindowDuration))
4236 goto nla_put_failure;
4237 nla_nest_end(msg, pinfoattr);
4238 genlmsg_end(msg, hdr);
4239 return genlmsg_reply(msg, info);
4242 genlmsg_cancel(msg, hdr);
4248 static const struct nla_policy nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] = {
4249 [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
4250 [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
4251 [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
4252 [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
4253 [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
4254 [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
4255 [NL80211_MESHCONF_ELEMENT_TTL] = { .type = NLA_U8 },
4256 [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
4257 [NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR] = { .type = NLA_U32 },
4258 [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
4259 [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
4260 [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
4261 [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
4262 [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
4263 [NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL] = { .type = NLA_U16 },
4264 [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
4265 [NL80211_MESHCONF_HWMP_ROOTMODE] = { .type = NLA_U8 },
4266 [NL80211_MESHCONF_HWMP_RANN_INTERVAL] = { .type = NLA_U16 },
4267 [NL80211_MESHCONF_GATE_ANNOUNCEMENTS] = { .type = NLA_U8 },
4268 [NL80211_MESHCONF_FORWARDING] = { .type = NLA_U8 },
4269 [NL80211_MESHCONF_RSSI_THRESHOLD] = { .type = NLA_U32 },
4270 [NL80211_MESHCONF_HT_OPMODE] = { .type = NLA_U16 },
4271 [NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT] = { .type = NLA_U32 },
4272 [NL80211_MESHCONF_HWMP_ROOT_INTERVAL] = { .type = NLA_U16 },
4273 [NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL] = { .type = NLA_U16 },
4274 [NL80211_MESHCONF_POWER_MODE] = { .type = NLA_U32 },
4275 [NL80211_MESHCONF_AWAKE_WINDOW] = { .type = NLA_U16 },
4278 static const struct nla_policy
4279 nl80211_mesh_setup_params_policy[NL80211_MESH_SETUP_ATTR_MAX+1] = {
4280 [NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC] = { .type = NLA_U8 },
4281 [NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL] = { .type = NLA_U8 },
4282 [NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC] = { .type = NLA_U8 },
4283 [NL80211_MESH_SETUP_USERSPACE_AUTH] = { .type = NLA_FLAG },
4284 [NL80211_MESH_SETUP_IE] = { .type = NLA_BINARY,
4285 .len = IEEE80211_MAX_DATA_LEN },
4286 [NL80211_MESH_SETUP_USERSPACE_AMPE] = { .type = NLA_FLAG },
4289 static int nl80211_parse_mesh_config(struct genl_info *info,
4290 struct mesh_config *cfg,
4293 struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
4296 #define FILL_IN_MESH_PARAM_IF_SET(tb, cfg, param, min, max, mask, attr, fn) \
4299 if (fn(tb[attr]) < min || fn(tb[attr]) > max) \
4301 cfg->param = fn(tb[attr]); \
4302 mask |= (1 << (attr - 1)); \
4307 if (!info->attrs[NL80211_ATTR_MESH_CONFIG])
4309 if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
4310 info->attrs[NL80211_ATTR_MESH_CONFIG],
4311 nl80211_meshconf_params_policy))
4314 /* This makes sure that there aren't more than 32 mesh config
4315 * parameters (otherwise our bitfield scheme would not work.) */
4316 BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
4318 /* Fill in the params struct */
4319 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout, 1, 255,
4320 mask, NL80211_MESHCONF_RETRY_TIMEOUT,
4322 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout, 1, 255,
4323 mask, NL80211_MESHCONF_CONFIRM_TIMEOUT,
4325 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout, 1, 255,
4326 mask, NL80211_MESHCONF_HOLDING_TIMEOUT,
4328 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks, 0, 255,
4329 mask, NL80211_MESHCONF_MAX_PEER_LINKS,
4331 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries, 0, 16,
4332 mask, NL80211_MESHCONF_MAX_RETRIES,
4334 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL, 1, 255,
4335 mask, NL80211_MESHCONF_TTL, nla_get_u8);
4336 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, element_ttl, 1, 255,
4337 mask, NL80211_MESHCONF_ELEMENT_TTL,
4339 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks, 0, 1,
4340 mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
4342 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshNbrOffsetMaxNeighbor,
4344 NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR,
4346 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries, 0, 255,
4347 mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
4349 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time, 1, 65535,
4350 mask, NL80211_MESHCONF_PATH_REFRESH_TIME,
4352 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout, 1, 65535,
4353 mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
4355 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
4357 NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
4359 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
4361 NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
4363 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPperrMinInterval,
4365 NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL,
4367 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
4368 dot11MeshHWMPnetDiameterTraversalTime,
4370 NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
4372 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRootMode, 0, 4,
4373 mask, NL80211_MESHCONF_HWMP_ROOTMODE,
4375 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPRannInterval, 1, 65535,
4376 mask, NL80211_MESHCONF_HWMP_RANN_INTERVAL,
4378 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
4379 dot11MeshGateAnnouncementProtocol, 0, 1,
4380 mask, NL80211_MESHCONF_GATE_ANNOUNCEMENTS,
4382 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshForwarding, 0, 1,
4383 mask, NL80211_MESHCONF_FORWARDING,
4385 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, rssi_threshold, 1, 255,
4386 mask, NL80211_MESHCONF_RSSI_THRESHOLD,
4388 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, ht_opmode, 0, 16,
4389 mask, NL80211_MESHCONF_HT_OPMODE,
4391 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathToRootTimeout,
4393 NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT,
4395 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMProotInterval, 1, 65535,
4396 mask, NL80211_MESHCONF_HWMP_ROOT_INTERVAL,
4398 FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
4399 dot11MeshHWMPconfirmationInterval,
4401 NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL,
4403 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, power_mode,
4404 NL80211_MESH_POWER_ACTIVE,
4405 NL80211_MESH_POWER_MAX,
4406 mask, NL80211_MESHCONF_POWER_MODE,
4408 FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshAwakeWindowDuration,
4410 NL80211_MESHCONF_AWAKE_WINDOW, nla_get_u16);
4416 #undef FILL_IN_MESH_PARAM_IF_SET
4419 static int nl80211_parse_mesh_setup(struct genl_info *info,
4420 struct mesh_setup *setup)
4422 struct nlattr *tb[NL80211_MESH_SETUP_ATTR_MAX + 1];
4424 if (!info->attrs[NL80211_ATTR_MESH_SETUP])
4426 if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
4427 info->attrs[NL80211_ATTR_MESH_SETUP],
4428 nl80211_mesh_setup_params_policy))
4431 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
4432 setup->sync_method =
4433 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])) ?
4434 IEEE80211_SYNC_METHOD_VENDOR :
4435 IEEE80211_SYNC_METHOD_NEIGHBOR_OFFSET;
4437 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])
4438 setup->path_sel_proto =
4439 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL])) ?
4440 IEEE80211_PATH_PROTOCOL_VENDOR :
4441 IEEE80211_PATH_PROTOCOL_HWMP;
4443 if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])
4444 setup->path_metric =
4445 (nla_get_u8(tb[NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC])) ?
4446 IEEE80211_PATH_METRIC_VENDOR :
4447 IEEE80211_PATH_METRIC_AIRTIME;
4450 if (tb[NL80211_MESH_SETUP_IE]) {
4451 struct nlattr *ieattr =
4452 tb[NL80211_MESH_SETUP_IE];
4453 if (!is_valid_ie_attr(ieattr))
4455 setup->ie = nla_data(ieattr);
4456 setup->ie_len = nla_len(ieattr);
4458 setup->is_authenticated = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AUTH]);
4459 setup->is_secure = nla_get_flag(tb[NL80211_MESH_SETUP_USERSPACE_AMPE]);
4464 static int nl80211_update_mesh_config(struct sk_buff *skb,
4465 struct genl_info *info)
4467 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4468 struct net_device *dev = info->user_ptr[1];
4469 struct wireless_dev *wdev = dev->ieee80211_ptr;
4470 struct mesh_config cfg;
4474 if (wdev->iftype != NL80211_IFTYPE_MESH_POINT)
4477 if (!rdev->ops->update_mesh_config)
4480 err = nl80211_parse_mesh_config(info, &cfg, &mask);
4485 if (!wdev->mesh_id_len)
4489 err = rdev_update_mesh_config(rdev, dev, mask, &cfg);
4496 static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
4498 const struct ieee80211_regdomain *regdom;
4499 struct sk_buff *msg;
4501 struct nlattr *nl_reg_rules;
4505 mutex_lock(&cfg80211_mutex);
4507 if (!cfg80211_regdomain)
4510 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
4516 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
4517 NL80211_CMD_GET_REG);
4521 if (reg_last_request_cell_base() &&
4522 nla_put_u32(msg, NL80211_ATTR_USER_REG_HINT_TYPE,
4523 NL80211_USER_REG_HINT_CELL_BASE))
4524 goto nla_put_failure;
4527 regdom = rcu_dereference(cfg80211_regdomain);
4529 if (nla_put_string(msg, NL80211_ATTR_REG_ALPHA2, regdom->alpha2) ||
4530 (regdom->dfs_region &&
4531 nla_put_u8(msg, NL80211_ATTR_DFS_REGION, regdom->dfs_region)))
4532 goto nla_put_failure_rcu;
4534 nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
4536 goto nla_put_failure_rcu;
4538 for (i = 0; i < regdom->n_reg_rules; i++) {
4539 struct nlattr *nl_reg_rule;
4540 const struct ieee80211_reg_rule *reg_rule;
4541 const struct ieee80211_freq_range *freq_range;
4542 const struct ieee80211_power_rule *power_rule;
4544 reg_rule = ®dom->reg_rules[i];
4545 freq_range = ®_rule->freq_range;
4546 power_rule = ®_rule->power_rule;
4548 nl_reg_rule = nla_nest_start(msg, i);
4550 goto nla_put_failure_rcu;
4552 if (nla_put_u32(msg, NL80211_ATTR_REG_RULE_FLAGS,
4554 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_START,
4555 freq_range->start_freq_khz) ||
4556 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_END,
4557 freq_range->end_freq_khz) ||
4558 nla_put_u32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
4559 freq_range->max_bandwidth_khz) ||
4560 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
4561 power_rule->max_antenna_gain) ||
4562 nla_put_u32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
4563 power_rule->max_eirp))
4564 goto nla_put_failure_rcu;
4566 nla_nest_end(msg, nl_reg_rule);
4570 nla_nest_end(msg, nl_reg_rules);
4572 genlmsg_end(msg, hdr);
4573 err = genlmsg_reply(msg, info);
4576 nla_put_failure_rcu:
4579 genlmsg_cancel(msg, hdr);
4584 mutex_unlock(&cfg80211_mutex);
4588 static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
4590 struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
4591 struct nlattr *nl_reg_rule;
4592 char *alpha2 = NULL;
4593 int rem_reg_rules = 0, r = 0;
4594 u32 num_rules = 0, rule_idx = 0, size_of_regd;
4596 struct ieee80211_regdomain *rd = NULL;
4598 if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
4601 if (!info->attrs[NL80211_ATTR_REG_RULES])
4604 alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
4606 if (info->attrs[NL80211_ATTR_DFS_REGION])
4607 dfs_region = nla_get_u8(info->attrs[NL80211_ATTR_DFS_REGION]);
4609 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
4612 if (num_rules > NL80211_MAX_SUPP_REG_RULES)
4616 size_of_regd = sizeof(struct ieee80211_regdomain) +
4617 num_rules * sizeof(struct ieee80211_reg_rule);
4619 rd = kzalloc(size_of_regd, GFP_KERNEL);
4623 rd->n_reg_rules = num_rules;
4624 rd->alpha2[0] = alpha2[0];
4625 rd->alpha2[1] = alpha2[1];
4628 * Disable DFS master mode if the DFS region was
4629 * not supported or known on this kernel.
4631 if (reg_supported_dfs_region(dfs_region))
4632 rd->dfs_region = dfs_region;
4634 nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
4636 nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
4637 nla_data(nl_reg_rule), nla_len(nl_reg_rule),
4639 r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
4645 if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
4651 mutex_lock(&cfg80211_mutex);
4654 /* set_regdom took ownership */
4656 mutex_unlock(&cfg80211_mutex);
4663 static int validate_scan_freqs(struct nlattr *freqs)
4665 struct nlattr *attr1, *attr2;
4666 int n_channels = 0, tmp1, tmp2;
4668 nla_for_each_nested(attr1, freqs, tmp1) {
4671 * Some hardware has a limited channel list for
4672 * scanning, and it is pretty much nonsensical
4673 * to scan for a channel twice, so disallow that
4674 * and don't require drivers to check that the
4675 * channel list they get isn't longer than what
4676 * they can scan, as long as they can scan all
4677 * the channels they registered at once.
4679 nla_for_each_nested(attr2, freqs, tmp2)
4680 if (attr1 != attr2 &&
4681 nla_get_u32(attr1) == nla_get_u32(attr2))
4688 static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
4690 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4691 struct wireless_dev *wdev = info->user_ptr[1];
4692 struct cfg80211_scan_request *request;
4693 struct nlattr *attr;
4694 struct wiphy *wiphy;
4695 int err, tmp, n_ssids = 0, n_channels, i;
4698 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4701 wiphy = &rdev->wiphy;
4703 if (!rdev->ops->scan)
4709 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4710 n_channels = validate_scan_freqs(
4711 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4715 enum ieee80211_band band;
4718 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
4719 if (wiphy->bands[band])
4720 n_channels += wiphy->bands[band]->n_channels;
4723 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
4724 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
4727 if (n_ssids > wiphy->max_scan_ssids)
4730 if (info->attrs[NL80211_ATTR_IE])
4731 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4735 if (ie_len > wiphy->max_scan_ie_len)
4738 request = kzalloc(sizeof(*request)
4739 + sizeof(*request->ssids) * n_ssids
4740 + sizeof(*request->channels) * n_channels
4741 + ie_len, GFP_KERNEL);
4746 request->ssids = (void *)&request->channels[n_channels];
4747 request->n_ssids = n_ssids;
4750 request->ie = (void *)(request->ssids + n_ssids);
4752 request->ie = (void *)(request->channels + n_channels);
4756 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4757 /* user specified, bail out if channel not found */
4758 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
4759 struct ieee80211_channel *chan;
4761 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
4768 /* ignore disabled channels */
4769 if (chan->flags & IEEE80211_CHAN_DISABLED)
4772 request->channels[i] = chan;
4776 enum ieee80211_band band;
4779 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
4781 if (!wiphy->bands[band])
4783 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
4784 struct ieee80211_channel *chan;
4786 chan = &wiphy->bands[band]->channels[j];
4788 if (chan->flags & IEEE80211_CHAN_DISABLED)
4791 request->channels[i] = chan;
4802 request->n_channels = i;
4805 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
4806 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
4807 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
4811 request->ssids[i].ssid_len = nla_len(attr);
4812 memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
4817 if (info->attrs[NL80211_ATTR_IE]) {
4818 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4819 memcpy((void *)request->ie,
4820 nla_data(info->attrs[NL80211_ATTR_IE]),
4824 for (i = 0; i < IEEE80211_NUM_BANDS; i++)
4825 if (wiphy->bands[i])
4827 (1 << wiphy->bands[i]->n_bitrates) - 1;
4829 if (info->attrs[NL80211_ATTR_SCAN_SUPP_RATES]) {
4830 nla_for_each_nested(attr,
4831 info->attrs[NL80211_ATTR_SCAN_SUPP_RATES],
4833 enum ieee80211_band band = nla_type(attr);
4835 if (band < 0 || band >= IEEE80211_NUM_BANDS) {
4839 err = ieee80211_get_ratemask(wiphy->bands[band],
4842 &request->rates[band]);
4848 if (info->attrs[NL80211_ATTR_SCAN_FLAGS]) {
4849 request->flags = nla_get_u32(
4850 info->attrs[NL80211_ATTR_SCAN_FLAGS]);
4851 if (((request->flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
4852 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
4853 ((request->flags & NL80211_SCAN_FLAG_FLUSH) &&
4854 !(wiphy->features & NL80211_FEATURE_SCAN_FLUSH))) {
4861 nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
4863 request->wdev = wdev;
4864 request->wiphy = &rdev->wiphy;
4865 request->scan_start = jiffies;
4867 rdev->scan_req = request;
4868 err = rdev_scan(rdev, request);
4871 nl80211_send_scan_start(rdev, wdev);
4873 dev_hold(wdev->netdev);
4876 rdev->scan_req = NULL;
4883 static int nl80211_start_sched_scan(struct sk_buff *skb,
4884 struct genl_info *info)
4886 struct cfg80211_sched_scan_request *request;
4887 struct cfg80211_registered_device *rdev = info->user_ptr[0];
4888 struct net_device *dev = info->user_ptr[1];
4889 struct nlattr *attr;
4890 struct wiphy *wiphy;
4891 int err, tmp, n_ssids = 0, n_match_sets = 0, n_channels, i;
4893 enum ieee80211_band band;
4895 struct nlattr *tb[NL80211_SCHED_SCAN_MATCH_ATTR_MAX + 1];
4897 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
4898 !rdev->ops->sched_scan_start)
4901 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
4904 if (!info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL])
4907 interval = nla_get_u32(info->attrs[NL80211_ATTR_SCHED_SCAN_INTERVAL]);
4911 wiphy = &rdev->wiphy;
4913 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4914 n_channels = validate_scan_freqs(
4915 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
4921 for (band = 0; band < IEEE80211_NUM_BANDS; band++)
4922 if (wiphy->bands[band])
4923 n_channels += wiphy->bands[band]->n_channels;
4926 if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
4927 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
4931 if (n_ssids > wiphy->max_sched_scan_ssids)
4934 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH])
4935 nla_for_each_nested(attr,
4936 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
4940 if (n_match_sets > wiphy->max_match_sets)
4943 if (info->attrs[NL80211_ATTR_IE])
4944 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
4948 if (ie_len > wiphy->max_sched_scan_ie_len)
4951 mutex_lock(&rdev->sched_scan_mtx);
4953 if (rdev->sched_scan_req) {
4958 request = kzalloc(sizeof(*request)
4959 + sizeof(*request->ssids) * n_ssids
4960 + sizeof(*request->match_sets) * n_match_sets
4961 + sizeof(*request->channels) * n_channels
4962 + ie_len, GFP_KERNEL);
4969 request->ssids = (void *)&request->channels[n_channels];
4970 request->n_ssids = n_ssids;
4973 request->ie = (void *)(request->ssids + n_ssids);
4975 request->ie = (void *)(request->channels + n_channels);
4980 request->match_sets = (void *)(request->ie + ie_len);
4981 else if (request->ssids)
4982 request->match_sets =
4983 (void *)(request->ssids + n_ssids);
4985 request->match_sets =
4986 (void *)(request->channels + n_channels);
4988 request->n_match_sets = n_match_sets;
4991 if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
4992 /* user specified, bail out if channel not found */
4993 nla_for_each_nested(attr,
4994 info->attrs[NL80211_ATTR_SCAN_FREQUENCIES],
4996 struct ieee80211_channel *chan;
4998 chan = ieee80211_get_channel(wiphy, nla_get_u32(attr));
5005 /* ignore disabled channels */
5006 if (chan->flags & IEEE80211_CHAN_DISABLED)
5009 request->channels[i] = chan;
5014 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
5016 if (!wiphy->bands[band])
5018 for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
5019 struct ieee80211_channel *chan;
5021 chan = &wiphy->bands[band]->channels[j];
5023 if (chan->flags & IEEE80211_CHAN_DISABLED)
5026 request->channels[i] = chan;
5037 request->n_channels = i;
5040 if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
5041 nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS],
5043 if (nla_len(attr) > IEEE80211_MAX_SSID_LEN) {
5047 request->ssids[i].ssid_len = nla_len(attr);
5048 memcpy(request->ssids[i].ssid, nla_data(attr),
5055 if (info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH]) {
5056 nla_for_each_nested(attr,
5057 info->attrs[NL80211_ATTR_SCHED_SCAN_MATCH],
5059 struct nlattr *ssid, *rssi;
5061 nla_parse(tb, NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
5062 nla_data(attr), nla_len(attr),
5063 nl80211_match_policy);
5064 ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
5066 if (nla_len(ssid) > IEEE80211_MAX_SSID_LEN) {
5070 memcpy(request->match_sets[i].ssid.ssid,
5071 nla_data(ssid), nla_len(ssid));
5072 request->match_sets[i].ssid.ssid_len =
5075 rssi = tb[NL80211_SCHED_SCAN_MATCH_ATTR_RSSI];
5077 request->rssi_thold = nla_get_u32(rssi);
5079 request->rssi_thold =
5080 NL80211_SCAN_RSSI_THOLD_OFF;
5085 if (info->attrs[NL80211_ATTR_IE]) {
5086 request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5087 memcpy((void *)request->ie,
5088 nla_data(info->attrs[NL80211_ATTR_IE]),
5092 if (info->attrs[NL80211_ATTR_SCAN_FLAGS]) {
5093 request->flags = nla_get_u32(
5094 info->attrs[NL80211_ATTR_SCAN_FLAGS]);
5095 if (((request->flags & NL80211_SCAN_FLAG_LOW_PRIORITY) &&
5096 !(wiphy->features & NL80211_FEATURE_LOW_PRIORITY_SCAN)) ||
5097 ((request->flags & NL80211_SCAN_FLAG_FLUSH) &&
5098 !(wiphy->features & NL80211_FEATURE_SCAN_FLUSH))) {
5105 request->wiphy = &rdev->wiphy;
5106 request->interval = interval;
5107 request->scan_start = jiffies;
5109 err = rdev_sched_scan_start(rdev, dev, request);
5111 rdev->sched_scan_req = request;
5112 nl80211_send_sched_scan(rdev, dev,
5113 NL80211_CMD_START_SCHED_SCAN);
5120 mutex_unlock(&rdev->sched_scan_mtx);
5124 static int nl80211_stop_sched_scan(struct sk_buff *skb,
5125 struct genl_info *info)
5127 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5130 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_SCHED_SCAN) ||
5131 !rdev->ops->sched_scan_stop)
5134 mutex_lock(&rdev->sched_scan_mtx);
5135 err = __cfg80211_stop_sched_scan(rdev, false);
5136 mutex_unlock(&rdev->sched_scan_mtx);
5141 static int nl80211_start_radar_detection(struct sk_buff *skb,
5142 struct genl_info *info)
5144 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5145 struct net_device *dev = info->user_ptr[1];
5146 struct wireless_dev *wdev = dev->ieee80211_ptr;
5147 struct cfg80211_chan_def chandef;
5150 err = nl80211_parse_chandef(rdev, info, &chandef);
5154 if (wdev->cac_started)
5157 err = cfg80211_chandef_dfs_required(wdev->wiphy, &chandef);
5164 if (chandef.chan->dfs_state != NL80211_DFS_USABLE)
5167 if (!rdev->ops->start_radar_detection)
5170 mutex_lock(&rdev->devlist_mtx);
5171 err = cfg80211_can_use_iftype_chan(rdev, wdev, wdev->iftype,
5172 chandef.chan, CHAN_MODE_SHARED,
5173 BIT(chandef.width));
5177 err = rdev->ops->start_radar_detection(&rdev->wiphy, dev, &chandef);
5179 wdev->channel = chandef.chan;
5180 wdev->cac_started = true;
5181 wdev->cac_start_time = jiffies;
5184 mutex_unlock(&rdev->devlist_mtx);
5189 static int nl80211_send_bss(struct sk_buff *msg, struct netlink_callback *cb,
5191 struct cfg80211_registered_device *rdev,
5192 struct wireless_dev *wdev,
5193 struct cfg80211_internal_bss *intbss)
5195 struct cfg80211_bss *res = &intbss->pub;
5196 const struct cfg80211_bss_ies *ies;
5201 ASSERT_WDEV_LOCK(wdev);
5203 hdr = nl80211hdr_put(msg, NETLINK_CB(cb->skb).portid, seq, flags,
5204 NL80211_CMD_NEW_SCAN_RESULTS);
5208 genl_dump_check_consistent(cb, hdr, &nl80211_fam);
5210 if (nla_put_u32(msg, NL80211_ATTR_GENERATION, rdev->bss_generation) ||
5211 nla_put_u32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex))
5212 goto nla_put_failure;
5214 bss = nla_nest_start(msg, NL80211_ATTR_BSS);
5216 goto nla_put_failure;
5217 if ((!is_zero_ether_addr(res->bssid) &&
5218 nla_put(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid)))
5219 goto nla_put_failure;
5222 ies = rcu_dereference(res->ies);
5224 if (nla_put_u64(msg, NL80211_BSS_TSF, ies->tsf))
5225 goto fail_unlock_rcu;
5227 if (ies->len && nla_put(msg, NL80211_BSS_INFORMATION_ELEMENTS,
5228 ies->len, ies->data))
5229 goto fail_unlock_rcu;
5231 ies = rcu_dereference(res->beacon_ies);
5233 if (!tsf && nla_put_u64(msg, NL80211_BSS_TSF, ies->tsf))
5234 goto fail_unlock_rcu;
5235 if (ies->len && nla_put(msg, NL80211_BSS_BEACON_IES,
5236 ies->len, ies->data))
5237 goto fail_unlock_rcu;
5241 if (res->beacon_interval &&
5242 nla_put_u16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval))
5243 goto nla_put_failure;
5244 if (nla_put_u16(msg, NL80211_BSS_CAPABILITY, res->capability) ||
5245 nla_put_u32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq) ||
5246 nla_put_u32(msg, NL80211_BSS_SEEN_MS_AGO,
5247 jiffies_to_msecs(jiffies - intbss->ts)))
5248 goto nla_put_failure;
5250 switch (rdev->wiphy.signal_type) {
5251 case CFG80211_SIGNAL_TYPE_MBM:
5252 if (nla_put_u32(msg, NL80211_BSS_SIGNAL_MBM, res->signal))
5253 goto nla_put_failure;
5255 case CFG80211_SIGNAL_TYPE_UNSPEC:
5256 if (nla_put_u8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal))
5257 goto nla_put_failure;
5263 switch (wdev->iftype) {
5264 case NL80211_IFTYPE_P2P_CLIENT:
5265 case NL80211_IFTYPE_STATION:
5266 if (intbss == wdev->current_bss &&
5267 nla_put_u32(msg, NL80211_BSS_STATUS,
5268 NL80211_BSS_STATUS_ASSOCIATED))
5269 goto nla_put_failure;
5271 case NL80211_IFTYPE_ADHOC:
5272 if (intbss == wdev->current_bss &&
5273 nla_put_u32(msg, NL80211_BSS_STATUS,
5274 NL80211_BSS_STATUS_IBSS_JOINED))
5275 goto nla_put_failure;
5281 nla_nest_end(msg, bss);
5283 return genlmsg_end(msg, hdr);
5288 genlmsg_cancel(msg, hdr);
5292 static int nl80211_dump_scan(struct sk_buff *skb,
5293 struct netlink_callback *cb)
5295 struct cfg80211_registered_device *rdev;
5296 struct net_device *dev;
5297 struct cfg80211_internal_bss *scan;
5298 struct wireless_dev *wdev;
5299 int start = cb->args[1], idx = 0;
5302 err = nl80211_prepare_netdev_dump(skb, cb, &rdev, &dev);
5306 wdev = dev->ieee80211_ptr;
5309 spin_lock_bh(&rdev->bss_lock);
5310 cfg80211_bss_expire(rdev);
5312 cb->seq = rdev->bss_generation;
5314 list_for_each_entry(scan, &rdev->bss_list, list) {
5317 if (nl80211_send_bss(skb, cb,
5318 cb->nlh->nlmsg_seq, NLM_F_MULTI,
5319 rdev, wdev, scan) < 0) {
5325 spin_unlock_bh(&rdev->bss_lock);
5329 nl80211_finish_netdev_dump(rdev);
5334 static int nl80211_send_survey(struct sk_buff *msg, u32 portid, u32 seq,
5335 int flags, struct net_device *dev,
5336 struct survey_info *survey)
5339 struct nlattr *infoattr;
5341 hdr = nl80211hdr_put(msg, portid, seq, flags,
5342 NL80211_CMD_NEW_SURVEY_RESULTS);
5346 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex))
5347 goto nla_put_failure;
5349 infoattr = nla_nest_start(msg, NL80211_ATTR_SURVEY_INFO);
5351 goto nla_put_failure;
5353 if (nla_put_u32(msg, NL80211_SURVEY_INFO_FREQUENCY,
5354 survey->channel->center_freq))
5355 goto nla_put_failure;
5357 if ((survey->filled & SURVEY_INFO_NOISE_DBM) &&
5358 nla_put_u8(msg, NL80211_SURVEY_INFO_NOISE, survey->noise))
5359 goto nla_put_failure;
5360 if ((survey->filled & SURVEY_INFO_IN_USE) &&
5361 nla_put_flag(msg, NL80211_SURVEY_INFO_IN_USE))
5362 goto nla_put_failure;
5363 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME) &&
5364 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME,
5365 survey->channel_time))
5366 goto nla_put_failure;
5367 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_BUSY) &&
5368 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_BUSY,
5369 survey->channel_time_busy))
5370 goto nla_put_failure;
5371 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_EXT_BUSY) &&
5372 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_EXT_BUSY,
5373 survey->channel_time_ext_busy))
5374 goto nla_put_failure;
5375 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_RX) &&
5376 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_RX,
5377 survey->channel_time_rx))
5378 goto nla_put_failure;
5379 if ((survey->filled & SURVEY_INFO_CHANNEL_TIME_TX) &&
5380 nla_put_u64(msg, NL80211_SURVEY_INFO_CHANNEL_TIME_TX,
5381 survey->channel_time_tx))
5382 goto nla_put_failure;
5384 nla_nest_end(msg, infoattr);
5386 return genlmsg_end(msg, hdr);
5389 genlmsg_cancel(msg, hdr);
5393 static int nl80211_dump_survey(struct sk_buff *skb,
5394 struct netlink_callback *cb)
5396 struct survey_info survey;
5397 struct cfg80211_registered_device *dev;
5398 struct net_device *netdev;
5399 int survey_idx = cb->args[1];
5402 res = nl80211_prepare_netdev_dump(skb, cb, &dev, &netdev);
5406 if (!dev->ops->dump_survey) {
5412 struct ieee80211_channel *chan;
5414 res = rdev_dump_survey(dev, netdev, survey_idx, &survey);
5420 /* Survey without a channel doesn't make sense */
5421 if (!survey.channel) {
5426 chan = ieee80211_get_channel(&dev->wiphy,
5427 survey.channel->center_freq);
5428 if (!chan || chan->flags & IEEE80211_CHAN_DISABLED) {
5433 if (nl80211_send_survey(skb,
5434 NETLINK_CB(cb->skb).portid,
5435 cb->nlh->nlmsg_seq, NLM_F_MULTI,
5443 cb->args[1] = survey_idx;
5446 nl80211_finish_netdev_dump(dev);
5450 static bool nl80211_valid_wpa_versions(u32 wpa_versions)
5452 return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
5453 NL80211_WPA_VERSION_2));
5456 static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
5458 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5459 struct net_device *dev = info->user_ptr[1];
5460 struct ieee80211_channel *chan;
5461 const u8 *bssid, *ssid, *ie = NULL, *sae_data = NULL;
5462 int err, ssid_len, ie_len = 0, sae_data_len = 0;
5463 enum nl80211_auth_type auth_type;
5464 struct key_parse key;
5465 bool local_state_change;
5467 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5470 if (!info->attrs[NL80211_ATTR_MAC])
5473 if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
5476 if (!info->attrs[NL80211_ATTR_SSID])
5479 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
5482 err = nl80211_parse_key(info, &key);
5487 if (key.type != -1 && key.type != NL80211_KEYTYPE_GROUP)
5489 if (!key.p.key || !key.p.key_len)
5491 if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
5492 key.p.key_len != WLAN_KEY_LEN_WEP40) &&
5493 (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
5494 key.p.key_len != WLAN_KEY_LEN_WEP104))
5506 for (i = 0; i < rdev->wiphy.n_cipher_suites; i++) {
5507 if (key.p.cipher == rdev->wiphy.cipher_suites[i]) {
5516 if (!rdev->ops->auth)
5519 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
5520 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5523 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5524 chan = ieee80211_get_channel(&rdev->wiphy,
5525 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
5526 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
5529 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5530 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
5532 if (info->attrs[NL80211_ATTR_IE]) {
5533 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5534 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5537 auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
5538 if (!nl80211_valid_auth_type(rdev, auth_type, NL80211_CMD_AUTHENTICATE))
5541 if (auth_type == NL80211_AUTHTYPE_SAE &&
5542 !info->attrs[NL80211_ATTR_SAE_DATA])
5545 if (info->attrs[NL80211_ATTR_SAE_DATA]) {
5546 if (auth_type != NL80211_AUTHTYPE_SAE)
5548 sae_data = nla_data(info->attrs[NL80211_ATTR_SAE_DATA]);
5549 sae_data_len = nla_len(info->attrs[NL80211_ATTR_SAE_DATA]);
5550 /* need to include at least Auth Transaction and Status Code */
5551 if (sae_data_len < 4)
5555 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5558 * Since we no longer track auth state, ignore
5559 * requests to only change local state.
5561 if (local_state_change)
5564 return cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
5565 ssid, ssid_len, ie, ie_len,
5566 key.p.key, key.p.key_len, key.idx,
5567 sae_data, sae_data_len);
5570 static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,
5571 struct genl_info *info,
5572 struct cfg80211_crypto_settings *settings,
5575 memset(settings, 0, sizeof(*settings));
5577 settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
5579 if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {
5581 proto = nla_get_u16(
5582 info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);
5583 settings->control_port_ethertype = cpu_to_be16(proto);
5584 if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&
5587 if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])
5588 settings->control_port_no_encrypt = true;
5590 settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);
5592 if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
5596 data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
5597 len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
5598 settings->n_ciphers_pairwise = len / sizeof(u32);
5600 if (len % sizeof(u32))
5603 if (settings->n_ciphers_pairwise > cipher_limit)
5606 memcpy(settings->ciphers_pairwise, data, len);
5608 for (i = 0; i < settings->n_ciphers_pairwise; i++)
5609 if (!cfg80211_supported_cipher_suite(
5611 settings->ciphers_pairwise[i]))
5615 if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
5616 settings->cipher_group =
5617 nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
5618 if (!cfg80211_supported_cipher_suite(&rdev->wiphy,
5619 settings->cipher_group))
5623 if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
5624 settings->wpa_versions =
5625 nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
5626 if (!nl80211_valid_wpa_versions(settings->wpa_versions))
5630 if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
5634 data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
5635 len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
5636 settings->n_akm_suites = len / sizeof(u32);
5638 if (len % sizeof(u32))
5641 if (settings->n_akm_suites > NL80211_MAX_NR_AKM_SUITES)
5644 memcpy(settings->akm_suites, data, len);
5650 static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
5652 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5653 struct net_device *dev = info->user_ptr[1];
5654 struct cfg80211_crypto_settings crypto;
5655 struct ieee80211_channel *chan;
5656 const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
5657 int err, ssid_len, ie_len = 0;
5658 bool use_mfp = false;
5660 struct ieee80211_ht_cap *ht_capa = NULL;
5661 struct ieee80211_ht_cap *ht_capa_mask = NULL;
5663 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5666 if (!info->attrs[NL80211_ATTR_MAC] ||
5667 !info->attrs[NL80211_ATTR_SSID] ||
5668 !info->attrs[NL80211_ATTR_WIPHY_FREQ])
5671 if (!rdev->ops->assoc)
5674 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
5675 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5678 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5680 chan = ieee80211_get_channel(&rdev->wiphy,
5681 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
5682 if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED))
5685 ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5686 ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
5688 if (info->attrs[NL80211_ATTR_IE]) {
5689 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5690 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5693 if (info->attrs[NL80211_ATTR_USE_MFP]) {
5694 enum nl80211_mfp mfp =
5695 nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
5696 if (mfp == NL80211_MFP_REQUIRED)
5698 else if (mfp != NL80211_MFP_NO)
5702 if (info->attrs[NL80211_ATTR_PREV_BSSID])
5703 prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
5705 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
5706 flags |= ASSOC_REQ_DISABLE_HT;
5708 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
5710 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]);
5712 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
5715 ht_capa = nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
5718 err = nl80211_crypto_settings(rdev, info, &crypto, 1);
5720 err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
5721 ssid, ssid_len, ie, ie_len, use_mfp,
5722 &crypto, flags, ht_capa,
5728 static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
5730 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5731 struct net_device *dev = info->user_ptr[1];
5732 const u8 *ie = NULL, *bssid;
5735 bool local_state_change;
5737 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5740 if (!info->attrs[NL80211_ATTR_MAC])
5743 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5746 if (!rdev->ops->deauth)
5749 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
5750 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5753 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5755 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5756 if (reason_code == 0) {
5757 /* Reason Code 0 is reserved */
5761 if (info->attrs[NL80211_ATTR_IE]) {
5762 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5763 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5766 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5768 return cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code,
5769 local_state_change);
5772 static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
5774 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5775 struct net_device *dev = info->user_ptr[1];
5776 const u8 *ie = NULL, *bssid;
5779 bool local_state_change;
5781 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5784 if (!info->attrs[NL80211_ATTR_MAC])
5787 if (!info->attrs[NL80211_ATTR_REASON_CODE])
5790 if (!rdev->ops->disassoc)
5793 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
5794 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
5797 bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5799 reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
5800 if (reason_code == 0) {
5801 /* Reason Code 0 is reserved */
5805 if (info->attrs[NL80211_ATTR_IE]) {
5806 ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5807 ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5810 local_state_change = !!info->attrs[NL80211_ATTR_LOCAL_STATE_CHANGE];
5812 return cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code,
5813 local_state_change);
5817 nl80211_parse_mcast_rate(struct cfg80211_registered_device *rdev,
5818 int mcast_rate[IEEE80211_NUM_BANDS],
5821 struct wiphy *wiphy = &rdev->wiphy;
5825 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
5826 struct ieee80211_supported_band *sband;
5828 sband = wiphy->bands[band];
5832 for (i = 0; i < sband->n_bitrates; i++) {
5833 if (sband->bitrates[i].bitrate == rateval) {
5834 mcast_rate[band] = i + 1;
5844 static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
5846 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5847 struct net_device *dev = info->user_ptr[1];
5848 struct cfg80211_ibss_params ibss;
5849 struct wiphy *wiphy;
5850 struct cfg80211_cached_keys *connkeys = NULL;
5853 memset(&ibss, 0, sizeof(ibss));
5855 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
5858 if (!info->attrs[NL80211_ATTR_SSID] ||
5859 !nla_len(info->attrs[NL80211_ATTR_SSID]))
5862 ibss.beacon_interval = 100;
5864 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
5865 ibss.beacon_interval =
5866 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
5867 if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
5871 if (!rdev->ops->join_ibss)
5874 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
5877 wiphy = &rdev->wiphy;
5879 if (info->attrs[NL80211_ATTR_MAC]) {
5880 ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
5882 if (!is_valid_ether_addr(ibss.bssid))
5885 ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
5886 ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
5888 if (info->attrs[NL80211_ATTR_IE]) {
5889 ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
5890 ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
5893 err = nl80211_parse_chandef(rdev, info, &ibss.chandef);
5897 if (!cfg80211_reg_can_beacon(&rdev->wiphy, &ibss.chandef))
5900 if (ibss.chandef.width > NL80211_CHAN_WIDTH_40)
5902 if (ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT &&
5903 !(rdev->wiphy.features & NL80211_FEATURE_HT_IBSS))
5906 ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
5907 ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
5909 if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
5911 nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
5913 nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
5914 struct ieee80211_supported_band *sband =
5915 wiphy->bands[ibss.chandef.chan->band];
5917 err = ieee80211_get_ratemask(sband, rates, n_rates,
5923 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
5924 !nl80211_parse_mcast_rate(rdev, ibss.mcast_rate,
5925 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
5928 if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
5931 connkeys = nl80211_parse_connkeys(rdev,
5932 info->attrs[NL80211_ATTR_KEYS],
5934 if (IS_ERR(connkeys))
5935 return PTR_ERR(connkeys);
5937 if ((ibss.chandef.width != NL80211_CHAN_WIDTH_20_NOHT) &&
5945 nla_get_flag(info->attrs[NL80211_ATTR_CONTROL_PORT]);
5947 err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
5953 static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
5955 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5956 struct net_device *dev = info->user_ptr[1];
5958 if (!rdev->ops->leave_ibss)
5961 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC)
5964 return cfg80211_leave_ibss(rdev, dev, false);
5967 static int nl80211_set_mcast_rate(struct sk_buff *skb, struct genl_info *info)
5969 struct cfg80211_registered_device *rdev = info->user_ptr[0];
5970 struct net_device *dev = info->user_ptr[1];
5971 int mcast_rate[IEEE80211_NUM_BANDS];
5975 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC &&
5976 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT)
5979 if (!rdev->ops->set_mcast_rate)
5982 memset(mcast_rate, 0, sizeof(mcast_rate));
5984 if (!info->attrs[NL80211_ATTR_MCAST_RATE])
5987 nla_rate = nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE]);
5988 if (!nl80211_parse_mcast_rate(rdev, mcast_rate, nla_rate))
5991 err = rdev->ops->set_mcast_rate(&rdev->wiphy, dev, mcast_rate);
5997 #ifdef CONFIG_NL80211_TESTMODE
5998 static struct genl_multicast_group nl80211_testmode_mcgrp = {
6002 static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
6004 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6007 if (!info->attrs[NL80211_ATTR_TESTDATA])
6011 if (rdev->ops->testmode_cmd) {
6012 rdev->testmode_info = info;
6013 err = rdev_testmode_cmd(rdev,
6014 nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
6015 nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
6016 rdev->testmode_info = NULL;
6022 static int nl80211_testmode_dump(struct sk_buff *skb,
6023 struct netlink_callback *cb)
6025 struct cfg80211_registered_device *rdev;
6033 * 0 is a valid index, but not valid for args[0],
6034 * so we need to offset by 1.
6036 phy_idx = cb->args[0] - 1;
6038 err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
6039 nl80211_fam.attrbuf, nl80211_fam.maxattr,
6044 mutex_lock(&cfg80211_mutex);
6045 rdev = __cfg80211_rdev_from_attrs(sock_net(skb->sk),
6046 nl80211_fam.attrbuf);
6048 mutex_unlock(&cfg80211_mutex);
6049 return PTR_ERR(rdev);
6051 phy_idx = rdev->wiphy_idx;
6053 mutex_unlock(&cfg80211_mutex);
6055 if (nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA])
6057 (long)nl80211_fam.attrbuf[NL80211_ATTR_TESTDATA];
6061 data = nla_data((void *)cb->args[1]);
6062 data_len = nla_len((void *)cb->args[1]);
6065 mutex_lock(&cfg80211_mutex);
6066 rdev = cfg80211_rdev_by_wiphy_idx(phy_idx);
6068 mutex_unlock(&cfg80211_mutex);
6071 cfg80211_lock_rdev(rdev);
6072 mutex_unlock(&cfg80211_mutex);
6074 if (!rdev->ops->testmode_dump) {
6080 void *hdr = nl80211hdr_put(skb, NETLINK_CB(cb->skb).portid,
6081 cb->nlh->nlmsg_seq, NLM_F_MULTI,
6082 NL80211_CMD_TESTMODE);
6083 struct nlattr *tmdata;
6085 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, phy_idx)) {
6086 genlmsg_cancel(skb, hdr);
6090 tmdata = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
6092 genlmsg_cancel(skb, hdr);
6095 err = rdev_testmode_dump(rdev, skb, cb, data, data_len);
6096 nla_nest_end(skb, tmdata);
6098 if (err == -ENOBUFS || err == -ENOENT) {
6099 genlmsg_cancel(skb, hdr);
6102 genlmsg_cancel(skb, hdr);
6106 genlmsg_end(skb, hdr);
6111 cb->args[0] = phy_idx + 1;
6113 cfg80211_unlock_rdev(rdev);
6117 static struct sk_buff *
6118 __cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
6119 int approxlen, u32 portid, u32 seq, gfp_t gfp)
6121 struct sk_buff *skb;
6123 struct nlattr *data;
6125 skb = nlmsg_new(approxlen + 100, gfp);
6129 hdr = nl80211hdr_put(skb, portid, seq, 0, NL80211_CMD_TESTMODE);
6135 if (nla_put_u32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
6136 goto nla_put_failure;
6137 data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
6139 ((void **)skb->cb)[0] = rdev;
6140 ((void **)skb->cb)[1] = hdr;
6141 ((void **)skb->cb)[2] = data;
6150 struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
6153 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
6155 if (WARN_ON(!rdev->testmode_info))
6158 return __cfg80211_testmode_alloc_skb(rdev, approxlen,
6159 rdev->testmode_info->snd_portid,
6160 rdev->testmode_info->snd_seq,
6163 EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
6165 int cfg80211_testmode_reply(struct sk_buff *skb)
6167 struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
6168 void *hdr = ((void **)skb->cb)[1];
6169 struct nlattr *data = ((void **)skb->cb)[2];
6171 if (WARN_ON(!rdev->testmode_info)) {
6176 nla_nest_end(skb, data);
6177 genlmsg_end(skb, hdr);
6178 return genlmsg_reply(skb, rdev->testmode_info);
6180 EXPORT_SYMBOL(cfg80211_testmode_reply);
6182 struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
6183 int approxlen, gfp_t gfp)
6185 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
6187 return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
6189 EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
6191 void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
6193 void *hdr = ((void **)skb->cb)[1];
6194 struct nlattr *data = ((void **)skb->cb)[2];
6196 nla_nest_end(skb, data);
6197 genlmsg_end(skb, hdr);
6198 genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
6200 EXPORT_SYMBOL(cfg80211_testmode_event);
6203 static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
6205 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6206 struct net_device *dev = info->user_ptr[1];
6207 struct cfg80211_connect_params connect;
6208 struct wiphy *wiphy;
6209 struct cfg80211_cached_keys *connkeys = NULL;
6212 memset(&connect, 0, sizeof(connect));
6214 if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
6217 if (!info->attrs[NL80211_ATTR_SSID] ||
6218 !nla_len(info->attrs[NL80211_ATTR_SSID]))
6221 if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
6223 nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
6224 if (!nl80211_valid_auth_type(rdev, connect.auth_type,
6225 NL80211_CMD_CONNECT))
6228 connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
6230 connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
6232 err = nl80211_crypto_settings(rdev, info, &connect.crypto,
6233 NL80211_MAX_NR_CIPHER_SUITES);
6237 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6238 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
6241 wiphy = &rdev->wiphy;
6243 connect.bg_scan_period = -1;
6244 if (info->attrs[NL80211_ATTR_BG_SCAN_PERIOD] &&
6245 (wiphy->flags & WIPHY_FLAG_SUPPORTS_FW_ROAM)) {
6246 connect.bg_scan_period =
6247 nla_get_u16(info->attrs[NL80211_ATTR_BG_SCAN_PERIOD]);
6250 if (info->attrs[NL80211_ATTR_MAC])
6251 connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
6252 connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
6253 connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
6255 if (info->attrs[NL80211_ATTR_IE]) {
6256 connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
6257 connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
6260 if (info->attrs[NL80211_ATTR_USE_MFP]) {
6261 connect.mfp = nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
6262 if (connect.mfp != NL80211_MFP_REQUIRED &&
6263 connect.mfp != NL80211_MFP_NO)
6266 connect.mfp = NL80211_MFP_NO;
6269 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
6271 ieee80211_get_channel(wiphy,
6272 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
6273 if (!connect.channel ||
6274 connect.channel->flags & IEEE80211_CHAN_DISABLED)
6278 if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
6279 connkeys = nl80211_parse_connkeys(rdev,
6280 info->attrs[NL80211_ATTR_KEYS], NULL);
6281 if (IS_ERR(connkeys))
6282 return PTR_ERR(connkeys);
6285 if (nla_get_flag(info->attrs[NL80211_ATTR_DISABLE_HT]))
6286 connect.flags |= ASSOC_REQ_DISABLE_HT;
6288 if (info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK])
6289 memcpy(&connect.ht_capa_mask,
6290 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]),
6291 sizeof(connect.ht_capa_mask));
6293 if (info->attrs[NL80211_ATTR_HT_CAPABILITY]) {
6294 if (!info->attrs[NL80211_ATTR_HT_CAPABILITY_MASK]) {
6298 memcpy(&connect.ht_capa,
6299 nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]),
6300 sizeof(connect.ht_capa));
6303 err = cfg80211_connect(rdev, dev, &connect, connkeys);
6309 static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
6311 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6312 struct net_device *dev = info->user_ptr[1];
6315 if (!info->attrs[NL80211_ATTR_REASON_CODE])
6316 reason = WLAN_REASON_DEAUTH_LEAVING;
6318 reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
6323 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6324 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
6327 return cfg80211_disconnect(rdev, dev, reason, true);
6330 static int nl80211_wiphy_netns(struct sk_buff *skb, struct genl_info *info)
6332 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6337 if (!info->attrs[NL80211_ATTR_PID])
6340 pid = nla_get_u32(info->attrs[NL80211_ATTR_PID]);
6342 net = get_net_ns_by_pid(pid);
6344 return PTR_ERR(net);
6348 /* check if anything to do */
6349 if (!net_eq(wiphy_net(&rdev->wiphy), net))
6350 err = cfg80211_switch_netns(rdev, net);
6356 static int nl80211_setdel_pmksa(struct sk_buff *skb, struct genl_info *info)
6358 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6359 int (*rdev_ops)(struct wiphy *wiphy, struct net_device *dev,
6360 struct cfg80211_pmksa *pmksa) = NULL;
6361 struct net_device *dev = info->user_ptr[1];
6362 struct cfg80211_pmksa pmksa;
6364 memset(&pmksa, 0, sizeof(struct cfg80211_pmksa));
6366 if (!info->attrs[NL80211_ATTR_MAC])
6369 if (!info->attrs[NL80211_ATTR_PMKID])
6372 pmksa.pmkid = nla_data(info->attrs[NL80211_ATTR_PMKID]);
6373 pmksa.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
6375 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6376 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
6379 switch (info->genlhdr->cmd) {
6380 case NL80211_CMD_SET_PMKSA:
6381 rdev_ops = rdev->ops->set_pmksa;
6383 case NL80211_CMD_DEL_PMKSA:
6384 rdev_ops = rdev->ops->del_pmksa;
6394 return rdev_ops(&rdev->wiphy, dev, &pmksa);
6397 static int nl80211_flush_pmksa(struct sk_buff *skb, struct genl_info *info)
6399 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6400 struct net_device *dev = info->user_ptr[1];
6402 if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION &&
6403 dev->ieee80211_ptr->iftype != NL80211_IFTYPE_P2P_CLIENT)
6406 if (!rdev->ops->flush_pmksa)
6409 return rdev_flush_pmksa(rdev, dev);
6412 static int nl80211_tdls_mgmt(struct sk_buff *skb, struct genl_info *info)
6414 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6415 struct net_device *dev = info->user_ptr[1];
6416 u8 action_code, dialog_token;
6420 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
6421 !rdev->ops->tdls_mgmt)
6424 if (!info->attrs[NL80211_ATTR_TDLS_ACTION] ||
6425 !info->attrs[NL80211_ATTR_STATUS_CODE] ||
6426 !info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN] ||
6427 !info->attrs[NL80211_ATTR_IE] ||
6428 !info->attrs[NL80211_ATTR_MAC])
6431 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
6432 action_code = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_ACTION]);
6433 status_code = nla_get_u16(info->attrs[NL80211_ATTR_STATUS_CODE]);
6434 dialog_token = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_DIALOG_TOKEN]);
6436 return rdev_tdls_mgmt(rdev, dev, peer, action_code,
6437 dialog_token, status_code,
6438 nla_data(info->attrs[NL80211_ATTR_IE]),
6439 nla_len(info->attrs[NL80211_ATTR_IE]));
6442 static int nl80211_tdls_oper(struct sk_buff *skb, struct genl_info *info)
6444 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6445 struct net_device *dev = info->user_ptr[1];
6446 enum nl80211_tdls_operation operation;
6449 if (!(rdev->wiphy.flags & WIPHY_FLAG_SUPPORTS_TDLS) ||
6450 !rdev->ops->tdls_oper)
6453 if (!info->attrs[NL80211_ATTR_TDLS_OPERATION] ||
6454 !info->attrs[NL80211_ATTR_MAC])
6457 operation = nla_get_u8(info->attrs[NL80211_ATTR_TDLS_OPERATION]);
6458 peer = nla_data(info->attrs[NL80211_ATTR_MAC]);
6460 return rdev_tdls_oper(rdev, dev, peer, operation);
6463 static int nl80211_remain_on_channel(struct sk_buff *skb,
6464 struct genl_info *info)
6466 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6467 struct wireless_dev *wdev = info->user_ptr[1];
6468 struct cfg80211_chan_def chandef;
6469 struct sk_buff *msg;
6475 if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
6476 !info->attrs[NL80211_ATTR_DURATION])
6479 duration = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
6481 if (!rdev->ops->remain_on_channel ||
6482 !(rdev->wiphy.flags & WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL))
6486 * We should be on that channel for at least a minimum amount of
6487 * time (10ms) but no longer than the driver supports.
6489 if (duration < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
6490 duration > rdev->wiphy.max_remain_on_channel_duration)
6493 err = nl80211_parse_chandef(rdev, info, &chandef);
6497 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6501 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
6502 NL80211_CMD_REMAIN_ON_CHANNEL);
6509 err = rdev_remain_on_channel(rdev, wdev, chandef.chan,
6515 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
6516 goto nla_put_failure;
6518 genlmsg_end(msg, hdr);
6520 return genlmsg_reply(msg, info);
6529 static int nl80211_cancel_remain_on_channel(struct sk_buff *skb,
6530 struct genl_info *info)
6532 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6533 struct wireless_dev *wdev = info->user_ptr[1];
6536 if (!info->attrs[NL80211_ATTR_COOKIE])
6539 if (!rdev->ops->cancel_remain_on_channel)
6542 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
6544 return rdev_cancel_remain_on_channel(rdev, wdev, cookie);
6547 static u32 rateset_to_mask(struct ieee80211_supported_band *sband,
6548 u8 *rates, u8 rates_len)
6553 for (i = 0; i < rates_len; i++) {
6554 int rate = (rates[i] & 0x7f) * 5;
6556 for (ridx = 0; ridx < sband->n_bitrates; ridx++) {
6557 struct ieee80211_rate *srate =
6558 &sband->bitrates[ridx];
6559 if (rate == srate->bitrate) {
6564 if (ridx == sband->n_bitrates)
6565 return 0; /* rate not found */
6571 static bool ht_rateset_to_mask(struct ieee80211_supported_band *sband,
6572 u8 *rates, u8 rates_len,
6573 u8 mcs[IEEE80211_HT_MCS_MASK_LEN])
6577 memset(mcs, 0, IEEE80211_HT_MCS_MASK_LEN);
6579 for (i = 0; i < rates_len; i++) {
6582 ridx = rates[i] / 8;
6583 rbit = BIT(rates[i] % 8);
6585 /* check validity */
6586 if ((ridx < 0) || (ridx >= IEEE80211_HT_MCS_MASK_LEN))
6589 /* check availability */
6590 if (sband->ht_cap.mcs.rx_mask[ridx] & rbit)
6599 static const struct nla_policy nl80211_txattr_policy[NL80211_TXRATE_MAX + 1] = {
6600 [NL80211_TXRATE_LEGACY] = { .type = NLA_BINARY,
6601 .len = NL80211_MAX_SUPP_RATES },
6602 [NL80211_TXRATE_MCS] = { .type = NLA_BINARY,
6603 .len = NL80211_MAX_SUPP_HT_RATES },
6606 static int nl80211_set_tx_bitrate_mask(struct sk_buff *skb,
6607 struct genl_info *info)
6609 struct nlattr *tb[NL80211_TXRATE_MAX + 1];
6610 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6611 struct cfg80211_bitrate_mask mask;
6613 struct net_device *dev = info->user_ptr[1];
6614 struct nlattr *tx_rates;
6615 struct ieee80211_supported_band *sband;
6617 if (info->attrs[NL80211_ATTR_TX_RATES] == NULL)
6620 if (!rdev->ops->set_bitrate_mask)
6623 memset(&mask, 0, sizeof(mask));
6624 /* Default to all rates enabled */
6625 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
6626 sband = rdev->wiphy.bands[i];
6627 mask.control[i].legacy =
6628 sband ? (1 << sband->n_bitrates) - 1 : 0;
6630 memcpy(mask.control[i].mcs,
6631 sband->ht_cap.mcs.rx_mask,
6632 sizeof(mask.control[i].mcs));
6634 memset(mask.control[i].mcs, 0,
6635 sizeof(mask.control[i].mcs));
6639 * The nested attribute uses enum nl80211_band as the index. This maps
6640 * directly to the enum ieee80211_band values used in cfg80211.
6642 BUILD_BUG_ON(NL80211_MAX_SUPP_HT_RATES > IEEE80211_HT_MCS_MASK_LEN * 8);
6643 nla_for_each_nested(tx_rates, info->attrs[NL80211_ATTR_TX_RATES], rem)
6645 enum ieee80211_band band = nla_type(tx_rates);
6646 if (band < 0 || band >= IEEE80211_NUM_BANDS)
6648 sband = rdev->wiphy.bands[band];
6651 nla_parse(tb, NL80211_TXRATE_MAX, nla_data(tx_rates),
6652 nla_len(tx_rates), nl80211_txattr_policy);
6653 if (tb[NL80211_TXRATE_LEGACY]) {
6654 mask.control[band].legacy = rateset_to_mask(
6656 nla_data(tb[NL80211_TXRATE_LEGACY]),
6657 nla_len(tb[NL80211_TXRATE_LEGACY]));
6658 if ((mask.control[band].legacy == 0) &&
6659 nla_len(tb[NL80211_TXRATE_LEGACY]))
6662 if (tb[NL80211_TXRATE_MCS]) {
6663 if (!ht_rateset_to_mask(
6665 nla_data(tb[NL80211_TXRATE_MCS]),
6666 nla_len(tb[NL80211_TXRATE_MCS]),
6667 mask.control[band].mcs))
6671 if (mask.control[band].legacy == 0) {
6672 /* don't allow empty legacy rates if HT
6673 * is not even supported. */
6674 if (!rdev->wiphy.bands[band]->ht_cap.ht_supported)
6677 for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++)
6678 if (mask.control[band].mcs[i])
6681 /* legacy and mcs rates may not be both empty */
6682 if (i == IEEE80211_HT_MCS_MASK_LEN)
6687 return rdev_set_bitrate_mask(rdev, dev, NULL, &mask);
6690 static int nl80211_register_mgmt(struct sk_buff *skb, struct genl_info *info)
6692 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6693 struct wireless_dev *wdev = info->user_ptr[1];
6694 u16 frame_type = IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_ACTION;
6696 if (!info->attrs[NL80211_ATTR_FRAME_MATCH])
6699 if (info->attrs[NL80211_ATTR_FRAME_TYPE])
6700 frame_type = nla_get_u16(info->attrs[NL80211_ATTR_FRAME_TYPE]);
6702 switch (wdev->iftype) {
6703 case NL80211_IFTYPE_STATION:
6704 case NL80211_IFTYPE_ADHOC:
6705 case NL80211_IFTYPE_P2P_CLIENT:
6706 case NL80211_IFTYPE_AP:
6707 case NL80211_IFTYPE_AP_VLAN:
6708 case NL80211_IFTYPE_MESH_POINT:
6709 case NL80211_IFTYPE_P2P_GO:
6710 case NL80211_IFTYPE_P2P_DEVICE:
6716 /* not much point in registering if we can't reply */
6717 if (!rdev->ops->mgmt_tx)
6720 return cfg80211_mlme_register_mgmt(wdev, info->snd_portid, frame_type,
6721 nla_data(info->attrs[NL80211_ATTR_FRAME_MATCH]),
6722 nla_len(info->attrs[NL80211_ATTR_FRAME_MATCH]));
6725 static int nl80211_tx_mgmt(struct sk_buff *skb, struct genl_info *info)
6727 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6728 struct wireless_dev *wdev = info->user_ptr[1];
6729 struct cfg80211_chan_def chandef;
6733 struct sk_buff *msg = NULL;
6734 unsigned int wait = 0;
6735 bool offchan, no_cck, dont_wait_for_ack;
6737 dont_wait_for_ack = info->attrs[NL80211_ATTR_DONT_WAIT_FOR_ACK];
6739 if (!info->attrs[NL80211_ATTR_FRAME])
6742 if (!rdev->ops->mgmt_tx)
6745 switch (wdev->iftype) {
6746 case NL80211_IFTYPE_STATION:
6747 case NL80211_IFTYPE_ADHOC:
6748 case NL80211_IFTYPE_P2P_CLIENT:
6749 case NL80211_IFTYPE_AP:
6750 case NL80211_IFTYPE_AP_VLAN:
6751 case NL80211_IFTYPE_MESH_POINT:
6752 case NL80211_IFTYPE_P2P_GO:
6753 case NL80211_IFTYPE_P2P_DEVICE:
6759 if (info->attrs[NL80211_ATTR_DURATION]) {
6760 if (!(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
6762 wait = nla_get_u32(info->attrs[NL80211_ATTR_DURATION]);
6765 * We should wait on the channel for at least a minimum amount
6766 * of time (10ms) but no longer than the driver supports.
6768 if (wait < NL80211_MIN_REMAIN_ON_CHANNEL_TIME ||
6769 wait > rdev->wiphy.max_remain_on_channel_duration)
6774 offchan = info->attrs[NL80211_ATTR_OFFCHANNEL_TX_OK];
6776 if (offchan && !(rdev->wiphy.flags & WIPHY_FLAG_OFFCHAN_TX))
6779 no_cck = nla_get_flag(info->attrs[NL80211_ATTR_TX_NO_CCK_RATE]);
6781 err = nl80211_parse_chandef(rdev, info, &chandef);
6785 if (!dont_wait_for_ack) {
6786 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6790 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
6799 err = cfg80211_mlme_mgmt_tx(rdev, wdev, chandef.chan, offchan, wait,
6800 nla_data(info->attrs[NL80211_ATTR_FRAME]),
6801 nla_len(info->attrs[NL80211_ATTR_FRAME]),
6802 no_cck, dont_wait_for_ack, &cookie);
6807 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
6808 goto nla_put_failure;
6810 genlmsg_end(msg, hdr);
6811 return genlmsg_reply(msg, info);
6823 static int nl80211_tx_mgmt_cancel_wait(struct sk_buff *skb, struct genl_info *info)
6825 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6826 struct wireless_dev *wdev = info->user_ptr[1];
6829 if (!info->attrs[NL80211_ATTR_COOKIE])
6832 if (!rdev->ops->mgmt_tx_cancel_wait)
6835 switch (wdev->iftype) {
6836 case NL80211_IFTYPE_STATION:
6837 case NL80211_IFTYPE_ADHOC:
6838 case NL80211_IFTYPE_P2P_CLIENT:
6839 case NL80211_IFTYPE_AP:
6840 case NL80211_IFTYPE_AP_VLAN:
6841 case NL80211_IFTYPE_P2P_GO:
6842 case NL80211_IFTYPE_P2P_DEVICE:
6848 cookie = nla_get_u64(info->attrs[NL80211_ATTR_COOKIE]);
6850 return rdev_mgmt_tx_cancel_wait(rdev, wdev, cookie);
6853 static int nl80211_set_power_save(struct sk_buff *skb, struct genl_info *info)
6855 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6856 struct wireless_dev *wdev;
6857 struct net_device *dev = info->user_ptr[1];
6862 if (!info->attrs[NL80211_ATTR_PS_STATE])
6865 ps_state = nla_get_u32(info->attrs[NL80211_ATTR_PS_STATE]);
6867 if (ps_state != NL80211_PS_DISABLED && ps_state != NL80211_PS_ENABLED)
6870 wdev = dev->ieee80211_ptr;
6872 if (!rdev->ops->set_power_mgmt)
6875 state = (ps_state == NL80211_PS_ENABLED) ? true : false;
6877 if (state == wdev->ps)
6880 err = rdev_set_power_mgmt(rdev, dev, state, wdev->ps_timeout);
6886 static int nl80211_get_power_save(struct sk_buff *skb, struct genl_info *info)
6888 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6889 enum nl80211_ps_state ps_state;
6890 struct wireless_dev *wdev;
6891 struct net_device *dev = info->user_ptr[1];
6892 struct sk_buff *msg;
6896 wdev = dev->ieee80211_ptr;
6898 if (!rdev->ops->set_power_mgmt)
6901 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
6905 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
6906 NL80211_CMD_GET_POWER_SAVE);
6913 ps_state = NL80211_PS_ENABLED;
6915 ps_state = NL80211_PS_DISABLED;
6917 if (nla_put_u32(msg, NL80211_ATTR_PS_STATE, ps_state))
6918 goto nla_put_failure;
6920 genlmsg_end(msg, hdr);
6921 return genlmsg_reply(msg, info);
6930 static struct nla_policy
6931 nl80211_attr_cqm_policy[NL80211_ATTR_CQM_MAX + 1] __read_mostly = {
6932 [NL80211_ATTR_CQM_RSSI_THOLD] = { .type = NLA_U32 },
6933 [NL80211_ATTR_CQM_RSSI_HYST] = { .type = NLA_U32 },
6934 [NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT] = { .type = NLA_U32 },
6935 [NL80211_ATTR_CQM_TXE_RATE] = { .type = NLA_U32 },
6936 [NL80211_ATTR_CQM_TXE_PKTS] = { .type = NLA_U32 },
6937 [NL80211_ATTR_CQM_TXE_INTVL] = { .type = NLA_U32 },
6940 static int nl80211_set_cqm_txe(struct genl_info *info,
6941 u32 rate, u32 pkts, u32 intvl)
6943 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6944 struct wireless_dev *wdev;
6945 struct net_device *dev = info->user_ptr[1];
6947 if (rate > 100 || intvl > NL80211_CQM_TXE_MAX_INTVL)
6950 wdev = dev->ieee80211_ptr;
6952 if (!rdev->ops->set_cqm_txe_config)
6955 if (wdev->iftype != NL80211_IFTYPE_STATION &&
6956 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
6959 return rdev_set_cqm_txe_config(rdev, dev, rate, pkts, intvl);
6962 static int nl80211_set_cqm_rssi(struct genl_info *info,
6963 s32 threshold, u32 hysteresis)
6965 struct cfg80211_registered_device *rdev = info->user_ptr[0];
6966 struct wireless_dev *wdev;
6967 struct net_device *dev = info->user_ptr[1];
6972 wdev = dev->ieee80211_ptr;
6974 if (!rdev->ops->set_cqm_rssi_config)
6977 if (wdev->iftype != NL80211_IFTYPE_STATION &&
6978 wdev->iftype != NL80211_IFTYPE_P2P_CLIENT)
6981 return rdev_set_cqm_rssi_config(rdev, dev, threshold, hysteresis);
6984 static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
6986 struct nlattr *attrs[NL80211_ATTR_CQM_MAX + 1];
6990 cqm = info->attrs[NL80211_ATTR_CQM];
6996 err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
6997 nl80211_attr_cqm_policy);
7001 if (attrs[NL80211_ATTR_CQM_RSSI_THOLD] &&
7002 attrs[NL80211_ATTR_CQM_RSSI_HYST]) {
7005 threshold = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_THOLD]);
7006 hysteresis = nla_get_u32(attrs[NL80211_ATTR_CQM_RSSI_HYST]);
7007 err = nl80211_set_cqm_rssi(info, threshold, hysteresis);
7008 } else if (attrs[NL80211_ATTR_CQM_TXE_RATE] &&
7009 attrs[NL80211_ATTR_CQM_TXE_PKTS] &&
7010 attrs[NL80211_ATTR_CQM_TXE_INTVL]) {
7011 u32 rate, pkts, intvl;
7012 rate = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_RATE]);
7013 pkts = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_PKTS]);
7014 intvl = nla_get_u32(attrs[NL80211_ATTR_CQM_TXE_INTVL]);
7015 err = nl80211_set_cqm_txe(info, rate, pkts, intvl);
7023 static int nl80211_join_mesh(struct sk_buff *skb, struct genl_info *info)
7025 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7026 struct net_device *dev = info->user_ptr[1];
7027 struct mesh_config cfg;
7028 struct mesh_setup setup;
7031 /* start with default */
7032 memcpy(&cfg, &default_mesh_config, sizeof(cfg));
7033 memcpy(&setup, &default_mesh_setup, sizeof(setup));
7035 if (info->attrs[NL80211_ATTR_MESH_CONFIG]) {
7036 /* and parse parameters if given */
7037 err = nl80211_parse_mesh_config(info, &cfg, NULL);
7042 if (!info->attrs[NL80211_ATTR_MESH_ID] ||
7043 !nla_len(info->attrs[NL80211_ATTR_MESH_ID]))
7046 setup.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
7047 setup.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
7049 if (info->attrs[NL80211_ATTR_MCAST_RATE] &&
7050 !nl80211_parse_mcast_rate(rdev, setup.mcast_rate,
7051 nla_get_u32(info->attrs[NL80211_ATTR_MCAST_RATE])))
7054 if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
7055 setup.beacon_interval =
7056 nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
7057 if (setup.beacon_interval < 10 ||
7058 setup.beacon_interval > 10000)
7062 if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
7064 nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
7065 if (setup.dtim_period < 1 || setup.dtim_period > 100)
7069 if (info->attrs[NL80211_ATTR_MESH_SETUP]) {
7070 /* parse additional setup parameters if given */
7071 err = nl80211_parse_mesh_setup(info, &setup);
7076 if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
7077 err = nl80211_parse_chandef(rdev, info, &setup.chandef);
7081 /* cfg80211_join_mesh() will sort it out */
7082 setup.chandef.chan = NULL;
7085 return cfg80211_join_mesh(rdev, dev, &setup, &cfg);
7088 static int nl80211_leave_mesh(struct sk_buff *skb, struct genl_info *info)
7090 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7091 struct net_device *dev = info->user_ptr[1];
7093 return cfg80211_leave_mesh(rdev, dev);
7097 static int nl80211_send_wowlan_patterns(struct sk_buff *msg,
7098 struct cfg80211_registered_device *rdev)
7100 struct nlattr *nl_pats, *nl_pat;
7103 if (!rdev->wowlan->n_patterns)
7106 nl_pats = nla_nest_start(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN);
7110 for (i = 0; i < rdev->wowlan->n_patterns; i++) {
7111 nl_pat = nla_nest_start(msg, i + 1);
7114 pat_len = rdev->wowlan->patterns[i].pattern_len;
7115 if (nla_put(msg, NL80211_WOWLAN_PKTPAT_MASK,
7116 DIV_ROUND_UP(pat_len, 8),
7117 rdev->wowlan->patterns[i].mask) ||
7118 nla_put(msg, NL80211_WOWLAN_PKTPAT_PATTERN,
7119 pat_len, rdev->wowlan->patterns[i].pattern) ||
7120 nla_put_u32(msg, NL80211_WOWLAN_PKTPAT_OFFSET,
7121 rdev->wowlan->patterns[i].pkt_offset))
7123 nla_nest_end(msg, nl_pat);
7125 nla_nest_end(msg, nl_pats);
7130 static int nl80211_send_wowlan_tcp(struct sk_buff *msg,
7131 struct cfg80211_wowlan_tcp *tcp)
7133 struct nlattr *nl_tcp;
7138 nl_tcp = nla_nest_start(msg, NL80211_WOWLAN_TRIG_TCP_CONNECTION);
7142 if (nla_put_be32(msg, NL80211_WOWLAN_TCP_SRC_IPV4, tcp->src) ||
7143 nla_put_be32(msg, NL80211_WOWLAN_TCP_DST_IPV4, tcp->dst) ||
7144 nla_put(msg, NL80211_WOWLAN_TCP_DST_MAC, ETH_ALEN, tcp->dst_mac) ||
7145 nla_put_u16(msg, NL80211_WOWLAN_TCP_SRC_PORT, tcp->src_port) ||
7146 nla_put_u16(msg, NL80211_WOWLAN_TCP_DST_PORT, tcp->dst_port) ||
7147 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD,
7148 tcp->payload_len, tcp->payload) ||
7149 nla_put_u32(msg, NL80211_WOWLAN_TCP_DATA_INTERVAL,
7150 tcp->data_interval) ||
7151 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_PAYLOAD,
7152 tcp->wake_len, tcp->wake_data) ||
7153 nla_put(msg, NL80211_WOWLAN_TCP_WAKE_MASK,
7154 DIV_ROUND_UP(tcp->wake_len, 8), tcp->wake_mask))
7157 if (tcp->payload_seq.len &&
7158 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ,
7159 sizeof(tcp->payload_seq), &tcp->payload_seq))
7162 if (tcp->payload_tok.len &&
7163 nla_put(msg, NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN,
7164 sizeof(tcp->payload_tok) + tcp->tokens_size,
7171 static int nl80211_get_wowlan(struct sk_buff *skb, struct genl_info *info)
7173 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7174 struct sk_buff *msg;
7176 u32 size = NLMSG_DEFAULT_SIZE;
7178 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns &&
7179 !rdev->wiphy.wowlan.tcp)
7182 if (rdev->wowlan && rdev->wowlan->tcp) {
7183 /* adjust size to have room for all the data */
7184 size += rdev->wowlan->tcp->tokens_size +
7185 rdev->wowlan->tcp->payload_len +
7186 rdev->wowlan->tcp->wake_len +
7187 rdev->wowlan->tcp->wake_len / 8;
7190 msg = nlmsg_new(size, GFP_KERNEL);
7194 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7195 NL80211_CMD_GET_WOWLAN);
7197 goto nla_put_failure;
7200 struct nlattr *nl_wowlan;
7202 nl_wowlan = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
7204 goto nla_put_failure;
7206 if ((rdev->wowlan->any &&
7207 nla_put_flag(msg, NL80211_WOWLAN_TRIG_ANY)) ||
7208 (rdev->wowlan->disconnect &&
7209 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT)) ||
7210 (rdev->wowlan->magic_pkt &&
7211 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT)) ||
7212 (rdev->wowlan->gtk_rekey_failure &&
7213 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE)) ||
7214 (rdev->wowlan->eap_identity_req &&
7215 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST)) ||
7216 (rdev->wowlan->four_way_handshake &&
7217 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE)) ||
7218 (rdev->wowlan->rfkill_release &&
7219 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE)))
7220 goto nla_put_failure;
7222 if (nl80211_send_wowlan_patterns(msg, rdev))
7223 goto nla_put_failure;
7225 if (nl80211_send_wowlan_tcp(msg, rdev->wowlan->tcp))
7226 goto nla_put_failure;
7228 nla_nest_end(msg, nl_wowlan);
7231 genlmsg_end(msg, hdr);
7232 return genlmsg_reply(msg, info);
7239 static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
7240 struct nlattr *attr,
7241 struct cfg80211_wowlan *trig)
7243 struct nlattr *tb[NUM_NL80211_WOWLAN_TCP];
7244 struct cfg80211_wowlan_tcp *cfg;
7245 struct nl80211_wowlan_tcp_data_token *tok = NULL;
7246 struct nl80211_wowlan_tcp_data_seq *seq = NULL;
7248 u32 data_size, wake_size, tokens_size = 0, wake_mask_size;
7251 if (!rdev->wiphy.wowlan.tcp)
7254 err = nla_parse(tb, MAX_NL80211_WOWLAN_TCP,
7255 nla_data(attr), nla_len(attr),
7256 nl80211_wowlan_tcp_policy);
7260 if (!tb[NL80211_WOWLAN_TCP_SRC_IPV4] ||
7261 !tb[NL80211_WOWLAN_TCP_DST_IPV4] ||
7262 !tb[NL80211_WOWLAN_TCP_DST_MAC] ||
7263 !tb[NL80211_WOWLAN_TCP_DST_PORT] ||
7264 !tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD] ||
7265 !tb[NL80211_WOWLAN_TCP_DATA_INTERVAL] ||
7266 !tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD] ||
7267 !tb[NL80211_WOWLAN_TCP_WAKE_MASK])
7270 data_size = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]);
7271 if (data_size > rdev->wiphy.wowlan.tcp->data_payload_max)
7274 if (nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]) >
7275 rdev->wiphy.wowlan.tcp->data_interval_max)
7278 wake_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]);
7279 if (wake_size > rdev->wiphy.wowlan.tcp->wake_payload_max)
7282 wake_mask_size = nla_len(tb[NL80211_WOWLAN_TCP_WAKE_MASK]);
7283 if (wake_mask_size != DIV_ROUND_UP(wake_size, 8))
7286 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]) {
7287 u32 tokln = nla_len(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
7289 tok = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN]);
7290 tokens_size = tokln - sizeof(*tok);
7292 if (!tok->len || tokens_size % tok->len)
7294 if (!rdev->wiphy.wowlan.tcp->tok)
7296 if (tok->len > rdev->wiphy.wowlan.tcp->tok->max_len)
7298 if (tok->len < rdev->wiphy.wowlan.tcp->tok->min_len)
7300 if (tokens_size > rdev->wiphy.wowlan.tcp->tok->bufsize)
7302 if (tok->offset + tok->len > data_size)
7306 if (tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]) {
7307 seq = nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ]);
7308 if (!rdev->wiphy.wowlan.tcp->seq)
7310 if (seq->len == 0 || seq->len > 4)
7312 if (seq->len + seq->offset > data_size)
7316 size = sizeof(*cfg);
7318 size += wake_size + wake_mask_size;
7319 size += tokens_size;
7321 cfg = kzalloc(size, GFP_KERNEL);
7324 cfg->src = nla_get_be32(tb[NL80211_WOWLAN_TCP_SRC_IPV4]);
7325 cfg->dst = nla_get_be32(tb[NL80211_WOWLAN_TCP_DST_IPV4]);
7326 memcpy(cfg->dst_mac, nla_data(tb[NL80211_WOWLAN_TCP_DST_MAC]),
7328 if (tb[NL80211_WOWLAN_TCP_SRC_PORT])
7329 port = nla_get_u16(tb[NL80211_WOWLAN_TCP_SRC_PORT]);
7333 /* allocate a socket and port for it and use it */
7334 err = __sock_create(wiphy_net(&rdev->wiphy), PF_INET, SOCK_STREAM,
7335 IPPROTO_TCP, &cfg->sock, 1);
7340 if (inet_csk_get_port(cfg->sock->sk, port)) {
7341 sock_release(cfg->sock);
7345 cfg->src_port = inet_sk(cfg->sock->sk)->inet_num;
7351 cfg->src_port = port;
7354 cfg->dst_port = nla_get_u16(tb[NL80211_WOWLAN_TCP_DST_PORT]);
7355 cfg->payload_len = data_size;
7356 cfg->payload = (u8 *)cfg + sizeof(*cfg) + tokens_size;
7357 memcpy((void *)cfg->payload,
7358 nla_data(tb[NL80211_WOWLAN_TCP_DATA_PAYLOAD]),
7361 cfg->payload_seq = *seq;
7362 cfg->data_interval = nla_get_u32(tb[NL80211_WOWLAN_TCP_DATA_INTERVAL]);
7363 cfg->wake_len = wake_size;
7364 cfg->wake_data = (u8 *)cfg + sizeof(*cfg) + tokens_size + data_size;
7365 memcpy((void *)cfg->wake_data,
7366 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_PAYLOAD]),
7368 cfg->wake_mask = (u8 *)cfg + sizeof(*cfg) + tokens_size +
7369 data_size + wake_size;
7370 memcpy((void *)cfg->wake_mask,
7371 nla_data(tb[NL80211_WOWLAN_TCP_WAKE_MASK]),
7374 cfg->tokens_size = tokens_size;
7375 memcpy(&cfg->payload_tok, tok, sizeof(*tok) + tokens_size);
7383 static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
7385 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7386 struct nlattr *tb[NUM_NL80211_WOWLAN_TRIG];
7387 struct cfg80211_wowlan new_triggers = {};
7388 struct cfg80211_wowlan *ntrig;
7389 struct wiphy_wowlan_support *wowlan = &rdev->wiphy.wowlan;
7391 bool prev_enabled = rdev->wowlan;
7393 if (!rdev->wiphy.wowlan.flags && !rdev->wiphy.wowlan.n_patterns &&
7394 !rdev->wiphy.wowlan.tcp)
7397 if (!info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]) {
7398 cfg80211_rdev_free_wowlan(rdev);
7399 rdev->wowlan = NULL;
7403 err = nla_parse(tb, MAX_NL80211_WOWLAN_TRIG,
7404 nla_data(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
7405 nla_len(info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS]),
7406 nl80211_wowlan_policy);
7410 if (tb[NL80211_WOWLAN_TRIG_ANY]) {
7411 if (!(wowlan->flags & WIPHY_WOWLAN_ANY))
7413 new_triggers.any = true;
7416 if (tb[NL80211_WOWLAN_TRIG_DISCONNECT]) {
7417 if (!(wowlan->flags & WIPHY_WOWLAN_DISCONNECT))
7419 new_triggers.disconnect = true;
7422 if (tb[NL80211_WOWLAN_TRIG_MAGIC_PKT]) {
7423 if (!(wowlan->flags & WIPHY_WOWLAN_MAGIC_PKT))
7425 new_triggers.magic_pkt = true;
7428 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_SUPPORTED])
7431 if (tb[NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE]) {
7432 if (!(wowlan->flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE))
7434 new_triggers.gtk_rekey_failure = true;
7437 if (tb[NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST]) {
7438 if (!(wowlan->flags & WIPHY_WOWLAN_EAP_IDENTITY_REQ))
7440 new_triggers.eap_identity_req = true;
7443 if (tb[NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE]) {
7444 if (!(wowlan->flags & WIPHY_WOWLAN_4WAY_HANDSHAKE))
7446 new_triggers.four_way_handshake = true;
7449 if (tb[NL80211_WOWLAN_TRIG_RFKILL_RELEASE]) {
7450 if (!(wowlan->flags & WIPHY_WOWLAN_RFKILL_RELEASE))
7452 new_triggers.rfkill_release = true;
7455 if (tb[NL80211_WOWLAN_TRIG_PKT_PATTERN]) {
7458 int rem, pat_len, mask_len, pkt_offset;
7459 struct nlattr *pat_tb[NUM_NL80211_WOWLAN_PKTPAT];
7461 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
7464 if (n_patterns > wowlan->n_patterns)
7467 new_triggers.patterns = kcalloc(n_patterns,
7468 sizeof(new_triggers.patterns[0]),
7470 if (!new_triggers.patterns)
7473 new_triggers.n_patterns = n_patterns;
7476 nla_for_each_nested(pat, tb[NL80211_WOWLAN_TRIG_PKT_PATTERN],
7478 nla_parse(pat_tb, MAX_NL80211_WOWLAN_PKTPAT,
7479 nla_data(pat), nla_len(pat), NULL);
7481 if (!pat_tb[NL80211_WOWLAN_PKTPAT_MASK] ||
7482 !pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN])
7484 pat_len = nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]);
7485 mask_len = DIV_ROUND_UP(pat_len, 8);
7486 if (nla_len(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]) !=
7489 if (pat_len > wowlan->pattern_max_len ||
7490 pat_len < wowlan->pattern_min_len)
7493 if (!pat_tb[NL80211_WOWLAN_PKTPAT_OFFSET])
7496 pkt_offset = nla_get_u32(
7497 pat_tb[NL80211_WOWLAN_PKTPAT_OFFSET]);
7498 if (pkt_offset > wowlan->max_pkt_offset)
7500 new_triggers.patterns[i].pkt_offset = pkt_offset;
7502 new_triggers.patterns[i].mask =
7503 kmalloc(mask_len + pat_len, GFP_KERNEL);
7504 if (!new_triggers.patterns[i].mask) {
7508 new_triggers.patterns[i].pattern =
7509 new_triggers.patterns[i].mask + mask_len;
7510 memcpy(new_triggers.patterns[i].mask,
7511 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_MASK]),
7513 new_triggers.patterns[i].pattern_len = pat_len;
7514 memcpy(new_triggers.patterns[i].pattern,
7515 nla_data(pat_tb[NL80211_WOWLAN_PKTPAT_PATTERN]),
7521 if (tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION]) {
7522 err = nl80211_parse_wowlan_tcp(
7523 rdev, tb[NL80211_WOWLAN_TRIG_TCP_CONNECTION],
7529 ntrig = kmemdup(&new_triggers, sizeof(new_triggers), GFP_KERNEL);
7534 cfg80211_rdev_free_wowlan(rdev);
7535 rdev->wowlan = ntrig;
7538 if (rdev->ops->set_wakeup && prev_enabled != !!rdev->wowlan)
7539 rdev_set_wakeup(rdev, rdev->wowlan);
7543 for (i = 0; i < new_triggers.n_patterns; i++)
7544 kfree(new_triggers.patterns[i].mask);
7545 kfree(new_triggers.patterns);
7546 if (new_triggers.tcp && new_triggers.tcp->sock)
7547 sock_release(new_triggers.tcp->sock);
7548 kfree(new_triggers.tcp);
7553 static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
7555 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7556 struct net_device *dev = info->user_ptr[1];
7557 struct wireless_dev *wdev = dev->ieee80211_ptr;
7558 struct nlattr *tb[NUM_NL80211_REKEY_DATA];
7559 struct cfg80211_gtk_rekey_data rekey_data;
7562 if (!info->attrs[NL80211_ATTR_REKEY_DATA])
7565 err = nla_parse(tb, MAX_NL80211_REKEY_DATA,
7566 nla_data(info->attrs[NL80211_ATTR_REKEY_DATA]),
7567 nla_len(info->attrs[NL80211_ATTR_REKEY_DATA]),
7568 nl80211_rekey_policy);
7572 if (nla_len(tb[NL80211_REKEY_DATA_REPLAY_CTR]) != NL80211_REPLAY_CTR_LEN)
7574 if (nla_len(tb[NL80211_REKEY_DATA_KEK]) != NL80211_KEK_LEN)
7576 if (nla_len(tb[NL80211_REKEY_DATA_KCK]) != NL80211_KCK_LEN)
7579 memcpy(rekey_data.kek, nla_data(tb[NL80211_REKEY_DATA_KEK]),
7581 memcpy(rekey_data.kck, nla_data(tb[NL80211_REKEY_DATA_KCK]),
7583 memcpy(rekey_data.replay_ctr,
7584 nla_data(tb[NL80211_REKEY_DATA_REPLAY_CTR]),
7585 NL80211_REPLAY_CTR_LEN);
7588 if (!wdev->current_bss) {
7593 if (!rdev->ops->set_rekey_data) {
7598 err = rdev_set_rekey_data(rdev, dev, &rekey_data);
7604 static int nl80211_register_unexpected_frame(struct sk_buff *skb,
7605 struct genl_info *info)
7607 struct net_device *dev = info->user_ptr[1];
7608 struct wireless_dev *wdev = dev->ieee80211_ptr;
7610 if (wdev->iftype != NL80211_IFTYPE_AP &&
7611 wdev->iftype != NL80211_IFTYPE_P2P_GO)
7614 if (wdev->ap_unexpected_nlportid)
7617 wdev->ap_unexpected_nlportid = info->snd_portid;
7621 static int nl80211_probe_client(struct sk_buff *skb,
7622 struct genl_info *info)
7624 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7625 struct net_device *dev = info->user_ptr[1];
7626 struct wireless_dev *wdev = dev->ieee80211_ptr;
7627 struct sk_buff *msg;
7633 if (wdev->iftype != NL80211_IFTYPE_AP &&
7634 wdev->iftype != NL80211_IFTYPE_P2P_GO)
7637 if (!info->attrs[NL80211_ATTR_MAC])
7640 if (!rdev->ops->probe_client)
7643 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
7647 hdr = nl80211hdr_put(msg, info->snd_portid, info->snd_seq, 0,
7648 NL80211_CMD_PROBE_CLIENT);
7655 addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
7657 err = rdev_probe_client(rdev, dev, addr, &cookie);
7661 if (nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
7662 goto nla_put_failure;
7664 genlmsg_end(msg, hdr);
7666 return genlmsg_reply(msg, info);
7675 static int nl80211_register_beacons(struct sk_buff *skb, struct genl_info *info)
7677 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7678 struct cfg80211_beacon_registration *reg, *nreg;
7681 if (!(rdev->wiphy.flags & WIPHY_FLAG_REPORTS_OBSS))
7684 nreg = kzalloc(sizeof(*nreg), GFP_KERNEL);
7688 /* First, check if already registered. */
7689 spin_lock_bh(&rdev->beacon_registrations_lock);
7690 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
7691 if (reg->nlportid == info->snd_portid) {
7696 /* Add it to the list */
7697 nreg->nlportid = info->snd_portid;
7698 list_add(&nreg->list, &rdev->beacon_registrations);
7700 spin_unlock_bh(&rdev->beacon_registrations_lock);
7704 spin_unlock_bh(&rdev->beacon_registrations_lock);
7709 static int nl80211_start_p2p_device(struct sk_buff *skb, struct genl_info *info)
7711 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7712 struct wireless_dev *wdev = info->user_ptr[1];
7715 if (!rdev->ops->start_p2p_device)
7718 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
7721 if (wdev->p2p_started)
7724 mutex_lock(&rdev->devlist_mtx);
7725 err = cfg80211_can_add_interface(rdev, wdev->iftype);
7726 mutex_unlock(&rdev->devlist_mtx);
7730 err = rdev_start_p2p_device(rdev, wdev);
7734 wdev->p2p_started = true;
7735 mutex_lock(&rdev->devlist_mtx);
7737 mutex_unlock(&rdev->devlist_mtx);
7742 static int nl80211_stop_p2p_device(struct sk_buff *skb, struct genl_info *info)
7744 struct cfg80211_registered_device *rdev = info->user_ptr[0];
7745 struct wireless_dev *wdev = info->user_ptr[1];
7747 if (wdev->iftype != NL80211_IFTYPE_P2P_DEVICE)
7750 if (!rdev->ops->stop_p2p_device)
7753 if (!wdev->p2p_started)
7756 rdev_stop_p2p_device(rdev, wdev);
7757 wdev->p2p_started = false;
7759 mutex_lock(&rdev->devlist_mtx);
7761 mutex_unlock(&rdev->devlist_mtx);
7763 if (WARN_ON(rdev->scan_req && rdev->scan_req->wdev == wdev)) {
7764 rdev->scan_req->aborted = true;
7765 ___cfg80211_scan_done(rdev, true);
7771 #define NL80211_FLAG_NEED_WIPHY 0x01
7772 #define NL80211_FLAG_NEED_NETDEV 0x02
7773 #define NL80211_FLAG_NEED_RTNL 0x04
7774 #define NL80211_FLAG_CHECK_NETDEV_UP 0x08
7775 #define NL80211_FLAG_NEED_NETDEV_UP (NL80211_FLAG_NEED_NETDEV |\
7776 NL80211_FLAG_CHECK_NETDEV_UP)
7777 #define NL80211_FLAG_NEED_WDEV 0x10
7778 /* If a netdev is associated, it must be UP, P2P must be started */
7779 #define NL80211_FLAG_NEED_WDEV_UP (NL80211_FLAG_NEED_WDEV |\
7780 NL80211_FLAG_CHECK_NETDEV_UP)
7782 static int nl80211_pre_doit(struct genl_ops *ops, struct sk_buff *skb,
7783 struct genl_info *info)
7785 struct cfg80211_registered_device *rdev;
7786 struct wireless_dev *wdev;
7787 struct net_device *dev;
7788 bool rtnl = ops->internal_flags & NL80211_FLAG_NEED_RTNL;
7793 if (ops->internal_flags & NL80211_FLAG_NEED_WIPHY) {
7794 rdev = cfg80211_get_dev_from_info(genl_info_net(info), info);
7798 return PTR_ERR(rdev);
7800 info->user_ptr[0] = rdev;
7801 } else if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV ||
7802 ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
7803 mutex_lock(&cfg80211_mutex);
7804 wdev = __cfg80211_wdev_from_attrs(genl_info_net(info),
7807 mutex_unlock(&cfg80211_mutex);
7810 return PTR_ERR(wdev);
7814 rdev = wiphy_to_dev(wdev->wiphy);
7816 if (ops->internal_flags & NL80211_FLAG_NEED_NETDEV) {
7818 mutex_unlock(&cfg80211_mutex);
7824 info->user_ptr[1] = dev;
7826 info->user_ptr[1] = wdev;
7830 if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP &&
7831 !netif_running(dev)) {
7832 mutex_unlock(&cfg80211_mutex);
7839 } else if (ops->internal_flags & NL80211_FLAG_CHECK_NETDEV_UP) {
7840 if (!wdev->p2p_started) {
7841 mutex_unlock(&cfg80211_mutex);
7848 cfg80211_lock_rdev(rdev);
7850 mutex_unlock(&cfg80211_mutex);
7852 info->user_ptr[0] = rdev;
7858 static void nl80211_post_doit(struct genl_ops *ops, struct sk_buff *skb,
7859 struct genl_info *info)
7861 if (info->user_ptr[0])
7862 cfg80211_unlock_rdev(info->user_ptr[0]);
7863 if (info->user_ptr[1]) {
7864 if (ops->internal_flags & NL80211_FLAG_NEED_WDEV) {
7865 struct wireless_dev *wdev = info->user_ptr[1];
7868 dev_put(wdev->netdev);
7870 dev_put(info->user_ptr[1]);
7873 if (ops->internal_flags & NL80211_FLAG_NEED_RTNL)
7877 static struct genl_ops nl80211_ops[] = {
7879 .cmd = NL80211_CMD_GET_WIPHY,
7880 .doit = nl80211_get_wiphy,
7881 .dumpit = nl80211_dump_wiphy,
7882 .policy = nl80211_policy,
7883 /* can be retrieved by unprivileged users */
7884 .internal_flags = NL80211_FLAG_NEED_WIPHY,
7887 .cmd = NL80211_CMD_SET_WIPHY,
7888 .doit = nl80211_set_wiphy,
7889 .policy = nl80211_policy,
7890 .flags = GENL_ADMIN_PERM,
7891 .internal_flags = NL80211_FLAG_NEED_RTNL,
7894 .cmd = NL80211_CMD_GET_INTERFACE,
7895 .doit = nl80211_get_interface,
7896 .dumpit = nl80211_dump_interface,
7897 .policy = nl80211_policy,
7898 /* can be retrieved by unprivileged users */
7899 .internal_flags = NL80211_FLAG_NEED_WDEV,
7902 .cmd = NL80211_CMD_SET_INTERFACE,
7903 .doit = nl80211_set_interface,
7904 .policy = nl80211_policy,
7905 .flags = GENL_ADMIN_PERM,
7906 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7907 NL80211_FLAG_NEED_RTNL,
7910 .cmd = NL80211_CMD_NEW_INTERFACE,
7911 .doit = nl80211_new_interface,
7912 .policy = nl80211_policy,
7913 .flags = GENL_ADMIN_PERM,
7914 .internal_flags = NL80211_FLAG_NEED_WIPHY |
7915 NL80211_FLAG_NEED_RTNL,
7918 .cmd = NL80211_CMD_DEL_INTERFACE,
7919 .doit = nl80211_del_interface,
7920 .policy = nl80211_policy,
7921 .flags = GENL_ADMIN_PERM,
7922 .internal_flags = NL80211_FLAG_NEED_WDEV |
7923 NL80211_FLAG_NEED_RTNL,
7926 .cmd = NL80211_CMD_GET_KEY,
7927 .doit = nl80211_get_key,
7928 .policy = nl80211_policy,
7929 .flags = GENL_ADMIN_PERM,
7930 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7931 NL80211_FLAG_NEED_RTNL,
7934 .cmd = NL80211_CMD_SET_KEY,
7935 .doit = nl80211_set_key,
7936 .policy = nl80211_policy,
7937 .flags = GENL_ADMIN_PERM,
7938 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7939 NL80211_FLAG_NEED_RTNL,
7942 .cmd = NL80211_CMD_NEW_KEY,
7943 .doit = nl80211_new_key,
7944 .policy = nl80211_policy,
7945 .flags = GENL_ADMIN_PERM,
7946 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7947 NL80211_FLAG_NEED_RTNL,
7950 .cmd = NL80211_CMD_DEL_KEY,
7951 .doit = nl80211_del_key,
7952 .policy = nl80211_policy,
7953 .flags = GENL_ADMIN_PERM,
7954 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7955 NL80211_FLAG_NEED_RTNL,
7958 .cmd = NL80211_CMD_SET_BEACON,
7959 .policy = nl80211_policy,
7960 .flags = GENL_ADMIN_PERM,
7961 .doit = nl80211_set_beacon,
7962 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7963 NL80211_FLAG_NEED_RTNL,
7966 .cmd = NL80211_CMD_START_AP,
7967 .policy = nl80211_policy,
7968 .flags = GENL_ADMIN_PERM,
7969 .doit = nl80211_start_ap,
7970 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7971 NL80211_FLAG_NEED_RTNL,
7974 .cmd = NL80211_CMD_STOP_AP,
7975 .policy = nl80211_policy,
7976 .flags = GENL_ADMIN_PERM,
7977 .doit = nl80211_stop_ap,
7978 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7979 NL80211_FLAG_NEED_RTNL,
7982 .cmd = NL80211_CMD_GET_STATION,
7983 .doit = nl80211_get_station,
7984 .dumpit = nl80211_dump_station,
7985 .policy = nl80211_policy,
7986 .internal_flags = NL80211_FLAG_NEED_NETDEV |
7987 NL80211_FLAG_NEED_RTNL,
7990 .cmd = NL80211_CMD_SET_STATION,
7991 .doit = nl80211_set_station,
7992 .policy = nl80211_policy,
7993 .flags = GENL_ADMIN_PERM,
7994 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
7995 NL80211_FLAG_NEED_RTNL,
7998 .cmd = NL80211_CMD_NEW_STATION,
7999 .doit = nl80211_new_station,
8000 .policy = nl80211_policy,
8001 .flags = GENL_ADMIN_PERM,
8002 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8003 NL80211_FLAG_NEED_RTNL,
8006 .cmd = NL80211_CMD_DEL_STATION,
8007 .doit = nl80211_del_station,
8008 .policy = nl80211_policy,
8009 .flags = GENL_ADMIN_PERM,
8010 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8011 NL80211_FLAG_NEED_RTNL,
8014 .cmd = NL80211_CMD_GET_MPATH,
8015 .doit = nl80211_get_mpath,
8016 .dumpit = nl80211_dump_mpath,
8017 .policy = nl80211_policy,
8018 .flags = GENL_ADMIN_PERM,
8019 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8020 NL80211_FLAG_NEED_RTNL,
8023 .cmd = NL80211_CMD_SET_MPATH,
8024 .doit = nl80211_set_mpath,
8025 .policy = nl80211_policy,
8026 .flags = GENL_ADMIN_PERM,
8027 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8028 NL80211_FLAG_NEED_RTNL,
8031 .cmd = NL80211_CMD_NEW_MPATH,
8032 .doit = nl80211_new_mpath,
8033 .policy = nl80211_policy,
8034 .flags = GENL_ADMIN_PERM,
8035 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8036 NL80211_FLAG_NEED_RTNL,
8039 .cmd = NL80211_CMD_DEL_MPATH,
8040 .doit = nl80211_del_mpath,
8041 .policy = nl80211_policy,
8042 .flags = GENL_ADMIN_PERM,
8043 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8044 NL80211_FLAG_NEED_RTNL,
8047 .cmd = NL80211_CMD_SET_BSS,
8048 .doit = nl80211_set_bss,
8049 .policy = nl80211_policy,
8050 .flags = GENL_ADMIN_PERM,
8051 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8052 NL80211_FLAG_NEED_RTNL,
8055 .cmd = NL80211_CMD_GET_REG,
8056 .doit = nl80211_get_reg,
8057 .policy = nl80211_policy,
8058 /* can be retrieved by unprivileged users */
8061 .cmd = NL80211_CMD_SET_REG,
8062 .doit = nl80211_set_reg,
8063 .policy = nl80211_policy,
8064 .flags = GENL_ADMIN_PERM,
8067 .cmd = NL80211_CMD_REQ_SET_REG,
8068 .doit = nl80211_req_set_reg,
8069 .policy = nl80211_policy,
8070 .flags = GENL_ADMIN_PERM,
8073 .cmd = NL80211_CMD_GET_MESH_CONFIG,
8074 .doit = nl80211_get_mesh_config,
8075 .policy = nl80211_policy,
8076 /* can be retrieved by unprivileged users */
8077 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8078 NL80211_FLAG_NEED_RTNL,
8081 .cmd = NL80211_CMD_SET_MESH_CONFIG,
8082 .doit = nl80211_update_mesh_config,
8083 .policy = nl80211_policy,
8084 .flags = GENL_ADMIN_PERM,
8085 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8086 NL80211_FLAG_NEED_RTNL,
8089 .cmd = NL80211_CMD_TRIGGER_SCAN,
8090 .doit = nl80211_trigger_scan,
8091 .policy = nl80211_policy,
8092 .flags = GENL_ADMIN_PERM,
8093 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
8094 NL80211_FLAG_NEED_RTNL,
8097 .cmd = NL80211_CMD_GET_SCAN,
8098 .policy = nl80211_policy,
8099 .dumpit = nl80211_dump_scan,
8102 .cmd = NL80211_CMD_START_SCHED_SCAN,
8103 .doit = nl80211_start_sched_scan,
8104 .policy = nl80211_policy,
8105 .flags = GENL_ADMIN_PERM,
8106 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8107 NL80211_FLAG_NEED_RTNL,
8110 .cmd = NL80211_CMD_STOP_SCHED_SCAN,
8111 .doit = nl80211_stop_sched_scan,
8112 .policy = nl80211_policy,
8113 .flags = GENL_ADMIN_PERM,
8114 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8115 NL80211_FLAG_NEED_RTNL,
8118 .cmd = NL80211_CMD_AUTHENTICATE,
8119 .doit = nl80211_authenticate,
8120 .policy = nl80211_policy,
8121 .flags = GENL_ADMIN_PERM,
8122 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8123 NL80211_FLAG_NEED_RTNL,
8126 .cmd = NL80211_CMD_ASSOCIATE,
8127 .doit = nl80211_associate,
8128 .policy = nl80211_policy,
8129 .flags = GENL_ADMIN_PERM,
8130 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8131 NL80211_FLAG_NEED_RTNL,
8134 .cmd = NL80211_CMD_DEAUTHENTICATE,
8135 .doit = nl80211_deauthenticate,
8136 .policy = nl80211_policy,
8137 .flags = GENL_ADMIN_PERM,
8138 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8139 NL80211_FLAG_NEED_RTNL,
8142 .cmd = NL80211_CMD_DISASSOCIATE,
8143 .doit = nl80211_disassociate,
8144 .policy = nl80211_policy,
8145 .flags = GENL_ADMIN_PERM,
8146 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8147 NL80211_FLAG_NEED_RTNL,
8150 .cmd = NL80211_CMD_JOIN_IBSS,
8151 .doit = nl80211_join_ibss,
8152 .policy = nl80211_policy,
8153 .flags = GENL_ADMIN_PERM,
8154 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8155 NL80211_FLAG_NEED_RTNL,
8158 .cmd = NL80211_CMD_LEAVE_IBSS,
8159 .doit = nl80211_leave_ibss,
8160 .policy = nl80211_policy,
8161 .flags = GENL_ADMIN_PERM,
8162 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8163 NL80211_FLAG_NEED_RTNL,
8165 #ifdef CONFIG_NL80211_TESTMODE
8167 .cmd = NL80211_CMD_TESTMODE,
8168 .doit = nl80211_testmode_do,
8169 .dumpit = nl80211_testmode_dump,
8170 .policy = nl80211_policy,
8171 .flags = GENL_ADMIN_PERM,
8172 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8173 NL80211_FLAG_NEED_RTNL,
8177 .cmd = NL80211_CMD_CONNECT,
8178 .doit = nl80211_connect,
8179 .policy = nl80211_policy,
8180 .flags = GENL_ADMIN_PERM,
8181 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8182 NL80211_FLAG_NEED_RTNL,
8185 .cmd = NL80211_CMD_DISCONNECT,
8186 .doit = nl80211_disconnect,
8187 .policy = nl80211_policy,
8188 .flags = GENL_ADMIN_PERM,
8189 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8190 NL80211_FLAG_NEED_RTNL,
8193 .cmd = NL80211_CMD_SET_WIPHY_NETNS,
8194 .doit = nl80211_wiphy_netns,
8195 .policy = nl80211_policy,
8196 .flags = GENL_ADMIN_PERM,
8197 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8198 NL80211_FLAG_NEED_RTNL,
8201 .cmd = NL80211_CMD_GET_SURVEY,
8202 .policy = nl80211_policy,
8203 .dumpit = nl80211_dump_survey,
8206 .cmd = NL80211_CMD_SET_PMKSA,
8207 .doit = nl80211_setdel_pmksa,
8208 .policy = nl80211_policy,
8209 .flags = GENL_ADMIN_PERM,
8210 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8211 NL80211_FLAG_NEED_RTNL,
8214 .cmd = NL80211_CMD_DEL_PMKSA,
8215 .doit = nl80211_setdel_pmksa,
8216 .policy = nl80211_policy,
8217 .flags = GENL_ADMIN_PERM,
8218 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8219 NL80211_FLAG_NEED_RTNL,
8222 .cmd = NL80211_CMD_FLUSH_PMKSA,
8223 .doit = nl80211_flush_pmksa,
8224 .policy = nl80211_policy,
8225 .flags = GENL_ADMIN_PERM,
8226 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8227 NL80211_FLAG_NEED_RTNL,
8230 .cmd = NL80211_CMD_REMAIN_ON_CHANNEL,
8231 .doit = nl80211_remain_on_channel,
8232 .policy = nl80211_policy,
8233 .flags = GENL_ADMIN_PERM,
8234 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
8235 NL80211_FLAG_NEED_RTNL,
8238 .cmd = NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
8239 .doit = nl80211_cancel_remain_on_channel,
8240 .policy = nl80211_policy,
8241 .flags = GENL_ADMIN_PERM,
8242 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
8243 NL80211_FLAG_NEED_RTNL,
8246 .cmd = NL80211_CMD_SET_TX_BITRATE_MASK,
8247 .doit = nl80211_set_tx_bitrate_mask,
8248 .policy = nl80211_policy,
8249 .flags = GENL_ADMIN_PERM,
8250 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8251 NL80211_FLAG_NEED_RTNL,
8254 .cmd = NL80211_CMD_REGISTER_FRAME,
8255 .doit = nl80211_register_mgmt,
8256 .policy = nl80211_policy,
8257 .flags = GENL_ADMIN_PERM,
8258 .internal_flags = NL80211_FLAG_NEED_WDEV |
8259 NL80211_FLAG_NEED_RTNL,
8262 .cmd = NL80211_CMD_FRAME,
8263 .doit = nl80211_tx_mgmt,
8264 .policy = nl80211_policy,
8265 .flags = GENL_ADMIN_PERM,
8266 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
8267 NL80211_FLAG_NEED_RTNL,
8270 .cmd = NL80211_CMD_FRAME_WAIT_CANCEL,
8271 .doit = nl80211_tx_mgmt_cancel_wait,
8272 .policy = nl80211_policy,
8273 .flags = GENL_ADMIN_PERM,
8274 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
8275 NL80211_FLAG_NEED_RTNL,
8278 .cmd = NL80211_CMD_SET_POWER_SAVE,
8279 .doit = nl80211_set_power_save,
8280 .policy = nl80211_policy,
8281 .flags = GENL_ADMIN_PERM,
8282 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8283 NL80211_FLAG_NEED_RTNL,
8286 .cmd = NL80211_CMD_GET_POWER_SAVE,
8287 .doit = nl80211_get_power_save,
8288 .policy = nl80211_policy,
8289 /* can be retrieved by unprivileged users */
8290 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8291 NL80211_FLAG_NEED_RTNL,
8294 .cmd = NL80211_CMD_SET_CQM,
8295 .doit = nl80211_set_cqm,
8296 .policy = nl80211_policy,
8297 .flags = GENL_ADMIN_PERM,
8298 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8299 NL80211_FLAG_NEED_RTNL,
8302 .cmd = NL80211_CMD_SET_CHANNEL,
8303 .doit = nl80211_set_channel,
8304 .policy = nl80211_policy,
8305 .flags = GENL_ADMIN_PERM,
8306 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8307 NL80211_FLAG_NEED_RTNL,
8310 .cmd = NL80211_CMD_SET_WDS_PEER,
8311 .doit = nl80211_set_wds_peer,
8312 .policy = nl80211_policy,
8313 .flags = GENL_ADMIN_PERM,
8314 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8315 NL80211_FLAG_NEED_RTNL,
8318 .cmd = NL80211_CMD_JOIN_MESH,
8319 .doit = nl80211_join_mesh,
8320 .policy = nl80211_policy,
8321 .flags = GENL_ADMIN_PERM,
8322 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8323 NL80211_FLAG_NEED_RTNL,
8326 .cmd = NL80211_CMD_LEAVE_MESH,
8327 .doit = nl80211_leave_mesh,
8328 .policy = nl80211_policy,
8329 .flags = GENL_ADMIN_PERM,
8330 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8331 NL80211_FLAG_NEED_RTNL,
8335 .cmd = NL80211_CMD_GET_WOWLAN,
8336 .doit = nl80211_get_wowlan,
8337 .policy = nl80211_policy,
8338 /* can be retrieved by unprivileged users */
8339 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8340 NL80211_FLAG_NEED_RTNL,
8343 .cmd = NL80211_CMD_SET_WOWLAN,
8344 .doit = nl80211_set_wowlan,
8345 .policy = nl80211_policy,
8346 .flags = GENL_ADMIN_PERM,
8347 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8348 NL80211_FLAG_NEED_RTNL,
8352 .cmd = NL80211_CMD_SET_REKEY_OFFLOAD,
8353 .doit = nl80211_set_rekey_data,
8354 .policy = nl80211_policy,
8355 .flags = GENL_ADMIN_PERM,
8356 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8357 NL80211_FLAG_NEED_RTNL,
8360 .cmd = NL80211_CMD_TDLS_MGMT,
8361 .doit = nl80211_tdls_mgmt,
8362 .policy = nl80211_policy,
8363 .flags = GENL_ADMIN_PERM,
8364 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8365 NL80211_FLAG_NEED_RTNL,
8368 .cmd = NL80211_CMD_TDLS_OPER,
8369 .doit = nl80211_tdls_oper,
8370 .policy = nl80211_policy,
8371 .flags = GENL_ADMIN_PERM,
8372 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8373 NL80211_FLAG_NEED_RTNL,
8376 .cmd = NL80211_CMD_UNEXPECTED_FRAME,
8377 .doit = nl80211_register_unexpected_frame,
8378 .policy = nl80211_policy,
8379 .flags = GENL_ADMIN_PERM,
8380 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8381 NL80211_FLAG_NEED_RTNL,
8384 .cmd = NL80211_CMD_PROBE_CLIENT,
8385 .doit = nl80211_probe_client,
8386 .policy = nl80211_policy,
8387 .flags = GENL_ADMIN_PERM,
8388 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8389 NL80211_FLAG_NEED_RTNL,
8392 .cmd = NL80211_CMD_REGISTER_BEACONS,
8393 .doit = nl80211_register_beacons,
8394 .policy = nl80211_policy,
8395 .flags = GENL_ADMIN_PERM,
8396 .internal_flags = NL80211_FLAG_NEED_WIPHY |
8397 NL80211_FLAG_NEED_RTNL,
8400 .cmd = NL80211_CMD_SET_NOACK_MAP,
8401 .doit = nl80211_set_noack_map,
8402 .policy = nl80211_policy,
8403 .flags = GENL_ADMIN_PERM,
8404 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8405 NL80211_FLAG_NEED_RTNL,
8408 .cmd = NL80211_CMD_START_P2P_DEVICE,
8409 .doit = nl80211_start_p2p_device,
8410 .policy = nl80211_policy,
8411 .flags = GENL_ADMIN_PERM,
8412 .internal_flags = NL80211_FLAG_NEED_WDEV |
8413 NL80211_FLAG_NEED_RTNL,
8416 .cmd = NL80211_CMD_STOP_P2P_DEVICE,
8417 .doit = nl80211_stop_p2p_device,
8418 .policy = nl80211_policy,
8419 .flags = GENL_ADMIN_PERM,
8420 .internal_flags = NL80211_FLAG_NEED_WDEV_UP |
8421 NL80211_FLAG_NEED_RTNL,
8424 .cmd = NL80211_CMD_SET_MCAST_RATE,
8425 .doit = nl80211_set_mcast_rate,
8426 .policy = nl80211_policy,
8427 .flags = GENL_ADMIN_PERM,
8428 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8429 NL80211_FLAG_NEED_RTNL,
8432 .cmd = NL80211_CMD_SET_MAC_ACL,
8433 .doit = nl80211_set_mac_acl,
8434 .policy = nl80211_policy,
8435 .flags = GENL_ADMIN_PERM,
8436 .internal_flags = NL80211_FLAG_NEED_NETDEV |
8437 NL80211_FLAG_NEED_RTNL,
8440 .cmd = NL80211_CMD_RADAR_DETECT,
8441 .doit = nl80211_start_radar_detection,
8442 .policy = nl80211_policy,
8443 .flags = GENL_ADMIN_PERM,
8444 .internal_flags = NL80211_FLAG_NEED_NETDEV_UP |
8445 NL80211_FLAG_NEED_RTNL,
8449 static struct genl_multicast_group nl80211_mlme_mcgrp = {
8453 /* multicast groups */
8454 static struct genl_multicast_group nl80211_config_mcgrp = {
8457 static struct genl_multicast_group nl80211_scan_mcgrp = {
8460 static struct genl_multicast_group nl80211_regulatory_mcgrp = {
8461 .name = "regulatory",
8464 /* notification functions */
8466 void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
8468 struct sk_buff *msg;
8470 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8474 if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
8479 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8480 nl80211_config_mcgrp.id, GFP_KERNEL);
8483 static int nl80211_add_scan_req(struct sk_buff *msg,
8484 struct cfg80211_registered_device *rdev)
8486 struct cfg80211_scan_request *req = rdev->scan_req;
8487 struct nlattr *nest;
8490 ASSERT_RDEV_LOCK(rdev);
8495 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
8497 goto nla_put_failure;
8498 for (i = 0; i < req->n_ssids; i++) {
8499 if (nla_put(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid))
8500 goto nla_put_failure;
8502 nla_nest_end(msg, nest);
8504 nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
8506 goto nla_put_failure;
8507 for (i = 0; i < req->n_channels; i++) {
8508 if (nla_put_u32(msg, i, req->channels[i]->center_freq))
8509 goto nla_put_failure;
8511 nla_nest_end(msg, nest);
8514 nla_put(msg, NL80211_ATTR_IE, req->ie_len, req->ie))
8515 goto nla_put_failure;
8518 nla_put_u32(msg, NL80211_ATTR_SCAN_FLAGS, req->flags);
8525 static int nl80211_send_scan_msg(struct sk_buff *msg,
8526 struct cfg80211_registered_device *rdev,
8527 struct wireless_dev *wdev,
8528 u32 portid, u32 seq, int flags,
8533 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
8537 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8538 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
8539 wdev->netdev->ifindex)) ||
8540 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
8541 goto nla_put_failure;
8543 /* ignore errors and send incomplete event anyway */
8544 nl80211_add_scan_req(msg, rdev);
8546 return genlmsg_end(msg, hdr);
8549 genlmsg_cancel(msg, hdr);
8554 nl80211_send_sched_scan_msg(struct sk_buff *msg,
8555 struct cfg80211_registered_device *rdev,
8556 struct net_device *netdev,
8557 u32 portid, u32 seq, int flags, u32 cmd)
8561 hdr = nl80211hdr_put(msg, portid, seq, flags, cmd);
8565 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8566 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
8567 goto nla_put_failure;
8569 return genlmsg_end(msg, hdr);
8572 genlmsg_cancel(msg, hdr);
8576 void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
8577 struct wireless_dev *wdev)
8579 struct sk_buff *msg;
8581 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8585 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
8586 NL80211_CMD_TRIGGER_SCAN) < 0) {
8591 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8592 nl80211_scan_mcgrp.id, GFP_KERNEL);
8595 void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
8596 struct wireless_dev *wdev)
8598 struct sk_buff *msg;
8600 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8604 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
8605 NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
8610 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8611 nl80211_scan_mcgrp.id, GFP_KERNEL);
8614 void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
8615 struct wireless_dev *wdev)
8617 struct sk_buff *msg;
8619 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8623 if (nl80211_send_scan_msg(msg, rdev, wdev, 0, 0, 0,
8624 NL80211_CMD_SCAN_ABORTED) < 0) {
8629 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8630 nl80211_scan_mcgrp.id, GFP_KERNEL);
8633 void nl80211_send_sched_scan_results(struct cfg80211_registered_device *rdev,
8634 struct net_device *netdev)
8636 struct sk_buff *msg;
8638 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8642 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0,
8643 NL80211_CMD_SCHED_SCAN_RESULTS) < 0) {
8648 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8649 nl80211_scan_mcgrp.id, GFP_KERNEL);
8652 void nl80211_send_sched_scan(struct cfg80211_registered_device *rdev,
8653 struct net_device *netdev, u32 cmd)
8655 struct sk_buff *msg;
8657 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8661 if (nl80211_send_sched_scan_msg(msg, rdev, netdev, 0, 0, 0, cmd) < 0) {
8666 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8667 nl80211_scan_mcgrp.id, GFP_KERNEL);
8671 * This can happen on global regulatory changes or device specific settings
8672 * based on custom world regulatory domains.
8674 void nl80211_send_reg_change_event(struct regulatory_request *request)
8676 struct sk_buff *msg;
8679 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8683 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
8689 /* Userspace can always count this one always being set */
8690 if (nla_put_u8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator))
8691 goto nla_put_failure;
8693 if (request->alpha2[0] == '0' && request->alpha2[1] == '0') {
8694 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
8695 NL80211_REGDOM_TYPE_WORLD))
8696 goto nla_put_failure;
8697 } else if (request->alpha2[0] == '9' && request->alpha2[1] == '9') {
8698 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
8699 NL80211_REGDOM_TYPE_CUSTOM_WORLD))
8700 goto nla_put_failure;
8701 } else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
8702 request->intersect) {
8703 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
8704 NL80211_REGDOM_TYPE_INTERSECTION))
8705 goto nla_put_failure;
8707 if (nla_put_u8(msg, NL80211_ATTR_REG_TYPE,
8708 NL80211_REGDOM_TYPE_COUNTRY) ||
8709 nla_put_string(msg, NL80211_ATTR_REG_ALPHA2,
8711 goto nla_put_failure;
8714 if (request->wiphy_idx != WIPHY_IDX_INVALID &&
8715 nla_put_u32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx))
8716 goto nla_put_failure;
8718 genlmsg_end(msg, hdr);
8721 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
8728 genlmsg_cancel(msg, hdr);
8732 static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
8733 struct net_device *netdev,
8734 const u8 *buf, size_t len,
8735 enum nl80211_commands cmd, gfp_t gfp)
8737 struct sk_buff *msg;
8740 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8744 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
8750 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8751 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8752 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
8753 goto nla_put_failure;
8755 genlmsg_end(msg, hdr);
8757 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8758 nl80211_mlme_mcgrp.id, gfp);
8762 genlmsg_cancel(msg, hdr);
8766 void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
8767 struct net_device *netdev, const u8 *buf,
8768 size_t len, gfp_t gfp)
8770 nl80211_send_mlme_event(rdev, netdev, buf, len,
8771 NL80211_CMD_AUTHENTICATE, gfp);
8774 void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
8775 struct net_device *netdev, const u8 *buf,
8776 size_t len, gfp_t gfp)
8778 nl80211_send_mlme_event(rdev, netdev, buf, len,
8779 NL80211_CMD_ASSOCIATE, gfp);
8782 void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
8783 struct net_device *netdev, const u8 *buf,
8784 size_t len, gfp_t gfp)
8786 nl80211_send_mlme_event(rdev, netdev, buf, len,
8787 NL80211_CMD_DEAUTHENTICATE, gfp);
8790 void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
8791 struct net_device *netdev, const u8 *buf,
8792 size_t len, gfp_t gfp)
8794 nl80211_send_mlme_event(rdev, netdev, buf, len,
8795 NL80211_CMD_DISASSOCIATE, gfp);
8798 void nl80211_send_unprot_deauth(struct cfg80211_registered_device *rdev,
8799 struct net_device *netdev, const u8 *buf,
8800 size_t len, gfp_t gfp)
8802 nl80211_send_mlme_event(rdev, netdev, buf, len,
8803 NL80211_CMD_UNPROT_DEAUTHENTICATE, gfp);
8806 void nl80211_send_unprot_disassoc(struct cfg80211_registered_device *rdev,
8807 struct net_device *netdev, const u8 *buf,
8808 size_t len, gfp_t gfp)
8810 nl80211_send_mlme_event(rdev, netdev, buf, len,
8811 NL80211_CMD_UNPROT_DISASSOCIATE, gfp);
8814 static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
8815 struct net_device *netdev, int cmd,
8816 const u8 *addr, gfp_t gfp)
8818 struct sk_buff *msg;
8821 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8825 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
8831 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8832 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8833 nla_put_flag(msg, NL80211_ATTR_TIMED_OUT) ||
8834 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
8835 goto nla_put_failure;
8837 genlmsg_end(msg, hdr);
8839 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8840 nl80211_mlme_mcgrp.id, gfp);
8844 genlmsg_cancel(msg, hdr);
8848 void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
8849 struct net_device *netdev, const u8 *addr,
8852 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
8856 void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
8857 struct net_device *netdev, const u8 *addr,
8860 nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
8864 void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
8865 struct net_device *netdev, const u8 *bssid,
8866 const u8 *req_ie, size_t req_ie_len,
8867 const u8 *resp_ie, size_t resp_ie_len,
8868 u16 status, gfp_t gfp)
8870 struct sk_buff *msg;
8873 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8877 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
8883 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8884 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8885 (bssid && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid)) ||
8886 nla_put_u16(msg, NL80211_ATTR_STATUS_CODE, status) ||
8888 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
8890 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
8891 goto nla_put_failure;
8893 genlmsg_end(msg, hdr);
8895 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8896 nl80211_mlme_mcgrp.id, gfp);
8900 genlmsg_cancel(msg, hdr);
8905 void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
8906 struct net_device *netdev, const u8 *bssid,
8907 const u8 *req_ie, size_t req_ie_len,
8908 const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
8910 struct sk_buff *msg;
8913 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8917 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
8923 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8924 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8925 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid) ||
8927 nla_put(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie)) ||
8929 nla_put(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie)))
8930 goto nla_put_failure;
8932 genlmsg_end(msg, hdr);
8934 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8935 nl80211_mlme_mcgrp.id, gfp);
8939 genlmsg_cancel(msg, hdr);
8944 void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
8945 struct net_device *netdev, u16 reason,
8946 const u8 *ie, size_t ie_len, bool from_ap)
8948 struct sk_buff *msg;
8951 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
8955 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
8961 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
8962 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
8963 (from_ap && reason &&
8964 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason)) ||
8966 nla_put_flag(msg, NL80211_ATTR_DISCONNECTED_BY_AP)) ||
8967 (ie && nla_put(msg, NL80211_ATTR_IE, ie_len, ie)))
8968 goto nla_put_failure;
8970 genlmsg_end(msg, hdr);
8972 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
8973 nl80211_mlme_mcgrp.id, GFP_KERNEL);
8977 genlmsg_cancel(msg, hdr);
8982 void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
8983 struct net_device *netdev, const u8 *bssid,
8986 struct sk_buff *msg;
8989 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
8993 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
8999 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9000 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9001 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
9002 goto nla_put_failure;
9004 genlmsg_end(msg, hdr);
9006 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9007 nl80211_mlme_mcgrp.id, gfp);
9011 genlmsg_cancel(msg, hdr);
9015 void nl80211_send_new_peer_candidate(struct cfg80211_registered_device *rdev,
9016 struct net_device *netdev,
9017 const u8 *macaddr, const u8* ie, u8 ie_len,
9020 struct sk_buff *msg;
9023 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9027 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NEW_PEER_CANDIDATE);
9033 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9034 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9035 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, macaddr) ||
9037 nla_put(msg, NL80211_ATTR_IE, ie_len , ie)))
9038 goto nla_put_failure;
9040 genlmsg_end(msg, hdr);
9042 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9043 nl80211_mlme_mcgrp.id, gfp);
9047 genlmsg_cancel(msg, hdr);
9051 void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
9052 struct net_device *netdev, const u8 *addr,
9053 enum nl80211_key_type key_type, int key_id,
9054 const u8 *tsc, gfp_t gfp)
9056 struct sk_buff *msg;
9059 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9063 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
9069 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9070 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9071 (addr && nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr)) ||
9072 nla_put_u32(msg, NL80211_ATTR_KEY_TYPE, key_type) ||
9074 nla_put_u8(msg, NL80211_ATTR_KEY_IDX, key_id)) ||
9075 (tsc && nla_put(msg, NL80211_ATTR_KEY_SEQ, 6, tsc)))
9076 goto nla_put_failure;
9078 genlmsg_end(msg, hdr);
9080 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9081 nl80211_mlme_mcgrp.id, gfp);
9085 genlmsg_cancel(msg, hdr);
9089 void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
9090 struct ieee80211_channel *channel_before,
9091 struct ieee80211_channel *channel_after)
9093 struct sk_buff *msg;
9095 struct nlattr *nl_freq;
9097 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
9101 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
9108 * Since we are applying the beacon hint to a wiphy we know its
9109 * wiphy_idx is valid
9111 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy)))
9112 goto nla_put_failure;
9115 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
9117 goto nla_put_failure;
9118 if (nl80211_msg_put_channel(msg, channel_before))
9119 goto nla_put_failure;
9120 nla_nest_end(msg, nl_freq);
9123 nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
9125 goto nla_put_failure;
9126 if (nl80211_msg_put_channel(msg, channel_after))
9127 goto nla_put_failure;
9128 nla_nest_end(msg, nl_freq);
9130 genlmsg_end(msg, hdr);
9133 genlmsg_multicast_allns(msg, 0, nl80211_regulatory_mcgrp.id,
9140 genlmsg_cancel(msg, hdr);
9144 static void nl80211_send_remain_on_chan_event(
9145 int cmd, struct cfg80211_registered_device *rdev,
9146 struct wireless_dev *wdev, u64 cookie,
9147 struct ieee80211_channel *chan,
9148 unsigned int duration, gfp_t gfp)
9150 struct sk_buff *msg;
9153 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9157 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
9163 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9164 (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
9165 wdev->netdev->ifindex)) ||
9166 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)) ||
9167 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, chan->center_freq) ||
9168 nla_put_u32(msg, NL80211_ATTR_WIPHY_CHANNEL_TYPE,
9169 NL80211_CHAN_NO_HT) ||
9170 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie))
9171 goto nla_put_failure;
9173 if (cmd == NL80211_CMD_REMAIN_ON_CHANNEL &&
9174 nla_put_u32(msg, NL80211_ATTR_DURATION, duration))
9175 goto nla_put_failure;
9177 genlmsg_end(msg, hdr);
9179 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9180 nl80211_mlme_mcgrp.id, gfp);
9184 genlmsg_cancel(msg, hdr);
9188 void nl80211_send_remain_on_channel(struct cfg80211_registered_device *rdev,
9189 struct wireless_dev *wdev, u64 cookie,
9190 struct ieee80211_channel *chan,
9191 unsigned int duration, gfp_t gfp)
9193 nl80211_send_remain_on_chan_event(NL80211_CMD_REMAIN_ON_CHANNEL,
9194 rdev, wdev, cookie, chan,
9198 void nl80211_send_remain_on_channel_cancel(
9199 struct cfg80211_registered_device *rdev,
9200 struct wireless_dev *wdev,
9201 u64 cookie, struct ieee80211_channel *chan, gfp_t gfp)
9203 nl80211_send_remain_on_chan_event(NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL,
9204 rdev, wdev, cookie, chan, 0, gfp);
9207 void nl80211_send_sta_event(struct cfg80211_registered_device *rdev,
9208 struct net_device *dev, const u8 *mac_addr,
9209 struct station_info *sinfo, gfp_t gfp)
9211 struct sk_buff *msg;
9213 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9217 if (nl80211_send_station(msg, 0, 0, 0,
9218 rdev, dev, mac_addr, sinfo) < 0) {
9223 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9224 nl80211_mlme_mcgrp.id, gfp);
9227 void nl80211_send_sta_del_event(struct cfg80211_registered_device *rdev,
9228 struct net_device *dev, const u8 *mac_addr,
9231 struct sk_buff *msg;
9234 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9238 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DEL_STATION);
9244 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
9245 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr))
9246 goto nla_put_failure;
9248 genlmsg_end(msg, hdr);
9250 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9251 nl80211_mlme_mcgrp.id, gfp);
9255 genlmsg_cancel(msg, hdr);
9259 void nl80211_send_conn_failed_event(struct cfg80211_registered_device *rdev,
9260 struct net_device *dev, const u8 *mac_addr,
9261 enum nl80211_connect_failed_reason reason,
9264 struct sk_buff *msg;
9267 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
9271 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONN_FAILED);
9277 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
9278 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr) ||
9279 nla_put_u32(msg, NL80211_ATTR_CONN_FAILED_REASON, reason))
9280 goto nla_put_failure;
9282 genlmsg_end(msg, hdr);
9284 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9285 nl80211_mlme_mcgrp.id, gfp);
9289 genlmsg_cancel(msg, hdr);
9293 static bool __nl80211_unexpected_frame(struct net_device *dev, u8 cmd,
9294 const u8 *addr, gfp_t gfp)
9296 struct wireless_dev *wdev = dev->ieee80211_ptr;
9297 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
9298 struct sk_buff *msg;
9301 u32 nlportid = ACCESS_ONCE(wdev->ap_unexpected_nlportid);
9306 msg = nlmsg_new(100, gfp);
9310 hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
9316 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9317 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
9318 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr))
9319 goto nla_put_failure;
9321 err = genlmsg_end(msg, hdr);
9327 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
9331 genlmsg_cancel(msg, hdr);
9336 bool nl80211_unexpected_frame(struct net_device *dev, const u8 *addr, gfp_t gfp)
9338 return __nl80211_unexpected_frame(dev, NL80211_CMD_UNEXPECTED_FRAME,
9342 bool nl80211_unexpected_4addr_frame(struct net_device *dev,
9343 const u8 *addr, gfp_t gfp)
9345 return __nl80211_unexpected_frame(dev,
9346 NL80211_CMD_UNEXPECTED_4ADDR_FRAME,
9350 int nl80211_send_mgmt(struct cfg80211_registered_device *rdev,
9351 struct wireless_dev *wdev, u32 nlportid,
9352 int freq, int sig_dbm,
9353 const u8 *buf, size_t len, gfp_t gfp)
9355 struct net_device *netdev = wdev->netdev;
9356 struct sk_buff *msg;
9359 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9363 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
9369 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9370 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
9371 netdev->ifindex)) ||
9372 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq) ||
9374 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
9375 nla_put(msg, NL80211_ATTR_FRAME, len, buf))
9376 goto nla_put_failure;
9378 genlmsg_end(msg, hdr);
9380 return genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, nlportid);
9383 genlmsg_cancel(msg, hdr);
9388 void nl80211_send_mgmt_tx_status(struct cfg80211_registered_device *rdev,
9389 struct wireless_dev *wdev, u64 cookie,
9390 const u8 *buf, size_t len, bool ack,
9393 struct net_device *netdev = wdev->netdev;
9394 struct sk_buff *msg;
9397 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9401 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME_TX_STATUS);
9407 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9408 (netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
9409 netdev->ifindex)) ||
9410 nla_put(msg, NL80211_ATTR_FRAME, len, buf) ||
9411 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
9412 (ack && nla_put_flag(msg, NL80211_ATTR_ACK)))
9413 goto nla_put_failure;
9415 genlmsg_end(msg, hdr);
9417 genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
9421 genlmsg_cancel(msg, hdr);
9426 nl80211_send_cqm_rssi_notify(struct cfg80211_registered_device *rdev,
9427 struct net_device *netdev,
9428 enum nl80211_cqm_rssi_threshold_event rssi_event,
9431 struct sk_buff *msg;
9432 struct nlattr *pinfoattr;
9435 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9439 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
9445 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9446 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
9447 goto nla_put_failure;
9449 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
9451 goto nla_put_failure;
9453 if (nla_put_u32(msg, NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT,
9455 goto nla_put_failure;
9457 nla_nest_end(msg, pinfoattr);
9459 genlmsg_end(msg, hdr);
9461 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9462 nl80211_mlme_mcgrp.id, gfp);
9466 genlmsg_cancel(msg, hdr);
9470 void nl80211_gtk_rekey_notify(struct cfg80211_registered_device *rdev,
9471 struct net_device *netdev, const u8 *bssid,
9472 const u8 *replay_ctr, gfp_t gfp)
9474 struct sk_buff *msg;
9475 struct nlattr *rekey_attr;
9478 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9482 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_REKEY_OFFLOAD);
9488 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9489 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9490 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid))
9491 goto nla_put_failure;
9493 rekey_attr = nla_nest_start(msg, NL80211_ATTR_REKEY_DATA);
9495 goto nla_put_failure;
9497 if (nla_put(msg, NL80211_REKEY_DATA_REPLAY_CTR,
9498 NL80211_REPLAY_CTR_LEN, replay_ctr))
9499 goto nla_put_failure;
9501 nla_nest_end(msg, rekey_attr);
9503 genlmsg_end(msg, hdr);
9505 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9506 nl80211_mlme_mcgrp.id, gfp);
9510 genlmsg_cancel(msg, hdr);
9514 void nl80211_pmksa_candidate_notify(struct cfg80211_registered_device *rdev,
9515 struct net_device *netdev, int index,
9516 const u8 *bssid, bool preauth, gfp_t gfp)
9518 struct sk_buff *msg;
9519 struct nlattr *attr;
9522 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9526 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PMKSA_CANDIDATE);
9532 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9533 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
9534 goto nla_put_failure;
9536 attr = nla_nest_start(msg, NL80211_ATTR_PMKSA_CANDIDATE);
9538 goto nla_put_failure;
9540 if (nla_put_u32(msg, NL80211_PMKSA_CANDIDATE_INDEX, index) ||
9541 nla_put(msg, NL80211_PMKSA_CANDIDATE_BSSID, ETH_ALEN, bssid) ||
9543 nla_put_flag(msg, NL80211_PMKSA_CANDIDATE_PREAUTH)))
9544 goto nla_put_failure;
9546 nla_nest_end(msg, attr);
9548 genlmsg_end(msg, hdr);
9550 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9551 nl80211_mlme_mcgrp.id, gfp);
9555 genlmsg_cancel(msg, hdr);
9559 void nl80211_ch_switch_notify(struct cfg80211_registered_device *rdev,
9560 struct net_device *netdev,
9561 struct cfg80211_chan_def *chandef, gfp_t gfp)
9563 struct sk_buff *msg;
9566 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9570 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CH_SWITCH_NOTIFY);
9576 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex))
9577 goto nla_put_failure;
9579 if (nl80211_send_chandef(msg, chandef))
9580 goto nla_put_failure;
9582 genlmsg_end(msg, hdr);
9584 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9585 nl80211_mlme_mcgrp.id, gfp);
9589 genlmsg_cancel(msg, hdr);
9594 nl80211_send_cqm_txe_notify(struct cfg80211_registered_device *rdev,
9595 struct net_device *netdev, const u8 *peer,
9596 u32 num_packets, u32 rate, u32 intvl, gfp_t gfp)
9598 struct sk_buff *msg;
9599 struct nlattr *pinfoattr;
9602 msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
9606 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
9612 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9613 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9614 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer))
9615 goto nla_put_failure;
9617 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
9619 goto nla_put_failure;
9621 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_PKTS, num_packets))
9622 goto nla_put_failure;
9624 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_RATE, rate))
9625 goto nla_put_failure;
9627 if (nla_put_u32(msg, NL80211_ATTR_CQM_TXE_INTVL, intvl))
9628 goto nla_put_failure;
9630 nla_nest_end(msg, pinfoattr);
9632 genlmsg_end(msg, hdr);
9634 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9635 nl80211_mlme_mcgrp.id, gfp);
9639 genlmsg_cancel(msg, hdr);
9644 nl80211_radar_notify(struct cfg80211_registered_device *rdev,
9645 struct cfg80211_chan_def *chandef,
9646 enum nl80211_radar_event event,
9647 struct net_device *netdev, gfp_t gfp)
9649 struct sk_buff *msg;
9652 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9656 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_RADAR_DETECT);
9662 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx))
9663 goto nla_put_failure;
9665 /* NOP and radar events don't need a netdev parameter */
9667 struct wireless_dev *wdev = netdev->ieee80211_ptr;
9669 if (nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9670 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
9671 goto nla_put_failure;
9674 if (nla_put_u32(msg, NL80211_ATTR_RADAR_EVENT, event))
9675 goto nla_put_failure;
9677 if (nl80211_send_chandef(msg, chandef))
9678 goto nla_put_failure;
9680 if (genlmsg_end(msg, hdr) < 0) {
9685 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9686 nl80211_mlme_mcgrp.id, gfp);
9690 genlmsg_cancel(msg, hdr);
9695 nl80211_send_cqm_pktloss_notify(struct cfg80211_registered_device *rdev,
9696 struct net_device *netdev, const u8 *peer,
9697 u32 num_packets, gfp_t gfp)
9699 struct sk_buff *msg;
9700 struct nlattr *pinfoattr;
9703 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9707 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_NOTIFY_CQM);
9713 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9714 nla_put_u32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex) ||
9715 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer))
9716 goto nla_put_failure;
9718 pinfoattr = nla_nest_start(msg, NL80211_ATTR_CQM);
9720 goto nla_put_failure;
9722 if (nla_put_u32(msg, NL80211_ATTR_CQM_PKT_LOSS_EVENT, num_packets))
9723 goto nla_put_failure;
9725 nla_nest_end(msg, pinfoattr);
9727 genlmsg_end(msg, hdr);
9729 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9730 nl80211_mlme_mcgrp.id, gfp);
9734 genlmsg_cancel(msg, hdr);
9738 void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
9739 u64 cookie, bool acked, gfp_t gfp)
9741 struct wireless_dev *wdev = dev->ieee80211_ptr;
9742 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
9743 struct sk_buff *msg;
9747 trace_cfg80211_probe_status(dev, addr, cookie, acked);
9749 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9754 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_PROBE_CLIENT);
9760 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9761 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
9762 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, addr) ||
9763 nla_put_u64(msg, NL80211_ATTR_COOKIE, cookie) ||
9764 (acked && nla_put_flag(msg, NL80211_ATTR_ACK)))
9765 goto nla_put_failure;
9767 err = genlmsg_end(msg, hdr);
9773 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9774 nl80211_mlme_mcgrp.id, gfp);
9778 genlmsg_cancel(msg, hdr);
9781 EXPORT_SYMBOL(cfg80211_probe_status);
9783 void cfg80211_report_obss_beacon(struct wiphy *wiphy,
9784 const u8 *frame, size_t len,
9785 int freq, int sig_dbm)
9787 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
9788 struct sk_buff *msg;
9790 struct cfg80211_beacon_registration *reg;
9792 trace_cfg80211_report_obss_beacon(wiphy, frame, len, freq, sig_dbm);
9794 spin_lock_bh(&rdev->beacon_registrations_lock);
9795 list_for_each_entry(reg, &rdev->beacon_registrations, list) {
9796 msg = nlmsg_new(len + 100, GFP_ATOMIC);
9798 spin_unlock_bh(&rdev->beacon_registrations_lock);
9802 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_FRAME);
9804 goto nla_put_failure;
9806 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9808 nla_put_u32(msg, NL80211_ATTR_WIPHY_FREQ, freq)) ||
9810 nla_put_u32(msg, NL80211_ATTR_RX_SIGNAL_DBM, sig_dbm)) ||
9811 nla_put(msg, NL80211_ATTR_FRAME, len, frame))
9812 goto nla_put_failure;
9814 genlmsg_end(msg, hdr);
9816 genlmsg_unicast(wiphy_net(&rdev->wiphy), msg, reg->nlportid);
9818 spin_unlock_bh(&rdev->beacon_registrations_lock);
9822 spin_unlock_bh(&rdev->beacon_registrations_lock);
9824 genlmsg_cancel(msg, hdr);
9827 EXPORT_SYMBOL(cfg80211_report_obss_beacon);
9830 void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
9831 struct cfg80211_wowlan_wakeup *wakeup,
9834 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
9835 struct sk_buff *msg;
9837 int err, size = 200;
9839 trace_cfg80211_report_wowlan_wakeup(wdev->wiphy, wdev, wakeup);
9842 size += wakeup->packet_present_len;
9844 msg = nlmsg_new(size, gfp);
9848 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_SET_WOWLAN);
9852 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9853 nla_put_u64(msg, NL80211_ATTR_WDEV, wdev_id(wdev)))
9856 if (wdev->netdev && nla_put_u32(msg, NL80211_ATTR_IFINDEX,
9857 wdev->netdev->ifindex))
9861 struct nlattr *reasons;
9863 reasons = nla_nest_start(msg, NL80211_ATTR_WOWLAN_TRIGGERS);
9865 if (wakeup->disconnect &&
9866 nla_put_flag(msg, NL80211_WOWLAN_TRIG_DISCONNECT))
9868 if (wakeup->magic_pkt &&
9869 nla_put_flag(msg, NL80211_WOWLAN_TRIG_MAGIC_PKT))
9871 if (wakeup->gtk_rekey_failure &&
9872 nla_put_flag(msg, NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE))
9874 if (wakeup->eap_identity_req &&
9875 nla_put_flag(msg, NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST))
9877 if (wakeup->four_way_handshake &&
9878 nla_put_flag(msg, NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE))
9880 if (wakeup->rfkill_release &&
9881 nla_put_flag(msg, NL80211_WOWLAN_TRIG_RFKILL_RELEASE))
9884 if (wakeup->pattern_idx >= 0 &&
9885 nla_put_u32(msg, NL80211_WOWLAN_TRIG_PKT_PATTERN,
9886 wakeup->pattern_idx))
9889 if (wakeup->tcp_match)
9890 nla_put_flag(msg, NL80211_WOWLAN_TRIG_WAKEUP_TCP_MATCH);
9892 if (wakeup->tcp_connlost)
9894 NL80211_WOWLAN_TRIG_WAKEUP_TCP_CONNLOST);
9896 if (wakeup->tcp_nomoretokens)
9898 NL80211_WOWLAN_TRIG_WAKEUP_TCP_NOMORETOKENS);
9900 if (wakeup->packet) {
9901 u32 pkt_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211;
9902 u32 len_attr = NL80211_WOWLAN_TRIG_WAKEUP_PKT_80211_LEN;
9904 if (!wakeup->packet_80211) {
9906 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023;
9908 NL80211_WOWLAN_TRIG_WAKEUP_PKT_8023_LEN;
9911 if (wakeup->packet_len &&
9912 nla_put_u32(msg, len_attr, wakeup->packet_len))
9915 if (nla_put(msg, pkt_attr, wakeup->packet_present_len,
9920 nla_nest_end(msg, reasons);
9923 err = genlmsg_end(msg, hdr);
9927 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9928 nl80211_mlme_mcgrp.id, gfp);
9934 EXPORT_SYMBOL(cfg80211_report_wowlan_wakeup);
9937 void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
9938 enum nl80211_tdls_operation oper,
9939 u16 reason_code, gfp_t gfp)
9941 struct wireless_dev *wdev = dev->ieee80211_ptr;
9942 struct cfg80211_registered_device *rdev = wiphy_to_dev(wdev->wiphy);
9943 struct sk_buff *msg;
9947 trace_cfg80211_tdls_oper_request(wdev->wiphy, dev, peer, oper,
9950 msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
9954 hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_TDLS_OPER);
9960 if (nla_put_u32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx) ||
9961 nla_put_u32(msg, NL80211_ATTR_IFINDEX, dev->ifindex) ||
9962 nla_put_u8(msg, NL80211_ATTR_TDLS_OPERATION, oper) ||
9963 nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, peer) ||
9965 nla_put_u16(msg, NL80211_ATTR_REASON_CODE, reason_code)))
9966 goto nla_put_failure;
9968 err = genlmsg_end(msg, hdr);
9974 genlmsg_multicast_netns(wiphy_net(&rdev->wiphy), msg, 0,
9975 nl80211_mlme_mcgrp.id, gfp);
9979 genlmsg_cancel(msg, hdr);
9982 EXPORT_SYMBOL(cfg80211_tdls_oper_request);
9984 static int nl80211_netlink_notify(struct notifier_block * nb,
9985 unsigned long state,
9988 struct netlink_notify *notify = _notify;
9989 struct cfg80211_registered_device *rdev;
9990 struct wireless_dev *wdev;
9991 struct cfg80211_beacon_registration *reg, *tmp;
9993 if (state != NETLINK_URELEASE)
9998 list_for_each_entry_rcu(rdev, &cfg80211_rdev_list, list) {
9999 list_for_each_entry_rcu(wdev, &rdev->wdev_list, list)
10000 cfg80211_mlme_unregister_socket(wdev, notify->portid);
10002 spin_lock_bh(&rdev->beacon_registrations_lock);
10003 list_for_each_entry_safe(reg, tmp, &rdev->beacon_registrations,
10005 if (reg->nlportid == notify->portid) {
10006 list_del(®->list);
10011 spin_unlock_bh(&rdev->beacon_registrations_lock);
10016 return NOTIFY_DONE;
10019 static struct notifier_block nl80211_netlink_notifier = {
10020 .notifier_call = nl80211_netlink_notify,
10023 /* initialisation/exit functions */
10025 int nl80211_init(void)
10029 err = genl_register_family_with_ops(&nl80211_fam,
10030 nl80211_ops, ARRAY_SIZE(nl80211_ops));
10034 err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
10038 err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
10042 err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
10046 err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
10050 #ifdef CONFIG_NL80211_TESTMODE
10051 err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
10056 err = netlink_register_notifier(&nl80211_netlink_notifier);
10062 genl_unregister_family(&nl80211_fam);
10066 void nl80211_exit(void)
10068 netlink_unregister_notifier(&nl80211_netlink_notifier);
10069 genl_unregister_family(&nl80211_fam);