1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3 * Interface handling
4 *
5 * Copyright 2002-2005, Instant802 Networks, Inc.
6 * Copyright 2005-2006, Devicescape Software, Inc.
7 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
8 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
9 * Copyright 2013-2014 Intel Mobile Communications GmbH
10 * Copyright (c) 2016 Intel Deutschland GmbH
11 * Copyright (C) 2018-2021 Intel Corporation
12 */
13 #include <linux/slab.h>
14 #include <linux/kernel.h>
15 #include <linux/if_arp.h>
16 #include <linux/netdevice.h>
17 #include <linux/rtnetlink.h>
18 #include <linux/kcov.h>
19 #include <net/mac80211.h>
20 #include <net/ieee80211_radiotap.h>
21 #include "ieee80211_i.h"
22 #include "sta_info.h"
23 #include "debugfs_netdev.h"
24 #include "mesh.h"
25 #include "led.h"
26 #include "driver-ops.h"
27 #include "wme.h"
28 #include "rate.h"
29
30 /**
31 * DOC: Interface list locking
32 *
33 * The interface list in each struct ieee80211_local is protected
34 * three-fold:
35 *
36 * (1) modifications may only be done under the RTNL
37 * (2) modifications and readers are protected against each other by
38 * the iflist_mtx.
39 * (3) modifications are done in an RCU manner so atomic readers
40 * can traverse the list in RCU-safe blocks.
41 *
42 * As a consequence, reads (traversals) of the list can be protected
43 * by either the RTNL, the iflist_mtx or RCU.
44 */
45
46 static void ieee80211_iface_work(struct work_struct *work);
47
__ieee80211_recalc_txpower(struct ieee80211_sub_if_data * sdata)48 bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
49 {
50 struct ieee80211_chanctx_conf *chanctx_conf;
51 int power;
52
53 rcu_read_lock();
54 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
55 if (!chanctx_conf) {
56 rcu_read_unlock();
57 return false;
58 }
59
60 power = ieee80211_chandef_max_power(&chanctx_conf->def);
61 rcu_read_unlock();
62
63 if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
64 power = min(power, sdata->user_power_level);
65
66 if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
67 power = min(power, sdata->ap_power_level);
68
69 if (power != sdata->vif.bss_conf.txpower) {
70 sdata->vif.bss_conf.txpower = power;
71 ieee80211_hw_config(sdata->local, 0);
72 return true;
73 }
74
75 return false;
76 }
77
ieee80211_recalc_txpower(struct ieee80211_sub_if_data * sdata,bool update_bss)78 void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata,
79 bool update_bss)
80 {
81 if (__ieee80211_recalc_txpower(sdata) ||
82 (update_bss && ieee80211_sdata_running(sdata)))
83 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER);
84 }
85
__ieee80211_idle_off(struct ieee80211_local * local)86 static u32 __ieee80211_idle_off(struct ieee80211_local *local)
87 {
88 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
89 return 0;
90
91 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
92 return IEEE80211_CONF_CHANGE_IDLE;
93 }
94
__ieee80211_idle_on(struct ieee80211_local * local)95 static u32 __ieee80211_idle_on(struct ieee80211_local *local)
96 {
97 if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
98 return 0;
99
100 ieee80211_flush_queues(local, NULL, false);
101
102 local->hw.conf.flags |= IEEE80211_CONF_IDLE;
103 return IEEE80211_CONF_CHANGE_IDLE;
104 }
105
__ieee80211_recalc_idle(struct ieee80211_local * local,bool force_active)106 static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
107 bool force_active)
108 {
109 bool working, scanning, active;
110 unsigned int led_trig_start = 0, led_trig_stop = 0;
111
112 lockdep_assert_held(&local->mtx);
113
114 active = force_active ||
115 !list_empty(&local->chanctx_list) ||
116 local->monitors;
117
118 working = !local->ops->remain_on_channel &&
119 !list_empty(&local->roc_list);
120
121 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
122 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
123
124 if (working || scanning)
125 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
126 else
127 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
128
129 if (active)
130 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
131 else
132 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
133
134 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
135
136 if (working || scanning || active)
137 return __ieee80211_idle_off(local);
138 return __ieee80211_idle_on(local);
139 }
140
ieee80211_idle_off(struct ieee80211_local * local)141 u32 ieee80211_idle_off(struct ieee80211_local *local)
142 {
143 return __ieee80211_recalc_idle(local, true);
144 }
145
ieee80211_recalc_idle(struct ieee80211_local * local)146 void ieee80211_recalc_idle(struct ieee80211_local *local)
147 {
148 u32 change = __ieee80211_recalc_idle(local, false);
149 if (change)
150 ieee80211_hw_config(local, change);
151 }
152
ieee80211_verify_mac(struct ieee80211_sub_if_data * sdata,u8 * addr,bool check_dup)153 static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
154 bool check_dup)
155 {
156 struct ieee80211_local *local = sdata->local;
157 struct ieee80211_sub_if_data *iter;
158 u64 new, mask, tmp;
159 u8 *m;
160 int ret = 0;
161
162 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
163 return 0;
164
165 m = addr;
166 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
167 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
168 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
169
170 m = local->hw.wiphy->addr_mask;
171 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
172 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
173 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
174
175 if (!check_dup)
176 return ret;
177
178 mutex_lock(&local->iflist_mtx);
179 list_for_each_entry(iter, &local->interfaces, list) {
180 if (iter == sdata)
181 continue;
182
183 if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
184 !(iter->u.mntr.flags & MONITOR_FLAG_ACTIVE))
185 continue;
186
187 m = iter->vif.addr;
188 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
189 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
190 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
191
192 if ((new & ~mask) != (tmp & ~mask)) {
193 ret = -EINVAL;
194 break;
195 }
196 }
197 mutex_unlock(&local->iflist_mtx);
198
199 return ret;
200 }
201
ieee80211_change_mac(struct net_device * dev,void * addr)202 static int ieee80211_change_mac(struct net_device *dev, void *addr)
203 {
204 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
205 struct sockaddr *sa = addr;
206 bool check_dup = true;
207 int ret;
208
209 if (ieee80211_sdata_running(sdata))
210 return -EBUSY;
211
212 if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
213 !(sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE))
214 check_dup = false;
215
216 ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
217 if (ret)
218 return ret;
219
220 ret = eth_mac_addr(dev, sa);
221
222 if (ret == 0)
223 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
224
225 return ret;
226 }
227
identical_mac_addr_allowed(int type1,int type2)228 static inline int identical_mac_addr_allowed(int type1, int type2)
229 {
230 return type1 == NL80211_IFTYPE_MONITOR ||
231 type2 == NL80211_IFTYPE_MONITOR ||
232 type1 == NL80211_IFTYPE_P2P_DEVICE ||
233 type2 == NL80211_IFTYPE_P2P_DEVICE ||
234 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
235 (type1 == NL80211_IFTYPE_AP_VLAN &&
236 (type2 == NL80211_IFTYPE_AP ||
237 type2 == NL80211_IFTYPE_AP_VLAN));
238 }
239
ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype iftype)240 static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
241 enum nl80211_iftype iftype)
242 {
243 struct ieee80211_local *local = sdata->local;
244 struct ieee80211_sub_if_data *nsdata;
245 int ret;
246
247 ASSERT_RTNL();
248
249 /* we hold the RTNL here so can safely walk the list */
250 list_for_each_entry(nsdata, &local->interfaces, list) {
251 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
252 /*
253 * Only OCB and monitor mode may coexist
254 */
255 if ((sdata->vif.type == NL80211_IFTYPE_OCB &&
256 nsdata->vif.type != NL80211_IFTYPE_MONITOR) ||
257 (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
258 nsdata->vif.type == NL80211_IFTYPE_OCB))
259 return -EBUSY;
260
261 /*
262 * Allow only a single IBSS interface to be up at any
263 * time. This is restricted because beacon distribution
264 * cannot work properly if both are in the same IBSS.
265 *
266 * To remove this restriction we'd have to disallow them
267 * from setting the same SSID on different IBSS interfaces
268 * belonging to the same hardware. Then, however, we're
269 * faced with having to adopt two different TSF timers...
270 */
271 if (iftype == NL80211_IFTYPE_ADHOC &&
272 nsdata->vif.type == NL80211_IFTYPE_ADHOC)
273 return -EBUSY;
274 /*
275 * will not add another interface while any channel
276 * switch is active.
277 */
278 if (nsdata->vif.csa_active)
279 return -EBUSY;
280
281 /*
282 * The remaining checks are only performed for interfaces
283 * with the same MAC address.
284 */
285 if (!ether_addr_equal(sdata->vif.addr,
286 nsdata->vif.addr))
287 continue;
288
289 /*
290 * check whether it may have the same address
291 */
292 if (!identical_mac_addr_allowed(iftype,
293 nsdata->vif.type))
294 return -ENOTUNIQ;
295
296 /*
297 * can only add VLANs to enabled APs
298 */
299 if (iftype == NL80211_IFTYPE_AP_VLAN &&
300 nsdata->vif.type == NL80211_IFTYPE_AP)
301 sdata->bss = &nsdata->u.ap;
302 }
303 }
304
305 mutex_lock(&local->chanctx_mtx);
306 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
307 mutex_unlock(&local->chanctx_mtx);
308 return ret;
309 }
310
ieee80211_check_queues(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype iftype)311 static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata,
312 enum nl80211_iftype iftype)
313 {
314 int n_queues = sdata->local->hw.queues;
315 int i;
316
317 if (iftype == NL80211_IFTYPE_NAN)
318 return 0;
319
320 if (iftype != NL80211_IFTYPE_P2P_DEVICE) {
321 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
322 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
323 IEEE80211_INVAL_HW_QUEUE))
324 return -EINVAL;
325 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
326 n_queues))
327 return -EINVAL;
328 }
329 }
330
331 if ((iftype != NL80211_IFTYPE_AP &&
332 iftype != NL80211_IFTYPE_P2P_GO &&
333 iftype != NL80211_IFTYPE_MESH_POINT) ||
334 !ieee80211_hw_check(&sdata->local->hw, QUEUE_CONTROL)) {
335 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
336 return 0;
337 }
338
339 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
340 return -EINVAL;
341
342 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
343 return -EINVAL;
344
345 return 0;
346 }
347
ieee80211_open(struct net_device * dev)348 static int ieee80211_open(struct net_device *dev)
349 {
350 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
351 int err;
352
353 /* fail early if user set an invalid address */
354 if (!is_valid_ether_addr(dev->dev_addr))
355 return -EADDRNOTAVAIL;
356
357 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
358 if (err)
359 return err;
360
361 wiphy_lock(sdata->local->hw.wiphy);
362 err = ieee80211_do_open(&sdata->wdev, true);
363 wiphy_unlock(sdata->local->hw.wiphy);
364
365 return err;
366 }
367
ieee80211_do_stop(struct ieee80211_sub_if_data * sdata,bool going_down)368 static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata, bool going_down)
369 {
370 struct ieee80211_local *local = sdata->local;
371 unsigned long flags;
372 struct sk_buff *skb, *tmp;
373 u32 hw_reconf_flags = 0;
374 int i, flushed;
375 struct ps_data *ps;
376 struct cfg80211_chan_def chandef;
377 bool cancel_scan;
378 struct cfg80211_nan_func *func;
379
380 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
381
382 cancel_scan = rcu_access_pointer(local->scan_sdata) == sdata;
383 if (cancel_scan)
384 ieee80211_scan_cancel(local);
385
386 /*
387 * Stop TX on this interface first.
388 */
389 if (sdata->dev)
390 netif_tx_stop_all_queues(sdata->dev);
391
392 ieee80211_roc_purge(local, sdata);
393
394 switch (sdata->vif.type) {
395 case NL80211_IFTYPE_STATION:
396 ieee80211_mgd_stop(sdata);
397 break;
398 case NL80211_IFTYPE_ADHOC:
399 ieee80211_ibss_stop(sdata);
400 break;
401 case NL80211_IFTYPE_MONITOR:
402 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES)
403 break;
404 list_del_rcu(&sdata->u.mntr.list);
405 break;
406 default:
407 break;
408 }
409
410 /*
411 * Remove all stations associated with this interface.
412 *
413 * This must be done before calling ops->remove_interface()
414 * because otherwise we can later invoke ops->sta_notify()
415 * whenever the STAs are removed, and that invalidates driver
416 * assumptions about always getting a vif pointer that is valid
417 * (because if we remove a STA after ops->remove_interface()
418 * the driver will have removed the vif info already!)
419 *
420 * For AP_VLANs stations may exist since there's nothing else that
421 * would have removed them, but in other modes there shouldn't
422 * be any stations.
423 */
424 flushed = sta_info_flush(sdata);
425 WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP_VLAN && flushed > 0);
426
427 /* don't count this interface for allmulti while it is down */
428 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
429 atomic_dec(&local->iff_allmultis);
430
431 if (sdata->vif.type == NL80211_IFTYPE_AP) {
432 local->fif_pspoll--;
433 local->fif_probe_req--;
434 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
435 local->fif_probe_req--;
436 }
437
438 if (sdata->dev) {
439 netif_addr_lock_bh(sdata->dev);
440 spin_lock_bh(&local->filter_lock);
441 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
442 sdata->dev->addr_len);
443 spin_unlock_bh(&local->filter_lock);
444 netif_addr_unlock_bh(sdata->dev);
445 }
446
447 del_timer_sync(&local->dynamic_ps_timer);
448 cancel_work_sync(&local->dynamic_ps_enable_work);
449
450 cancel_work_sync(&sdata->recalc_smps);
451 sdata_lock(sdata);
452 mutex_lock(&local->mtx);
453 sdata->vif.csa_active = false;
454 if (sdata->vif.type == NL80211_IFTYPE_STATION)
455 sdata->u.mgd.csa_waiting_bcn = false;
456 if (sdata->csa_block_tx) {
457 ieee80211_wake_vif_queues(local, sdata,
458 IEEE80211_QUEUE_STOP_REASON_CSA);
459 sdata->csa_block_tx = false;
460 }
461 mutex_unlock(&local->mtx);
462 sdata_unlock(sdata);
463
464 cancel_work_sync(&sdata->csa_finalize_work);
465 cancel_work_sync(&sdata->color_change_finalize_work);
466
467 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
468
469 if (sdata->wdev.cac_started) {
470 chandef = sdata->vif.bss_conf.chandef;
471 WARN_ON(local->suspended);
472 mutex_lock(&local->mtx);
473 ieee80211_vif_release_channel(sdata);
474 mutex_unlock(&local->mtx);
475 cfg80211_cac_event(sdata->dev, &chandef,
476 NL80211_RADAR_CAC_ABORTED,
477 GFP_KERNEL);
478 }
479
480 if (sdata->vif.type == NL80211_IFTYPE_AP) {
481 WARN_ON(!list_empty(&sdata->u.ap.vlans));
482 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
483 /* remove all packets in parent bc_buf pointing to this dev */
484 ps = &sdata->bss->ps;
485
486 spin_lock_irqsave(&ps->bc_buf.lock, flags);
487 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
488 if (skb->dev == sdata->dev) {
489 __skb_unlink(skb, &ps->bc_buf);
490 local->total_ps_buffered--;
491 ieee80211_free_txskb(&local->hw, skb);
492 }
493 }
494 spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
495 }
496
497 if (going_down)
498 local->open_count--;
499
500 switch (sdata->vif.type) {
501 case NL80211_IFTYPE_AP_VLAN:
502 mutex_lock(&local->mtx);
503 list_del(&sdata->u.vlan.list);
504 mutex_unlock(&local->mtx);
505 RCU_INIT_POINTER(sdata->vif.chanctx_conf, NULL);
506 /* see comment in the default case below */
507 ieee80211_free_keys(sdata, true);
508 /* no need to tell driver */
509 break;
510 case NL80211_IFTYPE_MONITOR:
511 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES) {
512 local->cooked_mntrs--;
513 break;
514 }
515
516 local->monitors--;
517 if (local->monitors == 0) {
518 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
519 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
520 }
521
522 ieee80211_adjust_monitor_flags(sdata, -1);
523 break;
524 case NL80211_IFTYPE_NAN:
525 /* clean all the functions */
526 spin_lock_bh(&sdata->u.nan.func_lock);
527
528 idr_for_each_entry(&sdata->u.nan.function_inst_ids, func, i) {
529 idr_remove(&sdata->u.nan.function_inst_ids, i);
530 cfg80211_free_nan_func(func);
531 }
532 idr_destroy(&sdata->u.nan.function_inst_ids);
533
534 spin_unlock_bh(&sdata->u.nan.func_lock);
535 break;
536 case NL80211_IFTYPE_P2P_DEVICE:
537 /* relies on synchronize_rcu() below */
538 RCU_INIT_POINTER(local->p2p_sdata, NULL);
539 fallthrough;
540 default:
541 cancel_work_sync(&sdata->work);
542 /*
543 * When we get here, the interface is marked down.
544 * Free the remaining keys, if there are any
545 * (which can happen in AP mode if userspace sets
546 * keys before the interface is operating)
547 *
548 * Force the key freeing to always synchronize_net()
549 * to wait for the RX path in case it is using this
550 * interface enqueuing frames at this very time on
551 * another CPU.
552 */
553 ieee80211_free_keys(sdata, true);
554 skb_queue_purge(&sdata->skb_queue);
555 skb_queue_purge(&sdata->status_queue);
556 }
557
558 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
559 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
560 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
561 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
562 if (info->control.vif == &sdata->vif) {
563 __skb_unlink(skb, &local->pending[i]);
564 ieee80211_free_txskb(&local->hw, skb);
565 }
566 }
567 }
568 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
569
570 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
571 ieee80211_txq_remove_vlan(local, sdata);
572
573 sdata->bss = NULL;
574
575 if (local->open_count == 0)
576 ieee80211_clear_tx_pending(local);
577
578 sdata->vif.bss_conf.beacon_int = 0;
579
580 /*
581 * If the interface goes down while suspended, presumably because
582 * the device was unplugged and that happens before our resume,
583 * then the driver is already unconfigured and the remainder of
584 * this function isn't needed.
585 * XXX: what about WoWLAN? If the device has software state, e.g.
586 * memory allocated, it might expect teardown commands from
587 * mac80211 here?
588 */
589 if (local->suspended) {
590 WARN_ON(local->wowlan);
591 WARN_ON(rcu_access_pointer(local->monitor_sdata));
592 return;
593 }
594
595 switch (sdata->vif.type) {
596 case NL80211_IFTYPE_AP_VLAN:
597 break;
598 case NL80211_IFTYPE_MONITOR:
599 if (local->monitors == 0)
600 ieee80211_del_virtual_monitor(local);
601
602 mutex_lock(&local->mtx);
603 ieee80211_recalc_idle(local);
604 mutex_unlock(&local->mtx);
605
606 if (!(sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE))
607 break;
608
609 fallthrough;
610 default:
611 if (going_down)
612 drv_remove_interface(local, sdata);
613 }
614
615 ieee80211_recalc_ps(local);
616
617 if (cancel_scan)
618 flush_delayed_work(&local->scan_work);
619
620 if (local->open_count == 0) {
621 ieee80211_stop_device(local);
622
623 /* no reconfiguring after stop! */
624 return;
625 }
626
627 /* do after stop to avoid reconfiguring when we stop anyway */
628 ieee80211_configure_filter(local);
629 ieee80211_hw_config(local, hw_reconf_flags);
630
631 if (local->monitors == local->open_count)
632 ieee80211_add_virtual_monitor(local);
633 }
634
ieee80211_stop(struct net_device * dev)635 static int ieee80211_stop(struct net_device *dev)
636 {
637 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
638
639 /* close all dependent VLAN interfaces before locking wiphy */
640 if (sdata->vif.type == NL80211_IFTYPE_AP) {
641 struct ieee80211_sub_if_data *vlan, *tmpsdata;
642
643 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
644 u.vlan.list)
645 dev_close(vlan->dev);
646 }
647
648 wiphy_lock(sdata->local->hw.wiphy);
649 ieee80211_do_stop(sdata, true);
650 wiphy_unlock(sdata->local->hw.wiphy);
651
652 return 0;
653 }
654
ieee80211_set_multicast_list(struct net_device * dev)655 static void ieee80211_set_multicast_list(struct net_device *dev)
656 {
657 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
658 struct ieee80211_local *local = sdata->local;
659 int allmulti, sdata_allmulti;
660
661 allmulti = !!(dev->flags & IFF_ALLMULTI);
662 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
663
664 if (allmulti != sdata_allmulti) {
665 if (dev->flags & IFF_ALLMULTI)
666 atomic_inc(&local->iff_allmultis);
667 else
668 atomic_dec(&local->iff_allmultis);
669 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
670 }
671
672 spin_lock_bh(&local->filter_lock);
673 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
674 spin_unlock_bh(&local->filter_lock);
675 ieee80211_queue_work(&local->hw, &local->reconfig_filter);
676 }
677
678 /*
679 * Called when the netdev is removed or, by the code below, before
680 * the interface type changes.
681 */
ieee80211_teardown_sdata(struct ieee80211_sub_if_data * sdata)682 static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
683 {
684 /* free extra data */
685 ieee80211_free_keys(sdata, false);
686
687 ieee80211_debugfs_remove_netdev(sdata);
688
689 ieee80211_destroy_frag_cache(&sdata->frags);
690
691 if (ieee80211_vif_is_mesh(&sdata->vif))
692 ieee80211_mesh_teardown_sdata(sdata);
693 }
694
ieee80211_uninit(struct net_device * dev)695 static void ieee80211_uninit(struct net_device *dev)
696 {
697 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
698 }
699
ieee80211_netdev_select_queue(struct net_device * dev,struct sk_buff * skb,struct net_device * sb_dev)700 static u16 ieee80211_netdev_select_queue(struct net_device *dev,
701 struct sk_buff *skb,
702 struct net_device *sb_dev)
703 {
704 return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb);
705 }
706
707 static void
ieee80211_get_stats64(struct net_device * dev,struct rtnl_link_stats64 * stats)708 ieee80211_get_stats64(struct net_device *dev, struct rtnl_link_stats64 *stats)
709 {
710 dev_fetch_sw_netstats(stats, dev->tstats);
711 }
712
713 static const struct net_device_ops ieee80211_dataif_ops = {
714 .ndo_open = ieee80211_open,
715 .ndo_stop = ieee80211_stop,
716 .ndo_uninit = ieee80211_uninit,
717 .ndo_start_xmit = ieee80211_subif_start_xmit,
718 .ndo_set_rx_mode = ieee80211_set_multicast_list,
719 .ndo_set_mac_address = ieee80211_change_mac,
720 .ndo_select_queue = ieee80211_netdev_select_queue,
721 .ndo_get_stats64 = ieee80211_get_stats64,
722 };
723
ieee80211_monitor_select_queue(struct net_device * dev,struct sk_buff * skb,struct net_device * sb_dev)724 static u16 ieee80211_monitor_select_queue(struct net_device *dev,
725 struct sk_buff *skb,
726 struct net_device *sb_dev)
727 {
728 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
729 struct ieee80211_local *local = sdata->local;
730 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
731 struct ieee80211_hdr *hdr;
732 int len_rthdr;
733
734 if (local->hw.queues < IEEE80211_NUM_ACS)
735 return 0;
736
737 /* reset flags and info before parsing radiotap header */
738 memset(info, 0, sizeof(*info));
739
740 if (!ieee80211_parse_tx_radiotap(skb, dev))
741 return 0; /* doesn't matter, frame will be dropped */
742
743 len_rthdr = ieee80211_get_radiotap_len(skb->data);
744 hdr = (struct ieee80211_hdr *)(skb->data + len_rthdr);
745 if (skb->len < len_rthdr + 2 ||
746 skb->len < len_rthdr + ieee80211_hdrlen(hdr->frame_control))
747 return 0; /* doesn't matter, frame will be dropped */
748
749 return ieee80211_select_queue_80211(sdata, skb, hdr);
750 }
751
752 static const struct net_device_ops ieee80211_monitorif_ops = {
753 .ndo_open = ieee80211_open,
754 .ndo_stop = ieee80211_stop,
755 .ndo_uninit = ieee80211_uninit,
756 .ndo_start_xmit = ieee80211_monitor_start_xmit,
757 .ndo_set_rx_mode = ieee80211_set_multicast_list,
758 .ndo_set_mac_address = ieee80211_change_mac,
759 .ndo_select_queue = ieee80211_monitor_select_queue,
760 .ndo_get_stats64 = ieee80211_get_stats64,
761 };
762
763 static const struct net_device_ops ieee80211_dataif_8023_ops = {
764 .ndo_open = ieee80211_open,
765 .ndo_stop = ieee80211_stop,
766 .ndo_uninit = ieee80211_uninit,
767 .ndo_start_xmit = ieee80211_subif_start_xmit_8023,
768 .ndo_set_rx_mode = ieee80211_set_multicast_list,
769 .ndo_set_mac_address = ieee80211_change_mac,
770 .ndo_select_queue = ieee80211_netdev_select_queue,
771 .ndo_get_stats64 = ieee80211_get_stats64,
772 };
773
ieee80211_iftype_supports_hdr_offload(enum nl80211_iftype iftype)774 static bool ieee80211_iftype_supports_hdr_offload(enum nl80211_iftype iftype)
775 {
776 switch (iftype) {
777 /* P2P GO and client are mapped to AP/STATION types */
778 case NL80211_IFTYPE_AP:
779 case NL80211_IFTYPE_STATION:
780 return true;
781 default:
782 return false;
783 }
784 }
785
ieee80211_set_sdata_offload_flags(struct ieee80211_sub_if_data * sdata)786 static bool ieee80211_set_sdata_offload_flags(struct ieee80211_sub_if_data *sdata)
787 {
788 struct ieee80211_local *local = sdata->local;
789 u32 flags;
790
791 flags = sdata->vif.offload_flags;
792
793 if (ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD) &&
794 ieee80211_iftype_supports_hdr_offload(sdata->vif.type)) {
795 flags |= IEEE80211_OFFLOAD_ENCAP_ENABLED;
796
797 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_FRAG) &&
798 local->hw.wiphy->frag_threshold != (u32)-1)
799 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
800
801 if (local->monitors)
802 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
803 } else {
804 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
805 }
806
807 if (ieee80211_hw_check(&local->hw, SUPPORTS_RX_DECAP_OFFLOAD) &&
808 ieee80211_iftype_supports_hdr_offload(sdata->vif.type)) {
809 flags |= IEEE80211_OFFLOAD_DECAP_ENABLED;
810
811 if (local->monitors &&
812 !ieee80211_hw_check(&local->hw, SUPPORTS_CONC_MON_RX_DECAP))
813 flags &= ~IEEE80211_OFFLOAD_DECAP_ENABLED;
814 } else {
815 flags &= ~IEEE80211_OFFLOAD_DECAP_ENABLED;
816 }
817
818 if (sdata->vif.offload_flags == flags)
819 return false;
820
821 sdata->vif.offload_flags = flags;
822 ieee80211_check_fast_rx_iface(sdata);
823 return true;
824 }
825
ieee80211_set_vif_encap_ops(struct ieee80211_sub_if_data * sdata)826 static void ieee80211_set_vif_encap_ops(struct ieee80211_sub_if_data *sdata)
827 {
828 struct ieee80211_local *local = sdata->local;
829 struct ieee80211_sub_if_data *bss = sdata;
830 bool enabled;
831
832 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
833 if (!sdata->bss)
834 return;
835
836 bss = container_of(sdata->bss, struct ieee80211_sub_if_data, u.ap);
837 }
838
839 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD) ||
840 !ieee80211_iftype_supports_hdr_offload(bss->vif.type))
841 return;
842
843 enabled = bss->vif.offload_flags & IEEE80211_OFFLOAD_ENCAP_ENABLED;
844 if (sdata->wdev.use_4addr &&
845 !(bss->vif.offload_flags & IEEE80211_OFFLOAD_ENCAP_4ADDR))
846 enabled = false;
847
848 sdata->dev->netdev_ops = enabled ? &ieee80211_dataif_8023_ops :
849 &ieee80211_dataif_ops;
850 }
851
ieee80211_recalc_sdata_offload(struct ieee80211_sub_if_data * sdata)852 static void ieee80211_recalc_sdata_offload(struct ieee80211_sub_if_data *sdata)
853 {
854 struct ieee80211_local *local = sdata->local;
855 struct ieee80211_sub_if_data *vsdata;
856
857 if (ieee80211_set_sdata_offload_flags(sdata)) {
858 drv_update_vif_offload(local, sdata);
859 ieee80211_set_vif_encap_ops(sdata);
860 }
861
862 list_for_each_entry(vsdata, &local->interfaces, list) {
863 if (vsdata->vif.type != NL80211_IFTYPE_AP_VLAN ||
864 vsdata->bss != &sdata->u.ap)
865 continue;
866
867 ieee80211_set_vif_encap_ops(vsdata);
868 }
869 }
870
ieee80211_recalc_offload(struct ieee80211_local * local)871 void ieee80211_recalc_offload(struct ieee80211_local *local)
872 {
873 struct ieee80211_sub_if_data *sdata;
874
875 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD))
876 return;
877
878 mutex_lock(&local->iflist_mtx);
879
880 list_for_each_entry(sdata, &local->interfaces, list) {
881 if (!ieee80211_sdata_running(sdata))
882 continue;
883
884 ieee80211_recalc_sdata_offload(sdata);
885 }
886
887 mutex_unlock(&local->iflist_mtx);
888 }
889
ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data * sdata,const int offset)890 void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
891 const int offset)
892 {
893 struct ieee80211_local *local = sdata->local;
894 u32 flags = sdata->u.mntr.flags;
895
896 #define ADJUST(_f, _s) do { \
897 if (flags & MONITOR_FLAG_##_f) \
898 local->fif_##_s += offset; \
899 } while (0)
900
901 ADJUST(FCSFAIL, fcsfail);
902 ADJUST(PLCPFAIL, plcpfail);
903 ADJUST(CONTROL, control);
904 ADJUST(CONTROL, pspoll);
905 ADJUST(OTHER_BSS, other_bss);
906
907 #undef ADJUST
908 }
909
ieee80211_set_default_queues(struct ieee80211_sub_if_data * sdata)910 static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
911 {
912 struct ieee80211_local *local = sdata->local;
913 int i;
914
915 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
916 if (ieee80211_hw_check(&local->hw, QUEUE_CONTROL))
917 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
918 else if (local->hw.queues >= IEEE80211_NUM_ACS)
919 sdata->vif.hw_queue[i] = i;
920 else
921 sdata->vif.hw_queue[i] = 0;
922 }
923 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
924 }
925
ieee80211_add_virtual_monitor(struct ieee80211_local * local)926 int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
927 {
928 struct ieee80211_sub_if_data *sdata;
929 int ret;
930
931 if (!ieee80211_hw_check(&local->hw, WANT_MONITOR_VIF))
932 return 0;
933
934 ASSERT_RTNL();
935 lockdep_assert_wiphy(local->hw.wiphy);
936
937 if (local->monitor_sdata)
938 return 0;
939
940 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
941 if (!sdata)
942 return -ENOMEM;
943
944 /* set up data */
945 sdata->local = local;
946 sdata->vif.type = NL80211_IFTYPE_MONITOR;
947 snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
948 wiphy_name(local->hw.wiphy));
949 sdata->wdev.iftype = NL80211_IFTYPE_MONITOR;
950
951 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
952
953 ieee80211_set_default_queues(sdata);
954
955 ret = drv_add_interface(local, sdata);
956 if (WARN_ON(ret)) {
957 /* ok .. stupid driver, it asked for this! */
958 kfree(sdata);
959 return ret;
960 }
961
962 set_bit(SDATA_STATE_RUNNING, &sdata->state);
963
964 ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR);
965 if (ret) {
966 kfree(sdata);
967 return ret;
968 }
969
970 mutex_lock(&local->iflist_mtx);
971 rcu_assign_pointer(local->monitor_sdata, sdata);
972 mutex_unlock(&local->iflist_mtx);
973
974 mutex_lock(&local->mtx);
975 ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef,
976 IEEE80211_CHANCTX_EXCLUSIVE);
977 mutex_unlock(&local->mtx);
978 if (ret) {
979 mutex_lock(&local->iflist_mtx);
980 RCU_INIT_POINTER(local->monitor_sdata, NULL);
981 mutex_unlock(&local->iflist_mtx);
982 synchronize_net();
983 drv_remove_interface(local, sdata);
984 kfree(sdata);
985 return ret;
986 }
987
988 skb_queue_head_init(&sdata->skb_queue);
989 skb_queue_head_init(&sdata->status_queue);
990 INIT_WORK(&sdata->work, ieee80211_iface_work);
991
992 return 0;
993 }
994
ieee80211_del_virtual_monitor(struct ieee80211_local * local)995 void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
996 {
997 struct ieee80211_sub_if_data *sdata;
998
999 if (!ieee80211_hw_check(&local->hw, WANT_MONITOR_VIF))
1000 return;
1001
1002 ASSERT_RTNL();
1003 lockdep_assert_wiphy(local->hw.wiphy);
1004
1005 mutex_lock(&local->iflist_mtx);
1006
1007 sdata = rcu_dereference_protected(local->monitor_sdata,
1008 lockdep_is_held(&local->iflist_mtx));
1009 if (!sdata) {
1010 mutex_unlock(&local->iflist_mtx);
1011 return;
1012 }
1013
1014 RCU_INIT_POINTER(local->monitor_sdata, NULL);
1015 mutex_unlock(&local->iflist_mtx);
1016
1017 synchronize_net();
1018
1019 mutex_lock(&local->mtx);
1020 ieee80211_vif_release_channel(sdata);
1021 mutex_unlock(&local->mtx);
1022
1023 drv_remove_interface(local, sdata);
1024
1025 kfree(sdata);
1026 }
1027
1028 /*
1029 * NOTE: Be very careful when changing this function, it must NOT return
1030 * an error on interface type changes that have been pre-checked, so most
1031 * checks should be in ieee80211_check_concurrent_iface.
1032 */
ieee80211_do_open(struct wireless_dev * wdev,bool coming_up)1033 int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
1034 {
1035 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
1036 struct net_device *dev = wdev->netdev;
1037 struct ieee80211_local *local = sdata->local;
1038 u32 changed = 0;
1039 int res;
1040 u32 hw_reconf_flags = 0;
1041
1042 switch (sdata->vif.type) {
1043 case NL80211_IFTYPE_AP_VLAN: {
1044 struct ieee80211_sub_if_data *master;
1045
1046 if (!sdata->bss)
1047 return -ENOLINK;
1048
1049 mutex_lock(&local->mtx);
1050 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
1051 mutex_unlock(&local->mtx);
1052
1053 master = container_of(sdata->bss,
1054 struct ieee80211_sub_if_data, u.ap);
1055 sdata->control_port_protocol =
1056 master->control_port_protocol;
1057 sdata->control_port_no_encrypt =
1058 master->control_port_no_encrypt;
1059 sdata->control_port_over_nl80211 =
1060 master->control_port_over_nl80211;
1061 sdata->control_port_no_preauth =
1062 master->control_port_no_preauth;
1063 sdata->vif.cab_queue = master->vif.cab_queue;
1064 memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
1065 sizeof(sdata->vif.hw_queue));
1066 sdata->vif.bss_conf.chandef = master->vif.bss_conf.chandef;
1067
1068 mutex_lock(&local->key_mtx);
1069 sdata->crypto_tx_tailroom_needed_cnt +=
1070 master->crypto_tx_tailroom_needed_cnt;
1071 mutex_unlock(&local->key_mtx);
1072
1073 break;
1074 }
1075 case NL80211_IFTYPE_AP:
1076 sdata->bss = &sdata->u.ap;
1077 break;
1078 case NL80211_IFTYPE_MESH_POINT:
1079 case NL80211_IFTYPE_STATION:
1080 case NL80211_IFTYPE_MONITOR:
1081 case NL80211_IFTYPE_ADHOC:
1082 case NL80211_IFTYPE_P2P_DEVICE:
1083 case NL80211_IFTYPE_OCB:
1084 case NL80211_IFTYPE_NAN:
1085 /* no special treatment */
1086 break;
1087 case NL80211_IFTYPE_UNSPECIFIED:
1088 case NUM_NL80211_IFTYPES:
1089 case NL80211_IFTYPE_P2P_CLIENT:
1090 case NL80211_IFTYPE_P2P_GO:
1091 case NL80211_IFTYPE_WDS:
1092 /* cannot happen */
1093 WARN_ON(1);
1094 break;
1095 }
1096
1097 if (local->open_count == 0) {
1098 res = drv_start(local);
1099 if (res)
1100 goto err_del_bss;
1101 /* we're brought up, everything changes */
1102 hw_reconf_flags = ~0;
1103 ieee80211_led_radio(local, true);
1104 ieee80211_mod_tpt_led_trig(local,
1105 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
1106 }
1107
1108 /*
1109 * Copy the hopefully now-present MAC address to
1110 * this interface, if it has the special null one.
1111 */
1112 if (dev && is_zero_ether_addr(dev->dev_addr)) {
1113 memcpy(dev->dev_addr,
1114 local->hw.wiphy->perm_addr,
1115 ETH_ALEN);
1116 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
1117
1118 if (!is_valid_ether_addr(dev->dev_addr)) {
1119 res = -EADDRNOTAVAIL;
1120 goto err_stop;
1121 }
1122 }
1123
1124 switch (sdata->vif.type) {
1125 case NL80211_IFTYPE_AP_VLAN:
1126 /* no need to tell driver, but set carrier and chanctx */
1127 if (rtnl_dereference(sdata->bss->beacon)) {
1128 ieee80211_vif_vlan_copy_chanctx(sdata);
1129 netif_carrier_on(dev);
1130 ieee80211_set_vif_encap_ops(sdata);
1131 } else {
1132 netif_carrier_off(dev);
1133 }
1134 break;
1135 case NL80211_IFTYPE_MONITOR:
1136 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES) {
1137 local->cooked_mntrs++;
1138 break;
1139 }
1140
1141 if (sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE) {
1142 res = drv_add_interface(local, sdata);
1143 if (res)
1144 goto err_stop;
1145 } else if (local->monitors == 0 && local->open_count == 0) {
1146 res = ieee80211_add_virtual_monitor(local);
1147 if (res)
1148 goto err_stop;
1149 }
1150
1151 /* must be before the call to ieee80211_configure_filter */
1152 local->monitors++;
1153 if (local->monitors == 1) {
1154 local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
1155 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
1156 }
1157
1158 ieee80211_adjust_monitor_flags(sdata, 1);
1159 ieee80211_configure_filter(local);
1160 ieee80211_recalc_offload(local);
1161 mutex_lock(&local->mtx);
1162 ieee80211_recalc_idle(local);
1163 mutex_unlock(&local->mtx);
1164
1165 netif_carrier_on(dev);
1166 break;
1167 default:
1168 if (coming_up) {
1169 ieee80211_del_virtual_monitor(local);
1170 ieee80211_set_sdata_offload_flags(sdata);
1171
1172 res = drv_add_interface(local, sdata);
1173 if (res)
1174 goto err_stop;
1175
1176 ieee80211_set_vif_encap_ops(sdata);
1177 res = ieee80211_check_queues(sdata,
1178 ieee80211_vif_type_p2p(&sdata->vif));
1179 if (res)
1180 goto err_del_interface;
1181 }
1182
1183 if (sdata->vif.type == NL80211_IFTYPE_AP) {
1184 local->fif_pspoll++;
1185 local->fif_probe_req++;
1186
1187 ieee80211_configure_filter(local);
1188 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
1189 local->fif_probe_req++;
1190 }
1191
1192 if (sdata->vif.probe_req_reg)
1193 drv_config_iface_filter(local, sdata,
1194 FIF_PROBE_REQ,
1195 FIF_PROBE_REQ);
1196
1197 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE &&
1198 sdata->vif.type != NL80211_IFTYPE_NAN)
1199 changed |= ieee80211_reset_erp_info(sdata);
1200 ieee80211_bss_info_change_notify(sdata, changed);
1201
1202 switch (sdata->vif.type) {
1203 case NL80211_IFTYPE_STATION:
1204 case NL80211_IFTYPE_ADHOC:
1205 case NL80211_IFTYPE_AP:
1206 case NL80211_IFTYPE_MESH_POINT:
1207 case NL80211_IFTYPE_OCB:
1208 netif_carrier_off(dev);
1209 break;
1210 case NL80211_IFTYPE_P2P_DEVICE:
1211 case NL80211_IFTYPE_NAN:
1212 break;
1213 default:
1214 /* not reached */
1215 WARN_ON(1);
1216 }
1217
1218 /*
1219 * Set default queue parameters so drivers don't
1220 * need to initialise the hardware if the hardware
1221 * doesn't start up with sane defaults.
1222 * Enable QoS for anything but station interfaces.
1223 */
1224 ieee80211_set_wmm_default(sdata, true,
1225 sdata->vif.type != NL80211_IFTYPE_STATION);
1226 }
1227
1228 set_bit(SDATA_STATE_RUNNING, &sdata->state);
1229
1230 switch (sdata->vif.type) {
1231 case NL80211_IFTYPE_P2P_DEVICE:
1232 rcu_assign_pointer(local->p2p_sdata, sdata);
1233 break;
1234 case NL80211_IFTYPE_MONITOR:
1235 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES)
1236 break;
1237 list_add_tail_rcu(&sdata->u.mntr.list, &local->mon_list);
1238 break;
1239 default:
1240 break;
1241 }
1242
1243 /*
1244 * set_multicast_list will be invoked by the networking core
1245 * which will check whether any increments here were done in
1246 * error and sync them down to the hardware as filter flags.
1247 */
1248 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
1249 atomic_inc(&local->iff_allmultis);
1250
1251 if (coming_up)
1252 local->open_count++;
1253
1254 if (hw_reconf_flags)
1255 ieee80211_hw_config(local, hw_reconf_flags);
1256
1257 ieee80211_recalc_ps(local);
1258
1259 if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
1260 sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1261 local->ops->wake_tx_queue) {
1262 /* XXX: for AP_VLAN, actually track AP queues */
1263 if (dev)
1264 netif_tx_start_all_queues(dev);
1265 } else if (dev) {
1266 unsigned long flags;
1267 int n_acs = IEEE80211_NUM_ACS;
1268 int ac;
1269
1270 if (local->hw.queues < IEEE80211_NUM_ACS)
1271 n_acs = 1;
1272
1273 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
1274 if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE ||
1275 (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 &&
1276 skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) {
1277 for (ac = 0; ac < n_acs; ac++) {
1278 int ac_queue = sdata->vif.hw_queue[ac];
1279
1280 if (local->queue_stop_reasons[ac_queue] == 0 &&
1281 skb_queue_empty(&local->pending[ac_queue]))
1282 netif_start_subqueue(dev, ac);
1283 }
1284 }
1285 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
1286 }
1287
1288 return 0;
1289 err_del_interface:
1290 drv_remove_interface(local, sdata);
1291 err_stop:
1292 if (!local->open_count)
1293 drv_stop(local);
1294 err_del_bss:
1295 sdata->bss = NULL;
1296 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
1297 mutex_lock(&local->mtx);
1298 list_del(&sdata->u.vlan.list);
1299 mutex_unlock(&local->mtx);
1300 }
1301 /* might already be clear but that doesn't matter */
1302 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
1303 return res;
1304 }
1305
ieee80211_if_free(struct net_device * dev)1306 static void ieee80211_if_free(struct net_device *dev)
1307 {
1308 free_percpu(dev->tstats);
1309 }
1310
ieee80211_if_setup(struct net_device * dev)1311 static void ieee80211_if_setup(struct net_device *dev)
1312 {
1313 ether_setup(dev);
1314 dev->priv_flags &= ~IFF_TX_SKB_SHARING;
1315 dev->netdev_ops = &ieee80211_dataif_ops;
1316 dev->needs_free_netdev = true;
1317 dev->priv_destructor = ieee80211_if_free;
1318 }
1319
ieee80211_if_setup_no_queue(struct net_device * dev)1320 static void ieee80211_if_setup_no_queue(struct net_device *dev)
1321 {
1322 ieee80211_if_setup(dev);
1323 dev->priv_flags |= IFF_NO_QUEUE;
1324 }
1325
ieee80211_iface_process_skb(struct ieee80211_local * local,struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)1326 static void ieee80211_iface_process_skb(struct ieee80211_local *local,
1327 struct ieee80211_sub_if_data *sdata,
1328 struct sk_buff *skb)
1329 {
1330 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1331
1332 if (ieee80211_is_action(mgmt->frame_control) &&
1333 mgmt->u.action.category == WLAN_CATEGORY_BACK) {
1334 struct sta_info *sta;
1335 int len = skb->len;
1336
1337 mutex_lock(&local->sta_mtx);
1338 sta = sta_info_get_bss(sdata, mgmt->sa);
1339 if (sta) {
1340 switch (mgmt->u.action.u.addba_req.action_code) {
1341 case WLAN_ACTION_ADDBA_REQ:
1342 ieee80211_process_addba_request(local, sta,
1343 mgmt, len);
1344 break;
1345 case WLAN_ACTION_ADDBA_RESP:
1346 ieee80211_process_addba_resp(local, sta,
1347 mgmt, len);
1348 break;
1349 case WLAN_ACTION_DELBA:
1350 ieee80211_process_delba(sdata, sta,
1351 mgmt, len);
1352 break;
1353 default:
1354 WARN_ON(1);
1355 break;
1356 }
1357 }
1358 mutex_unlock(&local->sta_mtx);
1359 } else if (ieee80211_is_action(mgmt->frame_control) &&
1360 mgmt->u.action.category == WLAN_CATEGORY_VHT) {
1361 switch (mgmt->u.action.u.vht_group_notif.action_code) {
1362 case WLAN_VHT_ACTION_OPMODE_NOTIF: {
1363 struct ieee80211_rx_status *status;
1364 enum nl80211_band band;
1365 struct sta_info *sta;
1366 u8 opmode;
1367
1368 status = IEEE80211_SKB_RXCB(skb);
1369 band = status->band;
1370 opmode = mgmt->u.action.u.vht_opmode_notif.operating_mode;
1371
1372 mutex_lock(&local->sta_mtx);
1373 sta = sta_info_get_bss(sdata, mgmt->sa);
1374
1375 if (sta)
1376 ieee80211_vht_handle_opmode(sdata, sta, opmode,
1377 band);
1378
1379 mutex_unlock(&local->sta_mtx);
1380 break;
1381 }
1382 case WLAN_VHT_ACTION_GROUPID_MGMT:
1383 ieee80211_process_mu_groups(sdata, mgmt);
1384 break;
1385 default:
1386 WARN_ON(1);
1387 break;
1388 }
1389 } else if (ieee80211_is_action(mgmt->frame_control) &&
1390 mgmt->u.action.category == WLAN_CATEGORY_S1G) {
1391 switch (mgmt->u.action.u.s1g.action_code) {
1392 case WLAN_S1G_TWT_TEARDOWN:
1393 case WLAN_S1G_TWT_SETUP:
1394 ieee80211_s1g_rx_twt_action(sdata, skb);
1395 break;
1396 default:
1397 break;
1398 }
1399 } else if (ieee80211_is_ext(mgmt->frame_control)) {
1400 if (sdata->vif.type == NL80211_IFTYPE_STATION)
1401 ieee80211_sta_rx_queued_ext(sdata, skb);
1402 else
1403 WARN_ON(1);
1404 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
1405 struct ieee80211_hdr *hdr = (void *)mgmt;
1406 struct sta_info *sta;
1407
1408 /*
1409 * So the frame isn't mgmt, but frame_control
1410 * is at the right place anyway, of course, so
1411 * the if statement is correct.
1412 *
1413 * Warn if we have other data frame types here,
1414 * they must not get here.
1415 */
1416 WARN_ON(hdr->frame_control &
1417 cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
1418 WARN_ON(!(hdr->seq_ctrl &
1419 cpu_to_le16(IEEE80211_SCTL_FRAG)));
1420 /*
1421 * This was a fragment of a frame, received while
1422 * a block-ack session was active. That cannot be
1423 * right, so terminate the session.
1424 */
1425 mutex_lock(&local->sta_mtx);
1426 sta = sta_info_get_bss(sdata, mgmt->sa);
1427 if (sta) {
1428 u16 tid = ieee80211_get_tid(hdr);
1429
1430 __ieee80211_stop_rx_ba_session(
1431 sta, tid, WLAN_BACK_RECIPIENT,
1432 WLAN_REASON_QSTA_REQUIRE_SETUP,
1433 true);
1434 }
1435 mutex_unlock(&local->sta_mtx);
1436 } else switch (sdata->vif.type) {
1437 case NL80211_IFTYPE_STATION:
1438 ieee80211_sta_rx_queued_mgmt(sdata, skb);
1439 break;
1440 case NL80211_IFTYPE_ADHOC:
1441 ieee80211_ibss_rx_queued_mgmt(sdata, skb);
1442 break;
1443 case NL80211_IFTYPE_MESH_POINT:
1444 if (!ieee80211_vif_is_mesh(&sdata->vif))
1445 break;
1446 ieee80211_mesh_rx_queued_mgmt(sdata, skb);
1447 break;
1448 default:
1449 WARN(1, "frame for unexpected interface type");
1450 break;
1451 }
1452 }
1453
ieee80211_iface_process_status(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)1454 static void ieee80211_iface_process_status(struct ieee80211_sub_if_data *sdata,
1455 struct sk_buff *skb)
1456 {
1457 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1458
1459 if (ieee80211_is_action(mgmt->frame_control) &&
1460 mgmt->u.action.category == WLAN_CATEGORY_S1G) {
1461 switch (mgmt->u.action.u.s1g.action_code) {
1462 case WLAN_S1G_TWT_TEARDOWN:
1463 case WLAN_S1G_TWT_SETUP:
1464 ieee80211_s1g_status_twt_action(sdata, skb);
1465 break;
1466 default:
1467 break;
1468 }
1469 }
1470 }
1471
ieee80211_iface_work(struct work_struct * work)1472 static void ieee80211_iface_work(struct work_struct *work)
1473 {
1474 struct ieee80211_sub_if_data *sdata =
1475 container_of(work, struct ieee80211_sub_if_data, work);
1476 struct ieee80211_local *local = sdata->local;
1477 struct sk_buff *skb;
1478
1479 if (!ieee80211_sdata_running(sdata))
1480 return;
1481
1482 if (test_bit(SCAN_SW_SCANNING, &local->scanning))
1483 return;
1484
1485 if (!ieee80211_can_run_worker(local))
1486 return;
1487
1488 /* first process frames */
1489 while ((skb = skb_dequeue(&sdata->skb_queue))) {
1490 kcov_remote_start_common(skb_get_kcov_handle(skb));
1491
1492 if (skb->protocol == cpu_to_be16(ETH_P_TDLS))
1493 ieee80211_process_tdls_channel_switch(sdata, skb);
1494 else
1495 ieee80211_iface_process_skb(local, sdata, skb);
1496
1497 kfree_skb(skb);
1498 kcov_remote_stop();
1499 }
1500
1501 /* process status queue */
1502 while ((skb = skb_dequeue(&sdata->status_queue))) {
1503 kcov_remote_start_common(skb_get_kcov_handle(skb));
1504
1505 ieee80211_iface_process_status(sdata, skb);
1506 kfree_skb(skb);
1507
1508 kcov_remote_stop();
1509 }
1510
1511 /* then other type-dependent work */
1512 switch (sdata->vif.type) {
1513 case NL80211_IFTYPE_STATION:
1514 ieee80211_sta_work(sdata);
1515 break;
1516 case NL80211_IFTYPE_ADHOC:
1517 ieee80211_ibss_work(sdata);
1518 break;
1519 case NL80211_IFTYPE_MESH_POINT:
1520 if (!ieee80211_vif_is_mesh(&sdata->vif))
1521 break;
1522 ieee80211_mesh_work(sdata);
1523 break;
1524 case NL80211_IFTYPE_OCB:
1525 ieee80211_ocb_work(sdata);
1526 break;
1527 default:
1528 break;
1529 }
1530 }
1531
ieee80211_recalc_smps_work(struct work_struct * work)1532 static void ieee80211_recalc_smps_work(struct work_struct *work)
1533 {
1534 struct ieee80211_sub_if_data *sdata =
1535 container_of(work, struct ieee80211_sub_if_data, recalc_smps);
1536
1537 ieee80211_recalc_smps(sdata);
1538 }
1539
1540 /*
1541 * Helper function to initialise an interface to a specific type.
1542 */
ieee80211_setup_sdata(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype type)1543 static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
1544 enum nl80211_iftype type)
1545 {
1546 static const u8 bssid_wildcard[ETH_ALEN] = {0xff, 0xff, 0xff,
1547 0xff, 0xff, 0xff};
1548
1549 /* clear type-dependent union */
1550 memset(&sdata->u, 0, sizeof(sdata->u));
1551
1552 /* and set some type-dependent values */
1553 sdata->vif.type = type;
1554 sdata->vif.p2p = false;
1555 sdata->wdev.iftype = type;
1556
1557 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
1558 sdata->control_port_no_encrypt = false;
1559 sdata->control_port_over_nl80211 = false;
1560 sdata->control_port_no_preauth = false;
1561 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
1562 sdata->vif.bss_conf.idle = true;
1563 sdata->vif.bss_conf.txpower = INT_MIN; /* unset */
1564
1565 sdata->noack_map = 0;
1566
1567 /* only monitor/p2p-device differ */
1568 if (sdata->dev) {
1569 sdata->dev->netdev_ops = &ieee80211_dataif_ops;
1570 sdata->dev->type = ARPHRD_ETHER;
1571 }
1572
1573 skb_queue_head_init(&sdata->skb_queue);
1574 skb_queue_head_init(&sdata->status_queue);
1575 INIT_WORK(&sdata->work, ieee80211_iface_work);
1576 INIT_WORK(&sdata->recalc_smps, ieee80211_recalc_smps_work);
1577 INIT_WORK(&sdata->csa_finalize_work, ieee80211_csa_finalize_work);
1578 INIT_WORK(&sdata->color_change_finalize_work, ieee80211_color_change_finalize_work);
1579 INIT_LIST_HEAD(&sdata->assigned_chanctx_list);
1580 INIT_LIST_HEAD(&sdata->reserved_chanctx_list);
1581
1582 switch (type) {
1583 case NL80211_IFTYPE_P2P_GO:
1584 type = NL80211_IFTYPE_AP;
1585 sdata->vif.type = type;
1586 sdata->vif.p2p = true;
1587 fallthrough;
1588 case NL80211_IFTYPE_AP:
1589 skb_queue_head_init(&sdata->u.ap.ps.bc_buf);
1590 INIT_LIST_HEAD(&sdata->u.ap.vlans);
1591 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1592 break;
1593 case NL80211_IFTYPE_P2P_CLIENT:
1594 type = NL80211_IFTYPE_STATION;
1595 sdata->vif.type = type;
1596 sdata->vif.p2p = true;
1597 fallthrough;
1598 case NL80211_IFTYPE_STATION:
1599 sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid;
1600 ieee80211_sta_setup_sdata(sdata);
1601 break;
1602 case NL80211_IFTYPE_OCB:
1603 sdata->vif.bss_conf.bssid = bssid_wildcard;
1604 ieee80211_ocb_setup_sdata(sdata);
1605 break;
1606 case NL80211_IFTYPE_ADHOC:
1607 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
1608 ieee80211_ibss_setup_sdata(sdata);
1609 break;
1610 case NL80211_IFTYPE_MESH_POINT:
1611 if (ieee80211_vif_is_mesh(&sdata->vif))
1612 ieee80211_mesh_init_sdata(sdata);
1613 break;
1614 case NL80211_IFTYPE_MONITOR:
1615 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
1616 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
1617 sdata->u.mntr.flags = MONITOR_FLAG_CONTROL |
1618 MONITOR_FLAG_OTHER_BSS;
1619 break;
1620 case NL80211_IFTYPE_NAN:
1621 idr_init(&sdata->u.nan.function_inst_ids);
1622 spin_lock_init(&sdata->u.nan.func_lock);
1623 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1624 break;
1625 case NL80211_IFTYPE_AP_VLAN:
1626 case NL80211_IFTYPE_P2P_DEVICE:
1627 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1628 break;
1629 case NL80211_IFTYPE_UNSPECIFIED:
1630 case NL80211_IFTYPE_WDS:
1631 case NUM_NL80211_IFTYPES:
1632 WARN_ON(1);
1633 break;
1634 }
1635
1636 ieee80211_debugfs_add_netdev(sdata);
1637 }
1638
ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype type)1639 static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1640 enum nl80211_iftype type)
1641 {
1642 struct ieee80211_local *local = sdata->local;
1643 int ret, err;
1644 enum nl80211_iftype internal_type = type;
1645 bool p2p = false;
1646
1647 ASSERT_RTNL();
1648
1649 if (!local->ops->change_interface)
1650 return -EBUSY;
1651
1652 switch (sdata->vif.type) {
1653 case NL80211_IFTYPE_AP:
1654 if (!list_empty(&sdata->u.ap.vlans))
1655 return -EBUSY;
1656 break;
1657 case NL80211_IFTYPE_STATION:
1658 case NL80211_IFTYPE_ADHOC:
1659 case NL80211_IFTYPE_OCB:
1660 /*
1661 * Could maybe also all others here?
1662 * Just not sure how that interacts
1663 * with the RX/config path e.g. for
1664 * mesh.
1665 */
1666 break;
1667 default:
1668 return -EBUSY;
1669 }
1670
1671 switch (type) {
1672 case NL80211_IFTYPE_AP:
1673 case NL80211_IFTYPE_STATION:
1674 case NL80211_IFTYPE_ADHOC:
1675 case NL80211_IFTYPE_OCB:
1676 /*
1677 * Could probably support everything
1678 * but here.
1679 */
1680 break;
1681 case NL80211_IFTYPE_P2P_CLIENT:
1682 p2p = true;
1683 internal_type = NL80211_IFTYPE_STATION;
1684 break;
1685 case NL80211_IFTYPE_P2P_GO:
1686 p2p = true;
1687 internal_type = NL80211_IFTYPE_AP;
1688 break;
1689 default:
1690 return -EBUSY;
1691 }
1692
1693 ret = ieee80211_check_concurrent_iface(sdata, internal_type);
1694 if (ret)
1695 return ret;
1696
1697 ieee80211_stop_vif_queues(local, sdata,
1698 IEEE80211_QUEUE_STOP_REASON_IFTYPE_CHANGE);
1699 synchronize_net();
1700
1701 ieee80211_do_stop(sdata, false);
1702
1703 ieee80211_teardown_sdata(sdata);
1704
1705 ieee80211_set_sdata_offload_flags(sdata);
1706 ret = drv_change_interface(local, sdata, internal_type, p2p);
1707 if (ret)
1708 type = ieee80211_vif_type_p2p(&sdata->vif);
1709
1710 /*
1711 * Ignore return value here, there's not much we can do since
1712 * the driver changed the interface type internally already.
1713 * The warnings will hopefully make driver authors fix it :-)
1714 */
1715 ieee80211_check_queues(sdata, type);
1716
1717 ieee80211_setup_sdata(sdata, type);
1718 ieee80211_set_vif_encap_ops(sdata);
1719
1720 err = ieee80211_do_open(&sdata->wdev, false);
1721 WARN(err, "type change: do_open returned %d", err);
1722
1723 ieee80211_wake_vif_queues(local, sdata,
1724 IEEE80211_QUEUE_STOP_REASON_IFTYPE_CHANGE);
1725 return ret;
1726 }
1727
ieee80211_if_change_type(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype type)1728 int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
1729 enum nl80211_iftype type)
1730 {
1731 int ret;
1732
1733 ASSERT_RTNL();
1734
1735 if (type == ieee80211_vif_type_p2p(&sdata->vif))
1736 return 0;
1737
1738 if (ieee80211_sdata_running(sdata)) {
1739 ret = ieee80211_runtime_change_iftype(sdata, type);
1740 if (ret)
1741 return ret;
1742 } else {
1743 /* Purge and reset type-dependent state. */
1744 ieee80211_teardown_sdata(sdata);
1745 ieee80211_setup_sdata(sdata, type);
1746 }
1747
1748 /* reset some values that shouldn't be kept across type changes */
1749 if (type == NL80211_IFTYPE_STATION)
1750 sdata->u.mgd.use_4addr = false;
1751
1752 return 0;
1753 }
1754
ieee80211_assign_perm_addr(struct ieee80211_local * local,u8 * perm_addr,enum nl80211_iftype type)1755 static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
1756 u8 *perm_addr, enum nl80211_iftype type)
1757 {
1758 struct ieee80211_sub_if_data *sdata;
1759 u64 mask, start, addr, val, inc;
1760 u8 *m;
1761 u8 tmp_addr[ETH_ALEN];
1762 int i;
1763
1764 /* default ... something at least */
1765 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
1766
1767 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1768 local->hw.wiphy->n_addresses <= 1)
1769 return;
1770
1771 mutex_lock(&local->iflist_mtx);
1772
1773 switch (type) {
1774 case NL80211_IFTYPE_MONITOR:
1775 /* doesn't matter */
1776 break;
1777 case NL80211_IFTYPE_AP_VLAN:
1778 /* match up with an AP interface */
1779 list_for_each_entry(sdata, &local->interfaces, list) {
1780 if (sdata->vif.type != NL80211_IFTYPE_AP)
1781 continue;
1782 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1783 break;
1784 }
1785 /* keep default if no AP interface present */
1786 break;
1787 case NL80211_IFTYPE_P2P_CLIENT:
1788 case NL80211_IFTYPE_P2P_GO:
1789 if (ieee80211_hw_check(&local->hw, P2P_DEV_ADDR_FOR_INTF)) {
1790 list_for_each_entry(sdata, &local->interfaces, list) {
1791 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
1792 continue;
1793 if (!ieee80211_sdata_running(sdata))
1794 continue;
1795 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1796 goto out_unlock;
1797 }
1798 }
1799 fallthrough;
1800 default:
1801 /* assign a new address if possible -- try n_addresses first */
1802 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1803 bool used = false;
1804
1805 list_for_each_entry(sdata, &local->interfaces, list) {
1806 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr,
1807 sdata->vif.addr)) {
1808 used = true;
1809 break;
1810 }
1811 }
1812
1813 if (!used) {
1814 memcpy(perm_addr,
1815 local->hw.wiphy->addresses[i].addr,
1816 ETH_ALEN);
1817 break;
1818 }
1819 }
1820
1821 /* try mask if available */
1822 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
1823 break;
1824
1825 m = local->hw.wiphy->addr_mask;
1826 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1827 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1828 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1829
1830 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
1831 /* not a contiguous mask ... not handled now! */
1832 pr_info("not contiguous\n");
1833 break;
1834 }
1835
1836 /*
1837 * Pick address of existing interface in case user changed
1838 * MAC address manually, default to perm_addr.
1839 */
1840 m = local->hw.wiphy->perm_addr;
1841 list_for_each_entry(sdata, &local->interfaces, list) {
1842 if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
1843 continue;
1844 m = sdata->vif.addr;
1845 break;
1846 }
1847 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1848 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1849 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1850
1851 inc = 1ULL<<__ffs64(mask);
1852 val = (start & mask);
1853 addr = (start & ~mask) | (val & mask);
1854 do {
1855 bool used = false;
1856
1857 tmp_addr[5] = addr >> 0*8;
1858 tmp_addr[4] = addr >> 1*8;
1859 tmp_addr[3] = addr >> 2*8;
1860 tmp_addr[2] = addr >> 3*8;
1861 tmp_addr[1] = addr >> 4*8;
1862 tmp_addr[0] = addr >> 5*8;
1863
1864 val += inc;
1865
1866 list_for_each_entry(sdata, &local->interfaces, list) {
1867 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) {
1868 used = true;
1869 break;
1870 }
1871 }
1872
1873 if (!used) {
1874 memcpy(perm_addr, tmp_addr, ETH_ALEN);
1875 break;
1876 }
1877 addr = (start & ~mask) | (val & mask);
1878 } while (addr != start);
1879
1880 break;
1881 }
1882
1883 out_unlock:
1884 mutex_unlock(&local->iflist_mtx);
1885 }
1886
ieee80211_if_add(struct ieee80211_local * local,const char * name,unsigned char name_assign_type,struct wireless_dev ** new_wdev,enum nl80211_iftype type,struct vif_params * params)1887 int ieee80211_if_add(struct ieee80211_local *local, const char *name,
1888 unsigned char name_assign_type,
1889 struct wireless_dev **new_wdev, enum nl80211_iftype type,
1890 struct vif_params *params)
1891 {
1892 struct net_device *ndev = NULL;
1893 struct ieee80211_sub_if_data *sdata = NULL;
1894 struct txq_info *txqi;
1895 void (*if_setup)(struct net_device *dev);
1896 int ret, i;
1897 int txqs = 1;
1898
1899 ASSERT_RTNL();
1900
1901 if (type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN) {
1902 struct wireless_dev *wdev;
1903
1904 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size,
1905 GFP_KERNEL);
1906 if (!sdata)
1907 return -ENOMEM;
1908 wdev = &sdata->wdev;
1909
1910 sdata->dev = NULL;
1911 strlcpy(sdata->name, name, IFNAMSIZ);
1912 ieee80211_assign_perm_addr(local, wdev->address, type);
1913 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN);
1914 } else {
1915 int size = ALIGN(sizeof(*sdata) + local->hw.vif_data_size,
1916 sizeof(void *));
1917 int txq_size = 0;
1918
1919 if (local->ops->wake_tx_queue &&
1920 type != NL80211_IFTYPE_AP_VLAN &&
1921 (type != NL80211_IFTYPE_MONITOR ||
1922 (params->flags & MONITOR_FLAG_ACTIVE)))
1923 txq_size += sizeof(struct txq_info) +
1924 local->hw.txq_data_size;
1925
1926 if (local->ops->wake_tx_queue) {
1927 if_setup = ieee80211_if_setup_no_queue;
1928 } else {
1929 if_setup = ieee80211_if_setup;
1930 if (local->hw.queues >= IEEE80211_NUM_ACS)
1931 txqs = IEEE80211_NUM_ACS;
1932 }
1933
1934 ndev = alloc_netdev_mqs(size + txq_size,
1935 name, name_assign_type,
1936 if_setup, txqs, 1);
1937 if (!ndev)
1938 return -ENOMEM;
1939
1940 if (!local->ops->wake_tx_queue && local->hw.wiphy->tx_queue_len)
1941 ndev->tx_queue_len = local->hw.wiphy->tx_queue_len;
1942
1943 dev_net_set(ndev, wiphy_net(local->hw.wiphy));
1944
1945 ndev->tstats = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats);
1946 if (!ndev->tstats) {
1947 free_netdev(ndev);
1948 return -ENOMEM;
1949 }
1950
1951 ndev->needed_headroom = local->tx_headroom +
1952 4*6 /* four MAC addresses */
1953 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
1954 + 6 /* mesh */
1955 + 8 /* rfc1042/bridge tunnel */
1956 - ETH_HLEN /* ethernet hard_header_len */
1957 + IEEE80211_ENCRYPT_HEADROOM;
1958 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
1959
1960 ret = dev_alloc_name(ndev, ndev->name);
1961 if (ret < 0) {
1962 ieee80211_if_free(ndev);
1963 free_netdev(ndev);
1964 return ret;
1965 }
1966
1967 ieee80211_assign_perm_addr(local, ndev->perm_addr, type);
1968 if (is_valid_ether_addr(params->macaddr))
1969 memcpy(ndev->dev_addr, params->macaddr, ETH_ALEN);
1970 else
1971 memcpy(ndev->dev_addr, ndev->perm_addr, ETH_ALEN);
1972 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
1973
1974 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */
1975 sdata = netdev_priv(ndev);
1976 ndev->ieee80211_ptr = &sdata->wdev;
1977 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
1978 memcpy(sdata->name, ndev->name, IFNAMSIZ);
1979
1980 if (txq_size) {
1981 txqi = netdev_priv(ndev) + size;
1982 ieee80211_txq_init(sdata, NULL, txqi, 0);
1983 }
1984
1985 sdata->dev = ndev;
1986 }
1987
1988 /* initialise type-independent data */
1989 sdata->wdev.wiphy = local->hw.wiphy;
1990 sdata->local = local;
1991
1992 ieee80211_init_frag_cache(&sdata->frags);
1993
1994 INIT_LIST_HEAD(&sdata->key_list);
1995
1996 INIT_DELAYED_WORK(&sdata->dfs_cac_timer_work,
1997 ieee80211_dfs_cac_timer_work);
1998 INIT_DELAYED_WORK(&sdata->dec_tailroom_needed_wk,
1999 ieee80211_delayed_tailroom_dec);
2000
2001 for (i = 0; i < NUM_NL80211_BANDS; i++) {
2002 struct ieee80211_supported_band *sband;
2003 sband = local->hw.wiphy->bands[i];
2004 sdata->rc_rateidx_mask[i] =
2005 sband ? (1 << sband->n_bitrates) - 1 : 0;
2006 if (sband) {
2007 __le16 cap;
2008 u16 *vht_rate_mask;
2009
2010 memcpy(sdata->rc_rateidx_mcs_mask[i],
2011 sband->ht_cap.mcs.rx_mask,
2012 sizeof(sdata->rc_rateidx_mcs_mask[i]));
2013
2014 cap = sband->vht_cap.vht_mcs.rx_mcs_map;
2015 vht_rate_mask = sdata->rc_rateidx_vht_mcs_mask[i];
2016 ieee80211_get_vht_mask_from_cap(cap, vht_rate_mask);
2017 } else {
2018 memset(sdata->rc_rateidx_mcs_mask[i], 0,
2019 sizeof(sdata->rc_rateidx_mcs_mask[i]));
2020 memset(sdata->rc_rateidx_vht_mcs_mask[i], 0,
2021 sizeof(sdata->rc_rateidx_vht_mcs_mask[i]));
2022 }
2023 }
2024
2025 for (i = 0; i < IEEE80211_NUM_ACS; i++)
2026 init_airtime_info(&sdata->airtime[i], &local->airtime[i]);
2027
2028 ieee80211_set_default_queues(sdata);
2029
2030 sdata->ap_power_level = IEEE80211_UNSET_POWER_LEVEL;
2031 sdata->user_power_level = local->user_power_level;
2032
2033 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
2034
2035 /* setup type-dependent data */
2036 ieee80211_setup_sdata(sdata, type);
2037
2038 if (ndev) {
2039 ndev->ieee80211_ptr->use_4addr = params->use_4addr;
2040 if (type == NL80211_IFTYPE_STATION)
2041 sdata->u.mgd.use_4addr = params->use_4addr;
2042
2043 ndev->features |= local->hw.netdev_features;
2044 ndev->hw_features |= ndev->features &
2045 MAC80211_SUPPORTED_FEATURES_TX;
2046
2047 netdev_set_default_ethtool_ops(ndev, &ieee80211_ethtool_ops);
2048
2049 /* MTU range is normally 256 - 2304, where the upper limit is
2050 * the maximum MSDU size. Monitor interfaces send and receive
2051 * MPDU and A-MSDU frames which may be much larger so we do
2052 * not impose an upper limit in that case.
2053 */
2054 ndev->min_mtu = 256;
2055 if (type == NL80211_IFTYPE_MONITOR)
2056 ndev->max_mtu = 0;
2057 else
2058 ndev->max_mtu = local->hw.max_mtu;
2059
2060 ret = cfg80211_register_netdevice(ndev);
2061 if (ret) {
2062 free_netdev(ndev);
2063 return ret;
2064 }
2065 }
2066
2067 mutex_lock(&local->iflist_mtx);
2068 list_add_tail_rcu(&sdata->list, &local->interfaces);
2069 mutex_unlock(&local->iflist_mtx);
2070
2071 if (new_wdev)
2072 *new_wdev = &sdata->wdev;
2073
2074 return 0;
2075 }
2076
ieee80211_if_remove(struct ieee80211_sub_if_data * sdata)2077 void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
2078 {
2079 ASSERT_RTNL();
2080
2081 mutex_lock(&sdata->local->iflist_mtx);
2082 list_del_rcu(&sdata->list);
2083 mutex_unlock(&sdata->local->iflist_mtx);
2084
2085 if (sdata->vif.txq)
2086 ieee80211_txq_purge(sdata->local, to_txq_info(sdata->vif.txq));
2087
2088 synchronize_rcu();
2089
2090 cfg80211_unregister_wdev(&sdata->wdev);
2091
2092 if (!sdata->dev) {
2093 ieee80211_teardown_sdata(sdata);
2094 kfree(sdata);
2095 }
2096 }
2097
ieee80211_sdata_stop(struct ieee80211_sub_if_data * sdata)2098 void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata)
2099 {
2100 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state)))
2101 return;
2102 ieee80211_do_stop(sdata, true);
2103 }
2104
ieee80211_remove_interfaces(struct ieee80211_local * local)2105 void ieee80211_remove_interfaces(struct ieee80211_local *local)
2106 {
2107 struct ieee80211_sub_if_data *sdata, *tmp;
2108 LIST_HEAD(unreg_list);
2109 LIST_HEAD(wdev_list);
2110
2111 ASSERT_RTNL();
2112
2113 /* Before destroying the interfaces, make sure they're all stopped so
2114 * that the hardware is stopped. Otherwise, the driver might still be
2115 * iterating the interfaces during the shutdown, e.g. from a worker
2116 * or from RX processing or similar, and if it does so (using atomic
2117 * iteration) while we're manipulating the list, the iteration will
2118 * crash.
2119 *
2120 * After this, the hardware should be stopped and the driver should
2121 * have stopped all of its activities, so that we can do RCU-unaware
2122 * manipulations of the interface list below.
2123 */
2124 cfg80211_shutdown_all_interfaces(local->hw.wiphy);
2125
2126 WARN(local->open_count, "%s: open count remains %d\n",
2127 wiphy_name(local->hw.wiphy), local->open_count);
2128
2129 ieee80211_txq_teardown_flows(local);
2130
2131 mutex_lock(&local->iflist_mtx);
2132 list_for_each_entry_safe(sdata, tmp, &local->interfaces, list) {
2133 list_del(&sdata->list);
2134
2135 if (sdata->dev)
2136 unregister_netdevice_queue(sdata->dev, &unreg_list);
2137 else
2138 list_add(&sdata->list, &wdev_list);
2139 }
2140 mutex_unlock(&local->iflist_mtx);
2141
2142 unregister_netdevice_many(&unreg_list);
2143
2144 wiphy_lock(local->hw.wiphy);
2145 list_for_each_entry_safe(sdata, tmp, &wdev_list, list) {
2146 list_del(&sdata->list);
2147 cfg80211_unregister_wdev(&sdata->wdev);
2148 kfree(sdata);
2149 }
2150 wiphy_unlock(local->hw.wiphy);
2151 }
2152
netdev_notify(struct notifier_block * nb,unsigned long state,void * ptr)2153 static int netdev_notify(struct notifier_block *nb,
2154 unsigned long state, void *ptr)
2155 {
2156 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
2157 struct ieee80211_sub_if_data *sdata;
2158
2159 if (state != NETDEV_CHANGENAME)
2160 return NOTIFY_DONE;
2161
2162 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
2163 return NOTIFY_DONE;
2164
2165 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
2166 return NOTIFY_DONE;
2167
2168 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2169 memcpy(sdata->name, dev->name, IFNAMSIZ);
2170 ieee80211_debugfs_rename_netdev(sdata);
2171
2172 return NOTIFY_OK;
2173 }
2174
2175 static struct notifier_block mac80211_netdev_notifier = {
2176 .notifier_call = netdev_notify,
2177 };
2178
ieee80211_iface_init(void)2179 int ieee80211_iface_init(void)
2180 {
2181 return register_netdevice_notifier(&mac80211_netdev_notifier);
2182 }
2183
ieee80211_iface_exit(void)2184 void ieee80211_iface_exit(void)
2185 {
2186 unregister_netdevice_notifier(&mac80211_netdev_notifier);
2187 }
2188
ieee80211_vif_inc_num_mcast(struct ieee80211_sub_if_data * sdata)2189 void ieee80211_vif_inc_num_mcast(struct ieee80211_sub_if_data *sdata)
2190 {
2191 if (sdata->vif.type == NL80211_IFTYPE_AP)
2192 atomic_inc(&sdata->u.ap.num_mcast_sta);
2193 else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
2194 atomic_inc(&sdata->u.vlan.num_mcast_sta);
2195 }
2196
ieee80211_vif_dec_num_mcast(struct ieee80211_sub_if_data * sdata)2197 void ieee80211_vif_dec_num_mcast(struct ieee80211_sub_if_data *sdata)
2198 {
2199 if (sdata->vif.type == NL80211_IFTYPE_AP)
2200 atomic_dec(&sdata->u.ap.num_mcast_sta);
2201 else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
2202 atomic_dec(&sdata->u.vlan.num_mcast_sta);
2203 }
2204