nl80211.c 112 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104210521062107210821092110211121122113211421152116211721182119212021212122212321242125212621272128212921302131213221332134213521362137213821392140214121422143214421452146214721482149215021512152215321542155215621572158215921602161216221632164216521662167216821692170217121722173217421752176217721782179218021812182218321842185218621872188218921902191219221932194219521962197219821992200220122022203220422052206220722082209221022112212221322142215221622172218221922202221222222232224222522262227222822292230223122322233223422352236223722382239224022412242224322442245224622472248224922502251225222532254225522562257225822592260226122622263226422652266226722682269227022712272227322742275227622772278227922802281228222832284228522862287228822892290229122922293229422952296229722982299230023012302230323042305230623072308230923102311231223132314231523162317231823192320232123222323232423252326232723282329233023312332233323342335233623372338233923402341234223432344234523462347234823492350235123522353235423552356235723582359236023612362236323642365236623672368236923702371237223732374237523762377237823792380238123822383238423852386238723882389239023912392239323942395239623972398239924002401240224032404240524062407240824092410241124122413241424152416241724182419242024212422242324242425242624272428242924302431243224332434243524362437243824392440244124422443244424452446244724482449245024512452245324542455245624572458245924602461246224632464246524662467246824692470247124722473247424752476247724782479248024812482248324842485248624872488248924902491249224932494249524962497249824992500250125022503250425052506250725082509251025112512251325142515251625172518251925202521252225232524252525262527252825292530253125322533253425352536253725382539254025412542254325442545254625472548254925502551255225532554255525562557255825592560256125622563256425652566256725682569257025712572257325742575257625772578257925802581258225832584258525862587258825892590259125922593259425952596259725982599260026012602260326042605260626072608260926102611261226132614261526162617261826192620262126222623262426252626262726282629263026312632263326342635263626372638263926402641264226432644264526462647264826492650265126522653265426552656265726582659266026612662266326642665266626672668266926702671267226732674267526762677267826792680268126822683268426852686268726882689269026912692269326942695269626972698269927002701270227032704270527062707270827092710271127122713271427152716271727182719272027212722272327242725272627272728272927302731273227332734273527362737273827392740274127422743274427452746274727482749275027512752275327542755275627572758275927602761276227632764276527662767276827692770277127722773277427752776277727782779278027812782278327842785278627872788278927902791279227932794279527962797279827992800280128022803280428052806280728082809281028112812281328142815281628172818281928202821282228232824282528262827282828292830283128322833283428352836283728382839284028412842284328442845284628472848284928502851285228532854285528562857285828592860286128622863286428652866286728682869287028712872287328742875287628772878287928802881288228832884288528862887288828892890289128922893289428952896289728982899290029012902290329042905290629072908290929102911291229132914291529162917291829192920292129222923292429252926292729282929293029312932293329342935293629372938293929402941294229432944294529462947294829492950295129522953295429552956295729582959296029612962296329642965296629672968296929702971297229732974297529762977297829792980298129822983298429852986298729882989299029912992299329942995299629972998299930003001300230033004300530063007300830093010301130123013301430153016301730183019302030213022302330243025302630273028302930303031303230333034303530363037303830393040304130423043304430453046304730483049305030513052305330543055305630573058305930603061306230633064306530663067306830693070307130723073307430753076307730783079308030813082308330843085308630873088308930903091309230933094309530963097309830993100310131023103310431053106310731083109311031113112311331143115311631173118311931203121312231233124312531263127312831293130313131323133313431353136313731383139314031413142314331443145314631473148314931503151315231533154315531563157315831593160316131623163316431653166316731683169317031713172317331743175317631773178317931803181318231833184318531863187318831893190319131923193319431953196319731983199320032013202320332043205320632073208320932103211321232133214321532163217321832193220322132223223322432253226322732283229323032313232323332343235323632373238323932403241324232433244324532463247324832493250325132523253325432553256325732583259326032613262326332643265326632673268326932703271327232733274327532763277327832793280328132823283328432853286328732883289329032913292329332943295329632973298329933003301330233033304330533063307330833093310331133123313331433153316331733183319332033213322332333243325332633273328332933303331333233333334333533363337333833393340334133423343334433453346334733483349335033513352335333543355335633573358335933603361336233633364336533663367336833693370337133723373337433753376337733783379338033813382338333843385338633873388338933903391339233933394339533963397339833993400340134023403340434053406340734083409341034113412341334143415341634173418341934203421342234233424342534263427342834293430343134323433343434353436343734383439344034413442344334443445344634473448344934503451345234533454345534563457345834593460346134623463346434653466346734683469347034713472347334743475347634773478347934803481348234833484348534863487348834893490349134923493349434953496349734983499350035013502350335043505350635073508350935103511351235133514351535163517351835193520352135223523352435253526352735283529353035313532353335343535353635373538353935403541354235433544354535463547354835493550355135523553355435553556355735583559356035613562356335643565356635673568356935703571357235733574357535763577357835793580358135823583358435853586358735883589359035913592359335943595359635973598359936003601360236033604360536063607360836093610361136123613361436153616361736183619362036213622362336243625362636273628362936303631363236333634363536363637363836393640364136423643364436453646364736483649365036513652365336543655365636573658365936603661366236633664366536663667366836693670367136723673367436753676367736783679368036813682368336843685368636873688368936903691369236933694369536963697369836993700370137023703370437053706370737083709371037113712371337143715371637173718371937203721372237233724372537263727372837293730373137323733373437353736373737383739374037413742374337443745374637473748374937503751375237533754375537563757375837593760376137623763376437653766376737683769377037713772377337743775377637773778377937803781378237833784378537863787378837893790379137923793379437953796379737983799380038013802380338043805380638073808380938103811381238133814381538163817381838193820382138223823382438253826382738283829383038313832383338343835383638373838383938403841384238433844384538463847384838493850385138523853385438553856385738583859386038613862386338643865386638673868386938703871387238733874387538763877387838793880388138823883388438853886388738883889389038913892389338943895389638973898389939003901390239033904390539063907390839093910391139123913391439153916391739183919392039213922392339243925392639273928392939303931393239333934393539363937393839393940394139423943394439453946394739483949395039513952395339543955395639573958395939603961396239633964396539663967396839693970397139723973397439753976397739783979398039813982398339843985398639873988398939903991399239933994399539963997399839994000400140024003400440054006400740084009401040114012401340144015401640174018401940204021402240234024402540264027402840294030403140324033403440354036403740384039404040414042404340444045404640474048404940504051405240534054405540564057405840594060406140624063406440654066406740684069407040714072407340744075407640774078407940804081408240834084408540864087408840894090409140924093409440954096409740984099410041014102410341044105410641074108410941104111411241134114411541164117411841194120412141224123412441254126412741284129413041314132413341344135413641374138413941404141414241434144414541464147414841494150415141524153415441554156415741584159416041614162416341644165416641674168416941704171417241734174417541764177417841794180418141824183418441854186418741884189419041914192419341944195419641974198419942004201420242034204420542064207420842094210421142124213421442154216421742184219422042214222422342244225422642274228422942304231423242334234423542364237423842394240424142424243424442454246424742484249425042514252425342544255425642574258425942604261426242634264426542664267426842694270427142724273427442754276427742784279428042814282428342844285428642874288428942904291429242934294429542964297429842994300430143024303430443054306430743084309431043114312431343144315431643174318431943204321432243234324432543264327432843294330433143324333433443354336433743384339434043414342434343444345434643474348434943504351435243534354435543564357435843594360436143624363436443654366436743684369437043714372437343744375437643774378437943804381438243834384438543864387438843894390439143924393439443954396439743984399440044014402440344044405440644074408440944104411441244134414441544164417441844194420442144224423442444254426442744284429443044314432443344344435443644374438443944404441444244434444444544464447444844494450445144524453445444554456445744584459446044614462446344644465446644674468446944704471447244734474447544764477447844794480448144824483448444854486448744884489449044914492449344944495449644974498449945004501450245034504450545064507450845094510451145124513451445154516451745184519452045214522452345244525452645274528452945304531453245334534453545364537453845394540454145424543454445454546454745484549455045514552455345544555455645574558455945604561456245634564456545664567456845694570457145724573457445754576457745784579458045814582458345844585458645874588458945904591459245934594459545964597459845994600460146024603460446054606460746084609461046114612461346144615461646174618461946204621462246234624462546264627462846294630463146324633463446354636463746384639464046414642464346444645464646474648464946504651465246534654465546564657465846594660466146624663466446654666466746684669467046714672467346744675467646774678467946804681468246834684468546864687468846894690469146924693469446954696469746984699470047014702470347044705470647074708470947104711471247134714471547164717471847194720472147224723472447254726472747284729473047314732473347344735473647374738473947404741474247434744474547464747474847494750475147524753475447554756475747584759476047614762476347644765476647674768476947704771477247734774477547764777477847794780478147824783478447854786478747884789479047914792479347944795479647974798479948004801480248034804480548064807480848094810481148124813481448154816481748184819482048214822482348244825482648274828482948304831483248334834483548364837483848394840484148424843484448454846484748484849485048514852485348544855485648574858485948604861486248634864486548664867486848694870487148724873
  1. /*
  2. * This is the new netlink-based wireless configuration interface.
  3. *
  4. * Copyright 2006-2009 Johannes Berg <johannes@sipsolutions.net>
  5. */
  6. #include <linux/if.h>
  7. #include <linux/module.h>
  8. #include <linux/err.h>
  9. #include <linux/list.h>
  10. #include <linux/if_ether.h>
  11. #include <linux/ieee80211.h>
  12. #include <linux/nl80211.h>
  13. #include <linux/rtnetlink.h>
  14. #include <linux/netlink.h>
  15. #include <linux/etherdevice.h>
  16. #include <net/genetlink.h>
  17. #include <net/cfg80211.h>
  18. #include "core.h"
  19. #include "nl80211.h"
  20. #include "reg.h"
  21. /* the netlink family */
  22. static struct genl_family nl80211_fam = {
  23. .id = GENL_ID_GENERATE, /* don't bother with a hardcoded ID */
  24. .name = "nl80211", /* have users key off the name instead */
  25. .hdrsize = 0, /* no private header */
  26. .version = 1, /* no particular meaning now */
  27. .maxattr = NL80211_ATTR_MAX,
  28. };
  29. /* internal helper: get rdev and dev */
  30. static int get_rdev_dev_by_info_ifindex(struct nlattr **attrs,
  31. struct cfg80211_registered_device **rdev,
  32. struct net_device **dev)
  33. {
  34. int ifindex;
  35. if (!attrs[NL80211_ATTR_IFINDEX])
  36. return -EINVAL;
  37. ifindex = nla_get_u32(attrs[NL80211_ATTR_IFINDEX]);
  38. *dev = dev_get_by_index(&init_net, ifindex);
  39. if (!*dev)
  40. return -ENODEV;
  41. *rdev = cfg80211_get_dev_from_ifindex(ifindex);
  42. if (IS_ERR(*rdev)) {
  43. dev_put(*dev);
  44. return PTR_ERR(*rdev);
  45. }
  46. return 0;
  47. }
  48. /* policy for the attributes */
  49. static struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] __read_mostly = {
  50. [NL80211_ATTR_WIPHY] = { .type = NLA_U32 },
  51. [NL80211_ATTR_WIPHY_NAME] = { .type = NLA_NUL_STRING,
  52. .len = 20-1 },
  53. [NL80211_ATTR_WIPHY_TXQ_PARAMS] = { .type = NLA_NESTED },
  54. [NL80211_ATTR_WIPHY_FREQ] = { .type = NLA_U32 },
  55. [NL80211_ATTR_WIPHY_CHANNEL_TYPE] = { .type = NLA_U32 },
  56. [NL80211_ATTR_WIPHY_RETRY_SHORT] = { .type = NLA_U8 },
  57. [NL80211_ATTR_WIPHY_RETRY_LONG] = { .type = NLA_U8 },
  58. [NL80211_ATTR_WIPHY_FRAG_THRESHOLD] = { .type = NLA_U32 },
  59. [NL80211_ATTR_WIPHY_RTS_THRESHOLD] = { .type = NLA_U32 },
  60. [NL80211_ATTR_IFTYPE] = { .type = NLA_U32 },
  61. [NL80211_ATTR_IFINDEX] = { .type = NLA_U32 },
  62. [NL80211_ATTR_IFNAME] = { .type = NLA_NUL_STRING, .len = IFNAMSIZ-1 },
  63. [NL80211_ATTR_MAC] = { .type = NLA_BINARY, .len = ETH_ALEN },
  64. [NL80211_ATTR_PREV_BSSID] = { .type = NLA_BINARY, .len = ETH_ALEN },
  65. [NL80211_ATTR_KEY] = { .type = NLA_NESTED, },
  66. [NL80211_ATTR_KEY_DATA] = { .type = NLA_BINARY,
  67. .len = WLAN_MAX_KEY_LEN },
  68. [NL80211_ATTR_KEY_IDX] = { .type = NLA_U8 },
  69. [NL80211_ATTR_KEY_CIPHER] = { .type = NLA_U32 },
  70. [NL80211_ATTR_KEY_DEFAULT] = { .type = NLA_FLAG },
  71. [NL80211_ATTR_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
  72. [NL80211_ATTR_BEACON_INTERVAL] = { .type = NLA_U32 },
  73. [NL80211_ATTR_DTIM_PERIOD] = { .type = NLA_U32 },
  74. [NL80211_ATTR_BEACON_HEAD] = { .type = NLA_BINARY,
  75. .len = IEEE80211_MAX_DATA_LEN },
  76. [NL80211_ATTR_BEACON_TAIL] = { .type = NLA_BINARY,
  77. .len = IEEE80211_MAX_DATA_LEN },
  78. [NL80211_ATTR_STA_AID] = { .type = NLA_U16 },
  79. [NL80211_ATTR_STA_FLAGS] = { .type = NLA_NESTED },
  80. [NL80211_ATTR_STA_LISTEN_INTERVAL] = { .type = NLA_U16 },
  81. [NL80211_ATTR_STA_SUPPORTED_RATES] = { .type = NLA_BINARY,
  82. .len = NL80211_MAX_SUPP_RATES },
  83. [NL80211_ATTR_STA_PLINK_ACTION] = { .type = NLA_U8 },
  84. [NL80211_ATTR_STA_VLAN] = { .type = NLA_U32 },
  85. [NL80211_ATTR_MNTR_FLAGS] = { /* NLA_NESTED can't be empty */ },
  86. [NL80211_ATTR_MESH_ID] = { .type = NLA_BINARY,
  87. .len = IEEE80211_MAX_MESH_ID_LEN },
  88. [NL80211_ATTR_MPATH_NEXT_HOP] = { .type = NLA_U32 },
  89. [NL80211_ATTR_REG_ALPHA2] = { .type = NLA_STRING, .len = 2 },
  90. [NL80211_ATTR_REG_RULES] = { .type = NLA_NESTED },
  91. [NL80211_ATTR_BSS_CTS_PROT] = { .type = NLA_U8 },
  92. [NL80211_ATTR_BSS_SHORT_PREAMBLE] = { .type = NLA_U8 },
  93. [NL80211_ATTR_BSS_SHORT_SLOT_TIME] = { .type = NLA_U8 },
  94. [NL80211_ATTR_BSS_BASIC_RATES] = { .type = NLA_BINARY,
  95. .len = NL80211_MAX_SUPP_RATES },
  96. [NL80211_ATTR_MESH_PARAMS] = { .type = NLA_NESTED },
  97. [NL80211_ATTR_HT_CAPABILITY] = { .type = NLA_BINARY,
  98. .len = NL80211_HT_CAPABILITY_LEN },
  99. [NL80211_ATTR_MGMT_SUBTYPE] = { .type = NLA_U8 },
  100. [NL80211_ATTR_IE] = { .type = NLA_BINARY,
  101. .len = IEEE80211_MAX_DATA_LEN },
  102. [NL80211_ATTR_SCAN_FREQUENCIES] = { .type = NLA_NESTED },
  103. [NL80211_ATTR_SCAN_SSIDS] = { .type = NLA_NESTED },
  104. [NL80211_ATTR_SSID] = { .type = NLA_BINARY,
  105. .len = IEEE80211_MAX_SSID_LEN },
  106. [NL80211_ATTR_AUTH_TYPE] = { .type = NLA_U32 },
  107. [NL80211_ATTR_REASON_CODE] = { .type = NLA_U16 },
  108. [NL80211_ATTR_FREQ_FIXED] = { .type = NLA_FLAG },
  109. [NL80211_ATTR_TIMED_OUT] = { .type = NLA_FLAG },
  110. [NL80211_ATTR_USE_MFP] = { .type = NLA_U32 },
  111. [NL80211_ATTR_STA_FLAGS2] = {
  112. .len = sizeof(struct nl80211_sta_flag_update),
  113. },
  114. [NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },
  115. [NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },
  116. [NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },
  117. [NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
  118. };
  119. /* policy for the attributes */
  120. static struct nla_policy
  121. nl80211_key_policy[NL80211_KEY_MAX + 1] __read_mostly = {
  122. [NL80211_KEY_DATA] = { .type = NLA_BINARY, .len = WLAN_MAX_KEY_LEN },
  123. [NL80211_KEY_IDX] = { .type = NLA_U8 },
  124. [NL80211_KEY_CIPHER] = { .type = NLA_U32 },
  125. [NL80211_KEY_SEQ] = { .type = NLA_BINARY, .len = 8 },
  126. [NL80211_KEY_DEFAULT] = { .type = NLA_FLAG },
  127. [NL80211_KEY_DEFAULT_MGMT] = { .type = NLA_FLAG },
  128. };
  129. /* IE validation */
  130. static bool is_valid_ie_attr(const struct nlattr *attr)
  131. {
  132. const u8 *pos;
  133. int len;
  134. if (!attr)
  135. return true;
  136. pos = nla_data(attr);
  137. len = nla_len(attr);
  138. while (len) {
  139. u8 elemlen;
  140. if (len < 2)
  141. return false;
  142. len -= 2;
  143. elemlen = pos[1];
  144. if (elemlen > len)
  145. return false;
  146. len -= elemlen;
  147. pos += 2 + elemlen;
  148. }
  149. return true;
  150. }
  151. /* message building helper */
  152. static inline void *nl80211hdr_put(struct sk_buff *skb, u32 pid, u32 seq,
  153. int flags, u8 cmd)
  154. {
  155. /* since there is no private header just add the generic one */
  156. return genlmsg_put(skb, pid, seq, &nl80211_fam, flags, cmd);
  157. }
  158. static int nl80211_msg_put_channel(struct sk_buff *msg,
  159. struct ieee80211_channel *chan)
  160. {
  161. NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_FREQ,
  162. chan->center_freq);
  163. if (chan->flags & IEEE80211_CHAN_DISABLED)
  164. NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_DISABLED);
  165. if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN)
  166. NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_PASSIVE_SCAN);
  167. if (chan->flags & IEEE80211_CHAN_NO_IBSS)
  168. NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_NO_IBSS);
  169. if (chan->flags & IEEE80211_CHAN_RADAR)
  170. NLA_PUT_FLAG(msg, NL80211_FREQUENCY_ATTR_RADAR);
  171. NLA_PUT_U32(msg, NL80211_FREQUENCY_ATTR_MAX_TX_POWER,
  172. DBM_TO_MBM(chan->max_power));
  173. return 0;
  174. nla_put_failure:
  175. return -ENOBUFS;
  176. }
  177. /* netlink command implementations */
  178. struct key_parse {
  179. struct key_params p;
  180. int idx;
  181. bool def, defmgmt;
  182. };
  183. static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
  184. {
  185. struct nlattr *tb[NL80211_KEY_MAX + 1];
  186. int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
  187. nl80211_key_policy);
  188. if (err)
  189. return err;
  190. k->def = !!tb[NL80211_KEY_DEFAULT];
  191. k->defmgmt = !!tb[NL80211_KEY_DEFAULT_MGMT];
  192. if (tb[NL80211_KEY_IDX])
  193. k->idx = nla_get_u8(tb[NL80211_KEY_IDX]);
  194. if (tb[NL80211_KEY_DATA]) {
  195. k->p.key = nla_data(tb[NL80211_KEY_DATA]);
  196. k->p.key_len = nla_len(tb[NL80211_KEY_DATA]);
  197. }
  198. if (tb[NL80211_KEY_SEQ]) {
  199. k->p.seq = nla_data(tb[NL80211_KEY_SEQ]);
  200. k->p.seq_len = nla_len(tb[NL80211_KEY_SEQ]);
  201. }
  202. if (tb[NL80211_KEY_CIPHER])
  203. k->p.cipher = nla_get_u32(tb[NL80211_KEY_CIPHER]);
  204. return 0;
  205. }
  206. static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
  207. {
  208. if (info->attrs[NL80211_ATTR_KEY_DATA]) {
  209. k->p.key = nla_data(info->attrs[NL80211_ATTR_KEY_DATA]);
  210. k->p.key_len = nla_len(info->attrs[NL80211_ATTR_KEY_DATA]);
  211. }
  212. if (info->attrs[NL80211_ATTR_KEY_SEQ]) {
  213. k->p.seq = nla_data(info->attrs[NL80211_ATTR_KEY_SEQ]);
  214. k->p.seq_len = nla_len(info->attrs[NL80211_ATTR_KEY_SEQ]);
  215. }
  216. if (info->attrs[NL80211_ATTR_KEY_IDX])
  217. k->idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
  218. if (info->attrs[NL80211_ATTR_KEY_CIPHER])
  219. k->p.cipher = nla_get_u32(info->attrs[NL80211_ATTR_KEY_CIPHER]);
  220. k->def = !!info->attrs[NL80211_ATTR_KEY_DEFAULT];
  221. k->defmgmt = !!info->attrs[NL80211_ATTR_KEY_DEFAULT_MGMT];
  222. return 0;
  223. }
  224. static int nl80211_parse_key(struct genl_info *info, struct key_parse *k)
  225. {
  226. int err;
  227. memset(k, 0, sizeof(*k));
  228. k->idx = -1;
  229. if (info->attrs[NL80211_ATTR_KEY])
  230. err = nl80211_parse_key_new(info->attrs[NL80211_ATTR_KEY], k);
  231. else
  232. err = nl80211_parse_key_old(info, k);
  233. if (err)
  234. return err;
  235. if (k->def && k->defmgmt)
  236. return -EINVAL;
  237. if (k->idx != -1) {
  238. if (k->defmgmt) {
  239. if (k->idx < 4 || k->idx > 5)
  240. return -EINVAL;
  241. } else if (k->def) {
  242. if (k->idx < 0 || k->idx > 3)
  243. return -EINVAL;
  244. } else {
  245. if (k->idx < 0 || k->idx > 5)
  246. return -EINVAL;
  247. }
  248. }
  249. return 0;
  250. }
  251. static struct cfg80211_cached_keys *
  252. nl80211_parse_connkeys(struct cfg80211_registered_device *rdev,
  253. struct nlattr *keys)
  254. {
  255. struct key_parse parse;
  256. struct nlattr *key;
  257. struct cfg80211_cached_keys *result;
  258. int rem, err, def = 0;
  259. result = kzalloc(sizeof(*result), GFP_KERNEL);
  260. if (!result)
  261. return ERR_PTR(-ENOMEM);
  262. result->def = -1;
  263. result->defmgmt = -1;
  264. nla_for_each_nested(key, keys, rem) {
  265. memset(&parse, 0, sizeof(parse));
  266. parse.idx = -1;
  267. err = nl80211_parse_key_new(key, &parse);
  268. if (err)
  269. goto error;
  270. err = -EINVAL;
  271. if (!parse.p.key)
  272. goto error;
  273. if (parse.idx < 0 || parse.idx > 4)
  274. goto error;
  275. if (parse.def) {
  276. if (def)
  277. goto error;
  278. def = 1;
  279. result->def = parse.idx;
  280. } else if (parse.defmgmt)
  281. goto error;
  282. err = cfg80211_validate_key_settings(rdev, &parse.p,
  283. parse.idx, NULL);
  284. if (err)
  285. goto error;
  286. result->params[parse.idx].cipher = parse.p.cipher;
  287. result->params[parse.idx].key_len = parse.p.key_len;
  288. result->params[parse.idx].key = result->data[parse.idx];
  289. memcpy(result->data[parse.idx], parse.p.key, parse.p.key_len);
  290. }
  291. return result;
  292. error:
  293. kfree(result);
  294. return ERR_PTR(err);
  295. }
  296. static int nl80211_key_allowed(struct wireless_dev *wdev)
  297. {
  298. ASSERT_WDEV_LOCK(wdev);
  299. if (!netif_running(wdev->netdev))
  300. return -ENETDOWN;
  301. switch (wdev->iftype) {
  302. case NL80211_IFTYPE_AP:
  303. case NL80211_IFTYPE_AP_VLAN:
  304. break;
  305. case NL80211_IFTYPE_ADHOC:
  306. if (!wdev->current_bss)
  307. return -ENOLINK;
  308. break;
  309. case NL80211_IFTYPE_STATION:
  310. if (wdev->sme_state != CFG80211_SME_CONNECTED)
  311. return -ENOLINK;
  312. break;
  313. default:
  314. return -EINVAL;
  315. }
  316. return 0;
  317. }
  318. static int nl80211_send_wiphy(struct sk_buff *msg, u32 pid, u32 seq, int flags,
  319. struct cfg80211_registered_device *dev)
  320. {
  321. void *hdr;
  322. struct nlattr *nl_bands, *nl_band;
  323. struct nlattr *nl_freqs, *nl_freq;
  324. struct nlattr *nl_rates, *nl_rate;
  325. struct nlattr *nl_modes;
  326. struct nlattr *nl_cmds;
  327. enum ieee80211_band band;
  328. struct ieee80211_channel *chan;
  329. struct ieee80211_rate *rate;
  330. int i;
  331. u16 ifmodes = dev->wiphy.interface_modes;
  332. hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_WIPHY);
  333. if (!hdr)
  334. return -1;
  335. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, dev->wiphy_idx);
  336. NLA_PUT_STRING(msg, NL80211_ATTR_WIPHY_NAME, wiphy_name(&dev->wiphy));
  337. NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_SHORT,
  338. dev->wiphy.retry_short);
  339. NLA_PUT_U8(msg, NL80211_ATTR_WIPHY_RETRY_LONG,
  340. dev->wiphy.retry_long);
  341. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FRAG_THRESHOLD,
  342. dev->wiphy.frag_threshold);
  343. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_RTS_THRESHOLD,
  344. dev->wiphy.rts_threshold);
  345. NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_SCAN_SSIDS,
  346. dev->wiphy.max_scan_ssids);
  347. NLA_PUT_U16(msg, NL80211_ATTR_MAX_SCAN_IE_LEN,
  348. dev->wiphy.max_scan_ie_len);
  349. NLA_PUT(msg, NL80211_ATTR_CIPHER_SUITES,
  350. sizeof(u32) * dev->wiphy.n_cipher_suites,
  351. dev->wiphy.cipher_suites);
  352. nl_modes = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_IFTYPES);
  353. if (!nl_modes)
  354. goto nla_put_failure;
  355. i = 0;
  356. while (ifmodes) {
  357. if (ifmodes & 1)
  358. NLA_PUT_FLAG(msg, i);
  359. ifmodes >>= 1;
  360. i++;
  361. }
  362. nla_nest_end(msg, nl_modes);
  363. nl_bands = nla_nest_start(msg, NL80211_ATTR_WIPHY_BANDS);
  364. if (!nl_bands)
  365. goto nla_put_failure;
  366. for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
  367. if (!dev->wiphy.bands[band])
  368. continue;
  369. nl_band = nla_nest_start(msg, band);
  370. if (!nl_band)
  371. goto nla_put_failure;
  372. /* add HT info */
  373. if (dev->wiphy.bands[band]->ht_cap.ht_supported) {
  374. NLA_PUT(msg, NL80211_BAND_ATTR_HT_MCS_SET,
  375. sizeof(dev->wiphy.bands[band]->ht_cap.mcs),
  376. &dev->wiphy.bands[band]->ht_cap.mcs);
  377. NLA_PUT_U16(msg, NL80211_BAND_ATTR_HT_CAPA,
  378. dev->wiphy.bands[band]->ht_cap.cap);
  379. NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_FACTOR,
  380. dev->wiphy.bands[band]->ht_cap.ampdu_factor);
  381. NLA_PUT_U8(msg, NL80211_BAND_ATTR_HT_AMPDU_DENSITY,
  382. dev->wiphy.bands[band]->ht_cap.ampdu_density);
  383. }
  384. /* add frequencies */
  385. nl_freqs = nla_nest_start(msg, NL80211_BAND_ATTR_FREQS);
  386. if (!nl_freqs)
  387. goto nla_put_failure;
  388. for (i = 0; i < dev->wiphy.bands[band]->n_channels; i++) {
  389. nl_freq = nla_nest_start(msg, i);
  390. if (!nl_freq)
  391. goto nla_put_failure;
  392. chan = &dev->wiphy.bands[band]->channels[i];
  393. if (nl80211_msg_put_channel(msg, chan))
  394. goto nla_put_failure;
  395. nla_nest_end(msg, nl_freq);
  396. }
  397. nla_nest_end(msg, nl_freqs);
  398. /* add bitrates */
  399. nl_rates = nla_nest_start(msg, NL80211_BAND_ATTR_RATES);
  400. if (!nl_rates)
  401. goto nla_put_failure;
  402. for (i = 0; i < dev->wiphy.bands[band]->n_bitrates; i++) {
  403. nl_rate = nla_nest_start(msg, i);
  404. if (!nl_rate)
  405. goto nla_put_failure;
  406. rate = &dev->wiphy.bands[band]->bitrates[i];
  407. NLA_PUT_U32(msg, NL80211_BITRATE_ATTR_RATE,
  408. rate->bitrate);
  409. if (rate->flags & IEEE80211_RATE_SHORT_PREAMBLE)
  410. NLA_PUT_FLAG(msg,
  411. NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE);
  412. nla_nest_end(msg, nl_rate);
  413. }
  414. nla_nest_end(msg, nl_rates);
  415. nla_nest_end(msg, nl_band);
  416. }
  417. nla_nest_end(msg, nl_bands);
  418. nl_cmds = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_COMMANDS);
  419. if (!nl_cmds)
  420. goto nla_put_failure;
  421. i = 0;
  422. #define CMD(op, n) \
  423. do { \
  424. if (dev->ops->op) { \
  425. i++; \
  426. NLA_PUT_U32(msg, i, NL80211_CMD_ ## n); \
  427. } \
  428. } while (0)
  429. CMD(add_virtual_intf, NEW_INTERFACE);
  430. CMD(change_virtual_intf, SET_INTERFACE);
  431. CMD(add_key, NEW_KEY);
  432. CMD(add_beacon, NEW_BEACON);
  433. CMD(add_station, NEW_STATION);
  434. CMD(add_mpath, NEW_MPATH);
  435. CMD(set_mesh_params, SET_MESH_PARAMS);
  436. CMD(change_bss, SET_BSS);
  437. CMD(auth, AUTHENTICATE);
  438. CMD(assoc, ASSOCIATE);
  439. CMD(deauth, DEAUTHENTICATE);
  440. CMD(disassoc, DISASSOCIATE);
  441. CMD(join_ibss, JOIN_IBSS);
  442. #undef CMD
  443. if (dev->ops->connect || dev->ops->auth) {
  444. i++;
  445. NLA_PUT_U32(msg, i, NL80211_CMD_CONNECT);
  446. }
  447. if (dev->ops->disconnect || dev->ops->deauth) {
  448. i++;
  449. NLA_PUT_U32(msg, i, NL80211_CMD_DISCONNECT);
  450. }
  451. nla_nest_end(msg, nl_cmds);
  452. return genlmsg_end(msg, hdr);
  453. nla_put_failure:
  454. genlmsg_cancel(msg, hdr);
  455. return -EMSGSIZE;
  456. }
  457. static int nl80211_dump_wiphy(struct sk_buff *skb, struct netlink_callback *cb)
  458. {
  459. int idx = 0;
  460. int start = cb->args[0];
  461. struct cfg80211_registered_device *dev;
  462. mutex_lock(&cfg80211_mutex);
  463. list_for_each_entry(dev, &cfg80211_rdev_list, list) {
  464. if (++idx <= start)
  465. continue;
  466. if (nl80211_send_wiphy(skb, NETLINK_CB(cb->skb).pid,
  467. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  468. dev) < 0) {
  469. idx--;
  470. break;
  471. }
  472. }
  473. mutex_unlock(&cfg80211_mutex);
  474. cb->args[0] = idx;
  475. return skb->len;
  476. }
  477. static int nl80211_get_wiphy(struct sk_buff *skb, struct genl_info *info)
  478. {
  479. struct sk_buff *msg;
  480. struct cfg80211_registered_device *dev;
  481. dev = cfg80211_get_dev_from_info(info);
  482. if (IS_ERR(dev))
  483. return PTR_ERR(dev);
  484. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  485. if (!msg)
  486. goto out_err;
  487. if (nl80211_send_wiphy(msg, info->snd_pid, info->snd_seq, 0, dev) < 0)
  488. goto out_free;
  489. cfg80211_unlock_rdev(dev);
  490. return genlmsg_reply(msg, info);
  491. out_free:
  492. nlmsg_free(msg);
  493. out_err:
  494. cfg80211_unlock_rdev(dev);
  495. return -ENOBUFS;
  496. }
  497. static const struct nla_policy txq_params_policy[NL80211_TXQ_ATTR_MAX + 1] = {
  498. [NL80211_TXQ_ATTR_QUEUE] = { .type = NLA_U8 },
  499. [NL80211_TXQ_ATTR_TXOP] = { .type = NLA_U16 },
  500. [NL80211_TXQ_ATTR_CWMIN] = { .type = NLA_U16 },
  501. [NL80211_TXQ_ATTR_CWMAX] = { .type = NLA_U16 },
  502. [NL80211_TXQ_ATTR_AIFS] = { .type = NLA_U8 },
  503. };
  504. static int parse_txq_params(struct nlattr *tb[],
  505. struct ieee80211_txq_params *txq_params)
  506. {
  507. if (!tb[NL80211_TXQ_ATTR_QUEUE] || !tb[NL80211_TXQ_ATTR_TXOP] ||
  508. !tb[NL80211_TXQ_ATTR_CWMIN] || !tb[NL80211_TXQ_ATTR_CWMAX] ||
  509. !tb[NL80211_TXQ_ATTR_AIFS])
  510. return -EINVAL;
  511. txq_params->queue = nla_get_u8(tb[NL80211_TXQ_ATTR_QUEUE]);
  512. txq_params->txop = nla_get_u16(tb[NL80211_TXQ_ATTR_TXOP]);
  513. txq_params->cwmin = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMIN]);
  514. txq_params->cwmax = nla_get_u16(tb[NL80211_TXQ_ATTR_CWMAX]);
  515. txq_params->aifs = nla_get_u8(tb[NL80211_TXQ_ATTR_AIFS]);
  516. return 0;
  517. }
  518. static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
  519. {
  520. struct cfg80211_registered_device *rdev;
  521. int result = 0, rem_txq_params = 0;
  522. struct nlattr *nl_txq_params;
  523. u32 changed;
  524. u8 retry_short = 0, retry_long = 0;
  525. u32 frag_threshold = 0, rts_threshold = 0;
  526. rtnl_lock();
  527. mutex_lock(&cfg80211_mutex);
  528. rdev = __cfg80211_rdev_from_info(info);
  529. if (IS_ERR(rdev)) {
  530. mutex_unlock(&cfg80211_mutex);
  531. result = PTR_ERR(rdev);
  532. goto unlock;
  533. }
  534. mutex_lock(&rdev->mtx);
  535. if (info->attrs[NL80211_ATTR_WIPHY_NAME])
  536. result = cfg80211_dev_rename(
  537. rdev, nla_data(info->attrs[NL80211_ATTR_WIPHY_NAME]));
  538. mutex_unlock(&cfg80211_mutex);
  539. if (result)
  540. goto bad_res;
  541. if (info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS]) {
  542. struct ieee80211_txq_params txq_params;
  543. struct nlattr *tb[NL80211_TXQ_ATTR_MAX + 1];
  544. if (!rdev->ops->set_txq_params) {
  545. result = -EOPNOTSUPP;
  546. goto bad_res;
  547. }
  548. nla_for_each_nested(nl_txq_params,
  549. info->attrs[NL80211_ATTR_WIPHY_TXQ_PARAMS],
  550. rem_txq_params) {
  551. nla_parse(tb, NL80211_TXQ_ATTR_MAX,
  552. nla_data(nl_txq_params),
  553. nla_len(nl_txq_params),
  554. txq_params_policy);
  555. result = parse_txq_params(tb, &txq_params);
  556. if (result)
  557. goto bad_res;
  558. result = rdev->ops->set_txq_params(&rdev->wiphy,
  559. &txq_params);
  560. if (result)
  561. goto bad_res;
  562. }
  563. }
  564. if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
  565. enum nl80211_channel_type channel_type = NL80211_CHAN_NO_HT;
  566. struct ieee80211_channel *chan;
  567. struct ieee80211_sta_ht_cap *ht_cap;
  568. u32 freq;
  569. if (!rdev->ops->set_channel) {
  570. result = -EOPNOTSUPP;
  571. goto bad_res;
  572. }
  573. result = -EINVAL;
  574. if (info->attrs[NL80211_ATTR_WIPHY_CHANNEL_TYPE]) {
  575. channel_type = nla_get_u32(info->attrs[
  576. NL80211_ATTR_WIPHY_CHANNEL_TYPE]);
  577. if (channel_type != NL80211_CHAN_NO_HT &&
  578. channel_type != NL80211_CHAN_HT20 &&
  579. channel_type != NL80211_CHAN_HT40PLUS &&
  580. channel_type != NL80211_CHAN_HT40MINUS)
  581. goto bad_res;
  582. }
  583. freq = nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]);
  584. chan = ieee80211_get_channel(&rdev->wiphy, freq);
  585. /* Primary channel not allowed */
  586. if (!chan || chan->flags & IEEE80211_CHAN_DISABLED)
  587. goto bad_res;
  588. if (channel_type == NL80211_CHAN_HT40MINUS &&
  589. (chan->flags & IEEE80211_CHAN_NO_HT40MINUS))
  590. goto bad_res;
  591. else if (channel_type == NL80211_CHAN_HT40PLUS &&
  592. (chan->flags & IEEE80211_CHAN_NO_HT40PLUS))
  593. goto bad_res;
  594. /*
  595. * At this point we know if that if HT40 was requested
  596. * we are allowed to use it and the extension channel
  597. * exists.
  598. */
  599. ht_cap = &rdev->wiphy.bands[chan->band]->ht_cap;
  600. /* no HT capabilities or intolerant */
  601. if (channel_type != NL80211_CHAN_NO_HT) {
  602. if (!ht_cap->ht_supported)
  603. goto bad_res;
  604. if (!(ht_cap->cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40) ||
  605. (ht_cap->cap & IEEE80211_HT_CAP_40MHZ_INTOLERANT))
  606. goto bad_res;
  607. }
  608. result = rdev->ops->set_channel(&rdev->wiphy, chan,
  609. channel_type);
  610. if (result)
  611. goto bad_res;
  612. }
  613. changed = 0;
  614. if (info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]) {
  615. retry_short = nla_get_u8(
  616. info->attrs[NL80211_ATTR_WIPHY_RETRY_SHORT]);
  617. if (retry_short == 0) {
  618. result = -EINVAL;
  619. goto bad_res;
  620. }
  621. changed |= WIPHY_PARAM_RETRY_SHORT;
  622. }
  623. if (info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]) {
  624. retry_long = nla_get_u8(
  625. info->attrs[NL80211_ATTR_WIPHY_RETRY_LONG]);
  626. if (retry_long == 0) {
  627. result = -EINVAL;
  628. goto bad_res;
  629. }
  630. changed |= WIPHY_PARAM_RETRY_LONG;
  631. }
  632. if (info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]) {
  633. frag_threshold = nla_get_u32(
  634. info->attrs[NL80211_ATTR_WIPHY_FRAG_THRESHOLD]);
  635. if (frag_threshold < 256) {
  636. result = -EINVAL;
  637. goto bad_res;
  638. }
  639. if (frag_threshold != (u32) -1) {
  640. /*
  641. * Fragments (apart from the last one) are required to
  642. * have even length. Make the fragmentation code
  643. * simpler by stripping LSB should someone try to use
  644. * odd threshold value.
  645. */
  646. frag_threshold &= ~0x1;
  647. }
  648. changed |= WIPHY_PARAM_FRAG_THRESHOLD;
  649. }
  650. if (info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]) {
  651. rts_threshold = nla_get_u32(
  652. info->attrs[NL80211_ATTR_WIPHY_RTS_THRESHOLD]);
  653. changed |= WIPHY_PARAM_RTS_THRESHOLD;
  654. }
  655. if (changed) {
  656. u8 old_retry_short, old_retry_long;
  657. u32 old_frag_threshold, old_rts_threshold;
  658. if (!rdev->ops->set_wiphy_params) {
  659. result = -EOPNOTSUPP;
  660. goto bad_res;
  661. }
  662. old_retry_short = rdev->wiphy.retry_short;
  663. old_retry_long = rdev->wiphy.retry_long;
  664. old_frag_threshold = rdev->wiphy.frag_threshold;
  665. old_rts_threshold = rdev->wiphy.rts_threshold;
  666. if (changed & WIPHY_PARAM_RETRY_SHORT)
  667. rdev->wiphy.retry_short = retry_short;
  668. if (changed & WIPHY_PARAM_RETRY_LONG)
  669. rdev->wiphy.retry_long = retry_long;
  670. if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
  671. rdev->wiphy.frag_threshold = frag_threshold;
  672. if (changed & WIPHY_PARAM_RTS_THRESHOLD)
  673. rdev->wiphy.rts_threshold = rts_threshold;
  674. result = rdev->ops->set_wiphy_params(&rdev->wiphy, changed);
  675. if (result) {
  676. rdev->wiphy.retry_short = old_retry_short;
  677. rdev->wiphy.retry_long = old_retry_long;
  678. rdev->wiphy.frag_threshold = old_frag_threshold;
  679. rdev->wiphy.rts_threshold = old_rts_threshold;
  680. }
  681. }
  682. bad_res:
  683. mutex_unlock(&rdev->mtx);
  684. unlock:
  685. rtnl_unlock();
  686. return result;
  687. }
  688. static int nl80211_send_iface(struct sk_buff *msg, u32 pid, u32 seq, int flags,
  689. struct cfg80211_registered_device *rdev,
  690. struct net_device *dev)
  691. {
  692. void *hdr;
  693. hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_INTERFACE);
  694. if (!hdr)
  695. return -1;
  696. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
  697. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
  698. NLA_PUT_STRING(msg, NL80211_ATTR_IFNAME, dev->name);
  699. NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE, dev->ieee80211_ptr->iftype);
  700. return genlmsg_end(msg, hdr);
  701. nla_put_failure:
  702. genlmsg_cancel(msg, hdr);
  703. return -EMSGSIZE;
  704. }
  705. static int nl80211_dump_interface(struct sk_buff *skb, struct netlink_callback *cb)
  706. {
  707. int wp_idx = 0;
  708. int if_idx = 0;
  709. int wp_start = cb->args[0];
  710. int if_start = cb->args[1];
  711. struct cfg80211_registered_device *dev;
  712. struct wireless_dev *wdev;
  713. mutex_lock(&cfg80211_mutex);
  714. list_for_each_entry(dev, &cfg80211_rdev_list, list) {
  715. if (wp_idx < wp_start) {
  716. wp_idx++;
  717. continue;
  718. }
  719. if_idx = 0;
  720. mutex_lock(&dev->devlist_mtx);
  721. list_for_each_entry(wdev, &dev->netdev_list, list) {
  722. if (if_idx < if_start) {
  723. if_idx++;
  724. continue;
  725. }
  726. if (nl80211_send_iface(skb, NETLINK_CB(cb->skb).pid,
  727. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  728. dev, wdev->netdev) < 0) {
  729. mutex_unlock(&dev->devlist_mtx);
  730. goto out;
  731. }
  732. if_idx++;
  733. }
  734. mutex_unlock(&dev->devlist_mtx);
  735. wp_idx++;
  736. }
  737. out:
  738. mutex_unlock(&cfg80211_mutex);
  739. cb->args[0] = wp_idx;
  740. cb->args[1] = if_idx;
  741. return skb->len;
  742. }
  743. static int nl80211_get_interface(struct sk_buff *skb, struct genl_info *info)
  744. {
  745. struct sk_buff *msg;
  746. struct cfg80211_registered_device *dev;
  747. struct net_device *netdev;
  748. int err;
  749. err = get_rdev_dev_by_info_ifindex(info->attrs, &dev, &netdev);
  750. if (err)
  751. return err;
  752. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  753. if (!msg)
  754. goto out_err;
  755. if (nl80211_send_iface(msg, info->snd_pid, info->snd_seq, 0,
  756. dev, netdev) < 0)
  757. goto out_free;
  758. dev_put(netdev);
  759. cfg80211_unlock_rdev(dev);
  760. return genlmsg_reply(msg, info);
  761. out_free:
  762. nlmsg_free(msg);
  763. out_err:
  764. dev_put(netdev);
  765. cfg80211_unlock_rdev(dev);
  766. return -ENOBUFS;
  767. }
  768. static const struct nla_policy mntr_flags_policy[NL80211_MNTR_FLAG_MAX + 1] = {
  769. [NL80211_MNTR_FLAG_FCSFAIL] = { .type = NLA_FLAG },
  770. [NL80211_MNTR_FLAG_PLCPFAIL] = { .type = NLA_FLAG },
  771. [NL80211_MNTR_FLAG_CONTROL] = { .type = NLA_FLAG },
  772. [NL80211_MNTR_FLAG_OTHER_BSS] = { .type = NLA_FLAG },
  773. [NL80211_MNTR_FLAG_COOK_FRAMES] = { .type = NLA_FLAG },
  774. };
  775. static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
  776. {
  777. struct nlattr *flags[NL80211_MNTR_FLAG_MAX + 1];
  778. int flag;
  779. *mntrflags = 0;
  780. if (!nla)
  781. return -EINVAL;
  782. if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
  783. nla, mntr_flags_policy))
  784. return -EINVAL;
  785. for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
  786. if (flags[flag])
  787. *mntrflags |= (1<<flag);
  788. return 0;
  789. }
  790. static int nl80211_set_interface(struct sk_buff *skb, struct genl_info *info)
  791. {
  792. struct cfg80211_registered_device *rdev;
  793. struct vif_params params;
  794. int err;
  795. enum nl80211_iftype otype, ntype;
  796. struct net_device *dev;
  797. u32 _flags, *flags = NULL;
  798. bool change = false;
  799. memset(&params, 0, sizeof(params));
  800. rtnl_lock();
  801. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  802. if (err)
  803. goto unlock_rtnl;
  804. otype = ntype = dev->ieee80211_ptr->iftype;
  805. if (info->attrs[NL80211_ATTR_IFTYPE]) {
  806. ntype = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
  807. if (otype != ntype)
  808. change = true;
  809. if (ntype > NL80211_IFTYPE_MAX) {
  810. err = -EINVAL;
  811. goto unlock;
  812. }
  813. }
  814. if (!rdev->ops->change_virtual_intf ||
  815. !(rdev->wiphy.interface_modes & (1 << ntype))) {
  816. err = -EOPNOTSUPP;
  817. goto unlock;
  818. }
  819. if (info->attrs[NL80211_ATTR_MESH_ID]) {
  820. if (ntype != NL80211_IFTYPE_MESH_POINT) {
  821. err = -EINVAL;
  822. goto unlock;
  823. }
  824. params.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
  825. params.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
  826. change = true;
  827. }
  828. if (info->attrs[NL80211_ATTR_MNTR_FLAGS]) {
  829. if (ntype != NL80211_IFTYPE_MONITOR) {
  830. err = -EINVAL;
  831. goto unlock;
  832. }
  833. err = parse_monitor_flags(info->attrs[NL80211_ATTR_MNTR_FLAGS],
  834. &_flags);
  835. if (err)
  836. goto unlock;
  837. flags = &_flags;
  838. change = true;
  839. }
  840. if (change)
  841. err = rdev->ops->change_virtual_intf(&rdev->wiphy, dev,
  842. ntype, flags, &params);
  843. else
  844. err = 0;
  845. WARN_ON(!err && dev->ieee80211_ptr->iftype != ntype);
  846. if (!err && (ntype != otype)) {
  847. if (otype == NL80211_IFTYPE_ADHOC)
  848. cfg80211_clear_ibss(dev, false);
  849. }
  850. unlock:
  851. dev_put(dev);
  852. cfg80211_unlock_rdev(rdev);
  853. unlock_rtnl:
  854. rtnl_unlock();
  855. return err;
  856. }
  857. static int nl80211_new_interface(struct sk_buff *skb, struct genl_info *info)
  858. {
  859. struct cfg80211_registered_device *rdev;
  860. struct vif_params params;
  861. int err;
  862. enum nl80211_iftype type = NL80211_IFTYPE_UNSPECIFIED;
  863. u32 flags;
  864. memset(&params, 0, sizeof(params));
  865. if (!info->attrs[NL80211_ATTR_IFNAME])
  866. return -EINVAL;
  867. if (info->attrs[NL80211_ATTR_IFTYPE]) {
  868. type = nla_get_u32(info->attrs[NL80211_ATTR_IFTYPE]);
  869. if (type > NL80211_IFTYPE_MAX)
  870. return -EINVAL;
  871. }
  872. rtnl_lock();
  873. rdev = cfg80211_get_dev_from_info(info);
  874. if (IS_ERR(rdev)) {
  875. err = PTR_ERR(rdev);
  876. goto unlock_rtnl;
  877. }
  878. if (!rdev->ops->add_virtual_intf ||
  879. !(rdev->wiphy.interface_modes & (1 << type))) {
  880. err = -EOPNOTSUPP;
  881. goto unlock;
  882. }
  883. if (type == NL80211_IFTYPE_MESH_POINT &&
  884. info->attrs[NL80211_ATTR_MESH_ID]) {
  885. params.mesh_id = nla_data(info->attrs[NL80211_ATTR_MESH_ID]);
  886. params.mesh_id_len = nla_len(info->attrs[NL80211_ATTR_MESH_ID]);
  887. }
  888. err = parse_monitor_flags(type == NL80211_IFTYPE_MONITOR ?
  889. info->attrs[NL80211_ATTR_MNTR_FLAGS] : NULL,
  890. &flags);
  891. err = rdev->ops->add_virtual_intf(&rdev->wiphy,
  892. nla_data(info->attrs[NL80211_ATTR_IFNAME]),
  893. type, err ? NULL : &flags, &params);
  894. unlock:
  895. cfg80211_unlock_rdev(rdev);
  896. unlock_rtnl:
  897. rtnl_unlock();
  898. return err;
  899. }
  900. static int nl80211_del_interface(struct sk_buff *skb, struct genl_info *info)
  901. {
  902. struct cfg80211_registered_device *rdev;
  903. int ifindex, err;
  904. struct net_device *dev;
  905. rtnl_lock();
  906. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  907. if (err)
  908. goto unlock_rtnl;
  909. ifindex = dev->ifindex;
  910. dev_put(dev);
  911. if (!rdev->ops->del_virtual_intf) {
  912. err = -EOPNOTSUPP;
  913. goto out;
  914. }
  915. err = rdev->ops->del_virtual_intf(&rdev->wiphy, ifindex);
  916. out:
  917. cfg80211_unlock_rdev(rdev);
  918. unlock_rtnl:
  919. rtnl_unlock();
  920. return err;
  921. }
  922. struct get_key_cookie {
  923. struct sk_buff *msg;
  924. int error;
  925. int idx;
  926. };
  927. static void get_key_callback(void *c, struct key_params *params)
  928. {
  929. struct nlattr *key;
  930. struct get_key_cookie *cookie = c;
  931. if (params->key)
  932. NLA_PUT(cookie->msg, NL80211_ATTR_KEY_DATA,
  933. params->key_len, params->key);
  934. if (params->seq)
  935. NLA_PUT(cookie->msg, NL80211_ATTR_KEY_SEQ,
  936. params->seq_len, params->seq);
  937. if (params->cipher)
  938. NLA_PUT_U32(cookie->msg, NL80211_ATTR_KEY_CIPHER,
  939. params->cipher);
  940. key = nla_nest_start(cookie->msg, NL80211_ATTR_KEY);
  941. if (!key)
  942. goto nla_put_failure;
  943. if (params->key)
  944. NLA_PUT(cookie->msg, NL80211_KEY_DATA,
  945. params->key_len, params->key);
  946. if (params->seq)
  947. NLA_PUT(cookie->msg, NL80211_KEY_SEQ,
  948. params->seq_len, params->seq);
  949. if (params->cipher)
  950. NLA_PUT_U32(cookie->msg, NL80211_KEY_CIPHER,
  951. params->cipher);
  952. NLA_PUT_U8(cookie->msg, NL80211_ATTR_KEY_IDX, cookie->idx);
  953. nla_nest_end(cookie->msg, key);
  954. return;
  955. nla_put_failure:
  956. cookie->error = 1;
  957. }
  958. static int nl80211_get_key(struct sk_buff *skb, struct genl_info *info)
  959. {
  960. struct cfg80211_registered_device *rdev;
  961. int err;
  962. struct net_device *dev;
  963. u8 key_idx = 0;
  964. u8 *mac_addr = NULL;
  965. struct get_key_cookie cookie = {
  966. .error = 0,
  967. };
  968. void *hdr;
  969. struct sk_buff *msg;
  970. if (info->attrs[NL80211_ATTR_KEY_IDX])
  971. key_idx = nla_get_u8(info->attrs[NL80211_ATTR_KEY_IDX]);
  972. if (key_idx > 5)
  973. return -EINVAL;
  974. if (info->attrs[NL80211_ATTR_MAC])
  975. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  976. rtnl_lock();
  977. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  978. if (err)
  979. goto unlock_rtnl;
  980. if (!rdev->ops->get_key) {
  981. err = -EOPNOTSUPP;
  982. goto out;
  983. }
  984. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  985. if (!msg) {
  986. err = -ENOMEM;
  987. goto out;
  988. }
  989. hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
  990. NL80211_CMD_NEW_KEY);
  991. if (IS_ERR(hdr)) {
  992. err = PTR_ERR(hdr);
  993. goto free_msg;
  994. }
  995. cookie.msg = msg;
  996. cookie.idx = key_idx;
  997. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
  998. NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_idx);
  999. if (mac_addr)
  1000. NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
  1001. err = rdev->ops->get_key(&rdev->wiphy, dev, key_idx, mac_addr,
  1002. &cookie, get_key_callback);
  1003. if (err)
  1004. goto free_msg;
  1005. if (cookie.error)
  1006. goto nla_put_failure;
  1007. genlmsg_end(msg, hdr);
  1008. err = genlmsg_reply(msg, info);
  1009. goto out;
  1010. nla_put_failure:
  1011. err = -ENOBUFS;
  1012. free_msg:
  1013. nlmsg_free(msg);
  1014. out:
  1015. cfg80211_unlock_rdev(rdev);
  1016. dev_put(dev);
  1017. unlock_rtnl:
  1018. rtnl_unlock();
  1019. return err;
  1020. }
  1021. static int nl80211_set_key(struct sk_buff *skb, struct genl_info *info)
  1022. {
  1023. struct cfg80211_registered_device *rdev;
  1024. struct key_parse key;
  1025. int err;
  1026. struct net_device *dev;
  1027. int (*func)(struct wiphy *wiphy, struct net_device *netdev,
  1028. u8 key_index);
  1029. err = nl80211_parse_key(info, &key);
  1030. if (err)
  1031. return err;
  1032. if (key.idx < 0)
  1033. return -EINVAL;
  1034. /* only support setting default key */
  1035. if (!key.def && !key.defmgmt)
  1036. return -EINVAL;
  1037. rtnl_lock();
  1038. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1039. if (err)
  1040. goto unlock_rtnl;
  1041. if (key.def)
  1042. func = rdev->ops->set_default_key;
  1043. else
  1044. func = rdev->ops->set_default_mgmt_key;
  1045. if (!func) {
  1046. err = -EOPNOTSUPP;
  1047. goto out;
  1048. }
  1049. wdev_lock(dev->ieee80211_ptr);
  1050. err = nl80211_key_allowed(dev->ieee80211_ptr);
  1051. if (!err)
  1052. err = func(&rdev->wiphy, dev, key.idx);
  1053. #ifdef CONFIG_WIRELESS_EXT
  1054. if (!err) {
  1055. if (func == rdev->ops->set_default_key)
  1056. dev->ieee80211_ptr->wext.default_key = key.idx;
  1057. else
  1058. dev->ieee80211_ptr->wext.default_mgmt_key = key.idx;
  1059. }
  1060. #endif
  1061. wdev_unlock(dev->ieee80211_ptr);
  1062. out:
  1063. cfg80211_unlock_rdev(rdev);
  1064. dev_put(dev);
  1065. unlock_rtnl:
  1066. rtnl_unlock();
  1067. return err;
  1068. }
  1069. static int nl80211_new_key(struct sk_buff *skb, struct genl_info *info)
  1070. {
  1071. struct cfg80211_registered_device *rdev;
  1072. int err;
  1073. struct net_device *dev;
  1074. struct key_parse key;
  1075. u8 *mac_addr = NULL;
  1076. err = nl80211_parse_key(info, &key);
  1077. if (err)
  1078. return err;
  1079. if (!key.p.key)
  1080. return -EINVAL;
  1081. if (info->attrs[NL80211_ATTR_MAC])
  1082. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1083. rtnl_lock();
  1084. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1085. if (err)
  1086. goto unlock_rtnl;
  1087. if (!rdev->ops->add_key) {
  1088. err = -EOPNOTSUPP;
  1089. goto out;
  1090. }
  1091. if (cfg80211_validate_key_settings(rdev, &key.p, key.idx, mac_addr)) {
  1092. err = -EINVAL;
  1093. goto out;
  1094. }
  1095. wdev_lock(dev->ieee80211_ptr);
  1096. err = nl80211_key_allowed(dev->ieee80211_ptr);
  1097. if (!err)
  1098. err = rdev->ops->add_key(&rdev->wiphy, dev, key.idx,
  1099. mac_addr, &key.p);
  1100. wdev_unlock(dev->ieee80211_ptr);
  1101. out:
  1102. cfg80211_unlock_rdev(rdev);
  1103. dev_put(dev);
  1104. unlock_rtnl:
  1105. rtnl_unlock();
  1106. return err;
  1107. }
  1108. static int nl80211_del_key(struct sk_buff *skb, struct genl_info *info)
  1109. {
  1110. struct cfg80211_registered_device *rdev;
  1111. int err;
  1112. struct net_device *dev;
  1113. u8 *mac_addr = NULL;
  1114. struct key_parse key;
  1115. err = nl80211_parse_key(info, &key);
  1116. if (err)
  1117. return err;
  1118. if (info->attrs[NL80211_ATTR_MAC])
  1119. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1120. rtnl_lock();
  1121. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1122. if (err)
  1123. goto unlock_rtnl;
  1124. if (!rdev->ops->del_key) {
  1125. err = -EOPNOTSUPP;
  1126. goto out;
  1127. }
  1128. wdev_lock(dev->ieee80211_ptr);
  1129. err = nl80211_key_allowed(dev->ieee80211_ptr);
  1130. if (!err)
  1131. err = rdev->ops->del_key(&rdev->wiphy, dev, key.idx, mac_addr);
  1132. #ifdef CONFIG_WIRELESS_EXT
  1133. if (!err) {
  1134. if (key.idx == dev->ieee80211_ptr->wext.default_key)
  1135. dev->ieee80211_ptr->wext.default_key = -1;
  1136. else if (key.idx == dev->ieee80211_ptr->wext.default_mgmt_key)
  1137. dev->ieee80211_ptr->wext.default_mgmt_key = -1;
  1138. }
  1139. #endif
  1140. wdev_unlock(dev->ieee80211_ptr);
  1141. out:
  1142. cfg80211_unlock_rdev(rdev);
  1143. dev_put(dev);
  1144. unlock_rtnl:
  1145. rtnl_unlock();
  1146. return err;
  1147. }
  1148. static int nl80211_addset_beacon(struct sk_buff *skb, struct genl_info *info)
  1149. {
  1150. int (*call)(struct wiphy *wiphy, struct net_device *dev,
  1151. struct beacon_parameters *info);
  1152. struct cfg80211_registered_device *rdev;
  1153. int err;
  1154. struct net_device *dev;
  1155. struct beacon_parameters params;
  1156. int haveinfo = 0;
  1157. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_BEACON_TAIL]))
  1158. return -EINVAL;
  1159. rtnl_lock();
  1160. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1161. if (err)
  1162. goto unlock_rtnl;
  1163. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) {
  1164. err = -EOPNOTSUPP;
  1165. goto out;
  1166. }
  1167. switch (info->genlhdr->cmd) {
  1168. case NL80211_CMD_NEW_BEACON:
  1169. /* these are required for NEW_BEACON */
  1170. if (!info->attrs[NL80211_ATTR_BEACON_INTERVAL] ||
  1171. !info->attrs[NL80211_ATTR_DTIM_PERIOD] ||
  1172. !info->attrs[NL80211_ATTR_BEACON_HEAD]) {
  1173. err = -EINVAL;
  1174. goto out;
  1175. }
  1176. call = rdev->ops->add_beacon;
  1177. break;
  1178. case NL80211_CMD_SET_BEACON:
  1179. call = rdev->ops->set_beacon;
  1180. break;
  1181. default:
  1182. WARN_ON(1);
  1183. err = -EOPNOTSUPP;
  1184. goto out;
  1185. }
  1186. if (!call) {
  1187. err = -EOPNOTSUPP;
  1188. goto out;
  1189. }
  1190. memset(&params, 0, sizeof(params));
  1191. if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
  1192. params.interval =
  1193. nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
  1194. haveinfo = 1;
  1195. }
  1196. if (info->attrs[NL80211_ATTR_DTIM_PERIOD]) {
  1197. params.dtim_period =
  1198. nla_get_u32(info->attrs[NL80211_ATTR_DTIM_PERIOD]);
  1199. haveinfo = 1;
  1200. }
  1201. if (info->attrs[NL80211_ATTR_BEACON_HEAD]) {
  1202. params.head = nla_data(info->attrs[NL80211_ATTR_BEACON_HEAD]);
  1203. params.head_len =
  1204. nla_len(info->attrs[NL80211_ATTR_BEACON_HEAD]);
  1205. haveinfo = 1;
  1206. }
  1207. if (info->attrs[NL80211_ATTR_BEACON_TAIL]) {
  1208. params.tail = nla_data(info->attrs[NL80211_ATTR_BEACON_TAIL]);
  1209. params.tail_len =
  1210. nla_len(info->attrs[NL80211_ATTR_BEACON_TAIL]);
  1211. haveinfo = 1;
  1212. }
  1213. if (!haveinfo) {
  1214. err = -EINVAL;
  1215. goto out;
  1216. }
  1217. err = call(&rdev->wiphy, dev, &params);
  1218. out:
  1219. cfg80211_unlock_rdev(rdev);
  1220. dev_put(dev);
  1221. unlock_rtnl:
  1222. rtnl_unlock();
  1223. return err;
  1224. }
  1225. static int nl80211_del_beacon(struct sk_buff *skb, struct genl_info *info)
  1226. {
  1227. struct cfg80211_registered_device *rdev;
  1228. int err;
  1229. struct net_device *dev;
  1230. rtnl_lock();
  1231. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1232. if (err)
  1233. goto unlock_rtnl;
  1234. if (!rdev->ops->del_beacon) {
  1235. err = -EOPNOTSUPP;
  1236. goto out;
  1237. }
  1238. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) {
  1239. err = -EOPNOTSUPP;
  1240. goto out;
  1241. }
  1242. err = rdev->ops->del_beacon(&rdev->wiphy, dev);
  1243. out:
  1244. cfg80211_unlock_rdev(rdev);
  1245. dev_put(dev);
  1246. unlock_rtnl:
  1247. rtnl_unlock();
  1248. return err;
  1249. }
  1250. static const struct nla_policy sta_flags_policy[NL80211_STA_FLAG_MAX + 1] = {
  1251. [NL80211_STA_FLAG_AUTHORIZED] = { .type = NLA_FLAG },
  1252. [NL80211_STA_FLAG_SHORT_PREAMBLE] = { .type = NLA_FLAG },
  1253. [NL80211_STA_FLAG_WME] = { .type = NLA_FLAG },
  1254. [NL80211_STA_FLAG_MFP] = { .type = NLA_FLAG },
  1255. };
  1256. static int parse_station_flags(struct genl_info *info,
  1257. struct station_parameters *params)
  1258. {
  1259. struct nlattr *flags[NL80211_STA_FLAG_MAX + 1];
  1260. struct nlattr *nla;
  1261. int flag;
  1262. /*
  1263. * Try parsing the new attribute first so userspace
  1264. * can specify both for older kernels.
  1265. */
  1266. nla = info->attrs[NL80211_ATTR_STA_FLAGS2];
  1267. if (nla) {
  1268. struct nl80211_sta_flag_update *sta_flags;
  1269. sta_flags = nla_data(nla);
  1270. params->sta_flags_mask = sta_flags->mask;
  1271. params->sta_flags_set = sta_flags->set;
  1272. if ((params->sta_flags_mask |
  1273. params->sta_flags_set) & BIT(__NL80211_STA_FLAG_INVALID))
  1274. return -EINVAL;
  1275. return 0;
  1276. }
  1277. /* if present, parse the old attribute */
  1278. nla = info->attrs[NL80211_ATTR_STA_FLAGS];
  1279. if (!nla)
  1280. return 0;
  1281. if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
  1282. nla, sta_flags_policy))
  1283. return -EINVAL;
  1284. params->sta_flags_mask = (1 << __NL80211_STA_FLAG_AFTER_LAST) - 1;
  1285. params->sta_flags_mask &= ~1;
  1286. for (flag = 1; flag <= NL80211_STA_FLAG_MAX; flag++)
  1287. if (flags[flag])
  1288. params->sta_flags_set |= (1<<flag);
  1289. return 0;
  1290. }
  1291. static u16 nl80211_calculate_bitrate(struct rate_info *rate)
  1292. {
  1293. int modulation, streams, bitrate;
  1294. if (!(rate->flags & RATE_INFO_FLAGS_MCS))
  1295. return rate->legacy;
  1296. /* the formula below does only work for MCS values smaller than 32 */
  1297. if (rate->mcs >= 32)
  1298. return 0;
  1299. modulation = rate->mcs & 7;
  1300. streams = (rate->mcs >> 3) + 1;
  1301. bitrate = (rate->flags & RATE_INFO_FLAGS_40_MHZ_WIDTH) ?
  1302. 13500000 : 6500000;
  1303. if (modulation < 4)
  1304. bitrate *= (modulation + 1);
  1305. else if (modulation == 4)
  1306. bitrate *= (modulation + 2);
  1307. else
  1308. bitrate *= (modulation + 3);
  1309. bitrate *= streams;
  1310. if (rate->flags & RATE_INFO_FLAGS_SHORT_GI)
  1311. bitrate = (bitrate / 9) * 10;
  1312. /* do NOT round down here */
  1313. return (bitrate + 50000) / 100000;
  1314. }
  1315. static int nl80211_send_station(struct sk_buff *msg, u32 pid, u32 seq,
  1316. int flags, struct net_device *dev,
  1317. u8 *mac_addr, struct station_info *sinfo)
  1318. {
  1319. void *hdr;
  1320. struct nlattr *sinfoattr, *txrate;
  1321. u16 bitrate;
  1322. hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
  1323. if (!hdr)
  1324. return -1;
  1325. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
  1326. NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, mac_addr);
  1327. sinfoattr = nla_nest_start(msg, NL80211_ATTR_STA_INFO);
  1328. if (!sinfoattr)
  1329. goto nla_put_failure;
  1330. if (sinfo->filled & STATION_INFO_INACTIVE_TIME)
  1331. NLA_PUT_U32(msg, NL80211_STA_INFO_INACTIVE_TIME,
  1332. sinfo->inactive_time);
  1333. if (sinfo->filled & STATION_INFO_RX_BYTES)
  1334. NLA_PUT_U32(msg, NL80211_STA_INFO_RX_BYTES,
  1335. sinfo->rx_bytes);
  1336. if (sinfo->filled & STATION_INFO_TX_BYTES)
  1337. NLA_PUT_U32(msg, NL80211_STA_INFO_TX_BYTES,
  1338. sinfo->tx_bytes);
  1339. if (sinfo->filled & STATION_INFO_LLID)
  1340. NLA_PUT_U16(msg, NL80211_STA_INFO_LLID,
  1341. sinfo->llid);
  1342. if (sinfo->filled & STATION_INFO_PLID)
  1343. NLA_PUT_U16(msg, NL80211_STA_INFO_PLID,
  1344. sinfo->plid);
  1345. if (sinfo->filled & STATION_INFO_PLINK_STATE)
  1346. NLA_PUT_U8(msg, NL80211_STA_INFO_PLINK_STATE,
  1347. sinfo->plink_state);
  1348. if (sinfo->filled & STATION_INFO_SIGNAL)
  1349. NLA_PUT_U8(msg, NL80211_STA_INFO_SIGNAL,
  1350. sinfo->signal);
  1351. if (sinfo->filled & STATION_INFO_TX_BITRATE) {
  1352. txrate = nla_nest_start(msg, NL80211_STA_INFO_TX_BITRATE);
  1353. if (!txrate)
  1354. goto nla_put_failure;
  1355. /* nl80211_calculate_bitrate will return 0 for mcs >= 32 */
  1356. bitrate = nl80211_calculate_bitrate(&sinfo->txrate);
  1357. if (bitrate > 0)
  1358. NLA_PUT_U16(msg, NL80211_RATE_INFO_BITRATE, bitrate);
  1359. if (sinfo->txrate.flags & RATE_INFO_FLAGS_MCS)
  1360. NLA_PUT_U8(msg, NL80211_RATE_INFO_MCS,
  1361. sinfo->txrate.mcs);
  1362. if (sinfo->txrate.flags & RATE_INFO_FLAGS_40_MHZ_WIDTH)
  1363. NLA_PUT_FLAG(msg, NL80211_RATE_INFO_40_MHZ_WIDTH);
  1364. if (sinfo->txrate.flags & RATE_INFO_FLAGS_SHORT_GI)
  1365. NLA_PUT_FLAG(msg, NL80211_RATE_INFO_SHORT_GI);
  1366. nla_nest_end(msg, txrate);
  1367. }
  1368. if (sinfo->filled & STATION_INFO_RX_PACKETS)
  1369. NLA_PUT_U32(msg, NL80211_STA_INFO_RX_PACKETS,
  1370. sinfo->rx_packets);
  1371. if (sinfo->filled & STATION_INFO_TX_PACKETS)
  1372. NLA_PUT_U32(msg, NL80211_STA_INFO_TX_PACKETS,
  1373. sinfo->tx_packets);
  1374. nla_nest_end(msg, sinfoattr);
  1375. return genlmsg_end(msg, hdr);
  1376. nla_put_failure:
  1377. genlmsg_cancel(msg, hdr);
  1378. return -EMSGSIZE;
  1379. }
  1380. static int nl80211_dump_station(struct sk_buff *skb,
  1381. struct netlink_callback *cb)
  1382. {
  1383. struct station_info sinfo;
  1384. struct cfg80211_registered_device *dev;
  1385. struct net_device *netdev;
  1386. u8 mac_addr[ETH_ALEN];
  1387. int ifidx = cb->args[0];
  1388. int sta_idx = cb->args[1];
  1389. int err;
  1390. if (!ifidx) {
  1391. err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
  1392. nl80211_fam.attrbuf, nl80211_fam.maxattr,
  1393. nl80211_policy);
  1394. if (err)
  1395. return err;
  1396. if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
  1397. return -EINVAL;
  1398. ifidx = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
  1399. if (!ifidx)
  1400. return -EINVAL;
  1401. }
  1402. rtnl_lock();
  1403. netdev = __dev_get_by_index(&init_net, ifidx);
  1404. if (!netdev) {
  1405. err = -ENODEV;
  1406. goto out_rtnl;
  1407. }
  1408. dev = cfg80211_get_dev_from_ifindex(ifidx);
  1409. if (IS_ERR(dev)) {
  1410. err = PTR_ERR(dev);
  1411. goto out_rtnl;
  1412. }
  1413. if (!dev->ops->dump_station) {
  1414. err = -EOPNOTSUPP;
  1415. goto out_err;
  1416. }
  1417. while (1) {
  1418. err = dev->ops->dump_station(&dev->wiphy, netdev, sta_idx,
  1419. mac_addr, &sinfo);
  1420. if (err == -ENOENT)
  1421. break;
  1422. if (err)
  1423. goto out_err;
  1424. if (nl80211_send_station(skb,
  1425. NETLINK_CB(cb->skb).pid,
  1426. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  1427. netdev, mac_addr,
  1428. &sinfo) < 0)
  1429. goto out;
  1430. sta_idx++;
  1431. }
  1432. out:
  1433. cb->args[1] = sta_idx;
  1434. err = skb->len;
  1435. out_err:
  1436. cfg80211_unlock_rdev(dev);
  1437. out_rtnl:
  1438. rtnl_unlock();
  1439. return err;
  1440. }
  1441. static int nl80211_get_station(struct sk_buff *skb, struct genl_info *info)
  1442. {
  1443. struct cfg80211_registered_device *rdev;
  1444. int err;
  1445. struct net_device *dev;
  1446. struct station_info sinfo;
  1447. struct sk_buff *msg;
  1448. u8 *mac_addr = NULL;
  1449. memset(&sinfo, 0, sizeof(sinfo));
  1450. if (!info->attrs[NL80211_ATTR_MAC])
  1451. return -EINVAL;
  1452. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1453. rtnl_lock();
  1454. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1455. if (err)
  1456. goto out_rtnl;
  1457. if (!rdev->ops->get_station) {
  1458. err = -EOPNOTSUPP;
  1459. goto out;
  1460. }
  1461. err = rdev->ops->get_station(&rdev->wiphy, dev, mac_addr, &sinfo);
  1462. if (err)
  1463. goto out;
  1464. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  1465. if (!msg)
  1466. goto out;
  1467. if (nl80211_send_station(msg, info->snd_pid, info->snd_seq, 0,
  1468. dev, mac_addr, &sinfo) < 0)
  1469. goto out_free;
  1470. err = genlmsg_reply(msg, info);
  1471. goto out;
  1472. out_free:
  1473. nlmsg_free(msg);
  1474. out:
  1475. cfg80211_unlock_rdev(rdev);
  1476. dev_put(dev);
  1477. out_rtnl:
  1478. rtnl_unlock();
  1479. return err;
  1480. }
  1481. /*
  1482. * Get vlan interface making sure it is on the right wiphy.
  1483. */
  1484. static int get_vlan(struct nlattr *vlanattr,
  1485. struct cfg80211_registered_device *rdev,
  1486. struct net_device **vlan)
  1487. {
  1488. *vlan = NULL;
  1489. if (vlanattr) {
  1490. *vlan = dev_get_by_index(&init_net, nla_get_u32(vlanattr));
  1491. if (!*vlan)
  1492. return -ENODEV;
  1493. if (!(*vlan)->ieee80211_ptr)
  1494. return -EINVAL;
  1495. if ((*vlan)->ieee80211_ptr->wiphy != &rdev->wiphy)
  1496. return -EINVAL;
  1497. }
  1498. return 0;
  1499. }
  1500. static int nl80211_set_station(struct sk_buff *skb, struct genl_info *info)
  1501. {
  1502. struct cfg80211_registered_device *rdev;
  1503. int err;
  1504. struct net_device *dev;
  1505. struct station_parameters params;
  1506. u8 *mac_addr = NULL;
  1507. memset(&params, 0, sizeof(params));
  1508. params.listen_interval = -1;
  1509. if (info->attrs[NL80211_ATTR_STA_AID])
  1510. return -EINVAL;
  1511. if (!info->attrs[NL80211_ATTR_MAC])
  1512. return -EINVAL;
  1513. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1514. if (info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]) {
  1515. params.supported_rates =
  1516. nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
  1517. params.supported_rates_len =
  1518. nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
  1519. }
  1520. if (info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
  1521. params.listen_interval =
  1522. nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
  1523. if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
  1524. params.ht_capa =
  1525. nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
  1526. if (parse_station_flags(info, &params))
  1527. return -EINVAL;
  1528. if (info->attrs[NL80211_ATTR_STA_PLINK_ACTION])
  1529. params.plink_action =
  1530. nla_get_u8(info->attrs[NL80211_ATTR_STA_PLINK_ACTION]);
  1531. rtnl_lock();
  1532. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1533. if (err)
  1534. goto out_rtnl;
  1535. err = get_vlan(info->attrs[NL80211_ATTR_STA_VLAN], rdev, &params.vlan);
  1536. if (err)
  1537. goto out;
  1538. /* validate settings */
  1539. err = 0;
  1540. switch (dev->ieee80211_ptr->iftype) {
  1541. case NL80211_IFTYPE_AP:
  1542. case NL80211_IFTYPE_AP_VLAN:
  1543. /* disallow mesh-specific things */
  1544. if (params.plink_action)
  1545. err = -EINVAL;
  1546. break;
  1547. case NL80211_IFTYPE_STATION:
  1548. /* disallow everything but AUTHORIZED flag */
  1549. if (params.plink_action)
  1550. err = -EINVAL;
  1551. if (params.vlan)
  1552. err = -EINVAL;
  1553. if (params.supported_rates)
  1554. err = -EINVAL;
  1555. if (params.ht_capa)
  1556. err = -EINVAL;
  1557. if (params.listen_interval >= 0)
  1558. err = -EINVAL;
  1559. if (params.sta_flags_mask & ~BIT(NL80211_STA_FLAG_AUTHORIZED))
  1560. err = -EINVAL;
  1561. break;
  1562. case NL80211_IFTYPE_MESH_POINT:
  1563. /* disallow things mesh doesn't support */
  1564. if (params.vlan)
  1565. err = -EINVAL;
  1566. if (params.ht_capa)
  1567. err = -EINVAL;
  1568. if (params.listen_interval >= 0)
  1569. err = -EINVAL;
  1570. if (params.supported_rates)
  1571. err = -EINVAL;
  1572. if (params.sta_flags_mask)
  1573. err = -EINVAL;
  1574. break;
  1575. default:
  1576. err = -EINVAL;
  1577. }
  1578. if (err)
  1579. goto out;
  1580. if (!rdev->ops->change_station) {
  1581. err = -EOPNOTSUPP;
  1582. goto out;
  1583. }
  1584. err = rdev->ops->change_station(&rdev->wiphy, dev, mac_addr, &params);
  1585. out:
  1586. if (params.vlan)
  1587. dev_put(params.vlan);
  1588. cfg80211_unlock_rdev(rdev);
  1589. dev_put(dev);
  1590. out_rtnl:
  1591. rtnl_unlock();
  1592. return err;
  1593. }
  1594. static int nl80211_new_station(struct sk_buff *skb, struct genl_info *info)
  1595. {
  1596. struct cfg80211_registered_device *rdev;
  1597. int err;
  1598. struct net_device *dev;
  1599. struct station_parameters params;
  1600. u8 *mac_addr = NULL;
  1601. memset(&params, 0, sizeof(params));
  1602. if (!info->attrs[NL80211_ATTR_MAC])
  1603. return -EINVAL;
  1604. if (!info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL])
  1605. return -EINVAL;
  1606. if (!info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES])
  1607. return -EINVAL;
  1608. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1609. params.supported_rates =
  1610. nla_data(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
  1611. params.supported_rates_len =
  1612. nla_len(info->attrs[NL80211_ATTR_STA_SUPPORTED_RATES]);
  1613. params.listen_interval =
  1614. nla_get_u16(info->attrs[NL80211_ATTR_STA_LISTEN_INTERVAL]);
  1615. if (info->attrs[NL80211_ATTR_STA_AID]) {
  1616. params.aid = nla_get_u16(info->attrs[NL80211_ATTR_STA_AID]);
  1617. if (!params.aid || params.aid > IEEE80211_MAX_AID)
  1618. return -EINVAL;
  1619. }
  1620. if (info->attrs[NL80211_ATTR_HT_CAPABILITY])
  1621. params.ht_capa =
  1622. nla_data(info->attrs[NL80211_ATTR_HT_CAPABILITY]);
  1623. if (parse_station_flags(info, &params))
  1624. return -EINVAL;
  1625. rtnl_lock();
  1626. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1627. if (err)
  1628. goto out_rtnl;
  1629. err = get_vlan(info->attrs[NL80211_ATTR_STA_VLAN], rdev, &params.vlan);
  1630. if (err)
  1631. goto out;
  1632. /* validate settings */
  1633. err = 0;
  1634. switch (dev->ieee80211_ptr->iftype) {
  1635. case NL80211_IFTYPE_AP:
  1636. case NL80211_IFTYPE_AP_VLAN:
  1637. /* all ok but must have AID */
  1638. if (!params.aid)
  1639. err = -EINVAL;
  1640. break;
  1641. case NL80211_IFTYPE_MESH_POINT:
  1642. /* disallow things mesh doesn't support */
  1643. if (params.vlan)
  1644. err = -EINVAL;
  1645. if (params.aid)
  1646. err = -EINVAL;
  1647. if (params.ht_capa)
  1648. err = -EINVAL;
  1649. if (params.listen_interval >= 0)
  1650. err = -EINVAL;
  1651. if (params.supported_rates)
  1652. err = -EINVAL;
  1653. if (params.sta_flags_mask)
  1654. err = -EINVAL;
  1655. break;
  1656. default:
  1657. err = -EINVAL;
  1658. }
  1659. if (err)
  1660. goto out;
  1661. if (!rdev->ops->add_station) {
  1662. err = -EOPNOTSUPP;
  1663. goto out;
  1664. }
  1665. if (!netif_running(dev)) {
  1666. err = -ENETDOWN;
  1667. goto out;
  1668. }
  1669. err = rdev->ops->add_station(&rdev->wiphy, dev, mac_addr, &params);
  1670. out:
  1671. if (params.vlan)
  1672. dev_put(params.vlan);
  1673. cfg80211_unlock_rdev(rdev);
  1674. dev_put(dev);
  1675. out_rtnl:
  1676. rtnl_unlock();
  1677. return err;
  1678. }
  1679. static int nl80211_del_station(struct sk_buff *skb, struct genl_info *info)
  1680. {
  1681. struct cfg80211_registered_device *rdev;
  1682. int err;
  1683. struct net_device *dev;
  1684. u8 *mac_addr = NULL;
  1685. if (info->attrs[NL80211_ATTR_MAC])
  1686. mac_addr = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1687. rtnl_lock();
  1688. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1689. if (err)
  1690. goto out_rtnl;
  1691. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP &&
  1692. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP_VLAN &&
  1693. dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
  1694. err = -EINVAL;
  1695. goto out;
  1696. }
  1697. if (!rdev->ops->del_station) {
  1698. err = -EOPNOTSUPP;
  1699. goto out;
  1700. }
  1701. err = rdev->ops->del_station(&rdev->wiphy, dev, mac_addr);
  1702. out:
  1703. cfg80211_unlock_rdev(rdev);
  1704. dev_put(dev);
  1705. out_rtnl:
  1706. rtnl_unlock();
  1707. return err;
  1708. }
  1709. static int nl80211_send_mpath(struct sk_buff *msg, u32 pid, u32 seq,
  1710. int flags, struct net_device *dev,
  1711. u8 *dst, u8 *next_hop,
  1712. struct mpath_info *pinfo)
  1713. {
  1714. void *hdr;
  1715. struct nlattr *pinfoattr;
  1716. hdr = nl80211hdr_put(msg, pid, seq, flags, NL80211_CMD_NEW_STATION);
  1717. if (!hdr)
  1718. return -1;
  1719. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
  1720. NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, dst);
  1721. NLA_PUT(msg, NL80211_ATTR_MPATH_NEXT_HOP, ETH_ALEN, next_hop);
  1722. pinfoattr = nla_nest_start(msg, NL80211_ATTR_MPATH_INFO);
  1723. if (!pinfoattr)
  1724. goto nla_put_failure;
  1725. if (pinfo->filled & MPATH_INFO_FRAME_QLEN)
  1726. NLA_PUT_U32(msg, NL80211_MPATH_INFO_FRAME_QLEN,
  1727. pinfo->frame_qlen);
  1728. if (pinfo->filled & MPATH_INFO_DSN)
  1729. NLA_PUT_U32(msg, NL80211_MPATH_INFO_DSN,
  1730. pinfo->dsn);
  1731. if (pinfo->filled & MPATH_INFO_METRIC)
  1732. NLA_PUT_U32(msg, NL80211_MPATH_INFO_METRIC,
  1733. pinfo->metric);
  1734. if (pinfo->filled & MPATH_INFO_EXPTIME)
  1735. NLA_PUT_U32(msg, NL80211_MPATH_INFO_EXPTIME,
  1736. pinfo->exptime);
  1737. if (pinfo->filled & MPATH_INFO_FLAGS)
  1738. NLA_PUT_U8(msg, NL80211_MPATH_INFO_FLAGS,
  1739. pinfo->flags);
  1740. if (pinfo->filled & MPATH_INFO_DISCOVERY_TIMEOUT)
  1741. NLA_PUT_U32(msg, NL80211_MPATH_INFO_DISCOVERY_TIMEOUT,
  1742. pinfo->discovery_timeout);
  1743. if (pinfo->filled & MPATH_INFO_DISCOVERY_RETRIES)
  1744. NLA_PUT_U8(msg, NL80211_MPATH_INFO_DISCOVERY_RETRIES,
  1745. pinfo->discovery_retries);
  1746. nla_nest_end(msg, pinfoattr);
  1747. return genlmsg_end(msg, hdr);
  1748. nla_put_failure:
  1749. genlmsg_cancel(msg, hdr);
  1750. return -EMSGSIZE;
  1751. }
  1752. static int nl80211_dump_mpath(struct sk_buff *skb,
  1753. struct netlink_callback *cb)
  1754. {
  1755. struct mpath_info pinfo;
  1756. struct cfg80211_registered_device *dev;
  1757. struct net_device *netdev;
  1758. u8 dst[ETH_ALEN];
  1759. u8 next_hop[ETH_ALEN];
  1760. int ifidx = cb->args[0];
  1761. int path_idx = cb->args[1];
  1762. int err;
  1763. if (!ifidx) {
  1764. err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
  1765. nl80211_fam.attrbuf, nl80211_fam.maxattr,
  1766. nl80211_policy);
  1767. if (err)
  1768. return err;
  1769. if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
  1770. return -EINVAL;
  1771. ifidx = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
  1772. if (!ifidx)
  1773. return -EINVAL;
  1774. }
  1775. rtnl_lock();
  1776. netdev = __dev_get_by_index(&init_net, ifidx);
  1777. if (!netdev) {
  1778. err = -ENODEV;
  1779. goto out_rtnl;
  1780. }
  1781. dev = cfg80211_get_dev_from_ifindex(ifidx);
  1782. if (IS_ERR(dev)) {
  1783. err = PTR_ERR(dev);
  1784. goto out_rtnl;
  1785. }
  1786. if (!dev->ops->dump_mpath) {
  1787. err = -EOPNOTSUPP;
  1788. goto out_err;
  1789. }
  1790. if (netdev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
  1791. err = -EOPNOTSUPP;
  1792. goto out;
  1793. }
  1794. while (1) {
  1795. err = dev->ops->dump_mpath(&dev->wiphy, netdev, path_idx,
  1796. dst, next_hop, &pinfo);
  1797. if (err == -ENOENT)
  1798. break;
  1799. if (err)
  1800. goto out_err;
  1801. if (nl80211_send_mpath(skb, NETLINK_CB(cb->skb).pid,
  1802. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  1803. netdev, dst, next_hop,
  1804. &pinfo) < 0)
  1805. goto out;
  1806. path_idx++;
  1807. }
  1808. out:
  1809. cb->args[1] = path_idx;
  1810. err = skb->len;
  1811. out_err:
  1812. cfg80211_unlock_rdev(dev);
  1813. out_rtnl:
  1814. rtnl_unlock();
  1815. return err;
  1816. }
  1817. static int nl80211_get_mpath(struct sk_buff *skb, struct genl_info *info)
  1818. {
  1819. struct cfg80211_registered_device *rdev;
  1820. int err;
  1821. struct net_device *dev;
  1822. struct mpath_info pinfo;
  1823. struct sk_buff *msg;
  1824. u8 *dst = NULL;
  1825. u8 next_hop[ETH_ALEN];
  1826. memset(&pinfo, 0, sizeof(pinfo));
  1827. if (!info->attrs[NL80211_ATTR_MAC])
  1828. return -EINVAL;
  1829. dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1830. rtnl_lock();
  1831. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1832. if (err)
  1833. goto out_rtnl;
  1834. if (!rdev->ops->get_mpath) {
  1835. err = -EOPNOTSUPP;
  1836. goto out;
  1837. }
  1838. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
  1839. err = -EOPNOTSUPP;
  1840. goto out;
  1841. }
  1842. err = rdev->ops->get_mpath(&rdev->wiphy, dev, dst, next_hop, &pinfo);
  1843. if (err)
  1844. goto out;
  1845. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  1846. if (!msg)
  1847. goto out;
  1848. if (nl80211_send_mpath(msg, info->snd_pid, info->snd_seq, 0,
  1849. dev, dst, next_hop, &pinfo) < 0)
  1850. goto out_free;
  1851. err = genlmsg_reply(msg, info);
  1852. goto out;
  1853. out_free:
  1854. nlmsg_free(msg);
  1855. out:
  1856. cfg80211_unlock_rdev(rdev);
  1857. dev_put(dev);
  1858. out_rtnl:
  1859. rtnl_unlock();
  1860. return err;
  1861. }
  1862. static int nl80211_set_mpath(struct sk_buff *skb, struct genl_info *info)
  1863. {
  1864. struct cfg80211_registered_device *rdev;
  1865. int err;
  1866. struct net_device *dev;
  1867. u8 *dst = NULL;
  1868. u8 *next_hop = NULL;
  1869. if (!info->attrs[NL80211_ATTR_MAC])
  1870. return -EINVAL;
  1871. if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
  1872. return -EINVAL;
  1873. dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1874. next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
  1875. rtnl_lock();
  1876. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1877. if (err)
  1878. goto out_rtnl;
  1879. if (!rdev->ops->change_mpath) {
  1880. err = -EOPNOTSUPP;
  1881. goto out;
  1882. }
  1883. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
  1884. err = -EOPNOTSUPP;
  1885. goto out;
  1886. }
  1887. if (!netif_running(dev)) {
  1888. err = -ENETDOWN;
  1889. goto out;
  1890. }
  1891. err = rdev->ops->change_mpath(&rdev->wiphy, dev, dst, next_hop);
  1892. out:
  1893. cfg80211_unlock_rdev(rdev);
  1894. dev_put(dev);
  1895. out_rtnl:
  1896. rtnl_unlock();
  1897. return err;
  1898. }
  1899. static int nl80211_new_mpath(struct sk_buff *skb, struct genl_info *info)
  1900. {
  1901. struct cfg80211_registered_device *rdev;
  1902. int err;
  1903. struct net_device *dev;
  1904. u8 *dst = NULL;
  1905. u8 *next_hop = NULL;
  1906. if (!info->attrs[NL80211_ATTR_MAC])
  1907. return -EINVAL;
  1908. if (!info->attrs[NL80211_ATTR_MPATH_NEXT_HOP])
  1909. return -EINVAL;
  1910. dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1911. next_hop = nla_data(info->attrs[NL80211_ATTR_MPATH_NEXT_HOP]);
  1912. rtnl_lock();
  1913. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1914. if (err)
  1915. goto out_rtnl;
  1916. if (!rdev->ops->add_mpath) {
  1917. err = -EOPNOTSUPP;
  1918. goto out;
  1919. }
  1920. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_MESH_POINT) {
  1921. err = -EOPNOTSUPP;
  1922. goto out;
  1923. }
  1924. if (!netif_running(dev)) {
  1925. err = -ENETDOWN;
  1926. goto out;
  1927. }
  1928. err = rdev->ops->add_mpath(&rdev->wiphy, dev, dst, next_hop);
  1929. out:
  1930. cfg80211_unlock_rdev(rdev);
  1931. dev_put(dev);
  1932. out_rtnl:
  1933. rtnl_unlock();
  1934. return err;
  1935. }
  1936. static int nl80211_del_mpath(struct sk_buff *skb, struct genl_info *info)
  1937. {
  1938. struct cfg80211_registered_device *rdev;
  1939. int err;
  1940. struct net_device *dev;
  1941. u8 *dst = NULL;
  1942. if (info->attrs[NL80211_ATTR_MAC])
  1943. dst = nla_data(info->attrs[NL80211_ATTR_MAC]);
  1944. rtnl_lock();
  1945. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1946. if (err)
  1947. goto out_rtnl;
  1948. if (!rdev->ops->del_mpath) {
  1949. err = -EOPNOTSUPP;
  1950. goto out;
  1951. }
  1952. err = rdev->ops->del_mpath(&rdev->wiphy, dev, dst);
  1953. out:
  1954. cfg80211_unlock_rdev(rdev);
  1955. dev_put(dev);
  1956. out_rtnl:
  1957. rtnl_unlock();
  1958. return err;
  1959. }
  1960. static int nl80211_set_bss(struct sk_buff *skb, struct genl_info *info)
  1961. {
  1962. struct cfg80211_registered_device *rdev;
  1963. int err;
  1964. struct net_device *dev;
  1965. struct bss_parameters params;
  1966. memset(&params, 0, sizeof(params));
  1967. /* default to not changing parameters */
  1968. params.use_cts_prot = -1;
  1969. params.use_short_preamble = -1;
  1970. params.use_short_slot_time = -1;
  1971. if (info->attrs[NL80211_ATTR_BSS_CTS_PROT])
  1972. params.use_cts_prot =
  1973. nla_get_u8(info->attrs[NL80211_ATTR_BSS_CTS_PROT]);
  1974. if (info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE])
  1975. params.use_short_preamble =
  1976. nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_PREAMBLE]);
  1977. if (info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME])
  1978. params.use_short_slot_time =
  1979. nla_get_u8(info->attrs[NL80211_ATTR_BSS_SHORT_SLOT_TIME]);
  1980. if (info->attrs[NL80211_ATTR_BSS_BASIC_RATES]) {
  1981. params.basic_rates =
  1982. nla_data(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
  1983. params.basic_rates_len =
  1984. nla_len(info->attrs[NL80211_ATTR_BSS_BASIC_RATES]);
  1985. }
  1986. rtnl_lock();
  1987. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  1988. if (err)
  1989. goto out_rtnl;
  1990. if (!rdev->ops->change_bss) {
  1991. err = -EOPNOTSUPP;
  1992. goto out;
  1993. }
  1994. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_AP) {
  1995. err = -EOPNOTSUPP;
  1996. goto out;
  1997. }
  1998. err = rdev->ops->change_bss(&rdev->wiphy, dev, &params);
  1999. out:
  2000. cfg80211_unlock_rdev(rdev);
  2001. dev_put(dev);
  2002. out_rtnl:
  2003. rtnl_unlock();
  2004. return err;
  2005. }
  2006. static const struct nla_policy
  2007. reg_rule_policy[NL80211_REG_RULE_ATTR_MAX + 1] = {
  2008. [NL80211_ATTR_REG_RULE_FLAGS] = { .type = NLA_U32 },
  2009. [NL80211_ATTR_FREQ_RANGE_START] = { .type = NLA_U32 },
  2010. [NL80211_ATTR_FREQ_RANGE_END] = { .type = NLA_U32 },
  2011. [NL80211_ATTR_FREQ_RANGE_MAX_BW] = { .type = NLA_U32 },
  2012. [NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN] = { .type = NLA_U32 },
  2013. [NL80211_ATTR_POWER_RULE_MAX_EIRP] = { .type = NLA_U32 },
  2014. };
  2015. static int parse_reg_rule(struct nlattr *tb[],
  2016. struct ieee80211_reg_rule *reg_rule)
  2017. {
  2018. struct ieee80211_freq_range *freq_range = &reg_rule->freq_range;
  2019. struct ieee80211_power_rule *power_rule = &reg_rule->power_rule;
  2020. if (!tb[NL80211_ATTR_REG_RULE_FLAGS])
  2021. return -EINVAL;
  2022. if (!tb[NL80211_ATTR_FREQ_RANGE_START])
  2023. return -EINVAL;
  2024. if (!tb[NL80211_ATTR_FREQ_RANGE_END])
  2025. return -EINVAL;
  2026. if (!tb[NL80211_ATTR_FREQ_RANGE_MAX_BW])
  2027. return -EINVAL;
  2028. if (!tb[NL80211_ATTR_POWER_RULE_MAX_EIRP])
  2029. return -EINVAL;
  2030. reg_rule->flags = nla_get_u32(tb[NL80211_ATTR_REG_RULE_FLAGS]);
  2031. freq_range->start_freq_khz =
  2032. nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_START]);
  2033. freq_range->end_freq_khz =
  2034. nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_END]);
  2035. freq_range->max_bandwidth_khz =
  2036. nla_get_u32(tb[NL80211_ATTR_FREQ_RANGE_MAX_BW]);
  2037. power_rule->max_eirp =
  2038. nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_EIRP]);
  2039. if (tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN])
  2040. power_rule->max_antenna_gain =
  2041. nla_get_u32(tb[NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN]);
  2042. return 0;
  2043. }
  2044. static int nl80211_req_set_reg(struct sk_buff *skb, struct genl_info *info)
  2045. {
  2046. int r;
  2047. char *data = NULL;
  2048. /*
  2049. * You should only get this when cfg80211 hasn't yet initialized
  2050. * completely when built-in to the kernel right between the time
  2051. * window between nl80211_init() and regulatory_init(), if that is
  2052. * even possible.
  2053. */
  2054. mutex_lock(&cfg80211_mutex);
  2055. if (unlikely(!cfg80211_regdomain)) {
  2056. mutex_unlock(&cfg80211_mutex);
  2057. return -EINPROGRESS;
  2058. }
  2059. mutex_unlock(&cfg80211_mutex);
  2060. if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
  2061. return -EINVAL;
  2062. data = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
  2063. #ifdef CONFIG_WIRELESS_OLD_REGULATORY
  2064. /* We ignore world regdom requests with the old regdom setup */
  2065. if (is_world_regdom(data))
  2066. return -EINVAL;
  2067. #endif
  2068. r = regulatory_hint_user(data);
  2069. return r;
  2070. }
  2071. static int nl80211_get_mesh_params(struct sk_buff *skb,
  2072. struct genl_info *info)
  2073. {
  2074. struct cfg80211_registered_device *rdev;
  2075. struct mesh_config cur_params;
  2076. int err;
  2077. struct net_device *dev;
  2078. void *hdr;
  2079. struct nlattr *pinfoattr;
  2080. struct sk_buff *msg;
  2081. rtnl_lock();
  2082. /* Look up our device */
  2083. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  2084. if (err)
  2085. goto out_rtnl;
  2086. if (!rdev->ops->get_mesh_params) {
  2087. err = -EOPNOTSUPP;
  2088. goto out;
  2089. }
  2090. /* Get the mesh params */
  2091. err = rdev->ops->get_mesh_params(&rdev->wiphy, dev, &cur_params);
  2092. if (err)
  2093. goto out;
  2094. /* Draw up a netlink message to send back */
  2095. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  2096. if (!msg) {
  2097. err = -ENOBUFS;
  2098. goto out;
  2099. }
  2100. hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
  2101. NL80211_CMD_GET_MESH_PARAMS);
  2102. if (!hdr)
  2103. goto nla_put_failure;
  2104. pinfoattr = nla_nest_start(msg, NL80211_ATTR_MESH_PARAMS);
  2105. if (!pinfoattr)
  2106. goto nla_put_failure;
  2107. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, dev->ifindex);
  2108. NLA_PUT_U16(msg, NL80211_MESHCONF_RETRY_TIMEOUT,
  2109. cur_params.dot11MeshRetryTimeout);
  2110. NLA_PUT_U16(msg, NL80211_MESHCONF_CONFIRM_TIMEOUT,
  2111. cur_params.dot11MeshConfirmTimeout);
  2112. NLA_PUT_U16(msg, NL80211_MESHCONF_HOLDING_TIMEOUT,
  2113. cur_params.dot11MeshHoldingTimeout);
  2114. NLA_PUT_U16(msg, NL80211_MESHCONF_MAX_PEER_LINKS,
  2115. cur_params.dot11MeshMaxPeerLinks);
  2116. NLA_PUT_U8(msg, NL80211_MESHCONF_MAX_RETRIES,
  2117. cur_params.dot11MeshMaxRetries);
  2118. NLA_PUT_U8(msg, NL80211_MESHCONF_TTL,
  2119. cur_params.dot11MeshTTL);
  2120. NLA_PUT_U8(msg, NL80211_MESHCONF_AUTO_OPEN_PLINKS,
  2121. cur_params.auto_open_plinks);
  2122. NLA_PUT_U8(msg, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
  2123. cur_params.dot11MeshHWMPmaxPREQretries);
  2124. NLA_PUT_U32(msg, NL80211_MESHCONF_PATH_REFRESH_TIME,
  2125. cur_params.path_refresh_time);
  2126. NLA_PUT_U16(msg, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
  2127. cur_params.min_discovery_timeout);
  2128. NLA_PUT_U32(msg, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
  2129. cur_params.dot11MeshHWMPactivePathTimeout);
  2130. NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
  2131. cur_params.dot11MeshHWMPpreqMinInterval);
  2132. NLA_PUT_U16(msg, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
  2133. cur_params.dot11MeshHWMPnetDiameterTraversalTime);
  2134. nla_nest_end(msg, pinfoattr);
  2135. genlmsg_end(msg, hdr);
  2136. err = genlmsg_reply(msg, info);
  2137. goto out;
  2138. nla_put_failure:
  2139. genlmsg_cancel(msg, hdr);
  2140. err = -EMSGSIZE;
  2141. out:
  2142. /* Cleanup */
  2143. cfg80211_unlock_rdev(rdev);
  2144. dev_put(dev);
  2145. out_rtnl:
  2146. rtnl_unlock();
  2147. return err;
  2148. }
  2149. #define FILL_IN_MESH_PARAM_IF_SET(table, cfg, param, mask, attr_num, nla_fn) \
  2150. do {\
  2151. if (table[attr_num]) {\
  2152. cfg.param = nla_fn(table[attr_num]); \
  2153. mask |= (1 << (attr_num - 1)); \
  2154. } \
  2155. } while (0);\
  2156. static struct nla_policy
  2157. nl80211_meshconf_params_policy[NL80211_MESHCONF_ATTR_MAX+1] __read_mostly = {
  2158. [NL80211_MESHCONF_RETRY_TIMEOUT] = { .type = NLA_U16 },
  2159. [NL80211_MESHCONF_CONFIRM_TIMEOUT] = { .type = NLA_U16 },
  2160. [NL80211_MESHCONF_HOLDING_TIMEOUT] = { .type = NLA_U16 },
  2161. [NL80211_MESHCONF_MAX_PEER_LINKS] = { .type = NLA_U16 },
  2162. [NL80211_MESHCONF_MAX_RETRIES] = { .type = NLA_U8 },
  2163. [NL80211_MESHCONF_TTL] = { .type = NLA_U8 },
  2164. [NL80211_MESHCONF_AUTO_OPEN_PLINKS] = { .type = NLA_U8 },
  2165. [NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES] = { .type = NLA_U8 },
  2166. [NL80211_MESHCONF_PATH_REFRESH_TIME] = { .type = NLA_U32 },
  2167. [NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT] = { .type = NLA_U16 },
  2168. [NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT] = { .type = NLA_U32 },
  2169. [NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL] = { .type = NLA_U16 },
  2170. [NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME] = { .type = NLA_U16 },
  2171. };
  2172. static int nl80211_set_mesh_params(struct sk_buff *skb, struct genl_info *info)
  2173. {
  2174. int err;
  2175. u32 mask;
  2176. struct cfg80211_registered_device *rdev;
  2177. struct net_device *dev;
  2178. struct mesh_config cfg;
  2179. struct nlattr *tb[NL80211_MESHCONF_ATTR_MAX + 1];
  2180. struct nlattr *parent_attr;
  2181. parent_attr = info->attrs[NL80211_ATTR_MESH_PARAMS];
  2182. if (!parent_attr)
  2183. return -EINVAL;
  2184. if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
  2185. parent_attr, nl80211_meshconf_params_policy))
  2186. return -EINVAL;
  2187. rtnl_lock();
  2188. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  2189. if (err)
  2190. goto out_rtnl;
  2191. if (!rdev->ops->set_mesh_params) {
  2192. err = -EOPNOTSUPP;
  2193. goto out;
  2194. }
  2195. /* This makes sure that there aren't more than 32 mesh config
  2196. * parameters (otherwise our bitfield scheme would not work.) */
  2197. BUILD_BUG_ON(NL80211_MESHCONF_ATTR_MAX > 32);
  2198. /* Fill in the params struct */
  2199. mask = 0;
  2200. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshRetryTimeout,
  2201. mask, NL80211_MESHCONF_RETRY_TIMEOUT, nla_get_u16);
  2202. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshConfirmTimeout,
  2203. mask, NL80211_MESHCONF_CONFIRM_TIMEOUT, nla_get_u16);
  2204. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHoldingTimeout,
  2205. mask, NL80211_MESHCONF_HOLDING_TIMEOUT, nla_get_u16);
  2206. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxPeerLinks,
  2207. mask, NL80211_MESHCONF_MAX_PEER_LINKS, nla_get_u16);
  2208. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshMaxRetries,
  2209. mask, NL80211_MESHCONF_MAX_RETRIES, nla_get_u8);
  2210. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshTTL,
  2211. mask, NL80211_MESHCONF_TTL, nla_get_u8);
  2212. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, auto_open_plinks,
  2213. mask, NL80211_MESHCONF_AUTO_OPEN_PLINKS, nla_get_u8);
  2214. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPmaxPREQretries,
  2215. mask, NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES,
  2216. nla_get_u8);
  2217. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, path_refresh_time,
  2218. mask, NL80211_MESHCONF_PATH_REFRESH_TIME, nla_get_u32);
  2219. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, min_discovery_timeout,
  2220. mask, NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT,
  2221. nla_get_u16);
  2222. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPactivePathTimeout,
  2223. mask, NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT,
  2224. nla_get_u32);
  2225. FILL_IN_MESH_PARAM_IF_SET(tb, cfg, dot11MeshHWMPpreqMinInterval,
  2226. mask, NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL,
  2227. nla_get_u16);
  2228. FILL_IN_MESH_PARAM_IF_SET(tb, cfg,
  2229. dot11MeshHWMPnetDiameterTraversalTime,
  2230. mask, NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
  2231. nla_get_u16);
  2232. /* Apply changes */
  2233. err = rdev->ops->set_mesh_params(&rdev->wiphy, dev, &cfg, mask);
  2234. out:
  2235. /* cleanup */
  2236. cfg80211_unlock_rdev(rdev);
  2237. dev_put(dev);
  2238. out_rtnl:
  2239. rtnl_unlock();
  2240. return err;
  2241. }
  2242. #undef FILL_IN_MESH_PARAM_IF_SET
  2243. static int nl80211_get_reg(struct sk_buff *skb, struct genl_info *info)
  2244. {
  2245. struct sk_buff *msg;
  2246. void *hdr = NULL;
  2247. struct nlattr *nl_reg_rules;
  2248. unsigned int i;
  2249. int err = -EINVAL;
  2250. mutex_lock(&cfg80211_mutex);
  2251. if (!cfg80211_regdomain)
  2252. goto out;
  2253. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  2254. if (!msg) {
  2255. err = -ENOBUFS;
  2256. goto out;
  2257. }
  2258. hdr = nl80211hdr_put(msg, info->snd_pid, info->snd_seq, 0,
  2259. NL80211_CMD_GET_REG);
  2260. if (!hdr)
  2261. goto nla_put_failure;
  2262. NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2,
  2263. cfg80211_regdomain->alpha2);
  2264. nl_reg_rules = nla_nest_start(msg, NL80211_ATTR_REG_RULES);
  2265. if (!nl_reg_rules)
  2266. goto nla_put_failure;
  2267. for (i = 0; i < cfg80211_regdomain->n_reg_rules; i++) {
  2268. struct nlattr *nl_reg_rule;
  2269. const struct ieee80211_reg_rule *reg_rule;
  2270. const struct ieee80211_freq_range *freq_range;
  2271. const struct ieee80211_power_rule *power_rule;
  2272. reg_rule = &cfg80211_regdomain->reg_rules[i];
  2273. freq_range = &reg_rule->freq_range;
  2274. power_rule = &reg_rule->power_rule;
  2275. nl_reg_rule = nla_nest_start(msg, i);
  2276. if (!nl_reg_rule)
  2277. goto nla_put_failure;
  2278. NLA_PUT_U32(msg, NL80211_ATTR_REG_RULE_FLAGS,
  2279. reg_rule->flags);
  2280. NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_START,
  2281. freq_range->start_freq_khz);
  2282. NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_END,
  2283. freq_range->end_freq_khz);
  2284. NLA_PUT_U32(msg, NL80211_ATTR_FREQ_RANGE_MAX_BW,
  2285. freq_range->max_bandwidth_khz);
  2286. NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN,
  2287. power_rule->max_antenna_gain);
  2288. NLA_PUT_U32(msg, NL80211_ATTR_POWER_RULE_MAX_EIRP,
  2289. power_rule->max_eirp);
  2290. nla_nest_end(msg, nl_reg_rule);
  2291. }
  2292. nla_nest_end(msg, nl_reg_rules);
  2293. genlmsg_end(msg, hdr);
  2294. err = genlmsg_reply(msg, info);
  2295. goto out;
  2296. nla_put_failure:
  2297. genlmsg_cancel(msg, hdr);
  2298. err = -EMSGSIZE;
  2299. out:
  2300. mutex_unlock(&cfg80211_mutex);
  2301. return err;
  2302. }
  2303. static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
  2304. {
  2305. struct nlattr *tb[NL80211_REG_RULE_ATTR_MAX + 1];
  2306. struct nlattr *nl_reg_rule;
  2307. char *alpha2 = NULL;
  2308. int rem_reg_rules = 0, r = 0;
  2309. u32 num_rules = 0, rule_idx = 0, size_of_regd;
  2310. struct ieee80211_regdomain *rd = NULL;
  2311. if (!info->attrs[NL80211_ATTR_REG_ALPHA2])
  2312. return -EINVAL;
  2313. if (!info->attrs[NL80211_ATTR_REG_RULES])
  2314. return -EINVAL;
  2315. alpha2 = nla_data(info->attrs[NL80211_ATTR_REG_ALPHA2]);
  2316. nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
  2317. rem_reg_rules) {
  2318. num_rules++;
  2319. if (num_rules > NL80211_MAX_SUPP_REG_RULES)
  2320. return -EINVAL;
  2321. }
  2322. mutex_lock(&cfg80211_mutex);
  2323. if (!reg_is_valid_request(alpha2)) {
  2324. r = -EINVAL;
  2325. goto bad_reg;
  2326. }
  2327. size_of_regd = sizeof(struct ieee80211_regdomain) +
  2328. (num_rules * sizeof(struct ieee80211_reg_rule));
  2329. rd = kzalloc(size_of_regd, GFP_KERNEL);
  2330. if (!rd) {
  2331. r = -ENOMEM;
  2332. goto bad_reg;
  2333. }
  2334. rd->n_reg_rules = num_rules;
  2335. rd->alpha2[0] = alpha2[0];
  2336. rd->alpha2[1] = alpha2[1];
  2337. nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
  2338. rem_reg_rules) {
  2339. nla_parse(tb, NL80211_REG_RULE_ATTR_MAX,
  2340. nla_data(nl_reg_rule), nla_len(nl_reg_rule),
  2341. reg_rule_policy);
  2342. r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
  2343. if (r)
  2344. goto bad_reg;
  2345. rule_idx++;
  2346. if (rule_idx > NL80211_MAX_SUPP_REG_RULES) {
  2347. r = -EINVAL;
  2348. goto bad_reg;
  2349. }
  2350. }
  2351. BUG_ON(rule_idx != num_rules);
  2352. r = set_regdom(rd);
  2353. mutex_unlock(&cfg80211_mutex);
  2354. return r;
  2355. bad_reg:
  2356. mutex_unlock(&cfg80211_mutex);
  2357. kfree(rd);
  2358. return r;
  2359. }
  2360. static int validate_scan_freqs(struct nlattr *freqs)
  2361. {
  2362. struct nlattr *attr1, *attr2;
  2363. int n_channels = 0, tmp1, tmp2;
  2364. nla_for_each_nested(attr1, freqs, tmp1) {
  2365. n_channels++;
  2366. /*
  2367. * Some hardware has a limited channel list for
  2368. * scanning, and it is pretty much nonsensical
  2369. * to scan for a channel twice, so disallow that
  2370. * and don't require drivers to check that the
  2371. * channel list they get isn't longer than what
  2372. * they can scan, as long as they can scan all
  2373. * the channels they registered at once.
  2374. */
  2375. nla_for_each_nested(attr2, freqs, tmp2)
  2376. if (attr1 != attr2 &&
  2377. nla_get_u32(attr1) == nla_get_u32(attr2))
  2378. return 0;
  2379. }
  2380. return n_channels;
  2381. }
  2382. static int nl80211_trigger_scan(struct sk_buff *skb, struct genl_info *info)
  2383. {
  2384. struct cfg80211_registered_device *rdev;
  2385. struct net_device *dev;
  2386. struct cfg80211_scan_request *request;
  2387. struct cfg80211_ssid *ssid;
  2388. struct ieee80211_channel *channel;
  2389. struct nlattr *attr;
  2390. struct wiphy *wiphy;
  2391. int err, tmp, n_ssids = 0, n_channels, i;
  2392. enum ieee80211_band band;
  2393. size_t ie_len;
  2394. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  2395. return -EINVAL;
  2396. rtnl_lock();
  2397. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  2398. if (err)
  2399. goto out_rtnl;
  2400. wiphy = &rdev->wiphy;
  2401. if (!rdev->ops->scan) {
  2402. err = -EOPNOTSUPP;
  2403. goto out;
  2404. }
  2405. if (!netif_running(dev)) {
  2406. err = -ENETDOWN;
  2407. goto out;
  2408. }
  2409. if (rdev->scan_req) {
  2410. err = -EBUSY;
  2411. goto out;
  2412. }
  2413. if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
  2414. n_channels = validate_scan_freqs(
  2415. info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]);
  2416. if (!n_channels) {
  2417. err = -EINVAL;
  2418. goto out;
  2419. }
  2420. } else {
  2421. n_channels = 0;
  2422. for (band = 0; band < IEEE80211_NUM_BANDS; band++)
  2423. if (wiphy->bands[band])
  2424. n_channels += wiphy->bands[band]->n_channels;
  2425. }
  2426. if (info->attrs[NL80211_ATTR_SCAN_SSIDS])
  2427. nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp)
  2428. n_ssids++;
  2429. if (n_ssids > wiphy->max_scan_ssids) {
  2430. err = -EINVAL;
  2431. goto out;
  2432. }
  2433. if (info->attrs[NL80211_ATTR_IE])
  2434. ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  2435. else
  2436. ie_len = 0;
  2437. if (ie_len > wiphy->max_scan_ie_len) {
  2438. err = -EINVAL;
  2439. goto out;
  2440. }
  2441. request = kzalloc(sizeof(*request)
  2442. + sizeof(*ssid) * n_ssids
  2443. + sizeof(channel) * n_channels
  2444. + ie_len, GFP_KERNEL);
  2445. if (!request) {
  2446. err = -ENOMEM;
  2447. goto out;
  2448. }
  2449. request->channels = (void *)((char *)request + sizeof(*request));
  2450. request->n_channels = n_channels;
  2451. if (n_ssids)
  2452. request->ssids = (void *)(request->channels + n_channels);
  2453. request->n_ssids = n_ssids;
  2454. if (ie_len) {
  2455. if (request->ssids)
  2456. request->ie = (void *)(request->ssids + n_ssids);
  2457. else
  2458. request->ie = (void *)(request->channels + n_channels);
  2459. }
  2460. if (info->attrs[NL80211_ATTR_SCAN_FREQUENCIES]) {
  2461. /* user specified, bail out if channel not found */
  2462. request->n_channels = n_channels;
  2463. i = 0;
  2464. nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_FREQUENCIES], tmp) {
  2465. request->channels[i] = ieee80211_get_channel(wiphy, nla_get_u32(attr));
  2466. if (!request->channels[i]) {
  2467. err = -EINVAL;
  2468. goto out_free;
  2469. }
  2470. i++;
  2471. }
  2472. } else {
  2473. /* all channels */
  2474. i = 0;
  2475. for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
  2476. int j;
  2477. if (!wiphy->bands[band])
  2478. continue;
  2479. for (j = 0; j < wiphy->bands[band]->n_channels; j++) {
  2480. request->channels[i] = &wiphy->bands[band]->channels[j];
  2481. i++;
  2482. }
  2483. }
  2484. }
  2485. i = 0;
  2486. if (info->attrs[NL80211_ATTR_SCAN_SSIDS]) {
  2487. nla_for_each_nested(attr, info->attrs[NL80211_ATTR_SCAN_SSIDS], tmp) {
  2488. if (request->ssids[i].ssid_len > IEEE80211_MAX_SSID_LEN) {
  2489. err = -EINVAL;
  2490. goto out_free;
  2491. }
  2492. memcpy(request->ssids[i].ssid, nla_data(attr), nla_len(attr));
  2493. request->ssids[i].ssid_len = nla_len(attr);
  2494. i++;
  2495. }
  2496. }
  2497. if (info->attrs[NL80211_ATTR_IE]) {
  2498. request->ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  2499. memcpy((void *)request->ie,
  2500. nla_data(info->attrs[NL80211_ATTR_IE]),
  2501. request->ie_len);
  2502. }
  2503. request->ifidx = dev->ifindex;
  2504. request->wiphy = &rdev->wiphy;
  2505. rdev->scan_req = request;
  2506. err = rdev->ops->scan(&rdev->wiphy, dev, request);
  2507. if (!err)
  2508. nl80211_send_scan_start(rdev, dev);
  2509. out_free:
  2510. if (err) {
  2511. rdev->scan_req = NULL;
  2512. kfree(request);
  2513. }
  2514. out:
  2515. cfg80211_unlock_rdev(rdev);
  2516. dev_put(dev);
  2517. out_rtnl:
  2518. rtnl_unlock();
  2519. return err;
  2520. }
  2521. static int nl80211_send_bss(struct sk_buff *msg, u32 pid, u32 seq, int flags,
  2522. struct cfg80211_registered_device *rdev,
  2523. struct wireless_dev *wdev,
  2524. struct cfg80211_internal_bss *intbss)
  2525. {
  2526. struct cfg80211_bss *res = &intbss->pub;
  2527. void *hdr;
  2528. struct nlattr *bss;
  2529. int i;
  2530. ASSERT_WDEV_LOCK(wdev);
  2531. hdr = nl80211hdr_put(msg, pid, seq, flags,
  2532. NL80211_CMD_NEW_SCAN_RESULTS);
  2533. if (!hdr)
  2534. return -1;
  2535. NLA_PUT_U32(msg, NL80211_ATTR_SCAN_GENERATION,
  2536. rdev->bss_generation);
  2537. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, wdev->netdev->ifindex);
  2538. bss = nla_nest_start(msg, NL80211_ATTR_BSS);
  2539. if (!bss)
  2540. goto nla_put_failure;
  2541. if (!is_zero_ether_addr(res->bssid))
  2542. NLA_PUT(msg, NL80211_BSS_BSSID, ETH_ALEN, res->bssid);
  2543. if (res->information_elements && res->len_information_elements)
  2544. NLA_PUT(msg, NL80211_BSS_INFORMATION_ELEMENTS,
  2545. res->len_information_elements,
  2546. res->information_elements);
  2547. if (res->tsf)
  2548. NLA_PUT_U64(msg, NL80211_BSS_TSF, res->tsf);
  2549. if (res->beacon_interval)
  2550. NLA_PUT_U16(msg, NL80211_BSS_BEACON_INTERVAL, res->beacon_interval);
  2551. NLA_PUT_U16(msg, NL80211_BSS_CAPABILITY, res->capability);
  2552. NLA_PUT_U32(msg, NL80211_BSS_FREQUENCY, res->channel->center_freq);
  2553. switch (rdev->wiphy.signal_type) {
  2554. case CFG80211_SIGNAL_TYPE_MBM:
  2555. NLA_PUT_U32(msg, NL80211_BSS_SIGNAL_MBM, res->signal);
  2556. break;
  2557. case CFG80211_SIGNAL_TYPE_UNSPEC:
  2558. NLA_PUT_U8(msg, NL80211_BSS_SIGNAL_UNSPEC, res->signal);
  2559. break;
  2560. default:
  2561. break;
  2562. }
  2563. switch (wdev->iftype) {
  2564. case NL80211_IFTYPE_STATION:
  2565. if (intbss == wdev->current_bss)
  2566. NLA_PUT_U32(msg, NL80211_BSS_STATUS,
  2567. NL80211_BSS_STATUS_ASSOCIATED);
  2568. else for (i = 0; i < MAX_AUTH_BSSES; i++) {
  2569. if (intbss != wdev->auth_bsses[i])
  2570. continue;
  2571. NLA_PUT_U32(msg, NL80211_BSS_STATUS,
  2572. NL80211_BSS_STATUS_AUTHENTICATED);
  2573. break;
  2574. }
  2575. break;
  2576. case NL80211_IFTYPE_ADHOC:
  2577. if (intbss == wdev->current_bss)
  2578. NLA_PUT_U32(msg, NL80211_BSS_STATUS,
  2579. NL80211_BSS_STATUS_IBSS_JOINED);
  2580. break;
  2581. default:
  2582. break;
  2583. }
  2584. nla_nest_end(msg, bss);
  2585. return genlmsg_end(msg, hdr);
  2586. nla_put_failure:
  2587. genlmsg_cancel(msg, hdr);
  2588. return -EMSGSIZE;
  2589. }
  2590. static int nl80211_dump_scan(struct sk_buff *skb,
  2591. struct netlink_callback *cb)
  2592. {
  2593. struct cfg80211_registered_device *rdev;
  2594. struct net_device *dev;
  2595. struct cfg80211_internal_bss *scan;
  2596. struct wireless_dev *wdev;
  2597. int ifidx = cb->args[0];
  2598. int start = cb->args[1], idx = 0;
  2599. int err;
  2600. if (!ifidx) {
  2601. err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
  2602. nl80211_fam.attrbuf, nl80211_fam.maxattr,
  2603. nl80211_policy);
  2604. if (err)
  2605. return err;
  2606. if (!nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX])
  2607. return -EINVAL;
  2608. ifidx = nla_get_u32(nl80211_fam.attrbuf[NL80211_ATTR_IFINDEX]);
  2609. if (!ifidx)
  2610. return -EINVAL;
  2611. cb->args[0] = ifidx;
  2612. }
  2613. dev = dev_get_by_index(&init_net, ifidx);
  2614. if (!dev)
  2615. return -ENODEV;
  2616. rdev = cfg80211_get_dev_from_ifindex(ifidx);
  2617. if (IS_ERR(rdev)) {
  2618. err = PTR_ERR(rdev);
  2619. goto out_put_netdev;
  2620. }
  2621. wdev = dev->ieee80211_ptr;
  2622. wdev_lock(wdev);
  2623. spin_lock_bh(&rdev->bss_lock);
  2624. cfg80211_bss_expire(rdev);
  2625. list_for_each_entry(scan, &rdev->bss_list, list) {
  2626. if (++idx <= start)
  2627. continue;
  2628. if (nl80211_send_bss(skb,
  2629. NETLINK_CB(cb->skb).pid,
  2630. cb->nlh->nlmsg_seq, NLM_F_MULTI,
  2631. rdev, wdev, scan) < 0) {
  2632. idx--;
  2633. goto out;
  2634. }
  2635. }
  2636. out:
  2637. spin_unlock_bh(&rdev->bss_lock);
  2638. wdev_unlock(wdev);
  2639. cb->args[1] = idx;
  2640. err = skb->len;
  2641. cfg80211_unlock_rdev(rdev);
  2642. out_put_netdev:
  2643. dev_put(dev);
  2644. return err;
  2645. }
  2646. static bool nl80211_valid_auth_type(enum nl80211_auth_type auth_type)
  2647. {
  2648. return auth_type <= NL80211_AUTHTYPE_MAX;
  2649. }
  2650. static bool nl80211_valid_wpa_versions(u32 wpa_versions)
  2651. {
  2652. return !(wpa_versions & ~(NL80211_WPA_VERSION_1 |
  2653. NL80211_WPA_VERSION_2));
  2654. }
  2655. static bool nl80211_valid_akm_suite(u32 akm)
  2656. {
  2657. return akm == WLAN_AKM_SUITE_8021X ||
  2658. akm == WLAN_AKM_SUITE_PSK;
  2659. }
  2660. static bool nl80211_valid_cipher_suite(u32 cipher)
  2661. {
  2662. return cipher == WLAN_CIPHER_SUITE_WEP40 ||
  2663. cipher == WLAN_CIPHER_SUITE_WEP104 ||
  2664. cipher == WLAN_CIPHER_SUITE_TKIP ||
  2665. cipher == WLAN_CIPHER_SUITE_CCMP ||
  2666. cipher == WLAN_CIPHER_SUITE_AES_CMAC;
  2667. }
  2668. static int nl80211_authenticate(struct sk_buff *skb, struct genl_info *info)
  2669. {
  2670. struct cfg80211_registered_device *rdev;
  2671. struct net_device *dev;
  2672. struct ieee80211_channel *chan;
  2673. const u8 *bssid, *ssid, *ie = NULL;
  2674. int err, ssid_len, ie_len = 0;
  2675. enum nl80211_auth_type auth_type;
  2676. struct key_parse key;
  2677. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  2678. return -EINVAL;
  2679. if (!info->attrs[NL80211_ATTR_MAC])
  2680. return -EINVAL;
  2681. if (!info->attrs[NL80211_ATTR_AUTH_TYPE])
  2682. return -EINVAL;
  2683. if (!info->attrs[NL80211_ATTR_SSID])
  2684. return -EINVAL;
  2685. if (!info->attrs[NL80211_ATTR_WIPHY_FREQ])
  2686. return -EINVAL;
  2687. err = nl80211_parse_key(info, &key);
  2688. if (err)
  2689. return err;
  2690. if (key.idx >= 0) {
  2691. if (!key.p.key || !key.p.key_len)
  2692. return -EINVAL;
  2693. if ((key.p.cipher != WLAN_CIPHER_SUITE_WEP40 ||
  2694. key.p.key_len != WLAN_KEY_LEN_WEP40) &&
  2695. (key.p.cipher != WLAN_CIPHER_SUITE_WEP104 ||
  2696. key.p.key_len != WLAN_KEY_LEN_WEP104))
  2697. return -EINVAL;
  2698. if (key.idx > 4)
  2699. return -EINVAL;
  2700. } else {
  2701. key.p.key_len = 0;
  2702. key.p.key = NULL;
  2703. }
  2704. rtnl_lock();
  2705. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  2706. if (err)
  2707. goto unlock_rtnl;
  2708. if (!rdev->ops->auth) {
  2709. err = -EOPNOTSUPP;
  2710. goto out;
  2711. }
  2712. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
  2713. err = -EOPNOTSUPP;
  2714. goto out;
  2715. }
  2716. if (!netif_running(dev)) {
  2717. err = -ENETDOWN;
  2718. goto out;
  2719. }
  2720. bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  2721. chan = ieee80211_get_channel(&rdev->wiphy,
  2722. nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
  2723. if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED)) {
  2724. err = -EINVAL;
  2725. goto out;
  2726. }
  2727. ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
  2728. ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
  2729. if (info->attrs[NL80211_ATTR_IE]) {
  2730. ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  2731. ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  2732. }
  2733. auth_type = nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
  2734. if (!nl80211_valid_auth_type(auth_type)) {
  2735. err = -EINVAL;
  2736. goto out;
  2737. }
  2738. err = cfg80211_mlme_auth(rdev, dev, chan, auth_type, bssid,
  2739. ssid, ssid_len, ie, ie_len,
  2740. key.p.key, key.p.key_len, key.idx);
  2741. out:
  2742. cfg80211_unlock_rdev(rdev);
  2743. dev_put(dev);
  2744. unlock_rtnl:
  2745. rtnl_unlock();
  2746. return err;
  2747. }
  2748. static int nl80211_crypto_settings(struct genl_info *info,
  2749. struct cfg80211_crypto_settings *settings,
  2750. int cipher_limit)
  2751. {
  2752. settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];
  2753. if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {
  2754. void *data;
  2755. int len, i;
  2756. data = nla_data(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
  2757. len = nla_len(info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]);
  2758. settings->n_ciphers_pairwise = len / sizeof(u32);
  2759. if (len % sizeof(u32))
  2760. return -EINVAL;
  2761. if (settings->n_ciphers_pairwise > cipher_limit)
  2762. return -EINVAL;
  2763. memcpy(settings->ciphers_pairwise, data, len);
  2764. for (i = 0; i < settings->n_ciphers_pairwise; i++)
  2765. if (!nl80211_valid_cipher_suite(
  2766. settings->ciphers_pairwise[i]))
  2767. return -EINVAL;
  2768. }
  2769. if (info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]) {
  2770. settings->cipher_group =
  2771. nla_get_u32(info->attrs[NL80211_ATTR_CIPHER_SUITE_GROUP]);
  2772. if (!nl80211_valid_cipher_suite(settings->cipher_group))
  2773. return -EINVAL;
  2774. }
  2775. if (info->attrs[NL80211_ATTR_WPA_VERSIONS]) {
  2776. settings->wpa_versions =
  2777. nla_get_u32(info->attrs[NL80211_ATTR_WPA_VERSIONS]);
  2778. if (!nl80211_valid_wpa_versions(settings->wpa_versions))
  2779. return -EINVAL;
  2780. }
  2781. if (info->attrs[NL80211_ATTR_AKM_SUITES]) {
  2782. void *data;
  2783. int len, i;
  2784. data = nla_data(info->attrs[NL80211_ATTR_AKM_SUITES]);
  2785. len = nla_len(info->attrs[NL80211_ATTR_AKM_SUITES]);
  2786. settings->n_akm_suites = len / sizeof(u32);
  2787. if (len % sizeof(u32))
  2788. return -EINVAL;
  2789. memcpy(settings->akm_suites, data, len);
  2790. for (i = 0; i < settings->n_ciphers_pairwise; i++)
  2791. if (!nl80211_valid_akm_suite(settings->akm_suites[i]))
  2792. return -EINVAL;
  2793. }
  2794. return 0;
  2795. }
  2796. static int nl80211_associate(struct sk_buff *skb, struct genl_info *info)
  2797. {
  2798. struct cfg80211_registered_device *rdev;
  2799. struct net_device *dev;
  2800. struct cfg80211_crypto_settings crypto;
  2801. struct ieee80211_channel *chan;
  2802. const u8 *bssid, *ssid, *ie = NULL, *prev_bssid = NULL;
  2803. int err, ssid_len, ie_len = 0;
  2804. bool use_mfp = false;
  2805. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  2806. return -EINVAL;
  2807. if (!info->attrs[NL80211_ATTR_MAC] ||
  2808. !info->attrs[NL80211_ATTR_SSID] ||
  2809. !info->attrs[NL80211_ATTR_WIPHY_FREQ])
  2810. return -EINVAL;
  2811. rtnl_lock();
  2812. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  2813. if (err)
  2814. goto unlock_rtnl;
  2815. if (!rdev->ops->assoc) {
  2816. err = -EOPNOTSUPP;
  2817. goto out;
  2818. }
  2819. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
  2820. err = -EOPNOTSUPP;
  2821. goto out;
  2822. }
  2823. if (!netif_running(dev)) {
  2824. err = -ENETDOWN;
  2825. goto out;
  2826. }
  2827. bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  2828. chan = ieee80211_get_channel(&rdev->wiphy,
  2829. nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
  2830. if (!chan || (chan->flags & IEEE80211_CHAN_DISABLED)) {
  2831. err = -EINVAL;
  2832. goto out;
  2833. }
  2834. ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
  2835. ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
  2836. if (info->attrs[NL80211_ATTR_IE]) {
  2837. ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  2838. ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  2839. }
  2840. if (info->attrs[NL80211_ATTR_USE_MFP]) {
  2841. enum nl80211_mfp mfp =
  2842. nla_get_u32(info->attrs[NL80211_ATTR_USE_MFP]);
  2843. if (mfp == NL80211_MFP_REQUIRED)
  2844. use_mfp = true;
  2845. else if (mfp != NL80211_MFP_NO) {
  2846. err = -EINVAL;
  2847. goto out;
  2848. }
  2849. }
  2850. if (info->attrs[NL80211_ATTR_PREV_BSSID])
  2851. prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);
  2852. err = nl80211_crypto_settings(info, &crypto, 1);
  2853. if (!err)
  2854. err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,
  2855. ssid, ssid_len, ie, ie_len, use_mfp,
  2856. &crypto);
  2857. out:
  2858. cfg80211_unlock_rdev(rdev);
  2859. dev_put(dev);
  2860. unlock_rtnl:
  2861. rtnl_unlock();
  2862. return err;
  2863. }
  2864. static int nl80211_deauthenticate(struct sk_buff *skb, struct genl_info *info)
  2865. {
  2866. struct cfg80211_registered_device *rdev;
  2867. struct net_device *dev;
  2868. const u8 *ie = NULL, *bssid;
  2869. int err, ie_len = 0;
  2870. u16 reason_code;
  2871. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  2872. return -EINVAL;
  2873. if (!info->attrs[NL80211_ATTR_MAC])
  2874. return -EINVAL;
  2875. if (!info->attrs[NL80211_ATTR_REASON_CODE])
  2876. return -EINVAL;
  2877. rtnl_lock();
  2878. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  2879. if (err)
  2880. goto unlock_rtnl;
  2881. if (!rdev->ops->deauth) {
  2882. err = -EOPNOTSUPP;
  2883. goto out;
  2884. }
  2885. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
  2886. err = -EOPNOTSUPP;
  2887. goto out;
  2888. }
  2889. if (!netif_running(dev)) {
  2890. err = -ENETDOWN;
  2891. goto out;
  2892. }
  2893. bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  2894. reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
  2895. if (reason_code == 0) {
  2896. /* Reason Code 0 is reserved */
  2897. err = -EINVAL;
  2898. goto out;
  2899. }
  2900. if (info->attrs[NL80211_ATTR_IE]) {
  2901. ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  2902. ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  2903. }
  2904. err = cfg80211_mlme_deauth(rdev, dev, bssid, ie, ie_len, reason_code);
  2905. out:
  2906. cfg80211_unlock_rdev(rdev);
  2907. dev_put(dev);
  2908. unlock_rtnl:
  2909. rtnl_unlock();
  2910. return err;
  2911. }
  2912. static int nl80211_disassociate(struct sk_buff *skb, struct genl_info *info)
  2913. {
  2914. struct cfg80211_registered_device *rdev;
  2915. struct net_device *dev;
  2916. const u8 *ie = NULL, *bssid;
  2917. int err, ie_len = 0;
  2918. u16 reason_code;
  2919. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  2920. return -EINVAL;
  2921. if (!info->attrs[NL80211_ATTR_MAC])
  2922. return -EINVAL;
  2923. if (!info->attrs[NL80211_ATTR_REASON_CODE])
  2924. return -EINVAL;
  2925. rtnl_lock();
  2926. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  2927. if (err)
  2928. goto unlock_rtnl;
  2929. if (!rdev->ops->disassoc) {
  2930. err = -EOPNOTSUPP;
  2931. goto out;
  2932. }
  2933. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
  2934. err = -EOPNOTSUPP;
  2935. goto out;
  2936. }
  2937. if (!netif_running(dev)) {
  2938. err = -ENETDOWN;
  2939. goto out;
  2940. }
  2941. bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  2942. reason_code = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
  2943. if (reason_code == 0) {
  2944. /* Reason Code 0 is reserved */
  2945. err = -EINVAL;
  2946. goto out;
  2947. }
  2948. if (info->attrs[NL80211_ATTR_IE]) {
  2949. ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  2950. ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  2951. }
  2952. err = cfg80211_mlme_disassoc(rdev, dev, bssid, ie, ie_len, reason_code);
  2953. out:
  2954. cfg80211_unlock_rdev(rdev);
  2955. dev_put(dev);
  2956. unlock_rtnl:
  2957. rtnl_unlock();
  2958. return err;
  2959. }
  2960. static int nl80211_join_ibss(struct sk_buff *skb, struct genl_info *info)
  2961. {
  2962. struct cfg80211_registered_device *rdev;
  2963. struct net_device *dev;
  2964. struct cfg80211_ibss_params ibss;
  2965. struct wiphy *wiphy;
  2966. struct cfg80211_cached_keys *connkeys = NULL;
  2967. int err;
  2968. memset(&ibss, 0, sizeof(ibss));
  2969. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  2970. return -EINVAL;
  2971. if (!info->attrs[NL80211_ATTR_WIPHY_FREQ] ||
  2972. !info->attrs[NL80211_ATTR_SSID] ||
  2973. !nla_len(info->attrs[NL80211_ATTR_SSID]))
  2974. return -EINVAL;
  2975. ibss.beacon_interval = 100;
  2976. if (info->attrs[NL80211_ATTR_BEACON_INTERVAL]) {
  2977. ibss.beacon_interval =
  2978. nla_get_u32(info->attrs[NL80211_ATTR_BEACON_INTERVAL]);
  2979. if (ibss.beacon_interval < 1 || ibss.beacon_interval > 10000)
  2980. return -EINVAL;
  2981. }
  2982. rtnl_lock();
  2983. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  2984. if (err)
  2985. goto unlock_rtnl;
  2986. if (!rdev->ops->join_ibss) {
  2987. err = -EOPNOTSUPP;
  2988. goto out;
  2989. }
  2990. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC) {
  2991. err = -EOPNOTSUPP;
  2992. goto out;
  2993. }
  2994. if (!netif_running(dev)) {
  2995. err = -ENETDOWN;
  2996. goto out;
  2997. }
  2998. wiphy = &rdev->wiphy;
  2999. if (info->attrs[NL80211_ATTR_MAC])
  3000. ibss.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3001. ibss.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
  3002. ibss.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
  3003. if (info->attrs[NL80211_ATTR_IE]) {
  3004. ibss.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  3005. ibss.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  3006. }
  3007. ibss.channel = ieee80211_get_channel(wiphy,
  3008. nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
  3009. if (!ibss.channel ||
  3010. ibss.channel->flags & IEEE80211_CHAN_NO_IBSS ||
  3011. ibss.channel->flags & IEEE80211_CHAN_DISABLED) {
  3012. err = -EINVAL;
  3013. goto out;
  3014. }
  3015. ibss.channel_fixed = !!info->attrs[NL80211_ATTR_FREQ_FIXED];
  3016. ibss.privacy = !!info->attrs[NL80211_ATTR_PRIVACY];
  3017. if (ibss.privacy && info->attrs[NL80211_ATTR_KEYS]) {
  3018. connkeys = nl80211_parse_connkeys(rdev,
  3019. info->attrs[NL80211_ATTR_KEYS]);
  3020. if (IS_ERR(connkeys)) {
  3021. err = PTR_ERR(connkeys);
  3022. connkeys = NULL;
  3023. goto out;
  3024. }
  3025. }
  3026. err = cfg80211_join_ibss(rdev, dev, &ibss, connkeys);
  3027. out:
  3028. cfg80211_unlock_rdev(rdev);
  3029. dev_put(dev);
  3030. unlock_rtnl:
  3031. if (err)
  3032. kfree(connkeys);
  3033. rtnl_unlock();
  3034. return err;
  3035. }
  3036. static int nl80211_leave_ibss(struct sk_buff *skb, struct genl_info *info)
  3037. {
  3038. struct cfg80211_registered_device *rdev;
  3039. struct net_device *dev;
  3040. int err;
  3041. rtnl_lock();
  3042. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  3043. if (err)
  3044. goto unlock_rtnl;
  3045. if (!rdev->ops->leave_ibss) {
  3046. err = -EOPNOTSUPP;
  3047. goto out;
  3048. }
  3049. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_ADHOC) {
  3050. err = -EOPNOTSUPP;
  3051. goto out;
  3052. }
  3053. if (!netif_running(dev)) {
  3054. err = -ENETDOWN;
  3055. goto out;
  3056. }
  3057. err = cfg80211_leave_ibss(rdev, dev, false);
  3058. out:
  3059. cfg80211_unlock_rdev(rdev);
  3060. dev_put(dev);
  3061. unlock_rtnl:
  3062. rtnl_unlock();
  3063. return err;
  3064. }
  3065. #ifdef CONFIG_NL80211_TESTMODE
  3066. static struct genl_multicast_group nl80211_testmode_mcgrp = {
  3067. .name = "testmode",
  3068. };
  3069. static int nl80211_testmode_do(struct sk_buff *skb, struct genl_info *info)
  3070. {
  3071. struct cfg80211_registered_device *rdev;
  3072. int err;
  3073. if (!info->attrs[NL80211_ATTR_TESTDATA])
  3074. return -EINVAL;
  3075. rtnl_lock();
  3076. rdev = cfg80211_get_dev_from_info(info);
  3077. if (IS_ERR(rdev)) {
  3078. err = PTR_ERR(rdev);
  3079. goto unlock_rtnl;
  3080. }
  3081. err = -EOPNOTSUPP;
  3082. if (rdev->ops->testmode_cmd) {
  3083. rdev->testmode_info = info;
  3084. err = rdev->ops->testmode_cmd(&rdev->wiphy,
  3085. nla_data(info->attrs[NL80211_ATTR_TESTDATA]),
  3086. nla_len(info->attrs[NL80211_ATTR_TESTDATA]));
  3087. rdev->testmode_info = NULL;
  3088. }
  3089. cfg80211_unlock_rdev(rdev);
  3090. unlock_rtnl:
  3091. rtnl_unlock();
  3092. return err;
  3093. }
  3094. static struct sk_buff *
  3095. __cfg80211_testmode_alloc_skb(struct cfg80211_registered_device *rdev,
  3096. int approxlen, u32 pid, u32 seq, gfp_t gfp)
  3097. {
  3098. struct sk_buff *skb;
  3099. void *hdr;
  3100. struct nlattr *data;
  3101. skb = nlmsg_new(approxlen + 100, gfp);
  3102. if (!skb)
  3103. return NULL;
  3104. hdr = nl80211hdr_put(skb, pid, seq, 0, NL80211_CMD_TESTMODE);
  3105. if (!hdr) {
  3106. kfree_skb(skb);
  3107. return NULL;
  3108. }
  3109. NLA_PUT_U32(skb, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
  3110. data = nla_nest_start(skb, NL80211_ATTR_TESTDATA);
  3111. ((void **)skb->cb)[0] = rdev;
  3112. ((void **)skb->cb)[1] = hdr;
  3113. ((void **)skb->cb)[2] = data;
  3114. return skb;
  3115. nla_put_failure:
  3116. kfree_skb(skb);
  3117. return NULL;
  3118. }
  3119. struct sk_buff *cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy,
  3120. int approxlen)
  3121. {
  3122. struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
  3123. if (WARN_ON(!rdev->testmode_info))
  3124. return NULL;
  3125. return __cfg80211_testmode_alloc_skb(rdev, approxlen,
  3126. rdev->testmode_info->snd_pid,
  3127. rdev->testmode_info->snd_seq,
  3128. GFP_KERNEL);
  3129. }
  3130. EXPORT_SYMBOL(cfg80211_testmode_alloc_reply_skb);
  3131. int cfg80211_testmode_reply(struct sk_buff *skb)
  3132. {
  3133. struct cfg80211_registered_device *rdev = ((void **)skb->cb)[0];
  3134. void *hdr = ((void **)skb->cb)[1];
  3135. struct nlattr *data = ((void **)skb->cb)[2];
  3136. if (WARN_ON(!rdev->testmode_info)) {
  3137. kfree_skb(skb);
  3138. return -EINVAL;
  3139. }
  3140. nla_nest_end(skb, data);
  3141. genlmsg_end(skb, hdr);
  3142. return genlmsg_reply(skb, rdev->testmode_info);
  3143. }
  3144. EXPORT_SYMBOL(cfg80211_testmode_reply);
  3145. struct sk_buff *cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy,
  3146. int approxlen, gfp_t gfp)
  3147. {
  3148. struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
  3149. return __cfg80211_testmode_alloc_skb(rdev, approxlen, 0, 0, gfp);
  3150. }
  3151. EXPORT_SYMBOL(cfg80211_testmode_alloc_event_skb);
  3152. void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
  3153. {
  3154. void *hdr = ((void **)skb->cb)[1];
  3155. struct nlattr *data = ((void **)skb->cb)[2];
  3156. nla_nest_end(skb, data);
  3157. genlmsg_end(skb, hdr);
  3158. genlmsg_multicast(skb, 0, nl80211_testmode_mcgrp.id, gfp);
  3159. }
  3160. EXPORT_SYMBOL(cfg80211_testmode_event);
  3161. #endif
  3162. static int nl80211_connect(struct sk_buff *skb, struct genl_info *info)
  3163. {
  3164. struct cfg80211_registered_device *rdev;
  3165. struct net_device *dev;
  3166. struct cfg80211_connect_params connect;
  3167. struct wiphy *wiphy;
  3168. struct cfg80211_cached_keys *connkeys = NULL;
  3169. int err;
  3170. memset(&connect, 0, sizeof(connect));
  3171. if (!is_valid_ie_attr(info->attrs[NL80211_ATTR_IE]))
  3172. return -EINVAL;
  3173. if (!info->attrs[NL80211_ATTR_SSID] ||
  3174. !nla_len(info->attrs[NL80211_ATTR_SSID]))
  3175. return -EINVAL;
  3176. if (info->attrs[NL80211_ATTR_AUTH_TYPE]) {
  3177. connect.auth_type =
  3178. nla_get_u32(info->attrs[NL80211_ATTR_AUTH_TYPE]);
  3179. if (!nl80211_valid_auth_type(connect.auth_type))
  3180. return -EINVAL;
  3181. } else
  3182. connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
  3183. connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];
  3184. err = nl80211_crypto_settings(info, &connect.crypto,
  3185. NL80211_MAX_NR_CIPHER_SUITES);
  3186. if (err)
  3187. return err;
  3188. rtnl_lock();
  3189. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  3190. if (err)
  3191. goto unlock_rtnl;
  3192. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
  3193. err = -EOPNOTSUPP;
  3194. goto out;
  3195. }
  3196. if (!netif_running(dev)) {
  3197. err = -ENETDOWN;
  3198. goto out;
  3199. }
  3200. wiphy = &rdev->wiphy;
  3201. if (info->attrs[NL80211_ATTR_MAC])
  3202. connect.bssid = nla_data(info->attrs[NL80211_ATTR_MAC]);
  3203. connect.ssid = nla_data(info->attrs[NL80211_ATTR_SSID]);
  3204. connect.ssid_len = nla_len(info->attrs[NL80211_ATTR_SSID]);
  3205. if (info->attrs[NL80211_ATTR_IE]) {
  3206. connect.ie = nla_data(info->attrs[NL80211_ATTR_IE]);
  3207. connect.ie_len = nla_len(info->attrs[NL80211_ATTR_IE]);
  3208. }
  3209. if (info->attrs[NL80211_ATTR_WIPHY_FREQ]) {
  3210. connect.channel =
  3211. ieee80211_get_channel(wiphy,
  3212. nla_get_u32(info->attrs[NL80211_ATTR_WIPHY_FREQ]));
  3213. if (!connect.channel ||
  3214. connect.channel->flags & IEEE80211_CHAN_DISABLED) {
  3215. err = -EINVAL;
  3216. goto out;
  3217. }
  3218. }
  3219. if (connect.privacy && info->attrs[NL80211_ATTR_KEYS]) {
  3220. connkeys = nl80211_parse_connkeys(rdev,
  3221. info->attrs[NL80211_ATTR_KEYS]);
  3222. if (IS_ERR(connkeys)) {
  3223. err = PTR_ERR(connkeys);
  3224. connkeys = NULL;
  3225. goto out;
  3226. }
  3227. }
  3228. err = cfg80211_connect(rdev, dev, &connect, connkeys);
  3229. out:
  3230. cfg80211_unlock_rdev(rdev);
  3231. dev_put(dev);
  3232. unlock_rtnl:
  3233. if (err)
  3234. kfree(connkeys);
  3235. rtnl_unlock();
  3236. return err;
  3237. }
  3238. static int nl80211_disconnect(struct sk_buff *skb, struct genl_info *info)
  3239. {
  3240. struct cfg80211_registered_device *rdev;
  3241. struct net_device *dev;
  3242. int err;
  3243. u16 reason;
  3244. if (!info->attrs[NL80211_ATTR_REASON_CODE])
  3245. reason = WLAN_REASON_DEAUTH_LEAVING;
  3246. else
  3247. reason = nla_get_u16(info->attrs[NL80211_ATTR_REASON_CODE]);
  3248. if (reason == 0)
  3249. return -EINVAL;
  3250. rtnl_lock();
  3251. err = get_rdev_dev_by_info_ifindex(info->attrs, &rdev, &dev);
  3252. if (err)
  3253. goto unlock_rtnl;
  3254. if (dev->ieee80211_ptr->iftype != NL80211_IFTYPE_STATION) {
  3255. err = -EOPNOTSUPP;
  3256. goto out;
  3257. }
  3258. if (!netif_running(dev)) {
  3259. err = -ENETDOWN;
  3260. goto out;
  3261. }
  3262. err = cfg80211_disconnect(rdev, dev, reason, true);
  3263. out:
  3264. cfg80211_unlock_rdev(rdev);
  3265. dev_put(dev);
  3266. unlock_rtnl:
  3267. rtnl_unlock();
  3268. return err;
  3269. }
  3270. static struct genl_ops nl80211_ops[] = {
  3271. {
  3272. .cmd = NL80211_CMD_GET_WIPHY,
  3273. .doit = nl80211_get_wiphy,
  3274. .dumpit = nl80211_dump_wiphy,
  3275. .policy = nl80211_policy,
  3276. /* can be retrieved by unprivileged users */
  3277. },
  3278. {
  3279. .cmd = NL80211_CMD_SET_WIPHY,
  3280. .doit = nl80211_set_wiphy,
  3281. .policy = nl80211_policy,
  3282. .flags = GENL_ADMIN_PERM,
  3283. },
  3284. {
  3285. .cmd = NL80211_CMD_GET_INTERFACE,
  3286. .doit = nl80211_get_interface,
  3287. .dumpit = nl80211_dump_interface,
  3288. .policy = nl80211_policy,
  3289. /* can be retrieved by unprivileged users */
  3290. },
  3291. {
  3292. .cmd = NL80211_CMD_SET_INTERFACE,
  3293. .doit = nl80211_set_interface,
  3294. .policy = nl80211_policy,
  3295. .flags = GENL_ADMIN_PERM,
  3296. },
  3297. {
  3298. .cmd = NL80211_CMD_NEW_INTERFACE,
  3299. .doit = nl80211_new_interface,
  3300. .policy = nl80211_policy,
  3301. .flags = GENL_ADMIN_PERM,
  3302. },
  3303. {
  3304. .cmd = NL80211_CMD_DEL_INTERFACE,
  3305. .doit = nl80211_del_interface,
  3306. .policy = nl80211_policy,
  3307. .flags = GENL_ADMIN_PERM,
  3308. },
  3309. {
  3310. .cmd = NL80211_CMD_GET_KEY,
  3311. .doit = nl80211_get_key,
  3312. .policy = nl80211_policy,
  3313. .flags = GENL_ADMIN_PERM,
  3314. },
  3315. {
  3316. .cmd = NL80211_CMD_SET_KEY,
  3317. .doit = nl80211_set_key,
  3318. .policy = nl80211_policy,
  3319. .flags = GENL_ADMIN_PERM,
  3320. },
  3321. {
  3322. .cmd = NL80211_CMD_NEW_KEY,
  3323. .doit = nl80211_new_key,
  3324. .policy = nl80211_policy,
  3325. .flags = GENL_ADMIN_PERM,
  3326. },
  3327. {
  3328. .cmd = NL80211_CMD_DEL_KEY,
  3329. .doit = nl80211_del_key,
  3330. .policy = nl80211_policy,
  3331. .flags = GENL_ADMIN_PERM,
  3332. },
  3333. {
  3334. .cmd = NL80211_CMD_SET_BEACON,
  3335. .policy = nl80211_policy,
  3336. .flags = GENL_ADMIN_PERM,
  3337. .doit = nl80211_addset_beacon,
  3338. },
  3339. {
  3340. .cmd = NL80211_CMD_NEW_BEACON,
  3341. .policy = nl80211_policy,
  3342. .flags = GENL_ADMIN_PERM,
  3343. .doit = nl80211_addset_beacon,
  3344. },
  3345. {
  3346. .cmd = NL80211_CMD_DEL_BEACON,
  3347. .policy = nl80211_policy,
  3348. .flags = GENL_ADMIN_PERM,
  3349. .doit = nl80211_del_beacon,
  3350. },
  3351. {
  3352. .cmd = NL80211_CMD_GET_STATION,
  3353. .doit = nl80211_get_station,
  3354. .dumpit = nl80211_dump_station,
  3355. .policy = nl80211_policy,
  3356. },
  3357. {
  3358. .cmd = NL80211_CMD_SET_STATION,
  3359. .doit = nl80211_set_station,
  3360. .policy = nl80211_policy,
  3361. .flags = GENL_ADMIN_PERM,
  3362. },
  3363. {
  3364. .cmd = NL80211_CMD_NEW_STATION,
  3365. .doit = nl80211_new_station,
  3366. .policy = nl80211_policy,
  3367. .flags = GENL_ADMIN_PERM,
  3368. },
  3369. {
  3370. .cmd = NL80211_CMD_DEL_STATION,
  3371. .doit = nl80211_del_station,
  3372. .policy = nl80211_policy,
  3373. .flags = GENL_ADMIN_PERM,
  3374. },
  3375. {
  3376. .cmd = NL80211_CMD_GET_MPATH,
  3377. .doit = nl80211_get_mpath,
  3378. .dumpit = nl80211_dump_mpath,
  3379. .policy = nl80211_policy,
  3380. .flags = GENL_ADMIN_PERM,
  3381. },
  3382. {
  3383. .cmd = NL80211_CMD_SET_MPATH,
  3384. .doit = nl80211_set_mpath,
  3385. .policy = nl80211_policy,
  3386. .flags = GENL_ADMIN_PERM,
  3387. },
  3388. {
  3389. .cmd = NL80211_CMD_NEW_MPATH,
  3390. .doit = nl80211_new_mpath,
  3391. .policy = nl80211_policy,
  3392. .flags = GENL_ADMIN_PERM,
  3393. },
  3394. {
  3395. .cmd = NL80211_CMD_DEL_MPATH,
  3396. .doit = nl80211_del_mpath,
  3397. .policy = nl80211_policy,
  3398. .flags = GENL_ADMIN_PERM,
  3399. },
  3400. {
  3401. .cmd = NL80211_CMD_SET_BSS,
  3402. .doit = nl80211_set_bss,
  3403. .policy = nl80211_policy,
  3404. .flags = GENL_ADMIN_PERM,
  3405. },
  3406. {
  3407. .cmd = NL80211_CMD_GET_REG,
  3408. .doit = nl80211_get_reg,
  3409. .policy = nl80211_policy,
  3410. /* can be retrieved by unprivileged users */
  3411. },
  3412. {
  3413. .cmd = NL80211_CMD_SET_REG,
  3414. .doit = nl80211_set_reg,
  3415. .policy = nl80211_policy,
  3416. .flags = GENL_ADMIN_PERM,
  3417. },
  3418. {
  3419. .cmd = NL80211_CMD_REQ_SET_REG,
  3420. .doit = nl80211_req_set_reg,
  3421. .policy = nl80211_policy,
  3422. .flags = GENL_ADMIN_PERM,
  3423. },
  3424. {
  3425. .cmd = NL80211_CMD_GET_MESH_PARAMS,
  3426. .doit = nl80211_get_mesh_params,
  3427. .policy = nl80211_policy,
  3428. /* can be retrieved by unprivileged users */
  3429. },
  3430. {
  3431. .cmd = NL80211_CMD_SET_MESH_PARAMS,
  3432. .doit = nl80211_set_mesh_params,
  3433. .policy = nl80211_policy,
  3434. .flags = GENL_ADMIN_PERM,
  3435. },
  3436. {
  3437. .cmd = NL80211_CMD_TRIGGER_SCAN,
  3438. .doit = nl80211_trigger_scan,
  3439. .policy = nl80211_policy,
  3440. .flags = GENL_ADMIN_PERM,
  3441. },
  3442. {
  3443. .cmd = NL80211_CMD_GET_SCAN,
  3444. .policy = nl80211_policy,
  3445. .dumpit = nl80211_dump_scan,
  3446. },
  3447. {
  3448. .cmd = NL80211_CMD_AUTHENTICATE,
  3449. .doit = nl80211_authenticate,
  3450. .policy = nl80211_policy,
  3451. .flags = GENL_ADMIN_PERM,
  3452. },
  3453. {
  3454. .cmd = NL80211_CMD_ASSOCIATE,
  3455. .doit = nl80211_associate,
  3456. .policy = nl80211_policy,
  3457. .flags = GENL_ADMIN_PERM,
  3458. },
  3459. {
  3460. .cmd = NL80211_CMD_DEAUTHENTICATE,
  3461. .doit = nl80211_deauthenticate,
  3462. .policy = nl80211_policy,
  3463. .flags = GENL_ADMIN_PERM,
  3464. },
  3465. {
  3466. .cmd = NL80211_CMD_DISASSOCIATE,
  3467. .doit = nl80211_disassociate,
  3468. .policy = nl80211_policy,
  3469. .flags = GENL_ADMIN_PERM,
  3470. },
  3471. {
  3472. .cmd = NL80211_CMD_JOIN_IBSS,
  3473. .doit = nl80211_join_ibss,
  3474. .policy = nl80211_policy,
  3475. .flags = GENL_ADMIN_PERM,
  3476. },
  3477. {
  3478. .cmd = NL80211_CMD_LEAVE_IBSS,
  3479. .doit = nl80211_leave_ibss,
  3480. .policy = nl80211_policy,
  3481. .flags = GENL_ADMIN_PERM,
  3482. },
  3483. #ifdef CONFIG_NL80211_TESTMODE
  3484. {
  3485. .cmd = NL80211_CMD_TESTMODE,
  3486. .doit = nl80211_testmode_do,
  3487. .policy = nl80211_policy,
  3488. .flags = GENL_ADMIN_PERM,
  3489. },
  3490. #endif
  3491. {
  3492. .cmd = NL80211_CMD_CONNECT,
  3493. .doit = nl80211_connect,
  3494. .policy = nl80211_policy,
  3495. .flags = GENL_ADMIN_PERM,
  3496. },
  3497. {
  3498. .cmd = NL80211_CMD_DISCONNECT,
  3499. .doit = nl80211_disconnect,
  3500. .policy = nl80211_policy,
  3501. .flags = GENL_ADMIN_PERM,
  3502. },
  3503. };
  3504. static struct genl_multicast_group nl80211_mlme_mcgrp = {
  3505. .name = "mlme",
  3506. };
  3507. /* multicast groups */
  3508. static struct genl_multicast_group nl80211_config_mcgrp = {
  3509. .name = "config",
  3510. };
  3511. static struct genl_multicast_group nl80211_scan_mcgrp = {
  3512. .name = "scan",
  3513. };
  3514. static struct genl_multicast_group nl80211_regulatory_mcgrp = {
  3515. .name = "regulatory",
  3516. };
  3517. /* notification functions */
  3518. void nl80211_notify_dev_rename(struct cfg80211_registered_device *rdev)
  3519. {
  3520. struct sk_buff *msg;
  3521. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  3522. if (!msg)
  3523. return;
  3524. if (nl80211_send_wiphy(msg, 0, 0, 0, rdev) < 0) {
  3525. nlmsg_free(msg);
  3526. return;
  3527. }
  3528. genlmsg_multicast(msg, 0, nl80211_config_mcgrp.id, GFP_KERNEL);
  3529. }
  3530. static int nl80211_add_scan_req(struct sk_buff *msg,
  3531. struct cfg80211_registered_device *rdev)
  3532. {
  3533. struct cfg80211_scan_request *req = rdev->scan_req;
  3534. struct nlattr *nest;
  3535. int i;
  3536. ASSERT_RDEV_LOCK(rdev);
  3537. if (WARN_ON(!req))
  3538. return 0;
  3539. nest = nla_nest_start(msg, NL80211_ATTR_SCAN_SSIDS);
  3540. if (!nest)
  3541. goto nla_put_failure;
  3542. for (i = 0; i < req->n_ssids; i++)
  3543. NLA_PUT(msg, i, req->ssids[i].ssid_len, req->ssids[i].ssid);
  3544. nla_nest_end(msg, nest);
  3545. nest = nla_nest_start(msg, NL80211_ATTR_SCAN_FREQUENCIES);
  3546. if (!nest)
  3547. goto nla_put_failure;
  3548. for (i = 0; i < req->n_channels; i++)
  3549. NLA_PUT_U32(msg, i, req->channels[i]->center_freq);
  3550. nla_nest_end(msg, nest);
  3551. if (req->ie)
  3552. NLA_PUT(msg, NL80211_ATTR_IE, req->ie_len, req->ie);
  3553. return 0;
  3554. nla_put_failure:
  3555. return -ENOBUFS;
  3556. }
  3557. static int nl80211_send_scan_msg(struct sk_buff *msg,
  3558. struct cfg80211_registered_device *rdev,
  3559. struct net_device *netdev,
  3560. u32 pid, u32 seq, int flags,
  3561. u32 cmd)
  3562. {
  3563. void *hdr;
  3564. hdr = nl80211hdr_put(msg, pid, seq, flags, cmd);
  3565. if (!hdr)
  3566. return -1;
  3567. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
  3568. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
  3569. /* ignore errors and send incomplete event anyway */
  3570. nl80211_add_scan_req(msg, rdev);
  3571. return genlmsg_end(msg, hdr);
  3572. nla_put_failure:
  3573. genlmsg_cancel(msg, hdr);
  3574. return -EMSGSIZE;
  3575. }
  3576. void nl80211_send_scan_start(struct cfg80211_registered_device *rdev,
  3577. struct net_device *netdev)
  3578. {
  3579. struct sk_buff *msg;
  3580. msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
  3581. if (!msg)
  3582. return;
  3583. if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
  3584. NL80211_CMD_TRIGGER_SCAN) < 0) {
  3585. nlmsg_free(msg);
  3586. return;
  3587. }
  3588. genlmsg_multicast(msg, 0, nl80211_scan_mcgrp.id, GFP_KERNEL);
  3589. }
  3590. void nl80211_send_scan_done(struct cfg80211_registered_device *rdev,
  3591. struct net_device *netdev)
  3592. {
  3593. struct sk_buff *msg;
  3594. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  3595. if (!msg)
  3596. return;
  3597. if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
  3598. NL80211_CMD_NEW_SCAN_RESULTS) < 0) {
  3599. nlmsg_free(msg);
  3600. return;
  3601. }
  3602. genlmsg_multicast(msg, 0, nl80211_scan_mcgrp.id, GFP_KERNEL);
  3603. }
  3604. void nl80211_send_scan_aborted(struct cfg80211_registered_device *rdev,
  3605. struct net_device *netdev)
  3606. {
  3607. struct sk_buff *msg;
  3608. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  3609. if (!msg)
  3610. return;
  3611. if (nl80211_send_scan_msg(msg, rdev, netdev, 0, 0, 0,
  3612. NL80211_CMD_SCAN_ABORTED) < 0) {
  3613. nlmsg_free(msg);
  3614. return;
  3615. }
  3616. genlmsg_multicast(msg, 0, nl80211_scan_mcgrp.id, GFP_KERNEL);
  3617. }
  3618. /*
  3619. * This can happen on global regulatory changes or device specific settings
  3620. * based on custom world regulatory domains.
  3621. */
  3622. void nl80211_send_reg_change_event(struct regulatory_request *request)
  3623. {
  3624. struct sk_buff *msg;
  3625. void *hdr;
  3626. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_KERNEL);
  3627. if (!msg)
  3628. return;
  3629. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_CHANGE);
  3630. if (!hdr) {
  3631. nlmsg_free(msg);
  3632. return;
  3633. }
  3634. /* Userspace can always count this one always being set */
  3635. NLA_PUT_U8(msg, NL80211_ATTR_REG_INITIATOR, request->initiator);
  3636. if (request->alpha2[0] == '0' && request->alpha2[1] == '0')
  3637. NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
  3638. NL80211_REGDOM_TYPE_WORLD);
  3639. else if (request->alpha2[0] == '9' && request->alpha2[1] == '9')
  3640. NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
  3641. NL80211_REGDOM_TYPE_CUSTOM_WORLD);
  3642. else if ((request->alpha2[0] == '9' && request->alpha2[1] == '8') ||
  3643. request->intersect)
  3644. NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
  3645. NL80211_REGDOM_TYPE_INTERSECTION);
  3646. else {
  3647. NLA_PUT_U8(msg, NL80211_ATTR_REG_TYPE,
  3648. NL80211_REGDOM_TYPE_COUNTRY);
  3649. NLA_PUT_STRING(msg, NL80211_ATTR_REG_ALPHA2, request->alpha2);
  3650. }
  3651. if (wiphy_idx_valid(request->wiphy_idx))
  3652. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, request->wiphy_idx);
  3653. if (genlmsg_end(msg, hdr) < 0) {
  3654. nlmsg_free(msg);
  3655. return;
  3656. }
  3657. genlmsg_multicast(msg, 0, nl80211_regulatory_mcgrp.id, GFP_KERNEL);
  3658. return;
  3659. nla_put_failure:
  3660. genlmsg_cancel(msg, hdr);
  3661. nlmsg_free(msg);
  3662. }
  3663. static void nl80211_send_mlme_event(struct cfg80211_registered_device *rdev,
  3664. struct net_device *netdev,
  3665. const u8 *buf, size_t len,
  3666. enum nl80211_commands cmd, gfp_t gfp)
  3667. {
  3668. struct sk_buff *msg;
  3669. void *hdr;
  3670. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  3671. if (!msg)
  3672. return;
  3673. hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
  3674. if (!hdr) {
  3675. nlmsg_free(msg);
  3676. return;
  3677. }
  3678. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
  3679. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
  3680. NLA_PUT(msg, NL80211_ATTR_FRAME, len, buf);
  3681. if (genlmsg_end(msg, hdr) < 0) {
  3682. nlmsg_free(msg);
  3683. return;
  3684. }
  3685. genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
  3686. return;
  3687. nla_put_failure:
  3688. genlmsg_cancel(msg, hdr);
  3689. nlmsg_free(msg);
  3690. }
  3691. void nl80211_send_rx_auth(struct cfg80211_registered_device *rdev,
  3692. struct net_device *netdev, const u8 *buf,
  3693. size_t len, gfp_t gfp)
  3694. {
  3695. nl80211_send_mlme_event(rdev, netdev, buf, len,
  3696. NL80211_CMD_AUTHENTICATE, gfp);
  3697. }
  3698. void nl80211_send_rx_assoc(struct cfg80211_registered_device *rdev,
  3699. struct net_device *netdev, const u8 *buf,
  3700. size_t len, gfp_t gfp)
  3701. {
  3702. nl80211_send_mlme_event(rdev, netdev, buf, len,
  3703. NL80211_CMD_ASSOCIATE, gfp);
  3704. }
  3705. void nl80211_send_deauth(struct cfg80211_registered_device *rdev,
  3706. struct net_device *netdev, const u8 *buf,
  3707. size_t len, gfp_t gfp)
  3708. {
  3709. nl80211_send_mlme_event(rdev, netdev, buf, len,
  3710. NL80211_CMD_DEAUTHENTICATE, gfp);
  3711. }
  3712. void nl80211_send_disassoc(struct cfg80211_registered_device *rdev,
  3713. struct net_device *netdev, const u8 *buf,
  3714. size_t len, gfp_t gfp)
  3715. {
  3716. nl80211_send_mlme_event(rdev, netdev, buf, len,
  3717. NL80211_CMD_DISASSOCIATE, gfp);
  3718. }
  3719. static void nl80211_send_mlme_timeout(struct cfg80211_registered_device *rdev,
  3720. struct net_device *netdev, int cmd,
  3721. const u8 *addr, gfp_t gfp)
  3722. {
  3723. struct sk_buff *msg;
  3724. void *hdr;
  3725. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  3726. if (!msg)
  3727. return;
  3728. hdr = nl80211hdr_put(msg, 0, 0, 0, cmd);
  3729. if (!hdr) {
  3730. nlmsg_free(msg);
  3731. return;
  3732. }
  3733. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
  3734. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
  3735. NLA_PUT_FLAG(msg, NL80211_ATTR_TIMED_OUT);
  3736. NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
  3737. if (genlmsg_end(msg, hdr) < 0) {
  3738. nlmsg_free(msg);
  3739. return;
  3740. }
  3741. genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
  3742. return;
  3743. nla_put_failure:
  3744. genlmsg_cancel(msg, hdr);
  3745. nlmsg_free(msg);
  3746. }
  3747. void nl80211_send_auth_timeout(struct cfg80211_registered_device *rdev,
  3748. struct net_device *netdev, const u8 *addr,
  3749. gfp_t gfp)
  3750. {
  3751. nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_AUTHENTICATE,
  3752. addr, gfp);
  3753. }
  3754. void nl80211_send_assoc_timeout(struct cfg80211_registered_device *rdev,
  3755. struct net_device *netdev, const u8 *addr,
  3756. gfp_t gfp)
  3757. {
  3758. nl80211_send_mlme_timeout(rdev, netdev, NL80211_CMD_ASSOCIATE,
  3759. addr, gfp);
  3760. }
  3761. void nl80211_send_connect_result(struct cfg80211_registered_device *rdev,
  3762. struct net_device *netdev, const u8 *bssid,
  3763. const u8 *req_ie, size_t req_ie_len,
  3764. const u8 *resp_ie, size_t resp_ie_len,
  3765. u16 status, gfp_t gfp)
  3766. {
  3767. struct sk_buff *msg;
  3768. void *hdr;
  3769. msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
  3770. if (!msg)
  3771. return;
  3772. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_CONNECT);
  3773. if (!hdr) {
  3774. nlmsg_free(msg);
  3775. return;
  3776. }
  3777. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
  3778. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
  3779. if (bssid)
  3780. NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
  3781. NLA_PUT_U16(msg, NL80211_ATTR_STATUS_CODE, status);
  3782. if (req_ie)
  3783. NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
  3784. if (resp_ie)
  3785. NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
  3786. if (genlmsg_end(msg, hdr) < 0) {
  3787. nlmsg_free(msg);
  3788. return;
  3789. }
  3790. genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
  3791. return;
  3792. nla_put_failure:
  3793. genlmsg_cancel(msg, hdr);
  3794. nlmsg_free(msg);
  3795. }
  3796. void nl80211_send_roamed(struct cfg80211_registered_device *rdev,
  3797. struct net_device *netdev, const u8 *bssid,
  3798. const u8 *req_ie, size_t req_ie_len,
  3799. const u8 *resp_ie, size_t resp_ie_len, gfp_t gfp)
  3800. {
  3801. struct sk_buff *msg;
  3802. void *hdr;
  3803. msg = nlmsg_new(NLMSG_GOODSIZE, gfp);
  3804. if (!msg)
  3805. return;
  3806. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_ROAM);
  3807. if (!hdr) {
  3808. nlmsg_free(msg);
  3809. return;
  3810. }
  3811. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
  3812. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
  3813. NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
  3814. if (req_ie)
  3815. NLA_PUT(msg, NL80211_ATTR_REQ_IE, req_ie_len, req_ie);
  3816. if (resp_ie)
  3817. NLA_PUT(msg, NL80211_ATTR_RESP_IE, resp_ie_len, resp_ie);
  3818. if (genlmsg_end(msg, hdr) < 0) {
  3819. nlmsg_free(msg);
  3820. return;
  3821. }
  3822. genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
  3823. return;
  3824. nla_put_failure:
  3825. genlmsg_cancel(msg, hdr);
  3826. nlmsg_free(msg);
  3827. }
  3828. void nl80211_send_disconnected(struct cfg80211_registered_device *rdev,
  3829. struct net_device *netdev, u16 reason,
  3830. const u8 *ie, size_t ie_len, bool from_ap)
  3831. {
  3832. struct sk_buff *msg;
  3833. void *hdr;
  3834. msg = nlmsg_new(NLMSG_GOODSIZE, GFP_KERNEL);
  3835. if (!msg)
  3836. return;
  3837. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_DISCONNECT);
  3838. if (!hdr) {
  3839. nlmsg_free(msg);
  3840. return;
  3841. }
  3842. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
  3843. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
  3844. if (from_ap && reason)
  3845. NLA_PUT_U16(msg, NL80211_ATTR_REASON_CODE, reason);
  3846. if (from_ap)
  3847. NLA_PUT_FLAG(msg, NL80211_ATTR_DISCONNECTED_BY_AP);
  3848. if (ie)
  3849. NLA_PUT(msg, NL80211_ATTR_IE, ie_len, ie);
  3850. if (genlmsg_end(msg, hdr) < 0) {
  3851. nlmsg_free(msg);
  3852. return;
  3853. }
  3854. genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, GFP_KERNEL);
  3855. return;
  3856. nla_put_failure:
  3857. genlmsg_cancel(msg, hdr);
  3858. nlmsg_free(msg);
  3859. }
  3860. void nl80211_send_ibss_bssid(struct cfg80211_registered_device *rdev,
  3861. struct net_device *netdev, const u8 *bssid,
  3862. gfp_t gfp)
  3863. {
  3864. struct sk_buff *msg;
  3865. void *hdr;
  3866. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  3867. if (!msg)
  3868. return;
  3869. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_JOIN_IBSS);
  3870. if (!hdr) {
  3871. nlmsg_free(msg);
  3872. return;
  3873. }
  3874. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
  3875. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
  3876. NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, bssid);
  3877. if (genlmsg_end(msg, hdr) < 0) {
  3878. nlmsg_free(msg);
  3879. return;
  3880. }
  3881. genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
  3882. return;
  3883. nla_put_failure:
  3884. genlmsg_cancel(msg, hdr);
  3885. nlmsg_free(msg);
  3886. }
  3887. void nl80211_michael_mic_failure(struct cfg80211_registered_device *rdev,
  3888. struct net_device *netdev, const u8 *addr,
  3889. enum nl80211_key_type key_type, int key_id,
  3890. const u8 *tsc, gfp_t gfp)
  3891. {
  3892. struct sk_buff *msg;
  3893. void *hdr;
  3894. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, gfp);
  3895. if (!msg)
  3896. return;
  3897. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_MICHAEL_MIC_FAILURE);
  3898. if (!hdr) {
  3899. nlmsg_free(msg);
  3900. return;
  3901. }
  3902. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, rdev->wiphy_idx);
  3903. NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, netdev->ifindex);
  3904. if (addr)
  3905. NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
  3906. NLA_PUT_U32(msg, NL80211_ATTR_KEY_TYPE, key_type);
  3907. NLA_PUT_U8(msg, NL80211_ATTR_KEY_IDX, key_id);
  3908. if (tsc)
  3909. NLA_PUT(msg, NL80211_ATTR_KEY_SEQ, 6, tsc);
  3910. if (genlmsg_end(msg, hdr) < 0) {
  3911. nlmsg_free(msg);
  3912. return;
  3913. }
  3914. genlmsg_multicast(msg, 0, nl80211_mlme_mcgrp.id, gfp);
  3915. return;
  3916. nla_put_failure:
  3917. genlmsg_cancel(msg, hdr);
  3918. nlmsg_free(msg);
  3919. }
  3920. void nl80211_send_beacon_hint_event(struct wiphy *wiphy,
  3921. struct ieee80211_channel *channel_before,
  3922. struct ieee80211_channel *channel_after)
  3923. {
  3924. struct sk_buff *msg;
  3925. void *hdr;
  3926. struct nlattr *nl_freq;
  3927. msg = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
  3928. if (!msg)
  3929. return;
  3930. hdr = nl80211hdr_put(msg, 0, 0, 0, NL80211_CMD_REG_BEACON_HINT);
  3931. if (!hdr) {
  3932. nlmsg_free(msg);
  3933. return;
  3934. }
  3935. /*
  3936. * Since we are applying the beacon hint to a wiphy we know its
  3937. * wiphy_idx is valid
  3938. */
  3939. NLA_PUT_U32(msg, NL80211_ATTR_WIPHY, get_wiphy_idx(wiphy));
  3940. /* Before */
  3941. nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_BEFORE);
  3942. if (!nl_freq)
  3943. goto nla_put_failure;
  3944. if (nl80211_msg_put_channel(msg, channel_before))
  3945. goto nla_put_failure;
  3946. nla_nest_end(msg, nl_freq);
  3947. /* After */
  3948. nl_freq = nla_nest_start(msg, NL80211_ATTR_FREQ_AFTER);
  3949. if (!nl_freq)
  3950. goto nla_put_failure;
  3951. if (nl80211_msg_put_channel(msg, channel_after))
  3952. goto nla_put_failure;
  3953. nla_nest_end(msg, nl_freq);
  3954. if (genlmsg_end(msg, hdr) < 0) {
  3955. nlmsg_free(msg);
  3956. return;
  3957. }
  3958. genlmsg_multicast(msg, 0, nl80211_regulatory_mcgrp.id, GFP_ATOMIC);
  3959. return;
  3960. nla_put_failure:
  3961. genlmsg_cancel(msg, hdr);
  3962. nlmsg_free(msg);
  3963. }
  3964. /* initialisation/exit functions */
  3965. int nl80211_init(void)
  3966. {
  3967. int err;
  3968. err = genl_register_family_with_ops(&nl80211_fam,
  3969. nl80211_ops, ARRAY_SIZE(nl80211_ops));
  3970. if (err)
  3971. return err;
  3972. err = genl_register_mc_group(&nl80211_fam, &nl80211_config_mcgrp);
  3973. if (err)
  3974. goto err_out;
  3975. err = genl_register_mc_group(&nl80211_fam, &nl80211_scan_mcgrp);
  3976. if (err)
  3977. goto err_out;
  3978. err = genl_register_mc_group(&nl80211_fam, &nl80211_regulatory_mcgrp);
  3979. if (err)
  3980. goto err_out;
  3981. err = genl_register_mc_group(&nl80211_fam, &nl80211_mlme_mcgrp);
  3982. if (err)
  3983. goto err_out;
  3984. #ifdef CONFIG_NL80211_TESTMODE
  3985. err = genl_register_mc_group(&nl80211_fam, &nl80211_testmode_mcgrp);
  3986. if (err)
  3987. goto err_out;
  3988. #endif
  3989. return 0;
  3990. err_out:
  3991. genl_unregister_family(&nl80211_fam);
  3992. return err;
  3993. }
  3994. void nl80211_exit(void)
  3995. {
  3996. genl_unregister_family(&nl80211_fam);
  3997. }