]> git.ipfire.org Git - people/ms/linux.git/blame - net/mac80211/iface.c
Importing "grsecurity-3.1-3.19.2-201503201903.patch"
[people/ms/linux.git] / net / mac80211 / iface.c
CommitLineData
f0706e82 1/*
c5d54fbf 2 * Interface handling
0d143fe1 3 *
f0706e82
JB
4 * Copyright 2002-2005, Instant802 Networks, Inc.
5 * Copyright 2005-2006, Devicescape Software, Inc.
6 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
75636525 7 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
d98ad83e 8 * Copyright 2013-2014 Intel Mobile Communications GmbH
f0706e82
JB
9 *
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License version 2 as
12 * published by the Free Software Foundation.
13 */
5a0e3ad6 14#include <linux/slab.h>
f0706e82
JB
15#include <linux/kernel.h>
16#include <linux/if_arp.h>
17#include <linux/netdevice.h>
18#include <linux/rtnetlink.h>
19#include <net/mac80211.h>
cf0277e7 20#include <net/ieee80211_radiotap.h>
f0706e82
JB
21#include "ieee80211_i.h"
22#include "sta_info.h"
e9f207f0 23#include "debugfs_netdev.h"
ee385855 24#include "mesh.h"
0d143fe1 25#include "led.h"
24487981 26#include "driver-ops.h"
cf0277e7 27#include "wme.h"
1be7fe8d 28#include "rate.h"
0d143fe1 29
c771c9d8
JB
30/**
31 * DOC: Interface list locking
32 *
33 * The interface list in each struct ieee80211_local is protected
34 * three-fold:
35 *
36 * (1) modifications may only be done under the RTNL
37 * (2) modifications and readers are protected against each other by
38 * the iflist_mtx.
39 * (3) modifications are done in an RCU manner so atomic readers
40 * can traverse the list in RCU-safe blocks.
41 *
42 * As a consequence, reads (traversals) of the list can be protected
43 * by either the RTNL, the iflist_mtx or RCU.
44 */
45
1ea6f9c0
JB
46bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
47{
48 struct ieee80211_chanctx_conf *chanctx_conf;
49 int power;
50
51 rcu_read_lock();
52 chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
53 if (!chanctx_conf) {
54 rcu_read_unlock();
55 return false;
56 }
57
0430c883 58 power = ieee80211_chandef_max_power(&chanctx_conf->def);
1ea6f9c0
JB
59 rcu_read_unlock();
60
61 if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
62 power = min(power, sdata->user_power_level);
63
64 if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
65 power = min(power, sdata->ap_power_level);
66
67 if (power != sdata->vif.bss_conf.txpower) {
68 sdata->vif.bss_conf.txpower = power;
69 ieee80211_hw_config(sdata->local, 0);
70 return true;
71 }
72
73 return false;
74}
75
76void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
77{
78 if (__ieee80211_recalc_txpower(sdata))
79 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER);
80}
c771c9d8 81
62a40a15 82static u32 __ieee80211_idle_off(struct ieee80211_local *local)
cc45ae54
JB
83{
84 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
85 return 0;
86
87 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
88 return IEEE80211_CONF_CHANGE_IDLE;
89}
90
62a40a15 91static u32 __ieee80211_idle_on(struct ieee80211_local *local)
cc45ae54
JB
92{
93 if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
94 return 0;
95
39ecc01d 96 ieee80211_flush_queues(local, NULL);
cc45ae54
JB
97
98 local->hw.conf.flags |= IEEE80211_CONF_IDLE;
99 return IEEE80211_CONF_CHANGE_IDLE;
100}
101
62a40a15
JB
102static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
103 bool force_active)
cc45ae54 104{
1d5e1266 105 bool working, scanning, active;
cc45ae54 106 unsigned int led_trig_start = 0, led_trig_stop = 0;
cc45ae54 107
cc45ae54
JB
108 lockdep_assert_held(&local->mtx);
109
62a40a15
JB
110 active = force_active ||
111 !list_empty(&local->chanctx_list) ||
112 local->monitors;
cc45ae54 113
1d5e1266
JB
114 working = !local->ops->remain_on_channel &&
115 !list_empty(&local->roc_list);
cc45ae54 116
f1e3e051
JB
117 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
118 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
cc45ae54 119
cc45ae54
JB
120 if (working || scanning)
121 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
122 else
123 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
124
fd0f979a 125 if (active)
cc45ae54
JB
126 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
127 else
128 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
129
130 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
131
fd0f979a 132 if (working || scanning || active)
62a40a15
JB
133 return __ieee80211_idle_off(local);
134 return __ieee80211_idle_on(local);
135}
136
137u32 ieee80211_idle_off(struct ieee80211_local *local)
138{
139 return __ieee80211_recalc_idle(local, true);
140}
141
142void ieee80211_recalc_idle(struct ieee80211_local *local)
143{
144 u32 change = __ieee80211_recalc_idle(local, false);
fd0f979a
JB
145 if (change)
146 ieee80211_hw_config(local, change);
cc45ae54
JB
147}
148
0d143fe1
JB
149static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
150{
09b1426e 151 if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN)
0d143fe1 152 return -EINVAL;
0d143fe1 153
0d143fe1
JB
154 dev->mtu = new_mtu;
155 return 0;
156}
157
3899ba90 158static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
31eba5bc 159 bool check_dup)
478622e8 160{
ac20976d
HS
161 struct ieee80211_local *local = sdata->local;
162 struct ieee80211_sub_if_data *iter;
478622e8
HS
163 u64 new, mask, tmp;
164 u8 *m;
165 int ret = 0;
166
167 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
168 return 0;
169
170 m = addr;
171 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
172 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
173 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
174
175 m = local->hw.wiphy->addr_mask;
176 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
177 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
178 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
179
31eba5bc
FF
180 if (!check_dup)
181 return ret;
478622e8
HS
182
183 mutex_lock(&local->iflist_mtx);
ac20976d
HS
184 list_for_each_entry(iter, &local->interfaces, list) {
185 if (iter == sdata)
478622e8
HS
186 continue;
187
3899ba90
JL
188 if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
189 !(iter->u.mntr_flags & MONITOR_FLAG_ACTIVE))
478622e8
HS
190 continue;
191
ac20976d 192 m = iter->vif.addr;
478622e8
HS
193 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
194 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
195 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
196
197 if ((new & ~mask) != (tmp & ~mask)) {
198 ret = -EINVAL;
199 break;
200 }
201 }
202 mutex_unlock(&local->iflist_mtx);
203
204 return ret;
205}
206
47846c9b
JB
207static int ieee80211_change_mac(struct net_device *dev, void *addr)
208{
209 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
fc5f7577 210 struct sockaddr *sa = addr;
31eba5bc 211 bool check_dup = true;
47846c9b
JB
212 int ret;
213
9607e6b6 214 if (ieee80211_sdata_running(sdata))
47846c9b
JB
215 return -EBUSY;
216
31eba5bc
FF
217 if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
218 !(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
219 check_dup = false;
220
3899ba90 221 ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
478622e8
HS
222 if (ret)
223 return ret;
224
fc5f7577 225 ret = eth_mac_addr(dev, sa);
47846c9b
JB
226
227 if (ret == 0)
fc5f7577 228 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
47846c9b
JB
229
230 return ret;
231}
232
0d143fe1
JB
233static inline int identical_mac_addr_allowed(int type1, int type2)
234{
235 return type1 == NL80211_IFTYPE_MONITOR ||
236 type2 == NL80211_IFTYPE_MONITOR ||
f142c6b9
JB
237 type1 == NL80211_IFTYPE_P2P_DEVICE ||
238 type2 == NL80211_IFTYPE_P2P_DEVICE ||
0d143fe1
JB
239 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) ||
240 (type1 == NL80211_IFTYPE_WDS &&
241 (type2 == NL80211_IFTYPE_WDS ||
242 type2 == NL80211_IFTYPE_AP)) ||
243 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
244 (type1 == NL80211_IFTYPE_AP_VLAN &&
245 (type2 == NL80211_IFTYPE_AP ||
246 type2 == NL80211_IFTYPE_AP_VLAN));
247}
248
87490f6d
JB
249static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
250 enum nl80211_iftype iftype)
0d143fe1 251{
b4a4bf5d 252 struct ieee80211_local *local = sdata->local;
87490f6d 253 struct ieee80211_sub_if_data *nsdata;
b6a55015 254 int ret;
0d143fe1 255
87490f6d 256 ASSERT_RTNL();
0d143fe1
JB
257
258 /* we hold the RTNL here so can safely walk the list */
259 list_for_each_entry(nsdata, &local->interfaces, list) {
371a255e 260 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
239281f8
RL
261 /*
262 * Only OCB and monitor mode may coexist
263 */
264 if ((sdata->vif.type == NL80211_IFTYPE_OCB &&
265 nsdata->vif.type != NL80211_IFTYPE_MONITOR) ||
266 (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
267 nsdata->vif.type == NL80211_IFTYPE_OCB))
268 return -EBUSY;
269
0d143fe1
JB
270 /*
271 * Allow only a single IBSS interface to be up at any
272 * time. This is restricted because beacon distribution
273 * cannot work properly if both are in the same IBSS.
274 *
275 * To remove this restriction we'd have to disallow them
276 * from setting the same SSID on different IBSS interfaces
277 * belonging to the same hardware. Then, however, we're
278 * faced with having to adopt two different TSF timers...
279 */
87490f6d 280 if (iftype == NL80211_IFTYPE_ADHOC &&
0d143fe1
JB
281 nsdata->vif.type == NL80211_IFTYPE_ADHOC)
282 return -EBUSY;
73da7d5b
SW
283 /*
284 * will not add another interface while any channel
285 * switch is active.
286 */
287 if (nsdata->vif.csa_active)
288 return -EBUSY;
0d143fe1
JB
289
290 /*
291 * The remaining checks are only performed for interfaces
292 * with the same MAC address.
293 */
371a255e
JB
294 if (!ether_addr_equal(sdata->vif.addr,
295 nsdata->vif.addr))
0d143fe1
JB
296 continue;
297
298 /*
299 * check whether it may have the same address
300 */
87490f6d 301 if (!identical_mac_addr_allowed(iftype,
0d143fe1
JB
302 nsdata->vif.type))
303 return -ENOTUNIQ;
304
305 /*
306 * can only add VLANs to enabled APs
307 */
87490f6d 308 if (iftype == NL80211_IFTYPE_AP_VLAN &&
0d143fe1
JB
309 nsdata->vif.type == NL80211_IFTYPE_AP)
310 sdata->bss = &nsdata->u.ap;
311 }
312 }
313
b6a55015
LC
314 mutex_lock(&local->chanctx_mtx);
315 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
316 mutex_unlock(&local->chanctx_mtx);
317 return ret;
87490f6d
JB
318}
319
a9865538
JB
320static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata,
321 enum nl80211_iftype iftype)
3a25a8c8
JB
322{
323 int n_queues = sdata->local->hw.queues;
324 int i;
325
a9865538 326 if (iftype != NL80211_IFTYPE_P2P_DEVICE) {
0ef24e52
IP
327 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
328 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
329 IEEE80211_INVAL_HW_QUEUE))
330 return -EINVAL;
331 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
332 n_queues))
333 return -EINVAL;
334 }
3a25a8c8
JB
335 }
336
a9865538
JB
337 if ((iftype != NL80211_IFTYPE_AP &&
338 iftype != NL80211_IFTYPE_P2P_GO &&
339 iftype != NL80211_IFTYPE_MESH_POINT) ||
bb3e10fb 340 !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) {
3a25a8c8
JB
341 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
342 return 0;
343 }
344
345 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
346 return -EINVAL;
347
348 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
349 return -EINVAL;
350
351 return 0;
352}
353
85416a4f
CL
354void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
355 const int offset)
356{
357 struct ieee80211_local *local = sdata->local;
358 u32 flags = sdata->u.mntr_flags;
359
360#define ADJUST(_f, _s) do { \
361 if (flags & MONITOR_FLAG_##_f) \
362 local->fif_##_s += offset; \
363 } while (0)
364
365 ADJUST(FCSFAIL, fcsfail);
366 ADJUST(PLCPFAIL, plcpfail);
367 ADJUST(CONTROL, control);
368 ADJUST(CONTROL, pspoll);
369 ADJUST(OTHER_BSS, other_bss);
370
371#undef ADJUST
372}
373
3a25a8c8
JB
374static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
375{
376 struct ieee80211_local *local = sdata->local;
377 int i;
378
379 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
380 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
381 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
a9d3c05c 382 else if (local->hw.queues >= IEEE80211_NUM_ACS)
3a25a8c8 383 sdata->vif.hw_queue[i] = i;
a9d3c05c
JB
384 else
385 sdata->vif.hw_queue[i] = 0;
3a25a8c8
JB
386 }
387 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
388}
389
3c3e21e7 390int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
4b6f1dd6
JB
391{
392 struct ieee80211_sub_if_data *sdata;
8b305780 393 int ret;
4b6f1dd6
JB
394
395 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
396 return 0;
397
8b305780 398 ASSERT_RTNL();
685fb72b 399
4b6f1dd6 400 if (local->monitor_sdata)
8b305780 401 return 0;
4b6f1dd6
JB
402
403 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
8b305780
JB
404 if (!sdata)
405 return -ENOMEM;
4b6f1dd6
JB
406
407 /* set up data */
408 sdata->local = local;
409 sdata->vif.type = NL80211_IFTYPE_MONITOR;
410 snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
411 wiphy_name(local->hw.wiphy));
34171dc0 412 sdata->wdev.iftype = NL80211_IFTYPE_MONITOR;
4b6f1dd6 413
2475b1cc
MS
414 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
415
3a25a8c8
JB
416 ieee80211_set_default_queues(sdata);
417
4b6f1dd6
JB
418 ret = drv_add_interface(local, sdata);
419 if (WARN_ON(ret)) {
420 /* ok .. stupid driver, it asked for this! */
421 kfree(sdata);
8b305780 422 return ret;
4b6f1dd6
JB
423 }
424
a9865538 425 ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR);
3a25a8c8
JB
426 if (ret) {
427 kfree(sdata);
8b305780 428 return ret;
3a25a8c8
JB
429 }
430
fab57a6c
JB
431 mutex_lock(&local->iflist_mtx);
432 rcu_assign_pointer(local->monitor_sdata, sdata);
433 mutex_unlock(&local->iflist_mtx);
434
34a3740d 435 mutex_lock(&local->mtx);
4bf88530 436 ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef,
55de908a 437 IEEE80211_CHANCTX_EXCLUSIVE);
34a3740d 438 mutex_unlock(&local->mtx);
55de908a 439 if (ret) {
fab57a6c 440 mutex_lock(&local->iflist_mtx);
0c2bef46 441 RCU_INIT_POINTER(local->monitor_sdata, NULL);
fab57a6c
JB
442 mutex_unlock(&local->iflist_mtx);
443 synchronize_net();
55de908a
JB
444 drv_remove_interface(local, sdata);
445 kfree(sdata);
8b305780 446 return ret;
55de908a
JB
447 }
448
8b305780 449 return 0;
4b6f1dd6
JB
450}
451
3c3e21e7 452void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
4b6f1dd6
JB
453{
454 struct ieee80211_sub_if_data *sdata;
455
456 if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
457 return;
458
8b305780
JB
459 ASSERT_RTNL();
460
685fb72b 461 mutex_lock(&local->iflist_mtx);
4b6f1dd6 462
685fb72b
JB
463 sdata = rcu_dereference_protected(local->monitor_sdata,
464 lockdep_is_held(&local->iflist_mtx));
8b305780
JB
465 if (!sdata) {
466 mutex_unlock(&local->iflist_mtx);
467 return;
468 }
4b6f1dd6 469
0c2bef46 470 RCU_INIT_POINTER(local->monitor_sdata, NULL);
8b305780
JB
471 mutex_unlock(&local->iflist_mtx);
472
4b6f1dd6
JB
473 synchronize_net();
474
34a3740d 475 mutex_lock(&local->mtx);
55de908a 476 ieee80211_vif_release_channel(sdata);
34a3740d 477 mutex_unlock(&local->mtx);
55de908a 478
4b6f1dd6
JB
479 drv_remove_interface(local, sdata);
480
481 kfree(sdata);
482}
483
34d4bc4d
JB
484/*
485 * NOTE: Be very careful when changing this function, it must NOT return
486 * an error on interface type changes that have been pre-checked, so most
487 * checks should be in ieee80211_check_concurrent_iface.
488 */
f142c6b9 489int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
87490f6d 490{
f142c6b9
JB
491 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
492 struct net_device *dev = wdev->netdev;
87490f6d
JB
493 struct ieee80211_local *local = sdata->local;
494 struct sta_info *sta;
495 u32 changed = 0;
496 int res;
497 u32 hw_reconf_flags = 0;
498
0d143fe1
JB
499 switch (sdata->vif.type) {
500 case NL80211_IFTYPE_WDS:
501 if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
502 return -ENOLINK;
503 break;
665c93a9
JB
504 case NL80211_IFTYPE_AP_VLAN: {
505 struct ieee80211_sub_if_data *master;
506
0d143fe1
JB
507 if (!sdata->bss)
508 return -ENOLINK;
665c93a9 509
4e141dad 510 mutex_lock(&local->mtx);
0d143fe1 511 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
4e141dad 512 mutex_unlock(&local->mtx);
665c93a9
JB
513
514 master = container_of(sdata->bss,
515 struct ieee80211_sub_if_data, u.ap);
516 sdata->control_port_protocol =
517 master->control_port_protocol;
518 sdata->control_port_no_encrypt =
519 master->control_port_no_encrypt;
1351c5d3
JB
520 sdata->vif.cab_queue = master->vif.cab_queue;
521 memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
522 sizeof(sdata->vif.hw_queue));
2967e031 523 sdata->vif.bss_conf.chandef = master->vif.bss_conf.chandef;
0d143fe1 524 break;
665c93a9 525 }
0d143fe1
JB
526 case NL80211_IFTYPE_AP:
527 sdata->bss = &sdata->u.ap;
528 break;
529 case NL80211_IFTYPE_MESH_POINT:
0d143fe1
JB
530 case NL80211_IFTYPE_STATION:
531 case NL80211_IFTYPE_MONITOR:
532 case NL80211_IFTYPE_ADHOC:
f142c6b9 533 case NL80211_IFTYPE_P2P_DEVICE:
6e0bd6c3 534 case NL80211_IFTYPE_OCB:
0d143fe1
JB
535 /* no special treatment */
536 break;
537 case NL80211_IFTYPE_UNSPECIFIED:
2e161f78 538 case NUM_NL80211_IFTYPES:
2ca27bcf
JB
539 case NL80211_IFTYPE_P2P_CLIENT:
540 case NL80211_IFTYPE_P2P_GO:
0d143fe1
JB
541 /* cannot happen */
542 WARN_ON(1);
543 break;
544 }
545
63d9c273 546 if (local_read(&local->open_count) == 0) {
24487981 547 res = drv_start(local);
0d143fe1
JB
548 if (res)
549 goto err_del_bss;
e8975581
JB
550 /* we're brought up, everything changes */
551 hw_reconf_flags = ~0;
1f87f7d3 552 ieee80211_led_radio(local, true);
67408c8c
JB
553 ieee80211_mod_tpt_led_trig(local,
554 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
0d143fe1
JB
555 }
556
557 /*
bf533e0b
JB
558 * Copy the hopefully now-present MAC address to
559 * this interface, if it has the special null one.
0d143fe1 560 */
f142c6b9 561 if (dev && is_zero_ether_addr(dev->dev_addr)) {
bf533e0b
JB
562 memcpy(dev->dev_addr,
563 local->hw.wiphy->perm_addr,
564 ETH_ALEN);
565 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
566
567 if (!is_valid_ether_addr(dev->dev_addr)) {
4d6c36fa
JB
568 res = -EADDRNOTAVAIL;
569 goto err_stop;
0adc23f5 570 }
0d143fe1
JB
571 }
572
0d143fe1
JB
573 switch (sdata->vif.type) {
574 case NL80211_IFTYPE_AP_VLAN:
4d76d21b
JB
575 /* no need to tell driver, but set carrier and chanctx */
576 if (rtnl_dereference(sdata->bss->beacon)) {
577 ieee80211_vif_vlan_copy_chanctx(sdata);
3edaf3e6 578 netif_carrier_on(dev);
4d76d21b 579 } else {
3edaf3e6 580 netif_carrier_off(dev);
4d76d21b 581 }
0d143fe1
JB
582 break;
583 case NL80211_IFTYPE_MONITOR:
584 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
585 local->cooked_mntrs++;
586 break;
587 }
588
31eba5bc
FF
589 if (sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE) {
590 res = drv_add_interface(local, sdata);
591 if (res)
592 goto err_stop;
63d9c273 593 } else if (local->monitors == 0 && local_read(&local->open_count) == 0) {
075e0847
JB
594 res = ieee80211_add_virtual_monitor(local);
595 if (res)
596 goto err_stop;
597 }
598
0d143fe1
JB
599 /* must be before the call to ieee80211_configure_filter */
600 local->monitors++;
e8975581 601 if (local->monitors == 1) {
0869aea0
JB
602 local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
603 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
e8975581 604 }
0d143fe1 605
85416a4f 606 ieee80211_adjust_monitor_flags(sdata, 1);
0d143fe1 607 ieee80211_configure_filter(local);
801d929c
FF
608 mutex_lock(&local->mtx);
609 ieee80211_recalc_idle(local);
610 mutex_unlock(&local->mtx);
53e9b1de
DG
611
612 netif_carrier_on(dev);
0d143fe1 613 break;
0d143fe1 614 default:
34d4bc4d 615 if (coming_up) {
075e0847
JB
616 ieee80211_del_virtual_monitor(local);
617
7b7eab6f 618 res = drv_add_interface(local, sdata);
34d4bc4d
JB
619 if (res)
620 goto err_stop;
a9865538
JB
621 res = ieee80211_check_queues(sdata,
622 ieee80211_vif_type_p2p(&sdata->vif));
3a25a8c8
JB
623 if (res)
624 goto err_del_interface;
34d4bc4d 625 }
0d143fe1 626
29cbe68c 627 if (sdata->vif.type == NL80211_IFTYPE_AP) {
e3b90ca2 628 local->fif_pspoll++;
7be5086d 629 local->fif_probe_req++;
e3b90ca2 630
e3b90ca2 631 ieee80211_configure_filter(local);
7be5086d
JB
632 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
633 local->fif_probe_req++;
a3c9aa51 634 }
e3b90ca2 635
f142c6b9
JB
636 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
637 changed |= ieee80211_reset_erp_info(sdata);
0d143fe1 638 ieee80211_bss_info_change_notify(sdata, changed);
0d143fe1 639
c405c629
JB
640 switch (sdata->vif.type) {
641 case NL80211_IFTYPE_STATION:
642 case NL80211_IFTYPE_ADHOC:
643 case NL80211_IFTYPE_AP:
644 case NL80211_IFTYPE_MESH_POINT:
6e0bd6c3 645 case NL80211_IFTYPE_OCB:
0d143fe1 646 netif_carrier_off(dev);
c405c629 647 break;
1411af15 648 case NL80211_IFTYPE_WDS:
f142c6b9 649 case NL80211_IFTYPE_P2P_DEVICE:
1411af15 650 break;
c405c629 651 default:
a2310824
JB
652 /* not reached */
653 WARN_ON(1);
c405c629 654 }
59034591
EP
655
656 /*
657 * set default queue parameters so drivers don't
658 * need to initialise the hardware if the hardware
659 * doesn't start up with sane defaults
660 */
3abead59 661 ieee80211_set_wmm_default(sdata, true);
0d143fe1
JB
662 }
663
2d2080c3
JB
664 set_bit(SDATA_STATE_RUNNING, &sdata->state);
665
0d143fe1
JB
666 if (sdata->vif.type == NL80211_IFTYPE_WDS) {
667 /* Create STA entry for the WDS peer */
668 sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
669 GFP_KERNEL);
670 if (!sta) {
671 res = -ENOMEM;
672 goto err_del_interface;
673 }
674
83d5cc01
JB
675 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
676 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
677 sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
0d143fe1
JB
678
679 res = sta_info_insert(sta);
680 if (res) {
681 /* STA has been freed */
682 goto err_del_interface;
683 }
1be7fe8d
BJ
684
685 rate_control_rate_init(sta);
1411af15 686 netif_carrier_on(dev);
f142c6b9
JB
687 } else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) {
688 rcu_assign_pointer(local->p2p_sdata, sdata);
0d143fe1
JB
689 }
690
0d143fe1
JB
691 /*
692 * set_multicast_list will be invoked by the networking core
693 * which will check whether any increments here were done in
694 * error and sync them down to the hardware as filter flags.
695 */
696 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
697 atomic_inc(&local->iff_allmultis);
698
699 if (sdata->flags & IEEE80211_SDATA_PROMISC)
700 atomic_inc(&local->iff_promiscs);
701
34d4bc4d 702 if (coming_up)
63d9c273 703 local_inc(&local->open_count);
34d4bc4d 704
59034591 705 if (hw_reconf_flags)
e8975581 706 ieee80211_hw_config(local, hw_reconf_flags);
0d143fe1 707
10f644a4 708 ieee80211_recalc_ps(local, -1);
965bedad 709
2b436312
JB
710 if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
711 sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
712 /* XXX: for AP_VLAN, actually track AP queues */
713 netif_tx_start_all_queues(dev);
714 } else if (dev) {
2b730daa
JB
715 unsigned long flags;
716 int n_acs = IEEE80211_NUM_ACS;
717 int ac;
718
719 if (local->hw.queues < IEEE80211_NUM_ACS)
720 n_acs = 1;
721
722 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
723 if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE ||
724 (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 &&
725 skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) {
726 for (ac = 0; ac < n_acs; ac++) {
727 int ac_queue = sdata->vif.hw_queue[ac];
728
729 if (local->queue_stop_reasons[ac_queue] == 0 &&
730 skb_queue_empty(&local->pending[ac_queue]))
731 netif_start_subqueue(dev, ac);
732 }
733 }
734 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
735 }
0d143fe1
JB
736
737 return 0;
738 err_del_interface:
7b7eab6f 739 drv_remove_interface(local, sdata);
0d143fe1 740 err_stop:
63d9c273 741 if (!local_read(&local->open_count))
24487981 742 drv_stop(local);
0d143fe1
JB
743 err_del_bss:
744 sdata->bss = NULL;
4e141dad
MK
745 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
746 mutex_lock(&local->mtx);
0d143fe1 747 list_del(&sdata->u.vlan.list);
4e141dad
MK
748 mutex_unlock(&local->mtx);
749 }
4d6c36fa 750 /* might already be clear but that doesn't matter */
2d2080c3 751 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
0d143fe1
JB
752 return res;
753}
754
34d4bc4d 755static int ieee80211_open(struct net_device *dev)
0d143fe1
JB
756{
757 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
34d4bc4d
JB
758 int err;
759
760 /* fail early if user set an invalid address */
2fcf2824 761 if (!is_valid_ether_addr(dev->dev_addr))
34d4bc4d
JB
762 return -EADDRNOTAVAIL;
763
764 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
765 if (err)
766 return err;
767
f142c6b9 768 return ieee80211_do_open(&sdata->wdev, true);
34d4bc4d
JB
769}
770
771static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata,
772 bool going_down)
773{
0d143fe1 774 struct ieee80211_local *local = sdata->local;
5061b0c2
JB
775 unsigned long flags;
776 struct sk_buff *skb, *tmp;
e8975581 777 u32 hw_reconf_flags = 0;
09f4114e 778 int i, flushed;
397a7a24 779 struct ps_data *ps;
d2859df5 780 struct cfg80211_chan_def chandef;
46238845 781 bool cancel_scan;
0d143fe1 782
c29acf20
RM
783 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
784
46238845
JB
785 cancel_scan = rcu_access_pointer(local->scan_sdata) == sdata;
786 if (cancel_scan)
352ffad6
BC
787 ieee80211_scan_cancel(local);
788
0d143fe1
JB
789 /*
790 * Stop TX on this interface first.
791 */
f142c6b9
JB
792 if (sdata->dev)
793 netif_tx_stop_all_queues(sdata->dev);
0d143fe1 794
c8f994ee 795 ieee80211_roc_purge(local, sdata);
af6b6374 796
8ffcc704
EG
797 switch (sdata->vif.type) {
798 case NL80211_IFTYPE_STATION:
572078be 799 ieee80211_mgd_stop(sdata);
8ffcc704
EG
800 break;
801 case NL80211_IFTYPE_ADHOC:
cd7760e6 802 ieee80211_ibss_stop(sdata);
8ffcc704
EG
803 break;
804 case NL80211_IFTYPE_AP:
805 cancel_work_sync(&sdata->u.ap.request_smps_work);
806 break;
807 default:
808 break;
809 }
cd7760e6 810
0d143fe1
JB
811 /*
812 * Remove all stations associated with this interface.
813 *
814 * This must be done before calling ops->remove_interface()
815 * because otherwise we can later invoke ops->sta_notify()
816 * whenever the STAs are removed, and that invalidates driver
817 * assumptions about always getting a vif pointer that is valid
818 * (because if we remove a STA after ops->remove_interface()
819 * the driver will have removed the vif info already!)
820 *
09f4114e
JB
821 * This is relevant only in WDS mode, in all other modes we've
822 * already removed all stations when disconnecting or similar,
823 * so warn otherwise.
0d143fe1 824 */
d34ba216 825 flushed = sta_info_flush(sdata);
09f4114e
JB
826 WARN_ON_ONCE((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) ||
827 (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1));
0d143fe1 828
afdc7c18 829 /* don't count this interface for promisc/allmulti while it is down */
0d143fe1
JB
830 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
831 atomic_dec(&local->iff_allmultis);
832
833 if (sdata->flags & IEEE80211_SDATA_PROMISC)
834 atomic_dec(&local->iff_promiscs);
835
7be5086d 836 if (sdata->vif.type == NL80211_IFTYPE_AP) {
e3b90ca2 837 local->fif_pspoll--;
7be5086d
JB
838 local->fif_probe_req--;
839 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
840 local->fif_probe_req--;
841 }
e3b90ca2 842
f142c6b9
JB
843 if (sdata->dev) {
844 netif_addr_lock_bh(sdata->dev);
845 spin_lock_bh(&local->filter_lock);
846 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
847 sdata->dev->addr_len);
848 spin_unlock_bh(&local->filter_lock);
849 netif_addr_unlock_bh(sdata->dev);
f142c6b9 850 }
3ac64bee 851
7cbf0ba5
VN
852 del_timer_sync(&local->dynamic_ps_timer);
853 cancel_work_sync(&local->dynamic_ps_enable_work);
0d143fe1 854
04ecd257 855 cancel_work_sync(&sdata->recalc_smps);
dbd72850 856 sdata_lock(sdata);
59af6928 857 mutex_lock(&local->mtx);
73da7d5b 858 sdata->vif.csa_active = false;
0c21e632
LC
859 if (sdata->vif.type == NL80211_IFTYPE_STATION)
860 sdata->u.mgd.csa_waiting_bcn = false;
a46992b4
LC
861 if (sdata->csa_block_tx) {
862 ieee80211_wake_vif_queues(local, sdata,
863 IEEE80211_QUEUE_STOP_REASON_CSA);
864 sdata->csa_block_tx = false;
865 }
59af6928 866 mutex_unlock(&local->mtx);
dbd72850 867 sdata_unlock(sdata);
59af6928 868
73da7d5b 869 cancel_work_sync(&sdata->csa_finalize_work);
04ecd257 870
164eb02d
SW
871 cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
872
873 if (sdata->wdev.cac_started) {
d2859df5 874 chandef = sdata->vif.bss_conf.chandef;
b2c0958b 875 WARN_ON(local->suspended);
34a3740d 876 mutex_lock(&local->mtx);
164eb02d 877 ieee80211_vif_release_channel(sdata);
34a3740d 878 mutex_unlock(&local->mtx);
d2859df5
JD
879 cfg80211_cac_event(sdata->dev, &chandef,
880 NL80211_RADAR_CAC_ABORTED,
164eb02d
SW
881 GFP_KERNEL);
882 }
883
0d143fe1
JB
884 /* APs need special treatment */
885 if (sdata->vif.type == NL80211_IFTYPE_AP) {
57c9fff3 886 struct ieee80211_sub_if_data *vlan, *tmpsdata;
0d143fe1
JB
887
888 /* down all dependent devices, that is VLANs */
57c9fff3 889 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
0d143fe1
JB
890 u.vlan.list)
891 dev_close(vlan->dev);
892 WARN_ON(!list_empty(&sdata->u.ap.vlans));
397a7a24
MB
893 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
894 /* remove all packets in parent bc_buf pointing to this dev */
895 ps = &sdata->bss->ps;
896
897 spin_lock_irqsave(&ps->bc_buf.lock, flags);
898 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
899 if (skb->dev == sdata->dev) {
900 __skb_unlink(skb, &ps->bc_buf);
901 local->total_ps_buffered--;
902 ieee80211_free_txskb(&local->hw, skb);
903 }
904 }
905 spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
0d143fe1
JB
906 }
907
34d4bc4d 908 if (going_down)
63d9c273 909 local_dec(&local->open_count);
0d143fe1
JB
910
911 switch (sdata->vif.type) {
912 case NL80211_IFTYPE_AP_VLAN:
4e141dad 913 mutex_lock(&local->mtx);
0d143fe1 914 list_del(&sdata->u.vlan.list);
4e141dad 915 mutex_unlock(&local->mtx);
0c2bef46 916 RCU_INIT_POINTER(sdata->vif.chanctx_conf, NULL);
10b68487
FF
917 /* see comment in the default case below */
918 ieee80211_free_keys(sdata, true);
0d143fe1
JB
919 /* no need to tell driver */
920 break;
921 case NL80211_IFTYPE_MONITOR:
922 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
923 local->cooked_mntrs--;
924 break;
925 }
926
927 local->monitors--;
e8975581 928 if (local->monitors == 0) {
0869aea0
JB
929 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
930 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
e8975581 931 }
0d143fe1 932
85416a4f 933 ieee80211_adjust_monitor_flags(sdata, -1);
0d143fe1 934 break;
f142c6b9
JB
935 case NL80211_IFTYPE_P2P_DEVICE:
936 /* relies on synchronize_rcu() below */
0c2bef46 937 RCU_INIT_POINTER(local->p2p_sdata, NULL);
f142c6b9 938 /* fall through */
0d143fe1 939 default:
0b7dff4f 940 cancel_work_sync(&sdata->work);
35f20c14
JB
941 /*
942 * When we get here, the interface is marked down.
7907c7d3 943 * Free the remaining keys, if there are any
10b68487
FF
944 * (which can happen in AP mode if userspace sets
945 * keys before the interface is operating, and maybe
946 * also in WDS mode)
75de9113 947 *
7907c7d3
JB
948 * Force the key freeing to always synchronize_net()
949 * to wait for the RX path in case it is using this
10b68487 950 * interface enqueuing frames at this very time on
75de9113 951 * another CPU.
35f20c14 952 */
7907c7d3 953 ieee80211_free_keys(sdata, true);
1861b845 954 skb_queue_purge(&sdata->skb_queue);
0d143fe1
JB
955 }
956
957 sdata->bss = NULL;
958
5061b0c2
JB
959 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
960 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
961 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
962 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
963 if (info->control.vif == &sdata->vif) {
964 __skb_unlink(skb, &local->pending[i]);
d4fa14cd 965 ieee80211_free_txskb(&local->hw, skb);
5061b0c2
JB
966 }
967 }
968 }
969 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
075e0847 970
63d9c273 971 if (local_read(&local->open_count) == 0)
b2c0958b
JB
972 ieee80211_clear_tx_pending(local);
973
974 /*
975 * If the interface goes down while suspended, presumably because
976 * the device was unplugged and that happens before our resume,
977 * then the driver is already unconfigured and the remainder of
978 * this function isn't needed.
979 * XXX: what about WoWLAN? If the device has software state, e.g.
980 * memory allocated, it might expect teardown commands from
981 * mac80211 here?
982 */
983 if (local->suspended) {
984 WARN_ON(local->wowlan);
985 WARN_ON(rtnl_dereference(local->monitor_sdata));
986 return;
987 }
988
989 switch (sdata->vif.type) {
990 case NL80211_IFTYPE_AP_VLAN:
991 break;
992 case NL80211_IFTYPE_MONITOR:
993 if (local->monitors == 0)
994 ieee80211_del_virtual_monitor(local);
995
996 mutex_lock(&local->mtx);
997 ieee80211_recalc_idle(local);
998 mutex_unlock(&local->mtx);
31eba5bc
FF
999
1000 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
1001 break;
1002
1003 /* fall through */
b2c0958b
JB
1004 default:
1005 if (going_down)
1006 drv_remove_interface(local, sdata);
1007 }
1008
1009 ieee80211_recalc_ps(local, -1);
1010
46238845
JB
1011 if (cancel_scan)
1012 flush_delayed_work(&local->scan_work);
1013
63d9c273 1014 if (local_read(&local->open_count) == 0) {
b2c0958b
JB
1015 ieee80211_stop_device(local);
1016
1017 /* no reconfiguring after stop! */
1018 return;
1019 }
1020
1021 /* do after stop to avoid reconfiguring when we stop anyway */
1022 ieee80211_configure_filter(local);
1023 ieee80211_hw_config(local, hw_reconf_flags);
1024
63d9c273 1025 if (local->monitors == local_read(&local->open_count))
075e0847 1026 ieee80211_add_virtual_monitor(local);
34d4bc4d
JB
1027}
1028
1029static int ieee80211_stop(struct net_device *dev)
1030{
1031 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1032
1033 ieee80211_do_stop(sdata, true);
5061b0c2 1034
0d143fe1
JB
1035 return 0;
1036}
1037
1038static void ieee80211_set_multicast_list(struct net_device *dev)
1039{
0d143fe1 1040 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
b4a4bf5d 1041 struct ieee80211_local *local = sdata->local;
0d143fe1
JB
1042 int allmulti, promisc, sdata_allmulti, sdata_promisc;
1043
1044 allmulti = !!(dev->flags & IFF_ALLMULTI);
1045 promisc = !!(dev->flags & IFF_PROMISC);
1046 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
1047 sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);
1048
1049 if (allmulti != sdata_allmulti) {
1050 if (dev->flags & IFF_ALLMULTI)
1051 atomic_inc(&local->iff_allmultis);
1052 else
1053 atomic_dec(&local->iff_allmultis);
1054 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
1055 }
1056
1057 if (promisc != sdata_promisc) {
1058 if (dev->flags & IFF_PROMISC)
1059 atomic_inc(&local->iff_promiscs);
1060 else
1061 atomic_dec(&local->iff_promiscs);
1062 sdata->flags ^= IEEE80211_SDATA_PROMISC;
1063 }
3b8d81e0 1064 spin_lock_bh(&local->filter_lock);
22bedad3 1065 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
3b8d81e0 1066 spin_unlock_bh(&local->filter_lock);
3ac64bee 1067 ieee80211_queue_work(&local->hw, &local->reconfig_filter);
0d143fe1
JB
1068}
1069
75636525
JB
1070/*
1071 * Called when the netdev is removed or, by the code below, before
1072 * the interface type changes.
1073 */
f142c6b9 1074static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
f0706e82
JB
1075{
1076 int i;
1077
75636525 1078 /* free extra data */
7907c7d3 1079 ieee80211_free_keys(sdata, false);
75636525 1080
aee14ceb
JM
1081 ieee80211_debugfs_remove_netdev(sdata);
1082
f0706e82 1083 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
75636525
JB
1084 __skb_queue_purge(&sdata->fragments[i].skb_list);
1085 sdata->fragment_next = 0;
11a843b7 1086
b9dcf712
JB
1087 if (ieee80211_vif_is_mesh(&sdata->vif))
1088 mesh_rmc_free(sdata);
f0706e82
JB
1089}
1090
f142c6b9
JB
1091static void ieee80211_uninit(struct net_device *dev)
1092{
1093 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
1094}
1095
cf0277e7 1096static u16 ieee80211_netdev_select_queue(struct net_device *dev,
f663dd9a 1097 struct sk_buff *skb,
99932d4f
DB
1098 void *accel_priv,
1099 select_queue_fallback_t fallback)
cf0277e7
JB
1100{
1101 return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb);
1102}
1103
587e729e
JB
1104static const struct net_device_ops ieee80211_dataif_ops = {
1105 .ndo_open = ieee80211_open,
1106 .ndo_stop = ieee80211_stop,
f142c6b9 1107 .ndo_uninit = ieee80211_uninit,
587e729e 1108 .ndo_start_xmit = ieee80211_subif_start_xmit,
afc4b13d 1109 .ndo_set_rx_mode = ieee80211_set_multicast_list,
587e729e 1110 .ndo_change_mtu = ieee80211_change_mtu,
47846c9b 1111 .ndo_set_mac_address = ieee80211_change_mac,
cf0277e7 1112 .ndo_select_queue = ieee80211_netdev_select_queue,
587e729e
JB
1113};
1114
cf0277e7 1115static u16 ieee80211_monitor_select_queue(struct net_device *dev,
f663dd9a 1116 struct sk_buff *skb,
99932d4f
DB
1117 void *accel_priv,
1118 select_queue_fallback_t fallback)
cf0277e7
JB
1119{
1120 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1121 struct ieee80211_local *local = sdata->local;
1122 struct ieee80211_hdr *hdr;
1123 struct ieee80211_radiotap_header *rtap = (void *)skb->data;
1124
32c5057b 1125 if (local->hw.queues < IEEE80211_NUM_ACS)
cf0277e7
JB
1126 return 0;
1127
1128 if (skb->len < 4 ||
b49bb574 1129 skb->len < le16_to_cpu(rtap->it_len) + 2 /* frame control */)
cf0277e7
JB
1130 return 0; /* doesn't matter, frame will be dropped */
1131
b49bb574 1132 hdr = (void *)((u8 *)skb->data + le16_to_cpu(rtap->it_len));
cf0277e7 1133
00e96dec 1134 return ieee80211_select_queue_80211(sdata, skb, hdr);
cf0277e7
JB
1135}
1136
587e729e
JB
1137static const struct net_device_ops ieee80211_monitorif_ops = {
1138 .ndo_open = ieee80211_open,
1139 .ndo_stop = ieee80211_stop,
f142c6b9 1140 .ndo_uninit = ieee80211_uninit,
587e729e 1141 .ndo_start_xmit = ieee80211_monitor_start_xmit,
afc4b13d 1142 .ndo_set_rx_mode = ieee80211_set_multicast_list,
587e729e 1143 .ndo_change_mtu = ieee80211_change_mtu,
31eba5bc 1144 .ndo_set_mac_address = ieee80211_change_mac,
cf0277e7 1145 .ndo_select_queue = ieee80211_monitor_select_queue,
587e729e
JB
1146};
1147
1148static void ieee80211_if_setup(struct net_device *dev)
1149{
1150 ether_setup(dev);
550fd08c 1151 dev->priv_flags &= ~IFF_TX_SKB_SHARING;
587e729e 1152 dev->netdev_ops = &ieee80211_dataif_ops;
587e729e
JB
1153 dev->destructor = free_netdev;
1154}
1155
1fa57d01
JB
1156static void ieee80211_iface_work(struct work_struct *work)
1157{
1158 struct ieee80211_sub_if_data *sdata =
1159 container_of(work, struct ieee80211_sub_if_data, work);
1160 struct ieee80211_local *local = sdata->local;
1161 struct sk_buff *skb;
344eec67 1162 struct sta_info *sta;
c1475ca9 1163 struct ieee80211_ra_tid *ra_tid;
08cf42e8 1164 struct ieee80211_rx_agg *rx_agg;
1fa57d01
JB
1165
1166 if (!ieee80211_sdata_running(sdata))
1167 return;
1168
1169 if (local->scanning)
1170 return;
1171
1172 /*
1173 * ieee80211_queue_work() should have picked up most cases,
1174 * here we'll pick the rest.
1175 */
1176 if (WARN(local->suspended,
1177 "interface work scheduled while going to suspend\n"))
1178 return;
1179
1180 /* first process frames */
1181 while ((skb = skb_dequeue(&sdata->skb_queue))) {
bed7ee6e
JB
1182 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1183
c1475ca9
JB
1184 if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_START) {
1185 ra_tid = (void *)&skb->cb;
1186 ieee80211_start_tx_ba_cb(&sdata->vif, ra_tid->ra,
1187 ra_tid->tid);
1188 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_STOP) {
1189 ra_tid = (void *)&skb->cb;
1190 ieee80211_stop_tx_ba_cb(&sdata->vif, ra_tid->ra,
1191 ra_tid->tid);
08cf42e8
MK
1192 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_START) {
1193 rx_agg = (void *)&skb->cb;
1194 mutex_lock(&local->sta_mtx);
1195 sta = sta_info_get_bss(sdata, rx_agg->addr);
4549cf2b 1196 if (sta)
08cf42e8 1197 __ieee80211_start_rx_ba_session(sta,
4549cf2b 1198 0, 0, 0, 1, rx_agg->tid,
08cf42e8 1199 IEEE80211_MAX_AMPDU_BUF,
4549cf2b 1200 false, true);
08cf42e8
MK
1201 mutex_unlock(&local->sta_mtx);
1202 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_RX_AGG_STOP) {
1203 rx_agg = (void *)&skb->cb;
1204 mutex_lock(&local->sta_mtx);
1205 sta = sta_info_get_bss(sdata, rx_agg->addr);
1206 if (sta)
1207 __ieee80211_stop_rx_ba_session(sta,
1208 rx_agg->tid,
1209 WLAN_BACK_RECIPIENT, 0,
1210 false);
1211 mutex_unlock(&local->sta_mtx);
8a4d32f3
AN
1212 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_TDLS_CHSW) {
1213 ieee80211_process_tdls_channel_switch(sdata, skb);
c1475ca9
JB
1214 } else if (ieee80211_is_action(mgmt->frame_control) &&
1215 mgmt->u.action.category == WLAN_CATEGORY_BACK) {
bed7ee6e 1216 int len = skb->len;
bed7ee6e 1217
a93e3644 1218 mutex_lock(&local->sta_mtx);
875ae5f6 1219 sta = sta_info_get_bss(sdata, mgmt->sa);
bed7ee6e
JB
1220 if (sta) {
1221 switch (mgmt->u.action.u.addba_req.action_code) {
1222 case WLAN_ACTION_ADDBA_REQ:
1223 ieee80211_process_addba_request(
1224 local, sta, mgmt, len);
1225 break;
1226 case WLAN_ACTION_ADDBA_RESP:
1227 ieee80211_process_addba_resp(local, sta,
1228 mgmt, len);
1229 break;
1230 case WLAN_ACTION_DELBA:
1231 ieee80211_process_delba(sdata, sta,
1232 mgmt, len);
1233 break;
1234 default:
1235 WARN_ON(1);
1236 break;
1237 }
1238 }
a93e3644 1239 mutex_unlock(&local->sta_mtx);
344eec67
JB
1240 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
1241 struct ieee80211_hdr *hdr = (void *)mgmt;
1242 /*
1243 * So the frame isn't mgmt, but frame_control
1244 * is at the right place anyway, of course, so
1245 * the if statement is correct.
1246 *
1247 * Warn if we have other data frame types here,
1248 * they must not get here.
1249 */
1250 WARN_ON(hdr->frame_control &
1251 cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
1252 WARN_ON(!(hdr->seq_ctrl &
1253 cpu_to_le16(IEEE80211_SCTL_FRAG)));
1254 /*
1255 * This was a fragment of a frame, received while
1256 * a block-ack session was active. That cannot be
1257 * right, so terminate the session.
1258 */
a93e3644 1259 mutex_lock(&local->sta_mtx);
875ae5f6 1260 sta = sta_info_get_bss(sdata, mgmt->sa);
344eec67
JB
1261 if (sta) {
1262 u16 tid = *ieee80211_get_qos_ctl(hdr) &
1263 IEEE80211_QOS_CTL_TID_MASK;
1264
1265 __ieee80211_stop_rx_ba_session(
1266 sta, tid, WLAN_BACK_RECIPIENT,
53f73c09
JB
1267 WLAN_REASON_QSTA_REQUIRE_SETUP,
1268 true);
344eec67 1269 }
a93e3644 1270 mutex_unlock(&local->sta_mtx);
bed7ee6e 1271 } else switch (sdata->vif.type) {
1fa57d01
JB
1272 case NL80211_IFTYPE_STATION:
1273 ieee80211_sta_rx_queued_mgmt(sdata, skb);
1274 break;
1275 case NL80211_IFTYPE_ADHOC:
1276 ieee80211_ibss_rx_queued_mgmt(sdata, skb);
1277 break;
1278 case NL80211_IFTYPE_MESH_POINT:
1279 if (!ieee80211_vif_is_mesh(&sdata->vif))
1280 break;
1281 ieee80211_mesh_rx_queued_mgmt(sdata, skb);
1282 break;
1283 default:
1284 WARN(1, "frame for unexpected interface type");
1fa57d01
JB
1285 break;
1286 }
36b3a628
JB
1287
1288 kfree_skb(skb);
1fa57d01
JB
1289 }
1290
1291 /* then other type-dependent work */
1292 switch (sdata->vif.type) {
1293 case NL80211_IFTYPE_STATION:
1294 ieee80211_sta_work(sdata);
1295 break;
1296 case NL80211_IFTYPE_ADHOC:
1297 ieee80211_ibss_work(sdata);
1298 break;
1299 case NL80211_IFTYPE_MESH_POINT:
1300 if (!ieee80211_vif_is_mesh(&sdata->vif))
1301 break;
1302 ieee80211_mesh_work(sdata);
1303 break;
239281f8
RL
1304 case NL80211_IFTYPE_OCB:
1305 ieee80211_ocb_work(sdata);
1306 break;
1fa57d01
JB
1307 default:
1308 break;
1309 }
1310}
1311
04ecd257
JB
1312static void ieee80211_recalc_smps_work(struct work_struct *work)
1313{
1314 struct ieee80211_sub_if_data *sdata =
1315 container_of(work, struct ieee80211_sub_if_data, recalc_smps);
1316
1317 ieee80211_recalc_smps(sdata);
1318}
1fa57d01 1319
75636525
JB
1320/*
1321 * Helper function to initialise an interface to a specific type.
1322 */
1323static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
05c914fe 1324 enum nl80211_iftype type)
f0706e82 1325{
239281f8
RL
1326 static const u8 bssid_wildcard[ETH_ALEN] = {0xff, 0xff, 0xff,
1327 0xff, 0xff, 0xff};
1328
75636525
JB
1329 /* clear type-dependent union */
1330 memset(&sdata->u, 0, sizeof(sdata->u));
1331
1332 /* and set some type-dependent values */
1333 sdata->vif.type = type;
2ca27bcf 1334 sdata->vif.p2p = false;
60719ffd 1335 sdata->wdev.iftype = type;
75636525 1336
a621fa4d
JB
1337 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
1338 sdata->control_port_no_encrypt = false;
2475b1cc 1339 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
d3a58df8 1340 sdata->vif.bss_conf.idle = true;
a621fa4d 1341
b53be792
SW
1342 sdata->noack_map = 0;
1343
f142c6b9
JB
1344 /* only monitor/p2p-device differ */
1345 if (sdata->dev) {
1346 sdata->dev->netdev_ops = &ieee80211_dataif_ops;
1347 sdata->dev->type = ARPHRD_ETHER;
1348 }
75636525 1349
35f20c14 1350 skb_queue_head_init(&sdata->skb_queue);
1fa57d01 1351 INIT_WORK(&sdata->work, ieee80211_iface_work);
04ecd257 1352 INIT_WORK(&sdata->recalc_smps, ieee80211_recalc_smps_work);
73da7d5b 1353 INIT_WORK(&sdata->csa_finalize_work, ieee80211_csa_finalize_work);
484298ad 1354 INIT_LIST_HEAD(&sdata->assigned_chanctx_list);
e3afb920 1355 INIT_LIST_HEAD(&sdata->reserved_chanctx_list);
35f20c14 1356
75636525 1357 switch (type) {
2ca27bcf
JB
1358 case NL80211_IFTYPE_P2P_GO:
1359 type = NL80211_IFTYPE_AP;
1360 sdata->vif.type = type;
1361 sdata->vif.p2p = true;
1362 /* fall through */
05c914fe 1363 case NL80211_IFTYPE_AP:
d012a605 1364 skb_queue_head_init(&sdata->u.ap.ps.bc_buf);
75636525 1365 INIT_LIST_HEAD(&sdata->u.ap.vlans);
687da132
EG
1366 INIT_WORK(&sdata->u.ap.request_smps_work,
1367 ieee80211_request_smps_ap_work);
ad2d223a 1368 sdata->vif.bss_conf.bssid = sdata->vif.addr;
687da132 1369 sdata->u.ap.req_smps = IEEE80211_SMPS_OFF;
75636525 1370 break;
2ca27bcf
JB
1371 case NL80211_IFTYPE_P2P_CLIENT:
1372 type = NL80211_IFTYPE_STATION;
1373 sdata->vif.type = type;
1374 sdata->vif.p2p = true;
1375 /* fall through */
05c914fe 1376 case NL80211_IFTYPE_STATION:
ad2d223a 1377 sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid;
9c6bd790 1378 ieee80211_sta_setup_sdata(sdata);
472dbc45 1379 break;
6e0bd6c3 1380 case NL80211_IFTYPE_OCB:
239281f8
RL
1381 sdata->vif.bss_conf.bssid = bssid_wildcard;
1382 ieee80211_ocb_setup_sdata(sdata);
6e0bd6c3 1383 break;
46900298 1384 case NL80211_IFTYPE_ADHOC:
ad2d223a 1385 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
46900298
JB
1386 ieee80211_ibss_setup_sdata(sdata);
1387 break;
05c914fe 1388 case NL80211_IFTYPE_MESH_POINT:
75636525
JB
1389 if (ieee80211_vif_is_mesh(&sdata->vif))
1390 ieee80211_mesh_init_sdata(sdata);
1391 break;
05c914fe 1392 case NL80211_IFTYPE_MONITOR:
75636525 1393 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
587e729e 1394 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
75636525
JB
1395 sdata->u.mntr_flags = MONITOR_FLAG_CONTROL |
1396 MONITOR_FLAG_OTHER_BSS;
1397 break;
05c914fe 1398 case NL80211_IFTYPE_WDS:
ad2d223a
JB
1399 sdata->vif.bss_conf.bssid = NULL;
1400 break;
05c914fe 1401 case NL80211_IFTYPE_AP_VLAN:
98104fde 1402 case NL80211_IFTYPE_P2P_DEVICE:
ad2d223a 1403 sdata->vif.bss_conf.bssid = sdata->vif.addr;
f142c6b9 1404 break;
05c914fe 1405 case NL80211_IFTYPE_UNSPECIFIED:
2e161f78 1406 case NUM_NL80211_IFTYPES:
75636525
JB
1407 BUG();
1408 break;
1409 }
1410
1411 ieee80211_debugfs_add_netdev(sdata);
1412}
1413
34d4bc4d
JB
1414static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1415 enum nl80211_iftype type)
1416{
1417 struct ieee80211_local *local = sdata->local;
1418 int ret, err;
2ca27bcf
JB
1419 enum nl80211_iftype internal_type = type;
1420 bool p2p = false;
34d4bc4d
JB
1421
1422 ASSERT_RTNL();
1423
1424 if (!local->ops->change_interface)
1425 return -EBUSY;
1426
1427 switch (sdata->vif.type) {
1428 case NL80211_IFTYPE_AP:
1429 case NL80211_IFTYPE_STATION:
1430 case NL80211_IFTYPE_ADHOC:
239281f8 1431 case NL80211_IFTYPE_OCB:
34d4bc4d
JB
1432 /*
1433 * Could maybe also all others here?
1434 * Just not sure how that interacts
1435 * with the RX/config path e.g. for
1436 * mesh.
1437 */
1438 break;
1439 default:
1440 return -EBUSY;
1441 }
1442
1443 switch (type) {
1444 case NL80211_IFTYPE_AP:
1445 case NL80211_IFTYPE_STATION:
1446 case NL80211_IFTYPE_ADHOC:
239281f8 1447 case NL80211_IFTYPE_OCB:
34d4bc4d
JB
1448 /*
1449 * Could probably support everything
1450 * but WDS here (WDS do_open can fail
1451 * under memory pressure, which this
1452 * code isn't prepared to handle).
1453 */
1454 break;
2ca27bcf
JB
1455 case NL80211_IFTYPE_P2P_CLIENT:
1456 p2p = true;
1457 internal_type = NL80211_IFTYPE_STATION;
1458 break;
1459 case NL80211_IFTYPE_P2P_GO:
1460 p2p = true;
1461 internal_type = NL80211_IFTYPE_AP;
1462 break;
34d4bc4d
JB
1463 default:
1464 return -EBUSY;
1465 }
1466
2ca27bcf 1467 ret = ieee80211_check_concurrent_iface(sdata, internal_type);
34d4bc4d
JB
1468 if (ret)
1469 return ret;
1470
1471 ieee80211_do_stop(sdata, false);
1472
f142c6b9 1473 ieee80211_teardown_sdata(sdata);
34d4bc4d 1474
2ca27bcf 1475 ret = drv_change_interface(local, sdata, internal_type, p2p);
34d4bc4d 1476 if (ret)
a9865538 1477 type = ieee80211_vif_type_p2p(&sdata->vif);
34d4bc4d 1478
3a25a8c8
JB
1479 /*
1480 * Ignore return value here, there's not much we can do since
1481 * the driver changed the interface type internally already.
1482 * The warnings will hopefully make driver authors fix it :-)
1483 */
a9865538 1484 ieee80211_check_queues(sdata, type);
3a25a8c8 1485
34d4bc4d
JB
1486 ieee80211_setup_sdata(sdata, type);
1487
f142c6b9 1488 err = ieee80211_do_open(&sdata->wdev, false);
34d4bc4d
JB
1489 WARN(err, "type change: do_open returned %d", err);
1490
1491 return ret;
1492}
1493
f3947e2d 1494int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
05c914fe 1495 enum nl80211_iftype type)
75636525 1496{
34d4bc4d
JB
1497 int ret;
1498
f3947e2d
JB
1499 ASSERT_RTNL();
1500
2ca27bcf 1501 if (type == ieee80211_vif_type_p2p(&sdata->vif))
f3947e2d
JB
1502 return 0;
1503
34d4bc4d
JB
1504 if (ieee80211_sdata_running(sdata)) {
1505 ret = ieee80211_runtime_change_iftype(sdata, type);
1506 if (ret)
1507 return ret;
1508 } else {
1509 /* Purge and reset type-dependent state. */
f142c6b9 1510 ieee80211_teardown_sdata(sdata);
34d4bc4d
JB
1511 ieee80211_setup_sdata(sdata, type);
1512 }
75636525
JB
1513
1514 /* reset some values that shouldn't be kept across type changes */
75636525 1515 sdata->drop_unencrypted = 0;
9bc383de
JB
1516 if (type == NL80211_IFTYPE_STATION)
1517 sdata->u.mgd.use_4addr = false;
f3947e2d
JB
1518
1519 return 0;
f0706e82
JB
1520}
1521
fa9029f8 1522static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
f142c6b9 1523 u8 *perm_addr, enum nl80211_iftype type)
fa9029f8
JB
1524{
1525 struct ieee80211_sub_if_data *sdata;
1526 u64 mask, start, addr, val, inc;
1527 u8 *m;
1528 u8 tmp_addr[ETH_ALEN];
1529 int i;
1530
1531 /* default ... something at least */
f142c6b9 1532 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
fa9029f8
JB
1533
1534 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1535 local->hw.wiphy->n_addresses <= 1)
1536 return;
1537
fa9029f8
JB
1538 mutex_lock(&local->iflist_mtx);
1539
1540 switch (type) {
1541 case NL80211_IFTYPE_MONITOR:
1542 /* doesn't matter */
1543 break;
1544 case NL80211_IFTYPE_WDS:
1545 case NL80211_IFTYPE_AP_VLAN:
1546 /* match up with an AP interface */
1547 list_for_each_entry(sdata, &local->interfaces, list) {
1548 if (sdata->vif.type != NL80211_IFTYPE_AP)
1549 continue;
f142c6b9 1550 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
fa9029f8
JB
1551 break;
1552 }
1553 /* keep default if no AP interface present */
1554 break;
6d71117a
JB
1555 case NL80211_IFTYPE_P2P_CLIENT:
1556 case NL80211_IFTYPE_P2P_GO:
1557 if (local->hw.flags & IEEE80211_HW_P2P_DEV_ADDR_FOR_INTF) {
1558 list_for_each_entry(sdata, &local->interfaces, list) {
1559 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
1560 continue;
1561 if (!ieee80211_sdata_running(sdata))
1562 continue;
1563 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1564 goto out_unlock;
1565 }
1566 }
1567 /* otherwise fall through */
fa9029f8
JB
1568 default:
1569 /* assign a new address if possible -- try n_addresses first */
1570 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1571 bool used = false;
1572
1573 list_for_each_entry(sdata, &local->interfaces, list) {
496d7e8e 1574 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr,
1575 sdata->vif.addr)) {
fa9029f8
JB
1576 used = true;
1577 break;
1578 }
1579 }
1580
1581 if (!used) {
f142c6b9 1582 memcpy(perm_addr,
fa9029f8
JB
1583 local->hw.wiphy->addresses[i].addr,
1584 ETH_ALEN);
1585 break;
1586 }
1587 }
1588
1589 /* try mask if available */
1590 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
1591 break;
1592
1593 m = local->hw.wiphy->addr_mask;
1594 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1595 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1596 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1597
1598 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
1599 /* not a contiguous mask ... not handled now! */
bdcbd8e0 1600 pr_info("not contiguous\n");
fa9029f8
JB
1601 break;
1602 }
1603
ac20976d
HS
1604 /*
1605 * Pick address of existing interface in case user changed
1606 * MAC address manually, default to perm_addr.
1607 */
fa9029f8 1608 m = local->hw.wiphy->perm_addr;
ac20976d
HS
1609 list_for_each_entry(sdata, &local->interfaces, list) {
1610 if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
1611 continue;
1612 m = sdata->vif.addr;
1613 break;
1614 }
fa9029f8
JB
1615 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1616 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1617 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1618
1619 inc = 1ULL<<__ffs64(mask);
1620 val = (start & mask);
1621 addr = (start & ~mask) | (val & mask);
1622 do {
1623 bool used = false;
1624
1625 tmp_addr[5] = addr >> 0*8;
1626 tmp_addr[4] = addr >> 1*8;
1627 tmp_addr[3] = addr >> 2*8;
1628 tmp_addr[2] = addr >> 3*8;
1629 tmp_addr[1] = addr >> 4*8;
1630 tmp_addr[0] = addr >> 5*8;
1631
1632 val += inc;
1633
1634 list_for_each_entry(sdata, &local->interfaces, list) {
496d7e8e 1635 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) {
fa9029f8
JB
1636 used = true;
1637 break;
1638 }
1639 }
1640
1641 if (!used) {
f142c6b9 1642 memcpy(perm_addr, tmp_addr, ETH_ALEN);
fa9029f8
JB
1643 break;
1644 }
1645 addr = (start & ~mask) | (val & mask);
1646 } while (addr != start);
1647
1648 break;
1649 }
1650
6d71117a 1651 out_unlock:
fa9029f8
JB
1652 mutex_unlock(&local->iflist_mtx);
1653}
1654
3e122be0 1655int ieee80211_if_add(struct ieee80211_local *local, const char *name,
84efbb84 1656 struct wireless_dev **new_wdev, enum nl80211_iftype type,
ee385855 1657 struct vif_params *params)
f0706e82 1658{
f142c6b9 1659 struct net_device *ndev = NULL;
f0706e82 1660 struct ieee80211_sub_if_data *sdata = NULL;
75636525 1661 int ret, i;
ded81f6b 1662 int txqs = 1;
f0706e82
JB
1663
1664 ASSERT_RTNL();
75636525 1665
f142c6b9
JB
1666 if (type == NL80211_IFTYPE_P2P_DEVICE) {
1667 struct wireless_dev *wdev;
1668
1669 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size,
1670 GFP_KERNEL);
1671 if (!sdata)
1672 return -ENOMEM;
1673 wdev = &sdata->wdev;
1674
1675 sdata->dev = NULL;
1676 strlcpy(sdata->name, name, IFNAMSIZ);
1677 ieee80211_assign_perm_addr(local, wdev->address, type);
1678 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN);
1679 } else {
1680 if (local->hw.queues >= IEEE80211_NUM_ACS)
1681 txqs = IEEE80211_NUM_ACS;
1682
c835a677
TG
1683 ndev = alloc_netdev_mqs(sizeof(*sdata) + local->hw.vif_data_size,
1684 name, NET_NAME_UNKNOWN,
1685 ieee80211_if_setup, txqs, 1);
f142c6b9
JB
1686 if (!ndev)
1687 return -ENOMEM;
1688 dev_net_set(ndev, wiphy_net(local->hw.wiphy));
1689
1690 ndev->needed_headroom = local->tx_headroom +
1691 4*6 /* four MAC addresses */
1692 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
1693 + 6 /* mesh */
1694 + 8 /* rfc1042/bridge tunnel */
1695 - ETH_HLEN /* ethernet hard_header_len */
1696 + IEEE80211_ENCRYPT_HEADROOM;
1697 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
1698
1699 ret = dev_alloc_name(ndev, ndev->name);
1700 if (ret < 0) {
1701 free_netdev(ndev);
1702 return ret;
1703 }
1704
1705 ieee80211_assign_perm_addr(local, ndev->perm_addr, type);
b5dfae02
BG
1706 if (params && is_valid_ether_addr(params->macaddr))
1707 memcpy(ndev->dev_addr, params->macaddr, ETH_ALEN);
1708 else
1709 memcpy(ndev->dev_addr, ndev->perm_addr, ETH_ALEN);
f142c6b9
JB
1710 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
1711
1712 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */
1713 sdata = netdev_priv(ndev);
1714 ndev->ieee80211_ptr = &sdata->wdev;
1715 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
1716 memcpy(sdata->name, ndev->name, IFNAMSIZ);
1717
1718 sdata->dev = ndev;
1719 }
75636525
JB
1720
1721 /* initialise type-independent data */
f0706e82 1722 sdata->wdev.wiphy = local->hw.wiphy;
f0706e82 1723 sdata->local = local;
75636525
JB
1724
1725 for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1726 skb_queue_head_init(&sdata->fragments[i].skb_list);
1727
1728 INIT_LIST_HEAD(&sdata->key_list);
1729
164eb02d
SW
1730 INIT_DELAYED_WORK(&sdata->dfs_cac_timer_work,
1731 ieee80211_dfs_cac_timer_work);
8d1f7ecd
JB
1732 INIT_DELAYED_WORK(&sdata->dec_tailroom_needed_wk,
1733 ieee80211_delayed_tailroom_dec);
97f97b1f 1734
37eb0b16
JM
1735 for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
1736 struct ieee80211_supported_band *sband;
1737 sband = local->hw.wiphy->bands[i];
1738 sdata->rc_rateidx_mask[i] =
1739 sband ? (1 << sband->n_bitrates) - 1 : 0;
19468413
SW
1740 if (sband)
1741 memcpy(sdata->rc_rateidx_mcs_mask[i],
1742 sband->ht_cap.mcs.rx_mask,
1743 sizeof(sdata->rc_rateidx_mcs_mask[i]));
1744 else
1745 memset(sdata->rc_rateidx_mcs_mask[i], 0,
1746 sizeof(sdata->rc_rateidx_mcs_mask[i]));
37eb0b16 1747 }
75636525 1748
3a25a8c8
JB
1749 ieee80211_set_default_queues(sdata);
1750
1ea6f9c0
JB
1751 sdata->ap_power_level = IEEE80211_UNSET_POWER_LEVEL;
1752 sdata->user_power_level = local->user_power_level;
1753
2475b1cc
MS
1754 sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
1755
75636525
JB
1756 /* setup type-dependent data */
1757 ieee80211_setup_sdata(sdata, type);
f0706e82 1758
f142c6b9
JB
1759 if (ndev) {
1760 if (params) {
1761 ndev->ieee80211_ptr->use_4addr = params->use_4addr;
1762 if (type == NL80211_IFTYPE_STATION)
1763 sdata->u.mgd.use_4addr = params->use_4addr;
1764 }
9bc383de 1765
f142c6b9 1766 ndev->features |= local->hw.netdev_features;
72d78728 1767
b7ffbd7e
JB
1768 netdev_set_default_ethtool_ops(ndev, &ieee80211_ethtool_ops);
1769
f142c6b9
JB
1770 ret = register_netdevice(ndev);
1771 if (ret) {
1772 free_netdev(ndev);
1773 return ret;
1774 }
1775 }
f0706e82 1776
c771c9d8 1777 mutex_lock(&local->iflist_mtx);
79010420 1778 list_add_tail_rcu(&sdata->list, &local->interfaces);
c771c9d8 1779 mutex_unlock(&local->iflist_mtx);
79010420 1780
84efbb84
JB
1781 if (new_wdev)
1782 *new_wdev = &sdata->wdev;
f0706e82 1783
f0706e82 1784 return 0;
f0706e82
JB
1785}
1786
f698d856 1787void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
f0706e82 1788{
f0706e82 1789 ASSERT_RTNL();
11a843b7 1790
c771c9d8 1791 mutex_lock(&sdata->local->iflist_mtx);
75636525 1792 list_del_rcu(&sdata->list);
c771c9d8
JB
1793 mutex_unlock(&sdata->local->iflist_mtx);
1794
75636525 1795 synchronize_rcu();
f142c6b9
JB
1796
1797 if (sdata->dev) {
1798 unregister_netdevice(sdata->dev);
1799 } else {
1800 cfg80211_unregister_wdev(&sdata->wdev);
1801 kfree(sdata);
1802 }
1803}
1804
1805void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata)
1806{
1807 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state)))
1808 return;
1809 ieee80211_do_stop(sdata, true);
1810 ieee80211_teardown_sdata(sdata);
f0706e82
JB
1811}
1812
75636525
JB
1813/*
1814 * Remove all interfaces, may only be called at hardware unregistration
1815 * time because it doesn't do RCU-safe list removals.
1816 */
1817void ieee80211_remove_interfaces(struct ieee80211_local *local)
f0706e82 1818{
75636525 1819 struct ieee80211_sub_if_data *sdata, *tmp;
efe117ab 1820 LIST_HEAD(unreg_list);
f142c6b9 1821 LIST_HEAD(wdev_list);
f0706e82
JB
1822
1823 ASSERT_RTNL();
1824
c8aa22db
JB
1825 /*
1826 * Close all AP_VLAN interfaces first, as otherwise they
1827 * might be closed while the AP interface they belong to
1828 * is closed, causing unregister_netdevice_many() to crash.
1829 */
1830 list_for_each_entry(sdata, &local->interfaces, list)
1831 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
1832 dev_close(sdata->dev);
1833
efe117ab 1834 mutex_lock(&local->iflist_mtx);
75636525
JB
1835 list_for_each_entry_safe(sdata, tmp, &local->interfaces, list) {
1836 list_del(&sdata->list);
c771c9d8 1837
f142c6b9
JB
1838 if (sdata->dev)
1839 unregister_netdevice_queue(sdata->dev, &unreg_list);
1840 else
1841 list_add(&sdata->list, &wdev_list);
f0706e82 1842 }
efe117ab
ED
1843 mutex_unlock(&local->iflist_mtx);
1844 unregister_netdevice_many(&unreg_list);
f142c6b9
JB
1845
1846 list_for_each_entry_safe(sdata, tmp, &wdev_list, list) {
1847 list_del(&sdata->list);
1848 cfg80211_unregister_wdev(&sdata->wdev);
1849 kfree(sdata);
1850 }
f0706e82 1851}
5cff20e6 1852
47846c9b 1853static int netdev_notify(struct notifier_block *nb,
351638e7 1854 unsigned long state, void *ptr)
47846c9b 1855{
351638e7 1856 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
47846c9b
JB
1857 struct ieee80211_sub_if_data *sdata;
1858
1859 if (state != NETDEV_CHANGENAME)
8bd811aa 1860 return NOTIFY_DONE;
47846c9b
JB
1861
1862 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
8bd811aa 1863 return NOTIFY_DONE;
47846c9b
JB
1864
1865 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
8bd811aa 1866 return NOTIFY_DONE;
47846c9b
JB
1867
1868 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2f5265e6 1869 memcpy(sdata->name, dev->name, IFNAMSIZ);
47846c9b 1870 ieee80211_debugfs_rename_netdev(sdata);
8bd811aa
ZG
1871
1872 return NOTIFY_OK;
47846c9b
JB
1873}
1874
1875static struct notifier_block mac80211_netdev_notifier = {
1876 .notifier_call = netdev_notify,
1877};
1878
1879int ieee80211_iface_init(void)
1880{
1881 return register_netdevice_notifier(&mac80211_netdev_notifier);
1882}
1883
1884void ieee80211_iface_exit(void)
1885{
1886 unregister_netdevice_notifier(&mac80211_netdev_notifier);
1887}