net, sch: fix the typo in register_qdisc()
[linux-drm-fsl-dcu.git] / net / mac80211 / iface.c
1 /*
2  * Interface handling
3  *
4  * Copyright 2002-2005, Instant802 Networks, Inc.
5  * Copyright 2005-2006, Devicescape Software, Inc.
6  * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
7  * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
8  *
9  * This program is free software; you can redistribute it and/or modify
10  * it under the terms of the GNU General Public License version 2 as
11  * published by the Free Software Foundation.
12  */
13 #include <linux/slab.h>
14 #include <linux/kernel.h>
15 #include <linux/if_arp.h>
16 #include <linux/netdevice.h>
17 #include <linux/rtnetlink.h>
18 #include <net/mac80211.h>
19 #include <net/ieee80211_radiotap.h>
20 #include "ieee80211_i.h"
21 #include "sta_info.h"
22 #include "debugfs_netdev.h"
23 #include "mesh.h"
24 #include "led.h"
25 #include "driver-ops.h"
26 #include "wme.h"
27 #include "rate.h"
28
29 /**
30  * DOC: Interface list locking
31  *
32  * The interface list in each struct ieee80211_local is protected
33  * three-fold:
34  *
35  * (1) modifications may only be done under the RTNL
36  * (2) modifications and readers are protected against each other by
37  *     the iflist_mtx.
38  * (3) modifications are done in an RCU manner so atomic readers
39  *     can traverse the list in RCU-safe blocks.
40  *
41  * As a consequence, reads (traversals) of the list can be protected
42  * by either the RTNL, the iflist_mtx or RCU.
43  */
44
45 bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
46 {
47         struct ieee80211_chanctx_conf *chanctx_conf;
48         int power;
49
50         rcu_read_lock();
51         chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
52         if (!chanctx_conf) {
53                 rcu_read_unlock();
54                 return false;
55         }
56
57         power = ieee80211_chandef_max_power(&chanctx_conf->def);
58         rcu_read_unlock();
59
60         if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
61                 power = min(power, sdata->user_power_level);
62
63         if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
64                 power = min(power, sdata->ap_power_level);
65
66         if (power != sdata->vif.bss_conf.txpower) {
67                 sdata->vif.bss_conf.txpower = power;
68                 ieee80211_hw_config(sdata->local, 0);
69                 return true;
70         }
71
72         return false;
73 }
74
75 void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
76 {
77         if (__ieee80211_recalc_txpower(sdata))
78                 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER);
79 }
80
81 static u32 __ieee80211_idle_off(struct ieee80211_local *local)
82 {
83         if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
84                 return 0;
85
86         local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
87         return IEEE80211_CONF_CHANGE_IDLE;
88 }
89
90 static u32 __ieee80211_idle_on(struct ieee80211_local *local)
91 {
92         if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
93                 return 0;
94
95         ieee80211_flush_queues(local, NULL);
96
97         local->hw.conf.flags |= IEEE80211_CONF_IDLE;
98         return IEEE80211_CONF_CHANGE_IDLE;
99 }
100
101 static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
102                                    bool force_active)
103 {
104         bool working = false, scanning, active;
105         unsigned int led_trig_start = 0, led_trig_stop = 0;
106         struct ieee80211_roc_work *roc;
107
108         lockdep_assert_held(&local->mtx);
109
110         active = force_active ||
111                  !list_empty(&local->chanctx_list) ||
112                  local->monitors;
113
114         if (!local->ops->remain_on_channel) {
115                 list_for_each_entry(roc, &local->roc_list, list) {
116                         working = true;
117                         break;
118                 }
119         }
120
121         scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
122                    test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
123
124         if (working || scanning)
125                 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
126         else
127                 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
128
129         if (active)
130                 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
131         else
132                 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
133
134         ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
135
136         if (working || scanning || active)
137                 return __ieee80211_idle_off(local);
138         return __ieee80211_idle_on(local);
139 }
140
141 u32 ieee80211_idle_off(struct ieee80211_local *local)
142 {
143         return __ieee80211_recalc_idle(local, true);
144 }
145
146 void ieee80211_recalc_idle(struct ieee80211_local *local)
147 {
148         u32 change = __ieee80211_recalc_idle(local, false);
149         if (change)
150                 ieee80211_hw_config(local, change);
151 }
152
153 static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
154 {
155         if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN)
156                 return -EINVAL;
157
158         dev->mtu = new_mtu;
159         return 0;
160 }
161
162 static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
163                                 bool check_dup)
164 {
165         struct ieee80211_local *local = sdata->local;
166         struct ieee80211_sub_if_data *iter;
167         u64 new, mask, tmp;
168         u8 *m;
169         int ret = 0;
170
171         if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
172                 return 0;
173
174         m = addr;
175         new =   ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
176                 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
177                 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
178
179         m = local->hw.wiphy->addr_mask;
180         mask =  ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
181                 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
182                 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
183
184         if (!check_dup)
185                 return ret;
186
187         mutex_lock(&local->iflist_mtx);
188         list_for_each_entry(iter, &local->interfaces, list) {
189                 if (iter == sdata)
190                         continue;
191
192                 if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
193                     !(iter->u.mntr_flags & MONITOR_FLAG_ACTIVE))
194                         continue;
195
196                 m = iter->vif.addr;
197                 tmp =   ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
198                         ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
199                         ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
200
201                 if ((new & ~mask) != (tmp & ~mask)) {
202                         ret = -EINVAL;
203                         break;
204                 }
205         }
206         mutex_unlock(&local->iflist_mtx);
207
208         return ret;
209 }
210
211 static int ieee80211_change_mac(struct net_device *dev, void *addr)
212 {
213         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
214         struct sockaddr *sa = addr;
215         bool check_dup = true;
216         int ret;
217
218         if (ieee80211_sdata_running(sdata))
219                 return -EBUSY;
220
221         if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
222             !(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
223                 check_dup = false;
224
225         ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
226         if (ret)
227                 return ret;
228
229         ret = eth_mac_addr(dev, sa);
230
231         if (ret == 0)
232                 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
233
234         return ret;
235 }
236
237 static inline int identical_mac_addr_allowed(int type1, int type2)
238 {
239         return type1 == NL80211_IFTYPE_MONITOR ||
240                 type2 == NL80211_IFTYPE_MONITOR ||
241                 type1 == NL80211_IFTYPE_P2P_DEVICE ||
242                 type2 == NL80211_IFTYPE_P2P_DEVICE ||
243                 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) ||
244                 (type1 == NL80211_IFTYPE_WDS &&
245                         (type2 == NL80211_IFTYPE_WDS ||
246                          type2 == NL80211_IFTYPE_AP)) ||
247                 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
248                 (type1 == NL80211_IFTYPE_AP_VLAN &&
249                         (type2 == NL80211_IFTYPE_AP ||
250                          type2 == NL80211_IFTYPE_AP_VLAN));
251 }
252
253 static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
254                                             enum nl80211_iftype iftype)
255 {
256         struct ieee80211_local *local = sdata->local;
257         struct ieee80211_sub_if_data *nsdata;
258
259         ASSERT_RTNL();
260
261         /* we hold the RTNL here so can safely walk the list */
262         list_for_each_entry(nsdata, &local->interfaces, list) {
263                 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
264                         /*
265                          * Allow only a single IBSS interface to be up at any
266                          * time. This is restricted because beacon distribution
267                          * cannot work properly if both are in the same IBSS.
268                          *
269                          * To remove this restriction we'd have to disallow them
270                          * from setting the same SSID on different IBSS interfaces
271                          * belonging to the same hardware. Then, however, we're
272                          * faced with having to adopt two different TSF timers...
273                          */
274                         if (iftype == NL80211_IFTYPE_ADHOC &&
275                             nsdata->vif.type == NL80211_IFTYPE_ADHOC)
276                                 return -EBUSY;
277                         /*
278                          * will not add another interface while any channel
279                          * switch is active.
280                          */
281                         if (nsdata->vif.csa_active)
282                                 return -EBUSY;
283
284                         /*
285                          * The remaining checks are only performed for interfaces
286                          * with the same MAC address.
287                          */
288                         if (!ether_addr_equal(sdata->vif.addr,
289                                               nsdata->vif.addr))
290                                 continue;
291
292                         /*
293                          * check whether it may have the same address
294                          */
295                         if (!identical_mac_addr_allowed(iftype,
296                                                         nsdata->vif.type))
297                                 return -ENOTUNIQ;
298
299                         /*
300                          * can only add VLANs to enabled APs
301                          */
302                         if (iftype == NL80211_IFTYPE_AP_VLAN &&
303                             nsdata->vif.type == NL80211_IFTYPE_AP)
304                                 sdata->bss = &nsdata->u.ap;
305                 }
306         }
307
308         return 0;
309 }
310
311 static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata,
312                                   enum nl80211_iftype iftype)
313 {
314         int n_queues = sdata->local->hw.queues;
315         int i;
316
317         if (iftype != NL80211_IFTYPE_P2P_DEVICE) {
318                 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
319                         if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
320                                          IEEE80211_INVAL_HW_QUEUE))
321                                 return -EINVAL;
322                         if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
323                                          n_queues))
324                                 return -EINVAL;
325                 }
326         }
327
328         if ((iftype != NL80211_IFTYPE_AP &&
329              iftype != NL80211_IFTYPE_P2P_GO &&
330              iftype != NL80211_IFTYPE_MESH_POINT) ||
331             !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) {
332                 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
333                 return 0;
334         }
335
336         if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
337                 return -EINVAL;
338
339         if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
340                 return -EINVAL;
341
342         return 0;
343 }
344
345 void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
346                                     const int offset)
347 {
348         struct ieee80211_local *local = sdata->local;
349         u32 flags = sdata->u.mntr_flags;
350
351 #define ADJUST(_f, _s)  do {                                    \
352         if (flags & MONITOR_FLAG_##_f)                          \
353                 local->fif_##_s += offset;                      \
354         } while (0)
355
356         ADJUST(FCSFAIL, fcsfail);
357         ADJUST(PLCPFAIL, plcpfail);
358         ADJUST(CONTROL, control);
359         ADJUST(CONTROL, pspoll);
360         ADJUST(OTHER_BSS, other_bss);
361
362 #undef ADJUST
363 }
364
365 static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
366 {
367         struct ieee80211_local *local = sdata->local;
368         int i;
369
370         for (i = 0; i < IEEE80211_NUM_ACS; i++) {
371                 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
372                         sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
373                 else if (local->hw.queues >= IEEE80211_NUM_ACS)
374                         sdata->vif.hw_queue[i] = i;
375                 else
376                         sdata->vif.hw_queue[i] = 0;
377         }
378         sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
379 }
380
381 int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
382 {
383         struct ieee80211_sub_if_data *sdata;
384         int ret;
385
386         if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
387                 return 0;
388
389         ASSERT_RTNL();
390
391         if (local->monitor_sdata)
392                 return 0;
393
394         sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
395         if (!sdata)
396                 return -ENOMEM;
397
398         /* set up data */
399         sdata->local = local;
400         sdata->vif.type = NL80211_IFTYPE_MONITOR;
401         snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
402                  wiphy_name(local->hw.wiphy));
403
404         sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
405
406         ieee80211_set_default_queues(sdata);
407
408         ret = drv_add_interface(local, sdata);
409         if (WARN_ON(ret)) {
410                 /* ok .. stupid driver, it asked for this! */
411                 kfree(sdata);
412                 return ret;
413         }
414
415         ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR);
416         if (ret) {
417                 kfree(sdata);
418                 return ret;
419         }
420
421         ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef,
422                                         IEEE80211_CHANCTX_EXCLUSIVE);
423         if (ret) {
424                 drv_remove_interface(local, sdata);
425                 kfree(sdata);
426                 return ret;
427         }
428
429         mutex_lock(&local->iflist_mtx);
430         rcu_assign_pointer(local->monitor_sdata, sdata);
431         mutex_unlock(&local->iflist_mtx);
432
433         return 0;
434 }
435
436 void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
437 {
438         struct ieee80211_sub_if_data *sdata;
439
440         if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
441                 return;
442
443         ASSERT_RTNL();
444
445         mutex_lock(&local->iflist_mtx);
446
447         sdata = rcu_dereference_protected(local->monitor_sdata,
448                                           lockdep_is_held(&local->iflist_mtx));
449         if (!sdata) {
450                 mutex_unlock(&local->iflist_mtx);
451                 return;
452         }
453
454         rcu_assign_pointer(local->monitor_sdata, NULL);
455         mutex_unlock(&local->iflist_mtx);
456
457         synchronize_net();
458
459         ieee80211_vif_release_channel(sdata);
460
461         drv_remove_interface(local, sdata);
462
463         kfree(sdata);
464 }
465
466 /*
467  * NOTE: Be very careful when changing this function, it must NOT return
468  * an error on interface type changes that have been pre-checked, so most
469  * checks should be in ieee80211_check_concurrent_iface.
470  */
471 int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
472 {
473         struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
474         struct net_device *dev = wdev->netdev;
475         struct ieee80211_local *local = sdata->local;
476         struct sta_info *sta;
477         u32 changed = 0;
478         int res;
479         u32 hw_reconf_flags = 0;
480
481         switch (sdata->vif.type) {
482         case NL80211_IFTYPE_WDS:
483                 if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
484                         return -ENOLINK;
485                 break;
486         case NL80211_IFTYPE_AP_VLAN: {
487                 struct ieee80211_sub_if_data *master;
488
489                 if (!sdata->bss)
490                         return -ENOLINK;
491
492                 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
493
494                 master = container_of(sdata->bss,
495                                       struct ieee80211_sub_if_data, u.ap);
496                 sdata->control_port_protocol =
497                         master->control_port_protocol;
498                 sdata->control_port_no_encrypt =
499                         master->control_port_no_encrypt;
500                 sdata->vif.cab_queue = master->vif.cab_queue;
501                 memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
502                        sizeof(sdata->vif.hw_queue));
503                 break;
504                 }
505         case NL80211_IFTYPE_AP:
506                 sdata->bss = &sdata->u.ap;
507                 break;
508         case NL80211_IFTYPE_MESH_POINT:
509         case NL80211_IFTYPE_STATION:
510         case NL80211_IFTYPE_MONITOR:
511         case NL80211_IFTYPE_ADHOC:
512         case NL80211_IFTYPE_P2P_DEVICE:
513                 /* no special treatment */
514                 break;
515         case NL80211_IFTYPE_UNSPECIFIED:
516         case NUM_NL80211_IFTYPES:
517         case NL80211_IFTYPE_P2P_CLIENT:
518         case NL80211_IFTYPE_P2P_GO:
519                 /* cannot happen */
520                 WARN_ON(1);
521                 break;
522         }
523
524         if (local->open_count == 0) {
525                 res = drv_start(local);
526                 if (res)
527                         goto err_del_bss;
528                 /* we're brought up, everything changes */
529                 hw_reconf_flags = ~0;
530                 ieee80211_led_radio(local, true);
531                 ieee80211_mod_tpt_led_trig(local,
532                                            IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
533         }
534
535         /*
536          * Copy the hopefully now-present MAC address to
537          * this interface, if it has the special null one.
538          */
539         if (dev && is_zero_ether_addr(dev->dev_addr)) {
540                 memcpy(dev->dev_addr,
541                        local->hw.wiphy->perm_addr,
542                        ETH_ALEN);
543                 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
544
545                 if (!is_valid_ether_addr(dev->dev_addr)) {
546                         res = -EADDRNOTAVAIL;
547                         goto err_stop;
548                 }
549         }
550
551         switch (sdata->vif.type) {
552         case NL80211_IFTYPE_AP_VLAN:
553                 /* no need to tell driver, but set carrier and chanctx */
554                 if (rtnl_dereference(sdata->bss->beacon)) {
555                         ieee80211_vif_vlan_copy_chanctx(sdata);
556                         netif_carrier_on(dev);
557                 } else {
558                         netif_carrier_off(dev);
559                 }
560                 break;
561         case NL80211_IFTYPE_MONITOR:
562                 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
563                         local->cooked_mntrs++;
564                         break;
565                 }
566
567                 if (sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE) {
568                         res = drv_add_interface(local, sdata);
569                         if (res)
570                                 goto err_stop;
571                 } else if (local->monitors == 0 && local->open_count == 0) {
572                         res = ieee80211_add_virtual_monitor(local);
573                         if (res)
574                                 goto err_stop;
575                 }
576
577                 /* must be before the call to ieee80211_configure_filter */
578                 local->monitors++;
579                 if (local->monitors == 1) {
580                         local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
581                         hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
582                 }
583
584                 ieee80211_adjust_monitor_flags(sdata, 1);
585                 ieee80211_configure_filter(local);
586                 mutex_lock(&local->mtx);
587                 ieee80211_recalc_idle(local);
588                 mutex_unlock(&local->mtx);
589
590                 netif_carrier_on(dev);
591                 break;
592         default:
593                 if (coming_up) {
594                         ieee80211_del_virtual_monitor(local);
595
596                         res = drv_add_interface(local, sdata);
597                         if (res)
598                                 goto err_stop;
599                         res = ieee80211_check_queues(sdata,
600                                 ieee80211_vif_type_p2p(&sdata->vif));
601                         if (res)
602                                 goto err_del_interface;
603                 }
604
605                 if (sdata->vif.type == NL80211_IFTYPE_AP) {
606                         local->fif_pspoll++;
607                         local->fif_probe_req++;
608
609                         ieee80211_configure_filter(local);
610                 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
611                         local->fif_probe_req++;
612                 }
613
614                 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
615                         changed |= ieee80211_reset_erp_info(sdata);
616                 ieee80211_bss_info_change_notify(sdata, changed);
617
618                 switch (sdata->vif.type) {
619                 case NL80211_IFTYPE_STATION:
620                 case NL80211_IFTYPE_ADHOC:
621                 case NL80211_IFTYPE_AP:
622                 case NL80211_IFTYPE_MESH_POINT:
623                         netif_carrier_off(dev);
624                         break;
625                 case NL80211_IFTYPE_WDS:
626                 case NL80211_IFTYPE_P2P_DEVICE:
627                         break;
628                 default:
629                         /* not reached */
630                         WARN_ON(1);
631                 }
632
633                 /*
634                  * set default queue parameters so drivers don't
635                  * need to initialise the hardware if the hardware
636                  * doesn't start up with sane defaults
637                  */
638                 ieee80211_set_wmm_default(sdata, true);
639         }
640
641         set_bit(SDATA_STATE_RUNNING, &sdata->state);
642
643         if (sdata->vif.type == NL80211_IFTYPE_WDS) {
644                 /* Create STA entry for the WDS peer */
645                 sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
646                                      GFP_KERNEL);
647                 if (!sta) {
648                         res = -ENOMEM;
649                         goto err_del_interface;
650                 }
651
652                 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
653                 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
654                 sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
655
656                 res = sta_info_insert(sta);
657                 if (res) {
658                         /* STA has been freed */
659                         goto err_del_interface;
660                 }
661
662                 rate_control_rate_init(sta);
663                 netif_carrier_on(dev);
664         } else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) {
665                 rcu_assign_pointer(local->p2p_sdata, sdata);
666         }
667
668         /*
669          * set_multicast_list will be invoked by the networking core
670          * which will check whether any increments here were done in
671          * error and sync them down to the hardware as filter flags.
672          */
673         if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
674                 atomic_inc(&local->iff_allmultis);
675
676         if (sdata->flags & IEEE80211_SDATA_PROMISC)
677                 atomic_inc(&local->iff_promiscs);
678
679         if (coming_up)
680                 local->open_count++;
681
682         if (hw_reconf_flags)
683                 ieee80211_hw_config(local, hw_reconf_flags);
684
685         ieee80211_recalc_ps(local, -1);
686
687         if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
688             sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
689                 /* XXX: for AP_VLAN, actually track AP queues */
690                 netif_tx_start_all_queues(dev);
691         } else if (dev) {
692                 unsigned long flags;
693                 int n_acs = IEEE80211_NUM_ACS;
694                 int ac;
695
696                 if (local->hw.queues < IEEE80211_NUM_ACS)
697                         n_acs = 1;
698
699                 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
700                 if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE ||
701                     (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 &&
702                      skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) {
703                         for (ac = 0; ac < n_acs; ac++) {
704                                 int ac_queue = sdata->vif.hw_queue[ac];
705
706                                 if (local->queue_stop_reasons[ac_queue] == 0 &&
707                                     skb_queue_empty(&local->pending[ac_queue]))
708                                         netif_start_subqueue(dev, ac);
709                         }
710                 }
711                 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
712         }
713
714         return 0;
715  err_del_interface:
716         drv_remove_interface(local, sdata);
717  err_stop:
718         if (!local->open_count)
719                 drv_stop(local);
720  err_del_bss:
721         sdata->bss = NULL;
722         if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
723                 list_del(&sdata->u.vlan.list);
724         /* might already be clear but that doesn't matter */
725         clear_bit(SDATA_STATE_RUNNING, &sdata->state);
726         return res;
727 }
728
729 static int ieee80211_open(struct net_device *dev)
730 {
731         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
732         int err;
733
734         /* fail early if user set an invalid address */
735         if (!is_valid_ether_addr(dev->dev_addr))
736                 return -EADDRNOTAVAIL;
737
738         err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
739         if (err)
740                 return err;
741
742         return ieee80211_do_open(&sdata->wdev, true);
743 }
744
745 static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata,
746                               bool going_down)
747 {
748         struct ieee80211_local *local = sdata->local;
749         unsigned long flags;
750         struct sk_buff *skb, *tmp;
751         u32 hw_reconf_flags = 0;
752         int i, flushed;
753         struct ps_data *ps;
754         struct cfg80211_chan_def chandef;
755
756         clear_bit(SDATA_STATE_RUNNING, &sdata->state);
757
758         if (rcu_access_pointer(local->scan_sdata) == sdata)
759                 ieee80211_scan_cancel(local);
760
761         /*
762          * Stop TX on this interface first.
763          */
764         if (sdata->dev)
765                 netif_tx_stop_all_queues(sdata->dev);
766
767         ieee80211_roc_purge(local, sdata);
768
769         if (sdata->vif.type == NL80211_IFTYPE_STATION)
770                 ieee80211_mgd_stop(sdata);
771
772         if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
773                 ieee80211_ibss_stop(sdata);
774
775
776         /*
777          * Remove all stations associated with this interface.
778          *
779          * This must be done before calling ops->remove_interface()
780          * because otherwise we can later invoke ops->sta_notify()
781          * whenever the STAs are removed, and that invalidates driver
782          * assumptions about always getting a vif pointer that is valid
783          * (because if we remove a STA after ops->remove_interface()
784          * the driver will have removed the vif info already!)
785          *
786          * This is relevant only in WDS mode, in all other modes we've
787          * already removed all stations when disconnecting or similar,
788          * so warn otherwise.
789          *
790          * We call sta_info_flush_cleanup() later, to combine RCU waits.
791          */
792         flushed = sta_info_flush_defer(sdata);
793         WARN_ON_ONCE((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) ||
794                      (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1));
795
796         /* don't count this interface for promisc/allmulti while it is down */
797         if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
798                 atomic_dec(&local->iff_allmultis);
799
800         if (sdata->flags & IEEE80211_SDATA_PROMISC)
801                 atomic_dec(&local->iff_promiscs);
802
803         if (sdata->vif.type == NL80211_IFTYPE_AP) {
804                 local->fif_pspoll--;
805                 local->fif_probe_req--;
806         } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
807                 local->fif_probe_req--;
808         }
809
810         if (sdata->dev) {
811                 netif_addr_lock_bh(sdata->dev);
812                 spin_lock_bh(&local->filter_lock);
813                 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
814                                  sdata->dev->addr_len);
815                 spin_unlock_bh(&local->filter_lock);
816                 netif_addr_unlock_bh(sdata->dev);
817         }
818
819         del_timer_sync(&local->dynamic_ps_timer);
820         cancel_work_sync(&local->dynamic_ps_enable_work);
821
822         cancel_work_sync(&sdata->recalc_smps);
823         sdata->vif.csa_active = false;
824         cancel_work_sync(&sdata->csa_finalize_work);
825
826         cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
827
828         if (sdata->wdev.cac_started) {
829                 chandef = sdata->vif.bss_conf.chandef;
830                 WARN_ON(local->suspended);
831                 mutex_lock(&local->iflist_mtx);
832                 ieee80211_vif_release_channel(sdata);
833                 mutex_unlock(&local->iflist_mtx);
834                 cfg80211_cac_event(sdata->dev, &chandef,
835                                    NL80211_RADAR_CAC_ABORTED,
836                                    GFP_KERNEL);
837         }
838
839         /* APs need special treatment */
840         if (sdata->vif.type == NL80211_IFTYPE_AP) {
841                 struct ieee80211_sub_if_data *vlan, *tmpsdata;
842
843                 /* down all dependent devices, that is VLANs */
844                 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
845                                          u.vlan.list)
846                         dev_close(vlan->dev);
847                 WARN_ON(!list_empty(&sdata->u.ap.vlans));
848         } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
849                 /* remove all packets in parent bc_buf pointing to this dev */
850                 ps = &sdata->bss->ps;
851
852                 spin_lock_irqsave(&ps->bc_buf.lock, flags);
853                 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
854                         if (skb->dev == sdata->dev) {
855                                 __skb_unlink(skb, &ps->bc_buf);
856                                 local->total_ps_buffered--;
857                                 ieee80211_free_txskb(&local->hw, skb);
858                         }
859                 }
860                 spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
861         }
862
863         if (going_down)
864                 local->open_count--;
865
866         switch (sdata->vif.type) {
867         case NL80211_IFTYPE_AP_VLAN:
868                 list_del(&sdata->u.vlan.list);
869                 rcu_assign_pointer(sdata->vif.chanctx_conf, NULL);
870                 /* no need to tell driver */
871                 break;
872         case NL80211_IFTYPE_MONITOR:
873                 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
874                         local->cooked_mntrs--;
875                         break;
876                 }
877
878                 local->monitors--;
879                 if (local->monitors == 0) {
880                         local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
881                         hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
882                 }
883
884                 ieee80211_adjust_monitor_flags(sdata, -1);
885                 break;
886         case NL80211_IFTYPE_P2P_DEVICE:
887                 /* relies on synchronize_rcu() below */
888                 rcu_assign_pointer(local->p2p_sdata, NULL);
889                 /* fall through */
890         default:
891                 cancel_work_sync(&sdata->work);
892                 /*
893                  * When we get here, the interface is marked down.
894                  *
895                  * sta_info_flush_cleanup() requires rcu_barrier()
896                  * first to wait for the station call_rcu() calls
897                  * to complete, and we also need synchronize_rcu()
898                  * to wait for the RX path in case it is using the
899                  * interface and enqueuing frames at this very time on
900                  * another CPU.
901                  */
902                 synchronize_rcu();
903                 rcu_barrier();
904                 sta_info_flush_cleanup(sdata);
905
906                 /*
907                  * Free all remaining keys, there shouldn't be any,
908                  * except maybe in WDS mode?
909                  */
910                 ieee80211_free_keys(sdata);
911
912                 /* fall through */
913         case NL80211_IFTYPE_AP:
914                 skb_queue_purge(&sdata->skb_queue);
915         }
916
917         sdata->bss = NULL;
918
919         spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
920         for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
921                 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
922                         struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
923                         if (info->control.vif == &sdata->vif) {
924                                 __skb_unlink(skb, &local->pending[i]);
925                                 ieee80211_free_txskb(&local->hw, skb);
926                         }
927                 }
928         }
929         spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
930
931         if (local->open_count == 0)
932                 ieee80211_clear_tx_pending(local);
933
934         /*
935          * If the interface goes down while suspended, presumably because
936          * the device was unplugged and that happens before our resume,
937          * then the driver is already unconfigured and the remainder of
938          * this function isn't needed.
939          * XXX: what about WoWLAN? If the device has software state, e.g.
940          *      memory allocated, it might expect teardown commands from
941          *      mac80211 here?
942          */
943         if (local->suspended) {
944                 WARN_ON(local->wowlan);
945                 WARN_ON(rtnl_dereference(local->monitor_sdata));
946                 return;
947         }
948
949         switch (sdata->vif.type) {
950         case NL80211_IFTYPE_AP_VLAN:
951                 break;
952         case NL80211_IFTYPE_MONITOR:
953                 if (local->monitors == 0)
954                         ieee80211_del_virtual_monitor(local);
955
956                 mutex_lock(&local->mtx);
957                 ieee80211_recalc_idle(local);
958                 mutex_unlock(&local->mtx);
959
960                 if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
961                         break;
962
963                 /* fall through */
964         default:
965                 if (going_down)
966                         drv_remove_interface(local, sdata);
967         }
968
969         ieee80211_recalc_ps(local, -1);
970
971         if (local->open_count == 0) {
972                 ieee80211_stop_device(local);
973
974                 /* no reconfiguring after stop! */
975                 return;
976         }
977
978         /* do after stop to avoid reconfiguring when we stop anyway */
979         ieee80211_configure_filter(local);
980         ieee80211_hw_config(local, hw_reconf_flags);
981
982         if (local->monitors == local->open_count)
983                 ieee80211_add_virtual_monitor(local);
984 }
985
986 static int ieee80211_stop(struct net_device *dev)
987 {
988         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
989
990         ieee80211_do_stop(sdata, true);
991
992         return 0;
993 }
994
995 static void ieee80211_set_multicast_list(struct net_device *dev)
996 {
997         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
998         struct ieee80211_local *local = sdata->local;
999         int allmulti, promisc, sdata_allmulti, sdata_promisc;
1000
1001         allmulti = !!(dev->flags & IFF_ALLMULTI);
1002         promisc = !!(dev->flags & IFF_PROMISC);
1003         sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
1004         sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);
1005
1006         if (allmulti != sdata_allmulti) {
1007                 if (dev->flags & IFF_ALLMULTI)
1008                         atomic_inc(&local->iff_allmultis);
1009                 else
1010                         atomic_dec(&local->iff_allmultis);
1011                 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
1012         }
1013
1014         if (promisc != sdata_promisc) {
1015                 if (dev->flags & IFF_PROMISC)
1016                         atomic_inc(&local->iff_promiscs);
1017                 else
1018                         atomic_dec(&local->iff_promiscs);
1019                 sdata->flags ^= IEEE80211_SDATA_PROMISC;
1020         }
1021
1022         /*
1023          * TODO: If somebody needs this on AP interfaces,
1024          *       it can be enabled easily but multicast
1025          *       addresses from VLANs need to be synced.
1026          */
1027         if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
1028             sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1029             sdata->vif.type != NL80211_IFTYPE_AP)
1030                 drv_set_multicast_list(local, sdata, &dev->mc);
1031
1032         spin_lock_bh(&local->filter_lock);
1033         __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
1034         spin_unlock_bh(&local->filter_lock);
1035         ieee80211_queue_work(&local->hw, &local->reconfig_filter);
1036 }
1037
1038 /*
1039  * Called when the netdev is removed or, by the code below, before
1040  * the interface type changes.
1041  */
1042 static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
1043 {
1044         int i;
1045
1046         /* free extra data */
1047         ieee80211_free_keys(sdata);
1048
1049         ieee80211_debugfs_remove_netdev(sdata);
1050
1051         for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1052                 __skb_queue_purge(&sdata->fragments[i].skb_list);
1053         sdata->fragment_next = 0;
1054
1055         if (ieee80211_vif_is_mesh(&sdata->vif))
1056                 mesh_rmc_free(sdata);
1057 }
1058
1059 static void ieee80211_uninit(struct net_device *dev)
1060 {
1061         ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
1062 }
1063
1064 static u16 ieee80211_netdev_select_queue(struct net_device *dev,
1065                                          struct sk_buff *skb)
1066 {
1067         return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb);
1068 }
1069
1070 static const struct net_device_ops ieee80211_dataif_ops = {
1071         .ndo_open               = ieee80211_open,
1072         .ndo_stop               = ieee80211_stop,
1073         .ndo_uninit             = ieee80211_uninit,
1074         .ndo_start_xmit         = ieee80211_subif_start_xmit,
1075         .ndo_set_rx_mode        = ieee80211_set_multicast_list,
1076         .ndo_change_mtu         = ieee80211_change_mtu,
1077         .ndo_set_mac_address    = ieee80211_change_mac,
1078         .ndo_select_queue       = ieee80211_netdev_select_queue,
1079 };
1080
1081 static u16 ieee80211_monitor_select_queue(struct net_device *dev,
1082                                           struct sk_buff *skb)
1083 {
1084         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1085         struct ieee80211_local *local = sdata->local;
1086         struct ieee80211_hdr *hdr;
1087         struct ieee80211_radiotap_header *rtap = (void *)skb->data;
1088
1089         if (local->hw.queues < IEEE80211_NUM_ACS)
1090                 return 0;
1091
1092         if (skb->len < 4 ||
1093             skb->len < le16_to_cpu(rtap->it_len) + 2 /* frame control */)
1094                 return 0; /* doesn't matter, frame will be dropped */
1095
1096         hdr = (void *)((u8 *)skb->data + le16_to_cpu(rtap->it_len));
1097
1098         return ieee80211_select_queue_80211(sdata, skb, hdr);
1099 }
1100
1101 static const struct net_device_ops ieee80211_monitorif_ops = {
1102         .ndo_open               = ieee80211_open,
1103         .ndo_stop               = ieee80211_stop,
1104         .ndo_uninit             = ieee80211_uninit,
1105         .ndo_start_xmit         = ieee80211_monitor_start_xmit,
1106         .ndo_set_rx_mode        = ieee80211_set_multicast_list,
1107         .ndo_change_mtu         = ieee80211_change_mtu,
1108         .ndo_set_mac_address    = ieee80211_change_mac,
1109         .ndo_select_queue       = ieee80211_monitor_select_queue,
1110 };
1111
1112 static void ieee80211_if_setup(struct net_device *dev)
1113 {
1114         ether_setup(dev);
1115         dev->priv_flags &= ~IFF_TX_SKB_SHARING;
1116         dev->netdev_ops = &ieee80211_dataif_ops;
1117         dev->destructor = free_netdev;
1118 }
1119
1120 static void ieee80211_iface_work(struct work_struct *work)
1121 {
1122         struct ieee80211_sub_if_data *sdata =
1123                 container_of(work, struct ieee80211_sub_if_data, work);
1124         struct ieee80211_local *local = sdata->local;
1125         struct sk_buff *skb;
1126         struct sta_info *sta;
1127         struct ieee80211_ra_tid *ra_tid;
1128
1129         if (!ieee80211_sdata_running(sdata))
1130                 return;
1131
1132         if (local->scanning)
1133                 return;
1134
1135         /*
1136          * ieee80211_queue_work() should have picked up most cases,
1137          * here we'll pick the rest.
1138          */
1139         if (WARN(local->suspended,
1140                  "interface work scheduled while going to suspend\n"))
1141                 return;
1142
1143         /* first process frames */
1144         while ((skb = skb_dequeue(&sdata->skb_queue))) {
1145                 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1146
1147                 if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_START) {
1148                         ra_tid = (void *)&skb->cb;
1149                         ieee80211_start_tx_ba_cb(&sdata->vif, ra_tid->ra,
1150                                                  ra_tid->tid);
1151                 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_STOP) {
1152                         ra_tid = (void *)&skb->cb;
1153                         ieee80211_stop_tx_ba_cb(&sdata->vif, ra_tid->ra,
1154                                                 ra_tid->tid);
1155                 } else if (ieee80211_is_action(mgmt->frame_control) &&
1156                            mgmt->u.action.category == WLAN_CATEGORY_BACK) {
1157                         int len = skb->len;
1158
1159                         mutex_lock(&local->sta_mtx);
1160                         sta = sta_info_get_bss(sdata, mgmt->sa);
1161                         if (sta) {
1162                                 switch (mgmt->u.action.u.addba_req.action_code) {
1163                                 case WLAN_ACTION_ADDBA_REQ:
1164                                         ieee80211_process_addba_request(
1165                                                         local, sta, mgmt, len);
1166                                         break;
1167                                 case WLAN_ACTION_ADDBA_RESP:
1168                                         ieee80211_process_addba_resp(local, sta,
1169                                                                      mgmt, len);
1170                                         break;
1171                                 case WLAN_ACTION_DELBA:
1172                                         ieee80211_process_delba(sdata, sta,
1173                                                                 mgmt, len);
1174                                         break;
1175                                 default:
1176                                         WARN_ON(1);
1177                                         break;
1178                                 }
1179                         }
1180                         mutex_unlock(&local->sta_mtx);
1181                 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
1182                         struct ieee80211_hdr *hdr = (void *)mgmt;
1183                         /*
1184                          * So the frame isn't mgmt, but frame_control
1185                          * is at the right place anyway, of course, so
1186                          * the if statement is correct.
1187                          *
1188                          * Warn if we have other data frame types here,
1189                          * they must not get here.
1190                          */
1191                         WARN_ON(hdr->frame_control &
1192                                         cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
1193                         WARN_ON(!(hdr->seq_ctrl &
1194                                         cpu_to_le16(IEEE80211_SCTL_FRAG)));
1195                         /*
1196                          * This was a fragment of a frame, received while
1197                          * a block-ack session was active. That cannot be
1198                          * right, so terminate the session.
1199                          */
1200                         mutex_lock(&local->sta_mtx);
1201                         sta = sta_info_get_bss(sdata, mgmt->sa);
1202                         if (sta) {
1203                                 u16 tid = *ieee80211_get_qos_ctl(hdr) &
1204                                                 IEEE80211_QOS_CTL_TID_MASK;
1205
1206                                 __ieee80211_stop_rx_ba_session(
1207                                         sta, tid, WLAN_BACK_RECIPIENT,
1208                                         WLAN_REASON_QSTA_REQUIRE_SETUP,
1209                                         true);
1210                         }
1211                         mutex_unlock(&local->sta_mtx);
1212                 } else switch (sdata->vif.type) {
1213                 case NL80211_IFTYPE_STATION:
1214                         ieee80211_sta_rx_queued_mgmt(sdata, skb);
1215                         break;
1216                 case NL80211_IFTYPE_ADHOC:
1217                         ieee80211_ibss_rx_queued_mgmt(sdata, skb);
1218                         break;
1219                 case NL80211_IFTYPE_MESH_POINT:
1220                         if (!ieee80211_vif_is_mesh(&sdata->vif))
1221                                 break;
1222                         ieee80211_mesh_rx_queued_mgmt(sdata, skb);
1223                         break;
1224                 default:
1225                         WARN(1, "frame for unexpected interface type");
1226                         break;
1227                 }
1228
1229                 kfree_skb(skb);
1230         }
1231
1232         /* then other type-dependent work */
1233         switch (sdata->vif.type) {
1234         case NL80211_IFTYPE_STATION:
1235                 ieee80211_sta_work(sdata);
1236                 break;
1237         case NL80211_IFTYPE_ADHOC:
1238                 ieee80211_ibss_work(sdata);
1239                 break;
1240         case NL80211_IFTYPE_MESH_POINT:
1241                 if (!ieee80211_vif_is_mesh(&sdata->vif))
1242                         break;
1243                 ieee80211_mesh_work(sdata);
1244                 break;
1245         default:
1246                 break;
1247         }
1248 }
1249
1250 static void ieee80211_recalc_smps_work(struct work_struct *work)
1251 {
1252         struct ieee80211_sub_if_data *sdata =
1253                 container_of(work, struct ieee80211_sub_if_data, recalc_smps);
1254
1255         ieee80211_recalc_smps(sdata);
1256 }
1257
1258 /*
1259  * Helper function to initialise an interface to a specific type.
1260  */
1261 static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
1262                                   enum nl80211_iftype type)
1263 {
1264         /* clear type-dependent union */
1265         memset(&sdata->u, 0, sizeof(sdata->u));
1266
1267         /* and set some type-dependent values */
1268         sdata->vif.type = type;
1269         sdata->vif.p2p = false;
1270         sdata->wdev.iftype = type;
1271
1272         sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
1273         sdata->control_port_no_encrypt = false;
1274         sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
1275
1276         sdata->noack_map = 0;
1277
1278         /* only monitor/p2p-device differ */
1279         if (sdata->dev) {
1280                 sdata->dev->netdev_ops = &ieee80211_dataif_ops;
1281                 sdata->dev->type = ARPHRD_ETHER;
1282         }
1283
1284         skb_queue_head_init(&sdata->skb_queue);
1285         INIT_WORK(&sdata->work, ieee80211_iface_work);
1286         INIT_WORK(&sdata->recalc_smps, ieee80211_recalc_smps_work);
1287         INIT_WORK(&sdata->csa_finalize_work, ieee80211_csa_finalize_work);
1288
1289         switch (type) {
1290         case NL80211_IFTYPE_P2P_GO:
1291                 type = NL80211_IFTYPE_AP;
1292                 sdata->vif.type = type;
1293                 sdata->vif.p2p = true;
1294                 /* fall through */
1295         case NL80211_IFTYPE_AP:
1296                 skb_queue_head_init(&sdata->u.ap.ps.bc_buf);
1297                 INIT_LIST_HEAD(&sdata->u.ap.vlans);
1298                 INIT_WORK(&sdata->u.ap.request_smps_work,
1299                           ieee80211_request_smps_ap_work);
1300                 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1301                 sdata->u.ap.req_smps = IEEE80211_SMPS_OFF;
1302                 break;
1303         case NL80211_IFTYPE_P2P_CLIENT:
1304                 type = NL80211_IFTYPE_STATION;
1305                 sdata->vif.type = type;
1306                 sdata->vif.p2p = true;
1307                 /* fall through */
1308         case NL80211_IFTYPE_STATION:
1309                 sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid;
1310                 ieee80211_sta_setup_sdata(sdata);
1311                 break;
1312         case NL80211_IFTYPE_ADHOC:
1313                 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
1314                 ieee80211_ibss_setup_sdata(sdata);
1315                 break;
1316         case NL80211_IFTYPE_MESH_POINT:
1317                 if (ieee80211_vif_is_mesh(&sdata->vif))
1318                         ieee80211_mesh_init_sdata(sdata);
1319                 break;
1320         case NL80211_IFTYPE_MONITOR:
1321                 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
1322                 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
1323                 sdata->u.mntr_flags = MONITOR_FLAG_CONTROL |
1324                                       MONITOR_FLAG_OTHER_BSS;
1325                 break;
1326         case NL80211_IFTYPE_WDS:
1327                 sdata->vif.bss_conf.bssid = NULL;
1328                 break;
1329         case NL80211_IFTYPE_AP_VLAN:
1330         case NL80211_IFTYPE_P2P_DEVICE:
1331                 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1332                 break;
1333         case NL80211_IFTYPE_UNSPECIFIED:
1334         case NUM_NL80211_IFTYPES:
1335                 BUG();
1336                 break;
1337         }
1338
1339         ieee80211_debugfs_add_netdev(sdata);
1340 }
1341
1342 static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1343                                            enum nl80211_iftype type)
1344 {
1345         struct ieee80211_local *local = sdata->local;
1346         int ret, err;
1347         enum nl80211_iftype internal_type = type;
1348         bool p2p = false;
1349
1350         ASSERT_RTNL();
1351
1352         if (!local->ops->change_interface)
1353                 return -EBUSY;
1354
1355         switch (sdata->vif.type) {
1356         case NL80211_IFTYPE_AP:
1357         case NL80211_IFTYPE_STATION:
1358         case NL80211_IFTYPE_ADHOC:
1359                 /*
1360                  * Could maybe also all others here?
1361                  * Just not sure how that interacts
1362                  * with the RX/config path e.g. for
1363                  * mesh.
1364                  */
1365                 break;
1366         default:
1367                 return -EBUSY;
1368         }
1369
1370         switch (type) {
1371         case NL80211_IFTYPE_AP:
1372         case NL80211_IFTYPE_STATION:
1373         case NL80211_IFTYPE_ADHOC:
1374                 /*
1375                  * Could probably support everything
1376                  * but WDS here (WDS do_open can fail
1377                  * under memory pressure, which this
1378                  * code isn't prepared to handle).
1379                  */
1380                 break;
1381         case NL80211_IFTYPE_P2P_CLIENT:
1382                 p2p = true;
1383                 internal_type = NL80211_IFTYPE_STATION;
1384                 break;
1385         case NL80211_IFTYPE_P2P_GO:
1386                 p2p = true;
1387                 internal_type = NL80211_IFTYPE_AP;
1388                 break;
1389         default:
1390                 return -EBUSY;
1391         }
1392
1393         ret = ieee80211_check_concurrent_iface(sdata, internal_type);
1394         if (ret)
1395                 return ret;
1396
1397         ieee80211_do_stop(sdata, false);
1398
1399         ieee80211_teardown_sdata(sdata);
1400
1401         ret = drv_change_interface(local, sdata, internal_type, p2p);
1402         if (ret)
1403                 type = ieee80211_vif_type_p2p(&sdata->vif);
1404
1405         /*
1406          * Ignore return value here, there's not much we can do since
1407          * the driver changed the interface type internally already.
1408          * The warnings will hopefully make driver authors fix it :-)
1409          */
1410         ieee80211_check_queues(sdata, type);
1411
1412         ieee80211_setup_sdata(sdata, type);
1413
1414         err = ieee80211_do_open(&sdata->wdev, false);
1415         WARN(err, "type change: do_open returned %d", err);
1416
1417         return ret;
1418 }
1419
1420 int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
1421                              enum nl80211_iftype type)
1422 {
1423         int ret;
1424
1425         ASSERT_RTNL();
1426
1427         if (type == ieee80211_vif_type_p2p(&sdata->vif))
1428                 return 0;
1429
1430         if (ieee80211_sdata_running(sdata)) {
1431                 ret = ieee80211_runtime_change_iftype(sdata, type);
1432                 if (ret)
1433                         return ret;
1434         } else {
1435                 /* Purge and reset type-dependent state. */
1436                 ieee80211_teardown_sdata(sdata);
1437                 ieee80211_setup_sdata(sdata, type);
1438         }
1439
1440         /* reset some values that shouldn't be kept across type changes */
1441         sdata->drop_unencrypted = 0;
1442         if (type == NL80211_IFTYPE_STATION)
1443                 sdata->u.mgd.use_4addr = false;
1444
1445         return 0;
1446 }
1447
1448 static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
1449                                        u8 *perm_addr, enum nl80211_iftype type)
1450 {
1451         struct ieee80211_sub_if_data *sdata;
1452         u64 mask, start, addr, val, inc;
1453         u8 *m;
1454         u8 tmp_addr[ETH_ALEN];
1455         int i;
1456
1457         /* default ... something at least */
1458         memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
1459
1460         if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1461             local->hw.wiphy->n_addresses <= 1)
1462                 return;
1463
1464         mutex_lock(&local->iflist_mtx);
1465
1466         switch (type) {
1467         case NL80211_IFTYPE_MONITOR:
1468                 /* doesn't matter */
1469                 break;
1470         case NL80211_IFTYPE_WDS:
1471         case NL80211_IFTYPE_AP_VLAN:
1472                 /* match up with an AP interface */
1473                 list_for_each_entry(sdata, &local->interfaces, list) {
1474                         if (sdata->vif.type != NL80211_IFTYPE_AP)
1475                                 continue;
1476                         memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1477                         break;
1478                 }
1479                 /* keep default if no AP interface present */
1480                 break;
1481         case NL80211_IFTYPE_P2P_CLIENT:
1482         case NL80211_IFTYPE_P2P_GO:
1483                 if (local->hw.flags & IEEE80211_HW_P2P_DEV_ADDR_FOR_INTF) {
1484                         list_for_each_entry(sdata, &local->interfaces, list) {
1485                                 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
1486                                         continue;
1487                                 if (!ieee80211_sdata_running(sdata))
1488                                         continue;
1489                                 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1490                                 goto out_unlock;
1491                         }
1492                 }
1493                 /* otherwise fall through */
1494         default:
1495                 /* assign a new address if possible -- try n_addresses first */
1496                 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1497                         bool used = false;
1498
1499                         list_for_each_entry(sdata, &local->interfaces, list) {
1500                                 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr,
1501                                                      sdata->vif.addr)) {
1502                                         used = true;
1503                                         break;
1504                                 }
1505                         }
1506
1507                         if (!used) {
1508                                 memcpy(perm_addr,
1509                                        local->hw.wiphy->addresses[i].addr,
1510                                        ETH_ALEN);
1511                                 break;
1512                         }
1513                 }
1514
1515                 /* try mask if available */
1516                 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
1517                         break;
1518
1519                 m = local->hw.wiphy->addr_mask;
1520                 mask =  ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1521                         ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1522                         ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1523
1524                 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
1525                         /* not a contiguous mask ... not handled now! */
1526                         pr_info("not contiguous\n");
1527                         break;
1528                 }
1529
1530                 /*
1531                  * Pick address of existing interface in case user changed
1532                  * MAC address manually, default to perm_addr.
1533                  */
1534                 m = local->hw.wiphy->perm_addr;
1535                 list_for_each_entry(sdata, &local->interfaces, list) {
1536                         if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
1537                                 continue;
1538                         m = sdata->vif.addr;
1539                         break;
1540                 }
1541                 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1542                         ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1543                         ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1544
1545                 inc = 1ULL<<__ffs64(mask);
1546                 val = (start & mask);
1547                 addr = (start & ~mask) | (val & mask);
1548                 do {
1549                         bool used = false;
1550
1551                         tmp_addr[5] = addr >> 0*8;
1552                         tmp_addr[4] = addr >> 1*8;
1553                         tmp_addr[3] = addr >> 2*8;
1554                         tmp_addr[2] = addr >> 3*8;
1555                         tmp_addr[1] = addr >> 4*8;
1556                         tmp_addr[0] = addr >> 5*8;
1557
1558                         val += inc;
1559
1560                         list_for_each_entry(sdata, &local->interfaces, list) {
1561                                 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) {
1562                                         used = true;
1563                                         break;
1564                                 }
1565                         }
1566
1567                         if (!used) {
1568                                 memcpy(perm_addr, tmp_addr, ETH_ALEN);
1569                                 break;
1570                         }
1571                         addr = (start & ~mask) | (val & mask);
1572                 } while (addr != start);
1573
1574                 break;
1575         }
1576
1577  out_unlock:
1578         mutex_unlock(&local->iflist_mtx);
1579 }
1580
1581 static void ieee80211_cleanup_sdata_stas_wk(struct work_struct *wk)
1582 {
1583         struct ieee80211_sub_if_data *sdata;
1584
1585         sdata = container_of(wk, struct ieee80211_sub_if_data, cleanup_stations_wk);
1586
1587         ieee80211_cleanup_sdata_stas(sdata);
1588 }
1589
1590 int ieee80211_if_add(struct ieee80211_local *local, const char *name,
1591                      struct wireless_dev **new_wdev, enum nl80211_iftype type,
1592                      struct vif_params *params)
1593 {
1594         struct net_device *ndev = NULL;
1595         struct ieee80211_sub_if_data *sdata = NULL;
1596         int ret, i;
1597         int txqs = 1;
1598
1599         ASSERT_RTNL();
1600
1601         if (type == NL80211_IFTYPE_P2P_DEVICE) {
1602                 struct wireless_dev *wdev;
1603
1604                 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size,
1605                                 GFP_KERNEL);
1606                 if (!sdata)
1607                         return -ENOMEM;
1608                 wdev = &sdata->wdev;
1609
1610                 sdata->dev = NULL;
1611                 strlcpy(sdata->name, name, IFNAMSIZ);
1612                 ieee80211_assign_perm_addr(local, wdev->address, type);
1613                 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN);
1614         } else {
1615                 if (local->hw.queues >= IEEE80211_NUM_ACS)
1616                         txqs = IEEE80211_NUM_ACS;
1617
1618                 ndev = alloc_netdev_mqs(sizeof(*sdata) +
1619                                         local->hw.vif_data_size,
1620                                         name, ieee80211_if_setup, txqs, 1);
1621                 if (!ndev)
1622                         return -ENOMEM;
1623                 dev_net_set(ndev, wiphy_net(local->hw.wiphy));
1624
1625                 ndev->needed_headroom = local->tx_headroom +
1626                                         4*6 /* four MAC addresses */
1627                                         + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
1628                                         + 6 /* mesh */
1629                                         + 8 /* rfc1042/bridge tunnel */
1630                                         - ETH_HLEN /* ethernet hard_header_len */
1631                                         + IEEE80211_ENCRYPT_HEADROOM;
1632                 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
1633
1634                 ret = dev_alloc_name(ndev, ndev->name);
1635                 if (ret < 0) {
1636                         free_netdev(ndev);
1637                         return ret;
1638                 }
1639
1640                 ieee80211_assign_perm_addr(local, ndev->perm_addr, type);
1641                 memcpy(ndev->dev_addr, ndev->perm_addr, ETH_ALEN);
1642                 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
1643
1644                 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */
1645                 sdata = netdev_priv(ndev);
1646                 ndev->ieee80211_ptr = &sdata->wdev;
1647                 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
1648                 memcpy(sdata->name, ndev->name, IFNAMSIZ);
1649
1650                 sdata->dev = ndev;
1651         }
1652
1653         /* initialise type-independent data */
1654         sdata->wdev.wiphy = local->hw.wiphy;
1655         sdata->local = local;
1656
1657         for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1658                 skb_queue_head_init(&sdata->fragments[i].skb_list);
1659
1660         INIT_LIST_HEAD(&sdata->key_list);
1661
1662         spin_lock_init(&sdata->cleanup_stations_lock);
1663         INIT_LIST_HEAD(&sdata->cleanup_stations);
1664         INIT_WORK(&sdata->cleanup_stations_wk, ieee80211_cleanup_sdata_stas_wk);
1665         INIT_DELAYED_WORK(&sdata->dfs_cac_timer_work,
1666                           ieee80211_dfs_cac_timer_work);
1667         INIT_DELAYED_WORK(&sdata->dec_tailroom_needed_wk,
1668                           ieee80211_delayed_tailroom_dec);
1669
1670         for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
1671                 struct ieee80211_supported_band *sband;
1672                 sband = local->hw.wiphy->bands[i];
1673                 sdata->rc_rateidx_mask[i] =
1674                         sband ? (1 << sband->n_bitrates) - 1 : 0;
1675                 if (sband)
1676                         memcpy(sdata->rc_rateidx_mcs_mask[i],
1677                                sband->ht_cap.mcs.rx_mask,
1678                                sizeof(sdata->rc_rateidx_mcs_mask[i]));
1679                 else
1680                         memset(sdata->rc_rateidx_mcs_mask[i], 0,
1681                                sizeof(sdata->rc_rateidx_mcs_mask[i]));
1682         }
1683
1684         ieee80211_set_default_queues(sdata);
1685
1686         sdata->ap_power_level = IEEE80211_UNSET_POWER_LEVEL;
1687         sdata->user_power_level = local->user_power_level;
1688
1689         sdata->encrypt_headroom = IEEE80211_ENCRYPT_HEADROOM;
1690
1691         /* setup type-dependent data */
1692         ieee80211_setup_sdata(sdata, type);
1693
1694         if (ndev) {
1695                 if (params) {
1696                         ndev->ieee80211_ptr->use_4addr = params->use_4addr;
1697                         if (type == NL80211_IFTYPE_STATION)
1698                                 sdata->u.mgd.use_4addr = params->use_4addr;
1699                 }
1700
1701                 ndev->features |= local->hw.netdev_features;
1702
1703                 ret = register_netdevice(ndev);
1704                 if (ret) {
1705                         free_netdev(ndev);
1706                         return ret;
1707                 }
1708         }
1709
1710         mutex_lock(&local->iflist_mtx);
1711         list_add_tail_rcu(&sdata->list, &local->interfaces);
1712         mutex_unlock(&local->iflist_mtx);
1713
1714         if (new_wdev)
1715                 *new_wdev = &sdata->wdev;
1716
1717         return 0;
1718 }
1719
1720 void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
1721 {
1722         ASSERT_RTNL();
1723
1724         mutex_lock(&sdata->local->iflist_mtx);
1725         list_del_rcu(&sdata->list);
1726         mutex_unlock(&sdata->local->iflist_mtx);
1727
1728         synchronize_rcu();
1729
1730         if (sdata->dev) {
1731                 unregister_netdevice(sdata->dev);
1732         } else {
1733                 cfg80211_unregister_wdev(&sdata->wdev);
1734                 kfree(sdata);
1735         }
1736 }
1737
1738 void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata)
1739 {
1740         if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state)))
1741                 return;
1742         ieee80211_do_stop(sdata, true);
1743         ieee80211_teardown_sdata(sdata);
1744 }
1745
1746 /*
1747  * Remove all interfaces, may only be called at hardware unregistration
1748  * time because it doesn't do RCU-safe list removals.
1749  */
1750 void ieee80211_remove_interfaces(struct ieee80211_local *local)
1751 {
1752         struct ieee80211_sub_if_data *sdata, *tmp;
1753         LIST_HEAD(unreg_list);
1754         LIST_HEAD(wdev_list);
1755
1756         ASSERT_RTNL();
1757
1758         /*
1759          * Close all AP_VLAN interfaces first, as otherwise they
1760          * might be closed while the AP interface they belong to
1761          * is closed, causing unregister_netdevice_many() to crash.
1762          */
1763         list_for_each_entry(sdata, &local->interfaces, list)
1764                 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
1765                         dev_close(sdata->dev);
1766
1767         mutex_lock(&local->iflist_mtx);
1768         list_for_each_entry_safe(sdata, tmp, &local->interfaces, list) {
1769                 list_del(&sdata->list);
1770
1771                 if (sdata->dev)
1772                         unregister_netdevice_queue(sdata->dev, &unreg_list);
1773                 else
1774                         list_add(&sdata->list, &wdev_list);
1775         }
1776         mutex_unlock(&local->iflist_mtx);
1777         unregister_netdevice_many(&unreg_list);
1778         list_del(&unreg_list);
1779
1780         list_for_each_entry_safe(sdata, tmp, &wdev_list, list) {
1781                 list_del(&sdata->list);
1782                 cfg80211_unregister_wdev(&sdata->wdev);
1783                 kfree(sdata);
1784         }
1785 }
1786
1787 static int netdev_notify(struct notifier_block *nb,
1788                          unsigned long state, void *ptr)
1789 {
1790         struct net_device *dev = netdev_notifier_info_to_dev(ptr);
1791         struct ieee80211_sub_if_data *sdata;
1792
1793         if (state != NETDEV_CHANGENAME)
1794                 return 0;
1795
1796         if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
1797                 return 0;
1798
1799         if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
1800                 return 0;
1801
1802         sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1803
1804         memcpy(sdata->name, dev->name, IFNAMSIZ);
1805
1806         ieee80211_debugfs_rename_netdev(sdata);
1807         return 0;
1808 }
1809
1810 static struct notifier_block mac80211_netdev_notifier = {
1811         .notifier_call = netdev_notify,
1812 };
1813
1814 int ieee80211_iface_init(void)
1815 {
1816         return register_netdevice_notifier(&mac80211_netdev_notifier);
1817 }
1818
1819 void ieee80211_iface_exit(void)
1820 {
1821         unregister_netdevice_notifier(&mac80211_netdev_notifier);
1822 }