1 /*
2  * Copyright 2002-2005, Instant802 Networks, Inc.
3  * Copyright 2005-2006, Devicescape Software, Inc.
4  * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
5  *
6  * This program is free software; you can redistribute it and/or modify
7  * it under the terms of the GNU General Public License version 2 as
8  * published by the Free Software Foundation.
9  */
10 
11 #include <net/mac80211.h>
12 #include <linux/module.h>
13 #include <linux/init.h>
14 #include <linux/netdevice.h>
15 #include <linux/types.h>
16 #include <linux/slab.h>
17 #include <linux/skbuff.h>
18 #include <linux/etherdevice.h>
19 #include <linux/if_arp.h>
20 #include <linux/rtnetlink.h>
21 #include <linux/bitmap.h>
22 #include <linux/pm_qos_params.h>
23 #include <linux/inetdevice.h>
24 #include <net/net_namespace.h>
25 #include <net/cfg80211.h>
26 
27 #include "ieee80211_i.h"
28 #include "driver-ops.h"
29 #include "rate.h"
30 #include "mesh.h"
31 #include "wep.h"
32 #include "led.h"
33 #include "cfg.h"
34 #include "debugfs.h"
35 
36 
37 static bool ieee80211_disable_40mhz_24ghz;
38 module_param(ieee80211_disable_40mhz_24ghz, bool, 0644);
39 MODULE_PARM_DESC(ieee80211_disable_40mhz_24ghz,
40 		 "Disable 40MHz support in the 2.4GHz band");
41 
42 static struct lock_class_key ieee80211_rx_skb_queue_class;
43 
ieee80211_configure_filter(struct ieee80211_local * local)44 void ieee80211_configure_filter(struct ieee80211_local *local)
45 {
46 	u64 mc;
47 	unsigned int changed_flags;
48 	unsigned int new_flags = 0;
49 
50 	if (atomic_read(&local->iff_promiscs))
51 		new_flags |= FIF_PROMISC_IN_BSS;
52 
53 	if (atomic_read(&local->iff_allmultis))
54 		new_flags |= FIF_ALLMULTI;
55 
56 	if (local->monitors || local->scanning)
57 		new_flags |= FIF_BCN_PRBRESP_PROMISC;
58 
59 	if (local->fif_probe_req || local->probe_req_reg)
60 		new_flags |= FIF_PROBE_REQ;
61 
62 	if (local->fif_fcsfail)
63 		new_flags |= FIF_FCSFAIL;
64 
65 	if (local->fif_plcpfail)
66 		new_flags |= FIF_PLCPFAIL;
67 
68 	if (local->fif_control)
69 		new_flags |= FIF_CONTROL;
70 
71 	if (local->fif_other_bss)
72 		new_flags |= FIF_OTHER_BSS;
73 
74 	if (local->fif_pspoll)
75 		new_flags |= FIF_PSPOLL;
76 
77 	spin_lock_bh(&local->filter_lock);
78 	changed_flags = local->filter_flags ^ new_flags;
79 
80 	mc = drv_prepare_multicast(local, &local->mc_list);
81 	spin_unlock_bh(&local->filter_lock);
82 
83 	/* be a bit nasty */
84 	new_flags |= (1<<31);
85 
86 	drv_configure_filter(local, changed_flags, &new_flags, mc);
87 
88 	WARN_ON(new_flags & (1<<31));
89 
90 	local->filter_flags = new_flags & ~(1<<31);
91 }
92 
ieee80211_reconfig_filter(struct work_struct * work)93 static void ieee80211_reconfig_filter(struct work_struct *work)
94 {
95 	struct ieee80211_local *local =
96 		container_of(work, struct ieee80211_local, reconfig_filter);
97 
98 	ieee80211_configure_filter(local);
99 }
100 
101 /*
102  * Returns true if we are logically configured to be on
103  * the operating channel AND the hardware-conf is currently
104  * configured on the operating channel.  Compares channel-type
105  * as well.
106  */
ieee80211_cfg_on_oper_channel(struct ieee80211_local * local)107 bool ieee80211_cfg_on_oper_channel(struct ieee80211_local *local)
108 {
109 	struct ieee80211_channel *chan, *scan_chan;
110 	enum nl80211_channel_type channel_type;
111 
112 	/* This logic needs to match logic in ieee80211_hw_config */
113 	if (local->scan_channel) {
114 		chan = local->scan_channel;
115 		/* If scanning on oper channel, use whatever channel-type
116 		 * is currently in use.
117 		 */
118 		if (chan == local->oper_channel)
119 			channel_type = local->_oper_channel_type;
120 		else
121 			channel_type = NL80211_CHAN_NO_HT;
122 	} else if (local->tmp_channel) {
123 		chan = scan_chan = local->tmp_channel;
124 		channel_type = local->tmp_channel_type;
125 	} else {
126 		chan = local->oper_channel;
127 		channel_type = local->_oper_channel_type;
128 	}
129 
130 	if (chan != local->oper_channel ||
131 	    channel_type != local->_oper_channel_type)
132 		return false;
133 
134 	/* Check current hardware-config against oper_channel. */
135 	if ((local->oper_channel != local->hw.conf.channel) ||
136 	    (local->_oper_channel_type != local->hw.conf.channel_type))
137 		return false;
138 
139 	return true;
140 }
141 
ieee80211_hw_config(struct ieee80211_local * local,u32 changed)142 int ieee80211_hw_config(struct ieee80211_local *local, u32 changed)
143 {
144 	struct ieee80211_channel *chan, *scan_chan;
145 	int ret = 0;
146 	int power;
147 	enum nl80211_channel_type channel_type;
148 	u32 offchannel_flag;
149 
150 	might_sleep();
151 
152 	scan_chan = local->scan_channel;
153 
154 	/* If this off-channel logic ever changes,  ieee80211_on_oper_channel
155 	 * may need to change as well.
156 	 */
157 	offchannel_flag = local->hw.conf.flags & IEEE80211_CONF_OFFCHANNEL;
158 	if (scan_chan) {
159 		chan = scan_chan;
160 		/* If scanning on oper channel, use whatever channel-type
161 		 * is currently in use.
162 		 */
163 		if (chan == local->oper_channel)
164 			channel_type = local->_oper_channel_type;
165 		else
166 			channel_type = NL80211_CHAN_NO_HT;
167 	} else if (local->tmp_channel) {
168 		chan = scan_chan = local->tmp_channel;
169 		channel_type = local->tmp_channel_type;
170 	} else {
171 		chan = local->oper_channel;
172 		channel_type = local->_oper_channel_type;
173 	}
174 
175 	if (chan != local->oper_channel ||
176 	    channel_type != local->_oper_channel_type)
177 		local->hw.conf.flags |= IEEE80211_CONF_OFFCHANNEL;
178 	else
179 		local->hw.conf.flags &= ~IEEE80211_CONF_OFFCHANNEL;
180 
181 	offchannel_flag ^= local->hw.conf.flags & IEEE80211_CONF_OFFCHANNEL;
182 
183 	if (offchannel_flag || chan != local->hw.conf.channel ||
184 	    channel_type != local->hw.conf.channel_type) {
185 		local->hw.conf.channel = chan;
186 		local->hw.conf.channel_type = channel_type;
187 		changed |= IEEE80211_CONF_CHANGE_CHANNEL;
188 	}
189 
190 	if (!conf_is_ht(&local->hw.conf)) {
191 		/*
192 		 * mac80211.h documents that this is only valid
193 		 * when the channel is set to an HT type, and
194 		 * that otherwise STATIC is used.
195 		 */
196 		local->hw.conf.smps_mode = IEEE80211_SMPS_STATIC;
197 	} else if (local->hw.conf.smps_mode != local->smps_mode) {
198 		local->hw.conf.smps_mode = local->smps_mode;
199 		changed |= IEEE80211_CONF_CHANGE_SMPS;
200 	}
201 
202 	if ((local->scanning & SCAN_SW_SCANNING) ||
203 	    (local->scanning & SCAN_HW_SCANNING))
204 		power = chan->max_power;
205 	else
206 		power = local->power_constr_level ?
207 			(chan->max_power - local->power_constr_level) :
208 			chan->max_power;
209 
210 	if (local->user_power_level >= 0)
211 		power = min(power, local->user_power_level);
212 
213 	if (local->hw.conf.power_level != power) {
214 		changed |= IEEE80211_CONF_CHANGE_POWER;
215 		local->hw.conf.power_level = power;
216 	}
217 
218 	if (changed && local->open_count) {
219 		ret = drv_config(local, changed);
220 		/*
221 		 * Goal:
222 		 * HW reconfiguration should never fail, the driver has told
223 		 * us what it can support so it should live up to that promise.
224 		 *
225 		 * Current status:
226 		 * rfkill is not integrated with mac80211 and a
227 		 * configuration command can thus fail if hardware rfkill
228 		 * is enabled
229 		 *
230 		 * FIXME: integrate rfkill with mac80211 and then add this
231 		 * WARN_ON() back
232 		 *
233 		 */
234 		/* WARN_ON(ret); */
235 	}
236 
237 	return ret;
238 }
239 
ieee80211_bss_info_change_notify(struct ieee80211_sub_if_data * sdata,u32 changed)240 void ieee80211_bss_info_change_notify(struct ieee80211_sub_if_data *sdata,
241 				      u32 changed)
242 {
243 	struct ieee80211_local *local = sdata->local;
244 	static const u8 zero[ETH_ALEN] = { 0 };
245 
246 	if (!changed)
247 		return;
248 
249 	if (sdata->vif.type == NL80211_IFTYPE_STATION) {
250 		/*
251 		 * While not associated, claim a BSSID of all-zeroes
252 		 * so that drivers don't do any weird things with the
253 		 * BSSID at that time.
254 		 */
255 		if (sdata->vif.bss_conf.assoc)
256 			sdata->vif.bss_conf.bssid = sdata->u.mgd.bssid;
257 		else
258 			sdata->vif.bss_conf.bssid = zero;
259 	} else if (sdata->vif.type == NL80211_IFTYPE_ADHOC)
260 		sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
261 	else if (sdata->vif.type == NL80211_IFTYPE_AP)
262 		sdata->vif.bss_conf.bssid = sdata->vif.addr;
263 	else if (sdata->vif.type == NL80211_IFTYPE_WDS)
264 		sdata->vif.bss_conf.bssid = NULL;
265 	else if (ieee80211_vif_is_mesh(&sdata->vif)) {
266 		sdata->vif.bss_conf.bssid = zero;
267 	} else {
268 		WARN_ON(1);
269 		return;
270 	}
271 
272 	switch (sdata->vif.type) {
273 	case NL80211_IFTYPE_AP:
274 	case NL80211_IFTYPE_ADHOC:
275 	case NL80211_IFTYPE_WDS:
276 	case NL80211_IFTYPE_MESH_POINT:
277 		break;
278 	default:
279 		/* do not warn to simplify caller in scan.c */
280 		changed &= ~BSS_CHANGED_BEACON_ENABLED;
281 		if (WARN_ON(changed & BSS_CHANGED_BEACON))
282 			return;
283 		break;
284 	}
285 
286 	if (changed & BSS_CHANGED_BEACON_ENABLED) {
287 		if (local->quiescing || !ieee80211_sdata_running(sdata) ||
288 		    test_bit(SDATA_STATE_OFFCHANNEL, &sdata->state)) {
289 			sdata->vif.bss_conf.enable_beacon = false;
290 		} else {
291 			/*
292 			 * Beacon should be enabled, but AP mode must
293 			 * check whether there is a beacon configured.
294 			 */
295 			switch (sdata->vif.type) {
296 			case NL80211_IFTYPE_AP:
297 				sdata->vif.bss_conf.enable_beacon =
298 					!!sdata->u.ap.beacon;
299 				break;
300 			case NL80211_IFTYPE_ADHOC:
301 				sdata->vif.bss_conf.enable_beacon =
302 					!!sdata->u.ibss.presp;
303 				break;
304 #ifdef CONFIG_MAC80211_MESH
305 			case NL80211_IFTYPE_MESH_POINT:
306 				sdata->vif.bss_conf.enable_beacon =
307 					!!sdata->u.mesh.mesh_id_len;
308 				break;
309 #endif
310 			default:
311 				/* not reached */
312 				WARN_ON(1);
313 				break;
314 			}
315 		}
316 	}
317 
318 	drv_bss_info_changed(local, sdata, &sdata->vif.bss_conf, changed);
319 }
320 
ieee80211_reset_erp_info(struct ieee80211_sub_if_data * sdata)321 u32 ieee80211_reset_erp_info(struct ieee80211_sub_if_data *sdata)
322 {
323 	sdata->vif.bss_conf.use_cts_prot = false;
324 	sdata->vif.bss_conf.use_short_preamble = false;
325 	sdata->vif.bss_conf.use_short_slot = false;
326 	return BSS_CHANGED_ERP_CTS_PROT |
327 	       BSS_CHANGED_ERP_PREAMBLE |
328 	       BSS_CHANGED_ERP_SLOT;
329 }
330 
ieee80211_tasklet_handler(unsigned long data)331 static void ieee80211_tasklet_handler(unsigned long data)
332 {
333 	struct ieee80211_local *local = (struct ieee80211_local *) data;
334 	struct sk_buff *skb;
335 
336 	while ((skb = skb_dequeue(&local->skb_queue)) ||
337 	       (skb = skb_dequeue(&local->skb_queue_unreliable))) {
338 		switch (skb->pkt_type) {
339 		case IEEE80211_RX_MSG:
340 			/* Clear skb->pkt_type in order to not confuse kernel
341 			 * netstack. */
342 			skb->pkt_type = 0;
343 			ieee80211_rx(local_to_hw(local), skb);
344 			break;
345 		case IEEE80211_TX_STATUS_MSG:
346 			skb->pkt_type = 0;
347 			ieee80211_tx_status(local_to_hw(local), skb);
348 			break;
349 		default:
350 			WARN(1, "mac80211: Packet is of unknown type %d\n",
351 			     skb->pkt_type);
352 			dev_kfree_skb(skb);
353 			break;
354 		}
355 	}
356 }
357 
ieee80211_restart_work(struct work_struct * work)358 static void ieee80211_restart_work(struct work_struct *work)
359 {
360 	struct ieee80211_local *local =
361 		container_of(work, struct ieee80211_local, restart_work);
362 
363 	/* wait for scan work complete */
364 	flush_workqueue(local->workqueue);
365 
366 	mutex_lock(&local->mtx);
367 	WARN(test_bit(SCAN_HW_SCANNING, &local->scanning),
368 		"%s called with hardware scan in progress\n", __func__);
369 	mutex_unlock(&local->mtx);
370 
371 	rtnl_lock();
372 	ieee80211_scan_cancel(local);
373 	ieee80211_reconfig(local);
374 	rtnl_unlock();
375 }
376 
ieee80211_restart_hw(struct ieee80211_hw * hw)377 void ieee80211_restart_hw(struct ieee80211_hw *hw)
378 {
379 	struct ieee80211_local *local = hw_to_local(hw);
380 
381 	trace_api_restart_hw(local);
382 
383 	wiphy_info(hw->wiphy,
384 		   "Hardware restart was requested\n");
385 
386 	/* use this reason, ieee80211_reconfig will unblock it */
387 	ieee80211_stop_queues_by_reason(hw,
388 		IEEE80211_QUEUE_STOP_REASON_SUSPEND);
389 
390 	schedule_work(&local->restart_work);
391 }
392 EXPORT_SYMBOL(ieee80211_restart_hw);
393 
ieee80211_recalc_smps_work(struct work_struct * work)394 static void ieee80211_recalc_smps_work(struct work_struct *work)
395 {
396 	struct ieee80211_local *local =
397 		container_of(work, struct ieee80211_local, recalc_smps);
398 
399 	mutex_lock(&local->iflist_mtx);
400 	ieee80211_recalc_smps(local);
401 	mutex_unlock(&local->iflist_mtx);
402 }
403 
404 #ifdef CONFIG_INET
ieee80211_ifa_changed(struct notifier_block * nb,unsigned long data,void * arg)405 static int ieee80211_ifa_changed(struct notifier_block *nb,
406 				 unsigned long data, void *arg)
407 {
408 	struct in_ifaddr *ifa = arg;
409 	struct ieee80211_local *local =
410 		container_of(nb, struct ieee80211_local,
411 			     ifa_notifier);
412 	struct net_device *ndev = ifa->ifa_dev->dev;
413 	struct wireless_dev *wdev = ndev->ieee80211_ptr;
414 	struct in_device *idev;
415 	struct ieee80211_sub_if_data *sdata;
416 	struct ieee80211_bss_conf *bss_conf;
417 	struct ieee80211_if_managed *ifmgd;
418 	int c = 0;
419 
420 	/* Make sure it's our interface that got changed */
421 	if (!wdev)
422 		return NOTIFY_DONE;
423 
424 	if (wdev->wiphy != local->hw.wiphy)
425 		return NOTIFY_DONE;
426 
427 	sdata = IEEE80211_DEV_TO_SUB_IF(ndev);
428 	bss_conf = &sdata->vif.bss_conf;
429 
430 	if (!ieee80211_sdata_running(sdata))
431 		return NOTIFY_DONE;
432 
433 	/* ARP filtering is only supported in managed mode */
434 	if (sdata->vif.type != NL80211_IFTYPE_STATION)
435 		return NOTIFY_DONE;
436 
437 	idev = __in_dev_get_rtnl(sdata->dev);
438 	if (!idev)
439 		return NOTIFY_DONE;
440 
441 	ifmgd = &sdata->u.mgd;
442 	mutex_lock(&ifmgd->mtx);
443 
444 	/* Copy the addresses to the bss_conf list */
445 	ifa = idev->ifa_list;
446 	while (c < IEEE80211_BSS_ARP_ADDR_LIST_LEN && ifa) {
447 		bss_conf->arp_addr_list[c] = ifa->ifa_address;
448 		ifa = ifa->ifa_next;
449 		c++;
450 	}
451 
452 	/* If not all addresses fit the list, disable filtering */
453 	if (ifa) {
454 		sdata->arp_filter_state = false;
455 		c = 0;
456 	} else {
457 		sdata->arp_filter_state = true;
458 	}
459 	bss_conf->arp_addr_cnt = c;
460 
461 	/* Configure driver only if associated */
462 	if (ifmgd->associated) {
463 		bss_conf->arp_filter_enabled = sdata->arp_filter_state;
464 		ieee80211_bss_info_change_notify(sdata,
465 						 BSS_CHANGED_ARP_FILTER);
466 	}
467 
468 	mutex_unlock(&ifmgd->mtx);
469 
470 	return NOTIFY_DONE;
471 }
472 #endif
473 
ieee80211_napi_poll(struct napi_struct * napi,int budget)474 static int ieee80211_napi_poll(struct napi_struct *napi, int budget)
475 {
476 	struct ieee80211_local *local =
477 		container_of(napi, struct ieee80211_local, napi);
478 
479 	return local->ops->napi_poll(&local->hw, budget);
480 }
481 
ieee80211_napi_schedule(struct ieee80211_hw * hw)482 void ieee80211_napi_schedule(struct ieee80211_hw *hw)
483 {
484 	struct ieee80211_local *local = hw_to_local(hw);
485 
486 	napi_schedule(&local->napi);
487 }
488 EXPORT_SYMBOL(ieee80211_napi_schedule);
489 
ieee80211_napi_complete(struct ieee80211_hw * hw)490 void ieee80211_napi_complete(struct ieee80211_hw *hw)
491 {
492 	struct ieee80211_local *local = hw_to_local(hw);
493 
494 	napi_complete(&local->napi);
495 }
496 EXPORT_SYMBOL(ieee80211_napi_complete);
497 
498 /* There isn't a lot of sense in it, but you can transmit anything you like */
499 static const struct ieee80211_txrx_stypes
500 ieee80211_default_mgmt_stypes[NUM_NL80211_IFTYPES] = {
501 	[NL80211_IFTYPE_ADHOC] = {
502 		.tx = 0xffff,
503 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4),
504 	},
505 	[NL80211_IFTYPE_STATION] = {
506 		.tx = 0xffff,
507 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
508 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4),
509 	},
510 	[NL80211_IFTYPE_AP] = {
511 		.tx = 0xffff,
512 		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
513 			BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
514 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
515 			BIT(IEEE80211_STYPE_DISASSOC >> 4) |
516 			BIT(IEEE80211_STYPE_AUTH >> 4) |
517 			BIT(IEEE80211_STYPE_DEAUTH >> 4) |
518 			BIT(IEEE80211_STYPE_ACTION >> 4),
519 	},
520 	[NL80211_IFTYPE_AP_VLAN] = {
521 		/* copy AP */
522 		.tx = 0xffff,
523 		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
524 			BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
525 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
526 			BIT(IEEE80211_STYPE_DISASSOC >> 4) |
527 			BIT(IEEE80211_STYPE_AUTH >> 4) |
528 			BIT(IEEE80211_STYPE_DEAUTH >> 4) |
529 			BIT(IEEE80211_STYPE_ACTION >> 4),
530 	},
531 	[NL80211_IFTYPE_P2P_CLIENT] = {
532 		.tx = 0xffff,
533 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
534 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4),
535 	},
536 	[NL80211_IFTYPE_P2P_GO] = {
537 		.tx = 0xffff,
538 		.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
539 			BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
540 			BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
541 			BIT(IEEE80211_STYPE_DISASSOC >> 4) |
542 			BIT(IEEE80211_STYPE_AUTH >> 4) |
543 			BIT(IEEE80211_STYPE_DEAUTH >> 4) |
544 			BIT(IEEE80211_STYPE_ACTION >> 4),
545 	},
546 	[NL80211_IFTYPE_MESH_POINT] = {
547 		.tx = 0xffff,
548 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4),
549 	},
550 };
551 
ieee80211_alloc_hw(size_t priv_data_len,const struct ieee80211_ops * ops)552 struct ieee80211_hw *ieee80211_alloc_hw(size_t priv_data_len,
553 					const struct ieee80211_ops *ops)
554 {
555 	struct ieee80211_local *local;
556 	int priv_size, i;
557 	struct wiphy *wiphy;
558 
559 	/* Ensure 32-byte alignment of our private data and hw private data.
560 	 * We use the wiphy priv data for both our ieee80211_local and for
561 	 * the driver's private data
562 	 *
563 	 * In memory it'll be like this:
564 	 *
565 	 * +-------------------------+
566 	 * | struct wiphy	    |
567 	 * +-------------------------+
568 	 * | struct ieee80211_local  |
569 	 * +-------------------------+
570 	 * | driver's private data   |
571 	 * +-------------------------+
572 	 *
573 	 */
574 	priv_size = ALIGN(sizeof(*local), NETDEV_ALIGN) + priv_data_len;
575 
576 	wiphy = wiphy_new(&mac80211_config_ops, priv_size);
577 
578 	if (!wiphy)
579 		return NULL;
580 
581 	wiphy->mgmt_stypes = ieee80211_default_mgmt_stypes;
582 
583 	wiphy->privid = mac80211_wiphy_privid;
584 
585 	wiphy->flags |= WIPHY_FLAG_NETNS_OK |
586 			WIPHY_FLAG_4ADDR_AP |
587 			WIPHY_FLAG_4ADDR_STATION |
588 			WIPHY_FLAG_SUPPORTS_SEPARATE_DEFAULT_KEYS;
589 
590 	if (!ops->set_key)
591 		wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
592 
593 	wiphy->bss_priv_size = sizeof(struct ieee80211_bss);
594 
595 	local = wiphy_priv(wiphy);
596 
597 	local->hw.wiphy = wiphy;
598 
599 	local->hw.priv = (char *)local + ALIGN(sizeof(*local), NETDEV_ALIGN);
600 
601 	BUG_ON(!ops->tx);
602 	BUG_ON(!ops->start);
603 	BUG_ON(!ops->stop);
604 	BUG_ON(!ops->config);
605 	BUG_ON(!ops->add_interface);
606 	BUG_ON(!ops->remove_interface);
607 	BUG_ON(!ops->configure_filter);
608 	local->ops = ops;
609 
610 	/* set up some defaults */
611 	local->hw.queues = 1;
612 	local->hw.max_rates = 1;
613 	local->hw.max_report_rates = 0;
614 	local->hw.max_rx_aggregation_subframes = IEEE80211_MAX_AMPDU_BUF;
615 	local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
616 	local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
617 	local->user_power_level = -1;
618 	local->uapsd_queues = IEEE80211_DEFAULT_UAPSD_QUEUES;
619 	local->uapsd_max_sp_len = IEEE80211_DEFAULT_MAX_SP_LEN;
620 
621 	INIT_LIST_HEAD(&local->interfaces);
622 
623 	__hw_addr_init(&local->mc_list);
624 
625 	mutex_init(&local->iflist_mtx);
626 	mutex_init(&local->mtx);
627 
628 	mutex_init(&local->key_mtx);
629 	spin_lock_init(&local->filter_lock);
630 	spin_lock_init(&local->queue_stop_reason_lock);
631 
632 	/*
633 	 * The rx_skb_queue is only accessed from tasklets,
634 	 * but other SKB queues are used from within IRQ
635 	 * context. Therefore, this one needs a different
636 	 * locking class so our direct, non-irq-safe use of
637 	 * the queue's lock doesn't throw lockdep warnings.
638 	 */
639 	skb_queue_head_init_class(&local->rx_skb_queue,
640 				  &ieee80211_rx_skb_queue_class);
641 
642 	INIT_DELAYED_WORK(&local->scan_work, ieee80211_scan_work);
643 
644 	ieee80211_work_init(local);
645 
646 	INIT_WORK(&local->restart_work, ieee80211_restart_work);
647 
648 	INIT_WORK(&local->reconfig_filter, ieee80211_reconfig_filter);
649 	INIT_WORK(&local->recalc_smps, ieee80211_recalc_smps_work);
650 	local->smps_mode = IEEE80211_SMPS_OFF;
651 
652 	INIT_WORK(&local->dynamic_ps_enable_work,
653 		  ieee80211_dynamic_ps_enable_work);
654 	INIT_WORK(&local->dynamic_ps_disable_work,
655 		  ieee80211_dynamic_ps_disable_work);
656 	setup_timer(&local->dynamic_ps_timer,
657 		    ieee80211_dynamic_ps_timer, (unsigned long) local);
658 
659 	sta_info_init(local);
660 
661 	for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
662 		skb_queue_head_init(&local->pending[i]);
663 		atomic_set(&local->agg_queue_stop[i], 0);
664 	}
665 	tasklet_init(&local->tx_pending_tasklet, ieee80211_tx_pending,
666 		     (unsigned long)local);
667 
668 	tasklet_init(&local->tasklet,
669 		     ieee80211_tasklet_handler,
670 		     (unsigned long) local);
671 
672 	skb_queue_head_init(&local->skb_queue);
673 	skb_queue_head_init(&local->skb_queue_unreliable);
674 
675 	/* init dummy netdev for use w/ NAPI */
676 	init_dummy_netdev(&local->napi_dev);
677 
678 	ieee80211_led_names(local);
679 
680 	ieee80211_hw_roc_setup(local);
681 
682 	return local_to_hw(local);
683 }
684 EXPORT_SYMBOL(ieee80211_alloc_hw);
685 
ieee80211_register_hw(struct ieee80211_hw * hw)686 int ieee80211_register_hw(struct ieee80211_hw *hw)
687 {
688 	struct ieee80211_local *local = hw_to_local(hw);
689 	int result;
690 	enum ieee80211_band band;
691 	int channels, max_bitrates;
692 	bool supp_ht;
693 	static const u32 cipher_suites[] = {
694 		/* keep WEP first, it may be removed below */
695 		WLAN_CIPHER_SUITE_WEP40,
696 		WLAN_CIPHER_SUITE_WEP104,
697 		WLAN_CIPHER_SUITE_TKIP,
698 		WLAN_CIPHER_SUITE_CCMP,
699 
700 		/* keep last -- depends on hw flags! */
701 		WLAN_CIPHER_SUITE_AES_CMAC
702 	};
703 
704 	if (hw->max_report_rates == 0)
705 		hw->max_report_rates = hw->max_rates;
706 
707 	/*
708 	 * generic code guarantees at least one band,
709 	 * set this very early because much code assumes
710 	 * that hw.conf.channel is assigned
711 	 */
712 	channels = 0;
713 	max_bitrates = 0;
714 	supp_ht = false;
715 	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
716 		struct ieee80211_supported_band *sband;
717 
718 		sband = local->hw.wiphy->bands[band];
719 		if (!sband)
720 			continue;
721 		if (!local->oper_channel) {
722 			/* init channel we're on */
723 			local->hw.conf.channel =
724 			local->oper_channel = &sband->channels[0];
725 			local->hw.conf.channel_type = NL80211_CHAN_NO_HT;
726 		}
727 		channels += sband->n_channels;
728 
729 		/*
730 		 * Since ieee80211_disable_40mhz_24ghz is global, we can
731 		 * modify the sband's ht data even if the driver uses a
732 		 * global structure for that.
733 		 */
734 		if (ieee80211_disable_40mhz_24ghz &&
735 		    band == IEEE80211_BAND_2GHZ &&
736 		    sband->ht_cap.ht_supported) {
737 			sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
738 			sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SGI_40;
739 		}
740 
741 		if (max_bitrates < sband->n_bitrates)
742 			max_bitrates = sband->n_bitrates;
743 		supp_ht = supp_ht || sband->ht_cap.ht_supported;
744 	}
745 
746 	local->int_scan_req = kzalloc(sizeof(*local->int_scan_req) +
747 				      sizeof(void *) * channels, GFP_KERNEL);
748 	if (!local->int_scan_req)
749 		return -ENOMEM;
750 
751 	/* if low-level driver supports AP, we also support VLAN */
752 	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_AP))
753 		local->hw.wiphy->interface_modes |= BIT(NL80211_IFTYPE_AP_VLAN);
754 
755 	/* mac80211 always supports monitor */
756 	local->hw.wiphy->interface_modes |= BIT(NL80211_IFTYPE_MONITOR);
757 
758 #ifndef CONFIG_MAC80211_MESH
759 	/* mesh depends on Kconfig, but drivers should set it if they want */
760 	local->hw.wiphy->interface_modes &= ~BIT(NL80211_IFTYPE_MESH_POINT);
761 #endif
762 
763 	/* mac80211 supports control port protocol changing */
764 	local->hw.wiphy->flags |= WIPHY_FLAG_CONTROL_PORT_PROTOCOL;
765 
766 	if (local->hw.flags & IEEE80211_HW_SIGNAL_DBM)
767 		local->hw.wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
768 	else if (local->hw.flags & IEEE80211_HW_SIGNAL_UNSPEC)
769 		local->hw.wiphy->signal_type = CFG80211_SIGNAL_TYPE_UNSPEC;
770 
771 	WARN((local->hw.flags & IEEE80211_HW_SUPPORTS_UAPSD)
772 	     && (local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK),
773 	     "U-APSD not supported with HW_PS_NULLFUNC_STACK\n");
774 
775 	/*
776 	 * Calculate scan IE length -- we need this to alloc
777 	 * memory and to subtract from the driver limit. It
778 	 * includes the DS Params, (extended) supported rates, and HT
779 	 * information -- SSID is the driver's responsibility.
780 	 */
781 	local->scan_ies_len = 4 + max_bitrates /* (ext) supp rates */ +
782 		3 /* DS Params */;
783 	if (supp_ht)
784 		local->scan_ies_len += 2 + sizeof(struct ieee80211_ht_cap);
785 
786 	if (!local->ops->hw_scan) {
787 		/* For hw_scan, driver needs to set these up. */
788 		local->hw.wiphy->max_scan_ssids = 4;
789 		local->hw.wiphy->max_scan_ie_len = IEEE80211_MAX_DATA_LEN;
790 	}
791 
792 	/*
793 	 * If the driver supports any scan IEs, then assume the
794 	 * limit includes the IEs mac80211 will add, otherwise
795 	 * leave it at zero and let the driver sort it out; we
796 	 * still pass our IEs to the driver but userspace will
797 	 * not be allowed to in that case.
798 	 */
799 	if (local->hw.wiphy->max_scan_ie_len)
800 		local->hw.wiphy->max_scan_ie_len -= local->scan_ies_len;
801 
802 	/* Set up cipher suites unless driver already did */
803 	if (!local->hw.wiphy->cipher_suites) {
804 		local->hw.wiphy->cipher_suites = cipher_suites;
805 		local->hw.wiphy->n_cipher_suites = ARRAY_SIZE(cipher_suites);
806 		if (!(local->hw.flags & IEEE80211_HW_MFP_CAPABLE))
807 			local->hw.wiphy->n_cipher_suites--;
808 	}
809 	if (IS_ERR(local->wep_tx_tfm) || IS_ERR(local->wep_rx_tfm)) {
810 		if (local->hw.wiphy->cipher_suites == cipher_suites) {
811 			local->hw.wiphy->cipher_suites += 2;
812 			local->hw.wiphy->n_cipher_suites -= 2;
813 		} else {
814 			u32 *suites;
815 			int r, w = 0;
816 
817 			/* Filter out WEP */
818 
819 			suites = kmemdup(
820 				local->hw.wiphy->cipher_suites,
821 				sizeof(u32) * local->hw.wiphy->n_cipher_suites,
822 				GFP_KERNEL);
823 			if (!suites)
824 				return -ENOMEM;
825 			for (r = 0; r < local->hw.wiphy->n_cipher_suites; r++) {
826 				u32 suite = local->hw.wiphy->cipher_suites[r];
827 				if (suite == WLAN_CIPHER_SUITE_WEP40 ||
828 				    suite == WLAN_CIPHER_SUITE_WEP104)
829 					continue;
830 				suites[w++] = suite;
831 			}
832 			local->hw.wiphy->cipher_suites = suites;
833 			local->hw.wiphy->n_cipher_suites = w;
834 			local->wiphy_ciphers_allocated = true;
835 		}
836 	}
837 
838 	if (!local->ops->remain_on_channel)
839 		local->hw.wiphy->max_remain_on_channel_duration = 5000;
840 
841 	result = wiphy_register(local->hw.wiphy);
842 	if (result < 0)
843 		goto fail_wiphy_register;
844 
845 	/*
846 	 * We use the number of queues for feature tests (QoS, HT) internally
847 	 * so restrict them appropriately.
848 	 */
849 	if (hw->queues > IEEE80211_MAX_QUEUES)
850 		hw->queues = IEEE80211_MAX_QUEUES;
851 
852 	local->workqueue =
853 		alloc_ordered_workqueue(wiphy_name(local->hw.wiphy), 0);
854 	if (!local->workqueue) {
855 		result = -ENOMEM;
856 		goto fail_workqueue;
857 	}
858 
859 	/*
860 	 * The hardware needs headroom for sending the frame,
861 	 * and we need some headroom for passing the frame to monitor
862 	 * interfaces, but never both at the same time.
863 	 */
864 	BUILD_BUG_ON(IEEE80211_TX_STATUS_HEADROOM !=
865 			sizeof(struct ieee80211_tx_status_rtap_hdr));
866 	local->tx_headroom = max_t(unsigned int , local->hw.extra_tx_headroom,
867 				   sizeof(struct ieee80211_tx_status_rtap_hdr));
868 
869 	debugfs_hw_add(local);
870 
871 	/*
872 	 * if the driver doesn't specify a max listen interval we
873 	 * use 5 which should be a safe default
874 	 */
875 	if (local->hw.max_listen_interval == 0)
876 		local->hw.max_listen_interval = 5;
877 
878 	local->hw.conf.listen_interval = local->hw.max_listen_interval;
879 
880 	local->dynamic_ps_forced_timeout = -1;
881 
882 	result = sta_info_start(local);
883 	if (result < 0)
884 		goto fail_sta_info;
885 
886 	result = ieee80211_wep_init(local);
887 	if (result < 0)
888 		wiphy_debug(local->hw.wiphy, "Failed to initialize wep: %d\n",
889 			    result);
890 
891 	rtnl_lock();
892 
893 	result = ieee80211_init_rate_ctrl_alg(local,
894 					      hw->rate_control_algorithm);
895 	if (result < 0) {
896 		wiphy_debug(local->hw.wiphy,
897 			    "Failed to initialize rate control algorithm\n");
898 		goto fail_rate;
899 	}
900 
901 	/* add one default STA interface if supported */
902 	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_STATION)) {
903 		result = ieee80211_if_add(local, "wlan%d", NULL,
904 					  NL80211_IFTYPE_STATION, NULL);
905 		if (result)
906 			wiphy_warn(local->hw.wiphy,
907 				   "Failed to add default virtual iface\n");
908 	}
909 
910 	rtnl_unlock();
911 
912 	ieee80211_led_init(local);
913 
914 	local->network_latency_notifier.notifier_call =
915 		ieee80211_max_network_latency;
916 	result = pm_qos_add_notifier(PM_QOS_NETWORK_LATENCY,
917 				     &local->network_latency_notifier);
918 	if (result) {
919 		rtnl_lock();
920 		goto fail_pm_qos;
921 	}
922 
923 #ifdef CONFIG_INET
924 	local->ifa_notifier.notifier_call = ieee80211_ifa_changed;
925 	result = register_inetaddr_notifier(&local->ifa_notifier);
926 	if (result)
927 		goto fail_ifa;
928 #endif
929 
930 	netif_napi_add(&local->napi_dev, &local->napi, ieee80211_napi_poll,
931 			local->hw.napi_weight);
932 
933 	return 0;
934 
935 #ifdef CONFIG_INET
936  fail_ifa:
937 	pm_qos_remove_notifier(PM_QOS_NETWORK_LATENCY,
938 			       &local->network_latency_notifier);
939 	rtnl_lock();
940 #endif
941  fail_pm_qos:
942 	ieee80211_led_exit(local);
943 	ieee80211_remove_interfaces(local);
944  fail_rate:
945 	rtnl_unlock();
946 	ieee80211_wep_free(local);
947 	sta_info_stop(local);
948  fail_sta_info:
949 	destroy_workqueue(local->workqueue);
950  fail_workqueue:
951 	wiphy_unregister(local->hw.wiphy);
952  fail_wiphy_register:
953 	if (local->wiphy_ciphers_allocated)
954 		kfree(local->hw.wiphy->cipher_suites);
955 	kfree(local->int_scan_req);
956 	return result;
957 }
958 EXPORT_SYMBOL(ieee80211_register_hw);
959 
ieee80211_unregister_hw(struct ieee80211_hw * hw)960 void ieee80211_unregister_hw(struct ieee80211_hw *hw)
961 {
962 	struct ieee80211_local *local = hw_to_local(hw);
963 
964 	tasklet_kill(&local->tx_pending_tasklet);
965 	tasklet_kill(&local->tasklet);
966 
967 	pm_qos_remove_notifier(PM_QOS_NETWORK_LATENCY,
968 			       &local->network_latency_notifier);
969 #ifdef CONFIG_INET
970 	unregister_inetaddr_notifier(&local->ifa_notifier);
971 #endif
972 
973 	rtnl_lock();
974 
975 	/*
976 	 * At this point, interface list manipulations are fine
977 	 * because the driver cannot be handing us frames any
978 	 * more and the tasklet is killed.
979 	 */
980 	ieee80211_remove_interfaces(local);
981 
982 	rtnl_unlock();
983 
984 	/*
985 	 * Now all work items will be gone, but the
986 	 * timer might still be armed, so delete it
987 	 */
988 	del_timer_sync(&local->work_timer);
989 
990 	cancel_work_sync(&local->restart_work);
991 	cancel_work_sync(&local->reconfig_filter);
992 
993 	ieee80211_clear_tx_pending(local);
994 	sta_info_stop(local);
995 	rate_control_deinitialize(local);
996 
997 	if (skb_queue_len(&local->skb_queue) ||
998 	    skb_queue_len(&local->skb_queue_unreliable))
999 		wiphy_warn(local->hw.wiphy, "skb_queue not empty\n");
1000 	skb_queue_purge(&local->skb_queue);
1001 	skb_queue_purge(&local->skb_queue_unreliable);
1002 	skb_queue_purge(&local->rx_skb_queue);
1003 
1004 	destroy_workqueue(local->workqueue);
1005 	wiphy_unregister(local->hw.wiphy);
1006 	ieee80211_wep_free(local);
1007 	ieee80211_led_exit(local);
1008 	kfree(local->int_scan_req);
1009 }
1010 EXPORT_SYMBOL(ieee80211_unregister_hw);
1011 
ieee80211_free_hw(struct ieee80211_hw * hw)1012 void ieee80211_free_hw(struct ieee80211_hw *hw)
1013 {
1014 	struct ieee80211_local *local = hw_to_local(hw);
1015 
1016 	mutex_destroy(&local->iflist_mtx);
1017 	mutex_destroy(&local->mtx);
1018 
1019 	if (local->wiphy_ciphers_allocated)
1020 		kfree(local->hw.wiphy->cipher_suites);
1021 
1022 	wiphy_free(local->hw.wiphy);
1023 }
1024 EXPORT_SYMBOL(ieee80211_free_hw);
1025 
ieee80211_init(void)1026 static int __init ieee80211_init(void)
1027 {
1028 	struct sk_buff *skb;
1029 	int ret;
1030 
1031 	BUILD_BUG_ON(sizeof(struct ieee80211_tx_info) > sizeof(skb->cb));
1032 	BUILD_BUG_ON(offsetof(struct ieee80211_tx_info, driver_data) +
1033 		     IEEE80211_TX_INFO_DRIVER_DATA_SIZE > sizeof(skb->cb));
1034 
1035 	ret = rc80211_minstrel_init();
1036 	if (ret)
1037 		return ret;
1038 
1039 	ret = rc80211_minstrel_ht_init();
1040 	if (ret)
1041 		goto err_minstrel;
1042 
1043 	ret = rc80211_pid_init();
1044 	if (ret)
1045 		goto err_pid;
1046 
1047 	ret = ieee80211_iface_init();
1048 	if (ret)
1049 		goto err_netdev;
1050 
1051 	return 0;
1052  err_netdev:
1053 	rc80211_pid_exit();
1054  err_pid:
1055 	rc80211_minstrel_ht_exit();
1056  err_minstrel:
1057 	rc80211_minstrel_exit();
1058 
1059 	return ret;
1060 }
1061 
ieee80211_exit(void)1062 static void __exit ieee80211_exit(void)
1063 {
1064 	rc80211_pid_exit();
1065 	rc80211_minstrel_ht_exit();
1066 	rc80211_minstrel_exit();
1067 
1068 	if (mesh_allocated)
1069 		ieee80211s_stop();
1070 
1071 	ieee80211_iface_exit();
1072 }
1073 
1074 
1075 subsys_initcall(ieee80211_init);
1076 module_exit(ieee80211_exit);
1077 
1078 MODULE_DESCRIPTION("IEEE 802.11 subsystem");
1079 MODULE_LICENSE("GPL");
1080