1 /*
2 * This is the linux wireless configuration interface.
3 *
4 * Copyright 2006-2010 Johannes Berg <johannes@sipsolutions.net>
5 */
6
7 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
8
9 #include <linux/if.h>
10 #include <linux/module.h>
11 #include <linux/err.h>
12 #include <linux/list.h>
13 #include <linux/slab.h>
14 #include <linux/nl80211.h>
15 #include <linux/debugfs.h>
16 #include <linux/notifier.h>
17 #include <linux/device.h>
18 #include <linux/etherdevice.h>
19 #include <linux/rtnetlink.h>
20 #include <linux/sched.h>
21 #include <net/genetlink.h>
22 #include <net/cfg80211.h>
23 #include "nl80211.h"
24 #include "core.h"
25 #include "sysfs.h"
26 #include "debugfs.h"
27 #include "wext-compat.h"
28 #include "ethtool.h"
29
30 /* name for sysfs, %d is appended */
31 #define PHY_NAME "phy"
32
33 MODULE_AUTHOR("Johannes Berg");
34 MODULE_LICENSE("GPL");
35 MODULE_DESCRIPTION("wireless configuration support");
36
37 /* RCU-protected (and cfg80211_mutex for writers) */
38 LIST_HEAD(cfg80211_rdev_list);
39 int cfg80211_rdev_list_generation;
40
41 DEFINE_MUTEX(cfg80211_mutex);
42
43 /* for debugfs */
44 static struct dentry *ieee80211_debugfs_dir;
45
46 /* for the cleanup, scan and event works */
47 struct workqueue_struct *cfg80211_wq;
48
49 static bool cfg80211_disable_40mhz_24ghz;
50 module_param(cfg80211_disable_40mhz_24ghz, bool, 0644);
51 MODULE_PARM_DESC(cfg80211_disable_40mhz_24ghz,
52 "Disable 40MHz support in the 2.4GHz band");
53
54 /* requires cfg80211_mutex to be held! */
cfg80211_rdev_by_wiphy_idx(int wiphy_idx)55 struct cfg80211_registered_device *cfg80211_rdev_by_wiphy_idx(int wiphy_idx)
56 {
57 struct cfg80211_registered_device *result = NULL, *rdev;
58
59 if (!wiphy_idx_valid(wiphy_idx))
60 return NULL;
61
62 assert_cfg80211_lock();
63
64 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
65 if (rdev->wiphy_idx == wiphy_idx) {
66 result = rdev;
67 break;
68 }
69 }
70
71 return result;
72 }
73
get_wiphy_idx(struct wiphy * wiphy)74 int get_wiphy_idx(struct wiphy *wiphy)
75 {
76 struct cfg80211_registered_device *rdev;
77 if (!wiphy)
78 return WIPHY_IDX_STALE;
79 rdev = wiphy_to_dev(wiphy);
80 return rdev->wiphy_idx;
81 }
82
83 /* requires cfg80211_rdev_mutex to be held! */
wiphy_idx_to_wiphy(int wiphy_idx)84 struct wiphy *wiphy_idx_to_wiphy(int wiphy_idx)
85 {
86 struct cfg80211_registered_device *rdev;
87
88 if (!wiphy_idx_valid(wiphy_idx))
89 return NULL;
90
91 assert_cfg80211_lock();
92
93 rdev = cfg80211_rdev_by_wiphy_idx(wiphy_idx);
94 if (!rdev)
95 return NULL;
96 return &rdev->wiphy;
97 }
98
99 /* requires cfg80211_mutex to be held! */
100 struct cfg80211_registered_device *
__cfg80211_rdev_from_info(struct genl_info * info)101 __cfg80211_rdev_from_info(struct genl_info *info)
102 {
103 int ifindex;
104 struct cfg80211_registered_device *bywiphyidx = NULL, *byifidx = NULL;
105 struct net_device *dev;
106 int err = -EINVAL;
107
108 assert_cfg80211_lock();
109
110 if (info->attrs[NL80211_ATTR_WIPHY]) {
111 bywiphyidx = cfg80211_rdev_by_wiphy_idx(
112 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY]));
113 err = -ENODEV;
114 }
115
116 if (info->attrs[NL80211_ATTR_IFINDEX]) {
117 ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
118 dev = dev_get_by_index(genl_info_net(info), ifindex);
119 if (dev) {
120 if (dev->ieee80211_ptr)
121 byifidx =
122 wiphy_to_dev(dev->ieee80211_ptr->wiphy);
123 dev_put(dev);
124 }
125 err = -ENODEV;
126 }
127
128 if (bywiphyidx && byifidx) {
129 if (bywiphyidx != byifidx)
130 return ERR_PTR(-EINVAL);
131 else
132 return bywiphyidx; /* == byifidx */
133 }
134 if (bywiphyidx)
135 return bywiphyidx;
136
137 if (byifidx)
138 return byifidx;
139
140 return ERR_PTR(err);
141 }
142
143 struct cfg80211_registered_device *
cfg80211_get_dev_from_info(struct genl_info * info)144 cfg80211_get_dev_from_info(struct genl_info *info)
145 {
146 struct cfg80211_registered_device *rdev;
147
148 mutex_lock(&cfg80211_mutex);
149 rdev = __cfg80211_rdev_from_info(info);
150
151 /* if it is not an error we grab the lock on
152 * it to assure it won't be going away while
153 * we operate on it */
154 if (!IS_ERR(rdev))
155 mutex_lock(&rdev->mtx);
156
157 mutex_unlock(&cfg80211_mutex);
158
159 return rdev;
160 }
161
162 struct cfg80211_registered_device *
cfg80211_get_dev_from_ifindex(struct net * net,int ifindex)163 cfg80211_get_dev_from_ifindex(struct net *net, int ifindex)
164 {
165 struct cfg80211_registered_device *rdev = ERR_PTR(-ENODEV);
166 struct net_device *dev;
167
168 mutex_lock(&cfg80211_mutex);
169 dev = dev_get_by_index(net, ifindex);
170 if (!dev)
171 goto out;
172 if (dev->ieee80211_ptr) {
173 rdev = wiphy_to_dev(dev->ieee80211_ptr->wiphy);
174 mutex_lock(&rdev->mtx);
175 } else
176 rdev = ERR_PTR(-ENODEV);
177 dev_put(dev);
178 out:
179 mutex_unlock(&cfg80211_mutex);
180 return rdev;
181 }
182
183 /* requires cfg80211_mutex to be held */
cfg80211_dev_rename(struct cfg80211_registered_device * rdev,char * newname)184 int cfg80211_dev_rename(struct cfg80211_registered_device *rdev,
185 char *newname)
186 {
187 struct cfg80211_registered_device *rdev2;
188 int wiphy_idx, taken = -1, result, digits;
189
190 assert_cfg80211_lock();
191
192 /* prohibit calling the thing phy%d when %d is not its number */
193 sscanf(newname, PHY_NAME "%d%n", &wiphy_idx, &taken);
194 if (taken == strlen(newname) && wiphy_idx != rdev->wiphy_idx) {
195 /* count number of places needed to print wiphy_idx */
196 digits = 1;
197 while (wiphy_idx /= 10)
198 digits++;
199 /*
200 * deny the name if it is phy<idx> where <idx> is printed
201 * without leading zeroes. taken == strlen(newname) here
202 */
203 if (taken == strlen(PHY_NAME) + digits)
204 return -EINVAL;
205 }
206
207
208 /* Ignore nop renames */
209 if (strcmp(newname, dev_name(&rdev->wiphy.dev)) == 0)
210 return 0;
211
212 /* Ensure another device does not already have this name. */
213 list_for_each_entry(rdev2, &cfg80211_rdev_list, list)
214 if (strcmp(newname, dev_name(&rdev2->wiphy.dev)) == 0)
215 return -EINVAL;
216
217 result = device_rename(&rdev->wiphy.dev, newname);
218 if (result)
219 return result;
220
221 if (rdev->wiphy.debugfsdir &&
222 !debugfs_rename(rdev->wiphy.debugfsdir->d_parent,
223 rdev->wiphy.debugfsdir,
224 rdev->wiphy.debugfsdir->d_parent,
225 newname))
226 pr_err("failed to rename debugfs dir to %s!\n", newname);
227
228 nl80211_notify_dev_rename(rdev);
229
230 return 0;
231 }
232
cfg80211_switch_netns(struct cfg80211_registered_device * rdev,struct net * net)233 int cfg80211_switch_netns(struct cfg80211_registered_device *rdev,
234 struct net *net)
235 {
236 struct wireless_dev *wdev;
237 int err = 0;
238
239 if (!(rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK))
240 return -EOPNOTSUPP;
241
242 list_for_each_entry(wdev, &rdev->netdev_list, list) {
243 wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL;
244 err = dev_change_net_namespace(wdev->netdev, net, "wlan%d");
245 if (err)
246 break;
247 wdev->netdev->features |= NETIF_F_NETNS_LOCAL;
248 }
249
250 if (err) {
251 /* failed -- clean up to old netns */
252 net = wiphy_net(&rdev->wiphy);
253
254 list_for_each_entry_continue_reverse(wdev, &rdev->netdev_list,
255 list) {
256 wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL;
257 err = dev_change_net_namespace(wdev->netdev, net,
258 "wlan%d");
259 WARN_ON(err);
260 wdev->netdev->features |= NETIF_F_NETNS_LOCAL;
261 }
262
263 return err;
264 }
265
266 wiphy_net_set(&rdev->wiphy, net);
267
268 err = device_rename(&rdev->wiphy.dev, dev_name(&rdev->wiphy.dev));
269 WARN_ON(err);
270
271 return 0;
272 }
273
cfg80211_rfkill_poll(struct rfkill * rfkill,void * data)274 static void cfg80211_rfkill_poll(struct rfkill *rfkill, void *data)
275 {
276 struct cfg80211_registered_device *rdev = data;
277
278 rdev->ops->rfkill_poll(&rdev->wiphy);
279 }
280
cfg80211_rfkill_set_block(void * data,bool blocked)281 static int cfg80211_rfkill_set_block(void *data, bool blocked)
282 {
283 struct cfg80211_registered_device *rdev = data;
284 struct wireless_dev *wdev;
285
286 if (!blocked)
287 return 0;
288
289 rtnl_lock();
290 mutex_lock(&rdev->devlist_mtx);
291
292 list_for_each_entry(wdev, &rdev->netdev_list, list)
293 dev_close(wdev->netdev);
294
295 mutex_unlock(&rdev->devlist_mtx);
296 rtnl_unlock();
297
298 return 0;
299 }
300
cfg80211_rfkill_sync_work(struct work_struct * work)301 static void cfg80211_rfkill_sync_work(struct work_struct *work)
302 {
303 struct cfg80211_registered_device *rdev;
304
305 rdev = container_of(work, struct cfg80211_registered_device, rfkill_sync);
306 cfg80211_rfkill_set_block(rdev, rfkill_blocked(rdev->rfkill));
307 }
308
cfg80211_event_work(struct work_struct * work)309 static void cfg80211_event_work(struct work_struct *work)
310 {
311 struct cfg80211_registered_device *rdev;
312
313 rdev = container_of(work, struct cfg80211_registered_device,
314 event_work);
315
316 rtnl_lock();
317 cfg80211_lock_rdev(rdev);
318
319 cfg80211_process_rdev_events(rdev);
320 cfg80211_unlock_rdev(rdev);
321 rtnl_unlock();
322 }
323
324 /* exported functions */
325
wiphy_new(const struct cfg80211_ops * ops,int sizeof_priv)326 struct wiphy *wiphy_new(const struct cfg80211_ops *ops, int sizeof_priv)
327 {
328 static int wiphy_counter;
329
330 struct cfg80211_registered_device *rdev;
331 int alloc_size;
332
333 WARN_ON(ops->add_key && (!ops->del_key || !ops->set_default_key));
334 WARN_ON(ops->auth && (!ops->assoc || !ops->deauth || !ops->disassoc));
335 WARN_ON(ops->connect && !ops->disconnect);
336 WARN_ON(ops->join_ibss && !ops->leave_ibss);
337 WARN_ON(ops->add_virtual_intf && !ops->del_virtual_intf);
338 WARN_ON(ops->add_station && !ops->del_station);
339 WARN_ON(ops->add_mpath && !ops->del_mpath);
340 WARN_ON(ops->join_mesh && !ops->leave_mesh);
341
342 alloc_size = sizeof(*rdev) + sizeof_priv;
343
344 rdev = kzalloc(alloc_size, GFP_KERNEL);
345 if (!rdev)
346 return NULL;
347
348 rdev->ops = ops;
349
350 mutex_lock(&cfg80211_mutex);
351
352 rdev->wiphy_idx = wiphy_counter++;
353
354 if (unlikely(!wiphy_idx_valid(rdev->wiphy_idx))) {
355 wiphy_counter--;
356 mutex_unlock(&cfg80211_mutex);
357 /* ugh, wrapped! */
358 kfree(rdev);
359 return NULL;
360 }
361
362 mutex_unlock(&cfg80211_mutex);
363
364 /* give it a proper name */
365 dev_set_name(&rdev->wiphy.dev, PHY_NAME "%d", rdev->wiphy_idx);
366
367 mutex_init(&rdev->mtx);
368 mutex_init(&rdev->devlist_mtx);
369 mutex_init(&rdev->sched_scan_mtx);
370 INIT_LIST_HEAD(&rdev->netdev_list);
371 spin_lock_init(&rdev->bss_lock);
372 INIT_LIST_HEAD(&rdev->bss_list);
373 INIT_WORK(&rdev->scan_done_wk, __cfg80211_scan_done);
374 INIT_WORK(&rdev->sched_scan_results_wk, __cfg80211_sched_scan_results);
375 #ifdef CONFIG_CFG80211_WEXT
376 rdev->wiphy.wext = &cfg80211_wext_handler;
377 #endif
378
379 device_initialize(&rdev->wiphy.dev);
380 rdev->wiphy.dev.class = &ieee80211_class;
381 rdev->wiphy.dev.platform_data = rdev;
382
383 #ifdef CONFIG_CFG80211_DEFAULT_PS
384 rdev->wiphy.flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
385 #endif
386
387 wiphy_net_set(&rdev->wiphy, &init_net);
388
389 rdev->rfkill_ops.set_block = cfg80211_rfkill_set_block;
390 rdev->rfkill = rfkill_alloc(dev_name(&rdev->wiphy.dev),
391 &rdev->wiphy.dev, RFKILL_TYPE_WLAN,
392 &rdev->rfkill_ops, rdev);
393
394 if (!rdev->rfkill) {
395 kfree(rdev);
396 return NULL;
397 }
398
399 INIT_WORK(&rdev->rfkill_sync, cfg80211_rfkill_sync_work);
400 INIT_WORK(&rdev->conn_work, cfg80211_conn_work);
401 INIT_WORK(&rdev->event_work, cfg80211_event_work);
402
403 init_waitqueue_head(&rdev->dev_wait);
404
405 /*
406 * Initialize wiphy parameters to IEEE 802.11 MIB default values.
407 * Fragmentation and RTS threshold are disabled by default with the
408 * special -1 value.
409 */
410 rdev->wiphy.retry_short = 7;
411 rdev->wiphy.retry_long = 4;
412 rdev->wiphy.frag_threshold = (u32) -1;
413 rdev->wiphy.rts_threshold = (u32) -1;
414 rdev->wiphy.coverage_class = 0;
415
416 return &rdev->wiphy;
417 }
418 EXPORT_SYMBOL(wiphy_new);
419
wiphy_verify_combinations(struct wiphy * wiphy)420 static int wiphy_verify_combinations(struct wiphy *wiphy)
421 {
422 const struct ieee80211_iface_combination *c;
423 int i, j;
424
425 /* If we have combinations enforce them */
426 if (wiphy->n_iface_combinations)
427 wiphy->flags |= WIPHY_FLAG_ENFORCE_COMBINATIONS;
428
429 for (i = 0; i < wiphy->n_iface_combinations; i++) {
430 u32 cnt = 0;
431 u16 all_iftypes = 0;
432
433 c = &wiphy->iface_combinations[i];
434
435 /* Combinations with just one interface aren't real */
436 if (WARN_ON(c->max_interfaces < 2))
437 return -EINVAL;
438
439 /* Need at least one channel */
440 if (WARN_ON(!c->num_different_channels))
441 return -EINVAL;
442
443 if (WARN_ON(!c->n_limits))
444 return -EINVAL;
445
446 for (j = 0; j < c->n_limits; j++) {
447 u16 types = c->limits[j].types;
448
449 /*
450 * interface types shouldn't overlap, this is
451 * used in cfg80211_can_change_interface()
452 */
453 if (WARN_ON(types & all_iftypes))
454 return -EINVAL;
455 all_iftypes |= types;
456
457 if (WARN_ON(!c->limits[j].max))
458 return -EINVAL;
459
460 /* Shouldn't list software iftypes in combinations! */
461 if (WARN_ON(wiphy->software_iftypes & types))
462 return -EINVAL;
463
464 cnt += c->limits[j].max;
465 /*
466 * Don't advertise an unsupported type
467 * in a combination.
468 */
469 if (WARN_ON((wiphy->interface_modes & types) != types))
470 return -EINVAL;
471 }
472
473 /* You can't even choose that many! */
474 if (WARN_ON(cnt < c->max_interfaces))
475 return -EINVAL;
476 }
477
478 return 0;
479 }
480
wiphy_register(struct wiphy * wiphy)481 int wiphy_register(struct wiphy *wiphy)
482 {
483 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
484 int res;
485 enum ieee80211_band band;
486 struct ieee80211_supported_band *sband;
487 bool have_band = false;
488 int i;
489 u16 ifmodes = wiphy->interface_modes;
490
491 if (WARN_ON((wiphy->wowlan.flags & WIPHY_WOWLAN_GTK_REKEY_FAILURE) &&
492 !(wiphy->wowlan.flags & WIPHY_WOWLAN_SUPPORTS_GTK_REKEY)))
493 return -EINVAL;
494
495 if (WARN_ON(wiphy->ap_sme_capa &&
496 !(wiphy->flags & WIPHY_FLAG_HAVE_AP_SME)))
497 return -EINVAL;
498
499 if (WARN_ON(wiphy->addresses && !wiphy->n_addresses))
500 return -EINVAL;
501
502 if (WARN_ON(wiphy->addresses &&
503 !is_zero_ether_addr(wiphy->perm_addr) &&
504 memcmp(wiphy->perm_addr, wiphy->addresses[0].addr,
505 ETH_ALEN)))
506 return -EINVAL;
507
508 if (wiphy->addresses)
509 memcpy(wiphy->perm_addr, wiphy->addresses[0].addr, ETH_ALEN);
510
511 /* sanity check ifmodes */
512 WARN_ON(!ifmodes);
513 ifmodes &= ((1 << NUM_NL80211_IFTYPES) - 1) & ~1;
514 if (WARN_ON(ifmodes != wiphy->interface_modes))
515 wiphy->interface_modes = ifmodes;
516
517 res = wiphy_verify_combinations(wiphy);
518 if (res)
519 return res;
520
521 /* sanity check supported bands/channels */
522 for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
523 sband = wiphy->bands[band];
524 if (!sband)
525 continue;
526
527 sband->band = band;
528
529 if (WARN_ON(!sband->n_channels || !sband->n_bitrates))
530 return -EINVAL;
531
532 /*
533 * Since cfg80211_disable_40mhz_24ghz is global, we can
534 * modify the sband's ht data even if the driver uses a
535 * global structure for that.
536 */
537 if (cfg80211_disable_40mhz_24ghz &&
538 band == IEEE80211_BAND_2GHZ &&
539 sband->ht_cap.ht_supported) {
540 sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
541 sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SGI_40;
542 }
543
544 /*
545 * Since we use a u32 for rate bitmaps in
546 * ieee80211_get_response_rate, we cannot
547 * have more than 32 legacy rates.
548 */
549 if (WARN_ON(sband->n_bitrates > 32))
550 return -EINVAL;
551
552 for (i = 0; i < sband->n_channels; i++) {
553 sband->channels[i].orig_flags =
554 sband->channels[i].flags;
555 sband->channels[i].orig_mag = INT_MAX;
556 sband->channels[i].orig_mpwr =
557 sband->channels[i].max_power;
558 sband->channels[i].band = band;
559 }
560
561 have_band = true;
562 }
563
564 if (!have_band) {
565 WARN_ON(1);
566 return -EINVAL;
567 }
568
569 if (rdev->wiphy.wowlan.n_patterns) {
570 if (WARN_ON(!rdev->wiphy.wowlan.pattern_min_len ||
571 rdev->wiphy.wowlan.pattern_min_len >
572 rdev->wiphy.wowlan.pattern_max_len))
573 return -EINVAL;
574 }
575
576 /* check and set up bitrates */
577 ieee80211_set_bitrate_flags(wiphy);
578
579 mutex_lock(&cfg80211_mutex);
580
581 res = device_add(&rdev->wiphy.dev);
582 if (res) {
583 mutex_unlock(&cfg80211_mutex);
584 return res;
585 }
586
587 /* set up regulatory info */
588 regulatory_update(wiphy, NL80211_REGDOM_SET_BY_CORE);
589
590 list_add_rcu(&rdev->list, &cfg80211_rdev_list);
591 cfg80211_rdev_list_generation++;
592
593 /* add to debugfs */
594 rdev->wiphy.debugfsdir =
595 debugfs_create_dir(wiphy_name(&rdev->wiphy),
596 ieee80211_debugfs_dir);
597 if (IS_ERR(rdev->wiphy.debugfsdir))
598 rdev->wiphy.debugfsdir = NULL;
599
600 if (wiphy->flags & WIPHY_FLAG_CUSTOM_REGULATORY) {
601 struct regulatory_request request;
602
603 request.wiphy_idx = get_wiphy_idx(wiphy);
604 request.initiator = NL80211_REGDOM_SET_BY_DRIVER;
605 request.alpha2[0] = '9';
606 request.alpha2[1] = '9';
607
608 nl80211_send_reg_change_event(&request);
609 }
610
611 cfg80211_debugfs_rdev_add(rdev);
612 mutex_unlock(&cfg80211_mutex);
613
614 /*
615 * due to a locking dependency this has to be outside of the
616 * cfg80211_mutex lock
617 */
618 res = rfkill_register(rdev->rfkill);
619 if (res)
620 goto out_rm_dev;
621
622 rtnl_lock();
623 rdev->wiphy.registered = true;
624 rtnl_unlock();
625 return 0;
626
627 out_rm_dev:
628 device_del(&rdev->wiphy.dev);
629 return res;
630 }
631 EXPORT_SYMBOL(wiphy_register);
632
wiphy_rfkill_start_polling(struct wiphy * wiphy)633 void wiphy_rfkill_start_polling(struct wiphy *wiphy)
634 {
635 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
636
637 if (!rdev->ops->rfkill_poll)
638 return;
639 rdev->rfkill_ops.poll = cfg80211_rfkill_poll;
640 rfkill_resume_polling(rdev->rfkill);
641 }
642 EXPORT_SYMBOL(wiphy_rfkill_start_polling);
643
wiphy_rfkill_stop_polling(struct wiphy * wiphy)644 void wiphy_rfkill_stop_polling(struct wiphy *wiphy)
645 {
646 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
647
648 rfkill_pause_polling(rdev->rfkill);
649 }
650 EXPORT_SYMBOL(wiphy_rfkill_stop_polling);
651
wiphy_unregister(struct wiphy * wiphy)652 void wiphy_unregister(struct wiphy *wiphy)
653 {
654 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
655
656 rtnl_lock();
657 rdev->wiphy.registered = false;
658 rtnl_unlock();
659
660 rfkill_unregister(rdev->rfkill);
661
662 /* protect the device list */
663 mutex_lock(&cfg80211_mutex);
664
665 wait_event(rdev->dev_wait, ({
666 int __count;
667 mutex_lock(&rdev->devlist_mtx);
668 __count = rdev->opencount;
669 mutex_unlock(&rdev->devlist_mtx);
670 __count == 0;}));
671
672 mutex_lock(&rdev->devlist_mtx);
673 BUG_ON(!list_empty(&rdev->netdev_list));
674 mutex_unlock(&rdev->devlist_mtx);
675
676 /*
677 * First remove the hardware from everywhere, this makes
678 * it impossible to find from userspace.
679 */
680 debugfs_remove_recursive(rdev->wiphy.debugfsdir);
681 list_del_rcu(&rdev->list);
682 synchronize_rcu();
683
684 /*
685 * Try to grab rdev->mtx. If a command is still in progress,
686 * hopefully the driver will refuse it since it's tearing
687 * down the device already. We wait for this command to complete
688 * before unlinking the item from the list.
689 * Note: as codified by the BUG_ON above we cannot get here if
690 * a virtual interface is still present. Hence, we can only get
691 * to lock contention here if userspace issues a command that
692 * identified the hardware by wiphy index.
693 */
694 cfg80211_lock_rdev(rdev);
695 /* nothing */
696 cfg80211_unlock_rdev(rdev);
697
698 /* If this device got a regulatory hint tell core its
699 * free to listen now to a new shiny device regulatory hint */
700 reg_device_remove(wiphy);
701
702 cfg80211_rdev_list_generation++;
703 device_del(&rdev->wiphy.dev);
704
705 mutex_unlock(&cfg80211_mutex);
706
707 flush_work(&rdev->scan_done_wk);
708 cancel_work_sync(&rdev->conn_work);
709 flush_work(&rdev->event_work);
710 }
711 EXPORT_SYMBOL(wiphy_unregister);
712
cfg80211_dev_free(struct cfg80211_registered_device * rdev)713 void cfg80211_dev_free(struct cfg80211_registered_device *rdev)
714 {
715 struct cfg80211_internal_bss *scan, *tmp;
716 rfkill_destroy(rdev->rfkill);
717 mutex_destroy(&rdev->mtx);
718 mutex_destroy(&rdev->devlist_mtx);
719 mutex_destroy(&rdev->sched_scan_mtx);
720 list_for_each_entry_safe(scan, tmp, &rdev->bss_list, list)
721 cfg80211_put_bss(&scan->pub);
722 cfg80211_rdev_free_wowlan(rdev);
723 kfree(rdev);
724 }
725
wiphy_free(struct wiphy * wiphy)726 void wiphy_free(struct wiphy *wiphy)
727 {
728 put_device(&wiphy->dev);
729 }
730 EXPORT_SYMBOL(wiphy_free);
731
wiphy_rfkill_set_hw_state(struct wiphy * wiphy,bool blocked)732 void wiphy_rfkill_set_hw_state(struct wiphy *wiphy, bool blocked)
733 {
734 struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
735
736 if (rfkill_set_hw_state(rdev->rfkill, blocked))
737 schedule_work(&rdev->rfkill_sync);
738 }
739 EXPORT_SYMBOL(wiphy_rfkill_set_hw_state);
740
wdev_cleanup_work(struct work_struct * work)741 static void wdev_cleanup_work(struct work_struct *work)
742 {
743 struct wireless_dev *wdev;
744 struct cfg80211_registered_device *rdev;
745
746 wdev = container_of(work, struct wireless_dev, cleanup_work);
747 rdev = wiphy_to_dev(wdev->wiphy);
748
749 cfg80211_lock_rdev(rdev);
750
751 if (WARN_ON(rdev->scan_req && rdev->scan_req->dev == wdev->netdev)) {
752 rdev->scan_req->aborted = true;
753 ___cfg80211_scan_done(rdev, true);
754 }
755
756 cfg80211_unlock_rdev(rdev);
757
758 mutex_lock(&rdev->sched_scan_mtx);
759
760 if (WARN_ON(rdev->sched_scan_req &&
761 rdev->sched_scan_req->dev == wdev->netdev)) {
762 __cfg80211_stop_sched_scan(rdev, false);
763 }
764
765 mutex_unlock(&rdev->sched_scan_mtx);
766
767 mutex_lock(&rdev->devlist_mtx);
768 rdev->opencount--;
769 mutex_unlock(&rdev->devlist_mtx);
770 wake_up(&rdev->dev_wait);
771
772 dev_put(wdev->netdev);
773 }
774
775 static struct device_type wiphy_type = {
776 .name = "wlan",
777 };
778
cfg80211_netdev_notifier_call(struct notifier_block * nb,unsigned long state,void * ndev)779 static int cfg80211_netdev_notifier_call(struct notifier_block * nb,
780 unsigned long state,
781 void *ndev)
782 {
783 struct net_device *dev = ndev;
784 struct wireless_dev *wdev = dev->ieee80211_ptr;
785 struct cfg80211_registered_device *rdev;
786 int ret;
787
788 if (!wdev)
789 return NOTIFY_DONE;
790
791 rdev = wiphy_to_dev(wdev->wiphy);
792
793 WARN_ON(wdev->iftype == NL80211_IFTYPE_UNSPECIFIED);
794
795 switch (state) {
796 case NETDEV_POST_INIT:
797 SET_NETDEV_DEVTYPE(dev, &wiphy_type);
798 break;
799 case NETDEV_REGISTER:
800 /*
801 * NB: cannot take rdev->mtx here because this may be
802 * called within code protected by it when interfaces
803 * are added with nl80211.
804 */
805 mutex_init(&wdev->mtx);
806 INIT_WORK(&wdev->cleanup_work, wdev_cleanup_work);
807 INIT_LIST_HEAD(&wdev->event_list);
808 spin_lock_init(&wdev->event_lock);
809 INIT_LIST_HEAD(&wdev->mgmt_registrations);
810 spin_lock_init(&wdev->mgmt_registrations_lock);
811
812 mutex_lock(&rdev->devlist_mtx);
813 list_add_rcu(&wdev->list, &rdev->netdev_list);
814 rdev->devlist_generation++;
815 /* can only change netns with wiphy */
816 dev->features |= NETIF_F_NETNS_LOCAL;
817
818 if (sysfs_create_link(&dev->dev.kobj, &rdev->wiphy.dev.kobj,
819 "phy80211")) {
820 pr_err("failed to add phy80211 symlink to netdev!\n");
821 }
822 wdev->netdev = dev;
823 wdev->sme_state = CFG80211_SME_IDLE;
824 mutex_unlock(&rdev->devlist_mtx);
825 #ifdef CONFIG_CFG80211_WEXT
826 wdev->wext.default_key = -1;
827 wdev->wext.default_mgmt_key = -1;
828 wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
829 #endif
830
831 if (wdev->wiphy->flags & WIPHY_FLAG_PS_ON_BY_DEFAULT)
832 wdev->ps = true;
833 else
834 wdev->ps = false;
835 /* allow mac80211 to determine the timeout */
836 wdev->ps_timeout = -1;
837
838 if (!dev->ethtool_ops)
839 dev->ethtool_ops = &cfg80211_ethtool_ops;
840
841 if ((wdev->iftype == NL80211_IFTYPE_STATION ||
842 wdev->iftype == NL80211_IFTYPE_P2P_CLIENT ||
843 wdev->iftype == NL80211_IFTYPE_ADHOC) && !wdev->use_4addr)
844 dev->priv_flags |= IFF_DONT_BRIDGE;
845 break;
846 case NETDEV_GOING_DOWN:
847 switch (wdev->iftype) {
848 case NL80211_IFTYPE_ADHOC:
849 cfg80211_leave_ibss(rdev, dev, true);
850 break;
851 case NL80211_IFTYPE_P2P_CLIENT:
852 case NL80211_IFTYPE_STATION:
853 mutex_lock(&rdev->sched_scan_mtx);
854 __cfg80211_stop_sched_scan(rdev, false);
855 mutex_unlock(&rdev->sched_scan_mtx);
856
857 wdev_lock(wdev);
858 #ifdef CONFIG_CFG80211_WEXT
859 kfree(wdev->wext.ie);
860 wdev->wext.ie = NULL;
861 wdev->wext.ie_len = 0;
862 wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
863 #endif
864 __cfg80211_disconnect(rdev, dev,
865 WLAN_REASON_DEAUTH_LEAVING, true);
866 cfg80211_mlme_down(rdev, dev);
867 wdev_unlock(wdev);
868 break;
869 case NL80211_IFTYPE_MESH_POINT:
870 cfg80211_leave_mesh(rdev, dev);
871 break;
872 default:
873 break;
874 }
875 wdev->beacon_interval = 0;
876 break;
877 case NETDEV_DOWN:
878 dev_hold(dev);
879 queue_work(cfg80211_wq, &wdev->cleanup_work);
880 break;
881 case NETDEV_UP:
882 /*
883 * If we have a really quick DOWN/UP succession we may
884 * have this work still pending ... cancel it and see
885 * if it was pending, in which case we need to account
886 * for some of the work it would have done.
887 */
888 if (cancel_work_sync(&wdev->cleanup_work)) {
889 mutex_lock(&rdev->devlist_mtx);
890 rdev->opencount--;
891 mutex_unlock(&rdev->devlist_mtx);
892 dev_put(dev);
893 }
894 cfg80211_lock_rdev(rdev);
895 mutex_lock(&rdev->devlist_mtx);
896 wdev_lock(wdev);
897 switch (wdev->iftype) {
898 #ifdef CONFIG_CFG80211_WEXT
899 case NL80211_IFTYPE_ADHOC:
900 cfg80211_ibss_wext_join(rdev, wdev);
901 break;
902 case NL80211_IFTYPE_STATION:
903 cfg80211_mgd_wext_connect(rdev, wdev);
904 break;
905 #endif
906 #ifdef CONFIG_MAC80211_MESH
907 case NL80211_IFTYPE_MESH_POINT:
908 {
909 /* backward compat code... */
910 struct mesh_setup setup;
911 memcpy(&setup, &default_mesh_setup,
912 sizeof(setup));
913 /* back compat only needed for mesh_id */
914 setup.mesh_id = wdev->ssid;
915 setup.mesh_id_len = wdev->mesh_id_up_len;
916 if (wdev->mesh_id_up_len)
917 __cfg80211_join_mesh(rdev, dev,
918 &setup,
919 &default_mesh_config);
920 break;
921 }
922 #endif
923 default:
924 break;
925 }
926 wdev_unlock(wdev);
927 rdev->opencount++;
928 mutex_unlock(&rdev->devlist_mtx);
929 cfg80211_unlock_rdev(rdev);
930
931 /*
932 * Configure power management to the driver here so that its
933 * correctly set also after interface type changes etc.
934 */
935 if ((wdev->iftype == NL80211_IFTYPE_STATION ||
936 wdev->iftype == NL80211_IFTYPE_P2P_CLIENT) &&
937 rdev->ops->set_power_mgmt)
938 if (rdev->ops->set_power_mgmt(wdev->wiphy, dev,
939 wdev->ps,
940 wdev->ps_timeout)) {
941 /* assume this means it's off */
942 wdev->ps = false;
943 }
944 break;
945 case NETDEV_UNREGISTER:
946 /*
947 * NB: cannot take rdev->mtx here because this may be
948 * called within code protected by it when interfaces
949 * are removed with nl80211.
950 */
951 mutex_lock(&rdev->devlist_mtx);
952 /*
953 * It is possible to get NETDEV_UNREGISTER
954 * multiple times. To detect that, check
955 * that the interface is still on the list
956 * of registered interfaces, and only then
957 * remove and clean it up.
958 */
959 if (!list_empty(&wdev->list)) {
960 sysfs_remove_link(&dev->dev.kobj, "phy80211");
961 list_del_rcu(&wdev->list);
962 rdev->devlist_generation++;
963 cfg80211_mlme_purge_registrations(wdev);
964 #ifdef CONFIG_CFG80211_WEXT
965 kfree(wdev->wext.keys);
966 #endif
967 }
968 mutex_unlock(&rdev->devlist_mtx);
969 /*
970 * synchronise (so that we won't find this netdev
971 * from other code any more) and then clear the list
972 * head so that the above code can safely check for
973 * !list_empty() to avoid double-cleanup.
974 */
975 synchronize_rcu();
976 INIT_LIST_HEAD(&wdev->list);
977 /*
978 * Ensure that all events have been processed and
979 * freed.
980 */
981 cfg80211_process_wdev_events(wdev);
982 break;
983 case NETDEV_PRE_UP:
984 if (!(wdev->wiphy->interface_modes & BIT(wdev->iftype)))
985 return notifier_from_errno(-EOPNOTSUPP);
986 if (rfkill_blocked(rdev->rfkill))
987 return notifier_from_errno(-ERFKILL);
988 ret = cfg80211_can_add_interface(rdev, wdev->iftype);
989 if (ret)
990 return notifier_from_errno(ret);
991 break;
992 }
993
994 return NOTIFY_DONE;
995 }
996
997 static struct notifier_block cfg80211_netdev_notifier = {
998 .notifier_call = cfg80211_netdev_notifier_call,
999 };
1000
cfg80211_pernet_exit(struct net * net)1001 static void __net_exit cfg80211_pernet_exit(struct net *net)
1002 {
1003 struct cfg80211_registered_device *rdev;
1004
1005 rtnl_lock();
1006 mutex_lock(&cfg80211_mutex);
1007 list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
1008 if (net_eq(wiphy_net(&rdev->wiphy), net))
1009 WARN_ON(cfg80211_switch_netns(rdev, &init_net));
1010 }
1011 mutex_unlock(&cfg80211_mutex);
1012 rtnl_unlock();
1013 }
1014
1015 static struct pernet_operations cfg80211_pernet_ops = {
1016 .exit = cfg80211_pernet_exit,
1017 };
1018
cfg80211_init(void)1019 static int __init cfg80211_init(void)
1020 {
1021 int err;
1022
1023 err = register_pernet_device(&cfg80211_pernet_ops);
1024 if (err)
1025 goto out_fail_pernet;
1026
1027 err = wiphy_sysfs_init();
1028 if (err)
1029 goto out_fail_sysfs;
1030
1031 err = register_netdevice_notifier(&cfg80211_netdev_notifier);
1032 if (err)
1033 goto out_fail_notifier;
1034
1035 err = nl80211_init();
1036 if (err)
1037 goto out_fail_nl80211;
1038
1039 ieee80211_debugfs_dir = debugfs_create_dir("ieee80211", NULL);
1040
1041 err = regulatory_init();
1042 if (err)
1043 goto out_fail_reg;
1044
1045 cfg80211_wq = create_singlethread_workqueue("cfg80211");
1046 if (!cfg80211_wq)
1047 goto out_fail_wq;
1048
1049 return 0;
1050
1051 out_fail_wq:
1052 regulatory_exit();
1053 out_fail_reg:
1054 debugfs_remove(ieee80211_debugfs_dir);
1055 out_fail_nl80211:
1056 unregister_netdevice_notifier(&cfg80211_netdev_notifier);
1057 out_fail_notifier:
1058 wiphy_sysfs_exit();
1059 out_fail_sysfs:
1060 unregister_pernet_device(&cfg80211_pernet_ops);
1061 out_fail_pernet:
1062 return err;
1063 }
1064 subsys_initcall(cfg80211_init);
1065
cfg80211_exit(void)1066 static void __exit cfg80211_exit(void)
1067 {
1068 debugfs_remove(ieee80211_debugfs_dir);
1069 nl80211_exit();
1070 unregister_netdevice_notifier(&cfg80211_netdev_notifier);
1071 wiphy_sysfs_exit();
1072 regulatory_exit();
1073 unregister_pernet_device(&cfg80211_pernet_ops);
1074 destroy_workqueue(cfg80211_wq);
1075 }
1076 module_exit(cfg80211_exit);
1077