net/mac80211/iface.c

   1 /*
   2  * Interface handling (except master interface)
   3  *
   4  * Copyright 2002-2005, Instant802 Networks, Inc.
   5  * Copyright 2005-2006, Devicescape Software, Inc.
   6  * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
   7  * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
   8  *
   9  * This program is free software; you can redistribute it and/or modify
  10  * it under the terms of the GNU General Public License version 2 as
  11  * published by the Free Software Foundation.
  12  */
  13 #include <linux/slab.h>
  14 #include <linux/kernel.h>
  15 #include <linux/if_arp.h>
  16 #include <linux/netdevice.h>
  17 #include <linux/rtnetlink.h>
  18 #include <net/mac80211.h>
  19 #include <net/ieee80211_radiotap.h>
  20 #include "ieee80211_i.h"
  21 #include "sta_info.h"
  22 #include "debugfs_netdev.h"
  23 #include "mesh.h"
  24 #include "led.h"
  25 #include "driver-ops.h"
  26 #include "wme.h"
  27 #include "rate.h"
  28
  29 /**
  30  * DOC: Interface list locking
  31  *
  32  * The interface list in each struct ieee80211_local is protected
  33  * three-fold:
  34  *
  35  * (1) modifications may only be done under the RTNL
  36  * (2) modifications and readers are protected against each other by
  37  *     the iflist_mtx.
  38  * (3) modifications are done in an RCU manner so atomic readers
  39  *     can traverse the list in RCU-safe blocks.
  40  *
  41  * As a consequence, reads (traversals) of the list can be protected
  42  * by either the RTNL, the iflist_mtx or RCU.
  43  */
  44
  45
  46 static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
  47 {
  48         int meshhdrlen;
  49         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
  50
  51         meshhdrlen = (sdata->vif.type == NL80211_IFTYPE_MESH_POINT) ? 5 : 0;
  52
  53         /* FIX: what would be proper limits for MTU?
  54          * This interface uses 802.3 frames. */
  55         if (new_mtu < 256 ||
  56             new_mtu > IEEE80211_MAX_DATA_LEN - 24 - 6 - meshhdrlen) {
  57                 return -EINVAL;
  58         }
  59
  60 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
  61         printk(KERN_DEBUG "%s: setting MTU %d\n", dev->name, new_mtu);
  62 #endif /* CONFIG_MAC80211_VERBOSE_DEBUG */
  63         dev->mtu = new_mtu;
  64         return 0;
  65 }
  66
  67 static int ieee80211_change_mac(struct net_device *dev, void *addr)
  68 {
  69         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
  70         struct sockaddr *sa = addr;
  71         int ret;
  72
  73         if (ieee80211_sdata_running(sdata))
  74                 return -EBUSY;
  75
  76         ret = eth_mac_addr(dev, sa);
  77
  78         if (ret == 0)
  79                 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
  80
  81         return ret;
  82 }
  83
  84 static inline int identical_mac_addr_allowed(int type1, int type2)
  85 {
  86         return type1 == NL80211_IFTYPE_MONITOR ||
  87                 type2 == NL80211_IFTYPE_MONITOR ||
  88                 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) ||
  89                 (type1 == NL80211_IFTYPE_WDS &&
  90                         (type2 == NL80211_IFTYPE_WDS ||
  91                          type2 == NL80211_IFTYPE_AP)) ||
  92                 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
  93                 (type1 == NL80211_IFTYPE_AP_VLAN &&
  94                         (type2 == NL80211_IFTYPE_AP ||
  95                          type2 == NL80211_IFTYPE_AP_VLAN));
  96 }
  97
  98 static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
  99                                             enum nl80211_iftype iftype)
 100 {
 101         struct ieee80211_local *local = sdata->local;
 102         struct ieee80211_sub_if_data *nsdata;
 103         struct net_device *dev = sdata->dev;
 104
 105         ASSERT_RTNL();
 106
 107         /* we hold the RTNL here so can safely walk the list */
 108         list_for_each_entry(nsdata, &local->interfaces, list) {
 109                 struct net_device *ndev = nsdata->dev;
 110
 111                 if (ndev != dev && ieee80211_sdata_running(nsdata)) {
 112                         /*
 113                          * Allow only a single IBSS interface to be up at any
 114                          * time. This is restricted because beacon distribution
 115                          * cannot work properly if both are in the same IBSS.
 116                          *
 117                          * To remove this restriction we'd have to disallow them
 118                          * from setting the same SSID on different IBSS interfaces
 119                          * belonging to the same hardware. Then, however, we're
 120                          * faced with having to adopt two different TSF timers...
 121                          */
 122                         if (iftype == NL80211_IFTYPE_ADHOC &&
 123                             nsdata->vif.type == NL80211_IFTYPE_ADHOC)
 124                                 return -EBUSY;
 125
 126                         /*
 127                          * The remaining checks are only performed for interfaces
 128                          * with the same MAC address.
 129                          */
 130                         if (!ether_addr_equal(dev->dev_addr, ndev->dev_addr))
 131                                 continue;
 132
 133                         /*
 134                          * check whether it may have the same address
 135                          */
 136                         if (!identical_mac_addr_allowed(iftype,
 137                                                         nsdata->vif.type))
 138                                 return -ENOTUNIQ;
 139
 140                         /*
 141                          * can only add VLANs to enabled APs
 142                          */
 143                         if (iftype == NL80211_IFTYPE_AP_VLAN &&
 144                             nsdata->vif.type == NL80211_IFTYPE_AP)
 145                                 sdata->bss = &nsdata->u.ap;
 146                 }
 147         }
 148
 149         return 0;
 150 }
 151
 152 static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata)
 153 {
 154         int n_queues = sdata->local->hw.queues;
 155         int i;
 156
 157         for (i = 0; i < IEEE80211_NUM_ACS; i++) {
 158                 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
 159                                  IEEE80211_INVAL_HW_QUEUE))
 160                         return -EINVAL;
 161                 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
 162                                  n_queues))
 163                         return -EINVAL;
 164         }
 165
 166         if ((sdata->vif.type != NL80211_IFTYPE_AP) ||
 167             !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) {
 168                 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
 169                 return 0;
 170         }
 171
 172         if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
 173                 return -EINVAL;
 174
 175         if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
 176                 return -EINVAL;
 177
 178         return 0;
 179 }
 180
 181 void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
 182                                     const int offset)
 183 {
 184         struct ieee80211_local *local = sdata->local;
 185         u32 flags = sdata->u.mntr_flags;
 186
 187 #define ADJUST(_f, _s)  do {                                    \
 188         if (flags & MONITOR_FLAG_##_f)                          \
 189                 local->fif_##_s += offset;                      \
 190         } while (0)
 191
 192         ADJUST(FCSFAIL, fcsfail);
 193         ADJUST(PLCPFAIL, plcpfail);
 194         ADJUST(CONTROL, control);
 195         ADJUST(CONTROL, pspoll);
 196         ADJUST(OTHER_BSS, other_bss);
 197
 198 #undef ADJUST
 199 }
 200
 201 static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
 202 {
 203         struct ieee80211_local *local = sdata->local;
 204         int i;
 205
 206         for (i = 0; i < IEEE80211_NUM_ACS; i++) {
 207                 if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
 208                         sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
 209                 else
 210                         sdata->vif.hw_queue[i] = i;
 211         }
 212         sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
 213 }
 214
 215 static int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
 216 {
 217         struct ieee80211_sub_if_data *sdata;
 218         int ret;
 219
 220         if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
 221                 return 0;
 222
 223         if (local->monitor_sdata)
 224                 return 0;
 225
 226         sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
 227         if (!sdata)
 228                 return -ENOMEM;
 229
 230         /* set up data */
 231         sdata->local = local;
 232         sdata->vif.type = NL80211_IFTYPE_MONITOR;
 233         snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
 234                  wiphy_name(local->hw.wiphy));
 235
 236         ieee80211_set_default_queues(sdata);
 237
 238         ret = drv_add_interface(local, sdata);
 239         if (WARN_ON(ret)) {
 240                 /* ok .. stupid driver, it asked for this! */
 241                 kfree(sdata);
 242                 return ret;
 243         }
 244
 245         ret = ieee80211_check_queues(sdata);
 246         if (ret) {
 247                 kfree(sdata);
 248                 return ret;
 249         }
 250
 251         rcu_assign_pointer(local->monitor_sdata, sdata);
 252
 253         return 0;
 254 }
 255
 256 static void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
 257 {
 258         struct ieee80211_sub_if_data *sdata;
 259
 260         if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
 261                 return;
 262
 263         sdata = rtnl_dereference(local->monitor_sdata);
 264
 265         if (!sdata)
 266                 return;
 267
 268         rcu_assign_pointer(local->monitor_sdata, NULL);
 269         synchronize_net();
 270
 271         drv_remove_interface(local, sdata);
 272
 273         kfree(sdata);
 274 }
 275
 276 /*
 277  * NOTE: Be very careful when changing this function, it must NOT return
 278  * an error on interface type changes that have been pre-checked, so most
 279  * checks should be in ieee80211_check_concurrent_iface.
 280  */
 281 static int ieee80211_do_open(struct net_device *dev, bool coming_up)
 282 {
 283         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 284         struct ieee80211_local *local = sdata->local;
 285         struct sta_info *sta;
 286         u32 changed = 0;
 287         int res;
 288         u32 hw_reconf_flags = 0;
 289
 290         switch (sdata->vif.type) {
 291         case NL80211_IFTYPE_WDS:
 292                 if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
 293                         return -ENOLINK;
 294                 break;
 295         case NL80211_IFTYPE_AP_VLAN: {
 296                 struct ieee80211_sub_if_data *master;
 297
 298                 if (!sdata->bss)
 299                         return -ENOLINK;
 300
 301                 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
 302
 303                 master = container_of(sdata->bss,
 304                                       struct ieee80211_sub_if_data, u.ap);
 305                 sdata->control_port_protocol =
 306                         master->control_port_protocol;
 307                 sdata->control_port_no_encrypt =
 308                         master->control_port_no_encrypt;
 309                 break;
 310                 }
 311         case NL80211_IFTYPE_AP:
 312                 sdata->bss = &sdata->u.ap;
 313                 break;
 314         case NL80211_IFTYPE_MESH_POINT:
 315         case NL80211_IFTYPE_STATION:
 316         case NL80211_IFTYPE_MONITOR:
 317         case NL80211_IFTYPE_ADHOC:
 318                 /* no special treatment */
 319                 break;
 320         case NL80211_IFTYPE_UNSPECIFIED:
 321         case NUM_NL80211_IFTYPES:
 322         case NL80211_IFTYPE_P2P_CLIENT:
 323         case NL80211_IFTYPE_P2P_GO:
 324                 /* cannot happen */
 325                 WARN_ON(1);
 326                 break;
 327         }
 328
 329         if (local->open_count == 0) {
 330                 res = drv_start(local);
 331                 if (res)
 332                         goto err_del_bss;
 333                 if (local->ops->napi_poll)
 334                         napi_enable(&local->napi);
 335                 /* we're brought up, everything changes */
 336                 hw_reconf_flags = ~0;
 337                 ieee80211_led_radio(local, true);
 338                 ieee80211_mod_tpt_led_trig(local,
 339                                            IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
 340         }
 341
 342         /*
 343          * Copy the hopefully now-present MAC address to
 344          * this interface, if it has the special null one.
 345          */
 346         if (is_zero_ether_addr(dev->dev_addr)) {
 347                 memcpy(dev->dev_addr,
 348                        local->hw.wiphy->perm_addr,
 349                        ETH_ALEN);
 350                 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
 351
 352                 if (!is_valid_ether_addr(dev->dev_addr)) {
 353                         res = -EADDRNOTAVAIL;
 354                         goto err_stop;
 355                 }
 356         }
 357
 358         switch (sdata->vif.type) {
 359         case NL80211_IFTYPE_AP_VLAN:
 360                 /* no need to tell driver, but set carrier */
 361                 if (rtnl_dereference(sdata->bss->beacon))
 362                         netif_carrier_on(dev);
 363                 else
 364                         netif_carrier_off(dev);
 365                 break;
 366         case NL80211_IFTYPE_MONITOR:
 367                 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
 368                         local->cooked_mntrs++;
 369                         break;
 370                 }
 371
 372                 if (local->monitors == 0 && local->open_count == 0) {
 373                         res = ieee80211_add_virtual_monitor(local);
 374                         if (res)
 375                                 goto err_stop;
 376                 }
 377
 378                 /* must be before the call to ieee80211_configure_filter */
 379                 local->monitors++;
 380                 if (local->monitors == 1) {
 381                         local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
 382                         hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
 383                 }
 384
 385                 ieee80211_adjust_monitor_flags(sdata, 1);
 386                 ieee80211_configure_filter(local);
 387
 388                 netif_carrier_on(dev);
 389                 break;
 390         default:
 391                 if (coming_up) {
 392                         ieee80211_del_virtual_monitor(local);
 393
 394                         res = drv_add_interface(local, sdata);
 395                         if (res)
 396                                 goto err_stop;
 397                         res = ieee80211_check_queues(sdata);
 398                         if (res)
 399                                 goto err_del_interface;
 400                 }
 401
 402                 if (sdata->vif.type == NL80211_IFTYPE_AP) {
 403                         local->fif_pspoll++;
 404                         local->fif_probe_req++;
 405
 406                         ieee80211_configure_filter(local);
 407                 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
 408                         local->fif_probe_req++;
 409                 }
 410
 411                 changed |= ieee80211_reset_erp_info(sdata);
 412                 ieee80211_bss_info_change_notify(sdata, changed);
 413
 414                 if (sdata->vif.type == NL80211_IFTYPE_STATION ||
 415                     sdata->vif.type == NL80211_IFTYPE_ADHOC ||
 416                     sdata->vif.type == NL80211_IFTYPE_AP)
 417                         netif_carrier_off(dev);
 418                 else
 419                         netif_carrier_on(dev);
 420
 421                 /*
 422                  * set default queue parameters so drivers don't
 423                  * need to initialise the hardware if the hardware
 424                  * doesn't start up with sane defaults
 425                  */
 426                 ieee80211_set_wmm_default(sdata, true);
 427         }
 428
 429         set_bit(SDATA_STATE_RUNNING, &sdata->state);
 430
 431         if (sdata->vif.type == NL80211_IFTYPE_WDS) {
 432                 /* Create STA entry for the WDS peer */
 433                 sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
 434                                      GFP_KERNEL);
 435                 if (!sta) {
 436                         res = -ENOMEM;
 437                         goto err_del_interface;
 438                 }
 439
 440                 sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
 441                 sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
 442                 sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
 443
 444                 res = sta_info_insert(sta);
 445                 if (res) {
 446                         /* STA has been freed */
 447                         goto err_del_interface;
 448                 }
 449
 450                 rate_control_rate_init(sta);
 451         }
 452
 453         /*
 454          * set_multicast_list will be invoked by the networking core
 455          * which will check whether any increments here were done in
 456          * error and sync them down to the hardware as filter flags.
 457          */
 458         if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
 459                 atomic_inc(&local->iff_allmultis);
 460
 461         if (sdata->flags & IEEE80211_SDATA_PROMISC)
 462                 atomic_inc(&local->iff_promiscs);
 463
 464         mutex_lock(&local->mtx);
 465         hw_reconf_flags |= __ieee80211_recalc_idle(local);
 466         mutex_unlock(&local->mtx);
 467
 468         if (coming_up)
 469                 local->open_count++;
 470
 471         if (hw_reconf_flags)
 472                 ieee80211_hw_config(local, hw_reconf_flags);
 473
 474         ieee80211_recalc_ps(local, -1);
 475
 476         netif_tx_start_all_queues(dev);
 477
 478         return 0;
 479  err_del_interface:
 480         drv_remove_interface(local, sdata);
 481  err_stop:
 482         if (!local->open_count)
 483                 drv_stop(local);
 484  err_del_bss:
 485         sdata->bss = NULL;
 486         if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
 487                 list_del(&sdata->u.vlan.list);
 488         /* might already be clear but that doesn't matter */
 489         clear_bit(SDATA_STATE_RUNNING, &sdata->state);
 490         return res;
 491 }
 492
 493 static int ieee80211_open(struct net_device *dev)
 494 {
 495         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 496         int err;
 497
 498         /* fail early if user set an invalid address */
 499         if (!is_valid_ether_addr(dev->dev_addr))
 500                 return -EADDRNOTAVAIL;
 501
 502         err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
 503         if (err)
 504                 return err;
 505
 506         return ieee80211_do_open(dev, true);
 507 }
 508
 509 static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata,
 510                               bool going_down)
 511 {
 512         struct ieee80211_local *local = sdata->local;
 513         unsigned long flags;
 514         struct sk_buff *skb, *tmp;
 515         u32 hw_reconf_flags = 0;
 516         int i;
 517         enum nl80211_channel_type orig_ct;
 518
 519         clear_bit(SDATA_STATE_RUNNING, &sdata->state);
 520
 521         if (local->scan_sdata == sdata)
 522                 ieee80211_scan_cancel(local);
 523
 524         /*
 525          * Stop TX on this interface first.
 526          */
 527         netif_tx_stop_all_queues(sdata->dev);
 528
 529         /*
 530          * Purge work for this interface.
 531          */
 532         ieee80211_work_purge(sdata);
 533
 534         /*
 535          * Remove all stations associated with this interface.
 536          *
 537          * This must be done before calling ops->remove_interface()
 538          * because otherwise we can later invoke ops->sta_notify()
 539          * whenever the STAs are removed, and that invalidates driver
 540          * assumptions about always getting a vif pointer that is valid
 541          * (because if we remove a STA after ops->remove_interface()
 542          * the driver will have removed the vif info already!)
 543          *
 544          * This is relevant only in AP, WDS and mesh modes, since in
 545          * all other modes we've already removed all stations when
 546          * disconnecting etc.
 547          */
 548         sta_info_flush(local, sdata);
 549
 550         /*
 551          * Don't count this interface for promisc/allmulti while it
 552          * is down. dev_mc_unsync() will invoke set_multicast_list
 553          * on the master interface which will sync these down to the
 554          * hardware as filter flags.
 555          */
 556         if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
 557                 atomic_dec(&local->iff_allmultis);
 558
 559         if (sdata->flags & IEEE80211_SDATA_PROMISC)
 560                 atomic_dec(&local->iff_promiscs);
 561
 562         if (sdata->vif.type == NL80211_IFTYPE_AP) {
 563                 local->fif_pspoll--;
 564                 local->fif_probe_req--;
 565         } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
 566                 local->fif_probe_req--;
 567         }
 568
 569         netif_addr_lock_bh(sdata->dev);
 570         spin_lock_bh(&local->filter_lock);
 571         __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
 572                          sdata->dev->addr_len);
 573         spin_unlock_bh(&local->filter_lock);
 574         netif_addr_unlock_bh(sdata->dev);
 575
 576         ieee80211_configure_filter(local);
 577
 578         del_timer_sync(&local->dynamic_ps_timer);
 579         cancel_work_sync(&local->dynamic_ps_enable_work);
 580
 581         /* APs need special treatment */
 582         if (sdata->vif.type == NL80211_IFTYPE_AP) {
 583                 struct ieee80211_sub_if_data *vlan, *tmpsdata;
 584                 struct beacon_data *old_beacon =
 585                         rtnl_dereference(sdata->u.ap.beacon);
 586                 struct sk_buff *old_probe_resp =
 587                         rtnl_dereference(sdata->u.ap.probe_resp);
 588
 589                 /* sdata_running will return false, so this will disable */
 590                 ieee80211_bss_info_change_notify(sdata,
 591                                                  BSS_CHANGED_BEACON_ENABLED);
 592
 593                 /* remove beacon and probe response */
 594                 RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
 595                 RCU_INIT_POINTER(sdata->u.ap.probe_resp, NULL);
 596                 synchronize_rcu();
 597                 kfree(old_beacon);
 598                 kfree_skb(old_probe_resp);
 599
 600                 /* down all dependent devices, that is VLANs */
 601                 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
 602                                          u.vlan.list)
 603                         dev_close(vlan->dev);
 604                 WARN_ON(!list_empty(&sdata->u.ap.vlans));
 605
 606                 /* free all potentially still buffered bcast frames */
 607                 local->total_ps_buffered -= skb_queue_len(&sdata->u.ap.ps_bc_buf);
 608                 skb_queue_purge(&sdata->u.ap.ps_bc_buf);
 609         } else if (sdata->vif.type == NL80211_IFTYPE_STATION) {
 610                 ieee80211_mgd_stop(sdata);
 611         }
 612
 613         if (going_down)
 614                 local->open_count--;
 615
 616         switch (sdata->vif.type) {
 617         case NL80211_IFTYPE_AP_VLAN:
 618                 list_del(&sdata->u.vlan.list);
 619                 /* no need to tell driver */
 620                 break;
 621         case NL80211_IFTYPE_MONITOR:
 622                 if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
 623                         local->cooked_mntrs--;
 624                         break;
 625                 }
 626
 627                 local->monitors--;
 628                 if (local->monitors == 0) {
 629                         local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
 630                         hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
 631                         ieee80211_del_virtual_monitor(local);
 632                 }
 633
 634                 ieee80211_adjust_monitor_flags(sdata, -1);
 635                 ieee80211_configure_filter(local);
 636                 break;
 637         default:
 638                 flush_work(&sdata->work);
 639                 /*
 640                  * When we get here, the interface is marked down.
 641                  * Call synchronize_rcu() to wait for the RX path
 642                  * should it be using the interface and enqueuing
 643                  * frames at this very time on another CPU.
 644                  */
 645                 synchronize_rcu();
 646                 skb_queue_purge(&sdata->skb_queue);
 647
 648                 /*
 649                  * Disable beaconing here for mesh only, AP and IBSS
 650                  * are already taken care of.
 651                  */
 652                 if (sdata->vif.type == NL80211_IFTYPE_MESH_POINT)
 653                         ieee80211_bss_info_change_notify(sdata,
 654                                 BSS_CHANGED_BEACON_ENABLED);
 655
 656                 /*
 657                  * Free all remaining keys, there shouldn't be any,
 658                  * except maybe group keys in AP more or WDS?
 659                  */
 660                 ieee80211_free_keys(sdata);
 661
 662                 if (going_down)
 663                         drv_remove_interface(local, sdata);
 664         }
 665
 666         sdata->bss = NULL;
 667
 668         mutex_lock(&local->mtx);
 669         hw_reconf_flags |= __ieee80211_recalc_idle(local);
 670         mutex_unlock(&local->mtx);
 671
 672         ieee80211_recalc_ps(local, -1);
 673
 674         if (local->open_count == 0) {
 675                 if (local->ops->napi_poll)
 676                         napi_disable(&local->napi);
 677                 ieee80211_clear_tx_pending(local);
 678                 ieee80211_stop_device(local);
 679
 680                 /* no reconfiguring after stop! */
 681                 hw_reconf_flags = 0;
 682         }
 683
 684         /* Re-calculate channel-type, in case there are multiple vifs
 685          * on different channel types.
 686          */
 687         orig_ct = local->_oper_channel_type;
 688         ieee80211_set_channel_type(local, NULL, NL80211_CHAN_NO_HT);
 689
 690         /* do after stop to avoid reconfiguring when we stop anyway */
 691         if (hw_reconf_flags || (orig_ct != local->_oper_channel_type))
 692                 ieee80211_hw_config(local, hw_reconf_flags);
 693
 694         spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
 695         for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
 696                 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
 697                         struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
 698                         if (info->control.vif == &sdata->vif) {
 699                                 __skb_unlink(skb, &local->pending[i]);
 700                                 dev_kfree_skb_irq(skb);
 701                         }
 702                 }
 703         }
 704         spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
 705
 706         if (local->monitors == local->open_count && local->monitors > 0)
 707                 ieee80211_add_virtual_monitor(local);
 708 }
 709
 710 static int ieee80211_stop(struct net_device *dev)
 711 {
 712         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 713
 714         ieee80211_do_stop(sdata, true);
 715
 716         return 0;
 717 }
 718
 719 static void ieee80211_set_multicast_list(struct net_device *dev)
 720 {
 721         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 722         struct ieee80211_local *local = sdata->local;
 723         int allmulti, promisc, sdata_allmulti, sdata_promisc;
 724
 725         allmulti = !!(dev->flags & IFF_ALLMULTI);
 726         promisc = !!(dev->flags & IFF_PROMISC);
 727         sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
 728         sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);
 729
 730         if (allmulti != sdata_allmulti) {
 731                 if (dev->flags & IFF_ALLMULTI)
 732                         atomic_inc(&local->iff_allmultis);
 733                 else
 734                         atomic_dec(&local->iff_allmultis);
 735                 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
 736         }
 737
 738         if (promisc != sdata_promisc) {
 739                 if (dev->flags & IFF_PROMISC)
 740                         atomic_inc(&local->iff_promiscs);
 741                 else
 742                         atomic_dec(&local->iff_promiscs);
 743                 sdata->flags ^= IEEE80211_SDATA_PROMISC;
 744         }
 745         spin_lock_bh(&local->filter_lock);
 746         __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
 747         spin_unlock_bh(&local->filter_lock);
 748         ieee80211_queue_work(&local->hw, &local->reconfig_filter);
 749 }
 750
 751 /*
 752  * Called when the netdev is removed or, by the code below, before
 753  * the interface type changes.
 754  */
 755 static void ieee80211_teardown_sdata(struct net_device *dev)
 756 {
 757         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 758         struct ieee80211_local *local = sdata->local;
 759         int flushed;
 760         int i;
 761
 762         /* free extra data */
 763         ieee80211_free_keys(sdata);
 764
 765         ieee80211_debugfs_remove_netdev(sdata);
 766
 767         for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
 768                 __skb_queue_purge(&sdata->fragments[i].skb_list);
 769         sdata->fragment_next = 0;
 770
 771         if (ieee80211_vif_is_mesh(&sdata->vif))
 772                 mesh_rmc_free(sdata);
 773
 774         flushed = sta_info_flush(local, sdata);
 775         WARN_ON(flushed);
 776 }
 777
 778 static u16 ieee80211_netdev_select_queue(struct net_device *dev,
 779                                          struct sk_buff *skb)
 780 {
 781         return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb);
 782 }
 783
 784 static const struct net_device_ops ieee80211_dataif_ops = {
 785         .ndo_open               = ieee80211_open,
 786         .ndo_stop               = ieee80211_stop,
 787         .ndo_uninit             = ieee80211_teardown_sdata,
 788         .ndo_start_xmit         = ieee80211_subif_start_xmit,
 789         .ndo_set_rx_mode        = ieee80211_set_multicast_list,
 790         .ndo_change_mtu         = ieee80211_change_mtu,
 791         .ndo_set_mac_address    = ieee80211_change_mac,
 792         .ndo_select_queue       = ieee80211_netdev_select_queue,
 793 };
 794
 795 static u16 ieee80211_monitor_select_queue(struct net_device *dev,
 796                                           struct sk_buff *skb)
 797 {
 798         struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
 799         struct ieee80211_local *local = sdata->local;
 800         struct ieee80211_hdr *hdr;
 801         struct ieee80211_radiotap_header *rtap = (void *)skb->data;
 802
 803         if (local->hw.queues < IEEE80211_NUM_ACS)
 804                 return 0;
 805
 806         if (skb->len < 4 ||
 807             skb->len < le16_to_cpu(rtap->it_len) + 2 /* frame control */)
 808                 return 0; /* doesn't matter, frame will be dropped */
 809
 810         hdr = (void *)((u8 *)skb->data + le16_to_cpu(rtap->it_len));
 811
 812         return ieee80211_select_queue_80211(local, skb, hdr);
 813 }
 814
 815 static const struct net_device_ops ieee80211_monitorif_ops = {
 816         .ndo_open               = ieee80211_open,
 817         .ndo_stop               = ieee80211_stop,
 818         .ndo_uninit             = ieee80211_teardown_sdata,
 819         .ndo_start_xmit         = ieee80211_monitor_start_xmit,
 820         .ndo_set_rx_mode        = ieee80211_set_multicast_list,
 821         .ndo_change_mtu         = ieee80211_change_mtu,
 822         .ndo_set_mac_address    = eth_mac_addr,
 823         .ndo_select_queue       = ieee80211_monitor_select_queue,
 824 };
 825
 826 static void ieee80211_if_setup(struct net_device *dev)
 827 {
 828         ether_setup(dev);
 829         dev->priv_flags &= ~IFF_TX_SKB_SHARING;
 830         dev->netdev_ops = &ieee80211_dataif_ops;
 831         dev->destructor = free_netdev;
 832 }
 833
 834 static void ieee80211_iface_work(struct work_struct *work)
 835 {
 836         struct ieee80211_sub_if_data *sdata =
 837                 container_of(work, struct ieee80211_sub_if_data, work);
 838         struct ieee80211_local *local = sdata->local;
 839         struct sk_buff *skb;
 840         struct sta_info *sta;
 841         struct ieee80211_ra_tid *ra_tid;
 842
 843         if (!ieee80211_sdata_running(sdata))
 844                 return;
 845
 846         if (local->scanning)
 847                 return;
 848
 849         /*
 850          * ieee80211_queue_work() should have picked up most cases,
 851          * here we'll pick the rest.
 852          */
 853         if (WARN(local->suspended,
 854                  "interface work scheduled while going to suspend\n"))
 855                 return;
 856
 857         /* first process frames */
 858         while ((skb = skb_dequeue(&sdata->skb_queue))) {
 859                 struct ieee80211_mgmt *mgmt = (void *)skb->data;
 860
 861                 if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_START) {
 862                         ra_tid = (void *)&skb->cb;
 863                         ieee80211_start_tx_ba_cb(&sdata->vif, ra_tid->ra,
 864                                                  ra_tid->tid);
 865                 } else if (skb->pkt_type == IEEE80211_SDATA_QUEUE_AGG_STOP) {
 866                         ra_tid = (void *)&skb->cb;
 867                         ieee80211_stop_tx_ba_cb(&sdata->vif, ra_tid->ra,
 868                                                 ra_tid->tid);
 869                 } else if (ieee80211_is_action(mgmt->frame_control) &&
 870                            mgmt->u.action.category == WLAN_CATEGORY_BACK) {
 871                         int len = skb->len;
 872
 873                         mutex_lock(&local->sta_mtx);
 874                         sta = sta_info_get_bss(sdata, mgmt->sa);
 875                         if (sta) {
 876                                 switch (mgmt->u.action.u.addba_req.action_code) {
 877                                 case WLAN_ACTION_ADDBA_REQ:
 878                                         ieee80211_process_addba_request(
 879                                                         local, sta, mgmt, len);
 880                                         break;
 881                                 case WLAN_ACTION_ADDBA_RESP:
 882                                         ieee80211_process_addba_resp(local, sta,
 883                                                                      mgmt, len);
 884                                         break;
 885                                 case WLAN_ACTION_DELBA:
 886                                         ieee80211_process_delba(sdata, sta,
 887                                                                 mgmt, len);
 888                                         break;
 889                                 default:
 890                                         WARN_ON(1);
 891                                         break;
 892                                 }
 893                         }
 894                         mutex_unlock(&local->sta_mtx);
 895                 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
 896                         struct ieee80211_hdr *hdr = (void *)mgmt;
 897                         /*
 898                          * So the frame isn't mgmt, but frame_control
 899                          * is at the right place anyway, of course, so
 900                          * the if statement is correct.
 901                          *
 902                          * Warn if we have other data frame types here,
 903                          * they must not get here.
 904                          */
 905                         WARN_ON(hdr->frame_control &
 906                                         cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
 907                         WARN_ON(!(hdr->seq_ctrl &
 908                                         cpu_to_le16(IEEE80211_SCTL_FRAG)));
 909                         /*
 910                          * This was a fragment of a frame, received while
 911                          * a block-ack session was active. That cannot be
 912                          * right, so terminate the session.
 913                          */
 914                         mutex_lock(&local->sta_mtx);
 915                         sta = sta_info_get_bss(sdata, mgmt->sa);
 916                         if (sta) {
 917                                 u16 tid = *ieee80211_get_qos_ctl(hdr) &
 918                                                 IEEE80211_QOS_CTL_TID_MASK;
 919
 920                                 __ieee80211_stop_rx_ba_session(
 921                                         sta, tid, WLAN_BACK_RECIPIENT,
 922                                         WLAN_REASON_QSTA_REQUIRE_SETUP,
 923                                         true);
 924                         }
 925                         mutex_unlock(&local->sta_mtx);
 926                 } else switch (sdata->vif.type) {
 927                 case NL80211_IFTYPE_STATION:
 928                         ieee80211_sta_rx_queued_mgmt(sdata, skb);
 929                         break;
 930                 case NL80211_IFTYPE_ADHOC:
 931                         ieee80211_ibss_rx_queued_mgmt(sdata, skb);
 932                         break;
 933                 case NL80211_IFTYPE_MESH_POINT:
 934                         if (!ieee80211_vif_is_mesh(&sdata->vif))
 935                                 break;
 936                         ieee80211_mesh_rx_queued_mgmt(sdata, skb);
 937                         break;
 938                 default:
 939                         WARN(1, "frame for unexpected interface type");
 940                         break;
 941                 }
 942
 943                 kfree_skb(skb);
 944         }
 945
 946         /* then other type-dependent work */
 947         switch (sdata->vif.type) {
 948         case NL80211_IFTYPE_STATION:
 949                 ieee80211_sta_work(sdata);
 950                 break;
 951         case NL80211_IFTYPE_ADHOC:
 952                 ieee80211_ibss_work(sdata);
 953                 break;
 954         case NL80211_IFTYPE_MESH_POINT:
 955                 if (!ieee80211_vif_is_mesh(&sdata->vif))
 956                         break;
 957                 ieee80211_mesh_work(sdata);
 958                 break;
 959         default:
 960                 break;
 961         }
 962 }
 963
 964
 965 /*
 966  * Helper function to initialise an interface to a specific type.
 967  */
 968 static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
 969                                   enum nl80211_iftype type)
 970 {
 971         /* clear type-dependent union */
 972         memset(&sdata->u, 0, sizeof(sdata->u));
 973
 974         /* and set some type-dependent values */
 975         sdata->vif.type = type;
 976         sdata->vif.p2p = false;
 977         sdata->dev->netdev_ops = &ieee80211_dataif_ops;
 978         sdata->wdev.iftype = type;
 979
 980         sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
 981         sdata->control_port_no_encrypt = false;
 982
 983         sdata->noack_map = 0;
 984
 985         /* only monitor differs */
 986         sdata->dev->type = ARPHRD_ETHER;
 987
 988         skb_queue_head_init(&sdata->skb_queue);
 989         INIT_WORK(&sdata->work, ieee80211_iface_work);
 990
 991         switch (type) {
 992         case NL80211_IFTYPE_P2P_GO:
 993                 type = NL80211_IFTYPE_AP;
 994                 sdata->vif.type = type;
 995                 sdata->vif.p2p = true;
 996                 /* fall through */
 997         case NL80211_IFTYPE_AP:
 998                 skb_queue_head_init(&sdata->u.ap.ps_bc_buf);
 999                 INIT_LIST_HEAD(&sdata->u.ap.vlans);
1000                 break;
1001         case NL80211_IFTYPE_P2P_CLIENT:
1002                 type = NL80211_IFTYPE_STATION;
1003                 sdata->vif.type = type;
1004                 sdata->vif.p2p = true;
1005                 /* fall through */
1006         case NL80211_IFTYPE_STATION:
1007                 ieee80211_sta_setup_sdata(sdata);
1008                 break;
1009         case NL80211_IFTYPE_ADHOC:
1010                 ieee80211_ibss_setup_sdata(sdata);
1011                 break;
1012         case NL80211_IFTYPE_MESH_POINT:
1013                 if (ieee80211_vif_is_mesh(&sdata->vif))
1014                         ieee80211_mesh_init_sdata(sdata);
1015                 break;
1016         case NL80211_IFTYPE_MONITOR:
1017                 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
1018                 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
1019                 sdata->u.mntr_flags = MONITOR_FLAG_CONTROL |
1020                                       MONITOR_FLAG_OTHER_BSS;
1021                 break;
1022         case NL80211_IFTYPE_WDS:
1023         case NL80211_IFTYPE_AP_VLAN:
1024                 break;
1025         case NL80211_IFTYPE_UNSPECIFIED:
1026         case NUM_NL80211_IFTYPES:
1027                 BUG();
1028                 break;
1029         }
1030
1031         ieee80211_debugfs_add_netdev(sdata);
1032 }
1033
1034 static void ieee80211_clean_sdata(struct ieee80211_sub_if_data *sdata)
1035 {
1036         switch (sdata->vif.type) {
1037         case NL80211_IFTYPE_MESH_POINT:
1038                 mesh_path_flush_by_iface(sdata);
1039                 break;
1040
1041         default:
1042                 break;
1043         }
1044 }
1045
1046 static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1047                                            enum nl80211_iftype type)
1048 {
1049         struct ieee80211_local *local = sdata->local;
1050         int ret, err;
1051         enum nl80211_iftype internal_type = type;
1052         bool p2p = false;
1053
1054         ASSERT_RTNL();
1055
1056         if (!local->ops->change_interface)
1057                 return -EBUSY;
1058
1059         switch (sdata->vif.type) {
1060         case NL80211_IFTYPE_AP:
1061         case NL80211_IFTYPE_STATION:
1062         case NL80211_IFTYPE_ADHOC:
1063                 /*
1064                  * Could maybe also all others here?
1065                  * Just not sure how that interacts
1066                  * with the RX/config path e.g. for
1067                  * mesh.
1068                  */
1069                 break;
1070         default:
1071                 return -EBUSY;
1072         }
1073
1074         switch (type) {
1075         case NL80211_IFTYPE_AP:
1076         case NL80211_IFTYPE_STATION:
1077         case NL80211_IFTYPE_ADHOC:
1078                 /*
1079                  * Could probably support everything
1080                  * but WDS here (WDS do_open can fail
1081                  * under memory pressure, which this
1082                  * code isn't prepared to handle).
1083                  */
1084                 break;
1085         case NL80211_IFTYPE_P2P_CLIENT:
1086                 p2p = true;
1087                 internal_type = NL80211_IFTYPE_STATION;
1088                 break;
1089         case NL80211_IFTYPE_P2P_GO:
1090                 p2p = true;
1091                 internal_type = NL80211_IFTYPE_AP;
1092                 break;
1093         default:
1094                 return -EBUSY;
1095         }
1096
1097         ret = ieee80211_check_concurrent_iface(sdata, internal_type);
1098         if (ret)
1099                 return ret;
1100
1101         ieee80211_do_stop(sdata, false);
1102
1103         ieee80211_teardown_sdata(sdata->dev);
1104
1105         ret = drv_change_interface(local, sdata, internal_type, p2p);
1106         if (ret)
1107                 type = sdata->vif.type;
1108
1109         /*
1110          * Ignore return value here, there's not much we can do since
1111          * the driver changed the interface type internally already.
1112          * The warnings will hopefully make driver authors fix it :-)
1113          */
1114         ieee80211_check_queues(sdata);
1115
1116         ieee80211_setup_sdata(sdata, type);
1117
1118         err = ieee80211_do_open(sdata->dev, false);
1119         WARN(err, "type change: do_open returned %d", err);
1120
1121         return ret;
1122 }
1123
1124 int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
1125                              enum nl80211_iftype type)
1126 {
1127         int ret;
1128
1129         ASSERT_RTNL();
1130
1131         if (type == ieee80211_vif_type_p2p(&sdata->vif))
1132                 return 0;
1133
1134         /* Setting ad-hoc mode on non-IBSS channel is not supported. */
1135         if (sdata->local->oper_channel->flags & IEEE80211_CHAN_NO_IBSS &&
1136             type == NL80211_IFTYPE_ADHOC)
1137                 return -EOPNOTSUPP;
1138
1139         if (ieee80211_sdata_running(sdata)) {
1140                 ret = ieee80211_runtime_change_iftype(sdata, type);
1141                 if (ret)
1142                         return ret;
1143         } else {
1144                 /* Purge and reset type-dependent state. */
1145                 ieee80211_teardown_sdata(sdata->dev);
1146                 ieee80211_setup_sdata(sdata, type);
1147         }
1148
1149         /* reset some values that shouldn't be kept across type changes */
1150         sdata->vif.bss_conf.basic_rates =
1151                 ieee80211_mandatory_rates(sdata->local,
1152                         sdata->local->hw.conf.channel->band);
1153         sdata->drop_unencrypted = 0;
1154         if (type == NL80211_IFTYPE_STATION)
1155                 sdata->u.mgd.use_4addr = false;
1156
1157         return 0;
1158 }
1159
1160 static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
1161                                        struct net_device *dev,
1162                                        enum nl80211_iftype type)
1163 {
1164         struct ieee80211_sub_if_data *sdata;
1165         u64 mask, start, addr, val, inc;
1166         u8 *m;
1167         u8 tmp_addr[ETH_ALEN];
1168         int i;
1169
1170         /* default ... something at least */
1171         memcpy(dev->perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
1172
1173         if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1174             local->hw.wiphy->n_addresses <= 1)
1175                 return;
1176
1177
1178         mutex_lock(&local->iflist_mtx);
1179
1180         switch (type) {
1181         case NL80211_IFTYPE_MONITOR:
1182                 /* doesn't matter */
1183                 break;
1184         case NL80211_IFTYPE_WDS:
1185         case NL80211_IFTYPE_AP_VLAN:
1186                 /* match up with an AP interface */
1187                 list_for_each_entry(sdata, &local->interfaces, list) {
1188                         if (sdata->vif.type != NL80211_IFTYPE_AP)
1189                                 continue;
1190                         memcpy(dev->perm_addr, sdata->vif.addr, ETH_ALEN);
1191                         break;
1192                 }
1193                 /* keep default if no AP interface present */
1194                 break;
1195         default:
1196                 /* assign a new address if possible -- try n_addresses first */
1197                 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1198                         bool used = false;
1199
1200                         list_for_each_entry(sdata, &local->interfaces, list) {
1201                                 if (memcmp(local->hw.wiphy->addresses[i].addr,
1202                                            sdata->vif.addr, ETH_ALEN) == 0) {
1203                                         used = true;
1204                                         break;
1205                                 }
1206                         }
1207
1208                         if (!used) {
1209                                 memcpy(dev->perm_addr,
1210                                        local->hw.wiphy->addresses[i].addr,
1211                                        ETH_ALEN);
1212                                 break;
1213                         }
1214                 }
1215
1216                 /* try mask if available */
1217                 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
1218                         break;
1219
1220                 m = local->hw.wiphy->addr_mask;
1221                 mask =  ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1222                         ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1223                         ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1224
1225                 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
1226                         /* not a contiguous mask ... not handled now! */
1227                         printk(KERN_DEBUG "not contiguous\n");
1228                         break;
1229                 }
1230
1231                 m = local->hw.wiphy->perm_addr;
1232                 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1233                         ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1234                         ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1235
1236                 inc = 1ULL<<__ffs64(mask);
1237                 val = (start & mask);
1238                 addr = (start & ~mask) | (val & mask);
1239                 do {
1240                         bool used = false;
1241
1242                         tmp_addr[5] = addr >> 0*8;
1243                         tmp_addr[4] = addr >> 1*8;
1244                         tmp_addr[3] = addr >> 2*8;
1245                         tmp_addr[2] = addr >> 3*8;
1246                         tmp_addr[1] = addr >> 4*8;
1247                         tmp_addr[0] = addr >> 5*8;
1248
1249                         val += inc;
1250
1251                         list_for_each_entry(sdata, &local->interfaces, list) {
1252                                 if (memcmp(tmp_addr, sdata->vif.addr,
1253                                                         ETH_ALEN) == 0) {
1254                                         used = true;
1255                                         break;
1256                                 }
1257                         }
1258
1259                         if (!used) {
1260                                 memcpy(dev->perm_addr, tmp_addr, ETH_ALEN);
1261                                 break;
1262                         }
1263                         addr = (start & ~mask) | (val & mask);
1264                 } while (addr != start);
1265
1266                 break;
1267         }
1268
1269         mutex_unlock(&local->iflist_mtx);
1270 }
1271
1272 int ieee80211_if_add(struct ieee80211_local *local, const char *name,
1273                      struct net_device **new_dev, enum nl80211_iftype type,
1274                      struct vif_params *params)
1275 {
1276         struct net_device *ndev;
1277         struct ieee80211_sub_if_data *sdata = NULL;
1278         int ret, i;
1279         int txqs = 1;
1280
1281         ASSERT_RTNL();
1282
1283         if (local->hw.queues >= IEEE80211_NUM_ACS)
1284                 txqs = IEEE80211_NUM_ACS;
1285
1286         ndev = alloc_netdev_mqs(sizeof(*sdata) + local->hw.vif_data_size,
1287                                 name, ieee80211_if_setup, txqs, 1);
1288         if (!ndev)
1289                 return -ENOMEM;
1290         dev_net_set(ndev, wiphy_net(local->hw.wiphy));
1291
1292         ndev->needed_headroom = local->tx_headroom +
1293                                 4*6 /* four MAC addresses */
1294                                 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
1295                                 + 6 /* mesh */
1296                                 + 8 /* rfc1042/bridge tunnel */
1297                                 - ETH_HLEN /* ethernet hard_header_len */
1298                                 + IEEE80211_ENCRYPT_HEADROOM;
1299         ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
1300
1301         ret = dev_alloc_name(ndev, ndev->name);
1302         if (ret < 0)
1303                 goto fail;
1304
1305         ieee80211_assign_perm_addr(local, ndev, type);
1306         memcpy(ndev->dev_addr, ndev->perm_addr, ETH_ALEN);
1307         SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
1308
1309         /* don't use IEEE80211_DEV_TO_SUB_IF because it checks too much */
1310         sdata = netdev_priv(ndev);
1311         ndev->ieee80211_ptr = &sdata->wdev;
1312         memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
1313         memcpy(sdata->name, ndev->name, IFNAMSIZ);
1314
1315         /* initialise type-independent data */
1316         sdata->wdev.wiphy = local->hw.wiphy;
1317         sdata->local = local;
1318         sdata->dev = ndev;
1319 #ifdef CONFIG_INET
1320         sdata->arp_filter_state = true;
1321 #endif
1322
1323         for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1324                 skb_queue_head_init(&sdata->fragments[i].skb_list);
1325
1326         INIT_LIST_HEAD(&sdata->key_list);
1327
1328         for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
1329                 struct ieee80211_supported_band *sband;
1330                 sband = local->hw.wiphy->bands[i];
1331                 sdata->rc_rateidx_mask[i] =
1332                         sband ? (1 << sband->n_bitrates) - 1 : 0;
1333                 if (sband)
1334                         memcpy(sdata->rc_rateidx_mcs_mask[i],
1335                                sband->ht_cap.mcs.rx_mask,
1336                                sizeof(sdata->rc_rateidx_mcs_mask[i]));
1337                 else
1338                         memset(sdata->rc_rateidx_mcs_mask[i], 0,
1339                                sizeof(sdata->rc_rateidx_mcs_mask[i]));
1340         }
1341
1342         ieee80211_set_default_queues(sdata);
1343
1344         /* setup type-dependent data */
1345         ieee80211_setup_sdata(sdata, type);
1346
1347         if (params) {
1348                 ndev->ieee80211_ptr->use_4addr = params->use_4addr;
1349                 if (type == NL80211_IFTYPE_STATION)
1350                         sdata->u.mgd.use_4addr = params->use_4addr;
1351         }
1352
1353         ret = register_netdevice(ndev);
1354         if (ret)
1355                 goto fail;
1356
1357         mutex_lock(&local->iflist_mtx);
1358         list_add_tail_rcu(&sdata->list, &local->interfaces);
1359         mutex_unlock(&local->iflist_mtx);
1360
1361         if (new_dev)
1362                 *new_dev = ndev;
1363
1364         return 0;
1365
1366  fail:
1367         free_netdev(ndev);
1368         return ret;
1369 }
1370
1371 void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
1372 {
1373         ASSERT_RTNL();
1374
1375         mutex_lock(&sdata->local->iflist_mtx);
1376         list_del_rcu(&sdata->list);
1377         mutex_unlock(&sdata->local->iflist_mtx);
1378
1379         /* clean up type-dependent data */
1380         ieee80211_clean_sdata(sdata);
1381
1382         synchronize_rcu();
1383         unregister_netdevice(sdata->dev);
1384 }
1385
1386 /*
1387  * Remove all interfaces, may only be called at hardware unregistration
1388  * time because it doesn't do RCU-safe list removals.
1389  */
1390 void ieee80211_remove_interfaces(struct ieee80211_local *local)
1391 {
1392         struct ieee80211_sub_if_data *sdata, *tmp;
1393         LIST_HEAD(unreg_list);
1394
1395         ASSERT_RTNL();
1396
1397         mutex_lock(&local->iflist_mtx);
1398         list_for_each_entry_safe(sdata, tmp, &local->interfaces, list) {
1399                 list_del(&sdata->list);
1400
1401                 ieee80211_clean_sdata(sdata);
1402
1403                 unregister_netdevice_queue(sdata->dev, &unreg_list);
1404         }
1405         mutex_unlock(&local->iflist_mtx);
1406         unregister_netdevice_many(&unreg_list);
1407         list_del(&unreg_list);
1408 }
1409
1410 static u32 ieee80211_idle_off(struct ieee80211_local *local,
1411                               const char *reason)
1412 {
1413         if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
1414                 return 0;
1415
1416 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
1417         wiphy_debug(local->hw.wiphy, "device no longer idle - %s\n", reason);
1418 #endif
1419
1420         local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
1421         return IEEE80211_CONF_CHANGE_IDLE;
1422 }
1423
1424 static u32 ieee80211_idle_on(struct ieee80211_local *local)
1425 {
1426         if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
1427                 return 0;
1428
1429 #ifdef CONFIG_MAC80211_VERBOSE_DEBUG
1430         wiphy_debug(local->hw.wiphy, "device now idle\n");
1431 #endif
1432
1433         drv_flush(local, false);
1434
1435         local->hw.conf.flags |= IEEE80211_CONF_IDLE;
1436         return IEEE80211_CONF_CHANGE_IDLE;
1437 }
1438
1439 u32 __ieee80211_recalc_idle(struct ieee80211_local *local)
1440 {
1441         struct ieee80211_sub_if_data *sdata;
1442         int count = 0;
1443         bool working = false, scanning = false, hw_roc = false;
1444         struct ieee80211_work *wk;
1445         unsigned int led_trig_start = 0, led_trig_stop = 0;
1446
1447 #ifdef CONFIG_PROVE_LOCKING
1448         WARN_ON(debug_locks && !lockdep_rtnl_is_held() &&
1449                 !lockdep_is_held(&local->iflist_mtx));
1450 #endif
1451         lockdep_assert_held(&local->mtx);
1452
1453         list_for_each_entry(sdata, &local->interfaces, list) {
1454                 if (!ieee80211_sdata_running(sdata)) {
1455                         sdata->vif.bss_conf.idle = true;
1456                         continue;
1457                 }
1458
1459                 sdata->old_idle = sdata->vif.bss_conf.idle;
1460
1461                 /* do not count disabled managed interfaces */
1462                 if (sdata->vif.type == NL80211_IFTYPE_STATION &&
1463                     !sdata->u.mgd.associated &&
1464                     !sdata->u.mgd.auth_data &&
1465                     !sdata->u.mgd.assoc_data) {
1466                         sdata->vif.bss_conf.idle = true;
1467                         continue;
1468                 }
1469                 /* do not count unused IBSS interfaces */
1470                 if (sdata->vif.type == NL80211_IFTYPE_ADHOC &&
1471                     !sdata->u.ibss.ssid_len) {
1472                         sdata->vif.bss_conf.idle = true;
1473                         continue;
1474                 }
1475                 /* count everything else */
1476                 sdata->vif.bss_conf.idle = false;
1477                 count++;
1478         }
1479
1480         list_for_each_entry(wk, &local->work_list, list) {
1481                 working = true;
1482                 wk->sdata->vif.bss_conf.idle = false;
1483         }
1484
1485         if (local->scan_sdata &&
1486             !(local->hw.flags & IEEE80211_HW_SCAN_WHILE_IDLE)) {
1487                 scanning = true;
1488                 local->scan_sdata->vif.bss_conf.idle = false;
1489         }
1490
1491         if (local->hw_roc_channel)
1492                 hw_roc = true;
1493
1494         list_for_each_entry(sdata, &local->interfaces, list) {
1495                 if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
1496                     sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
1497                         continue;
1498                 if (sdata->old_idle == sdata->vif.bss_conf.idle)
1499                         continue;
1500                 if (!ieee80211_sdata_running(sdata))
1501                         continue;
1502                 ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_IDLE);
1503         }
1504
1505         if (working || scanning || hw_roc)
1506                 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
1507         else
1508                 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
1509
1510         if (count)
1511                 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
1512         else
1513                 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
1514
1515         ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
1516
1517         if (hw_roc)
1518                 return ieee80211_idle_off(local, "hw remain-on-channel");
1519         if (working)
1520                 return ieee80211_idle_off(local, "working");
1521         if (scanning)
1522                 return ieee80211_idle_off(local, "scanning");
1523         if (!count)
1524                 return ieee80211_idle_on(local);
1525         else
1526                 return ieee80211_idle_off(local, "in use");
1527
1528         return 0;
1529 }
1530
1531 void ieee80211_recalc_idle(struct ieee80211_local *local)
1532 {
1533         u32 chg;
1534
1535         mutex_lock(&local->iflist_mtx);
1536         chg = __ieee80211_recalc_idle(local);
1537         mutex_unlock(&local->iflist_mtx);
1538         if (chg)
1539                 ieee80211_hw_config(local, chg);
1540 }
1541
1542 static int netdev_notify(struct notifier_block *nb,
1543                          unsigned long state,
1544                          void *ndev)
1545 {
1546         struct net_device *dev = ndev;
1547         struct ieee80211_sub_if_data *sdata;
1548
1549         if (state != NETDEV_CHANGENAME)
1550                 return 0;
1551
1552         if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
1553                 return 0;
1554
1555         if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
1556                 return 0;
1557
1558         sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1559
1560         memcpy(sdata->name, dev->name, IFNAMSIZ);
1561
1562         ieee80211_debugfs_rename_netdev(sdata);
1563         return 0;
1564 }
1565
1566 static struct notifier_block mac80211_netdev_notifier = {
1567         .notifier_call = netdev_notify,
1568 };
1569
1570 int ieee80211_iface_init(void)
1571 {
1572         return register_netdevice_notifier(&mac80211_netdev_notifier);
1573 }
1574
1575 void ieee80211_iface_exit(void)
1576 {
1577         unregister_netdevice_notifier(&mac80211_netdev_notifier);
1578 }