1	// SPDX-License-Identifier: GPL-2.0-only
2	/*
3	* Copyright 2002-2005, Instant802 Networks, Inc.
4	* Copyright 2005-2006, Devicescape Software, Inc.
5	* Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
6	* Copyright 2013-2014 Intel Mobile Communications GmbH
7	* Copyright (C) 2017 Intel Deutschland GmbH
8	* Copyright (C) 2018-2023 Intel Corporation
9	*/
10
11	#include <net/mac80211.h>
12	#include <linux/module.h>
13	#include <linux/fips.h>
14	#include <linux/init.h>
15	#include <linux/netdevice.h>
16	#include <linux/types.h>
17	#include <linux/slab.h>
18	#include <linux/skbuff.h>
19	#include <linux/etherdevice.h>
20	#include <linux/if_arp.h>
21	#include <linux/rtnetlink.h>
22	#include <linux/bitmap.h>
23	#include <linux/inetdevice.h>
24	#include <net/net_namespace.h>
25	#include <net/dropreason.h>
26	#include <net/cfg80211.h>
27	#include <net/addrconf.h>
28
29	#include "ieee80211_i.h"
30	#include "driver-ops.h"
31	#include "rate.h"
32	#include "mesh.h"
33	#include "wep.h"
34	#include "led.h"
35	#include "debugfs.h"
36
37	void ieee80211_configure_filter(struct ieee80211_local *local)
38	{
39	u64 mc;
40	unsigned int changed_flags;
41	unsigned int new_flags = 0;
42
43	if (atomic_read(v: &local->iff_allmultis))
44	new_flags |= FIF_ALLMULTI;
45
46	if (local->monitors || test_bit(SCAN_SW_SCANNING, &local->scanning) ||
47	test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning))
48	new_flags |= FIF_BCN_PRBRESP_PROMISC;
49
50	if (local->fif_probe_req || local->probe_req_reg)
51	new_flags |= FIF_PROBE_REQ;
52
53	if (local->fif_fcsfail)
54	new_flags |= FIF_FCSFAIL;
55
56	if (local->fif_plcpfail)
57	new_flags |= FIF_PLCPFAIL;
58
59	if (local->fif_control)
60	new_flags |= FIF_CONTROL;
61
62	if (local->fif_other_bss)
63	new_flags |= FIF_OTHER_BSS;
64
65	if (local->fif_pspoll)
66	new_flags |= FIF_PSPOLL;
67
68	if (local->rx_mcast_action_reg)
69	new_flags |= FIF_MCAST_ACTION;
70
71	spin_lock_bh(lock: &local->filter_lock);
72	changed_flags = local->filter_flags ^ new_flags;
73
74	mc = drv_prepare_multicast(local, mc_list: &local->mc_list);
75	spin_unlock_bh(lock: &local->filter_lock);
76
77	/* be a bit nasty */
78	new_flags |= (1<<31);
79
80	drv_configure_filter(local, changed_flags, total_flags: &new_flags, multicast: mc);
81
82	WARN_ON(new_flags & (1<<31));
83
84	local->filter_flags = new_flags & ~(1<<31);
85	}
86
87	static void ieee80211_reconfig_filter(struct wiphy *wiphy,
88	struct wiphy_work *work)
89	{
90	struct ieee80211_local *local =
91	container_of(work, struct ieee80211_local, reconfig_filter);
92
93	ieee80211_configure_filter(local);
94	}
95
96	static u32 ieee80211_hw_conf_chan(struct ieee80211_local *local)
97	{
98	struct ieee80211_sub_if_data *sdata;
99	struct cfg80211_chan_def chandef = {};
100	u32 changed = 0;
101	int power;
102	u32 offchannel_flag;
103
104	offchannel_flag = local->hw.conf.flags & IEEE80211_CONF_OFFCHANNEL;
105
106	if (local->scan_chandef.chan) {
107	chandef = local->scan_chandef;
108	} else if (local->tmp_channel) {
109	chandef.chan = local->tmp_channel;
110	chandef.width = NL80211_CHAN_WIDTH_20_NOHT;
111	chandef.center_freq1 = chandef.chan->center_freq;
112	chandef.freq1_offset = chandef.chan->freq_offset;
113	} else
114	chandef = local->_oper_chandef;
115
116	WARN(!cfg80211_chandef_valid(&chandef),
117	"control:%d.%03d MHz width:%d center: %d.%03d/%d MHz",
118	chandef.chan->center_freq, chandef.chan->freq_offset,
119	chandef.width, chandef.center_freq1, chandef.freq1_offset,
120	chandef.center_freq2);
121
122	if (!cfg80211_chandef_identical(chandef1: &chandef, chandef2: &local->_oper_chandef))
123	local->hw.conf.flags |= IEEE80211_CONF_OFFCHANNEL;
124	else
125	local->hw.conf.flags &= ~IEEE80211_CONF_OFFCHANNEL;
126
127	offchannel_flag ^= local->hw.conf.flags & IEEE80211_CONF_OFFCHANNEL;
128
129	if (offchannel_flag ||
130	!cfg80211_chandef_identical(chandef1: &local->hw.conf.chandef,
131	chandef2: &local->_oper_chandef)) {
132	local->hw.conf.chandef = chandef;
133	changed |= IEEE80211_CONF_CHANGE_CHANNEL;
134	}
135
136	if (!conf_is_ht(conf: &local->hw.conf)) {
137	/*
138	* mac80211.h documents that this is only valid
139	* when the channel is set to an HT type, and
140	* that otherwise STATIC is used.
141	*/
142	local->hw.conf.smps_mode = IEEE80211_SMPS_STATIC;
143	} else if (local->hw.conf.smps_mode != local->smps_mode) {
144	local->hw.conf.smps_mode = local->smps_mode;
145	changed |= IEEE80211_CONF_CHANGE_SMPS;
146	}
147
148	power = ieee80211_chandef_max_power(chandef: &chandef);
149
150	rcu_read_lock();
151	list_for_each_entry_rcu(sdata, &local->interfaces, list) {
152	if (!rcu_access_pointer(sdata->vif.bss_conf.chanctx_conf))
153	continue;
154	if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
155	continue;
156	if (sdata->vif.bss_conf.txpower == INT_MIN)
157	continue;
158	power = min(power, sdata->vif.bss_conf.txpower);
159	}
160	rcu_read_unlock();
161
162	if (local->hw.conf.power_level != power) {
163	changed |= IEEE80211_CONF_CHANGE_POWER;
164	local->hw.conf.power_level = power;
165	}
166
167	return changed;
168	}
169
170	int ieee80211_hw_config(struct ieee80211_local *local, u32 changed)
171	{
172	int ret = 0;
173
174	might_sleep();
175
176	if (!local->use_chanctx)
177	changed |= ieee80211_hw_conf_chan(local);
178	else
179	changed &= ~(IEEE80211_CONF_CHANGE_CHANNEL |
180	IEEE80211_CONF_CHANGE_POWER |
181	IEEE80211_CONF_CHANGE_SMPS);
182
183	if (changed && local->open_count) {
184	ret = drv_config(local, changed);
185	/*
186	* Goal:
187	* HW reconfiguration should never fail, the driver has told
188	* us what it can support so it should live up to that promise.
189	*
190	* Current status:
191	* rfkill is not integrated with mac80211 and a
192	* configuration command can thus fail if hardware rfkill
193	* is enabled
194	*
195	* FIXME: integrate rfkill with mac80211 and then add this
196	* WARN_ON() back
197	*
198	*/
199	/* WARN_ON(ret); */
200	}
201
202	return ret;
203	}
204
205	#define BSS_CHANGED_VIF_CFG_FLAGS (BSS_CHANGED_ASSOC |\
206	BSS_CHANGED_IDLE |\
207	BSS_CHANGED_PS |\
208	BSS_CHANGED_IBSS |\
209	BSS_CHANGED_ARP_FILTER |\
210	BSS_CHANGED_SSID |\
211	BSS_CHANGED_MLD_VALID_LINKS)
212
213	void ieee80211_bss_info_change_notify(struct ieee80211_sub_if_data *sdata,
214	u64 changed)
215	{
216	struct ieee80211_local *local = sdata->local;
217
218	might_sleep();
219
220	if (!changed || sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
221	return;
222
223	if (WARN_ON_ONCE(changed & (BSS_CHANGED_BEACON |
224	BSS_CHANGED_BEACON_ENABLED) &&
225	sdata->vif.type != NL80211_IFTYPE_AP &&
226	sdata->vif.type != NL80211_IFTYPE_ADHOC &&
227	sdata->vif.type != NL80211_IFTYPE_MESH_POINT &&
228	sdata->vif.type != NL80211_IFTYPE_OCB))
229	return;
230
231	if (WARN_ON_ONCE(sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE ||
232	sdata->vif.type == NL80211_IFTYPE_NAN ||
233	(sdata->vif.type == NL80211_IFTYPE_MONITOR &&
234	!sdata->vif.bss_conf.mu_mimo_owner &&
235	!(changed & BSS_CHANGED_TXPOWER))))
236	return;
237
238	if (!check_sdata_in_driver(sdata))
239	return;
240
241	if (changed & BSS_CHANGED_VIF_CFG_FLAGS) {
242	u64 ch = changed & BSS_CHANGED_VIF_CFG_FLAGS;
243
244	trace_drv_vif_cfg_changed(local, sdata, changed);
245	if (local->ops->vif_cfg_changed)
246	local->ops->vif_cfg_changed(&local->hw, &sdata->vif, ch);
247	}
248
249	if (changed & ~BSS_CHANGED_VIF_CFG_FLAGS) {
250	u64 ch = changed & ~BSS_CHANGED_VIF_CFG_FLAGS;
251
252	/* FIXME: should be for each link */
253	trace_drv_link_info_changed(local, sdata, link_conf: &sdata->vif.bss_conf,
254	changed);
255	if (local->ops->link_info_changed)
256	local->ops->link_info_changed(&local->hw, &sdata->vif,
257	&sdata->vif.bss_conf, ch);
258	}
259
260	if (local->ops->bss_info_changed)
261	local->ops->bss_info_changed(&local->hw, &sdata->vif,
262	&sdata->vif.bss_conf, changed);
263	trace_drv_return_void(local);
264	}
265
266	void ieee80211_vif_cfg_change_notify(struct ieee80211_sub_if_data *sdata,
267	u64 changed)
268	{
269	struct ieee80211_local *local = sdata->local;
270
271	WARN_ON_ONCE(changed & ~BSS_CHANGED_VIF_CFG_FLAGS);
272
273	if (!changed || sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
274	return;
275
276	drv_vif_cfg_changed(local, sdata, changed);
277	}
278
279	void ieee80211_link_info_change_notify(struct ieee80211_sub_if_data *sdata,
280	struct ieee80211_link_data *link,
281	u64 changed)
282	{
283	struct ieee80211_local *local = sdata->local;
284
285	WARN_ON_ONCE(changed & BSS_CHANGED_VIF_CFG_FLAGS);
286
287	if (!changed || sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
288	return;
289
290	if (!check_sdata_in_driver(sdata))
291	return;
292
293	drv_link_info_changed(local, sdata, info: link->conf, link_id: link->link_id, changed);
294	}
295
296	u64 ieee80211_reset_erp_info(struct ieee80211_sub_if_data *sdata)
297	{
298	sdata->vif.bss_conf.use_cts_prot = false;
299	sdata->vif.bss_conf.use_short_preamble = false;
300	sdata->vif.bss_conf.use_short_slot = false;
301	return BSS_CHANGED_ERP_CTS_PROT |
302	BSS_CHANGED_ERP_PREAMBLE |
303	BSS_CHANGED_ERP_SLOT;
304	}
305
306	static void ieee80211_tasklet_handler(struct tasklet_struct *t)
307	{
308	struct ieee80211_local *local = from_tasklet(local, t, tasklet);
309	struct sk_buff *skb;
310
311	while ((skb = skb_dequeue(list: &local->skb_queue)) ||
312	(skb = skb_dequeue(list: &local->skb_queue_unreliable))) {
313	switch (skb->pkt_type) {
314	case IEEE80211_RX_MSG:
315	/* Clear skb->pkt_type in order to not confuse kernel
316	* netstack. */
317	skb->pkt_type = 0;
318	ieee80211_rx(hw: &local->hw, skb);
319	break;
320	case IEEE80211_TX_STATUS_MSG:
321	skb->pkt_type = 0;
322	ieee80211_tx_status_skb(hw: &local->hw, skb);
323	break;
324	default:
325	WARN(1, "mac80211: Packet is of unknown type %d\n",
326	skb->pkt_type);
327	dev_kfree_skb(skb);
328	break;
329	}
330	}
331	}
332
333	static void ieee80211_restart_work(struct work_struct *work)
334	{
335	struct ieee80211_local *local =
336	container_of(work, struct ieee80211_local, restart_work);
337	struct ieee80211_sub_if_data *sdata;
338	int ret;
339
340	flush_workqueue(local->workqueue);
341
342	rtnl_lock();
343	/* we might do interface manipulations, so need both */
344	wiphy_lock(wiphy: local->hw.wiphy);
345	wiphy_work_flush(wiphy: local->hw.wiphy, NULL);
346
347	WARN(test_bit(SCAN_HW_SCANNING, &local->scanning),
348	"%s called with hardware scan in progress\n", __func__);
349
350	list_for_each_entry(sdata, &local->interfaces, list) {
351	/*
352	* XXX: there may be more work for other vif types and even
353	* for station mode: a good thing would be to run most of
354	* the iface type's dependent _stop (ieee80211_mg_stop,
355	* ieee80211_ibss_stop) etc...
356	* For now, fix only the specific bug that was seen: race
357	* between csa_connection_drop_work and us.
358	*/
359	if (sdata->vif.type == NL80211_IFTYPE_STATION) {
360	/*
361	* This worker is scheduled from the iface worker that
362	* runs on mac80211's workqueue, so we can't be
363	* scheduling this worker after the cancel right here.
364	* The exception is ieee80211_chswitch_done.
365	* Then we can have a race...
366	*/
367	wiphy_work_cancel(wiphy: local->hw.wiphy,
368	work: &sdata->u.mgd.csa_connection_drop_work);
369	if (sdata->vif.bss_conf.csa_active)
370	ieee80211_sta_connection_lost(sdata,
371	reason: WLAN_REASON_UNSPECIFIED,
372	tx: false);
373	}
374	wiphy_delayed_work_flush(wiphy: local->hw.wiphy,
375	dwork: &sdata->dec_tailroom_needed_wk);
376	}
377	ieee80211_scan_cancel(local);
378
379	/* make sure any new ROC will consider local->in_reconfig */
380	wiphy_delayed_work_flush(wiphy: local->hw.wiphy, dwork: &local->roc_work);
381	wiphy_work_flush(wiphy: local->hw.wiphy, work: &local->hw_roc_done);
382
383	/* wait for all packet processing to be done */
384	synchronize_net();
385
386	ret = ieee80211_reconfig(local);
387	wiphy_unlock(wiphy: local->hw.wiphy);
388
389	if (ret)
390	cfg80211_shutdown_all_interfaces(wiphy: local->hw.wiphy);
391
392	rtnl_unlock();
393	}
394
395	void ieee80211_restart_hw(struct ieee80211_hw *hw)
396	{
397	struct ieee80211_local *local = hw_to_local(hw);
398
399	trace_api_restart_hw(local);
400
401	wiphy_info(hw->wiphy,
402	"Hardware restart was requested\n");
403
404	/* use this reason, ieee80211_reconfig will unblock it */
405	ieee80211_stop_queues_by_reason(hw, queues: IEEE80211_MAX_QUEUE_MAP,
406	reason: IEEE80211_QUEUE_STOP_REASON_SUSPEND,
407	refcounted: false);
408
409	/*
410	* Stop all Rx during the reconfig. We don't want state changes
411	* or driver callbacks while this is in progress.
412	*/
413	local->in_reconfig = true;
414	barrier();
415
416	queue_work(wq: system_freezable_wq, work: &local->restart_work);
417	}
418	EXPORT_SYMBOL(ieee80211_restart_hw);
419
420	#ifdef CONFIG_INET
421	static int ieee80211_ifa_changed(struct notifier_block *nb,
422	unsigned long data, void *arg)
423	{
424	struct in_ifaddr *ifa = arg;
425	struct ieee80211_local *local =
426	container_of(nb, struct ieee80211_local,
427	ifa_notifier);
428	struct net_device *ndev = ifa->ifa_dev->dev;
429	struct wireless_dev *wdev = ndev->ieee80211_ptr;
430	struct in_device *idev;
431	struct ieee80211_sub_if_data *sdata;
432	struct ieee80211_vif_cfg *vif_cfg;
433	struct ieee80211_if_managed *ifmgd;
434	int c = 0;
435
436	/* Make sure it's our interface that got changed */
437	if (!wdev)
438	return NOTIFY_DONE;
439
440	if (wdev->wiphy != local->hw.wiphy || !wdev->registered)
441	return NOTIFY_DONE;
442
443	sdata = IEEE80211_DEV_TO_SUB_IF(dev: ndev);
444	vif_cfg = &sdata->vif.cfg;
445
446	/* ARP filtering is only supported in managed mode */
447	if (sdata->vif.type != NL80211_IFTYPE_STATION)
448	return NOTIFY_DONE;
449
450	idev = __in_dev_get_rtnl(dev: sdata->dev);
451	if (!idev)
452	return NOTIFY_DONE;
453
454	ifmgd = &sdata->u.mgd;
455
456	/*
457	* The nested here is needed to convince lockdep that this is
458	* all OK. Yes, we lock the wiphy mutex here while we already
459	* hold the notifier rwsem, that's the normal case. And yes,
460	* we also acquire the notifier rwsem again when unregistering
461	* a netdev while we already hold the wiphy mutex, so it does
462	* look like a typical ABBA deadlock.
463	*
464	* However, both of these things happen with the RTNL held
465	* already. Therefore, they can't actually happen, since the
466	* lock orders really are ABC and ACB, which is fine due to
467	* the RTNL (A).
468	*
469	* We still need to prevent recursion, which is accomplished
470	* by the !wdev->registered check above.
471	*/
472	mutex_lock_nested(lock: &local->hw.wiphy->mtx, subclass: 1);
473	__acquire(&local->hw.wiphy->mtx);
474
475	/* Copy the addresses to the vif config list */
476	ifa = rtnl_dereference(idev->ifa_list);
477	while (ifa) {
478	if (c < IEEE80211_BSS_ARP_ADDR_LIST_LEN)
479	vif_cfg->arp_addr_list[c] = ifa->ifa_address;
480	ifa = rtnl_dereference(ifa->ifa_next);
481	c++;
482	}
483
484	vif_cfg->arp_addr_cnt = c;
485
486	/* Configure driver only if associated (which also implies it is up) */
487	if (ifmgd->associated)
488	ieee80211_vif_cfg_change_notify(sdata, changed: BSS_CHANGED_ARP_FILTER);
489
490	wiphy_unlock(wiphy: local->hw.wiphy);
491
492	return NOTIFY_OK;
493	}
494	#endif
495
496	#if IS_ENABLED(CONFIG_IPV6)
497	static int ieee80211_ifa6_changed(struct notifier_block *nb,
498	unsigned long data, void *arg)
499	{
500	struct inet6_ifaddr *ifa = (struct inet6_ifaddr *)arg;
501	struct inet6_dev *idev = ifa->idev;
502	struct net_device *ndev = ifa->idev->dev;
503	struct ieee80211_local *local =
504	container_of(nb, struct ieee80211_local, ifa6_notifier);
505	struct wireless_dev *wdev = ndev->ieee80211_ptr;
506	struct ieee80211_sub_if_data *sdata;
507
508	/* Make sure it's our interface that got changed */
509	if (!wdev || wdev->wiphy != local->hw.wiphy)
510	return NOTIFY_DONE;
511
512	sdata = IEEE80211_DEV_TO_SUB_IF(dev: ndev);
513
514	/*
515	* For now only support station mode. This is mostly because
516	* doing AP would have to handle AP_VLAN in some way ...
517	*/
518	if (sdata->vif.type != NL80211_IFTYPE_STATION)
519	return NOTIFY_DONE;
520
521	drv_ipv6_addr_change(local, sdata, idev);
522
523	return NOTIFY_OK;
524	}
525	#endif
526
527	/* There isn't a lot of sense in it, but you can transmit anything you like */
528	static const struct ieee80211_txrx_stypes
529	ieee80211_default_mgmt_stypes[NUM_NL80211_IFTYPES] = {
530	[NL80211_IFTYPE_ADHOC] = {
531	.tx = 0xffff,
532	.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
533	BIT(IEEE80211_STYPE_AUTH >> 4) |
534	BIT(IEEE80211_STYPE_DEAUTH >> 4) |
535	BIT(IEEE80211_STYPE_PROBE_REQ >> 4),
536	},
537	[NL80211_IFTYPE_STATION] = {
538	.tx = 0xffff,
539	/*
540	* To support Pre Association Security Negotiation (PASN) while
541	* already associated to one AP, allow user space to register to
542	* Rx authentication frames, so that the user space logic would
543	* be able to receive/handle authentication frames from a
544	* different AP as part of PASN.
545	* It is expected that user space would intelligently register
546	* for Rx authentication frames, i.e., only when PASN is used
547	* and configure a match filter only for PASN authentication
548	* algorithm, as otherwise the MLME functionality of mac80211
549	* would be broken.
550	*/
551	.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
552	BIT(IEEE80211_STYPE_AUTH >> 4) |
553	BIT(IEEE80211_STYPE_PROBE_REQ >> 4),
554	},
555	[NL80211_IFTYPE_AP] = {
556	.tx = 0xffff,
557	.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
558	BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
559	BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
560	BIT(IEEE80211_STYPE_DISASSOC >> 4) |
561	BIT(IEEE80211_STYPE_AUTH >> 4) |
562	BIT(IEEE80211_STYPE_DEAUTH >> 4) |
563	BIT(IEEE80211_STYPE_ACTION >> 4),
564	},
565	[NL80211_IFTYPE_AP_VLAN] = {
566	/* copy AP */
567	.tx = 0xffff,
568	.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
569	BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
570	BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
571	BIT(IEEE80211_STYPE_DISASSOC >> 4) |
572	BIT(IEEE80211_STYPE_AUTH >> 4) |
573	BIT(IEEE80211_STYPE_DEAUTH >> 4) |
574	BIT(IEEE80211_STYPE_ACTION >> 4),
575	},
576	[NL80211_IFTYPE_P2P_CLIENT] = {
577	.tx = 0xffff,
578	.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
579	BIT(IEEE80211_STYPE_PROBE_REQ >> 4),
580	},
581	[NL80211_IFTYPE_P2P_GO] = {
582	.tx = 0xffff,
583	.rx = BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
584	BIT(IEEE80211_STYPE_REASSOC_REQ >> 4) |
585	BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
586	BIT(IEEE80211_STYPE_DISASSOC >> 4) |
587	BIT(IEEE80211_STYPE_AUTH >> 4) |
588	BIT(IEEE80211_STYPE_DEAUTH >> 4) |
589	BIT(IEEE80211_STYPE_ACTION >> 4),
590	},
591	[NL80211_IFTYPE_MESH_POINT] = {
592	.tx = 0xffff,
593	.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
594	BIT(IEEE80211_STYPE_AUTH >> 4) |
595	BIT(IEEE80211_STYPE_DEAUTH >> 4),
596	},
597	[NL80211_IFTYPE_P2P_DEVICE] = {
598	.tx = 0xffff,
599	.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
600	BIT(IEEE80211_STYPE_PROBE_REQ >> 4),
601	},
602	};
603
604	static const struct ieee80211_ht_cap mac80211_ht_capa_mod_mask = {
605	.ampdu_params_info = IEEE80211_HT_AMPDU_PARM_FACTOR |
606	IEEE80211_HT_AMPDU_PARM_DENSITY,
607
608	.cap_info = cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
609	IEEE80211_HT_CAP_MAX_AMSDU |
610	IEEE80211_HT_CAP_SGI_20 |
611	IEEE80211_HT_CAP_SGI_40 |
612	IEEE80211_HT_CAP_TX_STBC |
613	IEEE80211_HT_CAP_RX_STBC |
614	IEEE80211_HT_CAP_LDPC_CODING |
615	IEEE80211_HT_CAP_40MHZ_INTOLERANT),
616	.mcs = {
617	.rx_mask = { 0xff, 0xff, 0xff, 0xff, 0xff,
618	0xff, 0xff, 0xff, 0xff, 0xff, },
619	},
620	};
621
622	static const struct ieee80211_vht_cap mac80211_vht_capa_mod_mask = {
623	.vht_cap_info =
624	cpu_to_le32(IEEE80211_VHT_CAP_RXLDPC |
625	IEEE80211_VHT_CAP_SHORT_GI_80 |
626	IEEE80211_VHT_CAP_SHORT_GI_160 |
627	IEEE80211_VHT_CAP_RXSTBC_MASK |
628	IEEE80211_VHT_CAP_TXSTBC |
629	IEEE80211_VHT_CAP_SU_BEAMFORMER_CAPABLE |
630	IEEE80211_VHT_CAP_SU_BEAMFORMEE_CAPABLE |
631	IEEE80211_VHT_CAP_TX_ANTENNA_PATTERN |
632	IEEE80211_VHT_CAP_RX_ANTENNA_PATTERN |
633	IEEE80211_VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_MASK),
634	.supp_mcs = {
635	.rx_mcs_map = cpu_to_le16(~0),
636	.tx_mcs_map = cpu_to_le16(~0),
637	},
638	};
639
640	struct ieee80211_hw *ieee80211_alloc_hw_nm(size_t priv_data_len,
641	const struct ieee80211_ops *ops,
642	const char *requested_name)
643	{
644	struct ieee80211_local *local;
645	int priv_size, i;
646	struct wiphy *wiphy;
647	bool use_chanctx;
648
649	if (WARN_ON(!ops->tx || !ops->start || !ops->stop || !ops->config ||
650	!ops->add_interface || !ops->remove_interface ||
651	!ops->configure_filter || !ops->wake_tx_queue))
652	return NULL;
653
654	if (WARN_ON(ops->sta_state && (ops->sta_add || ops->sta_remove)))
655	return NULL;
656
657	if (WARN_ON(!!ops->link_info_changed != !!ops->vif_cfg_changed ||
658	(ops->link_info_changed && ops->bss_info_changed)))
659	return NULL;
660
661	/* check all or no channel context operations exist */
662	i = !!ops->add_chanctx + !!ops->remove_chanctx +
663	!!ops->change_chanctx + !!ops->assign_vif_chanctx +
664	!!ops->unassign_vif_chanctx;
665	if (WARN_ON(i != 0 && i != 5))
666	return NULL;
667	use_chanctx = i == 5;
668
669	/* Ensure 32-byte alignment of our private data and hw private data.
670	* We use the wiphy priv data for both our ieee80211_local and for
671	* the driver's private data
672	*
673	* In memory it'll be like this:
674	*
675	* +-------------------------+
676	* | struct wiphy |
677	* +-------------------------+
678	* | struct ieee80211_local |
679	* +-------------------------+
680	* | driver's private data |
681	* +-------------------------+
682	*
683	*/
684	priv_size = ALIGN(sizeof(*local), NETDEV_ALIGN) + priv_data_len;
685
686	wiphy = wiphy_new_nm(ops: &mac80211_config_ops, sizeof_priv: priv_size, requested_name);
687
688	if (!wiphy)
689	return NULL;
690
691	wiphy->mgmt_stypes = ieee80211_default_mgmt_stypes;
692
693	wiphy->privid = mac80211_wiphy_privid;
694
695	wiphy->flags |= WIPHY_FLAG_NETNS_OK |
696	WIPHY_FLAG_4ADDR_AP |
697	WIPHY_FLAG_4ADDR_STATION |
698	WIPHY_FLAG_REPORTS_OBSS |
699	WIPHY_FLAG_OFFCHAN_TX;
700
701	if (!use_chanctx || ops->remain_on_channel)
702	wiphy->flags |= WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL;
703
704	wiphy->features |= NL80211_FEATURE_SK_TX_STATUS |
705	NL80211_FEATURE_SAE |
706	NL80211_FEATURE_HT_IBSS |
707	NL80211_FEATURE_VIF_TXPOWER |
708	NL80211_FEATURE_MAC_ON_CREATE |
709	NL80211_FEATURE_USERSPACE_MPM |
710	NL80211_FEATURE_FULL_AP_CLIENT_STATE;
711	wiphy_ext_feature_set(wiphy, ftidx: NL80211_EXT_FEATURE_FILS_STA);
712	wiphy_ext_feature_set(wiphy,
713	ftidx: NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211);
714	wiphy_ext_feature_set(wiphy,
715	ftidx: NL80211_EXT_FEATURE_CONTROL_PORT_NO_PREAUTH);
716	wiphy_ext_feature_set(wiphy,
717	ftidx: NL80211_EXT_FEATURE_CONTROL_PORT_OVER_NL80211_TX_STATUS);
718	wiphy_ext_feature_set(wiphy,
719	ftidx: NL80211_EXT_FEATURE_SCAN_FREQ_KHZ);
720	wiphy_ext_feature_set(wiphy,
721	ftidx: NL80211_EXT_FEATURE_POWERED_ADDR_CHANGE);
722
723	if (!ops->hw_scan) {
724	wiphy->features |= NL80211_FEATURE_LOW_PRIORITY_SCAN |
725	NL80211_FEATURE_AP_SCAN;
726	/*
727	* if the driver behaves correctly using the probe request
728	* (template) from mac80211, then both of these should be
729	* supported even with hw scan - but let drivers opt in.
730	*/
731	wiphy_ext_feature_set(wiphy,
732	ftidx: NL80211_EXT_FEATURE_SCAN_RANDOM_SN);
733	wiphy_ext_feature_set(wiphy,
734	ftidx: NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT);
735	}
736
737	if (!ops->set_key)
738	wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
739
740	wiphy_ext_feature_set(wiphy, ftidx: NL80211_EXT_FEATURE_TXQS);
741	wiphy_ext_feature_set(wiphy, ftidx: NL80211_EXT_FEATURE_RRM);
742
743	wiphy->bss_priv_size = sizeof(struct ieee80211_bss);
744
745	local = wiphy_priv(wiphy);
746
747	if (sta_info_init(local))
748	goto err_free;
749
750	local->hw.wiphy = wiphy;
751
752	local->hw.priv = (char *)local + ALIGN(sizeof(*local), NETDEV_ALIGN);
753
754	local->ops = ops;
755	local->use_chanctx = use_chanctx;
756
757	/*
758	* We need a bit of data queued to build aggregates properly, so
759	* instruct the TCP stack to allow more than a single ms of data
760	* to be queued in the stack. The value is a bit-shift of 1
761	* second, so 7 is ~8ms of queued data. Only affects local TCP
762	* sockets.
763	* This is the default, anyhow - drivers may need to override it
764	* for local reasons (longer buffers, longer completion time, or
765	* similar).
766	*/
767	local->hw.tx_sk_pacing_shift = 7;
768
769	/* set up some defaults */
770	local->hw.queues = 1;
771	local->hw.max_rates = 1;
772	local->hw.max_report_rates = 0;
773	local->hw.max_rx_aggregation_subframes = IEEE80211_MAX_AMPDU_BUF_HT;
774	local->hw.max_tx_aggregation_subframes = IEEE80211_MAX_AMPDU_BUF_HT;
775	local->hw.offchannel_tx_hw_queue = IEEE80211_INVAL_HW_QUEUE;
776	local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
777	local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
778	local->hw.radiotap_mcs_details = IEEE80211_RADIOTAP_MCS_HAVE_MCS |
779	IEEE80211_RADIOTAP_MCS_HAVE_GI |
780	IEEE80211_RADIOTAP_MCS_HAVE_BW;
781	local->hw.radiotap_vht_details = IEEE80211_RADIOTAP_VHT_KNOWN_GI |
782	IEEE80211_RADIOTAP_VHT_KNOWN_BANDWIDTH;
783	local->hw.uapsd_queues = IEEE80211_DEFAULT_UAPSD_QUEUES;
784	local->hw.uapsd_max_sp_len = IEEE80211_DEFAULT_MAX_SP_LEN;
785	local->hw.max_mtu = IEEE80211_MAX_DATA_LEN;
786	local->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
787	wiphy->ht_capa_mod_mask = &mac80211_ht_capa_mod_mask;
788	wiphy->vht_capa_mod_mask = &mac80211_vht_capa_mod_mask;
789
790	local->ext_capa[7] = WLAN_EXT_CAPA8_OPMODE_NOTIF;
791
792	wiphy->extended_capabilities = local->ext_capa;
793	wiphy->extended_capabilities_mask = local->ext_capa;
794	wiphy->extended_capabilities_len =
795	ARRAY_SIZE(local->ext_capa);
796
797	INIT_LIST_HEAD(list: &local->interfaces);
798	INIT_LIST_HEAD(list: &local->mon_list);
799
800	__hw_addr_init(list: &local->mc_list);
801
802	mutex_init(&local->iflist_mtx);
803	spin_lock_init(&local->filter_lock);
804	spin_lock_init(&local->rx_path_lock);
805	spin_lock_init(&local->queue_stop_reason_lock);
806
807	for (i = 0; i < IEEE80211_NUM_ACS; i++) {
808	INIT_LIST_HEAD(list: &local->active_txqs[i]);
809	spin_lock_init(&local->active_txq_lock[i]);
810	local->aql_txq_limit_low[i] = IEEE80211_DEFAULT_AQL_TXQ_LIMIT_L;
811	local->aql_txq_limit_high[i] =
812	IEEE80211_DEFAULT_AQL_TXQ_LIMIT_H;
813	atomic_set(v: &local->aql_ac_pending_airtime[i], i: 0);
814	}
815
816	local->airtime_flags = AIRTIME_USE_TX | AIRTIME_USE_RX;
817	local->aql_threshold = IEEE80211_AQL_THRESHOLD;
818	atomic_set(v: &local->aql_total_pending_airtime, i: 0);
819
820	spin_lock_init(&local->handle_wake_tx_queue_lock);
821
822	INIT_LIST_HEAD(list: &local->chanctx_list);
823
824	wiphy_delayed_work_init(dwork: &local->scan_work, func: ieee80211_scan_work);
825
826	INIT_WORK(&local->restart_work, ieee80211_restart_work);
827
828	wiphy_work_init(work: &local->radar_detected_work,
829	func: ieee80211_dfs_radar_detected_work);
830
831	wiphy_work_init(work: &local->reconfig_filter, func: ieee80211_reconfig_filter);
832	local->smps_mode = IEEE80211_SMPS_OFF;
833
834	wiphy_work_init(work: &local->dynamic_ps_enable_work,
835	func: ieee80211_dynamic_ps_enable_work);
836	wiphy_work_init(work: &local->dynamic_ps_disable_work,
837	func: ieee80211_dynamic_ps_disable_work);
838	timer_setup(&local->dynamic_ps_timer, ieee80211_dynamic_ps_timer, 0);
839
840	wiphy_work_init(work: &local->sched_scan_stopped_work,
841	func: ieee80211_sched_scan_stopped_work);
842
843	spin_lock_init(&local->ack_status_lock);
844	idr_init(idr: &local->ack_status_frames);
845
846	for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
847	skb_queue_head_init(list: &local->pending[i]);
848	atomic_set(v: &local->agg_queue_stop[i], i: 0);
849	}
850	tasklet_setup(t: &local->tx_pending_tasklet, callback: ieee80211_tx_pending);
851	tasklet_setup(t: &local->wake_txqs_tasklet, callback: ieee80211_wake_txqs);
852	tasklet_setup(t: &local->tasklet, callback: ieee80211_tasklet_handler);
853
854	skb_queue_head_init(list: &local->skb_queue);
855	skb_queue_head_init(list: &local->skb_queue_unreliable);
856
857	ieee80211_alloc_led_names(local);
858
859	ieee80211_roc_setup(local);
860
861	local->hw.radiotap_timestamp.units_pos = -1;
862	local->hw.radiotap_timestamp.accuracy = -1;
863
864	return &local->hw;
865	err_free:
866	wiphy_free(wiphy);
867	return NULL;
868	}
869	EXPORT_SYMBOL(ieee80211_alloc_hw_nm);
870
871	static int ieee80211_init_cipher_suites(struct ieee80211_local *local)
872	{
873	bool have_wep = !fips_enabled; /* FIPS does not permit the use of RC4 */
874	bool have_mfp = ieee80211_hw_check(&local->hw, MFP_CAPABLE);
875	int r = 0, w = 0;
876	u32 *suites;
877	static const u32 cipher_suites[] = {
878	/* keep WEP first, it may be removed below */
879	WLAN_CIPHER_SUITE_WEP40,
880	WLAN_CIPHER_SUITE_WEP104,
881	WLAN_CIPHER_SUITE_TKIP,
882	WLAN_CIPHER_SUITE_CCMP,
883	WLAN_CIPHER_SUITE_CCMP_256,
884	WLAN_CIPHER_SUITE_GCMP,
885	WLAN_CIPHER_SUITE_GCMP_256,
886
887	/* keep last -- depends on hw flags! */
888	WLAN_CIPHER_SUITE_AES_CMAC,
889	WLAN_CIPHER_SUITE_BIP_CMAC_256,
890	WLAN_CIPHER_SUITE_BIP_GMAC_128,
891	WLAN_CIPHER_SUITE_BIP_GMAC_256,
892	};
893
894	if (ieee80211_hw_check(&local->hw, SW_CRYPTO_CONTROL) ||
895	local->hw.wiphy->cipher_suites) {
896	/* If the driver advertises, or doesn't support SW crypto,
897	* we only need to remove WEP if necessary.
898	*/
899	if (have_wep)
900	return 0;
901
902	/* well if it has _no_ ciphers ... fine */
903	if (!local->hw.wiphy->n_cipher_suites)
904	return 0;
905
906	/* Driver provides cipher suites, but we need to exclude WEP */
907	suites = kmemdup(p: local->hw.wiphy->cipher_suites,
908	size: sizeof(u32) * local->hw.wiphy->n_cipher_suites,
909	GFP_KERNEL);
910	if (!suites)
911	return -ENOMEM;
912
913	for (r = 0; r < local->hw.wiphy->n_cipher_suites; r++) {
914	u32 suite = local->hw.wiphy->cipher_suites[r];
915
916	if (suite == WLAN_CIPHER_SUITE_WEP40 ||
917	suite == WLAN_CIPHER_SUITE_WEP104)
918	continue;
919	suites[w++] = suite;
920	}
921	} else {
922	/* assign the (software supported and perhaps offloaded)
923	* cipher suites
924	*/
925	local->hw.wiphy->cipher_suites = cipher_suites;
926	local->hw.wiphy->n_cipher_suites = ARRAY_SIZE(cipher_suites);
927
928	if (!have_mfp)
929	local->hw.wiphy->n_cipher_suites -= 4;
930
931	if (!have_wep) {
932	local->hw.wiphy->cipher_suites += 2;
933	local->hw.wiphy->n_cipher_suites -= 2;
934	}
935
936	/* not dynamically allocated, so just return */
937	return 0;
938	}
939
940	local->hw.wiphy->cipher_suites = suites;
941	local->hw.wiphy->n_cipher_suites = w;
942	local->wiphy_ciphers_allocated = true;
943
944	return 0;
945	}
946
947	int ieee80211_register_hw(struct ieee80211_hw *hw)
948	{
949	struct ieee80211_local *local = hw_to_local(hw);
950	int result, i;
951	enum nl80211_band band;
952	int channels, max_bitrates;
953	bool supp_ht, supp_vht, supp_he, supp_eht;
954	struct cfg80211_chan_def dflt_chandef = {};
955
956	if (ieee80211_hw_check(hw, QUEUE_CONTROL) &&
957	(local->hw.offchannel_tx_hw_queue == IEEE80211_INVAL_HW_QUEUE ||
958	local->hw.offchannel_tx_hw_queue >= local->hw.queues))
959	return -EINVAL;
960
961	if ((hw->wiphy->features & NL80211_FEATURE_TDLS_CHANNEL_SWITCH) &&
962	(!local->ops->tdls_channel_switch ||
963	!local->ops->tdls_cancel_channel_switch ||
964	!local->ops->tdls_recv_channel_switch))
965	return -EOPNOTSUPP;
966
967	if (WARN_ON(ieee80211_hw_check(hw, SUPPORTS_TX_FRAG) &&
968	!local->ops->set_frag_threshold))
969	return -EINVAL;
970
971	if (WARN_ON(local->hw.wiphy->interface_modes &
972	BIT(NL80211_IFTYPE_NAN) &&
973	(!local->ops->start_nan || !local->ops->stop_nan)))
974	return -EINVAL;
975
976	if (hw->wiphy->flags & WIPHY_FLAG_SUPPORTS_MLO) {
977	/*
978	* For drivers capable of doing MLO, assume modern driver
979	* or firmware facilities, so software doesn't have to do
980	* as much, e.g. monitoring beacons would be hard if we
981	* might not even know which link is active at which time.
982	*/
983	if (WARN_ON(!local->use_chanctx))
984	return -EINVAL;
985
986	if (WARN_ON(!local->ops->link_info_changed))
987	return -EINVAL;
988
989	if (WARN_ON(!ieee80211_hw_check(hw, HAS_RATE_CONTROL)))
990	return -EINVAL;
991
992	if (WARN_ON(!ieee80211_hw_check(hw, AMPDU_AGGREGATION)))
993	return -EINVAL;
994
995	if (WARN_ON(ieee80211_hw_check(hw, HOST_BROADCAST_PS_BUFFERING)))
996	return -EINVAL;
997
998	if (WARN_ON(ieee80211_hw_check(hw, SUPPORTS_PS) &&
999	(!ieee80211_hw_check(hw, SUPPORTS_DYNAMIC_PS) ||
1000	ieee80211_hw_check(hw, PS_NULLFUNC_STACK))))
1001	return -EINVAL;
1002
1003	if (WARN_ON(!ieee80211_hw_check(hw, MFP_CAPABLE)))
1004	return -EINVAL;
1005
1006	if (WARN_ON(!ieee80211_hw_check(hw, CONNECTION_MONITOR)))
1007	return -EINVAL;
1008
1009	if (WARN_ON(ieee80211_hw_check(hw, NEED_DTIM_BEFORE_ASSOC)))
1010	return -EINVAL;
1011
1012	if (WARN_ON(ieee80211_hw_check(hw, TIMING_BEACON_ONLY)))
1013	return -EINVAL;
1014
1015	if (WARN_ON(!ieee80211_hw_check(hw, AP_LINK_PS)))
1016	return -EINVAL;
1017
1018	if (WARN_ON(ieee80211_hw_check(hw, DEAUTH_NEED_MGD_TX_PREP)))
1019	return -EINVAL;
1020	}
1021
1022	#ifdef CONFIG_PM
1023	if (hw->wiphy->wowlan && (!local->ops->suspend || !local->ops->resume))
1024	return -EINVAL;
1025	#endif
1026
1027	if (!local->use_chanctx) {
1028	for (i = 0; i < local->hw.wiphy->n_iface_combinations; i++) {
1029	const struct ieee80211_iface_combination *comb;
1030
1031	comb = &local->hw.wiphy->iface_combinations[i];
1032
1033	if (comb->num_different_channels > 1)
1034	return -EINVAL;
1035	}
1036	} else {
1037	/* DFS is not supported with multi-channel combinations yet */
1038	for (i = 0; i < local->hw.wiphy->n_iface_combinations; i++) {
1039	const struct ieee80211_iface_combination *comb;
1040
1041	comb = &local->hw.wiphy->iface_combinations[i];
1042
1043	if (comb->radar_detect_widths &&
1044	comb->num_different_channels > 1)
1045	return -EINVAL;
1046	}
1047	}
1048
1049	/* Only HW csum features are currently compatible with mac80211 */
1050	if (WARN_ON(hw->netdev_features & ~MAC80211_SUPPORTED_FEATURES))
1051	return -EINVAL;
1052
1053	if (hw->max_report_rates == 0)
1054	hw->max_report_rates = hw->max_rates;
1055
1056	local->rx_chains = 1;
1057
1058	/*
1059	* generic code guarantees at least one band,
1060	* set this very early because much code assumes
1061	* that hw.conf.channel is assigned
1062	*/
1063	channels = 0;
1064	max_bitrates = 0;
1065	supp_ht = false;
1066	supp_vht = false;
1067	supp_he = false;
1068	supp_eht = false;
1069	for (band = 0; band < NUM_NL80211_BANDS; band++) {
1070	const struct ieee80211_sband_iftype_data *iftd;
1071	struct ieee80211_supported_band *sband;
1072
1073	sband = local->hw.wiphy->bands[band];
1074	if (!sband)
1075	continue;
1076
1077	if (!dflt_chandef.chan) {
1078	/*
1079	* Assign the first enabled channel to dflt_chandef
1080	* from the list of channels
1081	*/
1082	for (i = 0; i < sband->n_channels; i++)
1083	if (!(sband->channels[i].flags &
1084	IEEE80211_CHAN_DISABLED))
1085	break;
1086	/* if none found then use the first anyway */
1087	if (i == sband->n_channels)
1088	i = 0;
1089	cfg80211_chandef_create(chandef: &dflt_chandef,
1090	channel: &sband->channels[i],
1091	chantype: NL80211_CHAN_NO_HT);
1092	/* init channel we're on */
1093	if (!local->use_chanctx && !local->_oper_chandef.chan) {
1094	local->hw.conf.chandef = dflt_chandef;
1095	local->_oper_chandef = dflt_chandef;
1096	}
1097	local->monitor_chandef = dflt_chandef;
1098	}
1099
1100	channels += sband->n_channels;
1101
1102	/*
1103	* Due to the way the aggregation code handles this and it
1104	* being an HT capability, we can't really support delayed
1105	* BA in MLO (yet).
1106	*/
1107	if (WARN_ON(sband->ht_cap.ht_supported &&
1108	(sband->ht_cap.cap & IEEE80211_HT_CAP_DELAY_BA) &&
1109	hw->wiphy->flags & WIPHY_FLAG_SUPPORTS_MLO))
1110	return -EINVAL;
1111
1112	if (max_bitrates < sband->n_bitrates)
1113	max_bitrates = sband->n_bitrates;
1114	supp_ht = supp_ht || sband->ht_cap.ht_supported;
1115	supp_vht = supp_vht || sband->vht_cap.vht_supported;
1116
1117	for_each_sband_iftype_data(sband, i, iftd) {
1118	supp_he = supp_he || iftd->he_cap.has_he;
1119	supp_eht = supp_eht || iftd->eht_cap.has_eht;
1120	}
1121
1122	/* HT, VHT, HE require QoS, thus >= 4 queues */
1123	if (WARN_ON(local->hw.queues < IEEE80211_NUM_ACS &&
1124	(supp_ht || supp_vht || supp_he)))
1125	return -EINVAL;
1126
1127	/* EHT requires HE support */
1128	if (WARN_ON(supp_eht && !supp_he))
1129	return -EINVAL;
1130
1131	if (!sband->ht_cap.ht_supported)
1132	continue;
1133
1134	/* TODO: consider VHT for RX chains, hopefully it's the same */
1135	local->rx_chains =
1136	max(ieee80211_mcs_to_chains(&sband->ht_cap.mcs),
1137	local->rx_chains);
1138
1139	/* no need to mask, SM_PS_DISABLED has all bits set */
1140	sband->ht_cap.cap |= WLAN_HT_CAP_SM_PS_DISABLED <<
1141	IEEE80211_HT_CAP_SM_PS_SHIFT;
1142	}
1143
1144	/* if low-level driver supports AP, we also support VLAN.
1145	* drivers advertising SW_CRYPTO_CONTROL should enable AP_VLAN
1146	* based on their support to transmit SW encrypted packets.
1147	*/
1148	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_AP) &&
1149	!ieee80211_hw_check(&local->hw, SW_CRYPTO_CONTROL)) {
1150	hw->wiphy->interface_modes |= BIT(NL80211_IFTYPE_AP_VLAN);
1151	hw->wiphy->software_iftypes |= BIT(NL80211_IFTYPE_AP_VLAN);
1152	}
1153
1154	/* mac80211 always supports monitor */
1155	hw->wiphy->interface_modes |= BIT(NL80211_IFTYPE_MONITOR);
1156	hw->wiphy->software_iftypes |= BIT(NL80211_IFTYPE_MONITOR);
1157
1158	/* mac80211 doesn't support more than one IBSS interface right now */
1159	for (i = 0; i < hw->wiphy->n_iface_combinations; i++) {
1160	const struct ieee80211_iface_combination *c;
1161	int j;
1162
1163	c = &hw->wiphy->iface_combinations[i];
1164
1165	for (j = 0; j < c->n_limits; j++)
1166	if ((c->limits[j].types & BIT(NL80211_IFTYPE_ADHOC)) &&
1167	c->limits[j].max > 1)
1168	return -EINVAL;
1169	}
1170
1171	local->int_scan_req = kzalloc(size: sizeof(*local->int_scan_req) +
1172	sizeof(void *) * channels, GFP_KERNEL);
1173	if (!local->int_scan_req)
1174	return -ENOMEM;
1175
1176	eth_broadcast_addr(addr: local->int_scan_req->bssid);
1177
1178	for (band = 0; band < NUM_NL80211_BANDS; band++) {
1179	if (!local->hw.wiphy->bands[band])
1180	continue;
1181	local->int_scan_req->rates[band] = (u32) -1;
1182	}
1183
1184	#ifndef CONFIG_MAC80211_MESH
1185	/* mesh depends on Kconfig, but drivers should set it if they want */
1186	local->hw.wiphy->interface_modes &= ~BIT(NL80211_IFTYPE_MESH_POINT);
1187	#endif
1188
1189	/* if the underlying driver supports mesh, mac80211 will (at least)
1190	* provide routing of mesh authentication frames to userspace */
1191	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_MESH_POINT))
1192	local->hw.wiphy->flags |= WIPHY_FLAG_MESH_AUTH;
1193
1194	/* mac80211 supports control port protocol changing */
1195	local->hw.wiphy->flags |= WIPHY_FLAG_CONTROL_PORT_PROTOCOL;
1196
1197	if (ieee80211_hw_check(&local->hw, SIGNAL_DBM)) {
1198	local->hw.wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
1199	} else if (ieee80211_hw_check(&local->hw, SIGNAL_UNSPEC)) {
1200	local->hw.wiphy->signal_type = CFG80211_SIGNAL_TYPE_UNSPEC;
1201	if (hw->max_signal <= 0) {
1202	result = -EINVAL;
1203	goto fail_workqueue;
1204	}
1205	}
1206
1207	/* Mac80211 and therefore all drivers using SW crypto only
1208	* are able to handle PTK rekeys and Extended Key ID.
1209	*/
1210	if (!local->ops->set_key) {
1211	wiphy_ext_feature_set(wiphy: local->hw.wiphy,
1212	ftidx: NL80211_EXT_FEATURE_CAN_REPLACE_PTK0);
1213	wiphy_ext_feature_set(wiphy: local->hw.wiphy,
1214	ftidx: NL80211_EXT_FEATURE_EXT_KEY_ID);
1215	}
1216
1217	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_ADHOC))
1218	wiphy_ext_feature_set(wiphy: local->hw.wiphy,
1219	ftidx: NL80211_EXT_FEATURE_DEL_IBSS_STA);
1220
1221	/*
1222	* Calculate scan IE length -- we need this to alloc
1223	* memory and to subtract from the driver limit. It
1224	* includes the DS Params, (extended) supported rates, and HT
1225	* information -- SSID is the driver's responsibility.
1226	*/
1227	local->scan_ies_len = 4 + max_bitrates /* (ext) supp rates */ +
1228	3 /* DS Params */;
1229	if (supp_ht)
1230	local->scan_ies_len += 2 + sizeof(struct ieee80211_ht_cap);
1231
1232	if (supp_vht)
1233	local->scan_ies_len +=
1234	2 + sizeof(struct ieee80211_vht_cap);
1235
1236	/*
1237	* HE cap element is variable in size - set len to allow max size */
1238	if (supp_he) {
1239	local->scan_ies_len +=
1240	3 + sizeof(struct ieee80211_he_cap_elem) +
1241	sizeof(struct ieee80211_he_mcs_nss_supp) +
1242	IEEE80211_HE_PPE_THRES_MAX_LEN;
1243
1244	if (supp_eht)
1245	local->scan_ies_len +=
1246	3 + sizeof(struct ieee80211_eht_cap_elem) +
1247	sizeof(struct ieee80211_eht_mcs_nss_supp) +
1248	IEEE80211_EHT_PPE_THRES_MAX_LEN;
1249	}
1250
1251	if (!local->ops->hw_scan) {
1252	/* For hw_scan, driver needs to set these up. */
1253	local->hw.wiphy->max_scan_ssids = 4;
1254	local->hw.wiphy->max_scan_ie_len = IEEE80211_MAX_DATA_LEN;
1255	}
1256
1257	/*
1258	* If the driver supports any scan IEs, then assume the
1259	* limit includes the IEs mac80211 will add, otherwise
1260	* leave it at zero and let the driver sort it out; we
1261	* still pass our IEs to the driver but userspace will
1262	* not be allowed to in that case.
1263	*/
1264	if (local->hw.wiphy->max_scan_ie_len)
1265	local->hw.wiphy->max_scan_ie_len -= local->scan_ies_len;
1266
1267	result = ieee80211_init_cipher_suites(local);
1268	if (result < 0)
1269	goto fail_workqueue;
1270
1271	if (!local->ops->remain_on_channel)
1272	local->hw.wiphy->max_remain_on_channel_duration = 5000;
1273
1274	/* mac80211 based drivers don't support internal TDLS setup */
1275	if (local->hw.wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS)
1276	local->hw.wiphy->flags |= WIPHY_FLAG_TDLS_EXTERNAL_SETUP;
1277
1278	/* mac80211 supports eCSA, if the driver supports STA CSA at all */
1279	if (ieee80211_hw_check(&local->hw, CHANCTX_STA_CSA))
1280	local->ext_capa[0] |= WLAN_EXT_CAPA1_EXT_CHANNEL_SWITCHING;
1281
1282	/* mac80211 supports multi BSSID, if the driver supports it */
1283	if (ieee80211_hw_check(&local->hw, SUPPORTS_MULTI_BSSID)) {
1284	local->hw.wiphy->support_mbssid = true;
1285	if (ieee80211_hw_check(&local->hw,
1286	SUPPORTS_ONLY_HE_MULTI_BSSID))
1287	local->hw.wiphy->support_only_he_mbssid = true;
1288	else
1289	local->ext_capa[2] |=
1290	WLAN_EXT_CAPA3_MULTI_BSSID_SUPPORT;
1291	}
1292
1293	local->hw.wiphy->max_num_csa_counters = IEEE80211_MAX_CNTDWN_COUNTERS_NUM;
1294
1295	/*
1296	* We use the number of queues for feature tests (QoS, HT) internally
1297	* so restrict them appropriately.
1298	*/
1299	if (hw->queues > IEEE80211_MAX_QUEUES)
1300	hw->queues = IEEE80211_MAX_QUEUES;
1301
1302	local->workqueue =
1303	alloc_ordered_workqueue("%s", 0, wiphy_name(local->hw.wiphy));
1304	if (!local->workqueue) {
1305	result = -ENOMEM;
1306	goto fail_workqueue;
1307	}
1308
1309	/*
1310	* The hardware needs headroom for sending the frame,
1311	* and we need some headroom for passing the frame to monitor
1312	* interfaces, but never both at the same time.
1313	*/
1314	local->tx_headroom = max_t(unsigned int , local->hw.extra_tx_headroom,
1315	IEEE80211_TX_STATUS_HEADROOM);
1316
1317	/*
1318	* if the driver doesn't specify a max listen interval we
1319	* use 5 which should be a safe default
1320	*/
1321	if (local->hw.max_listen_interval == 0)
1322	local->hw.max_listen_interval = 5;
1323
1324	local->hw.conf.listen_interval = local->hw.max_listen_interval;
1325
1326	local->dynamic_ps_forced_timeout = -1;
1327
1328	if (!local->hw.max_nan_de_entries)
1329	local->hw.max_nan_de_entries = IEEE80211_MAX_NAN_INSTANCE_ID;
1330
1331	if (!local->hw.weight_multiplier)
1332	local->hw.weight_multiplier = 1;
1333
1334	ieee80211_wep_init(local);
1335
1336	local->hw.conf.flags = IEEE80211_CONF_IDLE;
1337
1338	ieee80211_led_init(local);
1339
1340	result = ieee80211_txq_setup_flows(local);
1341	if (result)
1342	goto fail_flows;
1343
1344	rtnl_lock();
1345	result = ieee80211_init_rate_ctrl_alg(local,
1346	name: hw->rate_control_algorithm);
1347	rtnl_unlock();
1348	if (result < 0) {
1349	wiphy_debug(local->hw.wiphy,
1350	"Failed to initialize rate control algorithm\n");
1351	goto fail_rate;
1352	}
1353
1354	if (local->rate_ctrl) {
1355	clear_bit(nr: IEEE80211_HW_SUPPORTS_VHT_EXT_NSS_BW, addr: hw->flags);
1356	if (local->rate_ctrl->ops->capa & RATE_CTRL_CAPA_VHT_EXT_NSS_BW)
1357	ieee80211_hw_set(hw, SUPPORTS_VHT_EXT_NSS_BW);
1358	}
1359
1360	/*
1361	* If the VHT capabilities don't have IEEE80211_VHT_EXT_NSS_BW_CAPABLE,
1362	* or have it when we don't, copy the sband structure and set/clear it.
1363	* This is necessary because rate scaling algorithms could be switched
1364	* and have different support values.
1365	* Print a message so that in the common case the reallocation can be
1366	* avoided.
1367	*/
1368	BUILD_BUG_ON(NUM_NL80211_BANDS > 8 * sizeof(local->sband_allocated));
1369	for (band = 0; band < NUM_NL80211_BANDS; band++) {
1370	struct ieee80211_supported_band *sband;
1371	bool local_cap, ie_cap;
1372
1373	local_cap = ieee80211_hw_check(hw, SUPPORTS_VHT_EXT_NSS_BW);
1374
1375	sband = local->hw.wiphy->bands[band];
1376	if (!sband || !sband->vht_cap.vht_supported)
1377	continue;
1378
1379	ie_cap = !!(sband->vht_cap.vht_mcs.tx_highest &
1380	cpu_to_le16(IEEE80211_VHT_EXT_NSS_BW_CAPABLE));
1381
1382	if (local_cap == ie_cap)
1383	continue;
1384
1385	sband = kmemdup(p: sband, size: sizeof(*sband), GFP_KERNEL);
1386	if (!sband) {
1387	result = -ENOMEM;
1388	goto fail_rate;
1389	}
1390
1391	wiphy_dbg(hw->wiphy, "copying sband (band %d) due to VHT EXT NSS BW flag\n",
1392	band);
1393
1394	sband->vht_cap.vht_mcs.tx_highest ^=
1395	cpu_to_le16(IEEE80211_VHT_EXT_NSS_BW_CAPABLE);
1396
1397	local->hw.wiphy->bands[band] = sband;
1398	local->sband_allocated |= BIT(band);
1399	}
1400
1401	result = wiphy_register(wiphy: local->hw.wiphy);
1402	if (result < 0)
1403	goto fail_wiphy_register;
1404
1405	debugfs_hw_add(local);
1406	rate_control_add_debugfs(local);
1407
1408	rtnl_lock();
1409	wiphy_lock(wiphy: hw->wiphy);
1410
1411	/* add one default STA interface if supported */
1412	if (local->hw.wiphy->interface_modes & BIT(NL80211_IFTYPE_STATION) &&
1413	!ieee80211_hw_check(hw, NO_AUTO_VIF)) {
1414	struct vif_params params = {0};
1415
1416	result = ieee80211_if_add(local, name: "wlan%d", NET_NAME_ENUM, NULL,
1417	type: NL80211_IFTYPE_STATION, params: &params);
1418	if (result)
1419	wiphy_warn(local->hw.wiphy,
1420	"Failed to add default virtual iface\n");
1421	}
1422
1423	wiphy_unlock(wiphy: hw->wiphy);
1424	rtnl_unlock();
1425
1426	#ifdef CONFIG_INET
1427	local->ifa_notifier.notifier_call = ieee80211_ifa_changed;
1428	result = register_inetaddr_notifier(nb: &local->ifa_notifier);
1429	if (result)
1430	goto fail_ifa;
1431	#endif
1432
1433	#if IS_ENABLED(CONFIG_IPV6)
1434	local->ifa6_notifier.notifier_call = ieee80211_ifa6_changed;
1435	result = register_inet6addr_notifier(nb: &local->ifa6_notifier);
1436	if (result)
1437	goto fail_ifa6;
1438	#endif
1439
1440	return 0;
1441
1442	#if IS_ENABLED(CONFIG_IPV6)
1443	fail_ifa6:
1444	#ifdef CONFIG_INET
1445	unregister_inetaddr_notifier(nb: &local->ifa_notifier);
1446	#endif
1447	#endif
1448	#if defined(CONFIG_INET) || defined(CONFIG_IPV6)
1449	fail_ifa:
1450	#endif
1451	wiphy_unregister(wiphy: local->hw.wiphy);
1452	fail_wiphy_register:
1453	rtnl_lock();
1454	rate_control_deinitialize(local);
1455	ieee80211_remove_interfaces(local);
1456	rtnl_unlock();
1457	fail_rate:
1458	ieee80211_txq_teardown_flows(local);
1459	fail_flows:
1460	ieee80211_led_exit(local);
1461	destroy_workqueue(wq: local->workqueue);
1462	fail_workqueue:
1463	if (local->wiphy_ciphers_allocated) {
1464	kfree(objp: local->hw.wiphy->cipher_suites);
1465	local->wiphy_ciphers_allocated = false;
1466	}
1467	kfree(objp: local->int_scan_req);
1468	return result;
1469	}
1470	EXPORT_SYMBOL(ieee80211_register_hw);
1471
1472	void ieee80211_unregister_hw(struct ieee80211_hw *hw)
1473	{
1474	struct ieee80211_local *local = hw_to_local(hw);
1475
1476	tasklet_kill(t: &local->tx_pending_tasklet);
1477	tasklet_kill(t: &local->tasklet);
1478
1479	#ifdef CONFIG_INET
1480	unregister_inetaddr_notifier(nb: &local->ifa_notifier);
1481	#endif
1482	#if IS_ENABLED(CONFIG_IPV6)
1483	unregister_inet6addr_notifier(nb: &local->ifa6_notifier);
1484	#endif
1485
1486	rtnl_lock();
1487
1488	/*
1489	* At this point, interface list manipulations are fine
1490	* because the driver cannot be handing us frames any
1491	* more and the tasklet is killed.
1492	*/
1493	ieee80211_remove_interfaces(local);
1494
1495	ieee80211_txq_teardown_flows(local);
1496
1497	wiphy_lock(wiphy: local->hw.wiphy);
1498	wiphy_delayed_work_cancel(wiphy: local->hw.wiphy, dwork: &local->roc_work);
1499	wiphy_work_cancel(wiphy: local->hw.wiphy, work: &local->reconfig_filter);
1500	wiphy_work_cancel(wiphy: local->hw.wiphy, work: &local->sched_scan_stopped_work);
1501	wiphy_work_cancel(wiphy: local->hw.wiphy, work: &local->radar_detected_work);
1502	wiphy_unlock(wiphy: local->hw.wiphy);
1503	rtnl_unlock();
1504
1505	cancel_work_sync(work: &local->restart_work);
1506
1507	ieee80211_clear_tx_pending(local);
1508	rate_control_deinitialize(local);
1509
1510	if (skb_queue_len(list_: &local->skb_queue) ||
1511	skb_queue_len(list_: &local->skb_queue_unreliable))
1512	wiphy_warn(local->hw.wiphy, "skb_queue not empty\n");
1513	skb_queue_purge(list: &local->skb_queue);
1514	skb_queue_purge(list: &local->skb_queue_unreliable);
1515
1516	wiphy_unregister(wiphy: local->hw.wiphy);
1517	destroy_workqueue(wq: local->workqueue);
1518	ieee80211_led_exit(local);
1519	kfree(objp: local->int_scan_req);
1520	}
1521	EXPORT_SYMBOL(ieee80211_unregister_hw);
1522
1523	static int ieee80211_free_ack_frame(int id, void *p, void *data)
1524	{
1525	WARN_ONCE(1, "Have pending ack frames!\n");
1526	kfree_skb(skb: p);
1527	return 0;
1528	}
1529
1530	void ieee80211_free_hw(struct ieee80211_hw *hw)
1531	{
1532	struct ieee80211_local *local = hw_to_local(hw);
1533	enum nl80211_band band;
1534
1535	mutex_destroy(lock: &local->iflist_mtx);
1536
1537	if (local->wiphy_ciphers_allocated) {
1538	kfree(objp: local->hw.wiphy->cipher_suites);
1539	local->wiphy_ciphers_allocated = false;
1540	}
1541
1542	idr_for_each(&local->ack_status_frames,
1543	fn: ieee80211_free_ack_frame, NULL);
1544	idr_destroy(&local->ack_status_frames);
1545
1546	sta_info_stop(local);
1547
1548	ieee80211_free_led_names(local);
1549
1550	for (band = 0; band < NUM_NL80211_BANDS; band++) {
1551	if (!(local->sband_allocated & BIT(band)))
1552	continue;
1553	kfree(objp: local->hw.wiphy->bands[band]);
1554	}
1555
1556	wiphy_free(wiphy: local->hw.wiphy);
1557	}
1558	EXPORT_SYMBOL(ieee80211_free_hw);
1559
1560	static const char * const drop_reasons_monitor[] = {
1561	#define V(x) #x,
1562	[0] = "RX_DROP_MONITOR",
1563	MAC80211_DROP_REASONS_MONITOR(V)
1564	};
1565
1566	static struct drop_reason_list drop_reason_list_monitor = {
1567	.reasons = drop_reasons_monitor,
1568	.n_reasons = ARRAY_SIZE(drop_reasons_monitor),
1569	};
1570
1571	static const char * const drop_reasons_unusable[] = {
1572	[0] = "RX_DROP_UNUSABLE",
1573	MAC80211_DROP_REASONS_UNUSABLE(V)
1574	#undef V
1575	};
1576
1577	static struct drop_reason_list drop_reason_list_unusable = {
1578	.reasons = drop_reasons_unusable,
1579	.n_reasons = ARRAY_SIZE(drop_reasons_unusable),
1580	};
1581
1582	static int __init ieee80211_init(void)
1583	{
1584	struct sk_buff *skb;
1585	int ret;
1586
1587	BUILD_BUG_ON(sizeof(struct ieee80211_tx_info) > sizeof(skb->cb));
1588	BUILD_BUG_ON(offsetof(struct ieee80211_tx_info, driver_data) +
1589	IEEE80211_TX_INFO_DRIVER_DATA_SIZE > sizeof(skb->cb));
1590
1591	ret = rc80211_minstrel_init();
1592	if (ret)
1593	return ret;
1594
1595	ret = ieee80211_iface_init();
1596	if (ret)
1597	goto err_netdev;
1598
1599	drop_reasons_register_subsys(subsys: SKB_DROP_REASON_SUBSYS_MAC80211_MONITOR,
1600	list: &drop_reason_list_monitor);
1601	drop_reasons_register_subsys(subsys: SKB_DROP_REASON_SUBSYS_MAC80211_UNUSABLE,
1602	list: &drop_reason_list_unusable);
1603
1604	return 0;
1605	err_netdev:
1606	rc80211_minstrel_exit();
1607
1608	return ret;
1609	}
1610
1611	static void __exit ieee80211_exit(void)
1612	{
1613	rc80211_minstrel_exit();
1614
1615	ieee80211s_stop();
1616
1617	ieee80211_iface_exit();
1618
1619	drop_reasons_unregister_subsys(subsys: SKB_DROP_REASON_SUBSYS_MAC80211_MONITOR);
1620	drop_reasons_unregister_subsys(subsys: SKB_DROP_REASON_SUBSYS_MAC80211_UNUSABLE);
1621
1622	rcu_barrier();
1623	}
1624
1625
1626	subsys_initcall(ieee80211_init);
1627	module_exit(ieee80211_exit);
1628
1629	MODULE_DESCRIPTION("IEEE 802.11 subsystem");
1630	MODULE_LICENSE("GPL");
1631