iface.c 46 KB
Newer Older
1
/*
2
 * Interface handling
3
 *
4 5 6
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
7
 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
8 9 10 11 12
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */
13
#include <linux/slab.h>
14 15 16 17 18
#include <linux/kernel.h>
#include <linux/if_arp.h>
#include <linux/netdevice.h>
#include <linux/rtnetlink.h>
#include <net/mac80211.h>
19
#include <net/ieee80211_radiotap.h>
20 21
#include "ieee80211_i.h"
#include "sta_info.h"
22
#include "debugfs_netdev.h"
23
#include "mesh.h"
24
#include "led.h"
25
#include "driver-ops.h"
26
#include "wme.h"
Bill Jordan's avatar
Bill Jordan committed
27
#include "rate.h"
28

29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44
/**
 * DOC: Interface list locking
 *
 * The interface list in each struct ieee80211_local is protected
 * three-fold:
 *
 * (1) modifications may only be done under the RTNL
 * (2) modifications and readers are protected against each other by
 *     the iflist_mtx.
 * (3) modifications are done in an RCU manner so atomic readers
 *     can traverse the list in RCU-safe blocks.
 *
 * As a consequence, reads (traversals) of the list can be protected
 * by either the RTNL, the iflist_mtx or RCU.
 */

45 46 47 48 49 50 51 52 53 54 55 56
bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_chanctx_conf *chanctx_conf;
	int power;

	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
	if (!chanctx_conf) {
		rcu_read_unlock();
		return false;
	}

57
	power = chanctx_conf->def.chan->max_power;
58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79
	rcu_read_unlock();

	if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
		power = min(power, sdata->user_power_level);

	if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
		power = min(power, sdata->ap_power_level);

	if (power != sdata->vif.bss_conf.txpower) {
		sdata->vif.bss_conf.txpower = power;
		ieee80211_hw_config(sdata->local, 0);
		return true;
	}

	return false;
}

void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
{
	if (__ieee80211_recalc_txpower(sdata))
		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER);
}
80

81
static u32 __ieee80211_idle_off(struct ieee80211_local *local)
82 83 84 85 86 87 88 89
{
	if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
		return 0;

	local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
	return IEEE80211_CONF_CHANGE_IDLE;
}

90
static u32 __ieee80211_idle_on(struct ieee80211_local *local)
91 92 93 94
{
	if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
		return 0;

95
	ieee80211_flush_queues(local, NULL);
96 97 98 99 100

	local->hw.conf.flags |= IEEE80211_CONF_IDLE;
	return IEEE80211_CONF_CHANGE_IDLE;
}

101 102
static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
				   bool force_active)
103
{
104
	bool working = false, scanning, active;
105 106 107 108 109
	unsigned int led_trig_start = 0, led_trig_stop = 0;
	struct ieee80211_roc_work *roc;

	lockdep_assert_held(&local->mtx);

110 111 112
	active = force_active ||
		 !list_empty(&local->chanctx_list) ||
		 local->monitors;
113 114 115 116

	if (!local->ops->remain_on_channel) {
		list_for_each_entry(roc, &local->roc_list, list) {
			working = true;
117
			break;
118 119 120
		}
	}

121 122
	scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
		   test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
123 124 125 126 127 128

	if (working || scanning)
		led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
	else
		led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;

129
	if (active)
130 131 132 133 134 135
		led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
	else
		led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;

	ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);

136
	if (working || scanning || active)
137 138 139 140 141 142 143 144 145 146 147 148
		return __ieee80211_idle_off(local);
	return __ieee80211_idle_on(local);
}

u32 ieee80211_idle_off(struct ieee80211_local *local)
{
	return __ieee80211_recalc_idle(local, true);
}

void ieee80211_recalc_idle(struct ieee80211_local *local)
{
	u32 change = __ieee80211_recalc_idle(local, false);
149 150
	if (change)
		ieee80211_hw_config(local, change);
151 152
}

153 154
static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
{
Chaitanya's avatar
Chaitanya committed
155
	if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN)
156 157 158 159 160 161
		return -EINVAL;

	dev->mtu = new_mtu;
	return 0;
}

John W. Linville's avatar
John W. Linville committed
162
static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
163
				bool check_dup)
164
{
165 166
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_sub_if_data *iter;
167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183
	u64 new, mask, tmp;
	u8 *m;
	int ret = 0;

	if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
		return 0;

	m = addr;
	new =	((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
		((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
		((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);

	m = local->hw.wiphy->addr_mask;
	mask =	((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
		((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
		((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);

184 185
	if (!check_dup)
		return ret;
186 187

	mutex_lock(&local->iflist_mtx);
188 189
	list_for_each_entry(iter, &local->interfaces, list) {
		if (iter == sdata)
190 191
			continue;

John W. Linville's avatar
John W. Linville committed
192 193
		if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
		    !(iter->u.mntr_flags & MONITOR_FLAG_ACTIVE))
194 195
			continue;

196
		m = iter->vif.addr;
197 198 199 200 201 202 203 204 205 206 207 208 209 210
		tmp =	((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
			((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
			((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);

		if ((new & ~mask) != (tmp & ~mask)) {
			ret = -EINVAL;
			break;
		}
	}
	mutex_unlock(&local->iflist_mtx);

	return ret;
}

211 212 213
static int ieee80211_change_mac(struct net_device *dev, void *addr)
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
214
	struct sockaddr *sa = addr;
215
	bool check_dup = true;
216 217
	int ret;

218
	if (ieee80211_sdata_running(sdata))
219 220
		return -EBUSY;

221 222 223 224
	if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
	    !(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
		check_dup = false;

John W. Linville's avatar
John W. Linville committed
225
	ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
226 227 228
	if (ret)
		return ret;

229
	ret = eth_mac_addr(dev, sa);
230 231

	if (ret == 0)
232
		memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
233 234 235 236

	return ret;
}

237 238 239 240
static inline int identical_mac_addr_allowed(int type1, int type2)
{
	return type1 == NL80211_IFTYPE_MONITOR ||
		type2 == NL80211_IFTYPE_MONITOR ||
241 242
		type1 == NL80211_IFTYPE_P2P_DEVICE ||
		type2 == NL80211_IFTYPE_P2P_DEVICE ||
243 244 245 246 247 248 249 250 251 252
		(type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) ||
		(type1 == NL80211_IFTYPE_WDS &&
			(type2 == NL80211_IFTYPE_WDS ||
			 type2 == NL80211_IFTYPE_AP)) ||
		(type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
		(type1 == NL80211_IFTYPE_AP_VLAN &&
			(type2 == NL80211_IFTYPE_AP ||
			 type2 == NL80211_IFTYPE_AP_VLAN));
}

253 254
static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
					    enum nl80211_iftype iftype)
255
{
256
	struct ieee80211_local *local = sdata->local;
257
	struct ieee80211_sub_if_data *nsdata;
258

259
	ASSERT_RTNL();
260 261 262

	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(nsdata, &local->interfaces, list) {
263
		if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
264 265 266 267 268 269 270 271 272 273
			/*
			 * Allow only a single IBSS interface to be up at any
			 * time. This is restricted because beacon distribution
			 * cannot work properly if both are in the same IBSS.
			 *
			 * To remove this restriction we'd have to disallow them
			 * from setting the same SSID on different IBSS interfaces
			 * belonging to the same hardware. Then, however, we're
			 * faced with having to adopt two different TSF timers...
			 */
274
			if (iftype == NL80211_IFTYPE_ADHOC &&
275 276 277 278 279 280 281
			    nsdata->vif.type == NL80211_IFTYPE_ADHOC)
				return -EBUSY;

			/*
			 * The remaining checks are only performed for interfaces
			 * with the same MAC address.
			 */
282 283
			if (!ether_addr_equal(sdata->vif.addr,
					      nsdata->vif.addr))
284 285 286 287 288
				continue;

			/*
			 * check whether it may have the same address
			 */
289
			if (!identical_mac_addr_allowed(iftype,
290 291 292 293 294 295
							nsdata->vif.type))
				return -ENOTUNIQ;

			/*
			 * can only add VLANs to enabled APs
			 */
296
			if (iftype == NL80211_IFTYPE_AP_VLAN &&
297 298 299 300 301
			    nsdata->vif.type == NL80211_IFTYPE_AP)
				sdata->bss = &nsdata->u.ap;
		}
	}

302 303 304
	return 0;
}

305 306 307 308 309
static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata)
{
	int n_queues = sdata->local->hw.queues;
	int i;

310 311 312 313 314 315 316 317 318
	if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
		for (i = 0; i < IEEE80211_NUM_ACS; i++) {
			if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
					 IEEE80211_INVAL_HW_QUEUE))
				return -EINVAL;
			if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
					 n_queues))
				return -EINVAL;
		}
319 320
	}

321 322
	if ((sdata->vif.type != NL80211_IFTYPE_AP &&
	     sdata->vif.type != NL80211_IFTYPE_MESH_POINT) ||
323
	    !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) {
324 325 326 327 328 329 330 331 332 333 334 335 336
		sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
		return 0;
	}

	if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
		return -EINVAL;

	if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
		return -EINVAL;

	return 0;
}

337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356
void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
				    const int offset)
{
	struct ieee80211_local *local = sdata->local;
	u32 flags = sdata->u.mntr_flags;

#define ADJUST(_f, _s)	do {					\
	if (flags & MONITOR_FLAG_##_f)				\
		local->fif_##_s += offset;			\
	} while (0)

	ADJUST(FCSFAIL, fcsfail);
	ADJUST(PLCPFAIL, plcpfail);
	ADJUST(CONTROL, control);
	ADJUST(CONTROL, pspoll);
	ADJUST(OTHER_BSS, other_bss);

#undef ADJUST
}

357 358 359 360 361 362 363 364
static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_local *local = sdata->local;
	int i;

	for (i = 0; i < IEEE80211_NUM_ACS; i++) {
		if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
			sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
365
		else if (local->hw.queues >= IEEE80211_NUM_ACS)
366
			sdata->vif.hw_queue[i] = i;
367 368
		else
			sdata->vif.hw_queue[i] = 0;
369 370 371 372
	}
	sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
}

373
int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
374 375
{
	struct ieee80211_sub_if_data *sdata;
376
	int ret;
377 378 379 380

	if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
		return 0;

381
	ASSERT_RTNL();
382

383
	if (local->monitor_sdata)
384
		return 0;
385 386

	sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
387 388
	if (!sdata)
		return -ENOMEM;
389 390 391 392 393 394 395

	/* set up data */
	sdata->local = local;
	sdata->vif.type = NL80211_IFTYPE_MONITOR;
	snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
		 wiphy_name(local->hw.wiphy));

396 397
	ieee80211_set_default_queues(sdata);

398 399 400 401
	ret = drv_add_interface(local, sdata);
	if (WARN_ON(ret)) {
		/* ok .. stupid driver, it asked for this! */
		kfree(sdata);
402
		return ret;
403 404
	}

405 406 407
	ret = ieee80211_check_queues(sdata);
	if (ret) {
		kfree(sdata);
408
		return ret;
409 410
	}

411
	ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef,
Johannes Berg's avatar
Johannes Berg committed
412 413 414 415
					IEEE80211_CHANCTX_EXCLUSIVE);
	if (ret) {
		drv_remove_interface(local, sdata);
		kfree(sdata);
416
		return ret;
Johannes Berg's avatar
Johannes Berg committed
417 418
	}

419
	mutex_lock(&local->iflist_mtx);
420
	rcu_assign_pointer(local->monitor_sdata, sdata);
421
	mutex_unlock(&local->iflist_mtx);
422 423

	return 0;
424 425
}

426
void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
427 428 429 430 431 432
{
	struct ieee80211_sub_if_data *sdata;

	if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
		return;

433 434
	ASSERT_RTNL();

435
	mutex_lock(&local->iflist_mtx);
436

437 438
	sdata = rcu_dereference_protected(local->monitor_sdata,
					  lockdep_is_held(&local->iflist_mtx));
439 440 441 442
	if (!sdata) {
		mutex_unlock(&local->iflist_mtx);
		return;
	}
443 444

	rcu_assign_pointer(local->monitor_sdata, NULL);
445 446
	mutex_unlock(&local->iflist_mtx);

447 448
	synchronize_net();

Johannes Berg's avatar
Johannes Berg committed
449 450
	ieee80211_vif_release_channel(sdata);

451 452 453 454 455
	drv_remove_interface(local, sdata);

	kfree(sdata);
}

456 457 458 459 460
/*
 * NOTE: Be very careful when changing this function, it must NOT return
 * an error on interface type changes that have been pre-checked, so most
 * checks should be in ieee80211_check_concurrent_iface.
 */
461
int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
462
{
463 464
	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
	struct net_device *dev = wdev->netdev;
465 466 467 468 469 470
	struct ieee80211_local *local = sdata->local;
	struct sta_info *sta;
	u32 changed = 0;
	int res;
	u32 hw_reconf_flags = 0;

471 472 473 474 475
	switch (sdata->vif.type) {
	case NL80211_IFTYPE_WDS:
		if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
			return -ENOLINK;
		break;
476 477 478
	case NL80211_IFTYPE_AP_VLAN: {
		struct ieee80211_sub_if_data *master;

479 480
		if (!sdata->bss)
			return -ENOLINK;
481

482
		list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
483 484 485 486 487 488 489

		master = container_of(sdata->bss,
				      struct ieee80211_sub_if_data, u.ap);
		sdata->control_port_protocol =
			master->control_port_protocol;
		sdata->control_port_no_encrypt =
			master->control_port_no_encrypt;
490 491 492
		sdata->vif.cab_queue = master->vif.cab_queue;
		memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
		       sizeof(sdata->vif.hw_queue));
493
		break;
494
		}
495 496 497 498 499 500 501
	case NL80211_IFTYPE_AP:
		sdata->bss = &sdata->u.ap;
		break;
	case NL80211_IFTYPE_MESH_POINT:
	case NL80211_IFTYPE_STATION:
	case NL80211_IFTYPE_MONITOR:
	case NL80211_IFTYPE_ADHOC:
502
	case NL80211_IFTYPE_P2P_DEVICE:
503 504 505
		/* no special treatment */
		break;
	case NL80211_IFTYPE_UNSPECIFIED:
506
	case NUM_NL80211_IFTYPES:
507 508
	case NL80211_IFTYPE_P2P_CLIENT:
	case NL80211_IFTYPE_P2P_GO:
509 510 511 512 513 514
		/* cannot happen */
		WARN_ON(1);
		break;
	}

	if (local->open_count == 0) {
515
		res = drv_start(local);
516 517
		if (res)
			goto err_del_bss;
518 519
		/* we're brought up, everything changes */
		hw_reconf_flags = ~0;
Johannes Berg's avatar
Johannes Berg committed
520
		ieee80211_led_radio(local, true);
521 522
		ieee80211_mod_tpt_led_trig(local,
					   IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
523 524 525
	}

	/*
526 527
	 * Copy the hopefully now-present MAC address to
	 * this interface, if it has the special null one.
528
	 */
529
	if (dev && is_zero_ether_addr(dev->dev_addr)) {
530 531 532 533 534 535
		memcpy(dev->dev_addr,
		       local->hw.wiphy->perm_addr,
		       ETH_ALEN);
		memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);

		if (!is_valid_ether_addr(dev->dev_addr)) {
536 537
			res = -EADDRNOTAVAIL;
			goto err_stop;
538
		}
539 540 541 542
	}

	switch (sdata->vif.type) {
	case NL80211_IFTYPE_AP_VLAN:
543 544 545
		/* no need to tell driver, but set carrier and chanctx */
		if (rtnl_dereference(sdata->bss->beacon)) {
			ieee80211_vif_vlan_copy_chanctx(sdata);
546
			netif_carrier_on(dev);
547
		} else {
548
			netif_carrier_off(dev);
549
		}
550 551 552 553 554 555 556
		break;
	case NL80211_IFTYPE_MONITOR:
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs++;
			break;
		}

557 558 559 560 561
		if (sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE) {
			res = drv_add_interface(local, sdata);
			if (res)
				goto err_stop;
		} else if (local->monitors == 0 && local->open_count == 0) {
562 563 564 565 566
			res = ieee80211_add_virtual_monitor(local);
			if (res)
				goto err_stop;
		}

567 568
		/* must be before the call to ieee80211_configure_filter */
		local->monitors++;
569
		if (local->monitors == 1) {
570 571
			local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
			hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
572
		}
573

574
		ieee80211_adjust_monitor_flags(sdata, 1);
575
		ieee80211_configure_filter(local);
576 577 578
		mutex_lock(&local->mtx);
		ieee80211_recalc_idle(local);
		mutex_unlock(&local->mtx);
579 580

		netif_carrier_on(dev);
581 582
		break;
	default:
583
		if (coming_up) {
584 585
			ieee80211_del_virtual_monitor(local);

586
			res = drv_add_interface(local, sdata);
587 588
			if (res)
				goto err_stop;
589 590 591
			res = ieee80211_check_queues(sdata);
			if (res)
				goto err_del_interface;
592
		}
593

594
		if (sdata->vif.type == NL80211_IFTYPE_AP) {
595
			local->fif_pspoll++;
596
			local->fif_probe_req++;
597 598

			ieee80211_configure_filter(local);
599 600
		} else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
			local->fif_probe_req++;
601
		}
602

603 604
		if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
			changed |= ieee80211_reset_erp_info(sdata);
605 606
		ieee80211_bss_info_change_notify(sdata, changed);

607 608 609 610 611
		switch (sdata->vif.type) {
		case NL80211_IFTYPE_STATION:
		case NL80211_IFTYPE_ADHOC:
		case NL80211_IFTYPE_AP:
		case NL80211_IFTYPE_MESH_POINT:
612
			netif_carrier_off(dev);
613
			break;
614
		case NL80211_IFTYPE_WDS:
615
		case NL80211_IFTYPE_P2P_DEVICE:
616
			break;
617
		default:
618 619
			/* not reached */
			WARN_ON(1);
620
		}
621 622 623 624 625 626

		/*
		 * set default queue parameters so drivers don't
		 * need to initialise the hardware if the hardware
		 * doesn't start up with sane defaults
		 */
627
		ieee80211_set_wmm_default(sdata, true);
628 629
	}

630 631
	set_bit(SDATA_STATE_RUNNING, &sdata->state);

632 633 634 635 636 637 638 639 640
	if (sdata->vif.type == NL80211_IFTYPE_WDS) {
		/* Create STA entry for the WDS peer */
		sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
				     GFP_KERNEL);
		if (!sta) {
			res = -ENOMEM;
			goto err_del_interface;
		}

641 642 643
		sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
		sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
		sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
644 645 646 647 648 649

		res = sta_info_insert(sta);
		if (res) {
			/* STA has been freed */
			goto err_del_interface;
		}
Bill Jordan's avatar
Bill Jordan committed
650 651

		rate_control_rate_init(sta);
652
		netif_carrier_on(dev);
653 654
	} else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) {
		rcu_assign_pointer(local->p2p_sdata, sdata);
655 656 657 658 659 660 661 662 663 664 665 666 667
	}

	/*
	 * set_multicast_list will be invoked by the networking core
	 * which will check whether any increments here were done in
	 * error and sync them down to the hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_inc(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_inc(&local->iff_promiscs);

668 669 670
	if (coming_up)
		local->open_count++;

671
	if (hw_reconf_flags)
672
		ieee80211_hw_config(local, hw_reconf_flags);
673

674
	ieee80211_recalc_ps(local, -1);
675

676 677 678 679 680
	if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
	    sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
		/* XXX: for AP_VLAN, actually track AP queues */
		netif_tx_start_all_queues(dev);
	} else if (dev) {
681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701
		unsigned long flags;
		int n_acs = IEEE80211_NUM_ACS;
		int ac;

		if (local->hw.queues < IEEE80211_NUM_ACS)
			n_acs = 1;

		spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
		if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE ||
		    (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 &&
		     skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) {
			for (ac = 0; ac < n_acs; ac++) {
				int ac_queue = sdata->vif.hw_queue[ac];

				if (local->queue_stop_reasons[ac_queue] == 0 &&
				    skb_queue_empty(&local->pending[ac_queue]))
					netif_start_subqueue(dev, ac);
			}
		}
		spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
	}
702 703 704

	return 0;
 err_del_interface:
705
	drv_remove_interface(local, sdata);
706
 err_stop:
707 708
	if (!local->open_count)
		drv_stop(local);
709 710 711 712
 err_del_bss:
	sdata->bss = NULL;
	if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
		list_del(&sdata->u.vlan.list);
713
	/* might already be clear but that doesn't matter */
714
	clear_bit(SDATA_STATE_RUNNING, &sdata->state);
715 716 717
	return res;
}

718
static int ieee80211_open(struct net_device *dev)
719 720
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
721 722 723
	int err;

	/* fail early if user set an invalid address */
724
	if (!is_valid_ether_addr(dev->dev_addr))
725 726 727 728 729 730
		return -EADDRNOTAVAIL;

	err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
	if (err)
		return err;

731
	return ieee80211_do_open(&sdata->wdev, true);
732 733 734 735 736
}

static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata,
			      bool going_down)
{
737
	struct ieee80211_local *local = sdata->local;
738 739
	unsigned long flags;
	struct sk_buff *skb, *tmp;
740
	u32 hw_reconf_flags = 0;
741
	int i, flushed;
742
	struct ps_data *ps;
743

744 745
	clear_bit(SDATA_STATE_RUNNING, &sdata->state);

746
	if (rcu_access_pointer(local->scan_sdata) == sdata)
747 748
		ieee80211_scan_cancel(local);

749 750 751
	/*
	 * Stop TX on this interface first.
	 */
752 753
	if (sdata->dev)
		netif_tx_stop_all_queues(sdata->dev);
754

755
	ieee80211_roc_purge(local, sdata);
756

757 758 759
	if (sdata->vif.type == NL80211_IFTYPE_STATION)
		ieee80211_mgd_stop(sdata);

760 761 762 763 764 765 766 767 768 769
	/*
	 * Remove all stations associated with this interface.
	 *
	 * This must be done before calling ops->remove_interface()
	 * because otherwise we can later invoke ops->sta_notify()
	 * whenever the STAs are removed, and that invalidates driver
	 * assumptions about always getting a vif pointer that is valid
	 * (because if we remove a STA after ops->remove_interface()
	 * the driver will have removed the vif info already!)
	 *
770 771 772
	 * This is relevant only in WDS mode, in all other modes we've
	 * already removed all stations when disconnecting or similar,
	 * so warn otherwise.
773 774
	 *
	 * We call sta_info_flush_cleanup() later, to combine RCU waits.
775
	 */
776
	flushed = sta_info_flush_defer(sdata);
777 778
	WARN_ON_ONCE((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) ||
		     (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1));
779

780
	/* don't count this interface for promisc/allmulti while it is down */
781 782 783 784 785 786
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_dec(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_dec(&local->iff_promiscs);

787
	if (sdata->vif.type == NL80211_IFTYPE_AP) {
788
		local->fif_pspoll--;
789 790 791 792
		local->fif_probe_req--;
	} else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
		local->fif_probe_req--;
	}
793

794 795 796 797 798 799 800 801
	if (sdata->dev) {
		netif_addr_lock_bh(sdata->dev);
		spin_lock_bh(&local->filter_lock);
		__hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
				 sdata->dev->addr_len);
		spin_unlock_bh(&local->filter_lock);
		netif_addr_unlock_bh(sdata->dev);
	}
802

803 804
	del_timer_sync(&local->dynamic_ps_timer);
	cancel_work_sync(&local->dynamic_ps_enable_work);
805

806 807
	cancel_work_sync(&sdata->recalc_smps);

808 809 810
	cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);

	if (sdata->wdev.cac_started) {
811
		WARN_ON(local->suspended);
812 813 814 815 816 817 818
		mutex_lock(&local->iflist_mtx);
		ieee80211_vif_release_channel(sdata);
		mutex_unlock(&local->iflist_mtx);
		cfg80211_cac_event(sdata->dev, NL80211_RADAR_CAC_ABORTED,
				   GFP_KERNEL);
	}

819 820
	/* APs need special treatment */
	if (sdata->vif.type == NL80211_IFTYPE_AP) {
821
		struct ieee80211_sub_if_data *vlan, *tmpsdata;
822 823

		/* down all dependent devices, that is VLANs */
824
		list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
825 826 827
					 u.vlan.list)
			dev_close(vlan->dev);
		WARN_ON(!list_empty(&sdata->u.ap.vlans));
828 829 830 831 832 833 834 835 836 837 838 839 840
	} else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
		/* remove all packets in parent bc_buf pointing to this dev */
		ps = &sdata->bss->ps;

		spin_lock_irqsave(&ps->bc_buf.lock, flags);
		skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
			if (skb->dev == sdata->dev) {
				__skb_unlink(skb, &ps->bc_buf);
				local->total_ps_buffered--;
				ieee80211_free_txskb(&local->hw, skb);
			}
		}
		spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
841 842
	}

843 844
	if (going_down)
		local->open_count--;
845 846 847 848

	switch (sdata->vif.type) {
	case NL80211_IFTYPE_AP_VLAN:
		list_del(&sdata->u.vlan.list);
849
		rcu_assign_pointer(sdata->vif.chanctx_conf, NULL);
850 851 852 853 854 855 856 857 858
		/* no need to tell driver */
		break;
	case NL80211_IFTYPE_MONITOR:
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs--;
			break;
		}

		local->monitors--;
859
		if (local->monitors == 0) {
860 861
			local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
			hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
862
		}
863

864
		ieee80211_adjust_monitor_flags(sdata, -1);
865
		break;
866 867 868 869
	case NL80211_IFTYPE_P2P_DEVICE:
		/* relies on synchronize_rcu() below */
		rcu_assign_pointer(local->p2p_sdata, NULL);
		/* fall through */
870
	default:
871
		cancel_work_sync(&sdata->work);
Johannes Berg's avatar
Johannes Berg committed
872 873
		/*
		 * When we get here, the interface is marked down.
874 875 876
		 *
		 * sta_info_flush_cleanup() requires rcu_barrier()
		 * first to wait for the station call_rcu() calls
877 878
		 * to complete, and we also need synchronize_rcu()
		 * to wait for the RX path in case it is using the
879 880
		 * interface and enqueuing frames at this very time on
		 * another CPU.
Johannes Berg's avatar
Johannes Berg committed
881
		 */
882
		synchronize_rcu();
883
		rcu_barrier();
884 885
		sta_info_flush_cleanup(sdata);

886 887
		/*
		 * Free all remaining keys, there shouldn't be any,
888
		 * except maybe in WDS mode?
889
		 */
Johannes Berg's avatar
Johannes Berg committed
890
		ieee80211_free_keys(sdata);
891

892 893 894
		/* fall through */
	case NL80211_IFTYPE_AP:
		skb_queue_purge(&sdata->skb_queue);
895 896 897 898
	}

	sdata->bss = NULL;

899 900 901 902 903 904
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
		skb_queue_walk_safe(&local->pending[i], skb, tmp) {
			struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
			if (info->control.vif == &sdata->vif) {
				__skb_unlink(skb, &local->pending[i]);
905
				ieee80211_free_txskb(&local->hw, skb);
906 907 908 909
			}
		}
	}
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
910

911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938
	if (local->open_count == 0)
		ieee80211_clear_tx_pending(local);

	/*
	 * If the interface goes down while suspended, presumably because
	 * the device was unplugged and that happens before our resume,
	 * then the driver is already unconfigured and the remainder of
	 * this function isn't needed.
	 * XXX: what about WoWLAN? If the device has software state, e.g.
	 *	memory allocated, it might expect teardown commands from
	 *	mac80211 here?
	 */
	if (local->suspended) {
		WARN_ON(local->wowlan);
		WARN_ON(rtnl_dereference(local->monitor_sdata));
		return;
	}

	switch (sdata->vif.type) {
	case NL80211_IFTYPE_AP_VLAN:
		break;
	case NL80211_IFTYPE_MONITOR:
		if (local->monitors == 0)
			ieee80211_del_virtual_monitor(local);

		mutex_lock(&local->mtx);
		ieee80211_recalc_idle(local);
		mutex_unlock(&local->mtx);
939 940 941 942 943

		if (!(sdata->u.mntr_flags & MONITOR_FLAG_ACTIVE))
			break;

		/* fall through */
944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962
	default:
		if (going_down)
			drv_remove_interface(local, sdata);
	}

	ieee80211_recalc_ps(local, -1);

	if (local->open_count == 0) {
		ieee80211_stop_device(local);

		/* no reconfiguring after stop! */
		return;
	}

	/* do after stop to avoid reconfiguring when we stop anyway */
	ieee80211_configure_filter(local);
	ieee80211_hw_config(local, hw_reconf_flags);

	if (local->monitors == local->open_count)
963
		ieee80211_add_virtual_monitor(local);
964 965 966 967 968 969 970
}

static int ieee80211_stop(struct net_device *dev)
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);

	ieee80211_do_stop(sdata, true);
971

972 973 974 975 976 977
	return 0;
}

static void ieee80211_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
978
	struct ieee80211_local *local = sdata->local;
979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000
	int allmulti, promisc, sdata_allmulti, sdata_promisc;

	allmulti = !!(dev->flags & IFF_ALLMULTI);
	promisc = !!(dev->flags & IFF_PROMISC);
	sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
	sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);

	if (allmulti != sdata_allmulti) {
		if (dev->flags & IFF_ALLMULTI)
			atomic_inc(&local->iff_allmultis);
		else
			atomic_dec(&local->iff_allmultis);
		sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
	}

	if (promisc != sdata_promisc) {
		if (dev->flags & IFF_PROMISC)
			atomic_inc(&local->iff_promiscs);
		else
			atomic_dec(&local->iff_promiscs);
		sdata->flags ^= IEEE80211_SDATA_PROMISC;
	}
1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011

	/*
	 * TODO: If somebody needs this on AP interfaces,
	 *	 it can be enabled easily but multicast
	 *	 addresses from VLANs need to be synced.
	 */
	if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
	    sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
	    sdata->vif.type != NL80211_IFTYPE_AP)
		drv_set_multicast_list(local, sdata, &dev->mc);

Johannes Berg's avatar
Johannes Berg committed
1012
	spin_lock_bh(&local->filter_lock);
1013
	__hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
Johannes Berg's avatar
Johannes Berg committed
1014
	spin_unlock_bh(&local->filter_lock);
1015
	ieee80211_queue_work(&local->hw, &local->reconfig_filter);
1016 1017
}

1018 1019 1020 1021
/*
 * Called when the netdev is removed or, by the code below, before
 * the interface type changes.
 */
1022
static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
1023
{
1024
	int flushed;
1025 1026
	int i;

1027 1028 1029
	/* free extra data */
	ieee80211_free_keys(sdata);

1030 1031
	ieee80211_debugfs_remove_netdev(sdata);

1032
	for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1033 1034
		__skb_queue_purge(&sdata->fragments[i].skb_list);
	sdata->fragment_next = 0;
1035

1036 1037
	if (ieee80211_vif_is_mesh(&sdata->vif))
		mesh_rmc_free(sdata);
1038

1039
	flushed = sta_info_flush(sdata);
1040
	WARN_ON(flushed);
1041 1042
}

1043