iface.c 45.5 KB
Newer Older
1
/*
2
 * Interface handling
3
 *
4 5 6
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
7
 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
8 9 10 11 12
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */
13
#include <linux/slab.h>
14 15 16 17 18
#include <linux/kernel.h>
#include <linux/if_arp.h>
#include <linux/netdevice.h>
#include <linux/rtnetlink.h>
#include <net/mac80211.h>
19
#include <net/ieee80211_radiotap.h>
20 21
#include "ieee80211_i.h"
#include "sta_info.h"
22
#include "debugfs_netdev.h"
23
#include "mesh.h"
24
#include "led.h"
25
#include "driver-ops.h"
26
#include "wme.h"
Bill Jordan's avatar
Bill Jordan committed
27
#include "rate.h"
28

29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44
/**
 * DOC: Interface list locking
 *
 * The interface list in each struct ieee80211_local is protected
 * three-fold:
 *
 * (1) modifications may only be done under the RTNL
 * (2) modifications and readers are protected against each other by
 *     the iflist_mtx.
 * (3) modifications are done in an RCU manner so atomic readers
 *     can traverse the list in RCU-safe blocks.
 *
 * As a consequence, reads (traversals) of the list can be protected
 * by either the RTNL, the iflist_mtx or RCU.
 */

45 46 47 48 49 50 51 52 53 54 55 56
bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_chanctx_conf *chanctx_conf;
	int power;

	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
	if (!chanctx_conf) {
		rcu_read_unlock();
		return false;
	}

57
	power = chanctx_conf->def.chan->max_power;
58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79
	rcu_read_unlock();

	if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
		power = min(power, sdata->user_power_level);

	if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
		power = min(power, sdata->ap_power_level);

	if (power != sdata->vif.bss_conf.txpower) {
		sdata->vif.bss_conf.txpower = power;
		ieee80211_hw_config(sdata->local, 0);
		return true;
	}

	return false;
}

void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
{
	if (__ieee80211_recalc_txpower(sdata))
		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER);
}
80

81
static u32 __ieee80211_idle_off(struct ieee80211_local *local)
82 83 84 85 86 87 88 89
{
	if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
		return 0;

	local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
	return IEEE80211_CONF_CHANGE_IDLE;
}

90
static u32 __ieee80211_idle_on(struct ieee80211_local *local)
91 92 93 94
{
	if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
		return 0;

95
	ieee80211_flush_queues(local, NULL);
96 97 98 99 100

	local->hw.conf.flags |= IEEE80211_CONF_IDLE;
	return IEEE80211_CONF_CHANGE_IDLE;
}

101 102
static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
				   bool force_active)
103
{
104
	bool working = false, scanning, active;
105 106 107 108 109
	unsigned int led_trig_start = 0, led_trig_stop = 0;
	struct ieee80211_roc_work *roc;

	lockdep_assert_held(&local->mtx);

110 111 112
	active = force_active ||
		 !list_empty(&local->chanctx_list) ||
		 local->monitors;
113 114 115 116

	if (!local->ops->remain_on_channel) {
		list_for_each_entry(roc, &local->roc_list, list) {
			working = true;
117
			break;
118 119 120
		}
	}

121 122
	scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
		   test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
123 124 125 126 127 128

	if (working || scanning)
		led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
	else
		led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;

129
	if (active)
130 131 132 133 134 135
		led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
	else
		led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;

	ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);

136
	if (working || scanning || active)
137 138 139 140 141 142 143 144 145 146 147 148
		return __ieee80211_idle_off(local);
	return __ieee80211_idle_on(local);
}

u32 ieee80211_idle_off(struct ieee80211_local *local)
{
	return __ieee80211_recalc_idle(local, true);
}

void ieee80211_recalc_idle(struct ieee80211_local *local)
{
	u32 change = __ieee80211_recalc_idle(local, false);
149 150
	if (change)
		ieee80211_hw_config(local, change);
151 152
}

153 154
static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
{
Chaitanya's avatar
Chaitanya committed
155
	if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN)
156 157 158 159 160 161
		return -EINVAL;

	dev->mtu = new_mtu;
	return 0;
}

162
static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr)
163
{
164 165
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_sub_if_data *iter;
166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184
	u64 new, mask, tmp;
	u8 *m;
	int ret = 0;

	if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
		return 0;

	m = addr;
	new =	((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
		((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
		((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);

	m = local->hw.wiphy->addr_mask;
	mask =	((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
		((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
		((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);


	mutex_lock(&local->iflist_mtx);
185 186
	list_for_each_entry(iter, &local->interfaces, list) {
		if (iter == sdata)
187 188
			continue;

189 190 191 192
		if (iter->vif.type == NL80211_IFTYPE_MONITOR)
			continue;

		m = iter->vif.addr;
193 194 195 196 197 198 199 200 201 202 203 204 205 206
		tmp =	((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
			((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
			((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);

		if ((new & ~mask) != (tmp & ~mask)) {
			ret = -EINVAL;
			break;
		}
	}
	mutex_unlock(&local->iflist_mtx);

	return ret;
}

207 208 209
static int ieee80211_change_mac(struct net_device *dev, void *addr)
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
210
	struct sockaddr *sa = addr;
211 212
	int ret;

213
	if (ieee80211_sdata_running(sdata))
214 215
		return -EBUSY;

216
	ret = ieee80211_verify_mac(sdata, sa->sa_data);
217 218 219
	if (ret)
		return ret;

220
	ret = eth_mac_addr(dev, sa);
221 222

	if (ret == 0)
223
		memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
224 225 226 227

	return ret;
}

228 229 230 231
static inline int identical_mac_addr_allowed(int type1, int type2)
{
	return type1 == NL80211_IFTYPE_MONITOR ||
		type2 == NL80211_IFTYPE_MONITOR ||
232 233
		type1 == NL80211_IFTYPE_P2P_DEVICE ||
		type2 == NL80211_IFTYPE_P2P_DEVICE ||
234 235 236 237 238 239 240 241 242 243
		(type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) ||
		(type1 == NL80211_IFTYPE_WDS &&
			(type2 == NL80211_IFTYPE_WDS ||
			 type2 == NL80211_IFTYPE_AP)) ||
		(type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
		(type1 == NL80211_IFTYPE_AP_VLAN &&
			(type2 == NL80211_IFTYPE_AP ||
			 type2 == NL80211_IFTYPE_AP_VLAN));
}

244 245
static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
					    enum nl80211_iftype iftype)
246
{
247
	struct ieee80211_local *local = sdata->local;
248
	struct ieee80211_sub_if_data *nsdata;
249

250
	ASSERT_RTNL();
251 252 253

	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(nsdata, &local->interfaces, list) {
254
		if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
255 256 257 258 259 260 261 262 263 264
			/*
			 * Allow only a single IBSS interface to be up at any
			 * time. This is restricted because beacon distribution
			 * cannot work properly if both are in the same IBSS.
			 *
			 * To remove this restriction we'd have to disallow them
			 * from setting the same SSID on different IBSS interfaces
			 * belonging to the same hardware. Then, however, we're
			 * faced with having to adopt two different TSF timers...
			 */
265
			if (iftype == NL80211_IFTYPE_ADHOC &&
266 267 268 269 270 271 272
			    nsdata->vif.type == NL80211_IFTYPE_ADHOC)
				return -EBUSY;

			/*
			 * The remaining checks are only performed for interfaces
			 * with the same MAC address.
			 */
273 274
			if (!ether_addr_equal(sdata->vif.addr,
					      nsdata->vif.addr))
275 276 277 278 279
				continue;

			/*
			 * check whether it may have the same address
			 */
280
			if (!identical_mac_addr_allowed(iftype,
281 282 283 284 285 286
							nsdata->vif.type))
				return -ENOTUNIQ;

			/*
			 * can only add VLANs to enabled APs
			 */
287
			if (iftype == NL80211_IFTYPE_AP_VLAN &&
288 289 290 291 292
			    nsdata->vif.type == NL80211_IFTYPE_AP)
				sdata->bss = &nsdata->u.ap;
		}
	}

293 294 295
	return 0;
}

296 297 298 299 300
static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata)
{
	int n_queues = sdata->local->hw.queues;
	int i;

301 302 303 304 305 306 307 308 309
	if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
		for (i = 0; i < IEEE80211_NUM_ACS; i++) {
			if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
					 IEEE80211_INVAL_HW_QUEUE))
				return -EINVAL;
			if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
					 n_queues))
				return -EINVAL;
		}
310 311
	}

312 313
	if ((sdata->vif.type != NL80211_IFTYPE_AP &&
	     sdata->vif.type != NL80211_IFTYPE_MESH_POINT) ||
314
	    !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) {
315 316 317 318 319 320 321 322 323 324 325 326 327
		sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
		return 0;
	}

	if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
		return -EINVAL;

	if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
		return -EINVAL;

	return 0;
}

328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347
void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
				    const int offset)
{
	struct ieee80211_local *local = sdata->local;
	u32 flags = sdata->u.mntr_flags;

#define ADJUST(_f, _s)	do {					\
	if (flags & MONITOR_FLAG_##_f)				\
		local->fif_##_s += offset;			\
	} while (0)

	ADJUST(FCSFAIL, fcsfail);
	ADJUST(PLCPFAIL, plcpfail);
	ADJUST(CONTROL, control);
	ADJUST(CONTROL, pspoll);
	ADJUST(OTHER_BSS, other_bss);

#undef ADJUST
}

348 349 350 351 352 353 354 355
static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_local *local = sdata->local;
	int i;

	for (i = 0; i < IEEE80211_NUM_ACS; i++) {
		if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
			sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
356
		else if (local->hw.queues >= IEEE80211_NUM_ACS)
357
			sdata->vif.hw_queue[i] = i;
358 359
		else
			sdata->vif.hw_queue[i] = 0;
360 361 362 363
	}
	sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
}

364
int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
365 366
{
	struct ieee80211_sub_if_data *sdata;
367
	int ret;
368 369 370 371

	if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
		return 0;

372
	ASSERT_RTNL();
373

374
	if (local->monitor_sdata)
375
		return 0;
376 377

	sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
378 379
	if (!sdata)
		return -ENOMEM;
380 381 382 383 384 385 386

	/* set up data */
	sdata->local = local;
	sdata->vif.type = NL80211_IFTYPE_MONITOR;
	snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
		 wiphy_name(local->hw.wiphy));

387 388
	ieee80211_set_default_queues(sdata);

389 390 391 392
	ret = drv_add_interface(local, sdata);
	if (WARN_ON(ret)) {
		/* ok .. stupid driver, it asked for this! */
		kfree(sdata);
393
		return ret;
394 395
	}

396 397 398
	ret = ieee80211_check_queues(sdata);
	if (ret) {
		kfree(sdata);
399
		return ret;
400 401
	}

402
	ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef,
Johannes Berg's avatar
Johannes Berg committed
403 404 405 406
					IEEE80211_CHANCTX_EXCLUSIVE);
	if (ret) {
		drv_remove_interface(local, sdata);
		kfree(sdata);
407
		return ret;
Johannes Berg's avatar
Johannes Berg committed
408 409
	}

410
	mutex_lock(&local->iflist_mtx);
411
	rcu_assign_pointer(local->monitor_sdata, sdata);
412
	mutex_unlock(&local->iflist_mtx);
413 414

	return 0;
415 416
}

417
void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
418 419 420 421 422 423
{
	struct ieee80211_sub_if_data *sdata;

	if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
		return;

424 425
	ASSERT_RTNL();

426
	mutex_lock(&local->iflist_mtx);
427

428 429
	sdata = rcu_dereference_protected(local->monitor_sdata,
					  lockdep_is_held(&local->iflist_mtx));
430 431 432 433
	if (!sdata) {
		mutex_unlock(&local->iflist_mtx);
		return;
	}
434 435

	rcu_assign_pointer(local->monitor_sdata, NULL);
436 437
	mutex_unlock(&local->iflist_mtx);

438 439
	synchronize_net();

Johannes Berg's avatar
Johannes Berg committed
440 441
	ieee80211_vif_release_channel(sdata);

442 443 444 445 446
	drv_remove_interface(local, sdata);

	kfree(sdata);
}

447 448 449 450 451
/*
 * NOTE: Be very careful when changing this function, it must NOT return
 * an error on interface type changes that have been pre-checked, so most
 * checks should be in ieee80211_check_concurrent_iface.
 */
452
int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
453
{
454 455
	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
	struct net_device *dev = wdev->netdev;
456 457 458 459 460 461
	struct ieee80211_local *local = sdata->local;
	struct sta_info *sta;
	u32 changed = 0;
	int res;
	u32 hw_reconf_flags = 0;

462 463 464 465 466
	switch (sdata->vif.type) {
	case NL80211_IFTYPE_WDS:
		if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
			return -ENOLINK;
		break;
467 468 469
	case NL80211_IFTYPE_AP_VLAN: {
		struct ieee80211_sub_if_data *master;

470 471
		if (!sdata->bss)
			return -ENOLINK;
472

473
		list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
474 475 476 477 478 479 480

		master = container_of(sdata->bss,
				      struct ieee80211_sub_if_data, u.ap);
		sdata->control_port_protocol =
			master->control_port_protocol;
		sdata->control_port_no_encrypt =
			master->control_port_no_encrypt;
481 482 483
		sdata->vif.cab_queue = master->vif.cab_queue;
		memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
		       sizeof(sdata->vif.hw_queue));
484
		break;
485
		}
486 487 488 489 490 491 492
	case NL80211_IFTYPE_AP:
		sdata->bss = &sdata->u.ap;
		break;
	case NL80211_IFTYPE_MESH_POINT:
	case NL80211_IFTYPE_STATION:
	case NL80211_IFTYPE_MONITOR:
	case NL80211_IFTYPE_ADHOC:
493
	case NL80211_IFTYPE_P2P_DEVICE:
494 495 496
		/* no special treatment */
		break;
	case NL80211_IFTYPE_UNSPECIFIED:
497
	case NUM_NL80211_IFTYPES:
498 499
	case NL80211_IFTYPE_P2P_CLIENT:
	case NL80211_IFTYPE_P2P_GO:
500 501 502 503 504 505
		/* cannot happen */
		WARN_ON(1);
		break;
	}

	if (local->open_count == 0) {
506
		res = drv_start(local);
507 508
		if (res)
			goto err_del_bss;
509 510
		/* we're brought up, everything changes */
		hw_reconf_flags = ~0;
Johannes Berg's avatar
Johannes Berg committed
511
		ieee80211_led_radio(local, true);
512 513
		ieee80211_mod_tpt_led_trig(local,
					   IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
514 515 516
	}

	/*
517 518
	 * Copy the hopefully now-present MAC address to
	 * this interface, if it has the special null one.
519
	 */
520
	if (dev && is_zero_ether_addr(dev->dev_addr)) {
521 522 523 524 525 526
		memcpy(dev->dev_addr,
		       local->hw.wiphy->perm_addr,
		       ETH_ALEN);
		memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);

		if (!is_valid_ether_addr(dev->dev_addr)) {
527 528
			res = -EADDRNOTAVAIL;
			goto err_stop;
529
		}
530 531 532 533
	}

	switch (sdata->vif.type) {
	case NL80211_IFTYPE_AP_VLAN:
534 535 536
		/* no need to tell driver, but set carrier and chanctx */
		if (rtnl_dereference(sdata->bss->beacon)) {
			ieee80211_vif_vlan_copy_chanctx(sdata);
537
			netif_carrier_on(dev);
538
		} else {
539
			netif_carrier_off(dev);
540
		}
541 542 543 544 545 546 547
		break;
	case NL80211_IFTYPE_MONITOR:
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs++;
			break;
		}

548 549 550 551 552 553
		if (local->monitors == 0 && local->open_count == 0) {
			res = ieee80211_add_virtual_monitor(local);
			if (res)
				goto err_stop;
		}

554 555
		/* must be before the call to ieee80211_configure_filter */
		local->monitors++;
556
		if (local->monitors == 1) {
557 558
			local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
			hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
559
		}
560

561
		ieee80211_adjust_monitor_flags(sdata, 1);
562
		ieee80211_configure_filter(local);
563 564 565
		mutex_lock(&local->mtx);
		ieee80211_recalc_idle(local);
		mutex_unlock(&local->mtx);
566 567

		netif_carrier_on(dev);
568 569
		break;
	default:
570
		if (coming_up) {
571 572
			ieee80211_del_virtual_monitor(local);

573
			res = drv_add_interface(local, sdata);
574 575
			if (res)
				goto err_stop;
576 577 578
			res = ieee80211_check_queues(sdata);
			if (res)
				goto err_del_interface;
579
		}
580

581
		if (sdata->vif.type == NL80211_IFTYPE_AP) {
582
			local->fif_pspoll++;
583
			local->fif_probe_req++;
584 585

			ieee80211_configure_filter(local);
586 587
		} else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
			local->fif_probe_req++;
588
		}
589

590 591
		if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
			changed |= ieee80211_reset_erp_info(sdata);
592 593
		ieee80211_bss_info_change_notify(sdata, changed);

594 595 596 597 598
		switch (sdata->vif.type) {
		case NL80211_IFTYPE_STATION:
		case NL80211_IFTYPE_ADHOC:
		case NL80211_IFTYPE_AP:
		case NL80211_IFTYPE_MESH_POINT:
599
			netif_carrier_off(dev);
600
			break;
601
		case NL80211_IFTYPE_WDS:
602
		case NL80211_IFTYPE_P2P_DEVICE:
603
			break;
604
		default:
605 606
			/* not reached */
			WARN_ON(1);
607
		}
608 609 610 611 612 613

		/*
		 * set default queue parameters so drivers don't
		 * need to initialise the hardware if the hardware
		 * doesn't start up with sane defaults
		 */
614
		ieee80211_set_wmm_default(sdata, true);
615 616
	}

617 618
	set_bit(SDATA_STATE_RUNNING, &sdata->state);

619 620 621 622 623 624 625 626 627
	if (sdata->vif.type == NL80211_IFTYPE_WDS) {
		/* Create STA entry for the WDS peer */
		sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
				     GFP_KERNEL);
		if (!sta) {
			res = -ENOMEM;
			goto err_del_interface;
		}

628 629 630
		sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
		sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
		sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
631 632 633 634 635 636

		res = sta_info_insert(sta);
		if (res) {
			/* STA has been freed */
			goto err_del_interface;
		}
Bill Jordan's avatar
Bill Jordan committed
637 638

		rate_control_rate_init(sta);
639
		netif_carrier_on(dev);
640 641
	} else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) {
		rcu_assign_pointer(local->p2p_sdata, sdata);
642 643 644 645 646 647 648 649 650 651 652 653 654
	}

	/*
	 * set_multicast_list will be invoked by the networking core
	 * which will check whether any increments here were done in
	 * error and sync them down to the hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_inc(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_inc(&local->iff_promiscs);

655 656 657
	if (coming_up)
		local->open_count++;

658
	if (hw_reconf_flags)
659
		ieee80211_hw_config(local, hw_reconf_flags);
660

661
	ieee80211_recalc_ps(local, -1);
662

663 664 665 666 667
	if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
	    sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
		/* XXX: for AP_VLAN, actually track AP queues */
		netif_tx_start_all_queues(dev);
	} else if (dev) {
668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688
		unsigned long flags;
		int n_acs = IEEE80211_NUM_ACS;
		int ac;

		if (local->hw.queues < IEEE80211_NUM_ACS)
			n_acs = 1;

		spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
		if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE ||
		    (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 &&
		     skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) {
			for (ac = 0; ac < n_acs; ac++) {
				int ac_queue = sdata->vif.hw_queue[ac];

				if (local->queue_stop_reasons[ac_queue] == 0 &&
				    skb_queue_empty(&local->pending[ac_queue]))
					netif_start_subqueue(dev, ac);
			}
		}
		spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
	}
689 690 691

	return 0;
 err_del_interface:
692
	drv_remove_interface(local, sdata);
693
 err_stop:
694 695
	if (!local->open_count)
		drv_stop(local);
696 697 698 699
 err_del_bss:
	sdata->bss = NULL;
	if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
		list_del(&sdata->u.vlan.list);
700
	/* might already be clear but that doesn't matter */
701
	clear_bit(SDATA_STATE_RUNNING, &sdata->state);
702 703 704
	return res;
}

705
static int ieee80211_open(struct net_device *dev)
706 707
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
708 709 710
	int err;

	/* fail early if user set an invalid address */
711
	if (!is_valid_ether_addr(dev->dev_addr))
712 713 714 715 716 717
		return -EADDRNOTAVAIL;

	err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
	if (err)
		return err;

718
	return ieee80211_do_open(&sdata->wdev, true);
719 720 721 722 723
}

static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata,
			      bool going_down)
{
724
	struct ieee80211_local *local = sdata->local;
725 726
	unsigned long flags;
	struct sk_buff *skb, *tmp;
727
	u32 hw_reconf_flags = 0;
728
	int i, flushed;
729
	struct ps_data *ps;
730

731 732
	clear_bit(SDATA_STATE_RUNNING, &sdata->state);

733
	if (rcu_access_pointer(local->scan_sdata) == sdata)
734 735
		ieee80211_scan_cancel(local);

736 737 738
	/*
	 * Stop TX on this interface first.
	 */
739 740
	if (sdata->dev)
		netif_tx_stop_all_queues(sdata->dev);
741

742
	ieee80211_roc_purge(local, sdata);
743

744 745 746
	if (sdata->vif.type == NL80211_IFTYPE_STATION)
		ieee80211_mgd_stop(sdata);

747 748 749 750 751 752 753 754 755 756
	/*
	 * Remove all stations associated with this interface.
	 *
	 * This must be done before calling ops->remove_interface()
	 * because otherwise we can later invoke ops->sta_notify()
	 * whenever the STAs are removed, and that invalidates driver
	 * assumptions about always getting a vif pointer that is valid
	 * (because if we remove a STA after ops->remove_interface()
	 * the driver will have removed the vif info already!)
	 *
757 758 759
	 * This is relevant only in WDS mode, in all other modes we've
	 * already removed all stations when disconnecting or similar,
	 * so warn otherwise.
760 761
	 *
	 * We call sta_info_flush_cleanup() later, to combine RCU waits.
762
	 */
763
	flushed = sta_info_flush_defer(sdata);
764 765
	WARN_ON_ONCE((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) ||
		     (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1));
766

767
	/* don't count this interface for promisc/allmulti while it is down */
768 769 770 771 772 773
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_dec(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_dec(&local->iff_promiscs);

774
	if (sdata->vif.type == NL80211_IFTYPE_AP) {
775
		local->fif_pspoll--;
776 777 778 779
		local->fif_probe_req--;
	} else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
		local->fif_probe_req--;
	}
780

781 782 783 784 785 786 787 788
	if (sdata->dev) {
		netif_addr_lock_bh(sdata->dev);
		spin_lock_bh(&local->filter_lock);
		__hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
				 sdata->dev->addr_len);
		spin_unlock_bh(&local->filter_lock);
		netif_addr_unlock_bh(sdata->dev);
	}
789

790 791
	del_timer_sync(&local->dynamic_ps_timer);
	cancel_work_sync(&local->dynamic_ps_enable_work);
792

793 794
	cancel_work_sync(&sdata->recalc_smps);

795 796 797
	cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);

	if (sdata->wdev.cac_started) {
798
		WARN_ON(local->suspended);
799 800 801 802 803 804 805
		mutex_lock(&local->iflist_mtx);
		ieee80211_vif_release_channel(sdata);
		mutex_unlock(&local->iflist_mtx);
		cfg80211_cac_event(sdata->dev, NL80211_RADAR_CAC_ABORTED,
				   GFP_KERNEL);
	}

806 807
	/* APs need special treatment */
	if (sdata->vif.type == NL80211_IFTYPE_AP) {
808
		struct ieee80211_sub_if_data *vlan, *tmpsdata;
809 810

		/* down all dependent devices, that is VLANs */
811
		list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
812 813 814
					 u.vlan.list)
			dev_close(vlan->dev);
		WARN_ON(!list_empty(&sdata->u.ap.vlans));
815 816 817 818 819 820 821 822 823 824 825 826 827
	} else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
		/* remove all packets in parent bc_buf pointing to this dev */
		ps = &sdata->bss->ps;

		spin_lock_irqsave(&ps->bc_buf.lock, flags);
		skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
			if (skb->dev == sdata->dev) {
				__skb_unlink(skb, &ps->bc_buf);
				local->total_ps_buffered--;
				ieee80211_free_txskb(&local->hw, skb);
			}
		}
		spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
828 829
	}

830 831
	if (going_down)
		local->open_count--;
832 833 834 835

	switch (sdata->vif.type) {
	case NL80211_IFTYPE_AP_VLAN:
		list_del(&sdata->u.vlan.list);
836
		rcu_assign_pointer(sdata->vif.chanctx_conf, NULL);
837 838 839 840 841 842 843 844 845
		/* no need to tell driver */
		break;
	case NL80211_IFTYPE_MONITOR:
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs--;
			break;
		}

		local->monitors--;
846
		if (local->monitors == 0) {
847 848
			local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
			hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
849
		}
850

851
		ieee80211_adjust_monitor_flags(sdata, -1);
852
		break;
853 854 855 856
	case NL80211_IFTYPE_P2P_DEVICE:
		/* relies on synchronize_rcu() below */
		rcu_assign_pointer(local->p2p_sdata, NULL);
		/* fall through */
857
	default:
858
		cancel_work_sync(&sdata->work);
Johannes Berg's avatar
Johannes Berg committed
859 860
		/*
		 * When we get here, the interface is marked down.
861 862 863
		 *
		 * sta_info_flush_cleanup() requires rcu_barrier()
		 * first to wait for the station call_rcu() calls
864 865
		 * to complete, and we also need synchronize_rcu()
		 * to wait for the RX path in case it is using the
866 867
		 * interface and enqueuing frames at this very time on
		 * another CPU.
Johannes Berg's avatar
Johannes Berg committed
868
		 */
869
		synchronize_rcu();
870
		rcu_barrier();
871 872
		sta_info_flush_cleanup(sdata);

873 874
		/*
		 * Free all remaining keys, there shouldn't be any,
875
		 * except maybe in WDS mode?
876
		 */
Johannes Berg's avatar
Johannes Berg committed
877
		ieee80211_free_keys(sdata);
878

879 880 881
		/* fall through */
	case NL80211_IFTYPE_AP:
		skb_queue_purge(&sdata->skb_queue);
882 883 884 885
	}

	sdata->bss = NULL;

886 887 888 889 890 891
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
		skb_queue_walk_safe(&local->pending[i], skb, tmp) {
			struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
			if (info->control.vif == &sdata->vif) {
				__skb_unlink(skb, &local->pending[i]);
892
				ieee80211_free_txskb(&local->hw, skb);
893 894 895 896
			}
		}
	}
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
897

898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945
	if (local->open_count == 0)
		ieee80211_clear_tx_pending(local);

	/*
	 * If the interface goes down while suspended, presumably because
	 * the device was unplugged and that happens before our resume,
	 * then the driver is already unconfigured and the remainder of
	 * this function isn't needed.
	 * XXX: what about WoWLAN? If the device has software state, e.g.
	 *	memory allocated, it might expect teardown commands from
	 *	mac80211 here?
	 */
	if (local->suspended) {
		WARN_ON(local->wowlan);
		WARN_ON(rtnl_dereference(local->monitor_sdata));
		return;
	}

	switch (sdata->vif.type) {
	case NL80211_IFTYPE_AP_VLAN:
		break;
	case NL80211_IFTYPE_MONITOR:
		if (local->monitors == 0)
			ieee80211_del_virtual_monitor(local);

		mutex_lock(&local->mtx);
		ieee80211_recalc_idle(local);
		mutex_unlock(&local->mtx);
		break;
	default:
		if (going_down)
			drv_remove_interface(local, sdata);
	}

	ieee80211_recalc_ps(local, -1);

	if (local->open_count == 0) {
		ieee80211_stop_device(local);

		/* no reconfiguring after stop! */
		return;
	}

	/* do after stop to avoid reconfiguring when we stop anyway */
	ieee80211_configure_filter(local);
	ieee80211_hw_config(local, hw_reconf_flags);

	if (local->monitors == local->open_count)
946
		ieee80211_add_virtual_monitor(local);
947 948 949 950 951 952 953
}

static int ieee80211_stop(struct net_device *dev)
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);

	ieee80211_do_stop(sdata, true);
954

955 956 957 958 959 960
	return 0;
}

static void ieee80211_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
961
	struct ieee80211_local *local = sdata->local;
962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983
	int allmulti, promisc, sdata_allmulti, sdata_promisc;

	allmulti = !!(dev->flags & IFF_ALLMULTI);
	promisc = !!(dev->flags & IFF_PROMISC);
	sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
	sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);

	if (allmulti != sdata_allmulti) {
		if (dev->flags & IFF_ALLMULTI)
			atomic_inc(&local->iff_allmultis);
		else
			atomic_dec(&local->iff_allmultis);
		sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
	}

	if (promisc != sdata_promisc) {
		if (dev->flags & IFF_PROMISC)
			atomic_inc(&local->iff_promiscs);
		else
			atomic_dec(&local->iff_promiscs);
		sdata->flags ^= IEEE80211_SDATA_PROMISC;
	}
984 985 986 987 988 989 990 991 992 993 994

	/*
	 * TODO: If somebody needs this on AP interfaces,
	 *	 it can be enabled easily but multicast
	 *	 addresses from VLANs need to be synced.
	 */
	if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
	    sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
	    sdata->vif.type != NL80211_IFTYPE_AP)
		drv_set_multicast_list(local, sdata, &dev->mc);

Johannes Berg's avatar
Johannes Berg committed
995
	spin_lock_bh(&local->filter_lock);
996
	__hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
Johannes Berg's avatar
Johannes Berg committed
997
	spin_unlock_bh(&local->filter_lock);
998
	ieee80211_queue_work(&local->hw, &local->reconfig_filter);
999 1000
}

1001 1002 1003 1004
/*
 * Called when the netdev is removed or, by the code below, before
 * the interface type changes.
 */
1005
static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
1006
{
1007
	int flushed;
1008 1009
	int i;

1010 1011 1012
	/* free extra data */
	ieee80211_free_keys(sdata);

1013 1014
	ieee80211_debugfs_remove_netdev(sdata);

1015
	for (i = 0; i < IEEE80211_FRAGMENT_MAX; i++)
1016 1017
		__skb_queue_purge(&sdata->fragments[i].skb_list);
	sdata->fragment_next = 0;
1018

1019 1020
	if (ieee80211_vif_is_mesh(&sdata->vif))
		mesh_rmc_free(sdata);
1021

1022
	flushed = sta_info_flush(sdata);
1023
	WARN_ON(flushed);
1024 1025
}

1026 1027 1028 1029 1030
static void ieee80211_uninit(struct net_device *dev)
{
	ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
}

1031 1032 1033 1034 1035 1036
static u16 ieee80211_netdev_select_queue(struct net_device *dev,
					 struct sk_buff *skb)
{
	return ieee80211_select_queue(IEEE80211_DEV_TO_SUB_IF(dev), skb);
}

1037 1038 1039
static const struct net_device_ops ieee80211_dataif_ops = {
	.ndo_open		= ieee80211_open,
	.ndo_stop		= ieee80211_stop,
1040
	.ndo_uninit		= ieee80211_uninit,
1041
	.ndo_start_xmit		= ieee80211_subif_start_xmit,
1042
	.ndo_set_rx_mode	= ieee80211_set_multicast_list,
1043
	.ndo_change_mtu 	= ieee80211_change_mtu,
1044
	.ndo_set_mac_address 	= ieee80211_change_mac,
1045
	.ndo_select_queue	= ieee80211_netdev_select_queue,
1046 1047
};

1048 1049 1050 1051 1052 1053 1054 1055
static u16 ieee80211_monitor_select_queue(struct net_device *dev,
					  struct sk_buff *skb)
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_hdr *hdr;
	struct ieee80211_radiotap_header *rtap = (void *)skb->data;

1056
	if (local->hw.queues < IEEE80211_NUM_ACS)
1057 1058 1059
		return 0;

	if (skb->len < 4 ||
Johannes Berg's avatar
Johannes Berg committed
1060
	    skb->len < le16_to_cpu(rtap->it_len) + 2 /* frame control */)
1061 1062
		return 0; /* doesn't matter, frame will be dropped */

Johannes Berg's avatar
Johannes Berg committed
1063
	hdr = (void *)((u8 *)skb->data + le16_to_cpu(rtap->it_len));
1064

1065
	return ieee80211_select_queue_80211(sdata, skb, hdr);
1066 1067
}

1068 1069 1070
static const struct net_device_ops ieee80211_monitorif_ops = {
	.ndo_open		= ieee80211_open,
	.ndo_stop		= ieee80211_stop,
1071
	.ndo_uninit		= ieee80211_uninit,
1072
	.ndo_start_xmit		= ieee80211_monitor_start_xmit,
1073
	.ndo_set_rx_mode	= ieee80211_set_multicast_list,
1074 1075
	.ndo_change_mtu 	= ieee80211_change_mtu,
	.ndo_set_mac_address 	= eth_mac_addr,