iface.c 45.5 KB
Newer Older
1
/*
2
 * Interface handling
3
 *
4
5
6
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
7
 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
8
9
10
11
12
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */
13
#include <linux/slab.h>
14
15
16
17
18
#include <linux/kernel.h>
#include <linux/if_arp.h>
#include <linux/netdevice.h>
#include <linux/rtnetlink.h>
#include <net/mac80211.h>
19
#include <net/ieee80211_radiotap.h>
20
21
#include "ieee80211_i.h"
#include "sta_info.h"
22
#include "debugfs_netdev.h"
23
#include "mesh.h"
24
#include "led.h"
25
#include "driver-ops.h"
26
#include "wme.h"
Bill Jordan's avatar
Bill Jordan committed
27
#include "rate.h"
28

29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
/**
 * DOC: Interface list locking
 *
 * The interface list in each struct ieee80211_local is protected
 * three-fold:
 *
 * (1) modifications may only be done under the RTNL
 * (2) modifications and readers are protected against each other by
 *     the iflist_mtx.
 * (3) modifications are done in an RCU manner so atomic readers
 *     can traverse the list in RCU-safe blocks.
 *
 * As a consequence, reads (traversals) of the list can be protected
 * by either the RTNL, the iflist_mtx or RCU.
 */

45
46
47
48
49
50
51
52
53
54
55
56
bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_chanctx_conf *chanctx_conf;
	int power;

	rcu_read_lock();
	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
	if (!chanctx_conf) {
		rcu_read_unlock();
		return false;
	}

57
	power = chanctx_conf->def.chan->max_power;
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
	rcu_read_unlock();

	if (sdata->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
		power = min(power, sdata->user_power_level);

	if (sdata->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
		power = min(power, sdata->ap_power_level);

	if (power != sdata->vif.bss_conf.txpower) {
		sdata->vif.bss_conf.txpower = power;
		ieee80211_hw_config(sdata->local, 0);
		return true;
	}

	return false;
}

void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
{
	if (__ieee80211_recalc_txpower(sdata))
		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_TXPOWER);
}
80

81
static u32 __ieee80211_idle_off(struct ieee80211_local *local)
82
83
84
85
86
87
88
89
{
	if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
		return 0;

	local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
	return IEEE80211_CONF_CHANGE_IDLE;
}

90
static u32 __ieee80211_idle_on(struct ieee80211_local *local)
91
92
93
94
{
	if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
		return 0;

95
	ieee80211_flush_queues(local, NULL);
96
97
98
99
100

	local->hw.conf.flags |= IEEE80211_CONF_IDLE;
	return IEEE80211_CONF_CHANGE_IDLE;
}

101
102
static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
				   bool force_active)
103
{
104
	bool working = false, scanning, active;
105
106
107
108
109
	unsigned int led_trig_start = 0, led_trig_stop = 0;
	struct ieee80211_roc_work *roc;

	lockdep_assert_held(&local->mtx);

110
111
112
	active = force_active ||
		 !list_empty(&local->chanctx_list) ||
		 local->monitors;
113
114
115
116

	if (!local->ops->remain_on_channel) {
		list_for_each_entry(roc, &local->roc_list, list) {
			working = true;
117
			break;
118
119
120
		}
	}

121
122
	scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
		   test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
123
124
125
126
127
128

	if (working || scanning)
		led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
	else
		led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;

129
	if (active)
130
131
132
133
134
135
		led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
	else
		led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;

	ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);

136
	if (working || scanning || active)
137
138
139
140
141
142
143
144
145
146
147
148
		return __ieee80211_idle_off(local);
	return __ieee80211_idle_on(local);
}

u32 ieee80211_idle_off(struct ieee80211_local *local)
{
	return __ieee80211_recalc_idle(local, true);
}

void ieee80211_recalc_idle(struct ieee80211_local *local)
{
	u32 change = __ieee80211_recalc_idle(local, false);
149
150
	if (change)
		ieee80211_hw_config(local, change);
151
152
}

153
154
static int ieee80211_change_mtu(struct net_device *dev, int new_mtu)
{
Chaitanya's avatar
Chaitanya committed
155
	if (new_mtu < 256 || new_mtu > IEEE80211_MAX_DATA_LEN)
156
157
158
159
160
161
		return -EINVAL;

	dev->mtu = new_mtu;
	return 0;
}

162
static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr)
163
{
164
165
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_sub_if_data *iter;
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
	u64 new, mask, tmp;
	u8 *m;
	int ret = 0;

	if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
		return 0;

	m = addr;
	new =	((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
		((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
		((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);

	m = local->hw.wiphy->addr_mask;
	mask =	((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
		((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
		((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);


	mutex_lock(&local->iflist_mtx);
185
186
	list_for_each_entry(iter, &local->interfaces, list) {
		if (iter == sdata)
187
188
			continue;

189
190
191
192
		if (iter->vif.type == NL80211_IFTYPE_MONITOR)
			continue;

		m = iter->vif.addr;
193
194
195
196
197
198
199
200
201
202
203
204
205
206
		tmp =	((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
			((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
			((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);

		if ((new & ~mask) != (tmp & ~mask)) {
			ret = -EINVAL;
			break;
		}
	}
	mutex_unlock(&local->iflist_mtx);

	return ret;
}

207
208
209
static int ieee80211_change_mac(struct net_device *dev, void *addr)
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
210
	struct sockaddr *sa = addr;
211
212
	int ret;

213
	if (ieee80211_sdata_running(sdata))
214
215
		return -EBUSY;

216
	ret = ieee80211_verify_mac(sdata, sa->sa_data);
217
218
219
	if (ret)
		return ret;

220
	ret = eth_mac_addr(dev, sa);
221
222

	if (ret == 0)
223
		memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
224
225
226
227

	return ret;
}

228
229
230
231
static inline int identical_mac_addr_allowed(int type1, int type2)
{
	return type1 == NL80211_IFTYPE_MONITOR ||
		type2 == NL80211_IFTYPE_MONITOR ||
232
233
		type1 == NL80211_IFTYPE_P2P_DEVICE ||
		type2 == NL80211_IFTYPE_P2P_DEVICE ||
234
235
236
237
238
239
240
241
242
243
		(type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_WDS) ||
		(type1 == NL80211_IFTYPE_WDS &&
			(type2 == NL80211_IFTYPE_WDS ||
			 type2 == NL80211_IFTYPE_AP)) ||
		(type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
		(type1 == NL80211_IFTYPE_AP_VLAN &&
			(type2 == NL80211_IFTYPE_AP ||
			 type2 == NL80211_IFTYPE_AP_VLAN));
}

244
245
static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
					    enum nl80211_iftype iftype)
246
{
247
	struct ieee80211_local *local = sdata->local;
248
	struct ieee80211_sub_if_data *nsdata;
249

250
	ASSERT_RTNL();
251
252
253

	/* we hold the RTNL here so can safely walk the list */
	list_for_each_entry(nsdata, &local->interfaces, list) {
254
		if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
255
256
257
258
259
260
261
262
263
264
			/*
			 * Allow only a single IBSS interface to be up at any
			 * time. This is restricted because beacon distribution
			 * cannot work properly if both are in the same IBSS.
			 *
			 * To remove this restriction we'd have to disallow them
			 * from setting the same SSID on different IBSS interfaces
			 * belonging to the same hardware. Then, however, we're
			 * faced with having to adopt two different TSF timers...
			 */
265
			if (iftype == NL80211_IFTYPE_ADHOC &&
266
267
268
269
270
271
272
			    nsdata->vif.type == NL80211_IFTYPE_ADHOC)
				return -EBUSY;

			/*
			 * The remaining checks are only performed for interfaces
			 * with the same MAC address.
			 */
273
274
			if (!ether_addr_equal(sdata->vif.addr,
					      nsdata->vif.addr))
275
276
277
278
279
				continue;

			/*
			 * check whether it may have the same address
			 */
280
			if (!identical_mac_addr_allowed(iftype,
281
282
283
284
285
286
							nsdata->vif.type))
				return -ENOTUNIQ;

			/*
			 * can only add VLANs to enabled APs
			 */
287
			if (iftype == NL80211_IFTYPE_AP_VLAN &&
288
289
290
291
292
			    nsdata->vif.type == NL80211_IFTYPE_AP)
				sdata->bss = &nsdata->u.ap;
		}
	}

293
294
295
	return 0;
}

296
297
298
299
300
static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata)
{
	int n_queues = sdata->local->hw.queues;
	int i;

301
302
303
304
305
306
307
308
309
	if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE) {
		for (i = 0; i < IEEE80211_NUM_ACS; i++) {
			if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
					 IEEE80211_INVAL_HW_QUEUE))
				return -EINVAL;
			if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
					 n_queues))
				return -EINVAL;
		}
310
311
	}

312
313
	if ((sdata->vif.type != NL80211_IFTYPE_AP &&
	     sdata->vif.type != NL80211_IFTYPE_MESH_POINT) ||
314
	    !(sdata->local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)) {
315
316
317
318
319
320
321
322
323
324
325
326
327
		sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
		return 0;
	}

	if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
		return -EINVAL;

	if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
		return -EINVAL;

	return 0;
}

328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
				    const int offset)
{
	struct ieee80211_local *local = sdata->local;
	u32 flags = sdata->u.mntr_flags;

#define ADJUST(_f, _s)	do {					\
	if (flags & MONITOR_FLAG_##_f)				\
		local->fif_##_s += offset;			\
	} while (0)

	ADJUST(FCSFAIL, fcsfail);
	ADJUST(PLCPFAIL, plcpfail);
	ADJUST(CONTROL, control);
	ADJUST(CONTROL, pspoll);
	ADJUST(OTHER_BSS, other_bss);

#undef ADJUST
}

348
349
350
351
352
353
354
355
static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_local *local = sdata->local;
	int i;

	for (i = 0; i < IEEE80211_NUM_ACS; i++) {
		if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
			sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
356
		else if (local->hw.queues >= IEEE80211_NUM_ACS)
357
			sdata->vif.hw_queue[i] = i;
358
359
		else
			sdata->vif.hw_queue[i] = 0;
360
361
362
363
	}
	sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
}

364
int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
365
366
{
	struct ieee80211_sub_if_data *sdata;
367
	int ret;
368
369
370
371

	if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
		return 0;

372
	ASSERT_RTNL();
373

374
	if (local->monitor_sdata)
375
		return 0;
376
377

	sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
378
379
	if (!sdata)
		return -ENOMEM;
380
381
382
383
384
385
386

	/* set up data */
	sdata->local = local;
	sdata->vif.type = NL80211_IFTYPE_MONITOR;
	snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
		 wiphy_name(local->hw.wiphy));

387
388
	ieee80211_set_default_queues(sdata);

389
390
391
392
	ret = drv_add_interface(local, sdata);
	if (WARN_ON(ret)) {
		/* ok .. stupid driver, it asked for this! */
		kfree(sdata);
393
		return ret;
394
395
	}

396
397
398
	ret = ieee80211_check_queues(sdata);
	if (ret) {
		kfree(sdata);
399
		return ret;
400
401
	}

402
	ret = ieee80211_vif_use_channel(sdata, &local->monitor_chandef,
Johannes Berg's avatar
Johannes Berg committed
403
404
405
406
					IEEE80211_CHANCTX_EXCLUSIVE);
	if (ret) {
		drv_remove_interface(local, sdata);
		kfree(sdata);
407
		return ret;
Johannes Berg's avatar
Johannes Berg committed
408
409
	}

410
	mutex_lock(&local->iflist_mtx);
411
	rcu_assign_pointer(local->monitor_sdata, sdata);
412
	mutex_unlock(&local->iflist_mtx);
413
414

	return 0;
415
416
}

417
void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
418
419
420
421
422
423
{
	struct ieee80211_sub_if_data *sdata;

	if (!(local->hw.flags & IEEE80211_HW_WANT_MONITOR_VIF))
		return;

424
425
	ASSERT_RTNL();

426
	mutex_lock(&local->iflist_mtx);
427

428
429
	sdata = rcu_dereference_protected(local->monitor_sdata,
					  lockdep_is_held(&local->iflist_mtx));
430
431
432
433
	if (!sdata) {
		mutex_unlock(&local->iflist_mtx);
		return;
	}
434
435

	rcu_assign_pointer(local->monitor_sdata, NULL);
436
437
	mutex_unlock(&local->iflist_mtx);

438
439
	synchronize_net();

Johannes Berg's avatar
Johannes Berg committed
440
441
	ieee80211_vif_release_channel(sdata);

442
443
444
445
446
	drv_remove_interface(local, sdata);

	kfree(sdata);
}

447
448
449
450
451
/*
 * NOTE: Be very careful when changing this function, it must NOT return
 * an error on interface type changes that have been pre-checked, so most
 * checks should be in ieee80211_check_concurrent_iface.
 */
452
int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
453
{
454
455
	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
	struct net_device *dev = wdev->netdev;
456
457
458
459
460
461
	struct ieee80211_local *local = sdata->local;
	struct sta_info *sta;
	u32 changed = 0;
	int res;
	u32 hw_reconf_flags = 0;

462
463
464
465
466
	switch (sdata->vif.type) {
	case NL80211_IFTYPE_WDS:
		if (!is_valid_ether_addr(sdata->u.wds.remote_addr))
			return -ENOLINK;
		break;
467
468
469
	case NL80211_IFTYPE_AP_VLAN: {
		struct ieee80211_sub_if_data *master;

470
471
		if (!sdata->bss)
			return -ENOLINK;
472

473
		list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
474
475
476
477
478
479
480

		master = container_of(sdata->bss,
				      struct ieee80211_sub_if_data, u.ap);
		sdata->control_port_protocol =
			master->control_port_protocol;
		sdata->control_port_no_encrypt =
			master->control_port_no_encrypt;
481
482
483
		sdata->vif.cab_queue = master->vif.cab_queue;
		memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
		       sizeof(sdata->vif.hw_queue));
484
		break;
485
		}
486
487
488
489
490
491
492
	case NL80211_IFTYPE_AP:
		sdata->bss = &sdata->u.ap;
		break;
	case NL80211_IFTYPE_MESH_POINT:
	case NL80211_IFTYPE_STATION:
	case NL80211_IFTYPE_MONITOR:
	case NL80211_IFTYPE_ADHOC:
493
	case NL80211_IFTYPE_P2P_DEVICE:
494
495
496
		/* no special treatment */
		break;
	case NL80211_IFTYPE_UNSPECIFIED:
497
	case NUM_NL80211_IFTYPES:
498
499
	case NL80211_IFTYPE_P2P_CLIENT:
	case NL80211_IFTYPE_P2P_GO:
500
501
502
503
504
505
		/* cannot happen */
		WARN_ON(1);
		break;
	}

	if (local->open_count == 0) {
506
		res = drv_start(local);
507
508
		if (res)
			goto err_del_bss;
509
510
		/* we're brought up, everything changes */
		hw_reconf_flags = ~0;
Johannes Berg's avatar
Johannes Berg committed
511
		ieee80211_led_radio(local, true);
512
513
		ieee80211_mod_tpt_led_trig(local,
					   IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
514
515
516
	}

	/*
517
518
	 * Copy the hopefully now-present MAC address to
	 * this interface, if it has the special null one.
519
	 */
520
	if (dev && is_zero_ether_addr(dev->dev_addr)) {
521
522
523
524
525
526
		memcpy(dev->dev_addr,
		       local->hw.wiphy->perm_addr,
		       ETH_ALEN);
		memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);

		if (!is_valid_ether_addr(dev->dev_addr)) {
527
528
			res = -EADDRNOTAVAIL;
			goto err_stop;
529
		}
530
531
532
533
	}

	switch (sdata->vif.type) {
	case NL80211_IFTYPE_AP_VLAN:
534
535
536
		/* no need to tell driver, but set carrier and chanctx */
		if (rtnl_dereference(sdata->bss->beacon)) {
			ieee80211_vif_vlan_copy_chanctx(sdata);
537
			netif_carrier_on(dev);
538
		} else {
539
			netif_carrier_off(dev);
540
		}
541
542
543
544
545
546
547
		break;
	case NL80211_IFTYPE_MONITOR:
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs++;
			break;
		}

548
549
550
551
552
553
		if (local->monitors == 0 && local->open_count == 0) {
			res = ieee80211_add_virtual_monitor(local);
			if (res)
				goto err_stop;
		}

554
555
		/* must be before the call to ieee80211_configure_filter */
		local->monitors++;
556
		if (local->monitors == 1) {
557
558
			local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
			hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
559
		}
560

561
		ieee80211_adjust_monitor_flags(sdata, 1);
562
		ieee80211_configure_filter(local);
563
564
565
		mutex_lock(&local->mtx);
		ieee80211_recalc_idle(local);
		mutex_unlock(&local->mtx);
566
567

		netif_carrier_on(dev);
568
569
		break;
	default:
570
		if (coming_up) {
571
572
			ieee80211_del_virtual_monitor(local);

573
			res = drv_add_interface(local, sdata);
574
575
			if (res)
				goto err_stop;
576
577
578
			res = ieee80211_check_queues(sdata);
			if (res)
				goto err_del_interface;
579
		}
580

581
		if (sdata->vif.type == NL80211_IFTYPE_AP) {
582
			local->fif_pspoll++;
583
			local->fif_probe_req++;
584
585

			ieee80211_configure_filter(local);
586
587
		} else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
			local->fif_probe_req++;
588
		}
589

590
591
		if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
			changed |= ieee80211_reset_erp_info(sdata);
592
593
		ieee80211_bss_info_change_notify(sdata, changed);

594
595
596
597
598
		switch (sdata->vif.type) {
		case NL80211_IFTYPE_STATION:
		case NL80211_IFTYPE_ADHOC:
		case NL80211_IFTYPE_AP:
		case NL80211_IFTYPE_MESH_POINT:
599
			netif_carrier_off(dev);
600
			break;
601
		case NL80211_IFTYPE_WDS:
602
		case NL80211_IFTYPE_P2P_DEVICE:
603
			break;
604
		default:
605
606
			/* not reached */
			WARN_ON(1);
607
		}
608
609
610
611
612
613

		/*
		 * set default queue parameters so drivers don't
		 * need to initialise the hardware if the hardware
		 * doesn't start up with sane defaults
		 */
614
		ieee80211_set_wmm_default(sdata, true);
615
616
	}

617
618
	set_bit(SDATA_STATE_RUNNING, &sdata->state);

619
620
621
622
623
624
625
626
627
	if (sdata->vif.type == NL80211_IFTYPE_WDS) {
		/* Create STA entry for the WDS peer */
		sta = sta_info_alloc(sdata, sdata->u.wds.remote_addr,
				     GFP_KERNEL);
		if (!sta) {
			res = -ENOMEM;
			goto err_del_interface;
		}

628
629
630
		sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
		sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
		sta_info_pre_move_state(sta, IEEE80211_STA_AUTHORIZED);
631
632
633
634
635
636

		res = sta_info_insert(sta);
		if (res) {
			/* STA has been freed */
			goto err_del_interface;
		}
Bill Jordan's avatar
Bill Jordan committed
637
638

		rate_control_rate_init(sta);
639
		netif_carrier_on(dev);
640
641
	} else if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE) {
		rcu_assign_pointer(local->p2p_sdata, sdata);
642
643
644
645
646
647
648
649
650
651
652
653
654
	}

	/*
	 * set_multicast_list will be invoked by the networking core
	 * which will check whether any increments here were done in
	 * error and sync them down to the hardware as filter flags.
	 */
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_inc(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_inc(&local->iff_promiscs);

655
656
657
	if (coming_up)
		local->open_count++;

658
	if (hw_reconf_flags)
659
		ieee80211_hw_config(local, hw_reconf_flags);
660

661
	ieee80211_recalc_ps(local, -1);
662

663
664
665
666
667
	if (sdata->vif.type == NL80211_IFTYPE_MONITOR ||
	    sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
		/* XXX: for AP_VLAN, actually track AP queues */
		netif_tx_start_all_queues(dev);
	} else if (dev) {
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
		unsigned long flags;
		int n_acs = IEEE80211_NUM_ACS;
		int ac;

		if (local->hw.queues < IEEE80211_NUM_ACS)
			n_acs = 1;

		spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
		if (sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE ||
		    (local->queue_stop_reasons[sdata->vif.cab_queue] == 0 &&
		     skb_queue_empty(&local->pending[sdata->vif.cab_queue]))) {
			for (ac = 0; ac < n_acs; ac++) {
				int ac_queue = sdata->vif.hw_queue[ac];

				if (local->queue_stop_reasons[ac_queue] == 0 &&
				    skb_queue_empty(&local->pending[ac_queue]))
					netif_start_subqueue(dev, ac);
			}
		}
		spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
	}
689
690
691

	return 0;
 err_del_interface:
692
	drv_remove_interface(local, sdata);
693
 err_stop:
694
695
	if (!local->open_count)
		drv_stop(local);
696
697
698
699
 err_del_bss:
	sdata->bss = NULL;
	if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
		list_del(&sdata->u.vlan.list);
700
	/* might already be clear but that doesn't matter */
701
	clear_bit(SDATA_STATE_RUNNING, &sdata->state);
702
703
704
	return res;
}

705
static int ieee80211_open(struct net_device *dev)
706
707
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
708
709
710
	int err;

	/* fail early if user set an invalid address */
711
	if (!is_valid_ether_addr(dev->dev_addr))
712
713
714
715
716
717
		return -EADDRNOTAVAIL;

	err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
	if (err)
		return err;

718
	return ieee80211_do_open(&sdata->wdev, true);
719
720
721
722
723
}

static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata,
			      bool going_down)
{
724
	struct ieee80211_local *local = sdata->local;
725
726
	unsigned long flags;
	struct sk_buff *skb, *tmp;
727
	u32 hw_reconf_flags = 0;
728
	int i, flushed;
729
	struct ps_data *ps;
730

731
732
	clear_bit(SDATA_STATE_RUNNING, &sdata->state);

733
	if (rcu_access_pointer(local->scan_sdata) == sdata)
734
735
		ieee80211_scan_cancel(local);

736
737
738
	/*
	 * Stop TX on this interface first.
	 */
739
740
	if (sdata->dev)
		netif_tx_stop_all_queues(sdata->dev);
741

742
	ieee80211_roc_purge(local, sdata);
743

744
745
746
	if (sdata->vif.type == NL80211_IFTYPE_STATION)
		ieee80211_mgd_stop(sdata);

747
748
749
750
751
752
753
754
755
756
	/*
	 * Remove all stations associated with this interface.
	 *
	 * This must be done before calling ops->remove_interface()
	 * because otherwise we can later invoke ops->sta_notify()
	 * whenever the STAs are removed, and that invalidates driver
	 * assumptions about always getting a vif pointer that is valid
	 * (because if we remove a STA after ops->remove_interface()
	 * the driver will have removed the vif info already!)
	 *
757
758
759
	 * This is relevant only in WDS mode, in all other modes we've
	 * already removed all stations when disconnecting or similar,
	 * so warn otherwise.
760
761
	 *
	 * We call sta_info_flush_cleanup() later, to combine RCU waits.
762
	 */
763
	flushed = sta_info_flush_defer(sdata);
764
765
	WARN_ON_ONCE((sdata->vif.type != NL80211_IFTYPE_WDS && flushed > 0) ||
		     (sdata->vif.type == NL80211_IFTYPE_WDS && flushed != 1));
766

767
	/* don't count this interface for promisc/allmulti while it is down */
768
769
770
771
772
773
	if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
		atomic_dec(&local->iff_allmultis);

	if (sdata->flags & IEEE80211_SDATA_PROMISC)
		atomic_dec(&local->iff_promiscs);

774
	if (sdata->vif.type == NL80211_IFTYPE_AP) {
775
		local->fif_pspoll--;
776
777
778
779
		local->fif_probe_req--;
	} else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
		local->fif_probe_req--;
	}
780

781
782
783
784
785
786
787
788
	if (sdata->dev) {
		netif_addr_lock_bh(sdata->dev);
		spin_lock_bh(&local->filter_lock);
		__hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
				 sdata->dev->addr_len);
		spin_unlock_bh(&local->filter_lock);
		netif_addr_unlock_bh(sdata->dev);
	}
789

790
791
	del_timer_sync(&local->dynamic_ps_timer);
	cancel_work_sync(&local->dynamic_ps_enable_work);
792

793
794
	cancel_work_sync(&sdata->recalc_smps);

795
796
797
	cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);

	if (sdata->wdev.cac_started) {
798
		WARN_ON(local->suspended);
799
800
801
802
803
804
805
		mutex_lock(&local->iflist_mtx);
		ieee80211_vif_release_channel(sdata);
		mutex_unlock(&local->iflist_mtx);
		cfg80211_cac_event(sdata->dev, NL80211_RADAR_CAC_ABORTED,
				   GFP_KERNEL);
	}

806
807
	/* APs need special treatment */
	if (sdata->vif.type == NL80211_IFTYPE_AP) {
808
		struct ieee80211_sub_if_data *vlan, *tmpsdata;
809
810

		/* down all dependent devices, that is VLANs */
811
		list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
812
813
814
					 u.vlan.list)
			dev_close(vlan->dev);
		WARN_ON(!list_empty(&sdata->u.ap.vlans));
815
816
817
818
819
820
821
822
823
824
825
826
827
	} else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
		/* remove all packets in parent bc_buf pointing to this dev */
		ps = &sdata->bss->ps;

		spin_lock_irqsave(&ps->bc_buf.lock, flags);
		skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
			if (skb->dev == sdata->dev) {
				__skb_unlink(skb, &ps->bc_buf);
				local->total_ps_buffered--;
				ieee80211_free_txskb(&local->hw, skb);
			}
		}
		spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
828
829
	}

830
831
	if (going_down)
		local->open_count--;
832
833
834
835

	switch (sdata->vif.type) {
	case NL80211_IFTYPE_AP_VLAN:
		list_del(&sdata->u.vlan.list);
836
		rcu_assign_pointer(sdata->vif.chanctx_conf, NULL);
837
838
839
840
841
842
843
844
845
		/* no need to tell driver */
		break;
	case NL80211_IFTYPE_MONITOR:
		if (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES) {
			local->cooked_mntrs--;
			break;
		}

		local->monitors--;
846
		if (local->monitors == 0) {
847
848
			local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
			hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
849
		}
850

851
		ieee80211_adjust_monitor_flags(sdata, -1);
852
		break;
853
854
855
856
	case NL80211_IFTYPE_P2P_DEVICE:
		/* relies on synchronize_rcu() below */
		rcu_assign_pointer(local->p2p_sdata, NULL);
		/* fall through */
857
	default:
858
		cancel_work_sync(&sdata->work);
Johannes Berg's avatar
Johannes Berg committed
859
860
		/*
		 * When we get here, the interface is marked down.
861
862
863
		 *
		 * sta_info_flush_cleanup() requires rcu_barrier()
		 * first to wait for the station call_rcu() calls
864
865
		 * to complete, and we also need synchronize_rcu()
		 * to wait for the RX path in case it is using the
866
867
		 * interface and enqueuing frames at this very time on
		 * another CPU.
Johannes Berg's avatar
Johannes Berg committed
868
		 */
869
		synchronize_rcu();
870
		rcu_barrier();
871
872
		sta_info_flush_cleanup(sdata);

873
874
		/*
		 * Free all remaining keys, there shouldn't be any,
875
		 * except maybe in WDS mode?
876
		 */
Johannes Berg's avatar
Johannes Berg committed
877
		ieee80211_free_keys(sdata);
878

879
880
881
		/* fall through */
	case NL80211_IFTYPE_AP:
		skb_queue_purge(&sdata->skb_queue);
882
883
884
885
	}

	sdata->bss = NULL;

886
887
888
889
890
891
	spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
	for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
		skb_queue_walk_safe(&local->pending[i], skb, tmp) {
			struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
			if (info->control.vif == &sdata->vif) {
				__skb_unlink(skb, &local->pending[i]);
892
				ieee80211_free_txskb(&local->hw, skb);
893
894
895
896
			}
		}
	}
	spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
897

898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
	if (local->open_count == 0)
		ieee80211_clear_tx_pending(local);

	/*
	 * If the interface goes down while suspended, presumably because
	 * the device was unplugged and that happens before our resume,
	 * then the driver is already unconfigured and the remainder of
	 * this function isn't needed.
	 * XXX: what about WoWLAN? If the device has software state, e.g.
	 *	memory allocated, it might expect teardown commands from
	 *	mac80211 here?
	 */
	if (local->suspended) {
		WARN_ON(local->wowlan);
		WARN_ON(rtnl_dereference(local->monitor_sdata));
		return;
	}

	switch (sdata->vif.type) {
	case NL80211_IFTYPE_AP_VLAN:
		break;
	case NL80211_IFTYPE_MONITOR:
		if (local->monitors == 0)
			ieee80211_del_virtual_monitor(local);

		mutex_lock(&local->mtx);
		ieee80211_recalc_idle(local);
		mutex_unlock(&local->mtx);
		break;
	default:
		if (going_down)
			drv_remove_interface(local, sdata);
	}

	ieee80211_recalc_ps(local, -1);

	if (local->open_count == 0) {
		ieee80211_stop_device(local);

		/* no reconfiguring after stop! */
		return;
	}

	/* do after stop to avoid reconfiguring when we stop anyway */
	ieee80211_configure_filter(local);
	ieee80211_hw_config(local, hw_reconf_flags);

	if (local->monitors == local->open_count)
946
		ieee80211_add_virtual_monitor(local);
947
948
949
950
951
952
953
}

static int ieee80211_stop(struct net_device *dev)
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);

	ieee80211_do_stop(sdata, true);
954

955
956
957
958
959
960
	return 0;
}

static void ieee80211_set_multicast_list(struct net_device *dev)
{
	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
961
	struct ieee80211_local *local = sdata->local;
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
	int allmulti, promisc, sdata_allmulti, sdata_promisc;

	allmulti = !!(dev->flags & IFF_ALLMULTI);
	promisc = !!(dev->flags & IFF_PROMISC);
	sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
	sdata_promisc = !!(sdata->flags & IEEE80211_SDATA_PROMISC);

	if (allmulti != sdata_allmulti) {
		if (dev->flags & IFF_ALLMULTI)
			atomic_inc(&local->iff_allmultis);
		else
			atomic_dec(&local->iff_allmultis);
		sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
	}

	if (promisc != sdata_promisc) {
		if (dev->flags & IFF_PROMISC)
			atomic_inc(&local->iff_promiscs);
		else
			atomic_dec(&local->iff_promiscs);
		sdata->flags ^= IEEE80211_SDATA_PROMISC;
	}
984
985
986
987
988
989
990
991
992
993
994

	/*
	 * TODO: If somebody needs this on AP interfaces,
	 *	 it can be enabled easily but multicast
	 *	 addresses from VLANs need to be synced.
	 */
	if (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
	    sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
	    sdata->vif.type != NL80211_IFTYPE_AP)
		drv_set_multicast_list(local, sdata, &dev->mc);

Johannes Berg's avatar
Johannes Berg committed
995
	spin_lock_bh(&local->filter_lock);
996
	__hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
Johannes Berg's avatar
Johannes Berg committed
997
	spin_unlock_bh(&local->filter_lock);
998
	ieee80211_queue_work(&local->hw, &local->reconfig_filter);
999
1000
}