reg.c 63.9 KB
Newer Older
1 2 3 4
/*
 * Copyright 2002-2005, Instant802 Networks, Inc.
 * Copyright 2005-2006, Devicescape Software, Inc.
 * Copyright 2007	Johannes Berg <johannes@sipsolutions.net>
5
 * Copyright 2008-2011	Luis R. Rodriguez <mcgrof@qca.qualcomm.com>
6
 *
7 8 9 10 11 12 13 14 15 16 17
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18 19
 */

20

21 22
/**
 * DOC: Wireless regulatory infrastructure
23 24 25 26 27 28
 *
 * The usual implementation is for a driver to read a device EEPROM to
 * determine which regulatory domain it should be operating under, then
 * looking up the allowable channels in a driver-local table and finally
 * registering those channels in the wiphy structure.
 *
29 30 31 32 33 34 35 36 37 38 39 40 41 42
 * Another set of compliance enforcement is for drivers to use their
 * own compliance limits which can be stored on the EEPROM. The host
 * driver or firmware may ensure these are used.
 *
 * In addition to all this we provide an extra layer of regulatory
 * conformance. For drivers which do not have any regulatory
 * information CRDA provides the complete regulatory solution.
 * For others it provides a community effort on further restrictions
 * to enhance compliance.
 *
 * Note: When number of rules --> infinity we will not be able to
 * index on alpha2 any more, instead we'll probably have to
 * rely on some SHA1 checksum of the regdomain for example.
 *
43
 */
44 45 46

#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

47
#include <linux/kernel.h>
48
#include <linux/export.h>
49
#include <linux/slab.h>
50
#include <linux/list.h>
51
#include <linux/ctype.h>
52 53
#include <linux/nl80211.h>
#include <linux/platform_device.h>
54
#include <linux/moduleparam.h>
55
#include <net/cfg80211.h>
56
#include "core.h"
57
#include "reg.h"
58
#include "regdb.h"
59
#include "nl80211.h"
60

61
#ifdef CONFIG_CFG80211_REG_DEBUG
62 63
#define REG_DBG_PRINT(format, args...)			\
	printk(KERN_DEBUG pr_fmt(format), ##args)
64
#else
65
#define REG_DBG_PRINT(args...)
66 67
#endif

68 69 70 71 72 73 74
enum reg_request_treatment {
	REG_REQ_OK,
	REG_REQ_IGNORE,
	REG_REQ_INTERSECT,
	REG_REQ_ALREADY_SET,
};

75 76 77 78 79 80 81 82 83
static struct regulatory_request core_request_world = {
	.initiator = NL80211_REGDOM_SET_BY_CORE,
	.alpha2[0] = '0',
	.alpha2[1] = '0',
	.intersect = false,
	.processed = true,
	.country_ie_env = ENVIRON_ANY,
};

84
/* Receipt of information from last regulatory request */
85 86
static struct regulatory_request __rcu *last_request =
	(void __rcu *)&core_request_world;
87

88 89
/* To trigger userspace events */
static struct platform_device *reg_pdev;
90

91 92 93 94
static struct device_type reg_device_type = {
	.uevent = reg_device_uevent,
};

95 96
/*
 * Central wireless core regulatory domains, we only need two,
97
 * the current one and a world regulatory domain in case we have no
98
 * information to give us an alpha2.
99
 */
100
const struct ieee80211_regdomain __rcu *cfg80211_regdomain;
101

102 103
/*
 * Protects static reg.c components:
104 105
 *	- cfg80211_regdomain (if not used with RCU)
 *	- cfg80211_world_regdom
106
 *	- last_request (if not used with RCU)
107
 *	- reg_num_devs_support_basehint
108
 */
109
static DEFINE_MUTEX(reg_mutex);
110

111 112 113 114 115 116
/*
 * Number of devices that registered to the core
 * that support cellular base station regulatory hints
 */
static int reg_num_devs_support_basehint;

117 118 119 120
static inline void assert_reg_lock(void)
{
	lockdep_assert_held(&reg_mutex);
}
121

122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140
static const struct ieee80211_regdomain *get_cfg80211_regdom(void)
{
	return rcu_dereference_protected(cfg80211_regdomain,
					 lockdep_is_held(&reg_mutex));
}

static const struct ieee80211_regdomain *get_wiphy_regdom(struct wiphy *wiphy)
{
	return rcu_dereference_protected(wiphy->regd,
					 lockdep_is_held(&reg_mutex));
}

static void rcu_free_regdom(const struct ieee80211_regdomain *r)
{
	if (!r)
		return;
	kfree_rcu((struct ieee80211_regdomain *)r, rcu_head);
}

141 142
static struct regulatory_request *get_last_request(void)
{
J
Johannes Berg 已提交
143 144
	return rcu_dereference_check(last_request,
				     lockdep_is_held(&reg_mutex));
145 146
}

147
/* Used to queue up regulatory hints */
148 149 150
static LIST_HEAD(reg_requests_list);
static spinlock_t reg_requests_lock;

151 152 153 154 155 156 157 158 159 160 161 162
/* Used to queue up beacon hints for review */
static LIST_HEAD(reg_pending_beacons);
static spinlock_t reg_pending_beacons_lock;

/* Used to keep track of processed beacon hints */
static LIST_HEAD(reg_beacon_list);

struct reg_beacon {
	struct list_head list;
	struct ieee80211_channel chan;
};

163 164 165
static void reg_todo(struct work_struct *work);
static DECLARE_WORK(reg_work, reg_todo);

166 167 168
static void reg_timeout_work(struct work_struct *work);
static DECLARE_DELAYED_WORK(reg_timeout, reg_timeout_work);

169 170
/* We keep a static world regulatory domain in case of the absence of CRDA */
static const struct ieee80211_regdomain world_regdom = {
171
	.n_reg_rules = 6,
172 173
	.alpha2 =  "00",
	.reg_rules = {
174 175
		/* IEEE 802.11b/g, channels 1..11 */
		REG_RULE(2412-10, 2462+10, 40, 6, 20, 0),
176 177
		/* IEEE 802.11b/g, channels 12..13. */
		REG_RULE(2467-10, 2472+10, 40, 6, 20,
178 179
			NL80211_RRF_PASSIVE_SCAN |
			NL80211_RRF_NO_IBSS),
180 181 182 183 184 185 186
		/* IEEE 802.11 channel 14 - Only JP enables
		 * this and for 802.11b only */
		REG_RULE(2484-10, 2484+10, 20, 6, 20,
			NL80211_RRF_PASSIVE_SCAN |
			NL80211_RRF_NO_IBSS |
			NL80211_RRF_NO_OFDM),
		/* IEEE 802.11a, channel 36..48 */
187
		REG_RULE(5180-10, 5240+10, 80, 6, 20,
188 189
                        NL80211_RRF_PASSIVE_SCAN |
                        NL80211_RRF_NO_IBSS),
190

191
		/* NB: 5260 MHz - 5700 MHz requires DFS */
192 193

		/* IEEE 802.11a, channel 149..165 */
194
		REG_RULE(5745-10, 5825+10, 80, 6, 20,
195 196
			NL80211_RRF_PASSIVE_SCAN |
			NL80211_RRF_NO_IBSS),
197 198 199

		/* IEEE 802.11ad (60gHz), channels 1..3 */
		REG_RULE(56160+2160*1-1080, 56160+2160*3+1080, 2160, 0, 0, 0),
200 201 202
	}
};

203 204
static const struct ieee80211_regdomain *cfg80211_world_regdom =
	&world_regdom;
205

206
static char *ieee80211_regdom = "00";
207
static char user_alpha2[2];
208

209 210 211
module_param(ieee80211_regdom, charp, 0444);
MODULE_PARM_DESC(ieee80211_regdom, "IEEE 802.11 regulatory domain code");

212 213
static void reset_regdomains(bool full_reset,
			     const struct ieee80211_regdomain *new_regdom)
214
{
215
	const struct ieee80211_regdomain *r;
216
	struct regulatory_request *lr;
217

218 219
	assert_reg_lock();

220 221
	r = get_cfg80211_regdom();

222
	/* avoid freeing static information or freeing something twice */
223 224
	if (r == cfg80211_world_regdom)
		r = NULL;
225 226
	if (cfg80211_world_regdom == &world_regdom)
		cfg80211_world_regdom = NULL;
227 228
	if (r == &world_regdom)
		r = NULL;
229

230 231
	rcu_free_regdom(r);
	rcu_free_regdom(cfg80211_world_regdom);
232

233
	cfg80211_world_regdom = &world_regdom;
234
	rcu_assign_pointer(cfg80211_regdomain, new_regdom);
235 236 237 238

	if (!full_reset)
		return;

239 240 241 242
	lr = get_last_request();
	if (lr != &core_request_world && lr)
		kfree_rcu(lr, rcu_head);
	rcu_assign_pointer(last_request, &core_request_world);
243 244
}

245 246 247 248
/*
 * Dynamic world regulatory domain requested by the wireless
 * core upon initialization
 */
249
static void update_world_regdomain(const struct ieee80211_regdomain *rd)
250
{
251
	struct regulatory_request *lr;
252

253 254 255
	lr = get_last_request();

	WARN_ON(!lr);
256

257
	reset_regdomains(false, rd);
258 259 260 261

	cfg80211_world_regdom = rd;
}

262
bool is_world_regdom(const char *alpha2)
263 264 265
{
	if (!alpha2)
		return false;
J
Johannes Berg 已提交
266
	return alpha2[0] == '0' && alpha2[1] == '0';
267
}
268

269
static bool is_alpha2_set(const char *alpha2)
270 271 272
{
	if (!alpha2)
		return false;
J
Johannes Berg 已提交
273
	return alpha2[0] && alpha2[1];
274
}
275

276
static bool is_unknown_alpha2(const char *alpha2)
277 278 279
{
	if (!alpha2)
		return false;
280 281 282 283
	/*
	 * Special case where regulatory domain was built by driver
	 * but a specific alpha2 cannot be determined
	 */
J
Johannes Berg 已提交
284
	return alpha2[0] == '9' && alpha2[1] == '9';
285
}
286

287 288 289 290
static bool is_intersected_alpha2(const char *alpha2)
{
	if (!alpha2)
		return false;
291 292
	/*
	 * Special case where regulatory domain is the
293
	 * result of an intersection between two regulatory domain
294 295
	 * structures
	 */
J
Johannes Berg 已提交
296
	return alpha2[0] == '9' && alpha2[1] == '8';
297 298
}

299
static bool is_an_alpha2(const char *alpha2)
300 301 302
{
	if (!alpha2)
		return false;
J
Johannes Berg 已提交
303
	return isalpha(alpha2[0]) && isalpha(alpha2[1]);
304
}
305

306
static bool alpha2_equal(const char *alpha2_x, const char *alpha2_y)
307 308 309
{
	if (!alpha2_x || !alpha2_y)
		return false;
J
Johannes Berg 已提交
310
	return alpha2_x[0] == alpha2_y[0] && alpha2_x[1] == alpha2_y[1];
311 312
}

313
static bool regdom_changes(const char *alpha2)
314
{
315
	const struct ieee80211_regdomain *r = get_cfg80211_regdom();
316

317
	if (!r)
318
		return true;
319
	return !alpha2_equal(r->alpha2, alpha2);
320 321
}

322 323 324 325 326 327 328 329 330 331 332
/*
 * The NL80211_REGDOM_SET_BY_USER regdom alpha2 is cached, this lets
 * you know if a valid regulatory hint with NL80211_REGDOM_SET_BY_USER
 * has ever been issued.
 */
static bool is_user_regdom_saved(void)
{
	if (user_alpha2[0] == '9' && user_alpha2[1] == '7')
		return false;

	/* This would indicate a mistake on the design */
J
Johannes Berg 已提交
333
	if (WARN(!is_world_regdom(user_alpha2) && !is_an_alpha2(user_alpha2),
334
		 "Unexpected user alpha2: %c%c\n",
J
Johannes Berg 已提交
335
		 user_alpha2[0], user_alpha2[1]))
336 337 338 339 340
		return false;

	return true;
}

341 342
static const struct ieee80211_regdomain *
reg_copy_regd(const struct ieee80211_regdomain *src_regd)
343 344
{
	struct ieee80211_regdomain *regd;
345
	int size_of_regd;
346 347
	unsigned int i;

348 349 350
	size_of_regd =
		sizeof(struct ieee80211_regdomain) +
		src_regd->n_reg_rules * sizeof(struct ieee80211_reg_rule);
351 352 353

	regd = kzalloc(size_of_regd, GFP_KERNEL);
	if (!regd)
354
		return ERR_PTR(-ENOMEM);
355 356 357 358 359

	memcpy(regd, src_regd, sizeof(struct ieee80211_regdomain));

	for (i = 0; i < src_regd->n_reg_rules; i++)
		memcpy(&regd->reg_rules[i], &src_regd->reg_rules[i],
360
		       sizeof(struct ieee80211_reg_rule));
361

362
	return regd;
363 364 365 366 367 368 369 370 371
}

#ifdef CONFIG_CFG80211_INTERNAL_REGDB
struct reg_regdb_search_request {
	char alpha2[2];
	struct list_head list;
};

static LIST_HEAD(reg_regdb_search_list);
372
static DEFINE_MUTEX(reg_regdb_search_mutex);
373 374 375 376

static void reg_regdb_search(struct work_struct *work)
{
	struct reg_regdb_search_request *request;
377 378
	const struct ieee80211_regdomain *curdom, *regdom = NULL;
	int i;
379 380

	mutex_lock(&cfg80211_mutex);
381

382
	mutex_lock(&reg_regdb_search_mutex);
383 384 385 386 387 388
	while (!list_empty(&reg_regdb_search_list)) {
		request = list_first_entry(&reg_regdb_search_list,
					   struct reg_regdb_search_request,
					   list);
		list_del(&request->list);

J
Johannes Berg 已提交
389
		for (i = 0; i < reg_regdb_size; i++) {
390 391
			curdom = reg_regdb[i];

J
Johannes Berg 已提交
392
			if (alpha2_equal(request->alpha2, curdom->alpha2)) {
393
				regdom = reg_copy_regd(curdom);
394 395 396 397 398 399
				break;
			}
		}

		kfree(request);
	}
400
	mutex_unlock(&reg_regdb_search_mutex);
401

402
	if (!IS_ERR_OR_NULL(regdom))
403 404 405
		set_regdom(regdom);

	mutex_unlock(&cfg80211_mutex);
406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422
}

static DECLARE_WORK(reg_regdb_work, reg_regdb_search);

static void reg_regdb_query(const char *alpha2)
{
	struct reg_regdb_search_request *request;

	if (!alpha2)
		return;

	request = kzalloc(sizeof(struct reg_regdb_search_request), GFP_KERNEL);
	if (!request)
		return;

	memcpy(request->alpha2, alpha2, 2);

423
	mutex_lock(&reg_regdb_search_mutex);
424
	list_add_tail(&request->list, &reg_regdb_search_list);
425
	mutex_unlock(&reg_regdb_search_mutex);
426 427 428

	schedule_work(&reg_regdb_work);
}
429 430 431 432 433 434 435

/* Feel free to add any other sanity checks here */
static void reg_regdb_size_check(void)
{
	/* We should ideally BUILD_BUG_ON() but then random builds would fail */
	WARN_ONCE(!reg_regdb_size, "db.txt is empty, you should update it...");
}
436
#else
437
static inline void reg_regdb_size_check(void) {}
438 439 440
static inline void reg_regdb_query(const char *alpha2) {}
#endif /* CONFIG_CFG80211_INTERNAL_REGDB */

441 442
/*
 * This lets us keep regulatory code which is updated on a regulatory
443 444
 * basis in userspace. Country information is filled in by
 * reg_device_uevent
445
 */
446 447 448
static int call_crda(const char *alpha2)
{
	if (!is_world_regdom((char *) alpha2))
449
		pr_info("Calling CRDA for country: %c%c\n",
450 451
			alpha2[0], alpha2[1]);
	else
452
		pr_info("Calling CRDA to update world regulatory domain\n");
453

454 455 456
	/* query internal regulatory database (if it exists) */
	reg_regdb_query(alpha2);

457
	return kobject_uevent(&reg_pdev->dev.kobj, KOBJ_CHANGE);
458 459
}

460
static bool reg_is_valid_request(const char *alpha2)
461
{
462
	struct regulatory_request *lr = get_last_request();
463

464
	if (!lr || lr->processed)
465 466
		return false;

467
	return alpha2_equal(lr->alpha2, alpha2);
468
}
469

470
/* Sanity check on a regulatory rule */
471
static bool is_valid_reg_rule(const struct ieee80211_reg_rule *rule)
472
{
473
	const struct ieee80211_freq_range *freq_range = &rule->freq_range;
474 475
	u32 freq_diff;

476
	if (freq_range->start_freq_khz <= 0 || freq_range->end_freq_khz <= 0)
477 478 479 480 481 482 483
		return false;

	if (freq_range->start_freq_khz > freq_range->end_freq_khz)
		return false;

	freq_diff = freq_range->end_freq_khz - freq_range->start_freq_khz;

484
	if (freq_range->end_freq_khz <= freq_range->start_freq_khz ||
J
Johannes Berg 已提交
485
	    freq_range->max_bandwidth_khz > freq_diff)
486 487 488 489 490
		return false;

	return true;
}

491
static bool is_valid_rd(const struct ieee80211_regdomain *rd)
492
{
493
	const struct ieee80211_reg_rule *reg_rule = NULL;
494
	unsigned int i;
495

496 497
	if (!rd->n_reg_rules)
		return false;
498

499 500 501
	if (WARN_ON(rd->n_reg_rules > NL80211_MAX_SUPP_REG_RULES))
		return false;

502 503 504 505 506 507 508
	for (i = 0; i < rd->n_reg_rules; i++) {
		reg_rule = &rd->reg_rules[i];
		if (!is_valid_reg_rule(reg_rule))
			return false;
	}

	return true;
509 510
}

511
static bool reg_does_bw_fit(const struct ieee80211_freq_range *freq_range,
512
			    u32 center_freq_khz, u32 bw_khz)
513
{
514 515 516 517 518 519 520 521 522 523
	u32 start_freq_khz, end_freq_khz;

	start_freq_khz = center_freq_khz - (bw_khz/2);
	end_freq_khz = center_freq_khz + (bw_khz/2);

	if (start_freq_khz >= freq_range->start_freq_khz &&
	    end_freq_khz <= freq_range->end_freq_khz)
		return true;

	return false;
524
}
525

526 527 528 529 530 531 532
/**
 * freq_in_rule_band - tells us if a frequency is in a frequency band
 * @freq_range: frequency rule we want to query
 * @freq_khz: frequency we are inquiring about
 *
 * This lets us know if a specific frequency rule is or is not relevant to
 * a specific frequency's band. Bands are device specific and artificial
533 534 535 536 537
 * definitions (the "2.4 GHz band", the "5 GHz band" and the "60GHz band"),
 * however it is safe for now to assume that a frequency rule should not be
 * part of a frequency's band if the start freq or end freq are off by more
 * than 2 GHz for the 2.4 and 5 GHz bands, and by more than 10 GHz for the
 * 60 GHz band.
538 539 540 541
 * This resolution can be lowered and should be considered as we add
 * regulatory rule support for other "bands".
 **/
static bool freq_in_rule_band(const struct ieee80211_freq_range *freq_range,
J
Johannes Berg 已提交
542
			      u32 freq_khz)
543 544
{
#define ONE_GHZ_IN_KHZ	1000000
545 546 547 548 549 550 551 552
	/*
	 * From 802.11ad: directional multi-gigabit (DMG):
	 * Pertaining to operation in a frequency band containing a channel
	 * with the Channel starting frequency above 45 GHz.
	 */
	u32 limit = freq_khz > 45 * ONE_GHZ_IN_KHZ ?
			10 * ONE_GHZ_IN_KHZ : 2 * ONE_GHZ_IN_KHZ;
	if (abs(freq_khz - freq_range->start_freq_khz) <= limit)
553
		return true;
554
	if (abs(freq_khz - freq_range->end_freq_khz) <= limit)
555 556 557 558 559
		return true;
	return false;
#undef ONE_GHZ_IN_KHZ
}

560 561 562 563
/*
 * Helper for regdom_intersect(), this does the real
 * mathematical intersection fun
 */
J
Johannes Berg 已提交
564 565 566
static int reg_rules_intersect(const struct ieee80211_reg_rule *rule1,
			       const struct ieee80211_reg_rule *rule2,
			       struct ieee80211_reg_rule *intersected_rule)
567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582
{
	const struct ieee80211_freq_range *freq_range1, *freq_range2;
	struct ieee80211_freq_range *freq_range;
	const struct ieee80211_power_rule *power_rule1, *power_rule2;
	struct ieee80211_power_rule *power_rule;
	u32 freq_diff;

	freq_range1 = &rule1->freq_range;
	freq_range2 = &rule2->freq_range;
	freq_range = &intersected_rule->freq_range;

	power_rule1 = &rule1->power_rule;
	power_rule2 = &rule2->power_rule;
	power_rule = &intersected_rule->power_rule;

	freq_range->start_freq_khz = max(freq_range1->start_freq_khz,
J
Johannes Berg 已提交
583
					 freq_range2->start_freq_khz);
584
	freq_range->end_freq_khz = min(freq_range1->end_freq_khz,
J
Johannes Berg 已提交
585
				       freq_range2->end_freq_khz);
586
	freq_range->max_bandwidth_khz = min(freq_range1->max_bandwidth_khz,
J
Johannes Berg 已提交
587
					    freq_range2->max_bandwidth_khz);
588 589 590 591 592 593 594 595 596 597

	freq_diff = freq_range->end_freq_khz - freq_range->start_freq_khz;
	if (freq_range->max_bandwidth_khz > freq_diff)
		freq_range->max_bandwidth_khz = freq_diff;

	power_rule->max_eirp = min(power_rule1->max_eirp,
		power_rule2->max_eirp);
	power_rule->max_antenna_gain = min(power_rule1->max_antenna_gain,
		power_rule2->max_antenna_gain);

J
Johannes Berg 已提交
598
	intersected_rule->flags = rule1->flags | rule2->flags;
599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618

	if (!is_valid_reg_rule(intersected_rule))
		return -EINVAL;

	return 0;
}

/**
 * regdom_intersect - do the intersection between two regulatory domains
 * @rd1: first regulatory domain
 * @rd2: second regulatory domain
 *
 * Use this function to get the intersection between two regulatory domains.
 * Once completed we will mark the alpha2 for the rd as intersected, "98",
 * as no one single alpha2 can represent this regulatory domain.
 *
 * Returns a pointer to the regulatory domain structure which will hold the
 * resulting intersection of rules between rd1 and rd2. We will
 * kzalloc() this structure for you.
 */
J
Johannes Berg 已提交
619 620 621
static struct ieee80211_regdomain *
regdom_intersect(const struct ieee80211_regdomain *rd1,
		 const struct ieee80211_regdomain *rd2)
622 623 624 625 626 627 628 629
{
	int r, size_of_regd;
	unsigned int x, y;
	unsigned int num_rules = 0, rule_idx = 0;
	const struct ieee80211_reg_rule *rule1, *rule2;
	struct ieee80211_reg_rule *intersected_rule;
	struct ieee80211_regdomain *rd;
	/* This is just a dummy holder to help us count */
630
	struct ieee80211_reg_rule dummy_rule;
631 632 633 634

	if (!rd1 || !rd2)
		return NULL;

635 636
	/*
	 * First we get a count of the rules we'll need, then we actually
637 638 639
	 * build them. This is to so we can malloc() and free() a
	 * regdomain once. The reason we use reg_rules_intersect() here
	 * is it will return -EINVAL if the rule computed makes no sense.
640 641
	 * All rules that do check out OK are valid.
	 */
642 643 644 645 646

	for (x = 0; x < rd1->n_reg_rules; x++) {
		rule1 = &rd1->reg_rules[x];
		for (y = 0; y < rd2->n_reg_rules; y++) {
			rule2 = &rd2->reg_rules[y];
647
			if (!reg_rules_intersect(rule1, rule2, &dummy_rule))
648 649 650 651 652 653 654 655
				num_rules++;
		}
	}

	if (!num_rules)
		return NULL;

	size_of_regd = sizeof(struct ieee80211_regdomain) +
656
		       num_rules * sizeof(struct ieee80211_reg_rule);
657 658 659 660 661

	rd = kzalloc(size_of_regd, GFP_KERNEL);
	if (!rd)
		return NULL;

662
	for (x = 0; x < rd1->n_reg_rules && rule_idx < num_rules; x++) {
663
		rule1 = &rd1->reg_rules[x];
664
		for (y = 0; y < rd2->n_reg_rules && rule_idx < num_rules; y++) {
665
			rule2 = &rd2->reg_rules[y];
666 667
			/*
			 * This time around instead of using the stack lets
668
			 * write to the target rule directly saving ourselves
669 670
			 * a memcpy()
			 */
671
			intersected_rule = &rd->reg_rules[rule_idx];
J
Johannes Berg 已提交
672
			r = reg_rules_intersect(rule1, rule2, intersected_rule);
673 674 675 676
			/*
			 * No need to memset here the intersected rule here as
			 * we're not using the stack anymore
			 */
677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694
			if (r)
				continue;
			rule_idx++;
		}
	}

	if (rule_idx != num_rules) {
		kfree(rd);
		return NULL;
	}

	rd->n_reg_rules = num_rules;
	rd->alpha2[0] = '9';
	rd->alpha2[1] = '8';

	return rd;
}

695 696 697 698
/*
 * XXX: add support for the rest of enum nl80211_reg_rule_flags, we may
 * want to just have the channel structure use these
 */
699 700 701 702 703 704 705 706 707
static u32 map_regdom_flags(u32 rd_flags)
{
	u32 channel_flags = 0;
	if (rd_flags & NL80211_RRF_PASSIVE_SCAN)
		channel_flags |= IEEE80211_CHAN_PASSIVE_SCAN;
	if (rd_flags & NL80211_RRF_NO_IBSS)
		channel_flags |= IEEE80211_CHAN_NO_IBSS;
	if (rd_flags & NL80211_RRF_DFS)
		channel_flags |= IEEE80211_CHAN_RADAR;
708 709
	if (rd_flags & NL80211_RRF_NO_OFDM)
		channel_flags |= IEEE80211_CHAN_NO_OFDM;
710 711 712
	return channel_flags;
}

713 714 715
static const struct ieee80211_reg_rule *
freq_reg_info_regd(struct wiphy *wiphy, u32 center_freq,
		   const struct ieee80211_regdomain *regd)
716 717
{
	int i;
718
	bool band_rule_found = false;
719 720
	bool bw_fits = false;

721
	if (!regd)
722
		return ERR_PTR(-EINVAL);
723

724
	for (i = 0; i < regd->n_reg_rules; i++) {
725 726 727
		const struct ieee80211_reg_rule *rr;
		const struct ieee80211_freq_range *fr = NULL;

728
		rr = &regd->reg_rules[i];
729
		fr = &rr->freq_range;
730

731 732
		/*
		 * We only need to know if one frequency rule was
733
		 * was in center_freq's band, that's enough, so lets
734 735
		 * not overwrite it once found
		 */
736 737 738
		if (!band_rule_found)
			band_rule_found = freq_in_rule_band(fr, center_freq);

739
		bw_fits = reg_does_bw_fit(fr, center_freq, MHZ_TO_KHZ(20));
740

741 742
		if (band_rule_found && bw_fits)
			return rr;
743 744
	}

745
	if (!band_rule_found)
746
		return ERR_PTR(-ERANGE);
747

748
	return ERR_PTR(-EINVAL);
749 750
}

751 752
const struct ieee80211_reg_rule *freq_reg_info(struct wiphy *wiphy,
					       u32 center_freq)
753
{
754
	const struct ieee80211_regdomain *regd;
755
	struct regulatory_request *lr = get_last_request();
J
Johannes Berg 已提交
756

757 758 759 760
	/*
	 * Follow the driver's regulatory domain, if present, unless a country
	 * IE has been processed or a user wants to help complaince further
	 */
761 762
	if (lr->initiator != NL80211_REGDOM_SET_BY_COUNTRY_IE &&
	    lr->initiator != NL80211_REGDOM_SET_BY_USER &&
763
	    wiphy->regd)
764
		regd = get_wiphy_regdom(wiphy);
765
	else
766
		regd = get_cfg80211_regdom();
767

768
	return freq_reg_info_regd(wiphy, center_freq, regd);
769
}
770
EXPORT_SYMBOL(freq_reg_info);
771

772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788
#ifdef CONFIG_CFG80211_REG_DEBUG
static const char *reg_initiator_name(enum nl80211_reg_initiator initiator)
{
	switch (initiator) {
	case NL80211_REGDOM_SET_BY_CORE:
		return "Set by core";
	case NL80211_REGDOM_SET_BY_USER:
		return "Set by user";
	case NL80211_REGDOM_SET_BY_DRIVER:
		return "Set by driver";
	case NL80211_REGDOM_SET_BY_COUNTRY_IE:
		return "Set by country IE";
	default:
		WARN_ON(1);
		return "Set by bug";
	}
}
789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804

static void chan_reg_rule_print_dbg(struct ieee80211_channel *chan,
				    const struct ieee80211_reg_rule *reg_rule)
{
	const struct ieee80211_power_rule *power_rule;
	const struct ieee80211_freq_range *freq_range;
	char max_antenna_gain[32];

	power_rule = &reg_rule->power_rule;
	freq_range = &reg_rule->freq_range;

	if (!power_rule->max_antenna_gain)
		snprintf(max_antenna_gain, 32, "N/A");
	else
		snprintf(max_antenna_gain, 32, "%d", power_rule->max_antenna_gain);

805 806
	REG_DBG_PRINT("Updating information on frequency %d MHz with regulatory rule:\n",
		      chan->center_freq);
807

808
	REG_DBG_PRINT("%d KHz - %d KHz @ %d KHz), (%s mBi, %d mBm)\n",
J
Johannes Berg 已提交
809 810
		      freq_range->start_freq_khz, freq_range->end_freq_khz,
		      freq_range->max_bandwidth_khz, max_antenna_gain,
811 812 813 814 815 816 817 818
		      power_rule->max_eirp);
}
#else
static void chan_reg_rule_print_dbg(struct ieee80211_channel *chan,
				    const struct ieee80211_reg_rule *reg_rule)
{
	return;
}
819 820
#endif

821 822 823
/*
 * Note that right now we assume the desired channel bandwidth
 * is always 20 MHz for each individual channel (HT40 uses 20 MHz
824
 * per channel, the primary and the extension channel).
825
 */
826 827
static void handle_channel(struct wiphy *wiphy,
			   enum nl80211_reg_initiator initiator,
J
Johannes Berg 已提交
828
			   struct ieee80211_channel *chan)
829
{
830
	u32 flags, bw_flags = 0;
831 832
	const struct ieee80211_reg_rule *reg_rule = NULL;
	const struct ieee80211_power_rule *power_rule = NULL;
833
	const struct ieee80211_freq_range *freq_range = NULL;
834
	struct wiphy *request_wiphy = NULL;
835
	struct regulatory_request *lr = get_last_request();
836

837
	request_wiphy = wiphy_idx_to_wiphy(lr->wiphy_idx);
838 839

	flags = chan->orig_flags;
840

841 842
	reg_rule = freq_reg_info(wiphy, MHZ_TO_KHZ(chan->center_freq));
	if (IS_ERR(reg_rule)) {
843 844
		/*
		 * We will disable all channels that do not match our
L
Lucas De Marchi 已提交
845
		 * received regulatory rule unless the hint is coming
846 847 848 849 850 851 852 853
		 * from a Country IE and the Country IE had no information
		 * about a band. The IEEE 802.11 spec allows for an AP
		 * to send only a subset of the regulatory rules allowed,
		 * so an AP in the US that only supports 2.4 GHz may only send
		 * a country IE with information for the 2.4 GHz band
		 * while 5 GHz is still supported.
		 */
		if (initiator == NL80211_REGDOM_SET_BY_COUNTRY_IE &&
854
		    PTR_ERR(reg_rule) == -ERANGE)
855 856
			return;

857
		REG_DBG_PRINT("Disabling freq %d MHz\n", chan->center_freq);
858
		chan->flags |= IEEE80211_CHAN_DISABLED;
859
		return;
860
	}
861

862
	chan_reg_rule_print_dbg(chan, reg_rule);
863

864
	power_rule = &reg_rule->power_rule;
865 866 867 868
	freq_range = &reg_rule->freq_range;

	if (freq_range->max_bandwidth_khz < MHZ_TO_KHZ(40))
		bw_flags = IEEE80211_CHAN_NO_HT40;
869 870 871 872
	if (freq_range->max_bandwidth_khz < MHZ_TO_KHZ(80))
		bw_flags |= IEEE80211_CHAN_NO_80MHZ;
	if (freq_range->max_bandwidth_khz < MHZ_TO_KHZ(160))
		bw_flags |= IEEE80211_CHAN_NO_160MHZ;
873

874
	if (lr->initiator == NL80211_REGDOM_SET_BY_DRIVER &&
875
	    request_wiphy && request_wiphy == wiphy &&
J
Johannes Berg 已提交
876
	    request_wiphy->flags & WIPHY_FLAG_STRICT_REGULATORY) {
877
		/*
L
Lucas De Marchi 已提交
878
		 * This guarantees the driver's requested regulatory domain
879
		 * will always be used as a base for further regulatory
880 881
		 * settings
		 */
882
		chan->flags = chan->orig_flags =
883
			map_regdom_flags(reg_rule->flags) | bw_flags;
884 885
		chan->max_antenna_gain = chan->orig_mag =
			(int) MBI_TO_DBI(power_rule->max_antenna_gain);
886
		chan->max_reg_power = chan->max_power = chan->orig_mpwr =
887 888 889 890
			(int) MBM_TO_DBM(power_rule->max_eirp);
		return;
	}

891 892 893
	chan->dfs_state = NL80211_DFS_USABLE;
	chan->dfs_state_entered = jiffies;

894
	chan->beacon_found = false;
895
	chan->flags = flags | bw_flags | map_regdom_flags(reg_rule->flags);
J
Johannes Berg 已提交
896 897 898
	chan->max_antenna_gain =
		min_t(int, chan->orig_mag,
		      MBI_TO_DBI(power_rule->max_antenna_gain));
899
	chan->max_reg_power = (int) MBM_TO_DBM(power_rule->max_eirp);
900 901 902 903 904 905 906 907 908 909 910 911 912 913 914
	if (chan->orig_mpwr) {
		/*
		 * Devices that have their own custom regulatory domain
		 * but also use WIPHY_FLAG_STRICT_REGULATORY will follow the
		 * passed country IE power settings.
		 */
		if (initiator == NL80211_REGDOM_SET_BY_COUNTRY_IE &&
		    wiphy->flags & WIPHY_FLAG_CUSTOM_REGULATORY &&
		    wiphy->flags & WIPHY_FLAG_STRICT_REGULATORY)
			chan->max_power = chan->max_reg_power;
		else
			chan->max_power = min(chan->orig_mpwr,
					      chan->max_reg_power);
	} else
		chan->max_power = chan->max_reg_power;
915 916
}

917
static void handle_band(struct wiphy *wiphy,
J
Johannes Berg 已提交
918 919
			enum nl80211_reg_initiator initiator,
			struct ieee80211_supported_band *sband)
920
{
921 922
	unsigned int i;

J
Johannes Berg 已提交
923 924
	if (!sband)
		return;
925 926

	for (i = 0; i < sband->n_channels; i++)
J
Johannes Berg 已提交
927
		handle_channel(wiphy, initiator, &sband->channels[i]);
928 929
}

930 931 932 933
static bool reg_request_cell_base(struct regulatory_request *request)
{
	if (request->initiator != NL80211_REGDOM_SET_BY_USER)
		return false;
J
Johannes Berg 已提交
934
	return request->user_reg_hint_type == NL80211_USER_REG_HINT_CELL_BASE;
935 936 937 938
}

bool reg_last_request_cell_base(void)
{
939
	bool val;
940 941

	mutex_lock(&reg_mutex);
942
	val = reg_request_cell_base(get_last_request());
943
	mutex_unlock(&reg_mutex);
J
Johannes Berg 已提交
944

945
	return val;
946 947 948 949
}

#ifdef CONFIG_CFG80211_CERTIFICATION_ONUS
/* Core specific check */
950 951
static enum reg_request_treatment
reg_ignore_cell_hint(struct regulatory_request *pending_request)
952
{
953 954
	struct regulatory_request *lr = get_last_request();

955
	if (!reg_num_devs_support_basehint)
956
		return REG_REQ_IGNORE;
957

958
	if (reg_request_cell_base(lr) &&
J
Johannes Berg 已提交
959
	    !regdom_changes(pending_request->alpha2))
960
		return REG_REQ_ALREADY_SET;
J
Johannes Berg 已提交
961

962
	return REG_REQ_OK;
963 964 965 966 967
}

/* Device specific check */
static bool reg_dev_ignore_cell_hint(struct wiphy *wiphy)
{
J
Johannes Berg 已提交
968
	return !(wiphy->features & NL80211_FEATURE_CELL_BASE_REG_HINTS);
969 970 971 972
}
#else
static int reg_ignore_cell_hint(struct regulatory_request *pending_request)
{
973
	return REG_REQ_IGNORE;
974
}
J
Johannes Berg 已提交
975 976

static bool reg_dev_ignore_cell_hint(struct wiphy *wiphy)
977 978 979 980 981 982
{
	return true;
}
#endif


983 984
static bool ignore_reg_update(struct wiphy *wiphy,
			      enum nl80211_reg_initiator initiator)
985
{
986 987 988
	struct regulatory_request *lr = get_last_request();

	if (!lr) {
J
Johannes Berg 已提交
989
		REG_DBG_PRINT("Ignoring regulatory request %s since last_request is not set\n",
990
			      reg_initiator_name(initiator));
991
		return true;
992 993
	}

994
	if (initiator == NL80211_REGDOM_SET_BY_CORE &&
995
	    wiphy->flags & WIPHY_FLAG_CUSTOM_REGULATORY) {
J
Johannes Berg 已提交
996
		REG_DBG_PRINT("Ignoring regulatory request %s since the driver uses its own custom regulatory domain\n",
997
			      reg_initiator_name(initiator));
998
		return true;
999 1000
	}

1001 1002 1003 1004
	/*
	 * wiphy->regd will be set once the device has its own
	 * desired regulatory domain set
	 */
J
Johannes Berg 已提交
1005
	if (wiphy->flags & WIPHY_FLAG_STRICT_REGULATORY && !wiphy->regd &&
1006
	    initiator != NL80211_REGDOM_SET_BY_COUNTRY_IE &&
1007
	    !is_world_regdom(lr->alpha2)) {
J
Johannes Berg 已提交
1008
		REG_DBG_PRINT("Ignoring regulatory request %s since the driver requires its own regulatory domain to be set first\n",
1009
			      reg_initiator_name(initiator));
1010
		return true;
1011 1012
	}

1013
	if (reg_request_cell_base(lr))
1014 1015
		return reg_dev_ignore_cell_hint(wiphy);

1016 1017 1018
	return false;
}

1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034
static bool reg_is_world_roaming(struct wiphy *wiphy)
{
	const struct ieee80211_regdomain *cr = get_cfg80211_regdom();
	const struct ieee80211_regdomain *wr = get_wiphy_regdom(wiphy);
	struct regulatory_request *lr = get_last_request();

	if (is_world_regdom(cr->alpha2) || (wr && is_world_regdom(wr->alpha2)))
		return true;

	if (lr && lr->initiator != NL80211_REGDOM_SET_BY_COUNTRY_IE &&
	    wiphy->flags & WIPHY_FLAG_CUSTOM_REGULATORY)
		return true;

	return false;
}

J
Johannes Berg 已提交
1035
static void handle_reg_beacon(struct wiphy *wiphy, unsigned int chan_idx,
1036 1037 1038 1039
			      struct reg_beacon *reg_beacon)
{
	struct ieee80211_supported_band *sband;
	struct ieee80211_channel *chan;
1040 1041
	bool channel_changed = false;
	struct ieee80211_channel chan_before;
1042 1043 1044 1045 1046 1047 1048

	sband = wiphy->bands[reg_beacon->chan.band];
	chan = &sband->channels[chan_idx];

	if (likely(chan->center_freq != reg_beacon->chan.center_freq))
		return;

1049 1050 1051 1052 1053
	if (chan->beacon_found)
		return;

	chan->beacon_found = true;

1054 1055 1056
	if (!reg_is_world_roaming(wiphy))
		return;

J
Johannes Berg 已提交
1057
	if (wiphy->flags & WIPHY_FLAG_DISABLE_BEACON_HINTS)
1058 1059
		return;

1060 1061 1062
	chan_before.center_freq = chan->center_freq;
	chan_before.flags = chan->flags;

1063
	if (chan->flags & IEEE80211_CHAN_PASSIVE_SCAN) {
1064
		chan->flags &= ~IEEE80211_CHAN_PASSIVE_SCAN;
1065
		channel_changed = true;
1066 1067
	}

1068
	if (chan->flags & IEEE80211_CHAN_NO_IBSS) {
1069
		chan->flags &= ~IEEE80211_CHAN_NO_IBSS;
1070
		channel_changed = true;
1071 1072
	}

1073 1074
	if (channel_changed)
		nl80211_send_beacon_hint_event(wiphy, &chan_before, chan);
1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116
}

/*
 * Called when a scan on a wiphy finds a beacon on
 * new channel
 */
static void wiphy_update_new_beacon(struct wiphy *wiphy,
				    struct reg_beacon *reg_beacon)
{
	unsigned int i;
	struct ieee80211_supported_band *sband;

	if (!wiphy->bands[reg_beacon->chan.band])
		return;

	sband = wiphy->bands[reg_beacon->chan.band];

	for (i = 0; i < sband->n_channels; i++)
		handle_reg_beacon(wiphy, i, reg_beacon);
}

/*
 * Called upon reg changes or a new wiphy is added
 */
static void wiphy_update_beacon_reg(struct wiphy *wiphy)
{
	unsigned int i;
	struct ieee80211_supported_band *sband;
	struct reg_beacon *reg_beacon;

	list_for_each_entry(reg_beacon, &reg_beacon_list, list) {
		if (!wiphy->bands[reg_beacon->chan.band])
			continue;
		sband = wiphy->bands[reg_beacon->chan.band];
		for (i = 0; i < sband->n_channels; i++)
			handle_reg_beacon(wiphy, i, reg_beacon);
	}
}

/* Reap the advantages of previously found beacons */
static void reg_process_beacons(struct wiphy *wiphy)
{
1117 1118 1119 1120 1121 1122
	/*
	 * Means we are just firing up cfg80211, so no beacons would
	 * have been processed yet.
	 */
	if (!last_request)
		return;
1123 1124 1125
	wiphy_update_beacon_reg(wiphy);
}

J
Johannes Berg 已提交
1126
static bool is_ht40_allowed(struct ieee80211_channel *chan)
1127 1128
{
	if (!chan)
J
Johannes Berg 已提交
1129
		return false;
1130
	if (chan->flags & IEEE80211_CHAN_DISABLED)
J
Johannes Berg 已提交
1131
		return false;
1132
	/* This would happen when regulatory rules disallow HT40 completely */
1133 1134 1135
	if ((chan->flags & IEEE80211_CHAN_NO_HT40) == IEEE80211_CHAN_NO_HT40)
		return false;
	return true;
1136 1137 1138
}

static void reg_process_ht_flags_channel(struct wiphy *wiphy,
J
Johannes Berg 已提交
1139
					 struct ieee80211_channel *channel)
1140
{
J
Johannes Berg 已提交
1141
	struct ieee80211_supported_band *sband = wiphy->bands[channel->band];
1142 1143 1144
	struct ieee80211_channel *channel_before = NULL, *channel_after = NULL;
	unsigned int i;

J
Johannes Berg 已提交
1145
	if (!is_ht40_allowed(channel)) {
1146 1147 1148 1149 1150 1151 1152 1153 1154 1155
		channel->flags |= IEEE80211_CHAN_NO_HT40;
		return;
	}

	/*
	 * We need to ensure the extension channels exist to
	 * be able to use HT40- or HT40+, this finds them (or not)
	 */
	for (i = 0; i < sband->n_channels; i++) {
		struct ieee80211_channel *c = &sband->channels[i];
J
Johannes Berg 已提交
1156

1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167
		if (c->center_freq == (channel->center_freq - 20))
			channel_before = c;
		if (c->center_freq == (channel->center_freq + 20))
			channel_after = c;
	}

	/*
	 * Please note that this assumes target bandwidth is 20 MHz,
	 * if that ever changes we also need to change the below logic
	 * to include that as well.
	 */
J
Johannes Berg 已提交
1168
	if (!is_ht40_allowed(channel_before))
1169
		channel->flags |= IEEE80211_CHAN_NO_HT40MINUS;
1170
	else
1171
		channel->flags &= ~IEEE80211_CHAN_NO_HT40MINUS;
1172

J
Johannes Berg 已提交
1173
	if (!is_ht40_allowed(channel_after))
1174
		channel->flags |= IEEE80211_CHAN_NO_HT40PLUS;
1175
	else
1176
		channel->flags &= ~IEEE80211_CHAN_NO_HT40PLUS;
1177 1178 1179
}

static void reg_process_ht_flags_band(struct wiphy *wiphy,
J
Johannes Berg 已提交
1180
				      struct ieee80211_supported_band *sband)
1181 1182 1183
{
	unsigned int i;

J
Johannes Berg 已提交
1184 1185
	if (!sband)
		return;
1186 1187

	for (i = 0; i < sband->n_channels; i++)
J
Johannes Berg 已提交
1188
		reg_process_ht_flags_channel(wiphy, &sband->channels[i]);
1189 1190 1191 1192 1193 1194 1195 1196 1197
}

static void reg_process_ht_flags(struct wiphy *wiphy)
{
	enum ieee80211_band band;

	if (!wiphy)
		return;

J
Johannes Berg 已提交
1198 1199
	for (band = 0; band < IEEE80211_NUM_BANDS; band++)
		reg_process_ht_flags_band(wiphy, wiphy->bands[band]);
1200 1201
}

1202 1203
static void wiphy_update_regulatory(struct wiphy *wiphy,
				    enum nl80211_reg_initiator initiator)
1204 1205
{
	enum ieee80211_band band;
1206
	struct regulatory_request *lr = get_last_request();
1207

1208
	if (ignore_reg_update(wiphy, initiator))
1209 1210
		return;

1211
	lr->dfs_region = get_cfg80211_regdom()->dfs_region;
1212

J
Johannes Berg 已提交
1213 1214
	for (band = 0; band < IEEE80211_NUM_BANDS; band++)
		handle_band(wiphy, initiator, wiphy->bands[band]);
1215

1216
	reg_process_beacons(wiphy);
1217
	reg_process_ht_flags(wiphy);
J
Johannes Berg 已提交
1218

1219
	if (wiphy->reg_notifier)
1220
		wiphy->reg_notifier(wiphy, lr);
1221 1222
}

1223 1224 1225
static void update_all_wiphy_regulatory(enum nl80211_reg_initiator initiator)
{
	struct cfg80211_registered_device *rdev;
1226
	struct wiphy *wiphy;
1227

1228 1229
	assert_cfg80211_lock();

1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240
	list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
		wiphy = &rdev->wiphy;
		wiphy_update_regulatory(wiphy, initiator);
		/*
		 * Regulatory updates set by CORE are ignored for custom
		 * regulatory cards. Let us notify the changes to the driver,
		 * as some drivers used this to restore its orig_* reg domain.
		 */
		if (initiator == NL80211_REGDOM_SET_BY_CORE &&
		    wiphy->flags & WIPHY_FLAG_CUSTOM_REGULATORY &&
		    wiphy->reg_notifier)
1241
			wiphy->reg_notifier(wiphy, get_last_request());
1242
	}
1243 1244
}

1245
static void handle_channel_custom(struct wiphy *wiphy,
J
Johannes Berg 已提交
1246
				  struct ieee80211_channel *chan,
1247 1248
				  const struct ieee80211_regdomain *regd)
{
1249
	u32 bw_flags = 0;
1250 1251
	const struct ieee80211_reg_rule *reg_rule = NULL;
	const struct ieee80211_power_rule *power_rule = NULL;
1252
	const struct ieee80211_freq_range *freq_range = NULL;
1253

1254 1255
	reg_rule = freq_reg_info_regd(wiphy, MHZ_TO_KHZ(chan->center_freq),
				      regd);
1256

1257
	if (IS_ERR(reg_rule)) {
1258 1259
		REG_DBG_PRINT("Disabling freq %d MHz as custom regd has no rule that fits it\n",
			      chan->center_freq);
1260 1261 1262 1263
		chan->flags = IEEE80211_CHAN_DISABLED;
		return;
	}

1264
	chan_reg_rule_print_dbg(chan, reg_rule);
1265

1266
	power_rule = &reg_rule->power_rule;
1267 1268 1269 1270
	freq_range = &reg_rule->freq_range;

	if (freq_range->max_bandwidth_khz < MHZ_TO_KHZ(40))
		bw_flags = IEEE80211_CHAN_NO_HT40;
1271 1272 1273 1274
	if (freq_range->max_bandwidth_khz < MHZ_TO_KHZ(80))
		bw_flags |= IEEE80211_CHAN_NO_80MHZ;
	if (freq_range->max_bandwidth_khz < MHZ_TO_KHZ(160))
		bw_flags |= IEEE80211_CHAN_NO_160MHZ;
1275

1276
	chan->flags |= map_regdom_flags(reg_rule->flags) | bw_flags;
1277
	chan->max_antenna_gain = (int) MBI_TO_DBI(power_rule->max_antenna_gain);
1278 1279
	chan->max_reg_power = chan->max_power =
		(int) MBM_TO_DBM(power_rule->max_eirp);
1280 1281
}

J
Johannes Berg 已提交
1282 1283
static void handle_band_custom(struct wiphy *wiphy,
			       struct ieee80211_supported_band *sband,
1284 1285 1286 1287
			       const struct ieee80211_regdomain *regd)
{
	unsigned int i;

J
Johannes Berg 已提交
1288 1289
	if (!sband)
		return;
1290 1291

	for (i = 0; i < sband->n_channels; i++)
J
Johannes Berg 已提交
1292
		handle_channel_custom(wiphy, &sband->channels[i], regd);
1293 1294 1295 1296 1297 1298 1299
}

/* Used by drivers prior to wiphy registration */
void wiphy_apply_custom_regulatory(struct wiphy *wiphy,
				   const struct ieee80211_regdomain *regd)
{
	enum ieee80211_band band;
1300
	unsigned int bands_set = 0;
1301

1302
	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
1303 1304
		if (!wiphy->bands[band])
			continue;
J
Johannes Berg 已提交
1305
		handle_band_custom(wiphy, wiphy->bands[band], regd);
1306
		bands_set++;
1307
	}
1308 1309 1310

	/*
	 * no point in calling this if it won't have any effect
J
Johannes Berg 已提交
1311
	 * on your device's supported bands.
1312 1313
	 */
	WARN_ON(!bands_set);
1314
}
1315 1316
EXPORT_SYMBOL(wiphy_apply_custom_regulatory);

1317 1318
/* This has the logic which determines when a new request
 * should be ignored. */
1319 1320
static enum reg_request_treatment
get_reg_request_treatment(struct wiphy *wiphy,
1321
			  struct regulatory_request *pending_request)
1322
{
1323
	struct wiphy *last_wiphy = NULL;
1324
	struct regulatory_request *lr = get_last_request();
1325

1326
	/* All initial requests are respected */
1327
	if (!lr)
1328
		return REG_REQ_OK;
1329

1330
	switch (pending_request->initiator) {
1331
	case NL80211_REGDOM_SET_BY_CORE:
1332
		return REG_REQ_OK;
1333
	case NL80211_REGDOM_SET_BY_COUNTRY_IE:
1334
		if (reg_request_cell_base(lr)) {
1335 1336
			/* Trust a Cell base station over the AP's country IE */
			if (regdom_changes(pending_request->alpha2))
1337 1338
				return REG_REQ_IGNORE;
			return REG_REQ_ALREADY_SET;
1339 1340
		}

1341
		last_wiphy = wiphy_idx_to_wiphy(lr->wiphy_idx);
1342

1343
		if (unlikely(!is_an_alpha2(pending_request->alpha2)))
1344
			return -EINVAL;
1345
		if (lr->initiator == NL80211_REGDOM_SET_BY_COUNTRY_IE) {
1346
			if (last_wiphy != wiphy) {
1347 1348
				/*
				 * Two cards with two APs claiming different
1349
				 * Country IE alpha2s. We could
1350 1351 1352
				 * intersect them, but that seems unlikely
				 * to be correct. Reject second one for now.
				 */
1353
				if (regdom_changes(pending_request->alpha2))
1354 1355
					return REG_REQ_IGNORE;
				return REG_REQ_ALREADY_SET;
1356
			}
1357 1358 1359 1360
			/*
			 * Two consecutive Country IE hints on the same wiphy.
			 * This should be picked up early by the driver/stack
			 */
1361
			if (WARN_ON(regdom_changes(pending_request->alpha2)))
1362 1363
				return REG_REQ_OK;
			return REG_REQ_ALREADY_SET;
1364
		}
1365
		return 0;
1366
	case NL80211_REGDOM_SET_BY_DRIVER:
1367
		if (lr->initiator == NL80211_REGDOM_SET_BY_CORE) {
1368
			if (regdom_changes(pending_request->alpha2))
1369 1370
				return REG_REQ_OK;
			return REG_REQ_ALREADY_SET;
1371
		}
1372 1373 1374 1375 1376 1377

		/*
		 * This would happen if you unplug and plug your card
		 * back in or if you add a new device for which the previously
		 * loaded card also agrees on the regulatory domain.
		 */
1378
		if (lr->initiator == NL80211_REGDOM_SET_BY_DRIVER &&
1379
		    !regdom_changes(pending_request->alpha2))
1380
			return REG_REQ_ALREADY_SET;
1381

1382
		return REG_REQ_INTERSECT;
1383
	case NL80211_REGDOM_SET_BY_USER:
1384 1385 1386
		if (reg_request_cell_base(pending_request))
			return reg_ignore_cell_hint(pending_request);

1387
		if (reg_request_cell_base(lr))
1388
			return REG_REQ_IGNORE;
1389

1390
		if (lr->initiator == NL80211_REGDOM_SET_BY_COUNTRY_IE)
1391
			return REG_REQ_INTERSECT;
1392 1393 1394 1395
		/*
		 * If the user knows better the user should set the regdom
		 * to their country before the IE is picked up
		 */
1396 1397
		if (lr->initiator == NL80211_REGDOM_SET_BY_USER &&
		    lr->intersect)
1398
			return REG_REQ_IGNORE;
1399 1400 1401 1402
		/*
		 * Process user requests only after previous user/driver/core
		 * requests have been processed
		 */
1403 1404 1405 1406
		if ((lr->initiator == NL80211_REGDOM_SET_BY_CORE ||
		     lr->initiator == NL80211_REGDOM_SET_BY_DRIVER ||
		     lr->initiator == NL80211_REGDOM_SET_BY_USER) &&
		    regdom_changes(lr->alpha2))
1407
			return REG_REQ_IGNORE;
1408

1409
		if (!regdom_changes(pending_request->alpha2))
1410
			return REG_REQ_ALREADY_SET;
1411

1412
		return REG_REQ_OK;
1413 1414
	}

1415
	return REG_REQ_IGNORE;
1416 1417
}

1418 1419 1420
static void reg_set_request_processed(void)
{
	bool need_more_processing = false;
1421
	struct regulatory_request *lr = get_last_request();
1422

1423
	lr->processed = true;
1424 1425 1426 1427 1428 1429

	spin_lock(&reg_requests_lock);
	if (!list_empty(&reg_requests_list))
		need_more_processing = true;
	spin_unlock(&reg_requests_lock);

1430
	if (lr->initiator == NL80211_REGDOM_SET_BY_USER)
1431
		cancel_delayed_work(&reg_timeout);
1432

1433 1434 1435 1436
	if (need_more_processing)
		schedule_work(&reg_work);
}

1437 1438 1439 1440
/**
 * __regulatory_hint - hint to the wireless core a regulatory domain
 * @wiphy: if the hint comes from country information from an AP, this
 *	is required to be set to the wiphy that received the information
1441
 * @pending_request: the regulatory request currently being processed
1442 1443
 *
 * The Wireless subsystem can use this function to hint to the wireless core
1444
 * what it believes should be the current regulatory domain.
1445
 *
1446
 * Returns one of the different reg request treatment values.
1447
 *
1448
 * Caller must hold &reg_mutex
1449
 */
1450 1451 1452
static enum reg_request_treatment
__regulatory_hint(struct wiphy *wiphy,
		  struct regulatory_request *pending_request)
1453
{
1454
	const struct ieee80211_regdomain *regd;
1455
	bool intersect = false;
1456
	enum reg_request_treatment treatment;
1457
	struct regulatory_request *lr;
1458

1459
	treatment = get_reg_request_treatment(wiphy, pending_request);
1460

1461 1462
	switch (treatment) {
	case REG_REQ_INTERSECT:
1463 1464
		if (pending_request->initiator ==
		    NL80211_REGDOM_SET_BY_DRIVER) {
1465
			regd = reg_copy_regd(get_cfg80211_regdom());
1466
			if (IS_ERR(regd)) {
1467
				kfree(pending_request);
1468
				return PTR_ERR(regd);
1469
			}
1470
			rcu_assign_pointer(wiphy->regd, regd);
1471
		}
1472
		intersect = true;
1473 1474 1475 1476
		break;
	case REG_REQ_OK:
		break;
	default:
1477 1478
		/*
		 * If the regulatory domain being requested by the
1479
		 * driver has already been set just copy it to the
1480 1481
		 * wiphy
		 */
1482 1483
		if (treatment == REG_REQ_ALREADY_SET &&
		    pending_request->initiator == NL80211_REGDOM_SET_BY_DRIVER) {
1484
			regd = reg_copy_regd(get_cfg80211_regdom());
1485
			if (IS_ERR(regd)) {
1486
				kfree(pending_request);
1487
				return REG_REQ_IGNORE;
1488
			}
1489
			treatment = REG_REQ_ALREADY_SET;
1490
			rcu_assign_pointer(wiphy->regd, regd);
1491 1492
			goto new_request;
		}
1493
		kfree(pending_request);
1494
		return treatment;
1495
	}
1496

1497
new_request:
1498 1499 1500
	lr = get_last_request();
	if (lr != &core_request_world && lr)
		kfree_rcu(lr, rcu_head);
1501

1502 1503 1504 1505
	pending_request->intersect = intersect;
	pending_request->processed = false;
	rcu_assign_pointer(last_request, pending_request);
	lr = pending_request;
1506

1507
	pending_request = NULL;
1508

1509 1510 1511
	if (lr->initiator == NL80211_REGDOM_SET_BY_USER) {
		user_alpha2[0] = lr->alpha2[0];
		user_alpha2[1] = lr->alpha2[1];
1512 1513
	}

1514 1515
	/* When r == REG_REQ_INTERSECT we do need to call CRDA */
	if (treatment != REG_REQ_OK && treatment != REG_REQ_INTERSECT) {
1516 1517 1518 1519 1520
		/*
		 * Since CRDA will not be called in this case as we already
		 * have applied the requested regulatory domain before we just
		 * inform userspace we have processed the request
		 */
1521
		if (treatment == REG_REQ_ALREADY_SET) {
1522
			nl80211_send_reg_change_event(lr);
1523 1524
			reg_set_request_processed();
		}
1525
		return treatment;
1526
	}
1527

1528
	if (call_crda(lr->alpha2))
1529 1530
		return REG_REQ_IGNORE;
	return REG_REQ_OK;
1531 1532
}

1533
/* This processes *all* regulatory hints */
1534 1535
static void reg_process_hint(struct regulatory_request *reg_request,
			     enum nl80211_reg_initiator reg_initiator)
1536 1537 1538
{
	struct wiphy *wiphy = NULL;

J
Johannes Berg 已提交
1539 1540
	if (WARN_ON(!reg_request->alpha2))
		return;
1541

J
Johannes Berg 已提交
1542
	if (reg_request->wiphy_idx != WIPHY_IDX_INVALID)
1543 1544
		wiphy = wiphy_idx_to_wiphy(reg_request->wiphy_idx);

J
Johannes Berg 已提交
1545
	if (reg_initiator == NL80211_REGDOM_SET_BY_DRIVER && !wiphy) {
1546
		kfree(reg_request);
1547
		return;
1548 1549
	}

1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560
	switch (__regulatory_hint(wiphy, reg_request)) {
	case REG_REQ_ALREADY_SET:
		/* This is required so that the orig_* parameters are saved */
		if (wiphy && wiphy->flags & WIPHY_FLAG_STRICT_REGULATORY)
			wiphy_update_regulatory(wiphy, reg_initiator);
		break;
	default:
		if (reg_initiator == NL80211_REGDOM_SET_BY_USER)
			schedule_delayed_work(&reg_timeout,
					      msecs_to_jiffies(3142));
		break;
1561
	}
1562 1563
}

1564 1565 1566 1567 1568
/*
 * Processes regulatory hints, this is all the NL80211_REGDOM_SET_BY_*
 * Regulatory hints come on a first come first serve basis and we
 * must process each one atomically.
 */
1569
static void reg_process_pending_hints(void)
1570
{
1571
	struct regulatory_request *reg_request, *lr;
1572

1573 1574
	mutex_lock(&cfg80211_mutex);
	mutex_lock(&reg_mutex);
1575
	lr = get_last_request();
1576

1577
	/* When last_request->processed becomes true this will be rescheduled */
1578
	if (lr && !lr->processed) {
J
Johannes Berg 已提交
1579
		REG_DBG_PRINT("Pending regulatory request, waiting for it to be processed...\n");
1580 1581 1582
		goto out;
	}

1583 1584
	spin_lock(&reg_requests_lock);

1585
	if (list_empty(&reg_requests_list)) {
1586
		spin_unlock(&reg_requests_lock);
1587
		goto out;
1588
	}
1589 1590 1591 1592 1593 1594

	reg_request = list_first_entry(&reg_requests_list,
				       struct regulatory_request,
				       list);
	list_del_init(&reg_request->list);

1595
	spin_unlock(&reg_requests_lock);
1596

1597
	reg_process_hint(reg_request, reg_request->initiator);
1598 1599

out:
1600 1601
	mutex_unlock(&reg_mutex);
	mutex_unlock(&cfg80211_mutex);
1602 1603
}

1604 1605 1606
/* Processes beacon hints -- this has nothing to do with country IEs */
static void reg_process_pending_beacon_hints(void)
{
1607
	struct cfg80211_registered_device *rdev;
1608 1609 1610
	struct reg_beacon *pending_beacon, *tmp;

	mutex_lock(&cfg80211_mutex);
1611
	mutex_lock(&reg_mutex);
1612 1613 1614 1615 1616 1617 1618 1619 1620

	/* This goes through the _pending_ beacon list */
	spin_lock_bh(&reg_pending_beacons_lock);

	list_for_each_entry_safe(pending_beacon, tmp,
				 &reg_pending_beacons, list) {
		list_del_init(&pending_beacon->list);

		/* Applies the beacon hint to current wiphys */
1621 1622
		list_for_each_entry(rdev, &cfg80211_rdev_list, list)
			wiphy_update_new_beacon(&rdev->wiphy, pending_beacon);
1623 1624 1625 1626 1627 1628

		/* Remembers the beacon hint for new wiphys or reg changes */
		list_add_tail(&pending_beacon->list, &reg_beacon_list);
	}

	spin_unlock_bh(&reg_pending_beacons_lock);
1629
	mutex_unlock(&reg_mutex);
1630 1631 1632
	mutex_unlock(&cfg80211_mutex);
}

1633 1634 1635
static void reg_todo(struct work_struct *work)
{
	reg_process_pending_hints();
1636
	reg_process_pending_beacon_hints();
1637 1638 1639 1640
}

static void queue_regulatory_request(struct regulatory_request *request)
{
1641 1642
	request->alpha2[0] = toupper(request->alpha2[0]);
	request->alpha2[1] = toupper(request->alpha2[1]);
1643

1644 1645 1646 1647 1648 1649 1650
	spin_lock(&reg_requests_lock);
	list_add_tail(&request->list, &reg_requests_list);
	spin_unlock(&reg_requests_lock);

	schedule_work(&reg_work);
}

1651 1652 1653 1654
/*
 * Core regulatory hint -- happens during cfg80211_init()
 * and when we restore regulatory settings.
 */
1655 1656 1657 1658
static int regulatory_hint_core(const char *alpha2)
{
	struct regulatory_request *request;

J
Johannes Berg 已提交
1659
	request = kzalloc(sizeof(struct regulatory_request), GFP_KERNEL);
1660 1661 1662 1663 1664
	if (!request)
		return -ENOMEM;

	request->alpha2[0] = alpha2[0];
	request->alpha2[1] = alpha2[1];
1665
	request->initiator = NL80211_REGDOM_SET_BY_CORE;
1666

1667
	queue_regulatory_request(request);
1668

1669
	return 0;
1670 1671
}

1672
/* User hints */
1673 1674
int regulatory_hint_user(const char *alpha2,
			 enum nl80211_user_reg_hint_type user_reg_hint_type)
1675
{
1676 1677
	struct regulatory_request *request;

J
Johannes Berg 已提交
1678 1679
	if (WARN_ON(!alpha2))
		return -EINVAL;
1680

1681 1682 1683 1684
	request = kzalloc(sizeof(struct regulatory_request), GFP_KERNEL);
	if (!request)
		return -ENOMEM;

J
Johannes Berg 已提交
1685
	request->wiphy_idx = WIPHY_IDX_INVALID;
1686 1687
	request->alpha2[0] = alpha2[0];
	request->alpha2[1] = alpha2[1];
1688
	request->initiator = NL80211_REGDOM_SET_BY_USER;
1689
	request->user_reg_hint_type = user_reg_hint_type;
1690 1691 1692 1693 1694 1695 1696 1697 1698 1699 1700

	queue_regulatory_request(request);

	return 0;
}

/* Driver hints */
int regulatory_hint(struct wiphy *wiphy, const char *alpha2)
{
	struct regulatory_request *request;

J
Johannes Berg 已提交
1701 1702
	if (WARN_ON(!alpha2 || !wiphy))
		return -EINVAL;
1703 1704 1705 1706 1707 1708 1709 1710 1711

	request = kzalloc(sizeof(struct regulatory_request), GFP_KERNEL);
	if (!request)
		return -ENOMEM;

	request->wiphy_idx = get_wiphy_idx(wiphy);

	request->alpha2[0] = alpha2[0];
	request->alpha2[1] = alpha2[1];
1712
	request->initiator = NL80211_REGDOM_SET_BY_DRIVER;
1713 1714 1715 1716

	queue_regulatory_request(request);

	return 0;
1717 1718 1719
}
EXPORT_SYMBOL(regulatory_hint);

1720 1721 1722 1723
/*
 * We hold wdev_lock() here so we cannot hold cfg80211_mutex() and
 * therefore cannot iterate over the rdev list here.
 */
J
Johannes Berg 已提交
1724 1725
void regulatory_hint_11d(struct wiphy *wiphy, enum ieee80211_band band,
			 const u8 *country_ie, u8 country_ie_len)
1726 1727 1728
{
	char alpha2[2];
	enum environment_cap env = ENVIRON_ANY;
1729
	struct regulatory_request *request, *lr;
1730

1731
	mutex_lock(&reg_mutex);
1732
	lr = get_last_request();
1733

1734
	if (unlikely(!lr))
1735
		goto out;
1736

1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751
	/* IE len must be evenly divisible by 2 */
	if (country_ie_len & 0x01)
		goto out;

	if (country_ie_len < IEEE80211_COUNTRY_IE_MIN_LEN)
		goto out;

	alpha2[0] = country_ie[0];
	alpha2[1] = country_ie[1];

	if (country_ie[2] == 'I')
		env = ENVIRON_INDOOR;
	else if (country_ie[2] == 'O')
		env = ENVIRON_OUTDOOR;

1752
	/*
1753
	 * We will run this only upon a successful connection on cfg80211.
1754 1755
	 * We leave conflict resolution to the workqueue, where can hold
	 * cfg80211_mutex.
1756
	 */
1757 1758
	if (lr->initiator == NL80211_REGDOM_SET_BY_COUNTRY_IE &&
	    lr->wiphy_idx != WIPHY_IDX_INVALID)
1759
		goto out;
1760

1761 1762
	request = kzalloc(sizeof(struct regulatory_request), GFP_KERNEL);
	if (!request)
1763
		goto out;
1764 1765

	request->wiphy_idx = get_wiphy_idx(wiphy);
1766 1767
	request->alpha2[0] = alpha2[0];
	request->alpha2[1] = alpha2[1];
1768
	request->initiator = NL80211_REGDOM_SET_BY_COUNTRY_IE;
1769 1770 1771
	request->country_ie_env = env;

	queue_regulatory_request(request);
1772
out:
1773
	mutex_unlock(&reg_mutex);
1774
}
1775

1776 1777 1778 1779 1780 1781 1782 1783 1784 1785
static void restore_alpha2(char *alpha2, bool reset_user)
{
	/* indicates there is no alpha2 to consider for restoration */
	alpha2[0] = '9';
	alpha2[1] = '7';

	/* The user setting has precedence over the module parameter */
	if (is_user_regdom_saved()) {
		/* Unless we're asked to ignore it and reset it */
		if (reset_user) {
J
Johannes Berg 已提交
1786
			REG_DBG_PRINT("Restoring regulatory settings including user preference\n");
1787 1788 1789 1790 1791 1792 1793 1794 1795
			user_alpha2[0] = '9';
			user_alpha2[1] = '7';

			/*
			 * If we're ignoring user settings, we still need to
			 * check the module parameter to ensure we put things
			 * back as they were for a full restore.
			 */
			if (!is_world_regdom(ieee80211_regdom)) {
J
Johannes Berg 已提交
1796 1797
				REG_DBG_PRINT("Keeping preference on module parameter ieee80211_regdom: %c%c\n",
					      ieee80211_regdom[0], ieee80211_regdom[1]);
1798 1799 1800 1801
				alpha2[0] = ieee80211_regdom[0];
				alpha2[1] = ieee80211_regdom[1];
			}
		} else {
J
Johannes Berg 已提交
1802 1803
			REG_DBG_PRINT("Restoring regulatory settings while preserving user preference for: %c%c\n",
				      user_alpha2[0], user_alpha2[1]);
1804 1805 1806 1807
			alpha2[0] = user_alpha2[0];
			alpha2[1] = user_alpha2[1];
		}
	} else if (!is_world_regdom(ieee80211_regdom)) {
J
Johannes Berg 已提交
1808 1809
		REG_DBG_PRINT("Keeping preference on module parameter ieee80211_regdom: %c%c\n",
			      ieee80211_regdom[0], ieee80211_regdom[1]);
1810 1811 1812
		alpha2[0] = ieee80211_regdom[0];
		alpha2[1] = ieee80211_regdom[1];
	} else
1813
		REG_DBG_PRINT("Restoring regulatory settings\n");
1814 1815
}

1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831
static void restore_custom_reg_settings(struct wiphy *wiphy)
{
	struct ieee80211_supported_band *sband;
	enum ieee80211_band band;
	struct ieee80211_channel *chan;
	int i;

	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
		sband = wiphy->bands[band];
		if (!sband)
			continue;
		for (i = 0; i < sband->n_channels; i++) {
			chan = &sband->channels[i];
			chan->flags = chan->orig_flags;
			chan->max_antenna_gain = chan->orig_mag;
			chan->max_power = chan->orig_mpwr;
1832
			chan->beacon_found = false;
1833 1834 1835 1836
		}
	}
}

1837 1838 1839 1840 1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854
/*
 * Restoring regulatory settings involves ingoring any
 * possibly stale country IE information and user regulatory
 * settings if so desired, this includes any beacon hints
 * learned as we could have traveled outside to another country
 * after disconnection. To restore regulatory settings we do
 * exactly what we did at bootup:
 *
 *   - send a core regulatory hint
 *   - send a user regulatory hint if applicable
 *
 * Device drivers that send a regulatory hint for a specific country
 * keep their own regulatory domain on wiphy->regd so that does does
 * not need to be remembered.
 */
static void restore_regulatory_settings(bool reset_user)
{
	char alpha2[2];
1855
	char world_alpha2[2];
1856
	struct reg_beacon *reg_beacon, *btmp;
1857 1858
	struct regulatory_request *reg_request, *tmp;
	LIST_HEAD(tmp_reg_req_list);
1859
	struct cfg80211_registered_device *rdev;
1860 1861 1862 1863

	mutex_lock(&cfg80211_mutex);
	mutex_lock(&reg_mutex);

1864
	reset_regdomains(true, &world_regdom);
1865 1866
	restore_alpha2(alpha2, reset_user);

1867 1868 1869 1870 1871 1872 1873
	/*
	 * If there's any pending requests we simply
	 * stash them to a temporary pending queue and
	 * add then after we've restored regulatory
	 * settings.
	 */
	spin_lock(&reg_requests_lock);
1874 1875 1876 1877
	list_for_each_entry_safe(reg_request, tmp, &reg_requests_list, list) {
		if (reg_request->initiator != NL80211_REGDOM_SET_BY_USER)
			continue;
		list_move_tail(&reg_request->list, &tmp_reg_req_list);
1878 1879 1880
	}
	spin_unlock(&reg_requests_lock);

1881 1882
	/* Clear beacon hints */
	spin_lock_bh(&reg_pending_beacons_lock);
1883 1884 1885
	list_for_each_entry_safe(reg_beacon, btmp, &reg_pending_beacons, list) {
		list_del(&reg_beacon->list);
		kfree(reg_beacon);
1886 1887 1888
	}
	spin_unlock_bh(&reg_pending_beacons_lock);

1889 1890 1891
	list_for_each_entry_safe(reg_beacon, btmp, &reg_beacon_list, list) {
		list_del(&reg_beacon->list);
		kfree(reg_beacon);
1892 1893 1894
	}

	/* First restore to the basic regulatory settings */
1895 1896
	world_alpha2[0] = cfg80211_world_regdom->alpha2[0];
	world_alpha2[1] = cfg80211_world_regdom->alpha2[1];
1897

1898 1899 1900 1901 1902
	list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
		if (rdev->wiphy.flags & WIPHY_FLAG_CUSTOM_REGULATORY)
			restore_custom_reg_settings(&rdev->wiphy);
	}

1903
	regulatory_hint_core(world_alpha2);
1904 1905 1906 1907 1908 1909 1910

	/*
	 * This restores the ieee80211_regdom module parameter
	 * preference or the last user requested regulatory
	 * settings, user regulatory settings takes precedence.
	 */
	if (is_an_alpha2(alpha2))
1911
		regulatory_hint_user(user_alpha2, NL80211_USER_REG_HINT_USER);
1912

1913
	spin_lock(&reg_requests_lock);
1914
	list_splice_tail_init(&tmp_reg_req_list, &reg_requests_list);
1915 1916 1917 1918 1919 1920 1921 1922 1923
	spin_unlock(&reg_requests_lock);

	mutex_unlock(&reg_mutex);
	mutex_unlock(&cfg80211_mutex);

	REG_DBG_PRINT("Kicking the queue\n");

	schedule_work(&reg_work);
}
1924 1925 1926

void regulatory_hint_disconnect(void)
{
J
Johannes Berg 已提交
1927
	REG_DBG_PRINT("All devices are disconnected, going to restore regulatory settings\n");
1928 1929 1930
	restore_regulatory_settings(false);
}

1931 1932
static bool freq_is_chan_12_13_14(u16 freq)
{
1933 1934 1935
	if (freq == ieee80211_channel_to_frequency(12, IEEE80211_BAND_2GHZ) ||
	    freq == ieee80211_channel_to_frequency(13, IEEE80211_BAND_2GHZ) ||
	    freq == ieee80211_channel_to_frequency(14, IEEE80211_BAND_2GHZ))
1936 1937 1938 1939
		return true;
	return false;
}

1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950
static bool pending_reg_beacon(struct ieee80211_channel *beacon_chan)
{
	struct reg_beacon *pending_beacon;

	list_for_each_entry(pending_beacon, &reg_pending_beacons, list)
		if (beacon_chan->center_freq ==
		    pending_beacon->chan.center_freq)
			return true;
	return false;
}

1951 1952 1953 1954 1955
int regulatory_hint_found_beacon(struct wiphy *wiphy,
				 struct ieee80211_channel *beacon_chan,
				 gfp_t gfp)
{
	struct reg_beacon *reg_beacon;
1956
	bool processing;
1957

J
Johannes Berg 已提交
1958 1959
	if (beacon_chan->beacon_found ||
	    beacon_chan->flags & IEEE80211_CHAN_RADAR ||
1960
	    (beacon_chan->band == IEEE80211_BAND_2GHZ &&
J
Johannes Berg 已提交
1961
	     !freq_is_chan_12_13_14(beacon_chan->center_freq)))
1962 1963
		return 0;

1964 1965 1966 1967 1968
	spin_lock_bh(&reg_pending_beacons_lock);
	processing = pending_reg_beacon(beacon_chan);
	spin_unlock_bh(&reg_pending_beacons_lock);

	if (processing)
1969 1970 1971 1972 1973 1974
		return 0;

	reg_beacon = kzalloc(sizeof(struct reg_beacon), gfp);
	if (!reg_beacon)
		return -ENOMEM;

J
Johannes Berg 已提交
1975
	REG_DBG_PRINT("Found new beacon on frequency: %d MHz (Ch %d) on %s\n",
1976 1977 1978 1979
		      beacon_chan->center_freq,
		      ieee80211_frequency_to_channel(beacon_chan->center_freq),
		      wiphy_name(wiphy));

1980
	memcpy(&reg_beacon->chan, beacon_chan,
J
Johannes Berg 已提交
1981
	       sizeof(struct ieee80211_channel));
1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995

	/*
	 * Since we can be called from BH or and non-BH context
	 * we must use spin_lock_bh()
	 */
	spin_lock_bh(&reg_pending_beacons_lock);
	list_add_tail(&reg_beacon->list, &reg_pending_beacons);
	spin_unlock_bh(&reg_pending_beacons_lock);

	schedule_work(&reg_work);

	return 0;
}

1996
static void print_rd_rules(const struct ieee80211_regdomain *rd)
1997 1998
{
	unsigned int i;
1999 2000 2001
	const struct ieee80211_reg_rule *reg_rule = NULL;
	const struct ieee80211_freq_range *freq_range = NULL;
	const struct ieee80211_power_rule *power_rule = NULL;
2002

2003
	pr_info("  (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)\n");
2004 2005 2006 2007 2008 2009

	for (i = 0; i < rd->n_reg_rules; i++) {
		reg_rule = &rd->reg_rules[i];
		freq_range = &reg_rule->freq_range;
		power_rule = &reg_rule->power_rule;

2010 2011 2012 2013
		/*
		 * There may not be documentation for max antenna gain
		 * in certain regions
		 */
2014
		if (power_rule->max_antenna_gain)
2015
			pr_info("  (%d KHz - %d KHz @ %d KHz), (%d mBi, %d mBm)\n",
2016 2017 2018 2019 2020 2021
				freq_range->start_freq_khz,
				freq_range->end_freq_khz,
				freq_range->max_bandwidth_khz,
				power_rule->max_antenna_gain,
				power_rule->max_eirp);
		else
2022
			pr_info("  (%d KHz - %d KHz @ %d KHz), (N/A, %d mBm)\n",
2023 2024 2025 2026 2027 2028 2029
				freq_range->start_freq_khz,
				freq_range->end_freq_khz,
				freq_range->max_bandwidth_khz,
				power_rule->max_eirp);
	}
}

2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044 2045 2046 2047 2048 2049 2050 2051 2052 2053 2054 2055 2056 2057 2058 2059 2060
bool reg_supported_dfs_region(u8 dfs_region)
{
	switch (dfs_region) {
	case NL80211_DFS_UNSET:
	case NL80211_DFS_FCC:
	case NL80211_DFS_ETSI:
	case NL80211_DFS_JP:
		return true;
	default:
		REG_DBG_PRINT("Ignoring uknown DFS master region: %d\n",
			      dfs_region);
		return false;
	}
}

static void print_dfs_region(u8 dfs_region)
{
	if (!dfs_region)
		return;

	switch (dfs_region) {
	case NL80211_DFS_FCC:
		pr_info(" DFS Master region FCC");
		break;
	case NL80211_DFS_ETSI:
		pr_info(" DFS Master region ETSI");
		break;
	case NL80211_DFS_JP:
		pr_info(" DFS Master region JP");
		break;
	default:
J
Johannes Berg 已提交
2061
		pr_info(" DFS Master region Unknown");
2062 2063 2064 2065
		break;
	}
}

2066
static void print_regdomain(const struct ieee80211_regdomain *rd)
2067
{
2068
	struct regulatory_request *lr = get_last_request();
2069

2070
	if (is_intersected_alpha2(rd->alpha2)) {
2071
		if (lr->initiator == NL80211_REGDOM_SET_BY_COUNTRY_IE) {
2072
			struct cfg80211_registered_device *rdev;
2073
			rdev = cfg80211_rdev_by_wiphy_idx(lr->wiphy_idx);
2074
			if (rdev) {
2075
				pr_info("Current regulatory domain updated by AP to: %c%c\n",
2076 2077
					rdev->country_ie_alpha2[0],
					rdev->country_ie_alpha2[1]);
2078
			} else
2079
				pr_info("Current regulatory domain intersected:\n");
2080
		} else
2081
			pr_info("Current regulatory domain intersected:\n");
J
Johannes Berg 已提交
2082
	} else if (is_world_regdom(rd->alpha2)) {
2083
		pr_info("World regulatory domain updated:\n");
J
Johannes Berg 已提交
2084
	} else {
2085
		if (is_unknown_alpha2(rd->alpha2))
2086
			pr_info("Regulatory domain changed to driver built-in settings (unknown country)\n");
2087
		else {
2088
			if (reg_request_cell_base(lr))
J
Johannes Berg 已提交
2089
				pr_info("Regulatory domain changed to country: %c%c by Cell Station\n",
2090 2091
					rd->alpha2[0], rd->alpha2[1]);
			else
J
Johannes Berg 已提交
2092
				pr_info("Regulatory domain changed to country: %c%c\n",
2093 2094
					rd->alpha2[0], rd->alpha2[1]);
		}
2095
	}
J
Johannes Berg 已提交
2096

2097
	print_dfs_region(rd->dfs_region);
2098 2099 2100
	print_rd_rules(rd);
}

2101
static void print_regdomain_info(const struct ieee80211_regdomain *rd)
2102
{
2103
	pr_info("Regulatory domain: %c%c\n", rd->alpha2[0], rd->alpha2[1]);
2104 2105 2106
	print_rd_rules(rd);
}

2107
/* Takes ownership of rd only if it doesn't fail */
2108
static int __set_regdom(const struct ieee80211_regdomain *rd)
2109
{
2110
	const struct ieee80211_regdomain *regd;
2111
	const struct ieee80211_regdomain *intersected_rd = NULL;
2112
	struct wiphy *request_wiphy;
2113
	struct regulatory_request *lr = get_last_request();
2114

2115 2116
	/* Some basic sanity checks first */

2117 2118 2119
	if (!reg_is_valid_request(rd->alpha2))
		return -EINVAL;

2120 2121 2122 2123 2124 2125
	if (is_world_regdom(rd->alpha2)) {
		update_world_regdomain(rd);
		return 0;
	}

	if (!is_alpha2_set(rd->alpha2) && !is_an_alpha2(rd->alpha2) &&
J
Johannes Berg 已提交
2126
	    !is_unknown_alpha2(rd->alpha2))
2127 2128
		return -EINVAL;

2129 2130
	/*
	 * Lets only bother proceeding on the same alpha2 if the current
2131
	 * rd is non static (it means CRDA was present and was used last)
2132 2133
	 * and the pending request came in from a country IE
	 */
2134
	if (lr->initiator != NL80211_REGDOM_SET_BY_COUNTRY_IE) {
2135 2136 2137 2138
		/*
		 * If someone else asked us to change the rd lets only bother
		 * checking if the alpha2 changes if CRDA was already called
		 */
2139
		if (!regdom_changes(rd->alpha2))
2140
			return -EALREADY;
2141 2142
	}

2143 2144
	/*
	 * Now lets set the regulatory domain, update all driver channels
2145 2146
	 * and finally inform them of what we have done, in case they want
	 * to review or adjust their own settings based on their own
2147 2148
	 * internal EEPROM data
	 */
2149

2150
	if (!is_valid_rd(rd)) {
2151
		pr_err("Invalid regulatory domain detected:\n");
2152 2153
		print_regdomain_info(rd);
		return -EINVAL;
2154 2155
	}

2156
	request_wiphy = wiphy_idx_to_wiphy(lr->wiphy_idx);
2157
	if (!request_wiphy &&
2158 2159
	    (lr->initiator == NL80211_REGDOM_SET_BY_DRIVER ||
	     lr->initiator == NL80211_REGDOM_SET_BY_COUNTRY_IE)) {
2160
		schedule_delayed_work(&reg_timeout, 0);
2161 2162
		return -ENODEV;
	}
2163

2164 2165
	if (!lr->intersect) {
		if (lr->initiator != NL80211_REGDOM_SET_BY_DRIVER) {
2166
			reset_regdomains(false, rd);
2167 2168 2169
			return 0;
		}

2170 2171 2172 2173
		/*
		 * For a driver hint, lets copy the regulatory domain the
		 * driver wanted to the wiphy to deal with conflicts
		 */
2174

2175 2176 2177 2178 2179 2180
		/*
		 * Userspace could have sent two replies with only
		 * one kernel request.
		 */
		if (request_wiphy->regd)
			return -EALREADY;
2181

2182 2183 2184
		regd = reg_copy_regd(rd);
		if (IS_ERR(regd))
			return PTR_ERR(regd);
2185

2186
		rcu_assign_pointer(request_wiphy->regd, regd);
2187
		reset_regdomains(false, rd);
2188 2189 2190 2191 2192
		return 0;
	}

	/* Intersection requires a bit more work */

2193
	if (lr->initiator != NL80211_REGDOM_SET_BY_COUNTRY_IE) {
2194
		intersected_rd = regdom_intersect(rd, get_cfg80211_regdom());
2195 2196
		if (!intersected_rd)
			return -EINVAL;
2197

2198 2199
		/*
		 * We can trash what CRDA provided now.
2200
		 * However if a driver requested this specific regulatory
2201 2202
		 * domain we keep it for its private use
		 */
L
Larry Finger 已提交
2203 2204 2205 2206
		if (lr->initiator == NL80211_REGDOM_SET_BY_DRIVER) {
			const struct ieee80211_regdomain *tmp;

			tmp = get_wiphy_regdom(request_wiphy);
2207
			rcu_assign_pointer(request_wiphy->regd, rd);
L
Larry Finger 已提交
2208 2209
			rcu_free_regdom(tmp);
		} else {
2210
			kfree(rd);
L
Larry Finger 已提交
2211
		}
2212

2213 2214
		rd = NULL;

2215
		reset_regdomains(false, intersected_rd);
2216 2217

		return 0;
2218 2219
	}

A
Alan Cox 已提交
2220
	return -EINVAL;
2221 2222 2223
}


2224 2225
/*
 * Use this call to set the current regulatory domain. Conflicts with
2226
 * multiple drivers can be ironed out later. Caller must've already
2227
 * kmalloc'd the rd structure.
2228
 */
2229
int set_regdom(const struct ieee80211_regdomain *rd)
2230
{
2231
	struct regulatory_request *lr;
2232 2233
	int r;

2234
	mutex_lock(&reg_mutex);
2235
	lr = get_last_request();
2236

2237 2238
	/* Note that this doesn't update the wiphys, this is done below */
	r = __set_regdom(rd);
2239
	if (r) {
2240 2241 2242
		if (r == -EALREADY)
			reg_set_request_processed();

2243
		kfree(rd);
J
Johannes Berg 已提交
2244
		goto out;
2245
	}
2246 2247

	/* This would make this whole thing pointless */
2248
	if (WARN_ON(!lr->intersect && rd != get_cfg80211_regdom())) {
J
Johannes Berg 已提交
2249 2250 2251
		r = -EINVAL;
		goto out;
	}
2252 2253

	/* update all wiphys now with the new established regulatory domain */
2254
	update_all_wiphy_regulatory(lr->initiator);
2255

2256
	print_regdomain(get_cfg80211_regdom());
2257

2258
	nl80211_send_reg_change_event(lr);
2259

2260 2261
	reg_set_request_processed();

J
Johannes Berg 已提交
2262
 out:
2263 2264
	mutex_unlock(&reg_mutex);

2265 2266 2267
	return r;
}

2268 2269
int reg_device_uevent(struct device *dev, struct kobj_uevent_env *env)
{
J
Johannes Berg 已提交
2270 2271 2272
	struct regulatory_request *lr;
	u8 alpha2[2];
	bool add = false;
2273

J
Johannes Berg 已提交
2274 2275
	rcu_read_lock();
	lr = get_last_request();
2276
	if (lr && !lr->processed) {
J
Johannes Berg 已提交
2277 2278
		memcpy(alpha2, lr->alpha2, 2);
		add = true;
2279
	}
J
Johannes Berg 已提交
2280
	rcu_read_unlock();
2281

J
Johannes Berg 已提交
2282 2283 2284
	if (add)
		return add_uevent_var(env, "COUNTRY=%c%c",
				      alpha2[0], alpha2[1]);
2285 2286 2287
	return 0;
}

2288 2289 2290 2291 2292 2293 2294
void wiphy_regulatory_register(struct wiphy *wiphy)
{
	mutex_lock(&reg_mutex);

	if (!reg_dev_ignore_cell_hint(wiphy))
		reg_num_devs_support_basehint++;

2295
	wiphy_update_regulatory(wiphy, NL80211_REGDOM_SET_BY_CORE);
2296

2297
	mutex_unlock(&reg_mutex);
2298 2299
}

2300
/* Caller must hold cfg80211_mutex */
2301
void wiphy_regulatory_deregister(struct wiphy *wiphy)
2302
{
2303
	struct wiphy *request_wiphy = NULL;
2304
	struct regulatory_request *lr;
2305

2306
	mutex_lock(&reg_mutex);
2307
	lr = get_last_request();
2308

2309 2310 2311
	if (!reg_dev_ignore_cell_hint(wiphy))
		reg_num_devs_support_basehint--;

2312 2313
	rcu_free_regdom(get_wiphy_regdom(wiphy));
	rcu_assign_pointer(wiphy->regd, NULL);
2314

2315 2316
	if (lr)
		request_wiphy = wiphy_idx_to_wiphy(lr->wiphy_idx);
2317

2318
	if (!request_wiphy || request_wiphy != wiphy)
2319
		goto out;
2320

2321 2322
	lr->wiphy_idx = WIPHY_IDX_INVALID;
	lr->country_ie_env = ENVIRON_ANY;
2323 2324
out:
	mutex_unlock(&reg_mutex);
2325 2326
}

2327 2328
static void reg_timeout_work(struct work_struct *work)
{
J
Johannes Berg 已提交
2329
	REG_DBG_PRINT("Timeout while waiting for CRDA to reply, restoring regulatory settings\n");
2330 2331 2332
	restore_regulatory_settings(true);
}

2333
int __init regulatory_init(void)
2334
{
2335
	int err = 0;
2336

2337 2338 2339
	reg_pdev = platform_device_register_simple("regulatory", 0, NULL, 0);
	if (IS_ERR(reg_pdev))
		return PTR_ERR(reg_pdev);
2340

2341 2342
	reg_pdev->dev.type = &reg_device_type;

2343
	spin_lock_init(&reg_requests_lock);
2344
	spin_lock_init(&reg_pending_beacons_lock);
2345

2346 2347
	reg_regdb_size_check();

2348
	rcu_assign_pointer(cfg80211_regdomain, cfg80211_world_regdom);
2349

2350 2351 2352
	user_alpha2[0] = '9';
	user_alpha2[1] = '7';

2353
	/* We always try to get an update for the static regdomain */
2354
	err = regulatory_hint_core(cfg80211_world_regdom->alpha2);
2355
	if (err) {
2356 2357 2358 2359 2360 2361 2362 2363 2364
		if (err == -ENOMEM)
			return err;
		/*
		 * N.B. kobject_uevent_env() can fail mainly for when we're out
		 * memory which is handled and propagated appropriately above
		 * but it can also fail during a netlink_broadcast() or during
		 * early boot for call_usermodehelper(). For now treat these
		 * errors as non-fatal.
		 */
2365
		pr_err("kobject_uevent_env() was unable to call CRDA during init\n");
2366
	}
2367

2368 2369 2370 2371 2372
	/*
	 * Finally, if the user set the module parameter treat it
	 * as a user hint.
	 */
	if (!is_world_regdom(ieee80211_regdom))
2373 2374
		regulatory_hint_user(ieee80211_regdom,
				     NL80211_USER_REG_HINT_USER);
2375

2376 2377 2378
	return 0;
}

J
Johannes Berg 已提交
2379
void regulatory_exit(void)
2380
{
2381
	struct regulatory_request *reg_request, *tmp;
2382
	struct reg_beacon *reg_beacon, *btmp;
2383 2384

	cancel_work_sync(&reg_work);
2385
	cancel_delayed_work_sync(&reg_timeout);
2386

2387
	/* Lock to suppress warnings */
2388
	mutex_lock(&reg_mutex);
2389
	reset_regdomains(true, NULL);
2390
	mutex_unlock(&reg_mutex);
2391

2392
	dev_set_uevent_suppress(&reg_pdev->dev, true);
2393

2394
	platform_device_unregister(reg_pdev);
2395

2396 2397 2398
	list_for_each_entry_safe(reg_beacon, btmp, &reg_pending_beacons, list) {
		list_del(&reg_beacon->list);
		kfree(reg_beacon);
2399 2400
	}

2401 2402 2403
	list_for_each_entry_safe(reg_beacon, btmp, &reg_beacon_list, list) {
		list_del(&reg_beacon->list);
		kfree(reg_beacon);
2404 2405
	}

2406 2407 2408
	list_for_each_entry_safe(reg_request, tmp, &reg_requests_list, list) {
		list_del(&reg_request->list);
		kfree(reg_request);
2409
	}
2410
}