mac80211_hwsim.c 127.2 KB
Newer Older
1
// SPDX-License-Identifier: GPL-2.0-only
2 3 4
/*
 * mac80211_hwsim - software simulator of 802.11 radio(s) for mac80211
 * Copyright (c) 2008, Jouni Malinen <j@w1.fi>
5
 * Copyright (c) 2011, Javier Lopez <jlopex@gmail.com>
I
Ilan Peer 已提交
6
 * Copyright (c) 2016 - 2017 Intel Deutschland GmbH
7
 * Copyright (C) 2018 - 2020 Intel Corporation
8 9 10 11
 */

/*
 * TODO:
12 13
 * - Add TSF sync and fix IBSS beacon transmission by adding
 *   competition for "air time" at TBTT
14 15 16
 * - RX filtering based on filter configuration (data->rx_filter)
 */

17
#include <linux/list.h>
18
#include <linux/slab.h>
19
#include <linux/spinlock.h>
20 21
#include <net/dst.h>
#include <net/xfrm.h>
22 23 24 25 26
#include <net/mac80211.h>
#include <net/ieee80211_radiotap.h>
#include <linux/if_arp.h>
#include <linux/rtnetlink.h>
#include <linux/etherdevice.h>
27
#include <linux/platform_device.h>
28
#include <linux/debugfs.h>
29
#include <linux/module.h>
30
#include <linux/ktime.h>
31
#include <net/genetlink.h>
32 33
#include <net/net_namespace.h>
#include <net/netns/generic.h>
34
#include <linux/rhashtable.h>
35
#include <linux/nospec.h>
36 37 38
#include <linux/virtio.h>
#include <linux/virtio_ids.h>
#include <linux/virtio_config.h>
39 40 41 42
#include "mac80211_hwsim.h"

#define WARN_QUEUE 100
#define MAX_QUEUE 200
43 44 45 46 47 48 49 50 51

MODULE_AUTHOR("Jouni Malinen");
MODULE_DESCRIPTION("Software simulator of 802.11 radio(s) for mac80211");
MODULE_LICENSE("GPL");

static int radios = 2;
module_param(radios, int, 0444);
MODULE_PARM_DESC(radios, "Number of simulated radios");

52 53 54
static int channels = 1;
module_param(channels, int, 0444);
MODULE_PARM_DESC(channels, "Number of concurrent channels");
55

56 57 58 59
static bool paged_rx = false;
module_param(paged_rx, bool, 0644);
MODULE_PARM_DESC(paged_rx, "Use paged SKBs for RX instead of linear ones");

60 61 62 63
static bool rctbl = false;
module_param(rctbl, bool, 0444);
MODULE_PARM_DESC(rctbl, "Handle rate control table");

64 65 66 67
static bool support_p2p_device = true;
module_param(support_p2p_device, bool, 0444);
MODULE_PARM_DESC(support_p2p_device, "Support P2P-Device interface type");

68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91
/**
 * enum hwsim_regtest - the type of regulatory tests we offer
 *
 * These are the different values you can use for the regtest
 * module parameter. This is useful to help test world roaming
 * and the driver regulatory_hint() call and combinations of these.
 * If you want to do specific alpha2 regulatory domain tests simply
 * use the userspace regulatory request as that will be respected as
 * well without the need of this module parameter. This is designed
 * only for testing the driver regulatory request, world roaming
 * and all possible combinations.
 *
 * @HWSIM_REGTEST_DISABLED: No regulatory tests are performed,
 * 	this is the default value.
 * @HWSIM_REGTEST_DRIVER_REG_FOLLOW: Used for testing the driver regulatory
 *	hint, only one driver regulatory hint will be sent as such the
 * 	secondary radios are expected to follow.
 * @HWSIM_REGTEST_DRIVER_REG_ALL: Used for testing the driver regulatory
 * 	request with all radios reporting the same regulatory domain.
 * @HWSIM_REGTEST_DIFF_COUNTRY: Used for testing the drivers calling
 * 	different regulatory domains requests. Expected behaviour is for
 * 	an intersection to occur but each device will still use their
 * 	respective regulatory requested domains. Subsequent radios will
 * 	use the resulting intersection.
L
Lucas De Marchi 已提交
92
 * @HWSIM_REGTEST_WORLD_ROAM: Used for testing the world roaming. We accomplish
93 94 95 96 97 98 99 100 101
 *	this by using a custom beacon-capable regulatory domain for the first
 *	radio. All other device world roam.
 * @HWSIM_REGTEST_CUSTOM_WORLD: Used for testing the custom world regulatory
 * 	domain requests. All radios will adhere to this custom world regulatory
 * 	domain.
 * @HWSIM_REGTEST_CUSTOM_WORLD_2: Used for testing 2 custom world regulatory
 * 	domain requests. The first radio will adhere to the first custom world
 * 	regulatory domain, the second one to the second custom world regulatory
 * 	domain. All other devices will world roam.
102
 * @HWSIM_REGTEST_STRICT_FOLLOW: Used for testing strict regulatory domain
103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153
 *	settings, only the first radio will send a regulatory domain request
 *	and use strict settings. The rest of the radios are expected to follow.
 * @HWSIM_REGTEST_STRICT_ALL: Used for testing strict regulatory domain
 *	settings. All radios will adhere to this.
 * @HWSIM_REGTEST_STRICT_AND_DRIVER_REG: Used for testing strict regulatory
 *	domain settings, combined with secondary driver regulatory domain
 *	settings. The first radio will get a strict regulatory domain setting
 *	using the first driver regulatory request and the second radio will use
 *	non-strict settings using the second driver regulatory request. All
 *	other devices should follow the intersection created between the
 *	first two.
 * @HWSIM_REGTEST_ALL: Used for testing every possible mix. You will need
 * 	at least 6 radios for a complete test. We will test in this order:
 * 	1 - driver custom world regulatory domain
 * 	2 - second custom world regulatory domain
 * 	3 - first driver regulatory domain request
 * 	4 - second driver regulatory domain request
 * 	5 - strict regulatory domain settings using the third driver regulatory
 * 	    domain request
 * 	6 and on - should follow the intersection of the 3rd, 4rth and 5th radio
 * 	           regulatory requests.
 */
enum hwsim_regtest {
	HWSIM_REGTEST_DISABLED = 0,
	HWSIM_REGTEST_DRIVER_REG_FOLLOW = 1,
	HWSIM_REGTEST_DRIVER_REG_ALL = 2,
	HWSIM_REGTEST_DIFF_COUNTRY = 3,
	HWSIM_REGTEST_WORLD_ROAM = 4,
	HWSIM_REGTEST_CUSTOM_WORLD = 5,
	HWSIM_REGTEST_CUSTOM_WORLD_2 = 6,
	HWSIM_REGTEST_STRICT_FOLLOW = 7,
	HWSIM_REGTEST_STRICT_ALL = 8,
	HWSIM_REGTEST_STRICT_AND_DRIVER_REG = 9,
	HWSIM_REGTEST_ALL = 10,
};

/* Set to one of the HWSIM_REGTEST_* values above */
static int regtest = HWSIM_REGTEST_DISABLED;
module_param(regtest, int, 0444);
MODULE_PARM_DESC(regtest, "The type of regulatory test we want to run");

static const char *hwsim_alpha2s[] = {
	"FI",
	"AL",
	"US",
	"DE",
	"JP",
	"AL",
};

static const struct ieee80211_regdomain hwsim_world_regdom_custom_01 = {
154
	.n_reg_rules = 5,
155 156 157 158 159 160
	.alpha2 =  "99",
	.reg_rules = {
		REG_RULE(2412-10, 2462+10, 40, 0, 20, 0),
		REG_RULE(2484-10, 2484+10, 40, 0, 20, 0),
		REG_RULE(5150-10, 5240+10, 40, 0, 30, 0),
		REG_RULE(5745-10, 5825+10, 40, 0, 30, 0),
161
		REG_RULE(5855-10, 5925+10, 40, 0, 33, 0),
162 163 164 165
	}
};

static const struct ieee80211_regdomain hwsim_world_regdom_custom_02 = {
166
	.n_reg_rules = 3,
167 168 169 170
	.alpha2 =  "99",
	.reg_rules = {
		REG_RULE(2412-10, 2462+10, 40, 0, 20, 0),
		REG_RULE(5725-10, 5850+10, 40, 0, 30,
171
			 NL80211_RRF_NO_IR),
172
		REG_RULE(5855-10, 5925+10, 40, 0, 33, 0),
173 174 175
	}
};

176 177 178 179 180
static const struct ieee80211_regdomain *hwsim_world_regdom_custom[] = {
	&hwsim_world_regdom_custom_01,
	&hwsim_world_regdom_custom_02,
};

181 182
struct hwsim_vif_priv {
	u32 magic;
183 184
	u8 bssid[ETH_ALEN];
	bool assoc;
185
	bool bcn_en;
186
	u16 aid;
187 188 189 190 191 192 193
};

#define HWSIM_VIF_MAGIC	0x69537748

static inline void hwsim_check_magic(struct ieee80211_vif *vif)
{
	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
194 195 196
	WARN(vp->magic != HWSIM_VIF_MAGIC,
	     "Invalid VIF (%p) magic %#x, %pM, %d/%d\n",
	     vif, vp->magic, vif->addr, vif->type, vif->p2p);
197 198 199 200 201 202 203 204 205 206 207 208 209
}

static inline void hwsim_set_magic(struct ieee80211_vif *vif)
{
	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
	vp->magic = HWSIM_VIF_MAGIC;
}

static inline void hwsim_clear_magic(struct ieee80211_vif *vif)
{
	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
	vp->magic = 0;
}
210

211 212 213 214
struct hwsim_sta_priv {
	u32 magic;
};

215
#define HWSIM_STA_MAGIC	0x6d537749
216 217 218 219

static inline void hwsim_check_sta_magic(struct ieee80211_sta *sta)
{
	struct hwsim_sta_priv *sp = (void *)sta->drv_priv;
220
	WARN_ON(sp->magic != HWSIM_STA_MAGIC);
221 222 223 224 225
}

static inline void hwsim_set_sta_magic(struct ieee80211_sta *sta)
{
	struct hwsim_sta_priv *sp = (void *)sta->drv_priv;
226
	sp->magic = HWSIM_STA_MAGIC;
227 228 229 230 231 232 233 234
}

static inline void hwsim_clear_sta_magic(struct ieee80211_sta *sta)
{
	struct hwsim_sta_priv *sp = (void *)sta->drv_priv;
	sp->magic = 0;
}

235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258
struct hwsim_chanctx_priv {
	u32 magic;
};

#define HWSIM_CHANCTX_MAGIC 0x6d53774a

static inline void hwsim_check_chanctx_magic(struct ieee80211_chanctx_conf *c)
{
	struct hwsim_chanctx_priv *cp = (void *)c->drv_priv;
	WARN_ON(cp->magic != HWSIM_CHANCTX_MAGIC);
}

static inline void hwsim_set_chanctx_magic(struct ieee80211_chanctx_conf *c)
{
	struct hwsim_chanctx_priv *cp = (void *)c->drv_priv;
	cp->magic = HWSIM_CHANCTX_MAGIC;
}

static inline void hwsim_clear_chanctx_magic(struct ieee80211_chanctx_conf *c)
{
	struct hwsim_chanctx_priv *cp = (void *)c->drv_priv;
	cp->magic = 0;
}

259
static unsigned int hwsim_net_id;
260

M
Matthew Wilcox 已提交
261
static DEFINE_IDA(hwsim_netgroup_ida);
262 263 264

struct hwsim_net {
	int netgroup;
265
	u32 wmediumd;
266 267 268 269 270 271 272 273 274
};

static inline int hwsim_net_get_netgroup(struct net *net)
{
	struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id);

	return hwsim_net->netgroup;
}

275
static inline int hwsim_net_set_netgroup(struct net *net)
276 277 278
{
	struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id);

279 280 281
	hwsim_net->netgroup = ida_simple_get(&hwsim_netgroup_ida,
					     0, 0, GFP_KERNEL);
	return hwsim_net->netgroup >= 0 ? 0 : -ENOMEM;
282 283
}

284 285 286 287 288 289 290 291 292 293 294 295 296 297
static inline u32 hwsim_net_get_wmediumd(struct net *net)
{
	struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id);

	return hwsim_net->wmediumd;
}

static inline void hwsim_net_set_wmediumd(struct net *net, u32 portid)
{
	struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id);

	hwsim_net->wmediumd = portid;
}

298 299 300 301
static struct class *hwsim_class;

static struct net_device *hwsim_mon; /* global monitor netdev */

302
#define CHAN2G(_freq)  { \
303
	.band = NL80211_BAND_2GHZ, \
304 305 306 307 308
	.center_freq = (_freq), \
	.hw_value = (_freq), \
}

#define CHAN5G(_freq) { \
309
	.band = NL80211_BAND_5GHZ, \
310 311 312 313
	.center_freq = (_freq), \
	.hw_value = (_freq), \
}

R
Ramon Fontes 已提交
314 315 316 317 318 319
#define CHAN6G(_freq) { \
	.band = NL80211_BAND_6GHZ, \
	.center_freq = (_freq), \
	.hw_value = (_freq), \
}

320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335
static const struct ieee80211_channel hwsim_channels_2ghz[] = {
	CHAN2G(2412), /* Channel 1 */
	CHAN2G(2417), /* Channel 2 */
	CHAN2G(2422), /* Channel 3 */
	CHAN2G(2427), /* Channel 4 */
	CHAN2G(2432), /* Channel 5 */
	CHAN2G(2437), /* Channel 6 */
	CHAN2G(2442), /* Channel 7 */
	CHAN2G(2447), /* Channel 8 */
	CHAN2G(2452), /* Channel 9 */
	CHAN2G(2457), /* Channel 10 */
	CHAN2G(2462), /* Channel 11 */
	CHAN2G(2467), /* Channel 12 */
	CHAN2G(2472), /* Channel 13 */
	CHAN2G(2484), /* Channel 14 */
};
336

337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364
static const struct ieee80211_channel hwsim_channels_5ghz[] = {
	CHAN5G(5180), /* Channel 36 */
	CHAN5G(5200), /* Channel 40 */
	CHAN5G(5220), /* Channel 44 */
	CHAN5G(5240), /* Channel 48 */

	CHAN5G(5260), /* Channel 52 */
	CHAN5G(5280), /* Channel 56 */
	CHAN5G(5300), /* Channel 60 */
	CHAN5G(5320), /* Channel 64 */

	CHAN5G(5500), /* Channel 100 */
	CHAN5G(5520), /* Channel 104 */
	CHAN5G(5540), /* Channel 108 */
	CHAN5G(5560), /* Channel 112 */
	CHAN5G(5580), /* Channel 116 */
	CHAN5G(5600), /* Channel 120 */
	CHAN5G(5620), /* Channel 124 */
	CHAN5G(5640), /* Channel 128 */
	CHAN5G(5660), /* Channel 132 */
	CHAN5G(5680), /* Channel 136 */
	CHAN5G(5700), /* Channel 140 */

	CHAN5G(5745), /* Channel 149 */
	CHAN5G(5765), /* Channel 153 */
	CHAN5G(5785), /* Channel 157 */
	CHAN5G(5805), /* Channel 161 */
	CHAN5G(5825), /* Channel 165 */
365
	CHAN5G(5845), /* Channel 169 */
366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383

	CHAN5G(5855), /* Channel 171 */
	CHAN5G(5860), /* Channel 172 */
	CHAN5G(5865), /* Channel 173 */
	CHAN5G(5870), /* Channel 174 */

	CHAN5G(5875), /* Channel 175 */
	CHAN5G(5880), /* Channel 176 */
	CHAN5G(5885), /* Channel 177 */
	CHAN5G(5890), /* Channel 178 */
	CHAN5G(5895), /* Channel 179 */
	CHAN5G(5900), /* Channel 180 */
	CHAN5G(5905), /* Channel 181 */

	CHAN5G(5910), /* Channel 182 */
	CHAN5G(5915), /* Channel 183 */
	CHAN5G(5920), /* Channel 184 */
	CHAN5G(5925), /* Channel 185 */
384 385
};

R
Ramon Fontes 已提交
386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447
static const struct ieee80211_channel hwsim_channels_6ghz[] = {
	CHAN6G(5955), /* Channel 1 */
	CHAN6G(5975), /* Channel 5 */
	CHAN6G(5995), /* Channel 9 */
	CHAN6G(6015), /* Channel 13 */
	CHAN6G(6035), /* Channel 17 */
	CHAN6G(6055), /* Channel 21 */
	CHAN6G(6075), /* Channel 25 */
	CHAN6G(6095), /* Channel 29 */
	CHAN6G(6115), /* Channel 33 */
	CHAN6G(6135), /* Channel 37 */
	CHAN6G(6155), /* Channel 41 */
	CHAN6G(6175), /* Channel 45 */
	CHAN6G(6195), /* Channel 49 */
	CHAN6G(6215), /* Channel 53 */
	CHAN6G(6235), /* Channel 57 */
	CHAN6G(6255), /* Channel 61 */
	CHAN6G(6275), /* Channel 65 */
	CHAN6G(6295), /* Channel 69 */
	CHAN6G(6315), /* Channel 73 */
	CHAN6G(6335), /* Channel 77 */
	CHAN6G(6355), /* Channel 81 */
	CHAN6G(6375), /* Channel 85 */
	CHAN6G(6395), /* Channel 89 */
	CHAN6G(6415), /* Channel 93 */
	CHAN6G(6435), /* Channel 97 */
	CHAN6G(6455), /* Channel 181 */
	CHAN6G(6475), /* Channel 105 */
	CHAN6G(6495), /* Channel 109 */
	CHAN6G(6515), /* Channel 113 */
	CHAN6G(6535), /* Channel 117 */
	CHAN6G(6555), /* Channel 121 */
	CHAN6G(6575), /* Channel 125 */
	CHAN6G(6595), /* Channel 129 */
	CHAN6G(6615), /* Channel 133 */
	CHAN6G(6635), /* Channel 137 */
	CHAN6G(6655), /* Channel 141 */
	CHAN6G(6675), /* Channel 145 */
	CHAN6G(6695), /* Channel 149 */
	CHAN6G(6715), /* Channel 153 */
	CHAN6G(6735), /* Channel 157 */
	CHAN6G(6755), /* Channel 161 */
	CHAN6G(6775), /* Channel 165 */
	CHAN6G(6795), /* Channel 169 */
	CHAN6G(6815), /* Channel 173 */
	CHAN6G(6835), /* Channel 177 */
	CHAN6G(6855), /* Channel 181 */
	CHAN6G(6875), /* Channel 185 */
	CHAN6G(6895), /* Channel 189 */
	CHAN6G(6915), /* Channel 193 */
	CHAN6G(6935), /* Channel 197 */
	CHAN6G(6955), /* Channel 201 */
	CHAN6G(6975), /* Channel 205 */
	CHAN6G(6995), /* Channel 209 */
	CHAN6G(7015), /* Channel 213 */
	CHAN6G(7035), /* Channel 217 */
	CHAN6G(7055), /* Channel 221 */
	CHAN6G(7075), /* Channel 225 */
	CHAN6G(7095), /* Channel 229 */
	CHAN6G(7115), /* Channel 233 */
};

448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490
#define NUM_S1G_CHANS_US 51
static struct ieee80211_channel hwsim_channels_s1g[NUM_S1G_CHANS_US];

static const struct ieee80211_sta_s1g_cap hwsim_s1g_cap = {
	.s1g = true,
	.cap = { S1G_CAP0_SGI_1MHZ | S1G_CAP0_SGI_2MHZ,
		 0,
		 0,
		 S1G_CAP3_MAX_MPDU_LEN,
		 0,
		 S1G_CAP5_AMPDU,
		 0,
		 S1G_CAP7_DUP_1MHZ,
		 S1G_CAP8_TWT_RESPOND | S1G_CAP8_TWT_REQUEST,
		 0},
	.nss_mcs = { 0xfc | 1, /* MCS 7 for 1 SS */
	/* RX Highest Supported Long GI Data Rate 0:7 */
		     0,
	/* RX Highest Supported Long GI Data Rate 0:7 */
	/* TX S1G MCS Map 0:6 */
		     0xfa,
	/* TX S1G MCS Map :7 */
	/* TX Highest Supported Long GI Data Rate 0:6 */
		     0x80,
	/* TX Highest Supported Long GI Data Rate 7:8 */
	/* Rx Single spatial stream and S1G-MCS Map for 1MHz */
	/* Tx Single spatial stream and S1G-MCS Map for 1MHz */
		     0 },
};

static void hwsim_init_s1g_channels(struct ieee80211_channel *channels)
{
	int ch, freq;

	for (ch = 0; ch < NUM_S1G_CHANS_US; ch++) {
		freq = 902000 + (ch + 1) * 500;
		channels[ch].band = NL80211_BAND_S1GHZ;
		channels[ch].center_freq = KHZ_TO_MHZ(freq);
		channels[ch].freq_offset = freq % 1000;
		channels[ch].hw_value = ch + 1;
	}
}

491 492 493 494 495 496 497 498 499 500 501 502 503 504 505
static const struct ieee80211_rate hwsim_rates[] = {
	{ .bitrate = 10 },
	{ .bitrate = 20, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
	{ .bitrate = 55, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
	{ .bitrate = 110, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
	{ .bitrate = 60 },
	{ .bitrate = 90 },
	{ .bitrate = 120 },
	{ .bitrate = 180 },
	{ .bitrate = 240 },
	{ .bitrate = 360 },
	{ .bitrate = 480 },
	{ .bitrate = 540 }
};

506 507 508 509 510 511 512 513 514 515 516 517 518 519
static const u32 hwsim_ciphers[] = {
	WLAN_CIPHER_SUITE_WEP40,
	WLAN_CIPHER_SUITE_WEP104,
	WLAN_CIPHER_SUITE_TKIP,
	WLAN_CIPHER_SUITE_CCMP,
	WLAN_CIPHER_SUITE_CCMP_256,
	WLAN_CIPHER_SUITE_GCMP,
	WLAN_CIPHER_SUITE_GCMP_256,
	WLAN_CIPHER_SUITE_AES_CMAC,
	WLAN_CIPHER_SUITE_BIP_CMAC_256,
	WLAN_CIPHER_SUITE_BIP_GMAC_128,
	WLAN_CIPHER_SUITE_BIP_GMAC_256,
};

520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540
#define OUI_QCA 0x001374
#define QCA_NL80211_SUBCMD_TEST 1
enum qca_nl80211_vendor_subcmds {
	QCA_WLAN_VENDOR_ATTR_TEST = 8,
	QCA_WLAN_VENDOR_ATTR_MAX = QCA_WLAN_VENDOR_ATTR_TEST
};

static const struct nla_policy
hwsim_vendor_test_policy[QCA_WLAN_VENDOR_ATTR_MAX + 1] = {
	[QCA_WLAN_VENDOR_ATTR_MAX] = { .type = NLA_U32 },
};

static int mac80211_hwsim_vendor_cmd_test(struct wiphy *wiphy,
					  struct wireless_dev *wdev,
					  const void *data, int data_len)
{
	struct sk_buff *skb;
	struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_MAX + 1];
	int err;
	u32 val;

541 542
	err = nla_parse_deprecated(tb, QCA_WLAN_VENDOR_ATTR_MAX, data,
				   data_len, hwsim_vendor_test_policy, NULL);
543 544 545 546 547
	if (err)
		return err;
	if (!tb[QCA_WLAN_VENDOR_ATTR_TEST])
		return -EINVAL;
	val = nla_get_u32(tb[QCA_WLAN_VENDOR_ATTR_TEST]);
548
	wiphy_dbg(wiphy, "%s: test=%u\n", __func__, val);
549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588

	/* Send a vendor event as a test. Note that this would not normally be
	 * done within a command handler, but rather, based on some other
	 * trigger. For simplicity, this command is used to trigger the event
	 * here.
	 *
	 * event_idx = 0 (index in mac80211_hwsim_vendor_commands)
	 */
	skb = cfg80211_vendor_event_alloc(wiphy, wdev, 100, 0, GFP_KERNEL);
	if (skb) {
		/* skb_put() or nla_put() will fill up data within
		 * NL80211_ATTR_VENDOR_DATA.
		 */

		/* Add vendor data */
		nla_put_u32(skb, QCA_WLAN_VENDOR_ATTR_TEST, val + 1);

		/* Send the event - this will call nla_nest_end() */
		cfg80211_vendor_event(skb, GFP_KERNEL);
	}

	/* Send a response to the command */
	skb = cfg80211_vendor_cmd_alloc_reply_skb(wiphy, 10);
	if (!skb)
		return -ENOMEM;

	/* skb_put() or nla_put() will fill up data within
	 * NL80211_ATTR_VENDOR_DATA
	 */
	nla_put_u32(skb, QCA_WLAN_VENDOR_ATTR_TEST, val + 2);

	return cfg80211_vendor_cmd_reply(skb);
}

static struct wiphy_vendor_command mac80211_hwsim_vendor_commands[] = {
	{
		.info = { .vendor_id = OUI_QCA,
			  .subcmd = QCA_NL80211_SUBCMD_TEST },
		.flags = WIPHY_VENDOR_CMD_NEED_NETDEV,
		.doit = mac80211_hwsim_vendor_cmd_test,
589 590
		.policy = hwsim_vendor_test_policy,
		.maxattr = QCA_WLAN_VENDOR_ATTR_MAX,
591 592 593 594 595 596 597 598
	}
};

/* Advertise support vendor specific events */
static const struct nl80211_vendor_cmd_info mac80211_hwsim_vendor_events[] = {
	{ .vendor_id = OUI_QCA, .subcmd = 1 },
};

599
static DEFINE_SPINLOCK(hwsim_radio_lock);
600
static LIST_HEAD(hwsim_radios);
601
static struct rhashtable hwsim_radios_rht;
602
static int hwsim_radio_idx;
603
static int hwsim_radios_generation = 1;
604

605 606 607 608 609
static struct platform_driver mac80211_hwsim_driver = {
	.driver = {
		.name = "mac80211_hwsim",
	},
};
610

611
struct mac80211_hwsim_data {
612
	struct list_head list;
613
	struct rhash_head rht;
614
	struct ieee80211_hw *hw;
615
	struct device *dev;
616
	struct ieee80211_supported_band bands[NUM_NL80211_BANDS];
617 618
	struct ieee80211_channel channels_2ghz[ARRAY_SIZE(hwsim_channels_2ghz)];
	struct ieee80211_channel channels_5ghz[ARRAY_SIZE(hwsim_channels_5ghz)];
R
Ramon Fontes 已提交
619
	struct ieee80211_channel channels_6ghz[ARRAY_SIZE(hwsim_channels_6ghz)];
620
	struct ieee80211_channel channels_s1g[ARRAY_SIZE(hwsim_channels_s1g)];
621
	struct ieee80211_rate rates[ARRAY_SIZE(hwsim_rates)];
622
	struct ieee80211_iface_combination if_combination;
623 624
	struct ieee80211_iface_limit if_limits[3];
	int n_if_limits;
625

626
	u32 ciphers[ARRAY_SIZE(hwsim_ciphers)];
627

628
	struct mac_address addresses[2];
629
	struct ieee80211_chanctx_conf *chanctx;
630
	int channels, idx;
631
	bool use_chanctx;
632 633
	bool destroy_on_close;
	u32 portid;
634 635
	char alpha2[2];
	const struct ieee80211_regdomain *regd;
636

637
	struct ieee80211_channel *tmp_chan;
638 639 640
	struct ieee80211_channel *roc_chan;
	u32 roc_duration;
	struct delayed_work roc_start;
641 642 643 644 645
	struct delayed_work roc_done;
	struct delayed_work hw_scan;
	struct cfg80211_scan_request *hw_scan_request;
	struct ieee80211_vif *hw_scan_vif;
	int scan_chan_idx;
646
	u8 scan_addr[ETH_ALEN];
647 648 649 650
	struct {
		struct ieee80211_channel *channel;
		unsigned long next_start, start, end;
	} survey_data[ARRAY_SIZE(hwsim_channels_2ghz) +
R
Ramon Fontes 已提交
651 652
		      ARRAY_SIZE(hwsim_channels_5ghz) +
		      ARRAY_SIZE(hwsim_channels_6ghz)];
653

654
	struct ieee80211_channel *channel;
T
Thomas Pedersen 已提交
655
	u64 beacon_int	/* beacon interval in us */;
656
	unsigned int rx_filter;
657 658
	bool started, idle, scanning;
	struct mutex mutex;
659
	struct hrtimer beacon_timer;
660 661 662 663 664
	enum ps_mode {
		PS_DISABLED, PS_ENABLED, PS_AUTO_POLL, PS_MANUAL_POLL
	} ps;
	bool ps_poll_pending;
	struct dentry *debugfs;
D
Daniel Wagner 已提交
665

666
	uintptr_t pending_cookie;
667
	struct sk_buff_head pending;	/* packets pending */
D
Daniel Wagner 已提交
668 669 670
	/*
	 * Only radios in the same group can communicate together (the
	 * channel has to match too). Each bit represents a group. A
671
	 * radio can be in more than one group.
D
Daniel Wagner 已提交
672 673
	 */
	u64 group;
674

675 676
	/* group shared by radios created in the same netns */
	int netgroup;
677 678
	/* wmediumd portid responsible for netgroup of this radio */
	u32 wmediumd;
679

680
	/* difference between this hw's clock and the real clock, in usecs */
681
	s64 tsf_offset;
682
	s64 bcn_delta;
683 684
	/* absolute beacon transmission time. Used to cover up "tx" delay. */
	u64 abs_bcn_ts;
685 686 687 688 689 690 691 692

	/* Stats */
	u64 tx_pkts;
	u64 rx_pkts;
	u64 tx_bytes;
	u64 rx_bytes;
	u64 tx_dropped;
	u64 tx_failed;
693 694
};

695 696 697 698 699 700 701
static const struct rhashtable_params hwsim_rht_params = {
	.nelem_hint = 2,
	.automatic_shrinking = true,
	.key_len = ETH_ALEN,
	.key_offset = offsetof(struct mac80211_hwsim_data, addresses[1]),
	.head_offset = offsetof(struct mac80211_hwsim_data, rht),
};
702 703 704

struct hwsim_radiotap_hdr {
	struct ieee80211_radiotap_header hdr;
705
	__le64 rt_tsft;
706 707 708 709
	u8 rt_flags;
	u8 rt_rate;
	__le16 rt_channel;
	__le16 rt_chbitmask;
710
} __packed;
711

712 713 714 715 716 717 718 719
struct hwsim_radiotap_ack_hdr {
	struct ieee80211_radiotap_header hdr;
	u8 rt_flags;
	u8 pad;
	__le16 rt_channel;
	__le16 rt_chbitmask;
} __packed;

720 721
/* MAC80211_HWSIM netlink family */
static struct genl_family hwsim_genl_family;
722

723 724 725 726 727 728 729 730
enum hwsim_multicast_groups {
	HWSIM_MCGRP_CONFIG,
};

static const struct genl_multicast_group hwsim_mcgrps[] = {
	[HWSIM_MCGRP_CONFIG] = { .name = "config", },
};

731 732
/* MAC80211_HWSIM netlink policy */

733
static const struct nla_policy hwsim_genl_policy[HWSIM_ATTR_MAX + 1] = {
734 735
	[HWSIM_ATTR_ADDR_RECEIVER] = NLA_POLICY_ETH_ADDR_COMPAT,
	[HWSIM_ATTR_ADDR_TRANSMITTER] = NLA_POLICY_ETH_ADDR_COMPAT,
736 737 738 739 740
	[HWSIM_ATTR_FRAME] = { .type = NLA_BINARY,
			       .len = IEEE80211_MAX_DATA_LEN },
	[HWSIM_ATTR_FLAGS] = { .type = NLA_U32 },
	[HWSIM_ATTR_RX_RATE] = { .type = NLA_U32 },
	[HWSIM_ATTR_SIGNAL] = { .type = NLA_U32 },
741
	[HWSIM_ATTR_TX_INFO] = { .type = NLA_BINARY,
742 743
				 .len = IEEE80211_TX_MAX_RATES *
					sizeof(struct hwsim_tx_rate)},
744
	[HWSIM_ATTR_COOKIE] = { .type = NLA_U64 },
745 746
	[HWSIM_ATTR_CHANNELS] = { .type = NLA_U32 },
	[HWSIM_ATTR_RADIO_ID] = { .type = NLA_U32 },
747 748 749
	[HWSIM_ATTR_REG_HINT_ALPHA2] = { .type = NLA_STRING, .len = 2 },
	[HWSIM_ATTR_REG_CUSTOM_REG] = { .type = NLA_U32 },
	[HWSIM_ATTR_REG_STRICT_REG] = { .type = NLA_FLAG },
750
	[HWSIM_ATTR_SUPPORT_P2P_DEVICE] = { .type = NLA_FLAG },
751
	[HWSIM_ATTR_USE_CHANCTX] = { .type = NLA_FLAG },
752
	[HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE] = { .type = NLA_FLAG },
753 754 755
	[HWSIM_ATTR_RADIO_NAME] = { .type = NLA_STRING },
	[HWSIM_ATTR_NO_VIF] = { .type = NLA_FLAG },
	[HWSIM_ATTR_FREQ] = { .type = NLA_U32 },
756 757
	[HWSIM_ATTR_TX_INFO_FLAGS] = { .type = NLA_BINARY },
	[HWSIM_ATTR_PERM_ADDR] = NLA_POLICY_ETH_ADDR_COMPAT,
758
	[HWSIM_ATTR_IFTYPE_SUPPORT] = { .type = NLA_U32 },
759
	[HWSIM_ATTR_CIPHER_SUPPORT] = { .type = NLA_BINARY },
760
};
761

762 763 764 765 766
#if IS_REACHABLE(CONFIG_VIRTIO)

/* MAC80211_HWSIM virtio queues */
static struct virtqueue *hwsim_vqs[HWSIM_NUM_VQS];
static bool hwsim_virtio_enabled;
767
static DEFINE_SPINLOCK(hwsim_virtio_lock);
768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805

static void hwsim_virtio_rx_work(struct work_struct *work);
static DECLARE_WORK(hwsim_virtio_rx, hwsim_virtio_rx_work);

static int hwsim_tx_virtio(struct mac80211_hwsim_data *data,
			   struct sk_buff *skb)
{
	struct scatterlist sg[1];
	unsigned long flags;
	int err;

	spin_lock_irqsave(&hwsim_virtio_lock, flags);
	if (!hwsim_virtio_enabled) {
		err = -ENODEV;
		goto out_free;
	}

	sg_init_one(sg, skb->head, skb_end_offset(skb));
	err = virtqueue_add_outbuf(hwsim_vqs[HWSIM_VQ_TX], sg, 1, skb,
				   GFP_ATOMIC);
	if (err)
		goto out_free;
	virtqueue_kick(hwsim_vqs[HWSIM_VQ_TX]);
	spin_unlock_irqrestore(&hwsim_virtio_lock, flags);
	return 0;

out_free:
	spin_unlock_irqrestore(&hwsim_virtio_lock, flags);
	nlmsg_free(skb);
	return err;
}
#else
/* cause a linker error if this ends up being needed */
extern int hwsim_tx_virtio(struct mac80211_hwsim_data *data,
			   struct sk_buff *skb);
#define hwsim_virtio_enabled false
#endif

806 807 808 809 810 811 812 813 814 815 816 817 818 819 820
static void mac80211_hwsim_tx_frame(struct ieee80211_hw *hw,
				    struct sk_buff *skb,
				    struct ieee80211_channel *chan);

/* sysfs attributes */
static void hwsim_send_ps_poll(void *dat, u8 *mac, struct ieee80211_vif *vif)
{
	struct mac80211_hwsim_data *data = dat;
	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
	struct sk_buff *skb;
	struct ieee80211_pspoll *pspoll;

	if (!vp->assoc)
		return;

821 822 823
	wiphy_dbg(data->hw->wiphy,
		  "%s: send PS-Poll to %pM for aid %d\n",
		  __func__, vp->bssid, vp->aid);
824 825 826 827

	skb = dev_alloc_skb(sizeof(*pspoll));
	if (!skb)
		return;
828
	pspoll = skb_put(skb, sizeof(*pspoll));
829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851
	pspoll->frame_control = cpu_to_le16(IEEE80211_FTYPE_CTL |
					    IEEE80211_STYPE_PSPOLL |
					    IEEE80211_FCTL_PM);
	pspoll->aid = cpu_to_le16(0xc000 | vp->aid);
	memcpy(pspoll->bssid, vp->bssid, ETH_ALEN);
	memcpy(pspoll->ta, mac, ETH_ALEN);

	rcu_read_lock();
	mac80211_hwsim_tx_frame(data->hw, skb,
				rcu_dereference(vif->chanctx_conf)->def.chan);
	rcu_read_unlock();
}

static void hwsim_send_nullfunc(struct mac80211_hwsim_data *data, u8 *mac,
				struct ieee80211_vif *vif, int ps)
{
	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
	struct sk_buff *skb;
	struct ieee80211_hdr *hdr;

	if (!vp->assoc)
		return;

852 853 854
	wiphy_dbg(data->hw->wiphy,
		  "%s: send data::nullfunc to %pM ps=%d\n",
		  __func__, vp->bssid, ps);
855 856 857 858

	skb = dev_alloc_skb(sizeof(*hdr));
	if (!skb)
		return;
859
	hdr = skb_put(skb, sizeof(*hdr) - ETH_ALEN);
860 861
	hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
					 IEEE80211_STYPE_NULLFUNC |
862
					 IEEE80211_FCTL_TODS |
863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906
					 (ps ? IEEE80211_FCTL_PM : 0));
	hdr->duration_id = cpu_to_le16(0);
	memcpy(hdr->addr1, vp->bssid, ETH_ALEN);
	memcpy(hdr->addr2, mac, ETH_ALEN);
	memcpy(hdr->addr3, vp->bssid, ETH_ALEN);

	rcu_read_lock();
	mac80211_hwsim_tx_frame(data->hw, skb,
				rcu_dereference(vif->chanctx_conf)->def.chan);
	rcu_read_unlock();
}


static void hwsim_send_nullfunc_ps(void *dat, u8 *mac,
				   struct ieee80211_vif *vif)
{
	struct mac80211_hwsim_data *data = dat;
	hwsim_send_nullfunc(data, mac, vif, 1);
}

static void hwsim_send_nullfunc_no_ps(void *dat, u8 *mac,
				      struct ieee80211_vif *vif)
{
	struct mac80211_hwsim_data *data = dat;
	hwsim_send_nullfunc(data, mac, vif, 0);
}

static int hwsim_fops_ps_read(void *dat, u64 *val)
{
	struct mac80211_hwsim_data *data = dat;
	*val = data->ps;
	return 0;
}

static int hwsim_fops_ps_write(void *dat, u64 val)
{
	struct mac80211_hwsim_data *data = dat;
	enum ps_mode old_ps;

	if (val != PS_DISABLED && val != PS_ENABLED && val != PS_AUTO_POLL &&
	    val != PS_MANUAL_POLL)
		return -EINVAL;

	if (val == PS_MANUAL_POLL) {
907 908 909
		if (data->ps != PS_ENABLED)
			return -EINVAL;
		local_bh_disable();
910 911 912
		ieee80211_iterate_active_interfaces_atomic(
			data->hw, IEEE80211_IFACE_ITER_NORMAL,
			hwsim_send_ps_poll, data);
913 914 915 916 917 918 919 920
		local_bh_enable();
		return 0;
	}
	old_ps = data->ps;
	data->ps = val;

	local_bh_disable();
	if (old_ps == PS_DISABLED && val != PS_DISABLED) {
921 922 923
		ieee80211_iterate_active_interfaces_atomic(
			data->hw, IEEE80211_IFACE_ITER_NORMAL,
			hwsim_send_nullfunc_ps, data);
924
	} else if (old_ps != PS_DISABLED && val == PS_DISABLED) {
925 926 927
		ieee80211_iterate_active_interfaces_atomic(
			data->hw, IEEE80211_IFACE_ITER_NORMAL,
			hwsim_send_nullfunc_no_ps, data);
928
	}
929
	local_bh_enable();
930 931 932 933

	return 0;
}

934 935
DEFINE_DEBUGFS_ATTRIBUTE(hwsim_fops_ps, hwsim_fops_ps_read, hwsim_fops_ps_write,
			 "%llu\n");
936 937 938 939 940 941 942 943 944 945

static int hwsim_write_simulate_radar(void *dat, u64 val)
{
	struct mac80211_hwsim_data *data = dat;

	ieee80211_radar_detected(data->hw);

	return 0;
}

946 947
DEFINE_DEBUGFS_ATTRIBUTE(hwsim_simulate_radar, NULL,
			 hwsim_write_simulate_radar, "%llu\n");
948 949 950 951 952 953 954 955 956 957 958 959 960 961 962

static int hwsim_fops_group_read(void *dat, u64 *val)
{
	struct mac80211_hwsim_data *data = dat;
	*val = data->group;
	return 0;
}

static int hwsim_fops_group_write(void *dat, u64 val)
{
	struct mac80211_hwsim_data *data = dat;
	data->group = val;
	return 0;
}

963 964 965
DEFINE_DEBUGFS_ATTRIBUTE(hwsim_fops_group,
			 hwsim_fops_group_read, hwsim_fops_group_write,
			 "%llx\n");
966

967 968
static netdev_tx_t hwsim_mon_xmit(struct sk_buff *skb,
					struct net_device *dev)
969 970 971
{
	/* TODO: allow packet injection */
	dev_kfree_skb(skb);
972
	return NETDEV_TX_OK;
973 974
}

975 976 977 978 979
static inline u64 mac80211_hwsim_get_tsf_raw(void)
{
	return ktime_to_us(ktime_get_real());
}

980 981
static __le64 __mac80211_hwsim_get_tsf(struct mac80211_hwsim_data *data)
{
982
	u64 now = mac80211_hwsim_get_tsf_raw();
983 984
	return cpu_to_le64(now + data->tsf_offset);
}
985

986
static u64 mac80211_hwsim_get_tsf(struct ieee80211_hw *hw,
987
				  struct ieee80211_vif *vif)
988 989 990 991 992 993 994 995 996
{
	struct mac80211_hwsim_data *data = hw->priv;
	return le64_to_cpu(__mac80211_hwsim_get_tsf(data));
}

static void mac80211_hwsim_set_tsf(struct ieee80211_hw *hw,
		struct ieee80211_vif *vif, u64 tsf)
{
	struct mac80211_hwsim_data *data = hw->priv;
997
	u64 now = mac80211_hwsim_get_tsf(hw, vif);
998
	u32 bcn_int = data->beacon_int;
A
Andrew Morton 已提交
999
	u64 delta = abs(tsf - now);
1000

1001
	/* adjust after beaconing with new timestamp at old TBTT */
1002 1003 1004 1005 1006
	if (tsf > now) {
		data->tsf_offset += delta;
		data->bcn_delta = do_div(delta, bcn_int);
	} else {
		data->tsf_offset -= delta;
1007
		data->bcn_delta = -(s64)do_div(delta, bcn_int);
1008
	}
1009 1010
}

1011
static void mac80211_hwsim_monitor_rx(struct ieee80211_hw *hw,
1012 1013
				      struct sk_buff *tx_skb,
				      struct ieee80211_channel *chan)
1014 1015 1016 1017
{
	struct mac80211_hwsim_data *data = hw->priv;
	struct sk_buff *skb;
	struct hwsim_radiotap_hdr *hdr;
1018
	u16 flags, bitrate;
1019 1020 1021
	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(tx_skb);
	struct ieee80211_rate *txrate = ieee80211_get_tx_rate(hw, info);

1022 1023 1024 1025
	if (!txrate)
		bitrate = 0;
	else
		bitrate = txrate->bitrate;
1026

1027 1028 1029 1030 1031 1032 1033
	if (!netif_running(hwsim_mon))
		return;

	skb = skb_copy_expand(tx_skb, sizeof(*hdr), 0, GFP_ATOMIC);
	if (skb == NULL)
		return;

1034
	hdr = skb_push(skb, sizeof(*hdr));
1035 1036 1037
	hdr->hdr.it_version = PKTHDR_RADIOTAP_VERSION;
	hdr->hdr.it_pad = 0;
	hdr->hdr.it_len = cpu_to_le16(sizeof(*hdr));
J
Jouni Malinen 已提交
1038 1039
	hdr->hdr.it_present = cpu_to_le32((1 << IEEE80211_RADIOTAP_FLAGS) |
					  (1 << IEEE80211_RADIOTAP_RATE) |
1040
					  (1 << IEEE80211_RADIOTAP_TSFT) |
J
Jouni Malinen 已提交
1041
					  (1 << IEEE80211_RADIOTAP_CHANNEL));
1042
	hdr->rt_tsft = __mac80211_hwsim_get_tsf(data);
1043
	hdr->rt_flags = 0;
1044
	hdr->rt_rate = bitrate / 5;
1045
	hdr->rt_channel = cpu_to_le16(chan->center_freq);
1046
	flags = IEEE80211_CHAN_2GHZ;
1047
	if (txrate && txrate->flags & IEEE80211_RATE_ERP_G)
1048 1049 1050 1051 1052 1053
		flags |= IEEE80211_CHAN_OFDM;
	else
		flags |= IEEE80211_CHAN_CCK;
	hdr->rt_chbitmask = cpu_to_le16(flags);

	skb->dev = hwsim_mon;
1054
	skb_reset_mac_header(skb);
1055 1056
	skb->ip_summed = CHECKSUM_UNNECESSARY;
	skb->pkt_type = PACKET_OTHERHOST;
J
Jouni Malinen 已提交
1057
	skb->protocol = htons(ETH_P_802_2);
1058 1059 1060 1061 1062
	memset(skb->cb, 0, sizeof(skb->cb));
	netif_rx(skb);
}


1063 1064
static void mac80211_hwsim_monitor_ack(struct ieee80211_channel *chan,
				       const u8 *addr)
1065 1066
{
	struct sk_buff *skb;
1067
	struct hwsim_radiotap_ack_hdr *hdr;
1068 1069 1070 1071 1072 1073 1074 1075 1076 1077
	u16 flags;
	struct ieee80211_hdr *hdr11;

	if (!netif_running(hwsim_mon))
		return;

	skb = dev_alloc_skb(100);
	if (skb == NULL)
		return;

1078
	hdr = skb_put(skb, sizeof(*hdr));
1079 1080 1081 1082 1083 1084
	hdr->hdr.it_version = PKTHDR_RADIOTAP_VERSION;
	hdr->hdr.it_pad = 0;
	hdr->hdr.it_len = cpu_to_le16(sizeof(*hdr));
	hdr->hdr.it_present = cpu_to_le32((1 << IEEE80211_RADIOTAP_FLAGS) |
					  (1 << IEEE80211_RADIOTAP_CHANNEL));
	hdr->rt_flags = 0;
1085
	hdr->pad = 0;
1086
	hdr->rt_channel = cpu_to_le16(chan->center_freq);
1087 1088 1089
	flags = IEEE80211_CHAN_2GHZ;
	hdr->rt_chbitmask = cpu_to_le16(flags);

1090
	hdr11 = skb_put(skb, 10);
1091 1092 1093 1094 1095 1096
	hdr11->frame_control = cpu_to_le16(IEEE80211_FTYPE_CTL |
					   IEEE80211_STYPE_ACK);
	hdr11->duration_id = cpu_to_le16(0);
	memcpy(hdr11->addr1, addr, ETH_ALEN);

	skb->dev = hwsim_mon;
1097
	skb_reset_mac_header(skb);
1098 1099 1100 1101 1102 1103 1104
	skb->ip_summed = CHECKSUM_UNNECESSARY;
	skb->pkt_type = PACKET_OTHERHOST;
	skb->protocol = htons(ETH_P_802_2);
	memset(skb->cb, 0, sizeof(skb->cb));
	netif_rx(skb);
}

1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125
struct mac80211_hwsim_addr_match_data {
	u8 addr[ETH_ALEN];
	bool ret;
};

static void mac80211_hwsim_addr_iter(void *data, u8 *mac,
				     struct ieee80211_vif *vif)
{
	struct mac80211_hwsim_addr_match_data *md = data;

	if (memcmp(mac, md->addr, ETH_ALEN) == 0)
		md->ret = true;
}

static bool mac80211_hwsim_addr_match(struct mac80211_hwsim_data *data,
				      const u8 *addr)
{
	struct mac80211_hwsim_addr_match_data md = {
		.ret = false,
	};

1126 1127 1128
	if (data->scanning && memcmp(addr, data->scan_addr, ETH_ALEN) == 0)
		return true;

1129 1130 1131 1132 1133 1134 1135 1136 1137
	memcpy(md.addr, addr, ETH_ALEN);

	ieee80211_iterate_active_interfaces_atomic(data->hw,
						   IEEE80211_IFACE_ITER_NORMAL,
						   mac80211_hwsim_addr_iter,
						   &md);

	return md.ret;
}
1138

1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154
static bool hwsim_ps_rx_ok(struct mac80211_hwsim_data *data,
			   struct sk_buff *skb)
{
	switch (data->ps) {
	case PS_DISABLED:
		return true;
	case PS_ENABLED:
		return false;
	case PS_AUTO_POLL:
		/* TODO: accept (some) Beacons by default and other frames only
		 * if pending PS-Poll has been sent */
		return true;
	case PS_MANUAL_POLL:
		/* Allow unicast frames to own address if there is a pending
		 * PS-Poll */
		if (data->ps_poll_pending &&
1155
		    mac80211_hwsim_addr_match(data, skb->data + 4)) {
1156 1157 1158 1159 1160 1161 1162 1163 1164
			data->ps_poll_pending = false;
			return true;
		}
		return false;
	}

	return true;
}

1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187
static int hwsim_unicast_netgroup(struct mac80211_hwsim_data *data,
				  struct sk_buff *skb, int portid)
{
	struct net *net;
	bool found = false;
	int res = -ENOENT;

	rcu_read_lock();
	for_each_net_rcu(net) {
		if (data->netgroup == hwsim_net_get_netgroup(net)) {
			res = genlmsg_unicast(net, skb, portid);
			found = true;
			break;
		}
	}
	rcu_read_unlock();

	if (!found)
		nlmsg_free(skb);

	return res;
}

1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228
static void mac80211_hwsim_config_mac_nl(struct ieee80211_hw *hw,
					 const u8 *addr, bool add)
{
	struct mac80211_hwsim_data *data = hw->priv;
	u32 _portid = READ_ONCE(data->wmediumd);
	struct sk_buff *skb;
	void *msg_head;

	if (!_portid && !hwsim_virtio_enabled)
		return;

	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_ATOMIC);
	if (!skb)
		return;

	msg_head = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0,
			       add ? HWSIM_CMD_ADD_MAC_ADDR :
				     HWSIM_CMD_DEL_MAC_ADDR);
	if (!msg_head) {
		pr_debug("mac80211_hwsim: problem with msg_head\n");
		goto nla_put_failure;
	}

	if (nla_put(skb, HWSIM_ATTR_ADDR_TRANSMITTER,
		    ETH_ALEN, data->addresses[1].addr))
		goto nla_put_failure;

	if (nla_put(skb, HWSIM_ATTR_ADDR_RECEIVER, ETH_ALEN, addr))
		goto nla_put_failure;

	genlmsg_end(skb, msg_head);

	if (hwsim_virtio_enabled)
		hwsim_tx_virtio(data, skb);
	else
		hwsim_unicast_netgroup(data, skb, _portid);
	return;
nla_put_failure:
	nlmsg_free(skb);
}

1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258
static inline u16 trans_tx_rate_flags_ieee2hwsim(struct ieee80211_tx_rate *rate)
{
	u16 result = 0;

	if (rate->flags & IEEE80211_TX_RC_USE_RTS_CTS)
		result |= MAC80211_HWSIM_TX_RC_USE_RTS_CTS;
	if (rate->flags & IEEE80211_TX_RC_USE_CTS_PROTECT)
		result |= MAC80211_HWSIM_TX_RC_USE_CTS_PROTECT;
	if (rate->flags & IEEE80211_TX_RC_USE_SHORT_PREAMBLE)
		result |= MAC80211_HWSIM_TX_RC_USE_SHORT_PREAMBLE;
	if (rate->flags & IEEE80211_TX_RC_MCS)
		result |= MAC80211_HWSIM_TX_RC_MCS;
	if (rate->flags & IEEE80211_TX_RC_GREEN_FIELD)
		result |= MAC80211_HWSIM_TX_RC_GREEN_FIELD;
	if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
		result |= MAC80211_HWSIM_TX_RC_40_MHZ_WIDTH;
	if (rate->flags & IEEE80211_TX_RC_DUP_DATA)
		result |= MAC80211_HWSIM_TX_RC_DUP_DATA;
	if (rate->flags & IEEE80211_TX_RC_SHORT_GI)
		result |= MAC80211_HWSIM_TX_RC_SHORT_GI;
	if (rate->flags & IEEE80211_TX_RC_VHT_MCS)
		result |= MAC80211_HWSIM_TX_RC_VHT_MCS;
	if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
		result |= MAC80211_HWSIM_TX_RC_80_MHZ_WIDTH;
	if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
		result |= MAC80211_HWSIM_TX_RC_160_MHZ_WIDTH;

	return result;
}

1259 1260
static void mac80211_hwsim_tx_frame_nl(struct ieee80211_hw *hw,
				       struct sk_buff *my_skb,
1261 1262
				       int dst_portid,
				       struct ieee80211_channel *channel)
1263 1264 1265 1266 1267 1268 1269 1270 1271
{
	struct sk_buff *skb;
	struct mac80211_hwsim_data *data = hw->priv;
	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) my_skb->data;
	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(my_skb);
	void *msg_head;
	unsigned int hwsim_flags = 0;
	int i;
	struct hwsim_tx_rate tx_attempts[IEEE80211_TX_MAX_RATES];
1272
	struct hwsim_tx_rate_flag tx_attempts_flags[IEEE80211_TX_MAX_RATES];
1273
	uintptr_t cookie;
1274 1275 1276 1277 1278

	if (data->ps != PS_DISABLED)
		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM);
	/* If the queue contains MAX_QUEUE skb's drop some */
	if (skb_queue_len(&data->pending) >= MAX_QUEUE) {
1279
		/* Dropping until WARN_QUEUE level */
1280
		while (skb_queue_len(&data->pending) >= WARN_QUEUE) {
1281
			ieee80211_free_txskb(hw, skb_dequeue(&data->pending));
1282 1283
			data->tx_dropped++;
		}
1284 1285
	}

1286
	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_ATOMIC);
1287 1288 1289 1290 1291 1292
	if (skb == NULL)
		goto nla_put_failure;

	msg_head = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0,
			       HWSIM_CMD_FRAME);
	if (msg_head == NULL) {
1293
		pr_debug("mac80211_hwsim: problem with msg_head\n");
1294 1295 1296
		goto nla_put_failure;
	}

1297 1298
	if (nla_put(skb, HWSIM_ATTR_ADDR_TRANSMITTER,
		    ETH_ALEN, data->addresses[1].addr))
1299
		goto nla_put_failure;
1300

1301
	/* We get the skb->data */
1302 1303
	if (nla_put(skb, HWSIM_ATTR_FRAME, my_skb->len, my_skb->data))
		goto nla_put_failure;
1304 1305 1306 1307 1308 1309 1310 1311 1312 1313

	/* We get the flags for this transmission, and we translate them to
	   wmediumd flags  */

	if (info->flags & IEEE80211_TX_CTL_REQ_TX_STATUS)
		hwsim_flags |= HWSIM_TX_CTL_REQ_TX_STATUS;

	if (info->flags & IEEE80211_TX_CTL_NO_ACK)
		hwsim_flags |= HWSIM_TX_CTL_NO_ACK;

1314 1315
	if (nla_put_u32(skb, HWSIM_ATTR_FLAGS, hwsim_flags))
		goto nla_put_failure;
1316

1317
	if (nla_put_u32(skb, HWSIM_ATTR_FREQ, channel->center_freq))
1318 1319
		goto nla_put_failure;

1320 1321 1322 1323
	/* We get the tx control (rate and retries) info*/

	for (i = 0; i < IEEE80211_TX_MAX_RATES; i++) {
		tx_attempts[i].idx = info->status.rates[i].idx;
1324
		tx_attempts_flags[i].idx = info->status.rates[i].idx;
1325
		tx_attempts[i].count = info->status.rates[i].count;
1326 1327 1328
		tx_attempts_flags[i].flags =
				trans_tx_rate_flags_ieee2hwsim(
						&info->status.rates[i]);
1329 1330
	}

1331 1332 1333 1334
	if (nla_put(skb, HWSIM_ATTR_TX_INFO,
		    sizeof(struct hwsim_tx_rate)*IEEE80211_TX_MAX_RATES,
		    tx_attempts))
		goto nla_put_failure;
1335

1336 1337 1338 1339 1340
	if (nla_put(skb, HWSIM_ATTR_TX_INFO_FLAGS,
		    sizeof(struct hwsim_tx_rate_flag) * IEEE80211_TX_MAX_RATES,
		    tx_attempts_flags))
		goto nla_put_failure;

1341
	/* We create a cookie to identify this skb */
1342 1343 1344
	data->pending_cookie++;
	cookie = data->pending_cookie;
	info->rate_driver_data[0] = (void *)cookie;
1345
	if (nla_put_u64_64bit(skb, HWSIM_ATTR_COOKIE, cookie, HWSIM_ATTR_PAD))
1346
		goto nla_put_failure;
1347 1348

	genlmsg_end(skb, msg_head);
1349 1350 1351 1352 1353 1354 1355 1356

	if (hwsim_virtio_enabled) {
		if (hwsim_tx_virtio(data, skb))
			goto err_free_txskb;
	} else {
		if (hwsim_unicast_netgroup(data, skb, dst_portid))
			goto err_free_txskb;
	}
1357 1358 1359

	/* Enqueue the packet */
	skb_queue_tail(&data->pending, my_skb);
1360 1361
	data->tx_pkts++;
	data->tx_bytes += my_skb->len;
1362 1363 1364
	return;

nla_put_failure:
1365 1366
	nlmsg_free(skb);
err_free_txskb:
1367
	pr_debug("mac80211_hwsim: error occurred in %s\n", __func__);
1368
	ieee80211_free_txskb(hw, my_skb);
1369
	data->tx_failed++;
1370 1371
}

1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394
static bool hwsim_chans_compat(struct ieee80211_channel *c1,
			       struct ieee80211_channel *c2)
{
	if (!c1 || !c2)
		return false;

	return c1->center_freq == c2->center_freq;
}

struct tx_iter_data {
	struct ieee80211_channel *channel;
	bool receive;
};

static void mac80211_hwsim_tx_iter(void *_data, u8 *addr,
				   struct ieee80211_vif *vif)
{
	struct tx_iter_data *data = _data;

	if (!vif->chanctx_conf)
		return;

	if (!hwsim_chans_compat(data->channel,
1395
				rcu_dereference(vif->chanctx_conf)->def.chan))
1396 1397 1398 1399 1400
		return;

	data->receive = true;
}

1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419
static void mac80211_hwsim_add_vendor_rtap(struct sk_buff *skb)
{
	/*
	 * To enable this code, #define the HWSIM_RADIOTAP_OUI,
	 * e.g. like this:
	 * #define HWSIM_RADIOTAP_OUI "\x02\x00\x00"
	 * (but you should use a valid OUI, not that)
	 *
	 * If anyone wants to 'donate' a radiotap OUI/subns code
	 * please send a patch removing this #ifdef and changing
	 * the values accordingly.
	 */
#ifdef HWSIM_RADIOTAP_OUI
	struct ieee80211_vendor_radiotap *rtap;

	/*
	 * Note that this code requires the headroom in the SKB
	 * that was allocated earlier.
	 */
1420
	rtap = skb_push(skb, sizeof(*rtap) + 8 + 4);
1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447
	rtap->oui[0] = HWSIM_RADIOTAP_OUI[0];
	rtap->oui[1] = HWSIM_RADIOTAP_OUI[1];
	rtap->oui[2] = HWSIM_RADIOTAP_OUI[2];
	rtap->subns = 127;

	/*
	 * Radiotap vendor namespaces can (and should) also be
	 * split into fields by using the standard radiotap
	 * presence bitmap mechanism. Use just BIT(0) here for
	 * the presence bitmap.
	 */
	rtap->present = BIT(0);
	/* We have 8 bytes of (dummy) data */
	rtap->len = 8;
	/* For testing, also require it to be aligned */
	rtap->align = 8;
	/* And also test that padding works, 4 bytes */
	rtap->pad = 4;
	/* push the data */
	memcpy(rtap->data, "ABCDEFGH", 8);
	/* make sure to clear padding, mac80211 doesn't */
	memset(rtap->data + 8, 0, 4);

	IEEE80211_SKB_RXCB(skb)->flag |= RX_FLAG_RADIOTAP_VENDOR_DATA;
#endif
}

1448
static bool mac80211_hwsim_tx_frame_no_nl(struct ieee80211_hw *hw,
1449 1450
					  struct sk_buff *skb,
					  struct ieee80211_channel *chan)
1451
{
1452 1453
	struct mac80211_hwsim_data *data = hw->priv, *data2;
	bool ack = false;
1454
	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
1455
	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
1456
	struct ieee80211_rx_status rx_status;
1457
	u64 now;
1458 1459

	memset(&rx_status, 0, sizeof(rx_status));
1460
	rx_status.flag |= RX_FLAG_MACTIME_START;
1461
	rx_status.freq = chan->center_freq;
1462
	rx_status.freq_offset = chan->freq_offset ? 1 : 0;
1463
	rx_status.band = chan->band;
1464 1465 1466
	if (info->control.rates[0].flags & IEEE80211_TX_RC_VHT_MCS) {
		rx_status.rate_idx =
			ieee80211_rate_get_vht_mcs(&info->control.rates[0]);
1467
		rx_status.nss =
1468
			ieee80211_rate_get_vht_nss(&info->control.rates[0]);
1469
		rx_status.encoding = RX_ENC_VHT;
1470 1471 1472
	} else {
		rx_status.rate_idx = info->control.rates[0].idx;
		if (info->control.rates[0].flags & IEEE80211_TX_RC_MCS)
1473
			rx_status.encoding = RX_ENC_HT;
1474
	}
1475
	if (info->control.rates[0].flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
1476 1477 1478 1479 1480 1481 1482
		rx_status.bw = RATE_INFO_BW_40;
	else if (info->control.rates[0].flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
		rx_status.bw = RATE_INFO_BW_80;
	else if (info->control.rates[0].flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
		rx_status.bw = RATE_INFO_BW_160;
	else
		rx_status.bw = RATE_INFO_BW_20;
1483
	if (info->control.rates[0].flags & IEEE80211_TX_RC_SHORT_GI)
1484
		rx_status.enc_flags |= RX_ENC_FLAG_SHORT_GI;
1485
	/* TODO: simulate real signal strength (and optional packet loss) */
1486 1487 1488
	rx_status.signal = -50;
	if (info->control.vif)
		rx_status.signal += info->control.vif->bss_conf.txpower;
1489

1490 1491 1492
	if (data->ps != PS_DISABLED)
		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM);

1493 1494
	/* release the skb's source info */
	skb_orphan(skb);
1495
	skb_dst_drop(skb);
1496
	skb->mark = 0;
1497 1498
	skb_ext_reset(skb);
	nf_reset_ct(skb);
1499

1500 1501 1502 1503 1504 1505 1506 1507
	/*
	 * Get absolute mactime here so all HWs RX at the "same time", and
	 * absolute TX time for beacon mactime so the timestamp matches.
	 * Giving beacons a different mactime than non-beacons looks messy, but
	 * it helps the Toffset be exact and a ~10us mactime discrepancy
	 * probably doesn't really matter.
	 */
	if (ieee80211_is_beacon(hdr->frame_control) ||
1508
	    ieee80211_is_probe_resp(hdr->frame_control)) {
1509
		rx_status.boottime_ns = ktime_get_boottime_ns();
1510
		now = data->abs_bcn_ts;
1511
	} else {
1512
		now = mac80211_hwsim_get_tsf_raw();
1513
	}
1514

1515
	/* Copy skb to all enabled radios that are on the current frequency */
1516 1517
	spin_lock(&hwsim_radio_lock);
	list_for_each_entry(data2, &hwsim_radios, list) {
1518
		struct sk_buff *nskb;
1519 1520 1521 1522
		struct tx_iter_data tx_iter_data = {
			.receive = false,
			.channel = chan,
		};
1523

1524
		if (data == data2)
1525
			continue;
1526

1527 1528
		if (!data2->started || (data2->idle && !data2->tmp_chan) ||
		    !hwsim_ps_rx_ok(data2, skb))
1529 1530
			continue;

1531 1532 1533
		if (!(data->group & data2->group))
			continue;

1534 1535 1536
		if (data->netgroup != data2->netgroup)
			continue;

1537 1538 1539
		if (!hwsim_chans_compat(chan, data2->tmp_chan) &&
		    !hwsim_chans_compat(chan, data2->channel)) {
			ieee80211_iterate_active_interfaces_atomic(
1540 1541
				data2->hw, IEEE80211_IFACE_ITER_NORMAL,
				mac80211_hwsim_tx_iter, &tx_iter_data);
1542 1543 1544 1545
			if (!tx_iter_data.receive)
				continue;
		}

1546 1547 1548 1549
		/*
		 * reserve some space for our vendor and the normal
		 * radiotap header, since we're copying anyway
		 */
1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568
		if (skb->len < PAGE_SIZE && paged_rx) {
			struct page *page = alloc_page(GFP_ATOMIC);

			if (!page)
				continue;

			nskb = dev_alloc_skb(128);
			if (!nskb) {
				__free_page(page);
				continue;
			}

			memcpy(page_address(page), skb->data, skb->len);
			skb_add_rx_frag(nskb, 0, page, 0, skb->len, skb->len);
		} else {
			nskb = skb_copy(skb, GFP_ATOMIC);
			if (!nskb)
				continue;
		}
1569

1570
		if (mac80211_hwsim_addr_match(data2, hdr->addr1))
1571
			ack = true;
1572

1573
		rx_status.mactime = now + data2->tsf_offset;
1574

1575
		memcpy(IEEE80211_SKB_RXCB(nskb), &rx_status, sizeof(rx_status));
1576 1577 1578

		mac80211_hwsim_add_vendor_rtap(nskb);

1579 1580
		data2->rx_pkts++;
		data2->rx_bytes += nskb->len;
1581
		ieee80211_rx_irqsafe(data2->hw, nskb);
1582
	}
1583
	spin_unlock(&hwsim_radio_lock);
1584

1585 1586 1587
	return ack;
}

1588 1589 1590
static void mac80211_hwsim_tx(struct ieee80211_hw *hw,
			      struct ieee80211_tx_control *control,
			      struct sk_buff *skb)
1591
{
1592 1593
	struct mac80211_hwsim_data *data = hw->priv;
	struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
1594
	struct ieee80211_hdr *hdr = (void *)skb->data;
1595 1596
	struct ieee80211_chanctx_conf *chanctx_conf;
	struct ieee80211_channel *channel;
1597
	bool ack;
1598
	u32 _portid;
1599

1600
	if (WARN_ON(skb->len < 10)) {
1601
		/* Should not happen; just a sanity check for addr1 use */
1602
		ieee80211_free_txskb(hw, skb);
1603
		return;
1604 1605
	}

1606
	if (!data->use_chanctx) {
1607 1608 1609 1610 1611 1612
		channel = data->channel;
	} else if (txi->hw_queue == 4) {
		channel = data->tmp_chan;
	} else {
		chanctx_conf = rcu_dereference(txi->control.vif->chanctx_conf);
		if (chanctx_conf)
1613
			channel = chanctx_conf->def.chan;
1614 1615 1616 1617 1618
		else
			channel = NULL;
	}

	if (WARN(!channel, "TX w/o channel - queue = %d\n", txi->hw_queue)) {
1619
		ieee80211_free_txskb(hw, skb);
1620 1621 1622 1623
		return;
	}

	if (data->idle && !data->tmp_chan) {
1624
		wiphy_dbg(hw->wiphy, "Trying to TX when idle - reject\n");
1625
		ieee80211_free_txskb(hw, skb);
1626 1627 1628 1629 1630 1631 1632 1633
		return;
	}

	if (txi->control.vif)
		hwsim_check_magic(txi->control.vif);
	if (control->sta)
		hwsim_check_sta_magic(control->sta);

1634
	if (ieee80211_hw_check(hw, SUPPORTS_RC_TABLE))
1635 1636 1637
		ieee80211_get_tx_rates(txi->control.vif, control->sta, skb,
				       txi->control.rates,
				       ARRAY_SIZE(txi->control.rates));
1638

1639 1640 1641 1642 1643
	if (skb->len >= 24 + 8 &&
	    ieee80211_is_probe_resp(hdr->frame_control)) {
		/* fake header transmission time */
		struct ieee80211_mgmt *mgmt;
		struct ieee80211_rate *txrate;
1644 1645
		/* TODO: get MCS */
		int bitrate = 100;
1646 1647 1648 1649
		u64 ts;

		mgmt = (struct ieee80211_mgmt *)skb->data;
		txrate = ieee80211_get_tx_rate(hw, txi);
1650 1651
		if (txrate)
			bitrate = txrate->bitrate;
1652 1653 1654
		ts = mac80211_hwsim_get_tsf_raw();
		mgmt->u.probe_resp.timestamp =
			cpu_to_le64(ts + data->tsf_offset +
1655
				    24 * 8 * 10 / bitrate);
1656 1657
	}

1658 1659
	mac80211_hwsim_monitor_rx(hw, skb, channel);

1660
	/* wmediumd mode check */
1661
	_portid = READ_ONCE(data->wmediumd);
1662

1663
	if (_portid || hwsim_virtio_enabled)
1664
		return mac80211_hwsim_tx_frame_nl(hw, skb, _portid, channel);
1665 1666

	/* NO wmediumd detected, perfect medium simulation */
1667 1668
	data->tx_pkts++;
	data->tx_bytes += skb->len;
1669
	ack = mac80211_hwsim_tx_frame_no_nl(hw, skb, channel);
1670

1671
	if (ack && skb->len >= 16)
1672
		mac80211_hwsim_monitor_ack(channel, hdr->addr2);
1673

1674
	ieee80211_tx_info_clear_status(txi);
1675 1676 1677 1678 1679

	/* frame was transmitted at most favorable rate at first attempt */
	txi->control.rates[0].count = 1;
	txi->control.rates[1].idx = -1;

1680 1681
	if (!(txi->flags & IEEE80211_TX_CTL_NO_ACK) && ack)
		txi->flags |= IEEE80211_TX_STAT_ACK;
1682 1683 1684 1685 1686 1687 1688
	ieee80211_tx_status_irqsafe(hw, skb);
}


static int mac80211_hwsim_start(struct ieee80211_hw *hw)
{
	struct mac80211_hwsim_data *data = hw->priv;
1689
	wiphy_dbg(hw->wiphy, "%s\n", __func__);
1690
	data->started = true;
1691 1692 1693 1694 1695 1696 1697
	return 0;
}


static void mac80211_hwsim_stop(struct ieee80211_hw *hw)
{
	struct mac80211_hwsim_data *data = hw->priv;
1698

1699
	data->started = false;
1700
	hrtimer_cancel(&data->beacon_timer);
1701 1702 1703 1704

	while (!skb_queue_empty(&data->pending))
		ieee80211_free_txskb(hw, skb_dequeue(&data->pending));

1705
	wiphy_dbg(hw->wiphy, "%s\n", __func__);
1706 1707 1708 1709
}


static int mac80211_hwsim_add_interface(struct ieee80211_hw *hw,
1710
					struct ieee80211_vif *vif)
1711
{
1712 1713 1714
	wiphy_dbg(hw->wiphy, "%s (type=%d mac_addr=%pM)\n",
		  __func__, ieee80211_vif_type_p2p(vif),
		  vif->addr);
1715
	hwsim_set_magic(vif);
1716

1717 1718 1719
	if (vif->type != NL80211_IFTYPE_MONITOR)
		mac80211_hwsim_config_mac_nl(hw, vif->addr, true);

1720 1721 1722 1723 1724 1725
	vif->cab_queue = 0;
	vif->hw_queue[IEEE80211_AC_VO] = 0;
	vif->hw_queue[IEEE80211_AC_VI] = 1;
	vif->hw_queue[IEEE80211_AC_BE] = 2;
	vif->hw_queue[IEEE80211_AC_BK] = 3;

1726 1727 1728 1729
	return 0;
}


1730 1731
static int mac80211_hwsim_change_interface(struct ieee80211_hw *hw,
					   struct ieee80211_vif *vif,
1732 1733
					   enum nl80211_iftype newtype,
					   bool newp2p)
1734
{
1735
	newtype = ieee80211_iftype_p2p(newtype, newp2p);
1736 1737 1738
	wiphy_dbg(hw->wiphy,
		  "%s (old type=%d, new type=%d, mac_addr=%pM)\n",
		  __func__, ieee80211_vif_type_p2p(vif),
1739
		    newtype, vif->addr);
1740 1741
	hwsim_check_magic(vif);

1742 1743 1744 1745 1746 1747
	/*
	 * interface may change from non-AP to AP in
	 * which case this needs to be set up again
	 */
	vif->cab_queue = 0;

1748 1749 1750
	return 0;
}

1751
static void mac80211_hwsim_remove_interface(
1752
	struct ieee80211_hw *hw, struct ieee80211_vif *vif)
1753
{
1754 1755 1756
	wiphy_dbg(hw->wiphy, "%s (type=%d mac_addr=%pM)\n",
		  __func__, ieee80211_vif_type_p2p(vif),
		  vif->addr);
1757 1758
	hwsim_check_magic(vif);
	hwsim_clear_magic(vif);
1759 1760
	if (vif->type != NL80211_IFTYPE_MONITOR)
		mac80211_hwsim_config_mac_nl(hw, vif->addr, false);
1761 1762
}

1763 1764 1765 1766
static void mac80211_hwsim_tx_frame(struct ieee80211_hw *hw,
				    struct sk_buff *skb,
				    struct ieee80211_channel *chan)
{
1767
	struct mac80211_hwsim_data *data = hw->priv;
1768
	u32 _pid = READ_ONCE(data->wmediumd);
1769

1770
	if (ieee80211_hw_check(hw, SUPPORTS_RC_TABLE)) {
1771 1772 1773 1774 1775 1776
		struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
		ieee80211_get_tx_rates(txi->control.vif, NULL, skb,
				       txi->control.rates,
				       ARRAY_SIZE(txi->control.rates));
	}

1777 1778
	mac80211_hwsim_monitor_rx(hw, skb, chan);

1779
	if (_pid || hwsim_virtio_enabled)
1780
		return mac80211_hwsim_tx_frame_nl(hw, skb, _pid, chan);
1781

1782 1783
	data->tx_pkts++;
	data->tx_bytes += skb->len;
1784 1785 1786
	mac80211_hwsim_tx_frame_no_nl(hw, skb, chan);
	dev_kfree_skb(skb);
}
1787 1788 1789 1790

static void mac80211_hwsim_beacon_tx(void *arg, u8 *mac,
				     struct ieee80211_vif *vif)
{
1791 1792 1793 1794 1795
	struct mac80211_hwsim_data *data = arg;
	struct ieee80211_hw *hw = data->hw;
	struct ieee80211_tx_info *info;
	struct ieee80211_rate *txrate;
	struct ieee80211_mgmt *mgmt;
1796
	struct sk_buff *skb;
1797 1798
	/* TODO: get MCS */
	int bitrate = 100;
1799

1800 1801
	hwsim_check_magic(vif);

1802
	if (vif->type != NL80211_IFTYPE_AP &&
1803
	    vif->type != NL80211_IFTYPE_MESH_POINT &&
R
Ramon Fontes 已提交
1804 1805
	    vif->type != NL80211_IFTYPE_ADHOC &&
	    vif->type != NL80211_IFTYPE_OCB)
1806 1807 1808 1809 1810
		return;

	skb = ieee80211_beacon_get(hw, vif);
	if (skb == NULL)
		return;
1811
	info = IEEE80211_SKB_CB(skb);
1812
	if (ieee80211_hw_check(hw, SUPPORTS_RC_TABLE))
1813 1814 1815 1816
		ieee80211_get_tx_rates(vif, NULL, skb,
				       info->control.rates,
				       ARRAY_SIZE(info->control.rates));

1817
	txrate = ieee80211_get_tx_rate(hw, info);
1818 1819
	if (txrate)
		bitrate = txrate->bitrate;
1820 1821 1822 1823

	mgmt = (struct ieee80211_mgmt *) skb->data;
	/* fake header transmission time */
	data->abs_bcn_ts = mac80211_hwsim_get_tsf_raw();
1824 1825 1826 1827 1828 1829
	if (ieee80211_is_s1g_beacon(mgmt->frame_control)) {
		struct ieee80211_ext *ext = (void *) mgmt;

		ext->u.s1g_beacon.timestamp = cpu_to_le32(data->abs_bcn_ts +
							  data->tsf_offset +
							  10 * 8 * 10 /
1830
							  bitrate);
1831 1832 1833 1834
	} else {
		mgmt->u.beacon.timestamp = cpu_to_le64(data->abs_bcn_ts +
						       data->tsf_offset +
						       24 * 8 * 10 /
1835
						       bitrate);
1836
	}
1837

1838
	mac80211_hwsim_tx_frame(hw, skb,
1839
				rcu_dereference(vif->chanctx_conf)->def.chan);
1840

1841 1842 1843 1844 1845
	while ((skb = ieee80211_get_buffered_bc(hw, vif)) != NULL) {
		mac80211_hwsim_tx_frame(hw, skb,
				rcu_dereference(vif->chanctx_conf)->def.chan);
	}

1846
	if (vif->csa_active && ieee80211_beacon_cntdwn_is_complete(vif))
1847
		ieee80211_csa_finish(vif);
1848 1849
}

T
Thomas Pedersen 已提交
1850 1851
static enum hrtimer_restart
mac80211_hwsim_beacon(struct hrtimer *timer)
1852
{
T
Thomas Pedersen 已提交
1853
	struct mac80211_hwsim_data *data =
1854
		container_of(timer, struct mac80211_hwsim_data, beacon_timer);
T
Thomas Pedersen 已提交
1855 1856
	struct ieee80211_hw *hw = data->hw;
	u64 bcn_int = data->beacon_int;
1857

1858
	if (!data->started)
1859
		return HRTIMER_NORESTART;
1860

J
Jouni Malinen 已提交
1861
	ieee80211_iterate_active_interfaces_atomic(
1862
		hw, IEEE80211_IFACE_ITER_NORMAL,
1863
		mac80211_hwsim_beacon_tx, data);
1864

1865 1866 1867 1868 1869
	/* beacon at new TBTT + beacon interval */
	if (data->bcn_delta) {
		bcn_int -= data->bcn_delta;
		data->bcn_delta = 0;
	}
1870 1871
	hrtimer_forward_now(&data->beacon_timer,
			    ns_to_ktime(bcn_int * NSEC_PER_USEC));
1872
	return HRTIMER_RESTART;
1873 1874
}

1875
static const char * const hwsim_chanwidths[] = {
1876 1877
	[NL80211_CHAN_WIDTH_5] = "ht5",
	[NL80211_CHAN_WIDTH_10] = "ht10",
1878 1879 1880 1881 1882 1883
	[NL80211_CHAN_WIDTH_20_NOHT] = "noht",
	[NL80211_CHAN_WIDTH_20] = "ht20",
	[NL80211_CHAN_WIDTH_40] = "ht40",
	[NL80211_CHAN_WIDTH_80] = "vht80",
	[NL80211_CHAN_WIDTH_80P80] = "vht80p80",
	[NL80211_CHAN_WIDTH_160] = "vht160",
1884 1885 1886 1887 1888
	[NL80211_CHAN_WIDTH_1] = "1MHz",
	[NL80211_CHAN_WIDTH_2] = "2MHz",
	[NL80211_CHAN_WIDTH_4] = "4MHz",
	[NL80211_CHAN_WIDTH_8] = "8MHz",
	[NL80211_CHAN_WIDTH_16] = "16MHz",
1889
};
1890

1891
static int mac80211_hwsim_config(struct ieee80211_hw *hw, u32 changed)
1892 1893
{
	struct mac80211_hwsim_data *data = hw->priv;
1894
	struct ieee80211_conf *conf = &hw->conf;
1895 1896 1897 1898 1899 1900
	static const char *smps_modes[IEEE80211_SMPS_NUM_MODES] = {
		[IEEE80211_SMPS_AUTOMATIC] = "auto",
		[IEEE80211_SMPS_OFF] = "off",
		[IEEE80211_SMPS_STATIC] = "static",
		[IEEE80211_SMPS_DYNAMIC] = "dynamic",
	};
1901
	int idx;
1902

1903
	if (conf->chandef.chan)
1904 1905 1906 1907 1908 1909 1910 1911 1912 1913
		wiphy_dbg(hw->wiphy,
			  "%s (freq=%d(%d - %d)/%s idle=%d ps=%d smps=%s)\n",
			  __func__,
			  conf->chandef.chan->center_freq,
			  conf->chandef.center_freq1,
			  conf->chandef.center_freq2,
			  hwsim_chanwidths[conf->chandef.width],
			  !!(conf->flags & IEEE80211_CONF_IDLE),
			  !!(conf->flags & IEEE80211_CONF_PS),
			  smps_modes[conf->smps_mode]);
1914
	else
1915 1916 1917 1918 1919 1920
		wiphy_dbg(hw->wiphy,
			  "%s (freq=0 idle=%d ps=%d smps=%s)\n",
			  __func__,
			  !!(conf->flags & IEEE80211_CONF_IDLE),
			  !!(conf->flags & IEEE80211_CONF_PS),
			  smps_modes[conf->smps_mode]);
1921

1922 1923
	data->idle = !!(conf->flags & IEEE80211_CONF_IDLE);

1924
	WARN_ON(conf->chandef.chan && data->use_chanctx);
1925

1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937
	mutex_lock(&data->mutex);
	if (data->scanning && conf->chandef.chan) {
		for (idx = 0; idx < ARRAY_SIZE(data->survey_data); idx++) {
			if (data->survey_data[idx].channel == data->channel) {
				data->survey_data[idx].start =
					data->survey_data[idx].next_start;
				data->survey_data[idx].end = jiffies;
				break;
			}
		}

		data->channel = conf->chandef.chan;
1938

1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950
		for (idx = 0; idx < ARRAY_SIZE(data->survey_data); idx++) {
			if (data->survey_data[idx].channel &&
			    data->survey_data[idx].channel != data->channel)
				continue;
			data->survey_data[idx].channel = data->channel;
			data->survey_data[idx].next_start = jiffies;
			break;
		}
	} else {
		data->channel = conf->chandef.chan;
	}
	mutex_unlock(&data->mutex);
1951

1952
	if (!data->started || !data->beacon_int)
1953 1954
		hrtimer_cancel(&data->beacon_timer);
	else if (!hrtimer_is_queued(&data->beacon_timer)) {
1955 1956 1957 1958
		u64 tsf = mac80211_hwsim_get_tsf(hw, NULL);
		u32 bcn_int = data->beacon_int;
		u64 until_tbtt = bcn_int - do_div(tsf, bcn_int);

1959 1960 1961
		hrtimer_start(&data->beacon_timer,
			      ns_to_ktime(until_tbtt * NSEC_PER_USEC),
			      HRTIMER_MODE_REL_SOFT);
T
Thomas Pedersen 已提交
1962
	}
1963 1964 1965 1966 1967 1968 1969

	return 0;
}


static void mac80211_hwsim_configure_filter(struct ieee80211_hw *hw,
					    unsigned int changed_flags,
1970
					    unsigned int *total_flags,u64 multicast)
1971 1972 1973
{
	struct mac80211_hwsim_data *data = hw->priv;

1974
	wiphy_dbg(hw->wiphy, "%s\n", __func__);
1975 1976 1977 1978

	data->rx_filter = 0;
	if (*total_flags & FIF_ALLMULTI)
		data->rx_filter |= FIF_ALLMULTI;
1979 1980
	if (*total_flags & FIF_MCAST_ACTION)
		data->rx_filter |= FIF_MCAST_ACTION;
1981 1982 1983 1984

	*total_flags = data->rx_filter;
}

1985 1986 1987 1988 1989 1990 1991 1992 1993 1994
static void mac80211_hwsim_bcn_en_iter(void *data, u8 *mac,
				       struct ieee80211_vif *vif)
{
	unsigned int *count = data;
	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;

	if (vp->bcn_en)
		(*count)++;
}

1995 1996 1997 1998 1999
static void mac80211_hwsim_bss_info_changed(struct ieee80211_hw *hw,
					    struct ieee80211_vif *vif,
					    struct ieee80211_bss_conf *info,
					    u32 changed)
{
2000
	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
2001
	struct mac80211_hwsim_data *data = hw->priv;
2002

2003
	hwsim_check_magic(vif);
2004

2005 2006
	wiphy_dbg(hw->wiphy, "%s(changed=0x%x vif->addr=%pM)\n",
		  __func__, changed, vif->addr);
2007

2008
	if (changed & BSS_CHANGED_BSSID) {
2009 2010
		wiphy_dbg(hw->wiphy, "%s: BSSID changed: %pM\n",
			  __func__, info->bssid);
2011 2012 2013
		memcpy(vp->bssid, info->bssid, ETH_ALEN);
	}

2014
	if (changed & BSS_CHANGED_ASSOC) {
2015 2016
		wiphy_dbg(hw->wiphy, "  ASSOC: assoc=%d aid=%d\n",
			  info->assoc, info->aid);
2017 2018
		vp->assoc = info->assoc;
		vp->aid = info->aid;
2019 2020
	}

T
Thomas Pedersen 已提交
2021
	if (changed & BSS_CHANGED_BEACON_ENABLED) {
2022 2023
		wiphy_dbg(hw->wiphy, "  BCN EN: %d (BI=%u)\n",
			  info->enable_beacon, info->beacon_int);
2024
		vp->bcn_en = info->enable_beacon;
T
Thomas Pedersen 已提交
2025
		if (data->started &&
2026
		    !hrtimer_is_queued(&data->beacon_timer) &&
T
Thomas Pedersen 已提交
2027
		    info->enable_beacon) {
2028 2029
			u64 tsf, until_tbtt;
			u32 bcn_int;
2030
			data->beacon_int = info->beacon_int * 1024;
2031 2032 2033
			tsf = mac80211_hwsim_get_tsf(hw, vif);
			bcn_int = data->beacon_int;
			until_tbtt = bcn_int - do_div(tsf, bcn_int);
2034 2035 2036 2037

			hrtimer_start(&data->beacon_timer,
				      ns_to_ktime(until_tbtt * NSEC_PER_USEC),
				      HRTIMER_MODE_REL_SOFT);
2038 2039
		} else if (!info->enable_beacon) {
			unsigned int count = 0;
2040
			ieee80211_iterate_active_interfaces_atomic(
2041 2042
				data->hw, IEEE80211_IFACE_ITER_NORMAL,
				mac80211_hwsim_bcn_en_iter, &count);
2043 2044
			wiphy_dbg(hw->wiphy, "  beaconing vifs remaining: %u",
				  count);
2045
			if (count == 0) {
2046
				hrtimer_cancel(&data->beacon_timer);
2047 2048
				data->beacon_int = 0;
			}
2049
		}
2050 2051
	}

2052
	if (changed & BSS_CHANGED_ERP_CTS_PROT) {
2053 2054
		wiphy_dbg(hw->wiphy, "  ERP_CTS_PROT: %d\n",
			  info->use_cts_prot);
2055 2056 2057
	}

	if (changed & BSS_CHANGED_ERP_PREAMBLE) {
2058 2059
		wiphy_dbg(hw->wiphy, "  ERP_PREAMBLE: %d\n",
			  info->use_short_preamble);
2060 2061 2062
	}

	if (changed & BSS_CHANGED_ERP_SLOT) {
2063
		wiphy_dbg(hw->wiphy, "  ERP_SLOT: %d\n", info->use_short_slot);
2064 2065 2066
	}

	if (changed & BSS_CHANGED_HT) {
2067 2068
		wiphy_dbg(hw->wiphy, "  HT: op_mode=0x%x\n",
			  info->ht_operation_mode);
2069 2070 2071
	}

	if (changed & BSS_CHANGED_BASIC_RATES) {
2072 2073
		wiphy_dbg(hw->wiphy, "  BASIC_RATES: 0x%llx\n",
			  (unsigned long long) info->basic_rates);
2074
	}
2075 2076

	if (changed & BSS_CHANGED_TXPOWER)
2077
		wiphy_dbg(hw->wiphy, "  TX Power: %d dBm\n", info->txpower);
2078 2079
}

2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094 2095 2096 2097 2098 2099
static int mac80211_hwsim_sta_add(struct ieee80211_hw *hw,
				  struct ieee80211_vif *vif,
				  struct ieee80211_sta *sta)
{
	hwsim_check_magic(vif);
	hwsim_set_sta_magic(sta);

	return 0;
}

static int mac80211_hwsim_sta_remove(struct ieee80211_hw *hw,
				     struct ieee80211_vif *vif,
				     struct ieee80211_sta *sta)
{
	hwsim_check_magic(vif);
	hwsim_clear_sta_magic(sta);

	return 0;
}

2100 2101
static void mac80211_hwsim_sta_notify(struct ieee80211_hw *hw,
				      struct ieee80211_vif *vif,
2102 2103
				      enum sta_notify_cmd cmd,
				      struct ieee80211_sta *sta)
2104 2105
{
	hwsim_check_magic(vif);
2106

2107
	switch (cmd) {
2108 2109 2110 2111
	case STA_NOTIFY_SLEEP:
	case STA_NOTIFY_AWAKE:
		/* TODO: make good use of these flags */
		break;
2112 2113 2114
	default:
		WARN(1, "Invalid sta notify: %d\n", cmd);
		break;
2115 2116 2117 2118 2119 2120 2121 2122 2123
	}
}

static int mac80211_hwsim_set_tim(struct ieee80211_hw *hw,
				  struct ieee80211_sta *sta,
				  bool set)
{
	hwsim_check_sta_magic(sta);
	return 0;
2124
}
2125

2126
static int mac80211_hwsim_conf_tx(
2127 2128
	struct ieee80211_hw *hw,
	struct ieee80211_vif *vif, u16 queue,
2129 2130
	const struct ieee80211_tx_queue_params *params)
{
2131 2132 2133 2134 2135
	wiphy_dbg(hw->wiphy,
		  "%s (queue=%d txop=%d cw_min=%d cw_max=%d aifs=%d)\n",
		  __func__, queue,
		  params->txop, params->cw_min,
		  params->cw_max, params->aifs);
2136 2137 2138
	return 0;
}

2139 2140
static int mac80211_hwsim_get_survey(struct ieee80211_hw *hw, int idx,
				     struct survey_info *survey)
2141
{
2142
	struct mac80211_hwsim_data *hwsim = hw->priv;
2143

2144
	if (idx < 0 || idx >= ARRAY_SIZE(hwsim->survey_data))
2145 2146
		return -ENOENT;

2147 2148 2149 2150 2151 2152
	mutex_lock(&hwsim->mutex);
	survey->channel = hwsim->survey_data[idx].channel;
	if (!survey->channel) {
		mutex_unlock(&hwsim->mutex);
		return -ENOENT;
	}
2153 2154

	/*
2155
	 * Magically conjured dummy values --- this is only ok for simulated hardware.
2156
	 *
2157 2158
	 * A real driver which cannot determine real values noise MUST NOT
	 * report any, especially not a magically conjured ones :-)
2159
	 */
2160 2161 2162
	survey->filled = SURVEY_INFO_NOISE_DBM |
			 SURVEY_INFO_TIME |
			 SURVEY_INFO_TIME_BUSY;
2163
	survey->noise = -92;
2164 2165 2166 2167 2168 2169
	survey->time =
		jiffies_to_msecs(hwsim->survey_data[idx].end -
				 hwsim->survey_data[idx].start);
	/* report 12.5% of channel time is used */
	survey->time_busy = survey->time/8;
	mutex_unlock(&hwsim->mutex);
2170 2171 2172 2173

	return 0;
}

2174 2175 2176 2177 2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193
#ifdef CONFIG_NL80211_TESTMODE
/*
 * This section contains example code for using netlink
 * attributes with the testmode command in nl80211.
 */

/* These enums need to be kept in sync with userspace */
enum hwsim_testmode_attr {
	__HWSIM_TM_ATTR_INVALID	= 0,
	HWSIM_TM_ATTR_CMD	= 1,
	HWSIM_TM_ATTR_PS	= 2,

	/* keep last */
	__HWSIM_TM_ATTR_AFTER_LAST,
	HWSIM_TM_ATTR_MAX	= __HWSIM_TM_ATTR_AFTER_LAST - 1
};

enum hwsim_testmode_cmd {
	HWSIM_TM_CMD_SET_PS		= 0,
	HWSIM_TM_CMD_GET_PS		= 1,
2194 2195
	HWSIM_TM_CMD_STOP_QUEUES	= 2,
	HWSIM_TM_CMD_WAKE_QUEUES	= 3,
2196 2197 2198 2199 2200 2201 2202
};

static const struct nla_policy hwsim_testmode_policy[HWSIM_TM_ATTR_MAX + 1] = {
	[HWSIM_TM_ATTR_CMD] = { .type = NLA_U32 },
	[HWSIM_TM_ATTR_PS] = { .type = NLA_U32 },
};

J
Johannes Berg 已提交
2203
static int mac80211_hwsim_testmode_cmd(struct ieee80211_hw *hw,
2204
				       struct ieee80211_vif *vif,
J
Johannes Berg 已提交
2205
				       void *data, int len)
2206 2207 2208 2209 2210 2211
{
	struct mac80211_hwsim_data *hwsim = hw->priv;
	struct nlattr *tb[HWSIM_TM_ATTR_MAX + 1];
	struct sk_buff *skb;
	int err, ps;

2212 2213
	err = nla_parse_deprecated(tb, HWSIM_TM_ATTR_MAX, data, len,
				   hwsim_testmode_policy, NULL);
2214 2215 2216 2217 2218 2219 2220 2221 2222 2223 2224 2225 2226 2227 2228 2229 2230
	if (err)
		return err;

	if (!tb[HWSIM_TM_ATTR_CMD])
		return -EINVAL;

	switch (nla_get_u32(tb[HWSIM_TM_ATTR_CMD])) {
	case HWSIM_TM_CMD_SET_PS:
		if (!tb[HWSIM_TM_ATTR_PS])
			return -EINVAL;
		ps = nla_get_u32(tb[HWSIM_TM_ATTR_PS]);
		return hwsim_fops_ps_write(hwsim, ps);
	case HWSIM_TM_CMD_GET_PS:
		skb = cfg80211_testmode_alloc_reply_skb(hw->wiphy,
						nla_total_size(sizeof(u32)));
		if (!skb)
			return -ENOMEM;
2231 2232
		if (nla_put_u32(skb, HWSIM_TM_ATTR_PS, hwsim->ps))
			goto nla_put_failure;
2233
		return cfg80211_testmode_reply(skb);
2234 2235 2236 2237 2238 2239
	case HWSIM_TM_CMD_STOP_QUEUES:
		ieee80211_stop_queues(hw);
		return 0;
	case HWSIM_TM_CMD_WAKE_QUEUES:
		ieee80211_wake_queues(hw);
		return 0;
2240 2241 2242 2243 2244 2245 2246 2247 2248 2249
	default:
		return -EOPNOTSUPP;
	}

 nla_put_failure:
	kfree_skb(skb);
	return -ENOBUFS;
}
#endif

2250 2251
static int mac80211_hwsim_ampdu_action(struct ieee80211_hw *hw,
				       struct ieee80211_vif *vif,
2252
				       struct ieee80211_ampdu_params *params)
2253
{
2254 2255 2256 2257
	struct ieee80211_sta *sta = params->sta;
	enum ieee80211_ampdu_mlme_action action = params->action;
	u16 tid = params->tid;

2258 2259
	switch (action) {
	case IEEE80211_AMPDU_TX_START:
2260
		return IEEE80211_AMPDU_TX_START_IMMEDIATE;
2261 2262 2263
	case IEEE80211_AMPDU_TX_STOP_CONT:
	case IEEE80211_AMPDU_TX_STOP_FLUSH:
	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
2264 2265 2266 2267 2268 2269 2270 2271 2272 2273 2274 2275 2276 2277
		ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid);
		break;
	case IEEE80211_AMPDU_TX_OPERATIONAL:
		break;
	case IEEE80211_AMPDU_RX_START:
	case IEEE80211_AMPDU_RX_STOP:
		break;
	default:
		return -EOPNOTSUPP;
	}

	return 0;
}

2278 2279 2280
static void mac80211_hwsim_flush(struct ieee80211_hw *hw,
				 struct ieee80211_vif *vif,
				 u32 queues, bool drop)
2281
{
2282
	/* Not implemented, queues only on kernel side */
2283 2284
}

2285
static void hw_scan_work(struct work_struct *work)
2286
{
2287 2288 2289 2290
	struct mac80211_hwsim_data *hwsim =
		container_of(work, struct mac80211_hwsim_data, hw_scan.work);
	struct cfg80211_scan_request *req = hwsim->hw_scan_request;
	int dwell, i;
2291

2292 2293
	mutex_lock(&hwsim->mutex);
	if (hwsim->scan_chan_idx >= req->n_channels) {
2294 2295 2296 2297
		struct cfg80211_scan_info info = {
			.aborted = false,
		};

2298
		wiphy_dbg(hwsim->hw->wiphy, "hw scan complete\n");
2299
		ieee80211_scan_completed(hwsim->hw, &info);
2300 2301 2302 2303
		hwsim->hw_scan_request = NULL;
		hwsim->hw_scan_vif = NULL;
		hwsim->tmp_chan = NULL;
		mutex_unlock(&hwsim->mutex);
2304 2305
		mac80211_hwsim_config_mac_nl(hwsim->hw, hwsim->scan_addr,
					     false);
2306 2307 2308
		return;
	}

2309 2310
	wiphy_dbg(hwsim->hw->wiphy, "hw scan %d MHz\n",
		  req->channels[hwsim->scan_chan_idx]->center_freq);
2311 2312

	hwsim->tmp_chan = req->channels[hwsim->scan_chan_idx];
2313 2314
	if (hwsim->tmp_chan->flags & (IEEE80211_CHAN_NO_IR |
				      IEEE80211_CHAN_RADAR) ||
2315 2316 2317 2318 2319 2320 2321
	    !req->n_ssids) {
		dwell = 120;
	} else {
		dwell = 30;
		/* send probes */
		for (i = 0; i < req->n_ssids; i++) {
			struct sk_buff *probe;
2322
			struct ieee80211_mgmt *mgmt;
2323 2324

			probe = ieee80211_probereq_get(hwsim->hw,
2325
						       hwsim->scan_addr,
2326 2327
						       req->ssids[i].ssid,
						       req->ssids[i].ssid_len,
2328
						       req->ie_len);
2329 2330
			if (!probe)
				continue;
2331

2332 2333 2334 2335
			mgmt = (struct ieee80211_mgmt *) probe->data;
			memcpy(mgmt->da, req->bssid, ETH_ALEN);
			memcpy(mgmt->bssid, req->bssid, ETH_ALEN);

2336
			if (req->ie_len)
2337
				skb_put_data(probe, req->ie, req->ie_len);
2338

2339 2340 2341 2342 2343 2344 2345 2346
			local_bh_disable();
			mac80211_hwsim_tx_frame(hwsim->hw, probe,
						hwsim->tmp_chan);
			local_bh_enable();
		}
	}
	ieee80211_queue_delayed_work(hwsim->hw, &hwsim->hw_scan,
				     msecs_to_jiffies(dwell));
2347 2348 2349 2350
	hwsim->survey_data[hwsim->scan_chan_idx].channel = hwsim->tmp_chan;
	hwsim->survey_data[hwsim->scan_chan_idx].start = jiffies;
	hwsim->survey_data[hwsim->scan_chan_idx].end =
		jiffies + msecs_to_jiffies(dwell);
2351 2352
	hwsim->scan_chan_idx++;
	mutex_unlock(&hwsim->mutex);
2353 2354 2355
}

static int mac80211_hwsim_hw_scan(struct ieee80211_hw *hw,
2356
				  struct ieee80211_vif *vif,
2357
				  struct ieee80211_scan_request *hw_req)
2358
{
2359
	struct mac80211_hwsim_data *hwsim = hw->priv;
2360
	struct cfg80211_scan_request *req = &hw_req->req;
2361

2362 2363 2364 2365 2366 2367 2368 2369
	mutex_lock(&hwsim->mutex);
	if (WARN_ON(hwsim->tmp_chan || hwsim->hw_scan_request)) {
		mutex_unlock(&hwsim->mutex);
		return -EBUSY;
	}
	hwsim->hw_scan_request = req;
	hwsim->hw_scan_vif = vif;
	hwsim->scan_chan_idx = 0;
2370 2371 2372 2373 2374 2375
	if (req->flags & NL80211_SCAN_FLAG_RANDOM_ADDR)
		get_random_mask_addr(hwsim->scan_addr,
				     hw_req->req.mac_addr,
				     hw_req->req.mac_addr_mask);
	else
		memcpy(hwsim->scan_addr, vif->addr, ETH_ALEN);
2376
	memset(hwsim->survey_data, 0, sizeof(hwsim->survey_data));
2377
	mutex_unlock(&hwsim->mutex);
2378

2379
	mac80211_hwsim_config_mac_nl(hw, hwsim->scan_addr, true);
2380
	wiphy_dbg(hw->wiphy, "hwsim hw_scan request\n");
2381

2382
	ieee80211_queue_delayed_work(hwsim->hw, &hwsim->hw_scan, 0);
2383 2384 2385 2386

	return 0;
}

2387 2388 2389 2390
static void mac80211_hwsim_cancel_hw_scan(struct ieee80211_hw *hw,
					  struct ieee80211_vif *vif)
{
	struct mac80211_hwsim_data *hwsim = hw->priv;
2391 2392 2393
	struct cfg80211_scan_info info = {
		.aborted = true,
	};
2394

2395
	wiphy_dbg(hw->wiphy, "hwsim cancel_hw_scan\n");
2396 2397 2398 2399

	cancel_delayed_work_sync(&hwsim->hw_scan);

	mutex_lock(&hwsim->mutex);
2400
	ieee80211_scan_completed(hwsim->hw, &info);
2401 2402 2403 2404 2405 2406
	hwsim->tmp_chan = NULL;
	hwsim->hw_scan_request = NULL;
	hwsim->hw_scan_vif = NULL;
	mutex_unlock(&hwsim->mutex);
}

2407 2408 2409
static void mac80211_hwsim_sw_scan(struct ieee80211_hw *hw,
				   struct ieee80211_vif *vif,
				   const u8 *mac_addr)
2410 2411 2412 2413 2414 2415
{
	struct mac80211_hwsim_data *hwsim = hw->priv;

	mutex_lock(&hwsim->mutex);

	if (hwsim->scanning) {
2416
		pr_debug("two hwsim sw_scans detected!\n");
2417 2418 2419
		goto out;
	}

2420
	pr_debug("hwsim sw_scan request, prepping stuff\n");
2421 2422

	memcpy(hwsim->scan_addr, mac_addr, ETH_ALEN);
2423
	mac80211_hwsim_config_mac_nl(hw, hwsim->scan_addr, true);
2424
	hwsim->scanning = true;
2425
	memset(hwsim->survey_data, 0, sizeof(hwsim->survey_data));
2426 2427 2428 2429 2430

out:
	mutex_unlock(&hwsim->mutex);
}

2431 2432
static void mac80211_hwsim_sw_scan_complete(struct ieee80211_hw *hw,
					    struct ieee80211_vif *vif)
2433 2434 2435 2436 2437
{
	struct mac80211_hwsim_data *hwsim = hw->priv;

	mutex_lock(&hwsim->mutex);

2438
	pr_debug("hwsim sw_scan_complete\n");
2439
	hwsim->scanning = false;
2440
	mac80211_hwsim_config_mac_nl(hw, hwsim->scan_addr, false);
2441
	eth_zero_addr(hwsim->scan_addr);
2442 2443 2444 2445

	mutex_unlock(&hwsim->mutex);
}

2446 2447 2448 2449 2450 2451 2452
static void hw_roc_start(struct work_struct *work)
{
	struct mac80211_hwsim_data *hwsim =
		container_of(work, struct mac80211_hwsim_data, roc_start.work);

	mutex_lock(&hwsim->mutex);

2453
	wiphy_dbg(hwsim->hw->wiphy, "hwsim ROC begins\n");
2454 2455 2456 2457 2458 2459 2460 2461 2462
	hwsim->tmp_chan = hwsim->roc_chan;
	ieee80211_ready_on_channel(hwsim->hw);

	ieee80211_queue_delayed_work(hwsim->hw, &hwsim->roc_done,
				     msecs_to_jiffies(hwsim->roc_duration));

	mutex_unlock(&hwsim->mutex);
}

2463 2464 2465 2466 2467 2468 2469 2470 2471 2472
static void hw_roc_done(struct work_struct *work)
{
	struct mac80211_hwsim_data *hwsim =
		container_of(work, struct mac80211_hwsim_data, roc_done.work);

	mutex_lock(&hwsim->mutex);
	ieee80211_remain_on_channel_expired(hwsim->hw);
	hwsim->tmp_chan = NULL;
	mutex_unlock(&hwsim->mutex);

2473
	wiphy_dbg(hwsim->hw->wiphy, "hwsim ROC expired\n");
2474 2475 2476
}

static int mac80211_hwsim_roc(struct ieee80211_hw *hw,
2477
			      struct ieee80211_vif *vif,
2478
			      struct ieee80211_channel *chan,
2479 2480
			      int duration,
			      enum ieee80211_roc_type type)
2481 2482 2483 2484 2485 2486 2487 2488 2489
{
	struct mac80211_hwsim_data *hwsim = hw->priv;

	mutex_lock(&hwsim->mutex);
	if (WARN_ON(hwsim->tmp_chan || hwsim->hw_scan_request)) {
		mutex_unlock(&hwsim->mutex);
		return -EBUSY;
	}

2490 2491
	hwsim->roc_chan = chan;
	hwsim->roc_duration = duration;
2492 2493
	mutex_unlock(&hwsim->mutex);

2494 2495
	wiphy_dbg(hw->wiphy, "hwsim ROC (%d MHz, %d ms)\n",
		  chan->center_freq, duration);
2496
	ieee80211_queue_delayed_work(hw, &hwsim->roc_start, HZ/50);
2497 2498 2499 2500

	return 0;
}

2501 2502
static int mac80211_hwsim_croc(struct ieee80211_hw *hw,
			       struct ieee80211_vif *vif)
2503 2504 2505
{
	struct mac80211_hwsim_data *hwsim = hw->priv;

2506
	cancel_delayed_work_sync(&hwsim->roc_start);
2507 2508 2509 2510 2511 2512
	cancel_delayed_work_sync(&hwsim->roc_done);

	mutex_lock(&hwsim->mutex);
	hwsim->tmp_chan = NULL;
	mutex_unlock(&hwsim->mutex);

2513
	wiphy_dbg(hw->wiphy, "hwsim ROC canceled\n");
2514 2515 2516 2517 2518 2519 2520

	return 0;
}

static int mac80211_hwsim_add_chanctx(struct ieee80211_hw *hw,
				      struct ieee80211_chanctx_conf *ctx)
{
2521 2522 2523 2524 2525
	struct mac80211_hwsim_data *hwsim = hw->priv;

	mutex_lock(&hwsim->mutex);
	hwsim->chanctx = ctx;
	mutex_unlock(&hwsim->mutex);
2526
	hwsim_set_chanctx_magic(ctx);
2527 2528 2529 2530
	wiphy_dbg(hw->wiphy,
		  "add channel context control: %d MHz/width: %d/cfreqs:%d/%d MHz\n",
		  ctx->def.chan->center_freq, ctx->def.width,
		  ctx->def.center_freq1, ctx->def.center_freq2);
2531 2532 2533 2534 2535 2536
	return 0;
}

static void mac80211_hwsim_remove_chanctx(struct ieee80211_hw *hw,
					  struct ieee80211_chanctx_conf *ctx)
{
2537 2538 2539 2540 2541
	struct mac80211_hwsim_data *hwsim = hw->priv;

	mutex_lock(&hwsim->mutex);
	hwsim->chanctx = NULL;
	mutex_unlock(&hwsim->mutex);
2542 2543 2544 2545
	wiphy_dbg(hw->wiphy,
		  "remove channel context control: %d MHz/width: %d/cfreqs:%d/%d MHz\n",
		  ctx->def.chan->center_freq, ctx->def.width,
		  ctx->def.center_freq1, ctx->def.center_freq2);
2546 2547 2548 2549 2550 2551 2552 2553
	hwsim_check_chanctx_magic(ctx);
	hwsim_clear_chanctx_magic(ctx);
}

static void mac80211_hwsim_change_chanctx(struct ieee80211_hw *hw,
					  struct ieee80211_chanctx_conf *ctx,
					  u32 changed)
{
2554 2555 2556 2557 2558
	struct mac80211_hwsim_data *hwsim = hw->priv;

	mutex_lock(&hwsim->mutex);
	hwsim->chanctx = ctx;
	mutex_unlock(&hwsim->mutex);
2559
	hwsim_check_chanctx_magic(ctx);
2560 2561 2562 2563
	wiphy_dbg(hw->wiphy,
		  "change channel context control: %d MHz/width: %d/cfreqs:%d/%d MHz\n",
		  ctx->def.chan->center_freq, ctx->def.width,
		  ctx->def.center_freq1, ctx->def.center_freq2);
2564 2565 2566 2567 2568 2569 2570 2571 2572 2573 2574 2575 2576 2577 2578 2579 2580 2581 2582 2583
}

static int mac80211_hwsim_assign_vif_chanctx(struct ieee80211_hw *hw,
					     struct ieee80211_vif *vif,
					     struct ieee80211_chanctx_conf *ctx)
{
	hwsim_check_magic(vif);
	hwsim_check_chanctx_magic(ctx);

	return 0;
}

static void mac80211_hwsim_unassign_vif_chanctx(struct ieee80211_hw *hw,
						struct ieee80211_vif *vif,
						struct ieee80211_chanctx_conf *ctx)
{
	hwsim_check_magic(vif);
	hwsim_check_chanctx_magic(ctx);
}

2584 2585 2586 2587 2588 2589 2590 2591 2592 2593 2594 2595 2596 2597 2598 2599 2600 2601 2602 2603 2604 2605 2606 2607 2608 2609 2610 2611 2612 2613 2614 2615 2616 2617 2618 2619 2620 2621 2622 2623 2624 2625 2626 2627 2628 2629 2630 2631 2632
static const char mac80211_hwsim_gstrings_stats[][ETH_GSTRING_LEN] = {
	"tx_pkts_nic",
	"tx_bytes_nic",
	"rx_pkts_nic",
	"rx_bytes_nic",
	"d_tx_dropped",
	"d_tx_failed",
	"d_ps_mode",
	"d_group",
};

#define MAC80211_HWSIM_SSTATS_LEN ARRAY_SIZE(mac80211_hwsim_gstrings_stats)

static void mac80211_hwsim_get_et_strings(struct ieee80211_hw *hw,
					  struct ieee80211_vif *vif,
					  u32 sset, u8 *data)
{
	if (sset == ETH_SS_STATS)
		memcpy(data, *mac80211_hwsim_gstrings_stats,
		       sizeof(mac80211_hwsim_gstrings_stats));
}

static int mac80211_hwsim_get_et_sset_count(struct ieee80211_hw *hw,
					    struct ieee80211_vif *vif, int sset)
{
	if (sset == ETH_SS_STATS)
		return MAC80211_HWSIM_SSTATS_LEN;
	return 0;
}

static void mac80211_hwsim_get_et_stats(struct ieee80211_hw *hw,
					struct ieee80211_vif *vif,
					struct ethtool_stats *stats, u64 *data)
{
	struct mac80211_hwsim_data *ar = hw->priv;
	int i = 0;

	data[i++] = ar->tx_pkts;
	data[i++] = ar->tx_bytes;
	data[i++] = ar->rx_pkts;
	data[i++] = ar->rx_bytes;
	data[i++] = ar->tx_dropped;
	data[i++] = ar->tx_failed;
	data[i++] = ar->ps;
	data[i++] = ar->group;

	WARN_ON(i != MAC80211_HWSIM_SSTATS_LEN);
}

2633 2634 2635 2636 2637
static int mac80211_hwsim_tx_last_beacon(struct ieee80211_hw *hw)
{
	return 1;
}

2638 2639 2640 2641 2642 2643 2644 2645 2646 2647
#define HWSIM_COMMON_OPS					\
	.tx = mac80211_hwsim_tx,				\
	.start = mac80211_hwsim_start,				\
	.stop = mac80211_hwsim_stop,				\
	.add_interface = mac80211_hwsim_add_interface,		\
	.change_interface = mac80211_hwsim_change_interface,	\
	.remove_interface = mac80211_hwsim_remove_interface,	\
	.config = mac80211_hwsim_config,			\
	.configure_filter = mac80211_hwsim_configure_filter,	\
	.bss_info_changed = mac80211_hwsim_bss_info_changed,	\
2648
	.tx_last_beacon = mac80211_hwsim_tx_last_beacon,	\
2649 2650 2651 2652 2653 2654 2655 2656 2657 2658 2659 2660 2661 2662 2663
	.sta_add = mac80211_hwsim_sta_add,			\
	.sta_remove = mac80211_hwsim_sta_remove,		\
	.sta_notify = mac80211_hwsim_sta_notify,		\
	.set_tim = mac80211_hwsim_set_tim,			\
	.conf_tx = mac80211_hwsim_conf_tx,			\
	.get_survey = mac80211_hwsim_get_survey,		\
	CFG80211_TESTMODE_CMD(mac80211_hwsim_testmode_cmd)	\
	.ampdu_action = mac80211_hwsim_ampdu_action,		\
	.flush = mac80211_hwsim_flush,				\
	.get_tsf = mac80211_hwsim_get_tsf,			\
	.set_tsf = mac80211_hwsim_set_tsf,			\
	.get_et_sset_count = mac80211_hwsim_get_et_sset_count,	\
	.get_et_stats = mac80211_hwsim_get_et_stats,		\
	.get_et_strings = mac80211_hwsim_get_et_strings,

2664
static const struct ieee80211_ops mac80211_hwsim_ops = {
2665
	HWSIM_COMMON_OPS
2666 2667
	.sw_scan_start = mac80211_hwsim_sw_scan,
	.sw_scan_complete = mac80211_hwsim_sw_scan_complete,
2668 2669
};

2670 2671 2672 2673 2674 2675 2676 2677 2678 2679 2680 2681 2682 2683
static const struct ieee80211_ops mac80211_hwsim_mchan_ops = {
	HWSIM_COMMON_OPS
	.hw_scan = mac80211_hwsim_hw_scan,
	.cancel_hw_scan = mac80211_hwsim_cancel_hw_scan,
	.sw_scan_start = NULL,
	.sw_scan_complete = NULL,
	.remain_on_channel = mac80211_hwsim_roc,
	.cancel_remain_on_channel = mac80211_hwsim_croc,
	.add_chanctx = mac80211_hwsim_add_chanctx,
	.remove_chanctx = mac80211_hwsim_remove_chanctx,
	.change_chanctx = mac80211_hwsim_change_chanctx,
	.assign_vif_chanctx = mac80211_hwsim_assign_vif_chanctx,
	.unassign_vif_chanctx = mac80211_hwsim_unassign_vif_chanctx,
};
2684

2685 2686 2687 2688 2689 2690 2691 2692 2693 2694
struct hwsim_new_radio_params {
	unsigned int channels;
	const char *reg_alpha2;
	const struct ieee80211_regdomain *regd;
	bool reg_strict;
	bool p2p_device;
	bool use_chanctx;
	bool destroy_on_close;
	const char *hwname;
	bool no_vif;
2695
	const u8 *perm_addr;
2696
	u32 iftypes;
2697 2698
	u32 *ciphers;
	u8 n_ciphers;
2699 2700 2701 2702 2703 2704
};

static void hwsim_mcast_config_msg(struct sk_buff *mcast_skb,
				   struct genl_info *info)
{
	if (info)
J
Jiri Benc 已提交
2705 2706
		genl_notify(&hwsim_genl_family, mcast_skb, info,
			    HWSIM_MCGRP_CONFIG, GFP_KERNEL);
2707 2708 2709 2710 2711
	else
		genlmsg_multicast(&hwsim_genl_family, mcast_skb, 0,
				  HWSIM_MCGRP_CONFIG, GFP_KERNEL);
}

2712 2713
static int append_radio_msg(struct sk_buff *skb, int id,
			    struct hwsim_new_radio_params *param)
2714 2715 2716 2717 2718
{
	int ret;

	ret = nla_put_u32(skb, HWSIM_ATTR_RADIO_ID, id);
	if (ret < 0)
2719
		return ret;
2720 2721 2722 2723

	if (param->channels) {
		ret = nla_put_u32(skb, HWSIM_ATTR_CHANNELS, param->channels);
		if (ret < 0)
2724
			return ret;
2725 2726 2727 2728 2729 2730
	}

	if (param->reg_alpha2) {
		ret = nla_put(skb, HWSIM_ATTR_REG_HINT_ALPHA2, 2,
			      param->reg_alpha2);
		if (ret < 0)
2731
			return ret;
2732 2733 2734 2735 2736
	}

	if (param->regd) {
		int i;

2737 2738 2739
		for (i = 0; i < ARRAY_SIZE(hwsim_world_regdom_custom); i++) {
			if (hwsim_world_regdom_custom[i] != param->regd)
				continue;
2740 2741 2742

			ret = nla_put_u32(skb, HWSIM_ATTR_REG_CUSTOM_REG, i);
			if (ret < 0)
2743
				return ret;
2744
			break;
2745 2746 2747 2748 2749 2750
		}
	}

	if (param->reg_strict) {
		ret = nla_put_flag(skb, HWSIM_ATTR_REG_STRICT_REG);
		if (ret < 0)
2751
			return ret;
2752 2753 2754 2755 2756
	}

	if (param->p2p_device) {
		ret = nla_put_flag(skb, HWSIM_ATTR_SUPPORT_P2P_DEVICE);
		if (ret < 0)
2757
			return ret;
2758 2759 2760 2761 2762
	}

	if (param->use_chanctx) {
		ret = nla_put_flag(skb, HWSIM_ATTR_USE_CHANCTX);
		if (ret < 0)
2763
			return ret;
2764 2765 2766 2767 2768 2769
	}

	if (param->hwname) {
		ret = nla_put(skb, HWSIM_ATTR_RADIO_NAME,
			      strlen(param->hwname), param->hwname);
		if (ret < 0)
2770
			return ret;
2771 2772
	}

2773
	return 0;
2774 2775
}

2776
static void hwsim_mcast_new_radio(int id, struct genl_info *info,
2777 2778 2779
				  struct hwsim_new_radio_params *param)
{
	struct sk_buff *mcast_skb;
2780
	void *data;
2781

2782
	mcast_skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
2783 2784 2785
	if (!mcast_skb)
		return;

2786 2787 2788 2789 2790 2791 2792 2793 2794 2795
	data = genlmsg_put(mcast_skb, 0, 0, &hwsim_genl_family, 0,
			   HWSIM_CMD_NEW_RADIO);
	if (!data)
		goto out_err;

	if (append_radio_msg(mcast_skb, id, param) < 0)
		goto out_err;

	genlmsg_end(mcast_skb, data);

2796
	hwsim_mcast_config_msg(mcast_skb, info);
2797 2798 2799 2800
	return;

out_err:
	nlmsg_free(mcast_skb);
2801 2802
}

2803 2804 2805 2806 2807 2808 2809 2810 2811 2812 2813 2814 2815 2816 2817 2818 2819 2820
static const struct ieee80211_sband_iftype_data he_capa_2ghz[] = {
	{
		.types_mask = BIT(NL80211_IFTYPE_STATION) |
			      BIT(NL80211_IFTYPE_AP),
		.he_cap = {
			.has_he = true,
			.he_cap_elem = {
				.mac_cap_info[0] =
					IEEE80211_HE_MAC_CAP0_HTC_HE,
				.mac_cap_info[1] =
					IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US |
					IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8,
				.mac_cap_info[2] =
					IEEE80211_HE_MAC_CAP2_BSR |
					IEEE80211_HE_MAC_CAP2_MU_CASCADING |
					IEEE80211_HE_MAC_CAP2_ACK_EN,
				.mac_cap_info[3] =
					IEEE80211_HE_MAC_CAP3_OMI_CONTROL |
2821
					IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3,
2822
				.mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU,
2823 2824 2825 2826 2827 2828 2829 2830 2831 2832 2833 2834 2835 2836 2837 2838 2839 2840 2841 2842 2843 2844 2845 2846 2847
				.phy_cap_info[1] =
					IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK |
					IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A |
					IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD |
					IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS,
				.phy_cap_info[2] =
					IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US |
					IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ |
					IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ |
					IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO |
					IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO,

				/* Leave all the other PHY capability bytes
				 * unset, as DCM, beam forming, RU and PPE
				 * threshold information are not supported
				 */
			},
			.he_mcs_nss_supp = {
				.rx_mcs_80 = cpu_to_le16(0xfffa),
				.tx_mcs_80 = cpu_to_le16(0xfffa),
				.rx_mcs_160 = cpu_to_le16(0xffff),
				.tx_mcs_160 = cpu_to_le16(0xffff),
				.rx_mcs_80p80 = cpu_to_le16(0xffff),
				.tx_mcs_80p80 = cpu_to_le16(0xffff),
			},
I
Ilan Peer 已提交
2848
		},
2849 2850 2851 2852 2853 2854 2855 2856 2857 2858 2859 2860 2861 2862 2863
	},
#ifdef CONFIG_MAC80211_MESH
	{
		.types_mask = BIT(NL80211_IFTYPE_MESH_POINT),
		.he_cap = {
			.has_he = true,
			.he_cap_elem = {
				.mac_cap_info[0] =
					IEEE80211_HE_MAC_CAP0_HTC_HE,
				.mac_cap_info[1] =
					IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8,
				.mac_cap_info[2] =
					IEEE80211_HE_MAC_CAP2_ACK_EN,
				.mac_cap_info[3] =
					IEEE80211_HE_MAC_CAP3_OMI_CONTROL |
2864
					IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3,
2865
				.mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU,
2866 2867 2868 2869 2870 2871 2872 2873 2874 2875 2876 2877 2878 2879 2880 2881 2882 2883 2884 2885
				.phy_cap_info[1] =
					IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK |
					IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A |
					IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD |
					IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS,
				.phy_cap_info[2] = 0,

				/* Leave all the other PHY capability bytes
				 * unset, as DCM, beam forming, RU and PPE
				 * threshold information are not supported
				 */
			},
			.he_mcs_nss_supp = {
				.rx_mcs_80 = cpu_to_le16(0xfffa),
				.tx_mcs_80 = cpu_to_le16(0xfffa),
				.rx_mcs_160 = cpu_to_le16(0xffff),
				.tx_mcs_160 = cpu_to_le16(0xffff),
				.rx_mcs_80p80 = cpu_to_le16(0xffff),
				.tx_mcs_80p80 = cpu_to_le16(0xffff),
			},
I
Ilan Peer 已提交
2886 2887
		},
	},
2888
#endif
I
Ilan Peer 已提交
2889 2890
};

2891 2892 2893 2894 2895 2896 2897 2898 2899 2900 2901 2902 2903 2904 2905 2906 2907 2908 2909
static const struct ieee80211_sband_iftype_data he_capa_5ghz[] = {
	{
		/* TODO: should we support other types, e.g., P2P?*/
		.types_mask = BIT(NL80211_IFTYPE_STATION) |
			      BIT(NL80211_IFTYPE_AP),
		.he_cap = {
			.has_he = true,
			.he_cap_elem = {
				.mac_cap_info[0] =
					IEEE80211_HE_MAC_CAP0_HTC_HE,
				.mac_cap_info[1] =
					IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US |
					IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8,
				.mac_cap_info[2] =
					IEEE80211_HE_MAC_CAP2_BSR |
					IEEE80211_HE_MAC_CAP2_MU_CASCADING |
					IEEE80211_HE_MAC_CAP2_ACK_EN,
				.mac_cap_info[3] =
					IEEE80211_HE_MAC_CAP3_OMI_CONTROL |
2910
					IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3,
2911
				.mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU,
2912 2913 2914 2915 2916 2917 2918 2919 2920 2921 2922 2923 2924 2925 2926 2927 2928 2929 2930 2931 2932 2933 2934 2935 2936 2937 2938 2939 2940
				.phy_cap_info[0] =
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G |
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G |
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G,
				.phy_cap_info[1] =
					IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK |
					IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A |
					IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD |
					IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS,
				.phy_cap_info[2] =
					IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US |
					IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ |
					IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ |
					IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO |
					IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO,

				/* Leave all the other PHY capability bytes
				 * unset, as DCM, beam forming, RU and PPE
				 * threshold information are not supported
				 */
			},
			.he_mcs_nss_supp = {
				.rx_mcs_80 = cpu_to_le16(0xfffa),
				.tx_mcs_80 = cpu_to_le16(0xfffa),
				.rx_mcs_160 = cpu_to_le16(0xfffa),
				.tx_mcs_160 = cpu_to_le16(0xfffa),
				.rx_mcs_80p80 = cpu_to_le16(0xfffa),
				.tx_mcs_80p80 = cpu_to_le16(0xfffa),
			},
I
Ilan Peer 已提交
2941
		},
2942 2943 2944 2945 2946 2947 2948 2949 2950 2951 2952 2953 2954 2955 2956 2957
	},
#ifdef CONFIG_MAC80211_MESH
	{
		/* TODO: should we support other types, e.g., IBSS?*/
		.types_mask = BIT(NL80211_IFTYPE_MESH_POINT),
		.he_cap = {
			.has_he = true,
			.he_cap_elem = {
				.mac_cap_info[0] =
					IEEE80211_HE_MAC_CAP0_HTC_HE,
				.mac_cap_info[1] =
					IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8,
				.mac_cap_info[2] =
					IEEE80211_HE_MAC_CAP2_ACK_EN,
				.mac_cap_info[3] =
					IEEE80211_HE_MAC_CAP3_OMI_CONTROL |
2958
					IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3,
2959
				.mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU,
2960 2961 2962 2963 2964 2965 2966 2967 2968 2969 2970 2971 2972 2973 2974 2975 2976 2977 2978 2979 2980 2981 2982 2983
				.phy_cap_info[0] =
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G |
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G |
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G,
				.phy_cap_info[1] =
					IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK |
					IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A |
					IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD |
					IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS,
				.phy_cap_info[2] = 0,

				/* Leave all the other PHY capability bytes
				 * unset, as DCM, beam forming, RU and PPE
				 * threshold information are not supported
				 */
			},
			.he_mcs_nss_supp = {
				.rx_mcs_80 = cpu_to_le16(0xfffa),
				.tx_mcs_80 = cpu_to_le16(0xfffa),
				.rx_mcs_160 = cpu_to_le16(0xfffa),
				.tx_mcs_160 = cpu_to_le16(0xfffa),
				.rx_mcs_80p80 = cpu_to_le16(0xfffa),
				.tx_mcs_80p80 = cpu_to_le16(0xfffa),
			},
I
Ilan Peer 已提交
2984 2985
		},
	},
2986
#endif
I
Ilan Peer 已提交
2987 2988
};

2989 2990 2991 2992 2993 2994 2995 2996 2997 2998 2999 3000 3001 3002 3003 3004 3005 3006 3007 3008 3009 3010 3011 3012 3013 3014 3015 3016 3017 3018 3019 3020 3021 3022 3023 3024 3025 3026 3027 3028 3029 3030 3031 3032 3033 3034 3035 3036 3037 3038 3039 3040 3041 3042 3043 3044 3045 3046 3047 3048 3049 3050 3051 3052 3053 3054 3055 3056 3057 3058 3059 3060 3061 3062 3063 3064 3065 3066 3067 3068 3069 3070 3071 3072 3073 3074 3075 3076 3077 3078 3079 3080 3081 3082 3083 3084 3085 3086 3087 3088 3089 3090 3091 3092 3093 3094 3095 3096 3097 3098 3099 3100 3101 3102 3103 3104
static const struct ieee80211_sband_iftype_data he_capa_6ghz[] = {
	{
		/* TODO: should we support other types, e.g., P2P?*/
		.types_mask = BIT(NL80211_IFTYPE_STATION) |
			      BIT(NL80211_IFTYPE_AP),
		.he_6ghz_capa = {
			.capa = cpu_to_le16(IEEE80211_HE_6GHZ_CAP_MIN_MPDU_START |
					    IEEE80211_HE_6GHZ_CAP_MAX_AMPDU_LEN_EXP |
					    IEEE80211_HE_6GHZ_CAP_MAX_MPDU_LEN |
					    IEEE80211_HE_6GHZ_CAP_SM_PS |
					    IEEE80211_HE_6GHZ_CAP_RD_RESPONDER |
					    IEEE80211_HE_6GHZ_CAP_TX_ANTPAT_CONS |
					    IEEE80211_HE_6GHZ_CAP_RX_ANTPAT_CONS),
		},
		.he_cap = {
			.has_he = true,
			.he_cap_elem = {
				.mac_cap_info[0] =
					IEEE80211_HE_MAC_CAP0_HTC_HE,
				.mac_cap_info[1] =
					IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US |
					IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8,
				.mac_cap_info[2] =
					IEEE80211_HE_MAC_CAP2_BSR |
					IEEE80211_HE_MAC_CAP2_MU_CASCADING |
					IEEE80211_HE_MAC_CAP2_ACK_EN,
				.mac_cap_info[3] =
					IEEE80211_HE_MAC_CAP3_OMI_CONTROL |
					IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3,
				.mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU,
				.phy_cap_info[0] =
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G |
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G |
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G,
				.phy_cap_info[1] =
					IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK |
					IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A |
					IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD |
					IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS,
				.phy_cap_info[2] =
					IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US |
					IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ |
					IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ |
					IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO |
					IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO,

				/* Leave all the other PHY capability bytes
				 * unset, as DCM, beam forming, RU and PPE
				 * threshold information are not supported
				 */
			},
			.he_mcs_nss_supp = {
				.rx_mcs_80 = cpu_to_le16(0xfffa),
				.tx_mcs_80 = cpu_to_le16(0xfffa),
				.rx_mcs_160 = cpu_to_le16(0xfffa),
				.tx_mcs_160 = cpu_to_le16(0xfffa),
				.rx_mcs_80p80 = cpu_to_le16(0xfffa),
				.tx_mcs_80p80 = cpu_to_le16(0xfffa),
			},
		},
	},
#ifdef CONFIG_MAC80211_MESH
	{
		/* TODO: should we support other types, e.g., IBSS?*/
		.types_mask = BIT(NL80211_IFTYPE_MESH_POINT),
		.he_6ghz_capa = {
			.capa = cpu_to_le16(IEEE80211_HE_6GHZ_CAP_MIN_MPDU_START |
					    IEEE80211_HE_6GHZ_CAP_MAX_AMPDU_LEN_EXP |
					    IEEE80211_HE_6GHZ_CAP_MAX_MPDU_LEN |
					    IEEE80211_HE_6GHZ_CAP_SM_PS |
					    IEEE80211_HE_6GHZ_CAP_RD_RESPONDER |
					    IEEE80211_HE_6GHZ_CAP_TX_ANTPAT_CONS |
					    IEEE80211_HE_6GHZ_CAP_RX_ANTPAT_CONS),
		},
		.he_cap = {
			.has_he = true,
			.he_cap_elem = {
				.mac_cap_info[0] =
					IEEE80211_HE_MAC_CAP0_HTC_HE,
				.mac_cap_info[1] =
					IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8,
				.mac_cap_info[2] =
					IEEE80211_HE_MAC_CAP2_ACK_EN,
				.mac_cap_info[3] =
					IEEE80211_HE_MAC_CAP3_OMI_CONTROL |
					IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3,
				.mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU,
				.phy_cap_info[0] =
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G |
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G |
					IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G,
				.phy_cap_info[1] =
					IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK |
					IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A |
					IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD |
					IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS,
				.phy_cap_info[2] = 0,

				/* Leave all the other PHY capability bytes
				 * unset, as DCM, beam forming, RU and PPE
				 * threshold information are not supported
				 */
			},
			.he_mcs_nss_supp = {
				.rx_mcs_80 = cpu_to_le16(0xfffa),
				.tx_mcs_80 = cpu_to_le16(0xfffa),
				.rx_mcs_160 = cpu_to_le16(0xfffa),
				.tx_mcs_160 = cpu_to_le16(0xfffa),
				.rx_mcs_80p80 = cpu_to_le16(0xfffa),
				.tx_mcs_80p80 = cpu_to_le16(0xfffa),
			},
		},
	},
#endif
};

3105
static void mac80211_hwsim_he_capab(struct ieee80211_supported_band *sband)
I
Ilan Peer 已提交
3106
{
3107 3108 3109 3110
	u16 n_iftype_data;

	if (sband->band == NL80211_BAND_2GHZ) {
		n_iftype_data = ARRAY_SIZE(he_capa_2ghz);
I
Ilan Peer 已提交
3111
		sband->iftype_data =
3112 3113 3114
			(struct ieee80211_sband_iftype_data *)he_capa_2ghz;
	} else if (sband->band == NL80211_BAND_5GHZ) {
		n_iftype_data = ARRAY_SIZE(he_capa_5ghz);
I
Ilan Peer 已提交
3115
		sband->iftype_data =
3116
			(struct ieee80211_sband_iftype_data *)he_capa_5ghz;
3117 3118 3119 3120
	} else if (sband->band == NL80211_BAND_6GHZ) {
		n_iftype_data = ARRAY_SIZE(he_capa_6ghz);
		sband->iftype_data =
			(struct ieee80211_sband_iftype_data *)he_capa_6ghz;
3121
	} else {
I
Ilan Peer 已提交
3122
		return;
3123
	}
I
Ilan Peer 已提交
3124

3125
	sband->n_iftype_data = n_iftype_data;
I
Ilan Peer 已提交
3126 3127
}

3128 3129 3130 3131 3132 3133 3134 3135 3136 3137 3138 3139 3140 3141 3142 3143 3144 3145 3146
#ifdef CONFIG_MAC80211_MESH
#define HWSIM_MESH_BIT BIT(NL80211_IFTYPE_MESH_POINT)
#else
#define HWSIM_MESH_BIT 0
#endif

#define HWSIM_DEFAULT_IF_LIMIT \
	(BIT(NL80211_IFTYPE_STATION) | \
	 BIT(NL80211_IFTYPE_P2P_CLIENT) | \
	 BIT(NL80211_IFTYPE_AP) | \
	 BIT(NL80211_IFTYPE_P2P_GO) | \
	 HWSIM_MESH_BIT)

#define HWSIM_IFTYPE_SUPPORT_MASK \
	(BIT(NL80211_IFTYPE_STATION) | \
	 BIT(NL80211_IFTYPE_AP) | \
	 BIT(NL80211_IFTYPE_P2P_CLIENT) | \
	 BIT(NL80211_IFTYPE_P2P_GO) | \
	 BIT(NL80211_IFTYPE_ADHOC) | \
R
Ramon Fontes 已提交
3147 3148
	 BIT(NL80211_IFTYPE_MESH_POINT) | \
	 BIT(NL80211_IFTYPE_OCB))
3149

3150 3151
static int mac80211_hwsim_new_radio(struct genl_info *info,
				    struct hwsim_new_radio_params *param)
3152
{
3153 3154
	int err;
	u8 addr[ETH_ALEN];
3155
	struct mac80211_hwsim_data *data;
3156
	struct ieee80211_hw *hw;
3157
	enum nl80211_band band;
3158
	const struct ieee80211_ops *ops = &mac80211_hwsim_ops;
3159
	struct net *net;
3160
	int idx, i;
3161
	int n_limits = 0;
3162

3163
	if (WARN_ON(param->channels > 1 && !param->use_chanctx))
3164 3165
		return -EINVAL;

3166
	spin_lock_bh(&hwsim_radio_lock);
3167
	idx = hwsim_radio_idx++;
3168 3169
	spin_unlock_bh(&hwsim_radio_lock);

3170
	if (param->use_chanctx)
3171
		ops = &mac80211_hwsim_mchan_ops;
3172
	hw = ieee80211_alloc_hw_nm(sizeof(*data), ops, param->hwname);
3173
	if (!hw) {
3174
		pr_debug("mac80211_hwsim: ieee80211_alloc_hw failed\n");
3175 3176 3177
		err = -ENOMEM;
		goto failed;
	}
3178

3179 3180 3181
	/* ieee80211_alloc_hw_nm may have used a default name */
	param->hwname = wiphy_name(hw->wiphy);

3182 3183 3184 3185 3186 3187
	if (info)
		net = genl_info_net(info);
	else
		net = &init_net;
	wiphy_net_set(hw->wiphy, net);

3188 3189
	data = hw->priv;
	data->hw = hw;
3190

3191 3192 3193 3194 3195 3196 3197 3198 3199 3200 3201
	data->dev = device_create(hwsim_class, NULL, 0, hw, "hwsim%d", idx);
	if (IS_ERR(data->dev)) {
		printk(KERN_DEBUG
		       "mac80211_hwsim: device_create failed (%ld)\n",
		       PTR_ERR(data->dev));
		err = -ENOMEM;
		goto failed_drvdata;
	}
	data->dev->driver = &mac80211_hwsim_driver.driver;
	err = device_bind_driver(data->dev);
	if (err != 0) {
3202
		pr_debug("mac80211_hwsim: device_bind_driver failed (%d)\n",
3203
		       err);
3204
		goto failed_bind;
3205 3206
	}

3207
	skb_queue_head_init(&data->pending);
3208

3209
	SET_IEEE80211_DEV(hw, data->dev);
3210 3211 3212 3213 3214 3215 3216 3217
	if (!param->perm_addr) {
		eth_zero_addr(addr);
		addr[0] = 0x02;
		addr[3] = idx >> 8;
		addr[4] = idx;
		memcpy(data->addresses[0].addr, addr, ETH_ALEN);
		/* Why need here second address ? */
		memcpy(data->addresses[1].addr, addr, ETH_ALEN);
3218
		data->addresses[1].addr[0] |= 0x40;
3219 3220 3221 3222 3223 3224 3225 3226 3227 3228
		hw->wiphy->n_addresses = 2;
		hw->wiphy->addresses = data->addresses;
		/* possible address clash is checked at hash table insertion */
	} else {
		memcpy(data->addresses[0].addr, param->perm_addr, ETH_ALEN);
		/* compatibility with automatically generated mac addr */
		memcpy(data->addresses[1].addr, param->perm_addr, ETH_ALEN);
		hw->wiphy->n_addresses = 2;
		hw->wiphy->addresses = data->addresses;
	}
3229

3230 3231
	data->channels = param->channels;
	data->use_chanctx = param->use_chanctx;
3232
	data->idx = idx;
3233 3234 3235
	data->destroy_on_close = param->destroy_on_close;
	if (info)
		data->portid = info->snd_portid;
3236

3237 3238 3239 3240 3241 3242 3243 3244 3245 3246 3247 3248 3249 3250 3251 3252 3253 3254 3255 3256 3257 3258 3259 3260 3261 3262
	/* setup interface limits, only on interface types we support */
	if (param->iftypes & BIT(NL80211_IFTYPE_ADHOC)) {
		data->if_limits[n_limits].max = 1;
		data->if_limits[n_limits].types = BIT(NL80211_IFTYPE_ADHOC);
		n_limits++;
	}

	if (param->iftypes & HWSIM_DEFAULT_IF_LIMIT) {
		data->if_limits[n_limits].max = 2048;
		/*
		 * For this case, we may only support a subset of
		 * HWSIM_DEFAULT_IF_LIMIT, therefore we only want to add the
		 * bits that both param->iftype & HWSIM_DEFAULT_IF_LIMIT have.
		 */
		data->if_limits[n_limits].types =
					HWSIM_DEFAULT_IF_LIMIT & param->iftypes;
		n_limits++;
	}

	if (param->iftypes & BIT(NL80211_IFTYPE_P2P_DEVICE)) {
		data->if_limits[n_limits].max = 1;
		data->if_limits[n_limits].types =
						BIT(NL80211_IFTYPE_P2P_DEVICE);
		n_limits++;
	}

3263
	if (data->use_chanctx) {
3264 3265 3266
		hw->wiphy->max_scan_ssids = 255;
		hw->wiphy->max_scan_ie_len = IEEE80211_MAX_DATA_LEN;
		hw->wiphy->max_remain_on_channel_duration = 1000;
3267
		data->if_combination.radar_detect_widths = 0;
3268
		data->if_combination.num_different_channels = data->channels;
3269
		data->chanctx = NULL;
3270
	} else {
3271 3272
		data->if_combination.num_different_channels = 1;
		data->if_combination.radar_detect_widths =
3273 3274
					BIT(NL80211_CHAN_WIDTH_5) |
					BIT(NL80211_CHAN_WIDTH_10) |
3275 3276 3277 3278 3279
					BIT(NL80211_CHAN_WIDTH_20_NOHT) |
					BIT(NL80211_CHAN_WIDTH_20) |
					BIT(NL80211_CHAN_WIDTH_40) |
					BIT(NL80211_CHAN_WIDTH_80) |
					BIT(NL80211_CHAN_WIDTH_160);
3280 3281
	}

3282 3283 3284 3285 3286
	if (!n_limits) {
		err = -EINVAL;
		goto failed_hw;
	}

3287 3288 3289 3290 3291
	data->if_combination.max_interfaces = 0;
	for (i = 0; i < n_limits; i++)
		data->if_combination.max_interfaces +=
			data->if_limits[i].max;

3292
	data->if_combination.n_limits = n_limits;
3293 3294
	data->if_combination.limits = data->if_limits;

3295 3296 3297 3298 3299 3300 3301 3302 3303
	/*
	 * If we actually were asked to support combinations,
	 * advertise them - if there's only a single thing like
	 * only IBSS then don't advertise it as combinations.
	 */
	if (data->if_combination.max_interfaces > 1) {
		hw->wiphy->iface_combinations = &data->if_combination;
		hw->wiphy->n_iface_combinations = 1;
	}
3304

3305 3306 3307 3308 3309
	if (param->ciphers) {
		memcpy(data->ciphers, param->ciphers,
		       param->n_ciphers * sizeof(u32));
		hw->wiphy->cipher_suites = data->ciphers;
		hw->wiphy->n_cipher_suites = param->n_ciphers;
3310
	}
3311

3312
	INIT_DELAYED_WORK(&data->roc_start, hw_roc_start);
3313 3314
	INIT_DELAYED_WORK(&data->roc_done, hw_roc_done);
	INIT_DELAYED_WORK(&data->hw_scan, hw_scan_work);
3315

3316 3317
	hw->queues = 5;
	hw->offchannel_tx_hw_queue = 4;
3318

3319 3320 3321 3322 3323 3324 3325 3326
	ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
	ieee80211_hw_set(hw, CHANCTX_STA_CSA);
	ieee80211_hw_set(hw, SUPPORTS_HT_CCK_RATES);
	ieee80211_hw_set(hw, QUEUE_CONTROL);
	ieee80211_hw_set(hw, WANT_MONITOR_VIF);
	ieee80211_hw_set(hw, AMPDU_AGGREGATION);
	ieee80211_hw_set(hw, MFP_CAPABLE);
	ieee80211_hw_set(hw, SIGNAL_DBM);
3327
	ieee80211_hw_set(hw, SUPPORTS_PS);
3328 3329 3330
	ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
	ieee80211_hw_set(hw, HOST_BROADCAST_PS_BUFFERING);
	ieee80211_hw_set(hw, PS_NULLFUNC_STACK);
3331
	ieee80211_hw_set(hw, TDLS_WIDER_BW);
3332
	if (rctbl)
3333
		ieee80211_hw_set(hw, SUPPORTS_RC_TABLE);
3334
	ieee80211_hw_set(hw, SUPPORTS_MULTI_BSSID);
3335

3336
	hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
3337 3338
	hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS |
			    WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL |
3339
			    WIPHY_FLAG_AP_UAPSD |
3340
			    WIPHY_FLAG_SUPPORTS_5_10_MHZ |
3341
			    WIPHY_FLAG_HAS_CHANNEL_SWITCH;
3342 3343 3344
	hw->wiphy->features |= NL80211_FEATURE_ACTIVE_MONITOR |
			       NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE |
			       NL80211_FEATURE_STATIC_SMPS |
3345 3346
			       NL80211_FEATURE_DYNAMIC_SMPS |
			       NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
3347
	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_VHT_IBSS);
3348
	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_BEACON_PROTECTION);
3349 3350
	wiphy_ext_feature_set(hw->wiphy,
			      NL80211_EXT_FEATURE_MULTICAST_REGISTRATIONS);
3351 3352
	wiphy_ext_feature_set(hw->wiphy,
			      NL80211_EXT_FEATURE_BEACON_RATE_LEGACY);
3353

3354 3355
	hw->wiphy->interface_modes = param->iftypes;

3356 3357 3358 3359
	/* ask mac80211 to reserve space for magic */
	hw->vif_data_size = sizeof(struct hwsim_vif_priv);
	hw->sta_data_size = sizeof(struct hwsim_sta_priv);
	hw->chanctx_data_size = sizeof(struct hwsim_chanctx_priv);
3360

3361 3362 3363 3364
	memcpy(data->channels_2ghz, hwsim_channels_2ghz,
		sizeof(hwsim_channels_2ghz));
	memcpy(data->channels_5ghz, hwsim_channels_5ghz,
		sizeof(hwsim_channels_5ghz));
R
Ramon Fontes 已提交
3365 3366
	memcpy(data->channels_6ghz, hwsim_channels_6ghz,
		sizeof(hwsim_channels_6ghz));
3367 3368
	memcpy(data->channels_s1g, hwsim_channels_s1g,
	       sizeof(hwsim_channels_s1g));
3369
	memcpy(data->rates, hwsim_rates, sizeof(hwsim_rates));
3370

3371
	for (band = NL80211_BAND_2GHZ; band < NUM_NL80211_BANDS; band++) {
3372
		struct ieee80211_supported_band *sband = &data->bands[band];
I
Ilan Peer 已提交
3373 3374 3375

		sband->band = band;

3376
		switch (band) {
3377
		case NL80211_BAND_2GHZ:
3378 3379 3380 3381 3382
			sband->channels = data->channels_2ghz;
			sband->n_channels = ARRAY_SIZE(hwsim_channels_2ghz);
			sband->bitrates = data->rates;
			sband->n_bitrates = ARRAY_SIZE(hwsim_rates);
			break;
3383
		case NL80211_BAND_5GHZ:
3384 3385 3386 3387
			sband->channels = data->channels_5ghz;
			sband->n_channels = ARRAY_SIZE(hwsim_channels_5ghz);
			sband->bitrates = data->rates + 4;
			sband->n_bitrates = ARRAY_SIZE(hwsim_rates) - 4;
3388 3389 3390 3391 3392 3393 3394 3395 3396 3397 3398 3399

			sband->vht_cap.vht_supported = true;
			sband->vht_cap.cap =
				IEEE80211_VHT_CAP_MAX_MPDU_LENGTH_11454 |
				IEEE80211_VHT_CAP_SUPP_CHAN_WIDTH_160_80PLUS80MHZ |
				IEEE80211_VHT_CAP_RXLDPC |
				IEEE80211_VHT_CAP_SHORT_GI_80 |
				IEEE80211_VHT_CAP_SHORT_GI_160 |
				IEEE80211_VHT_CAP_TXSTBC |
				IEEE80211_VHT_CAP_RXSTBC_4 |
				IEEE80211_VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_MASK;
			sband->vht_cap.vht_mcs.rx_mcs_map =
3400 3401
				cpu_to_le16(IEEE80211_VHT_MCS_SUPPORT_0_9 << 0 |
					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 2 |
3402
					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 4 |
3403 3404
					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 6 |
					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 8 |
3405 3406
					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 10 |
					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 12 |
3407
					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 14);
3408 3409
			sband->vht_cap.vht_mcs.tx_mcs_map =
				sband->vht_cap.vht_mcs.rx_mcs_map;
3410
			break;
3411 3412 3413 3414 3415 3416
		case NL80211_BAND_6GHZ:
			sband->channels = data->channels_6ghz;
			sband->n_channels = ARRAY_SIZE(hwsim_channels_6ghz);
			sband->bitrates = data->rates + 4;
			sband->n_bitrates = ARRAY_SIZE(hwsim_rates) - 4;
			break;
3417 3418 3419 3420 3421 3422
		case NL80211_BAND_S1GHZ:
			memcpy(&sband->s1g_cap, &hwsim_s1g_cap,
			       sizeof(sband->s1g_cap));
			sband->channels = data->channels_s1g;
			sband->n_channels = ARRAY_SIZE(hwsim_channels_s1g);
			break;
3423 3424 3425
		default:
			continue;
		}
3426

3427 3428 3429 3430 3431 3432 3433 3434 3435 3436 3437 3438 3439 3440 3441
		if (band != NL80211_BAND_6GHZ){
			sband->ht_cap.ht_supported = true;
			sband->ht_cap.cap = IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
					    IEEE80211_HT_CAP_GRN_FLD |
					    IEEE80211_HT_CAP_SGI_20 |
					    IEEE80211_HT_CAP_SGI_40 |
					    IEEE80211_HT_CAP_DSSSCCK40;
			sband->ht_cap.ampdu_factor = 0x3;
			sband->ht_cap.ampdu_density = 0x6;
			memset(&sband->ht_cap.mcs, 0,
			       sizeof(sband->ht_cap.mcs));
			sband->ht_cap.mcs.rx_mask[0] = 0xff;
			sband->ht_cap.mcs.rx_mask[1] = 0xff;
			sband->ht_cap.mcs.tx_params = IEEE80211_HT_MCS_TX_DEFINED;
		}
3442

3443
		mac80211_hwsim_he_capab(sband);
I
Ilan Peer 已提交
3444

3445 3446
		hw->wiphy->bands[band] = sband;
	}
3447

3448 3449 3450
	/* By default all radios belong to the first group */
	data->group = 1;
	mutex_init(&data->mutex);
3451

3452
	data->netgroup = hwsim_net_get_netgroup(net);
3453
	data->wmediumd = hwsim_net_get_wmediumd(net);
3454

3455 3456 3457
	/* Enable frame retransmissions for lossy channels */
	hw->max_rates = 4;
	hw->max_rate_tries = 11;
3458

3459 3460 3461 3462 3463 3464
	hw->wiphy->vendor_commands = mac80211_hwsim_vendor_commands;
	hw->wiphy->n_vendor_commands =
		ARRAY_SIZE(mac80211_hwsim_vendor_commands);
	hw->wiphy->vendor_events = mac80211_hwsim_vendor_events;
	hw->wiphy->n_vendor_events = ARRAY_SIZE(mac80211_hwsim_vendor_events);

3465
	if (param->reg_strict)
3466
		hw->wiphy->regulatory_flags |= REGULATORY_STRICT_REG;
3467
	if (param->regd) {
3468
		data->regd = param->regd;
3469
		hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG;
3470
		wiphy_apply_custom_regulatory(hw->wiphy, param->regd);
3471 3472 3473
		/* give the regulatory workqueue a chance to run */
		schedule_timeout_interruptible(1);
	}
3474

3475
	if (param->no_vif)
3476
		ieee80211_hw_set(hw, NO_AUTO_VIF);
3477

3478 3479
	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_CQM_RSSI_LIST);

3480 3481 3482
	hrtimer_init(&data->beacon_timer, CLOCK_MONOTONIC,
		     HRTIMER_MODE_ABS_SOFT);
	data->beacon_timer.function = mac80211_hwsim_beacon;
3483

3484 3485
	err = ieee80211_register_hw(hw);
	if (err < 0) {
3486
		pr_debug("mac80211_hwsim: ieee80211_register_hw failed (%d)\n",
3487 3488 3489
		       err);
		goto failed_hw;
	}
3490

3491
	wiphy_dbg(hw->wiphy, "hwaddr %pM registered\n", hw->wiphy->perm_addr);
3492

3493 3494 3495
	if (param->reg_alpha2) {
		data->alpha2[0] = param->reg_alpha2[0];
		data->alpha2[1] = param->reg_alpha2[1];
3496
		regulatory_hint(hw->wiphy, param->reg_alpha2);
3497
	}
3498

3499 3500 3501 3502
	data->debugfs = debugfs_create_dir("hwsim", hw->wiphy->debugfsdir);
	debugfs_create_file("ps", 0666, data->debugfs, data, &hwsim_fops_ps);
	debugfs_create_file("group", 0666, data->debugfs, data,
			    &hwsim_fops_group);
3503
	if (!data->use_chanctx)
3504 3505 3506
		debugfs_create_file("dfs_simulate_radar", 0222,
				    data->debugfs,
				    data, &hwsim_simulate_radar);
3507

3508
	spin_lock_bh(&hwsim_radio_lock);
3509 3510 3511
	err = rhashtable_insert_fast(&hwsim_radios_rht, &data->rht,
				     hwsim_rht_params);
	if (err < 0) {
3512 3513 3514 3515 3516
		if (info) {
			GENL_SET_ERR_MSG(info, "perm addr already present");
			NL_SET_BAD_ATTR(info->extack,
					info->attrs[HWSIM_ATTR_PERM_ADDR]);
		}
3517 3518 3519 3520
		spin_unlock_bh(&hwsim_radio_lock);
		goto failed_final_insert;
	}

3521
	list_add_tail(&data->list, &hwsim_radios);
3522
	hwsim_radios_generation++;
3523
	spin_unlock_bh(&hwsim_radio_lock);
3524

3525
	hwsim_mcast_new_radio(idx, info, param);
3526

3527
	return idx;
3528

3529 3530 3531
failed_final_insert:
	debugfs_remove_recursive(data->debugfs);
	ieee80211_unregister_hw(data->hw);
3532
failed_hw:
3533 3534
	device_release_driver(data->dev);
failed_bind:
3535 3536 3537 3538 3539
	device_unregister(data->dev);
failed_drvdata:
	ieee80211_free_hw(hw);
failed:
	return err;
3540 3541
}

3542 3543
static void hwsim_mcast_del_radio(int id, const char *hwname,
				  struct genl_info *info)
3544
{
3545 3546 3547 3548 3549 3550 3551 3552 3553 3554 3555 3556 3557 3558 3559 3560 3561
	struct sk_buff *skb;
	void *data;
	int ret;

	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
	if (!skb)
		return;

	data = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0,
			   HWSIM_CMD_DEL_RADIO);
	if (!data)
		goto error;

	ret = nla_put_u32(skb, HWSIM_ATTR_RADIO_ID, id);
	if (ret < 0)
		goto error;

3562 3563 3564 3565
	ret = nla_put(skb, HWSIM_ATTR_RADIO_NAME, strlen(hwname),
		      hwname);
	if (ret < 0)
		goto error;
3566 3567 3568 3569 3570 3571 3572 3573 3574 3575 3576 3577 3578 3579 3580 3581

	genlmsg_end(skb, data);

	hwsim_mcast_config_msg(skb, info);

	return;

error:
	nlmsg_free(skb);
}

static void mac80211_hwsim_del_radio(struct mac80211_hwsim_data *data,
				     const char *hwname,
				     struct genl_info *info)
{
	hwsim_mcast_del_radio(data->idx, hwname, info);
3582 3583 3584 3585 3586
	debugfs_remove_recursive(data->debugfs);
	ieee80211_unregister_hw(data->hw);
	device_release_driver(data->dev);
	device_unregister(data->dev);
	ieee80211_free_hw(data->hw);
3587 3588
}

3589 3590 3591 3592 3593 3594 3595 3596 3597 3598 3599 3600 3601 3602 3603
static int mac80211_hwsim_get_radio(struct sk_buff *skb,
				    struct mac80211_hwsim_data *data,
				    u32 portid, u32 seq,
				    struct netlink_callback *cb, int flags)
{
	void *hdr;
	struct hwsim_new_radio_params param = { };
	int res = -EMSGSIZE;

	hdr = genlmsg_put(skb, portid, seq, &hwsim_genl_family, flags,
			  HWSIM_CMD_GET_RADIO);
	if (!hdr)
		return -EMSGSIZE;

	if (cb)
M
Michal Kubecek 已提交
3604
		genl_dump_check_consistent(cb, hdr);
3605

3606 3607 3608
	if (data->alpha2[0] && data->alpha2[1])
		param.reg_alpha2 = data->alpha2;

3609 3610 3611 3612 3613 3614 3615 3616 3617 3618 3619 3620 3621
	param.reg_strict = !!(data->hw->wiphy->regulatory_flags &
					REGULATORY_STRICT_REG);
	param.p2p_device = !!(data->hw->wiphy->interface_modes &
					BIT(NL80211_IFTYPE_P2P_DEVICE));
	param.use_chanctx = data->use_chanctx;
	param.regd = data->regd;
	param.channels = data->channels;
	param.hwname = wiphy_name(data->hw->wiphy);

	res = append_radio_msg(skb, data->idx, &param);
	if (res < 0)
		goto out_err;

3622 3623
	genlmsg_end(skb, hdr);
	return 0;
3624 3625 3626 3627 3628 3629

out_err:
	genlmsg_cancel(skb, hdr);
	return res;
}

3630
static void mac80211_hwsim_free(void)
3631
{
3632
	struct mac80211_hwsim_data *data;
3633

3634 3635 3636 3637 3638 3639
	spin_lock_bh(&hwsim_radio_lock);
	while ((data = list_first_entry_or_null(&hwsim_radios,
						struct mac80211_hwsim_data,
						list))) {
		list_del(&data->list);
		spin_unlock_bh(&hwsim_radio_lock);
3640 3641
		mac80211_hwsim_del_radio(data, wiphy_name(data->hw->wiphy),
					 NULL);
3642
		spin_lock_bh(&hwsim_radio_lock);
3643
	}
3644 3645
	spin_unlock_bh(&hwsim_radio_lock);
	class_destroy(hwsim_class);
3646 3647
}

3648 3649 3650 3651 3652
static const struct net_device_ops hwsim_netdev_ops = {
	.ndo_start_xmit 	= hwsim_mon_xmit,
	.ndo_set_mac_address 	= eth_mac_addr,
	.ndo_validate_addr	= eth_validate_addr,
};
D
Daniel Wagner 已提交
3653

3654
static void hwsim_mon_setup(struct net_device *dev)
D
Daniel Wagner 已提交
3655
{
3656 3657
	u8 addr[ETH_ALEN];

3658
	dev->netdev_ops = &hwsim_netdev_ops;
3659
	dev->needs_free_netdev = true;
3660
	ether_setup(dev);
3661
	dev->priv_flags |= IFF_NO_QUEUE;
3662
	dev->type = ARPHRD_IEEE80211_RADIOTAP;
3663 3664 3665
	eth_zero_addr(addr);
	addr[0] = 0x12;
	eth_hw_addr_set(dev, addr);
D
Daniel Wagner 已提交
3666 3667
}

3668
static struct mac80211_hwsim_data *get_hwsim_data_ref_from_addr(const u8 *addr)
3669
{
3670 3671 3672
	return rhashtable_lookup_fast(&hwsim_radios_rht,
				      addr,
				      hwsim_rht_params);
3673 3674
}

3675 3676 3677 3678 3679 3680 3681 3682 3683 3684 3685 3686 3687 3688
static void hwsim_register_wmediumd(struct net *net, u32 portid)
{
	struct mac80211_hwsim_data *data;

	hwsim_net_set_wmediumd(net, portid);

	spin_lock_bh(&hwsim_radio_lock);
	list_for_each_entry(data, &hwsim_radios, list) {
		if (data->netgroup == hwsim_net_get_netgroup(net))
			data->wmediumd = portid;
	}
	spin_unlock_bh(&hwsim_radio_lock);
}

3689 3690 3691 3692 3693 3694 3695 3696
static int hwsim_tx_info_frame_received_nl(struct sk_buff *skb_2,
					   struct genl_info *info)
{

	struct ieee80211_hdr *hdr;
	struct mac80211_hwsim_data *data2;
	struct ieee80211_tx_info *txi;
	struct hwsim_tx_rate *tx_attempts;
3697
	u64 ret_skb_cookie;
3698
	struct sk_buff *skb, *tmp;
3699
	const u8 *src;
3700 3701 3702 3703 3704
	unsigned int hwsim_flags;
	int i;
	bool found = false;

	if (!info->attrs[HWSIM_ATTR_ADDR_TRANSMITTER] ||
3705 3706
	    !info->attrs[HWSIM_ATTR_FLAGS] ||
	    !info->attrs[HWSIM_ATTR_COOKIE] ||
3707
	    !info->attrs[HWSIM_ATTR_SIGNAL] ||
3708
	    !info->attrs[HWSIM_ATTR_TX_INFO])
3709 3710
		goto out;

3711
	src = (void *)nla_data(info->attrs[HWSIM_ATTR_ADDR_TRANSMITTER]);
3712
	hwsim_flags = nla_get_u32(info->attrs[HWSIM_ATTR_FLAGS]);
3713
	ret_skb_cookie = nla_get_u64(info->attrs[HWSIM_ATTR_COOKIE]);
3714 3715

	data2 = get_hwsim_data_ref_from_addr(src);
3716
	if (!data2)
3717 3718
		goto out;

3719 3720 3721 3722
	if (!hwsim_virtio_enabled) {
		if (hwsim_net_get_netgroup(genl_info_net(info)) !=
		    data2->netgroup)
			goto out;
3723

3724 3725 3726
		if (info->snd_portid != data2->wmediumd)
			goto out;
	}
3727

3728 3729
	/* look for the skb matching the cookie passed back from user */
	skb_queue_walk_safe(&data2->pending, skb, tmp) {
3730 3731 3732 3733 3734 3735
		u64 skb_cookie;

		txi = IEEE80211_SKB_CB(skb);
		skb_cookie = (u64)(uintptr_t)txi->rate_driver_data[0];

		if (skb_cookie == ret_skb_cookie) {
3736 3737 3738 3739 3740 3741 3742 3743 3744 3745 3746 3747 3748 3749 3750 3751 3752 3753 3754 3755 3756 3757 3758 3759 3760 3761 3762 3763 3764 3765 3766 3767
			skb_unlink(skb, &data2->pending);
			found = true;
			break;
		}
	}

	/* not found */
	if (!found)
		goto out;

	/* Tx info received because the frame was broadcasted on user space,
	 so we get all the necessary info: tx attempts and skb control buff */

	tx_attempts = (struct hwsim_tx_rate *)nla_data(
		       info->attrs[HWSIM_ATTR_TX_INFO]);

	/* now send back TX status */
	txi = IEEE80211_SKB_CB(skb);

	ieee80211_tx_info_clear_status(txi);

	for (i = 0; i < IEEE80211_TX_MAX_RATES; i++) {
		txi->status.rates[i].idx = tx_attempts[i].idx;
		txi->status.rates[i].count = tx_attempts[i].count;
	}

	txi->status.ack_signal = nla_get_u32(info->attrs[HWSIM_ATTR_SIGNAL]);

	if (!(hwsim_flags & HWSIM_TX_CTL_NO_ACK) &&
	   (hwsim_flags & HWSIM_TX_STAT_ACK)) {
		if (skb->len >= 16) {
			hdr = (struct ieee80211_hdr *) skb->data;
3768
			mac80211_hwsim_monitor_ack(data2->channel,
3769
						   hdr->addr2);
3770
		}
3771
		txi->flags |= IEEE80211_TX_STAT_ACK;
3772 3773 3774 3775 3776 3777 3778 3779 3780 3781 3782
	}
	ieee80211_tx_status_irqsafe(data2->hw, skb);
	return 0;
out:
	return -EINVAL;

}

static int hwsim_cloned_frame_received_nl(struct sk_buff *skb_2,
					  struct genl_info *info)
{
3783
	struct mac80211_hwsim_data *data2;
3784
	struct ieee80211_rx_status rx_status;
3785
	struct ieee80211_hdr *hdr;
3786
	const u8 *dst;
3787
	int frame_data_len;
3788
	void *frame_data;
3789
	struct sk_buff *skb = NULL;
3790
	struct ieee80211_channel *channel = NULL;
3791 3792

	if (!info->attrs[HWSIM_ATTR_ADDR_RECEIVER] ||
3793 3794 3795
	    !info->attrs[HWSIM_ATTR_FRAME] ||
	    !info->attrs[HWSIM_ATTR_RX_RATE] ||
	    !info->attrs[HWSIM_ATTR_SIGNAL])
3796 3797
		goto out;

3798
	dst = (void *)nla_data(info->attrs[HWSIM_ATTR_ADDR_RECEIVER]);
3799
	frame_data_len = nla_len(info->attrs[HWSIM_ATTR_FRAME]);
3800
	frame_data = (void *)nla_data(info->attrs[HWSIM_ATTR_FRAME]);
3801 3802 3803 3804 3805 3806

	/* Allocate new skb here */
	skb = alloc_skb(frame_data_len, GFP_KERNEL);
	if (skb == NULL)
		goto err;

3807
	if (frame_data_len > IEEE80211_MAX_DATA_LEN)
3808 3809
		goto err;

3810
	/* Copy the data */
3811
	skb_put_data(skb, frame_data, frame_data_len);
3812

3813 3814
	data2 = get_hwsim_data_ref_from_addr(dst);
	if (!data2)
3815 3816
		goto out;

3817 3818 3819 3820 3821 3822 3823 3824 3825 3826 3827
	if (data2->use_chanctx) {
		if (data2->tmp_chan)
			channel = data2->tmp_chan;
		else if (data2->chanctx)
			channel = data2->chanctx->def.chan;
	} else {
		channel = data2->channel;
	}
	if (!channel)
		goto out;

3828 3829 3830 3831
	if (!hwsim_virtio_enabled) {
		if (hwsim_net_get_netgroup(genl_info_net(info)) !=
		    data2->netgroup)
			goto out;
3832

3833 3834 3835
		if (info->snd_portid != data2->wmediumd)
			goto out;
	}
3836

3837 3838
	/* check if radio is configured properly */

3839
	if ((data2->idle && !data2->tmp_chan) || !data2->started)
3840 3841
		goto out;

3842
	/* A frame is received from user space */
3843
	memset(&rx_status, 0, sizeof(rx_status));
3844 3845 3846 3847 3848 3849 3850 3851
	if (info->attrs[HWSIM_ATTR_FREQ]) {
		/* throw away off-channel packets, but allow both the temporary
		 * ("hw" scan/remain-on-channel) and regular channel, since the
		 * internal datapath also allows this
		 */
		mutex_lock(&data2->mutex);
		rx_status.freq = nla_get_u32(info->attrs[HWSIM_ATTR_FREQ]);

3852
		if (rx_status.freq != channel->center_freq) {
3853 3854 3855 3856 3857
			mutex_unlock(&data2->mutex);
			goto out;
		}
		mutex_unlock(&data2->mutex);
	} else {
3858
		rx_status.freq = channel->center_freq;
3859 3860
	}

3861
	rx_status.band = channel->band;
3862 3863 3864
	rx_status.rate_idx = nla_get_u32(info->attrs[HWSIM_ATTR_RX_RATE]);
	rx_status.signal = nla_get_u32(info->attrs[HWSIM_ATTR_SIGNAL]);

3865 3866 3867 3868 3869 3870
	hdr = (void *)skb->data;

	if (ieee80211_is_beacon(hdr->frame_control) ||
	    ieee80211_is_probe_resp(hdr->frame_control))
		rx_status.boottime_ns = ktime_get_boottime_ns();

3871
	memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status));
3872 3873
	data2->rx_pkts++;
	data2->rx_bytes += skb->len;
3874 3875 3876 3877
	ieee80211_rx_irqsafe(data2->hw, skb);

	return 0;
err:
3878
	pr_debug("mac80211_hwsim: error occurred in %s\n", __func__);
3879 3880 3881 3882 3883 3884 3885 3886
out:
	dev_kfree_skb(skb);
	return -EINVAL;
}

static int hwsim_register_received_nl(struct sk_buff *skb_2,
				      struct genl_info *info)
{
3887
	struct net *net = genl_info_net(info);
3888 3889 3890 3891 3892 3893 3894 3895 3896 3897 3898 3899 3900 3901 3902 3903
	struct mac80211_hwsim_data *data;
	int chans = 1;

	spin_lock_bh(&hwsim_radio_lock);
	list_for_each_entry(data, &hwsim_radios, list)
		chans = max(chans, data->channels);
	spin_unlock_bh(&hwsim_radio_lock);

	/* In the future we should revise the userspace API and allow it
	 * to set a flag that it does support multi-channel, then we can
	 * let this pass conditionally on the flag.
	 * For current userspace, prohibit it since it won't work right.
	 */
	if (chans > 1)
		return -EOPNOTSUPP;

3904
	if (hwsim_net_get_wmediumd(net))
3905
		return -EBUSY;
3906

3907
	hwsim_register_wmediumd(net, info->snd_portid);
3908

3909
	pr_debug("mac80211_hwsim: received a REGISTER, "
3910
	       "switching to wmediumd mode with pid %d\n", info->snd_portid);
3911 3912 3913 3914

	return 0;
}

3915 3916 3917 3918 3919 3920 3921 3922 3923 3924 3925 3926 3927 3928 3929 3930 3931 3932 3933 3934 3935 3936 3937
/* ensures ciphers only include ciphers listed in 'hwsim_ciphers' array */
static bool hwsim_known_ciphers(const u32 *ciphers, int n_ciphers)
{
	int i;

	for (i = 0; i < n_ciphers; i++) {
		int j;
		int found = 0;

		for (j = 0; j < ARRAY_SIZE(hwsim_ciphers); j++) {
			if (ciphers[i] == hwsim_ciphers[j]) {
				found = 1;
				break;
			}
		}

		if (!found)
			return false;
	}

	return true;
}

3938
static int hwsim_new_radio_nl(struct sk_buff *msg, struct genl_info *info)
3939
{
3940
	struct hwsim_new_radio_params param = { 0 };
3941
	const char *hwname = NULL;
3942
	int ret;
3943 3944 3945 3946 3947 3948

	param.reg_strict = info->attrs[HWSIM_ATTR_REG_STRICT_REG];
	param.p2p_device = info->attrs[HWSIM_ATTR_SUPPORT_P2P_DEVICE];
	param.channels = channels;
	param.destroy_on_close =
		info->attrs[HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE];
3949 3950

	if (info->attrs[HWSIM_ATTR_CHANNELS])
3951
		param.channels = nla_get_u32(info->attrs[HWSIM_ATTR_CHANNELS]);
3952

3953 3954 3955 3956 3957
	if (param.channels < 1) {
		GENL_SET_ERR_MSG(info, "must have at least one channel");
		return -EINVAL;
	}

3958
	if (info->attrs[HWSIM_ATTR_NO_VIF])
3959
		param.no_vif = true;
3960

3961
	if (info->attrs[HWSIM_ATTR_USE_CHANCTX])
3962
		param.use_chanctx = true;
3963
	else
3964
		param.use_chanctx = (param.channels > 1);
3965

3966
	if (info->attrs[HWSIM_ATTR_REG_HINT_ALPHA2])
3967 3968
		param.reg_alpha2 =
			nla_data(info->attrs[HWSIM_ATTR_REG_HINT_ALPHA2]);
3969 3970 3971 3972

	if (info->attrs[HWSIM_ATTR_REG_CUSTOM_REG]) {
		u32 idx = nla_get_u32(info->attrs[HWSIM_ATTR_REG_CUSTOM_REG]);

3973
		if (idx >= ARRAY_SIZE(hwsim_world_regdom_custom))
3974
			return -EINVAL;
3975 3976 3977

		idx = array_index_nospec(idx,
					 ARRAY_SIZE(hwsim_world_regdom_custom));
3978
		param.regd = hwsim_world_regdom_custom[idx];
3979 3980
	}

3981 3982 3983 3984 3985 3986 3987 3988 3989 3990 3991 3992
	if (info->attrs[HWSIM_ATTR_PERM_ADDR]) {
		if (!is_valid_ether_addr(
				nla_data(info->attrs[HWSIM_ATTR_PERM_ADDR]))) {
			GENL_SET_ERR_MSG(info,"MAC is no valid source addr");
			NL_SET_BAD_ATTR(info->extack,
					info->attrs[HWSIM_ATTR_PERM_ADDR]);
			return -EINVAL;
		}

		param.perm_addr = nla_data(info->attrs[HWSIM_ATTR_PERM_ADDR]);
	}

3993 3994 3995 3996 3997 3998 3999 4000 4001 4002 4003 4004 4005 4006 4007 4008 4009 4010 4011 4012 4013
	if (info->attrs[HWSIM_ATTR_IFTYPE_SUPPORT]) {
		param.iftypes =
			nla_get_u32(info->attrs[HWSIM_ATTR_IFTYPE_SUPPORT]);

		if (param.iftypes & ~HWSIM_IFTYPE_SUPPORT_MASK) {
			NL_SET_ERR_MSG_ATTR(info->extack,
					    info->attrs[HWSIM_ATTR_IFTYPE_SUPPORT],
					    "cannot support more iftypes than kernel");
			return -EINVAL;
		}
	} else {
		param.iftypes = HWSIM_IFTYPE_SUPPORT_MASK;
	}

	/* ensure both flag and iftype support is honored */
	if (param.p2p_device ||
	    param.iftypes & BIT(NL80211_IFTYPE_P2P_DEVICE)) {
		param.iftypes |= BIT(NL80211_IFTYPE_P2P_DEVICE);
		param.p2p_device = true;
	}

4014 4015 4016 4017 4018 4019 4020 4021 4022 4023 4024 4025 4026 4027 4028 4029 4030 4031 4032 4033 4034 4035 4036 4037 4038 4039 4040 4041 4042 4043
	if (info->attrs[HWSIM_ATTR_CIPHER_SUPPORT]) {
		u32 len = nla_len(info->attrs[HWSIM_ATTR_CIPHER_SUPPORT]);

		param.ciphers =
			nla_data(info->attrs[HWSIM_ATTR_CIPHER_SUPPORT]);

		if (len % sizeof(u32)) {
			NL_SET_ERR_MSG_ATTR(info->extack,
					    info->attrs[HWSIM_ATTR_CIPHER_SUPPORT],
					    "bad cipher list length");
			return -EINVAL;
		}

		param.n_ciphers = len / sizeof(u32);

		if (param.n_ciphers > ARRAY_SIZE(hwsim_ciphers)) {
			NL_SET_ERR_MSG_ATTR(info->extack,
					    info->attrs[HWSIM_ATTR_CIPHER_SUPPORT],
					    "too many ciphers specified");
			return -EINVAL;
		}

		if (!hwsim_known_ciphers(param.ciphers, param.n_ciphers)) {
			NL_SET_ERR_MSG_ATTR(info->extack,
					    info->attrs[HWSIM_ATTR_CIPHER_SUPPORT],
					    "unsupported ciphers specified");
			return -EINVAL;
		}
	}

4044
	if (info->attrs[HWSIM_ATTR_RADIO_NAME]) {
4045 4046 4047
		hwname = kstrndup((char *)nla_data(info->attrs[HWSIM_ATTR_RADIO_NAME]),
				  nla_len(info->attrs[HWSIM_ATTR_RADIO_NAME]),
				  GFP_KERNEL);
4048 4049 4050 4051 4052
		if (!hwname)
			return -ENOMEM;
		param.hwname = hwname;
	}

4053 4054 4055
	ret = mac80211_hwsim_new_radio(info, &param);
	kfree(hwname);
	return ret;
4056 4057
}

4058
static int hwsim_del_radio_nl(struct sk_buff *msg, struct genl_info *info)
4059 4060
{
	struct mac80211_hwsim_data *data;
4061 4062
	s64 idx = -1;
	const char *hwname = NULL;
4063

4064
	if (info->attrs[HWSIM_ATTR_RADIO_ID]) {
4065
		idx = nla_get_u32(info->attrs[HWSIM_ATTR_RADIO_ID]);
4066
	} else if (info->attrs[HWSIM_ATTR_RADIO_NAME]) {
4067 4068 4069
		hwname = kstrndup((char *)nla_data(info->attrs[HWSIM_ATTR_RADIO_NAME]),
				  nla_len(info->attrs[HWSIM_ATTR_RADIO_NAME]),
				  GFP_KERNEL);
4070 4071 4072
		if (!hwname)
			return -ENOMEM;
	} else
4073 4074 4075 4076
		return -EINVAL;

	spin_lock_bh(&hwsim_radio_lock);
	list_for_each_entry(data, &hwsim_radios, list) {
4077 4078 4079 4080
		if (idx >= 0) {
			if (data->idx != idx)
				continue;
		} else {
4081 4082
			if (!hwname ||
			    strcmp(hwname, wiphy_name(data->hw->wiphy)))
4083 4084 4085
				continue;
		}

4086 4087 4088
		if (!net_eq(wiphy_net(data->hw->wiphy), genl_info_net(info)))
			continue;

4089
		list_del(&data->list);
4090 4091
		rhashtable_remove_fast(&hwsim_radios_rht, &data->rht,
				       hwsim_rht_params);
4092
		hwsim_radios_generation++;
4093
		spin_unlock_bh(&hwsim_radio_lock);
4094 4095
		mac80211_hwsim_del_radio(data, wiphy_name(data->hw->wiphy),
					 info);
4096
		kfree(hwname);
4097 4098 4099 4100
		return 0;
	}
	spin_unlock_bh(&hwsim_radio_lock);

4101
	kfree(hwname);
4102
	return -ENODEV;
4103 4104
}

4105 4106 4107 4108 4109 4110 4111 4112 4113 4114 4115 4116 4117 4118 4119
static int hwsim_get_radio_nl(struct sk_buff *msg, struct genl_info *info)
{
	struct mac80211_hwsim_data *data;
	struct sk_buff *skb;
	int idx, res = -ENODEV;

	if (!info->attrs[HWSIM_ATTR_RADIO_ID])
		return -EINVAL;
	idx = nla_get_u32(info->attrs[HWSIM_ATTR_RADIO_ID]);

	spin_lock_bh(&hwsim_radio_lock);
	list_for_each_entry(data, &hwsim_radios, list) {
		if (data->idx != idx)
			continue;

4120 4121 4122
		if (!net_eq(wiphy_net(data->hw->wiphy), genl_info_net(info)))
			continue;

4123
		skb = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
4124 4125 4126 4127 4128 4129 4130 4131 4132 4133 4134 4135
		if (!skb) {
			res = -ENOMEM;
			goto out_err;
		}

		res = mac80211_hwsim_get_radio(skb, data, info->snd_portid,
					       info->snd_seq, NULL, 0);
		if (res < 0) {
			nlmsg_free(skb);
			goto out_err;
		}

4136
		res = genlmsg_reply(skb, info);
4137 4138 4139 4140 4141 4142 4143 4144 4145 4146 4147 4148
		break;
	}

out_err:
	spin_unlock_bh(&hwsim_radio_lock);

	return res;
}

static int hwsim_dump_radio_nl(struct sk_buff *skb,
			       struct netlink_callback *cb)
{
4149
	int last_idx = cb->args[0] - 1;
4150
	struct mac80211_hwsim_data *data = NULL;
4151 4152
	int res = 0;
	void *hdr;
4153 4154

	spin_lock_bh(&hwsim_radio_lock);
4155
	cb->seq = hwsim_radios_generation;
4156

4157
	if (last_idx >= hwsim_radio_idx-1)
4158 4159 4160
		goto done;

	list_for_each_entry(data, &hwsim_radios, list) {
4161
		if (data->idx <= last_idx)
4162 4163
			continue;

4164 4165 4166
		if (!net_eq(wiphy_net(data->hw->wiphy), sock_net(skb->sk)))
			continue;

4167 4168 4169 4170 4171 4172 4173
		res = mac80211_hwsim_get_radio(skb, data,
					       NETLINK_CB(cb->skb).portid,
					       cb->nlh->nlmsg_seq, cb,
					       NLM_F_MULTI);
		if (res < 0)
			break;

4174
		last_idx = data->idx;
4175 4176
	}

4177
	cb->args[0] = last_idx + 1;
4178 4179 4180 4181 4182 4183

	/* list changed, but no new element sent, set interrupted flag */
	if (skb->len == 0 && cb->prev_seq && cb->seq != cb->prev_seq) {
		hdr = genlmsg_put(skb, NETLINK_CB(cb->skb).portid,
				  cb->nlh->nlmsg_seq, &hwsim_genl_family,
				  NLM_F_MULTI, HWSIM_CMD_GET_RADIO);
4184 4185 4186 4187
		if (hdr) {
			genl_dump_check_consistent(cb, hdr);
			genlmsg_end(skb, hdr);
		} else {
4188
			res = -EMSGSIZE;
4189
		}
4190
	}
4191 4192 4193

done:
	spin_unlock_bh(&hwsim_radio_lock);
4194
	return res ?: skb->len;
4195 4196
}

4197
/* Generic Netlink operations array */
4198
static const struct genl_small_ops hwsim_ops[] = {
4199 4200
	{
		.cmd = HWSIM_CMD_REGISTER,
4201
		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
4202
		.doit = hwsim_register_received_nl,
4203
		.flags = GENL_UNS_ADMIN_PERM,
4204 4205 4206
	},
	{
		.cmd = HWSIM_CMD_FRAME,
4207
		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
4208 4209 4210 4211
		.doit = hwsim_cloned_frame_received_nl,
	},
	{
		.cmd = HWSIM_CMD_TX_INFO_FRAME,
4212
		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
4213 4214
		.doit = hwsim_tx_info_frame_received_nl,
	},
4215
	{
4216
		.cmd = HWSIM_CMD_NEW_RADIO,
4217
		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
4218
		.doit = hwsim_new_radio_nl,
4219
		.flags = GENL_UNS_ADMIN_PERM,
4220 4221
	},
	{
4222
		.cmd = HWSIM_CMD_DEL_RADIO,
4223
		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
4224
		.doit = hwsim_del_radio_nl,
4225
		.flags = GENL_UNS_ADMIN_PERM,
4226
	},
4227 4228
	{
		.cmd = HWSIM_CMD_GET_RADIO,
4229
		.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
4230 4231 4232
		.doit = hwsim_get_radio_nl,
		.dumpit = hwsim_dump_radio_nl,
	},
4233 4234
};

4235
static struct genl_family hwsim_genl_family __ro_after_init = {
4236 4237 4238
	.name = "MAC80211_HWSIM",
	.version = 1,
	.maxattr = HWSIM_ATTR_MAX,
4239
	.policy = hwsim_genl_policy,
4240 4241
	.netnsok = true,
	.module = THIS_MODULE,
4242 4243
	.small_ops = hwsim_ops,
	.n_small_ops = ARRAY_SIZE(hwsim_ops),
4244 4245 4246 4247
	.mcgrps = hwsim_mcgrps,
	.n_mcgrps = ARRAY_SIZE(hwsim_mcgrps),
};

4248 4249 4250
static void remove_user_radios(u32 portid)
{
	struct mac80211_hwsim_data *entry, *tmp;
4251
	LIST_HEAD(list);
4252 4253 4254 4255

	spin_lock_bh(&hwsim_radio_lock);
	list_for_each_entry_safe(entry, tmp, &hwsim_radios, list) {
		if (entry->destroy_on_close && entry->portid == portid) {
4256
			list_move(&entry->list, &list);
4257 4258
			rhashtable_remove_fast(&hwsim_radios_rht, &entry->rht,
					       hwsim_rht_params);
4259
			hwsim_radios_generation++;
4260 4261 4262
		}
	}
	spin_unlock_bh(&hwsim_radio_lock);
4263 4264 4265 4266 4267 4268

	list_for_each_entry_safe(entry, tmp, &list, list) {
		list_del(&entry->list);
		mac80211_hwsim_del_radio(entry, wiphy_name(entry->hw->wiphy),
					 NULL);
	}
4269 4270
}

4271 4272 4273 4274 4275 4276 4277 4278 4279
static int mac80211_hwsim_netlink_notify(struct notifier_block *nb,
					 unsigned long state,
					 void *_notify)
{
	struct netlink_notify *notify = _notify;

	if (state != NETLINK_URELEASE)
		return NOTIFY_DONE;

4280 4281
	remove_user_radios(notify->portid);

4282
	if (notify->portid == hwsim_net_get_wmediumd(notify->net)) {
4283 4284
		printk(KERN_INFO "mac80211_hwsim: wmediumd released netlink"
		       " socket, switching to perfect channel medium\n");
4285
		hwsim_register_wmediumd(notify->net, 0);
4286 4287 4288 4289 4290 4291 4292 4293 4294
	}
	return NOTIFY_DONE;

}

static struct notifier_block hwsim_netlink_notifier = {
	.notifier_call = mac80211_hwsim_netlink_notify,
};

4295
static int __init hwsim_init_netlink(void)
4296 4297
{
	int rc;
4298

4299 4300
	printk(KERN_INFO "mac80211_hwsim: initializing netlink\n");

4301
	rc = genl_register_family(&hwsim_genl_family);
4302 4303 4304 4305
	if (rc)
		goto failure;

	rc = netlink_register_notifier(&hwsim_netlink_notifier);
4306 4307
	if (rc) {
		genl_unregister_family(&hwsim_genl_family);
4308
		goto failure;
4309
	}
4310 4311 4312 4313

	return 0;

failure:
4314
	pr_debug("mac80211_hwsim: error occurred in %s\n", __func__);
4315 4316 4317
	return -EINVAL;
}

4318 4319
static __net_init int hwsim_init_net(struct net *net)
{
4320
	return hwsim_net_set_netgroup(net);
4321 4322 4323 4324 4325
}

static void __net_exit hwsim_exit_net(struct net *net)
{
	struct mac80211_hwsim_data *data, *tmp;
4326
	LIST_HEAD(list);
4327 4328 4329 4330 4331 4332 4333 4334 4335 4336

	spin_lock_bh(&hwsim_radio_lock);
	list_for_each_entry_safe(data, tmp, &hwsim_radios, list) {
		if (!net_eq(wiphy_net(data->hw->wiphy), net))
			continue;

		/* Radios created in init_net are returned to init_net. */
		if (data->netgroup == hwsim_net_get_netgroup(&init_net))
			continue;

4337
		list_move(&data->list, &list);
4338 4339
		rhashtable_remove_fast(&hwsim_radios_rht, &data->rht,
				       hwsim_rht_params);
4340
		hwsim_radios_generation++;
4341 4342 4343 4344 4345
	}
	spin_unlock_bh(&hwsim_radio_lock);

	list_for_each_entry_safe(data, tmp, &list, list) {
		list_del(&data->list);
4346 4347 4348
		mac80211_hwsim_del_radio(data,
					 wiphy_name(data->hw->wiphy),
					 NULL);
4349
	}
4350 4351

	ida_simple_remove(&hwsim_netgroup_ida, hwsim_net_get_netgroup(net));
4352 4353 4354 4355 4356 4357 4358 4359 4360
}

static struct pernet_operations hwsim_net_ops = {
	.init = hwsim_init_net,
	.exit = hwsim_exit_net,
	.id   = &hwsim_net_id,
	.size = sizeof(struct hwsim_net),
};

4361 4362 4363 4364 4365
static void hwsim_exit_netlink(void)
{
	/* unregister the notifier */
	netlink_unregister_notifier(&hwsim_netlink_notifier);
	/* unregister the family */
4366
	genl_unregister_family(&hwsim_genl_family);
4367 4368
}

4369 4370 4371 4372 4373 4374 4375 4376 4377 4378 4379 4380 4381 4382 4383 4384 4385 4386 4387 4388 4389 4390 4391 4392 4393 4394 4395 4396 4397 4398 4399 4400 4401 4402 4403 4404 4405 4406 4407 4408 4409 4410 4411 4412 4413 4414 4415 4416 4417 4418 4419 4420 4421 4422 4423 4424 4425 4426 4427 4428 4429 4430 4431 4432 4433 4434 4435 4436 4437 4438 4439 4440 4441 4442 4443
#if IS_REACHABLE(CONFIG_VIRTIO)
static void hwsim_virtio_tx_done(struct virtqueue *vq)
{
	unsigned int len;
	struct sk_buff *skb;
	unsigned long flags;

	spin_lock_irqsave(&hwsim_virtio_lock, flags);
	while ((skb = virtqueue_get_buf(vq, &len)))
		nlmsg_free(skb);
	spin_unlock_irqrestore(&hwsim_virtio_lock, flags);
}

static int hwsim_virtio_handle_cmd(struct sk_buff *skb)
{
	struct nlmsghdr *nlh;
	struct genlmsghdr *gnlh;
	struct nlattr *tb[HWSIM_ATTR_MAX + 1];
	struct genl_info info = {};
	int err;

	nlh = nlmsg_hdr(skb);
	gnlh = nlmsg_data(nlh);
	err = genlmsg_parse(nlh, &hwsim_genl_family, tb, HWSIM_ATTR_MAX,
			    hwsim_genl_policy, NULL);
	if (err) {
		pr_err_ratelimited("hwsim: genlmsg_parse returned %d\n", err);
		return err;
	}

	info.attrs = tb;

	switch (gnlh->cmd) {
	case HWSIM_CMD_FRAME:
		hwsim_cloned_frame_received_nl(skb, &info);
		break;
	case HWSIM_CMD_TX_INFO_FRAME:
		hwsim_tx_info_frame_received_nl(skb, &info);
		break;
	default:
		pr_err_ratelimited("hwsim: invalid cmd: %d\n", gnlh->cmd);
		return -EPROTO;
	}
	return 0;
}

static void hwsim_virtio_rx_work(struct work_struct *work)
{
	struct virtqueue *vq;
	unsigned int len;
	struct sk_buff *skb;
	struct scatterlist sg[1];
	int err;
	unsigned long flags;

	spin_lock_irqsave(&hwsim_virtio_lock, flags);
	if (!hwsim_virtio_enabled)
		goto out_unlock;

	skb = virtqueue_get_buf(hwsim_vqs[HWSIM_VQ_RX], &len);
	if (!skb)
		goto out_unlock;
	spin_unlock_irqrestore(&hwsim_virtio_lock, flags);

	skb->data = skb->head;
	skb_set_tail_pointer(skb, len);
	hwsim_virtio_handle_cmd(skb);

	spin_lock_irqsave(&hwsim_virtio_lock, flags);
	if (!hwsim_virtio_enabled) {
		nlmsg_free(skb);
		goto out_unlock;
	}
	vq = hwsim_vqs[HWSIM_VQ_RX];
	sg_init_one(sg, skb->head, skb_end_offset(skb));
4444
	err = virtqueue_add_inbuf(vq, sg, 1, skb, GFP_ATOMIC);
4445 4446 4447 4448 4449 4450 4451 4452 4453 4454 4455 4456 4457 4458 4459 4460 4461 4462 4463 4464 4465 4466 4467 4468 4469 4470 4471 4472 4473 4474 4475 4476 4477 4478 4479 4480 4481 4482 4483 4484 4485 4486 4487 4488 4489 4490 4491 4492 4493 4494 4495 4496 4497 4498 4499 4500
	if (WARN(err, "virtqueue_add_inbuf returned %d\n", err))
		nlmsg_free(skb);
	else
		virtqueue_kick(vq);
	schedule_work(&hwsim_virtio_rx);

out_unlock:
	spin_unlock_irqrestore(&hwsim_virtio_lock, flags);
}

static void hwsim_virtio_rx_done(struct virtqueue *vq)
{
	schedule_work(&hwsim_virtio_rx);
}

static int init_vqs(struct virtio_device *vdev)
{
	vq_callback_t *callbacks[HWSIM_NUM_VQS] = {
		[HWSIM_VQ_TX] = hwsim_virtio_tx_done,
		[HWSIM_VQ_RX] = hwsim_virtio_rx_done,
	};
	const char *names[HWSIM_NUM_VQS] = {
		[HWSIM_VQ_TX] = "tx",
		[HWSIM_VQ_RX] = "rx",
	};

	return virtio_find_vqs(vdev, HWSIM_NUM_VQS,
			       hwsim_vqs, callbacks, names, NULL);
}

static int fill_vq(struct virtqueue *vq)
{
	int i, err;
	struct sk_buff *skb;
	struct scatterlist sg[1];

	for (i = 0; i < virtqueue_get_vring_size(vq); i++) {
		skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
		if (!skb)
			return -ENOMEM;

		sg_init_one(sg, skb->head, skb_end_offset(skb));
		err = virtqueue_add_inbuf(vq, sg, 1, skb, GFP_KERNEL);
		if (err) {
			nlmsg_free(skb);
			return err;
		}
	}
	virtqueue_kick(vq);
	return 0;
}

static void remove_vqs(struct virtio_device *vdev)
{
	int i;

4501
	virtio_reset_device(vdev);
4502 4503 4504 4505 4506 4507 4508 4509 4510 4511 4512 4513 4514 4515 4516 4517 4518 4519 4520 4521 4522 4523 4524 4525 4526 4527 4528 4529 4530 4531 4532 4533 4534 4535 4536 4537 4538 4539 4540 4541 4542 4543 4544 4545 4546 4547 4548 4549 4550 4551 4552 4553 4554 4555 4556 4557 4558 4559 4560 4561 4562 4563 4564 4565 4566 4567 4568 4569 4570 4571 4572 4573 4574 4575 4576 4577 4578 4579 4580 4581 4582 4583 4584 4585 4586 4587 4588 4589

	for (i = 0; i < ARRAY_SIZE(hwsim_vqs); i++) {
		struct virtqueue *vq = hwsim_vqs[i];
		struct sk_buff *skb;

		while ((skb = virtqueue_detach_unused_buf(vq)))
			nlmsg_free(skb);
	}

	vdev->config->del_vqs(vdev);
}

static int hwsim_virtio_probe(struct virtio_device *vdev)
{
	int err;
	unsigned long flags;

	spin_lock_irqsave(&hwsim_virtio_lock, flags);
	if (hwsim_virtio_enabled) {
		spin_unlock_irqrestore(&hwsim_virtio_lock, flags);
		return -EEXIST;
	}
	spin_unlock_irqrestore(&hwsim_virtio_lock, flags);

	err = init_vqs(vdev);
	if (err)
		return err;

	err = fill_vq(hwsim_vqs[HWSIM_VQ_RX]);
	if (err)
		goto out_remove;

	spin_lock_irqsave(&hwsim_virtio_lock, flags);
	hwsim_virtio_enabled = true;
	spin_unlock_irqrestore(&hwsim_virtio_lock, flags);

	schedule_work(&hwsim_virtio_rx);
	return 0;

out_remove:
	remove_vqs(vdev);
	return err;
}

static void hwsim_virtio_remove(struct virtio_device *vdev)
{
	hwsim_virtio_enabled = false;

	cancel_work_sync(&hwsim_virtio_rx);

	remove_vqs(vdev);
}

/* MAC80211_HWSIM virtio device id table */
static const struct virtio_device_id id_table[] = {
	{ VIRTIO_ID_MAC80211_HWSIM, VIRTIO_DEV_ANY_ID },
	{ 0 }
};
MODULE_DEVICE_TABLE(virtio, id_table);

static struct virtio_driver virtio_hwsim = {
	.driver.name = KBUILD_MODNAME,
	.driver.owner = THIS_MODULE,
	.id_table = id_table,
	.probe = hwsim_virtio_probe,
	.remove = hwsim_virtio_remove,
};

static int hwsim_register_virtio_driver(void)
{
	return register_virtio_driver(&virtio_hwsim);
}

static void hwsim_unregister_virtio_driver(void)
{
	unregister_virtio_driver(&virtio_hwsim);
}
#else
static inline int hwsim_register_virtio_driver(void)
{
	return 0;
}

static inline void hwsim_unregister_virtio_driver(void)
{
}
#endif

4590 4591
static int __init init_mac80211_hwsim(void)
{
4592
	int i, err;
4593

4594
	if (radios < 0 || radios > 100)
4595 4596
		return -EINVAL;

4597 4598 4599
	if (channels < 1)
		return -EINVAL;

4600 4601
	err = rhashtable_init(&hwsim_radios_rht, &hwsim_rht_params);
	if (err)
4602
		return err;
4603

4604
	err = register_pernet_device(&hwsim_net_ops);
4605
	if (err)
4606
		goto out_free_rht;
4607

4608 4609 4610 4611
	err = platform_driver_register(&mac80211_hwsim_driver);
	if (err)
		goto out_unregister_pernet;

4612 4613 4614 4615
	err = hwsim_init_netlink();
	if (err)
		goto out_unregister_driver;

4616 4617 4618 4619
	err = hwsim_register_virtio_driver();
	if (err)
		goto out_exit_netlink;

4620
	hwsim_class = class_create(THIS_MODULE, "mac80211_hwsim");
4621 4622
	if (IS_ERR(hwsim_class)) {
		err = PTR_ERR(hwsim_class);
4623
		goto out_exit_virtio;
4624
	}
4625

4626 4627
	hwsim_init_s1g_channels(hwsim_channels_s1g);

4628
	for (i = 0; i < radios; i++) {
4629 4630 4631
		struct hwsim_new_radio_params param = { 0 };

		param.channels = channels;
4632

4633 4634
		switch (regtest) {
		case HWSIM_REGTEST_DIFF_COUNTRY:
4635
			if (i < ARRAY_SIZE(hwsim_alpha2s))
4636
				param.reg_alpha2 = hwsim_alpha2s[i];
4637 4638 4639
			break;
		case HWSIM_REGTEST_DRIVER_REG_FOLLOW:
			if (!i)
4640
				param.reg_alpha2 = hwsim_alpha2s[0];
4641 4642
			break;
		case HWSIM_REGTEST_STRICT_ALL:
4643
			param.reg_strict = true;
4644
			fallthrough;
4645
		case HWSIM_REGTEST_DRIVER_REG_ALL:
4646
			param.reg_alpha2 = hwsim_alpha2s[0];
4647
			break;
4648 4649
		case HWSIM_REGTEST_WORLD_ROAM:
			if (i == 0)
4650
				param.regd = &hwsim_world_regdom_custom_01;
4651 4652
			break;
		case HWSIM_REGTEST_CUSTOM_WORLD:
4653
			param.regd = &hwsim_world_regdom_custom_01;
4654
			break;
4655
		case HWSIM_REGTEST_CUSTOM_WORLD_2:
4656
			if (i == 0)
4657
				param.regd = &hwsim_world_regdom_custom_01;
4658
			else if (i == 1)
4659
				param.regd = &hwsim_world_regdom_custom_02;
4660 4661
			break;
		case HWSIM_REGTEST_STRICT_FOLLOW:
4662
			if (i == 0) {
4663 4664
				param.reg_strict = true;
				param.reg_alpha2 = hwsim_alpha2s[0];
4665
			}
4666 4667
			break;
		case HWSIM_REGTEST_STRICT_AND_DRIVER_REG:
4668
			if (i == 0) {
4669 4670
				param.reg_strict = true;
				param.reg_alpha2 = hwsim_alpha2s[0];
4671
			} else if (i == 1) {
4672
				param.reg_alpha2 = hwsim_alpha2s[1];
4673
			}
4674 4675
			break;
		case HWSIM_REGTEST_ALL:
4676 4677
			switch (i) {
			case 0:
4678
				param.regd = &hwsim_world_regdom_custom_01;
4679 4680
				break;
			case 1:
4681
				param.regd = &hwsim_world_regdom_custom_02;
4682 4683
				break;
			case 2:
4684
				param.reg_alpha2 = hwsim_alpha2s[0];
4685 4686
				break;
			case 3:
4687
				param.reg_alpha2 = hwsim_alpha2s[1];
4688 4689
				break;
			case 4:
4690 4691
				param.reg_strict = true;
				param.reg_alpha2 = hwsim_alpha2s[2];
4692 4693
				break;
			}
4694 4695 4696 4697 4698
			break;
		default:
			break;
		}

4699 4700
		param.p2p_device = support_p2p_device;
		param.use_chanctx = channels > 1;
4701
		param.iftypes = HWSIM_IFTYPE_SUPPORT_MASK;
4702 4703
		if (param.p2p_device)
			param.iftypes |= BIT(NL80211_IFTYPE_P2P_DEVICE);
4704 4705

		err = mac80211_hwsim_new_radio(NULL, &param);
4706
		if (err < 0)
4707
			goto out_free_radios;
4708 4709
	}

4710 4711
	hwsim_mon = alloc_netdev(0, "hwsim%d", NET_NAME_UNKNOWN,
				 hwsim_mon_setup);
4712 4713
	if (hwsim_mon == NULL) {
		err = -ENOMEM;
4714
		goto out_free_radios;
4715
	}
4716

4717 4718
	rtnl_lock();
	err = dev_alloc_name(hwsim_mon, hwsim_mon->name);
4719 4720
	if (err < 0) {
		rtnl_unlock();
4721
		goto out_free_mon;
4722
	}
4723 4724

	err = register_netdevice(hwsim_mon);
4725 4726 4727 4728
	if (err < 0) {
		rtnl_unlock();
		goto out_free_mon;
	}
4729 4730
	rtnl_unlock();

4731 4732
	return 0;

4733
out_free_mon:
4734
	free_netdev(hwsim_mon);
4735
out_free_radios:
4736
	mac80211_hwsim_free();
4737 4738
out_exit_virtio:
	hwsim_unregister_virtio_driver();
4739 4740
out_exit_netlink:
	hwsim_exit_netlink();
4741
out_unregister_driver:
4742
	platform_driver_unregister(&mac80211_hwsim_driver);
4743 4744
out_unregister_pernet:
	unregister_pernet_device(&hwsim_net_ops);
4745 4746
out_free_rht:
	rhashtable_destroy(&hwsim_radios_rht);
4747 4748
	return err;
}
4749
module_init(init_mac80211_hwsim);
4750 4751 4752

static void __exit exit_mac80211_hwsim(void)
{
4753
	pr_debug("mac80211_hwsim: unregister radios\n");
4754

4755
	hwsim_unregister_virtio_driver();
4756 4757
	hwsim_exit_netlink();

4758
	mac80211_hwsim_free();
4759

4760
	rhashtable_destroy(&hwsim_radios_rht);
4761
	unregister_netdev(hwsim_mon);
4762
	platform_driver_unregister(&mac80211_hwsim_driver);
4763
	unregister_pernet_device(&hwsim_net_ops);
4764 4765
}
module_exit(exit_mac80211_hwsim);