core.c 25.8 KB
Newer Older
1 2 3
/*
 * This is the linux wireless configuration interface.
 *
J
Johannes Berg 已提交
4
 * Copyright 2006-2010		Johannes Berg <johannes@sipsolutions.net>
5 6
 */

7 8
#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

9 10 11 12
#include <linux/if.h>
#include <linux/module.h>
#include <linux/err.h>
#include <linux/list.h>
13
#include <linux/slab.h>
14 15 16 17
#include <linux/nl80211.h>
#include <linux/debugfs.h>
#include <linux/notifier.h>
#include <linux/device.h>
18
#include <linux/etherdevice.h>
J
Johannes Berg 已提交
19
#include <linux/rtnetlink.h>
20
#include <linux/sched.h>
21 22
#include <net/genetlink.h>
#include <net/cfg80211.h>
23
#include "nl80211.h"
24 25
#include "core.h"
#include "sysfs.h"
26
#include "debugfs.h"
27
#include "wext-compat.h"
28
#include "ethtool.h"
29 30 31 32 33 34 35 36

/* name for sysfs, %d is appended */
#define PHY_NAME "phy"

MODULE_AUTHOR("Johannes Berg");
MODULE_LICENSE("GPL");
MODULE_DESCRIPTION("wireless configuration support");

J
Johannes Berg 已提交
37
/* RCU-protected (and cfg80211_mutex for writers) */
38
LIST_HEAD(cfg80211_rdev_list);
39
int cfg80211_rdev_list_generation;
40 41

DEFINE_MUTEX(cfg80211_mutex);
42 43 44 45

/* for debugfs */
static struct dentry *ieee80211_debugfs_dir;

46 47 48
/* for the cleanup, scan and event works */
struct workqueue_struct *cfg80211_wq;

49 50 51 52 53
static bool cfg80211_disable_40mhz_24ghz;
module_param(cfg80211_disable_40mhz_24ghz, bool, 0644);
MODULE_PARM_DESC(cfg80211_disable_40mhz_24ghz,
		 "Disable 40MHz support in the 2.4GHz band");

54
/* requires cfg80211_mutex to be held! */
55
struct cfg80211_registered_device *cfg80211_rdev_by_wiphy_idx(int wiphy_idx)
56
{
57
	struct cfg80211_registered_device *result = NULL, *rdev;
58

59 60 61
	if (!wiphy_idx_valid(wiphy_idx))
		return NULL;

62 63
	assert_cfg80211_lock();

64 65 66
	list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
		if (rdev->wiphy_idx == wiphy_idx) {
			result = rdev;
67 68 69 70 71 72 73
			break;
		}
	}

	return result;
}

74 75
int get_wiphy_idx(struct wiphy *wiphy)
{
76
	struct cfg80211_registered_device *rdev;
77 78
	if (!wiphy)
		return WIPHY_IDX_STALE;
79 80
	rdev = wiphy_to_dev(wiphy);
	return rdev->wiphy_idx;
81 82
}

83
/* requires cfg80211_rdev_mutex to be held! */
84 85
struct wiphy *wiphy_idx_to_wiphy(int wiphy_idx)
{
86
	struct cfg80211_registered_device *rdev;
87 88 89 90 91 92

	if (!wiphy_idx_valid(wiphy_idx))
		return NULL;

	assert_cfg80211_lock();

93 94
	rdev = cfg80211_rdev_by_wiphy_idx(wiphy_idx);
	if (!rdev)
95
		return NULL;
96
	return &rdev->wiphy;
97 98
}

99
/* requires cfg80211_mutex to be held! */
100
struct cfg80211_registered_device *
101
__cfg80211_rdev_from_info(struct genl_info *info)
102 103
{
	int ifindex;
104
	struct cfg80211_registered_device *bywiphyidx = NULL, *byifidx = NULL;
105 106 107
	struct net_device *dev;
	int err = -EINVAL;

108 109
	assert_cfg80211_lock();

110
	if (info->attrs[NL80211_ATTR_WIPHY]) {
111
		bywiphyidx = cfg80211_rdev_by_wiphy_idx(
112 113 114 115 116 117
				nla_get_u32(info->attrs[NL80211_ATTR_WIPHY]));
		err = -ENODEV;
	}

	if (info->attrs[NL80211_ATTR_IFINDEX]) {
		ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
118
		dev = dev_get_by_index(genl_info_net(info), ifindex);
119 120 121 122 123 124 125 126 127
		if (dev) {
			if (dev->ieee80211_ptr)
				byifidx =
					wiphy_to_dev(dev->ieee80211_ptr->wiphy);
			dev_put(dev);
		}
		err = -ENODEV;
	}

128 129
	if (bywiphyidx && byifidx) {
		if (bywiphyidx != byifidx)
130 131
			return ERR_PTR(-EINVAL);
		else
132
			return bywiphyidx; /* == byifidx */
133
	}
134 135
	if (bywiphyidx)
		return bywiphyidx;
136 137 138 139 140 141 142 143 144 145

	if (byifidx)
		return byifidx;

	return ERR_PTR(err);
}

struct cfg80211_registered_device *
cfg80211_get_dev_from_info(struct genl_info *info)
{
146
	struct cfg80211_registered_device *rdev;
147

148
	mutex_lock(&cfg80211_mutex);
149
	rdev = __cfg80211_rdev_from_info(info);
150 151 152 153

	/* if it is not an error we grab the lock on
	 * it to assure it won't be going away while
	 * we operate on it */
154 155
	if (!IS_ERR(rdev))
		mutex_lock(&rdev->mtx);
156

157
	mutex_unlock(&cfg80211_mutex);
158

159
	return rdev;
160 161 162
}

struct cfg80211_registered_device *
163
cfg80211_get_dev_from_ifindex(struct net *net, int ifindex)
164
{
165
	struct cfg80211_registered_device *rdev = ERR_PTR(-ENODEV);
166 167
	struct net_device *dev;

168
	mutex_lock(&cfg80211_mutex);
169
	dev = dev_get_by_index(net, ifindex);
170 171 172
	if (!dev)
		goto out;
	if (dev->ieee80211_ptr) {
173 174
		rdev = wiphy_to_dev(dev->ieee80211_ptr->wiphy);
		mutex_lock(&rdev->mtx);
175
	} else
176
		rdev = ERR_PTR(-ENODEV);
177 178
	dev_put(dev);
 out:
179
	mutex_unlock(&cfg80211_mutex);
180
	return rdev;
181 182
}

183
/* requires cfg80211_mutex to be held */
184 185 186
int cfg80211_dev_rename(struct cfg80211_registered_device *rdev,
			char *newname)
{
187
	struct cfg80211_registered_device *rdev2;
188
	int wiphy_idx, taken = -1, result, digits;
189

190
	assert_cfg80211_lock();
191

192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207
	/* prohibit calling the thing phy%d when %d is not its number */
	sscanf(newname, PHY_NAME "%d%n", &wiphy_idx, &taken);
	if (taken == strlen(newname) && wiphy_idx != rdev->wiphy_idx) {
		/* count number of places needed to print wiphy_idx */
		digits = 1;
		while (wiphy_idx /= 10)
			digits++;
		/*
		 * deny the name if it is phy<idx> where <idx> is printed
		 * without leading zeroes. taken == strlen(newname) here
		 */
		if (taken == strlen(PHY_NAME) + digits)
			return -EINVAL;
	}


208 209
	/* Ignore nop renames */
	if (strcmp(newname, dev_name(&rdev->wiphy.dev)) == 0)
210
		return 0;
211 212

	/* Ensure another device does not already have this name. */
213 214
	list_for_each_entry(rdev2, &cfg80211_rdev_list, list)
		if (strcmp(newname, dev_name(&rdev2->wiphy.dev)) == 0)
215
			return -EINVAL;
216 217 218

	result = device_rename(&rdev->wiphy.dev, newname);
	if (result)
219
		return result;
220

221 222
	if (rdev->wiphy.debugfsdir &&
	    !debugfs_rename(rdev->wiphy.debugfsdir->d_parent,
223 224 225
			    rdev->wiphy.debugfsdir,
			    rdev->wiphy.debugfsdir->d_parent,
			    newname))
226
		pr_err("failed to rename debugfs dir to %s!\n", newname);
227

228
	nl80211_notify_dev_rename(rdev);
229

230
	return 0;
231 232
}

233 234 235 236 237 238
int cfg80211_switch_netns(struct cfg80211_registered_device *rdev,
			  struct net *net)
{
	struct wireless_dev *wdev;
	int err = 0;

J
Johannes Berg 已提交
239
	if (!(rdev->wiphy.flags & WIPHY_FLAG_NETNS_OK))
240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261
		return -EOPNOTSUPP;

	list_for_each_entry(wdev, &rdev->netdev_list, list) {
		wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL;
		err = dev_change_net_namespace(wdev->netdev, net, "wlan%d");
		if (err)
			break;
		wdev->netdev->features |= NETIF_F_NETNS_LOCAL;
	}

	if (err) {
		/* failed -- clean up to old netns */
		net = wiphy_net(&rdev->wiphy);

		list_for_each_entry_continue_reverse(wdev, &rdev->netdev_list,
						     list) {
			wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL;
			err = dev_change_net_namespace(wdev->netdev, net,
							"wlan%d");
			WARN_ON(err);
			wdev->netdev->features |= NETIF_F_NETNS_LOCAL;
		}
262 263

		return err;
264 265 266 267
	}

	wiphy_net_set(&rdev->wiphy, net);

268 269 270 271
	err = device_rename(&rdev->wiphy.dev, dev_name(&rdev->wiphy.dev));
	WARN_ON(err);

	return 0;
272 273
}

J
Johannes Berg 已提交
274 275
static void cfg80211_rfkill_poll(struct rfkill *rfkill, void *data)
{
276
	struct cfg80211_registered_device *rdev = data;
J
Johannes Berg 已提交
277

278
	rdev->ops->rfkill_poll(&rdev->wiphy);
J
Johannes Berg 已提交
279 280 281 282
}

static int cfg80211_rfkill_set_block(void *data, bool blocked)
{
283
	struct cfg80211_registered_device *rdev = data;
J
Johannes Berg 已提交
284 285 286 287 288 289
	struct wireless_dev *wdev;

	if (!blocked)
		return 0;

	rtnl_lock();
290
	mutex_lock(&rdev->devlist_mtx);
J
Johannes Berg 已提交
291

292
	list_for_each_entry(wdev, &rdev->netdev_list, list)
J
Johannes Berg 已提交
293 294
		dev_close(wdev->netdev);

295
	mutex_unlock(&rdev->devlist_mtx);
J
Johannes Berg 已提交
296 297 298 299 300 301 302
	rtnl_unlock();

	return 0;
}

static void cfg80211_rfkill_sync_work(struct work_struct *work)
{
303
	struct cfg80211_registered_device *rdev;
J
Johannes Berg 已提交
304

305 306
	rdev = container_of(work, struct cfg80211_registered_device, rfkill_sync);
	cfg80211_rfkill_set_block(rdev, rfkill_blocked(rdev->rfkill));
J
Johannes Berg 已提交
307 308
}

J
Johannes Berg 已提交
309 310 311 312 313 314 315 316 317 318
static void cfg80211_event_work(struct work_struct *work)
{
	struct cfg80211_registered_device *rdev;

	rdev = container_of(work, struct cfg80211_registered_device,
			    event_work);

	rtnl_lock();
	cfg80211_lock_rdev(rdev);

319
	cfg80211_process_rdev_events(rdev);
J
Johannes Berg 已提交
320 321 322 323
	cfg80211_unlock_rdev(rdev);
	rtnl_unlock();
}

324 325
/* exported functions */

326
struct wiphy *wiphy_new(const struct cfg80211_ops *ops, int sizeof_priv)
327
{
328
	static int wiphy_counter;
329 330

	struct cfg80211_registered_device *rdev;
331 332
	int alloc_size;

333 334 335 336 337 338 339
	WARN_ON(ops->add_key && (!ops->del_key || !ops->set_default_key));
	WARN_ON(ops->auth && (!ops->assoc || !ops->deauth || !ops->disassoc));
	WARN_ON(ops->connect && !ops->disconnect);
	WARN_ON(ops->join_ibss && !ops->leave_ibss);
	WARN_ON(ops->add_virtual_intf && !ops->del_virtual_intf);
	WARN_ON(ops->add_station && !ops->del_station);
	WARN_ON(ops->add_mpath && !ops->del_mpath);
340
	WARN_ON(ops->join_mesh && !ops->leave_mesh);
341

342
	alloc_size = sizeof(*rdev) + sizeof_priv;
343

344 345
	rdev = kzalloc(alloc_size, GFP_KERNEL);
	if (!rdev)
346 347
		return NULL;

348
	rdev->ops = ops;
349

350
	mutex_lock(&cfg80211_mutex);
351

352
	rdev->wiphy_idx = wiphy_counter++;
353

354
	if (unlikely(!wiphy_idx_valid(rdev->wiphy_idx))) {
355
		wiphy_counter--;
356
		mutex_unlock(&cfg80211_mutex);
357
		/* ugh, wrapped! */
358
		kfree(rdev);
359 360 361
		return NULL;
	}

362
	mutex_unlock(&cfg80211_mutex);
363

364 365 366
	/* give it a proper name */
	dev_set_name(&rdev->wiphy.dev, PHY_NAME "%d", rdev->wiphy_idx);

367 368
	mutex_init(&rdev->mtx);
	mutex_init(&rdev->devlist_mtx);
369
	mutex_init(&rdev->sched_scan_mtx);
370 371 372 373
	INIT_LIST_HEAD(&rdev->netdev_list);
	spin_lock_init(&rdev->bss_lock);
	INIT_LIST_HEAD(&rdev->bss_list);
	INIT_WORK(&rdev->scan_done_wk, __cfg80211_scan_done);
374
	INIT_WORK(&rdev->sched_scan_results_wk, __cfg80211_sched_scan_results);
J
Johannes Berg 已提交
375 376 377 378
#ifdef CONFIG_CFG80211_WEXT
	rdev->wiphy.wext = &cfg80211_wext_handler;
#endif

379 380 381 382
	device_initialize(&rdev->wiphy.dev);
	rdev->wiphy.dev.class = &ieee80211_class;
	rdev->wiphy.dev.platform_data = rdev;

J
Johannes Berg 已提交
383 384 385
#ifdef CONFIG_CFG80211_DEFAULT_PS
	rdev->wiphy.flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
#endif
386

387 388
	wiphy_net_set(&rdev->wiphy, &init_net);

389 390 391 392 393 394 395
	rdev->rfkill_ops.set_block = cfg80211_rfkill_set_block;
	rdev->rfkill = rfkill_alloc(dev_name(&rdev->wiphy.dev),
				   &rdev->wiphy.dev, RFKILL_TYPE_WLAN,
				   &rdev->rfkill_ops, rdev);

	if (!rdev->rfkill) {
		kfree(rdev);
J
Johannes Berg 已提交
396 397 398
		return NULL;
	}

399 400 401
	INIT_WORK(&rdev->rfkill_sync, cfg80211_rfkill_sync_work);
	INIT_WORK(&rdev->conn_work, cfg80211_conn_work);
	INIT_WORK(&rdev->event_work, cfg80211_event_work);
J
Johannes Berg 已提交
402

403 404
	init_waitqueue_head(&rdev->dev_wait);

405 406 407 408 409
	/*
	 * Initialize wiphy parameters to IEEE 802.11 MIB default values.
	 * Fragmentation and RTS threshold are disabled by default with the
	 * special -1 value.
	 */
410 411 412 413
	rdev->wiphy.retry_short = 7;
	rdev->wiphy.retry_long = 4;
	rdev->wiphy.frag_threshold = (u32) -1;
	rdev->wiphy.rts_threshold = (u32) -1;
414
	rdev->wiphy.coverage_class = 0;
415

416
	return &rdev->wiphy;
417 418 419
}
EXPORT_SYMBOL(wiphy_new);

420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480
static int wiphy_verify_combinations(struct wiphy *wiphy)
{
	const struct ieee80211_iface_combination *c;
	int i, j;

	/* If we have combinations enforce them */
	if (wiphy->n_iface_combinations)
		wiphy->flags |= WIPHY_FLAG_ENFORCE_COMBINATIONS;

	for (i = 0; i < wiphy->n_iface_combinations; i++) {
		u32 cnt = 0;
		u16 all_iftypes = 0;

		c = &wiphy->iface_combinations[i];

		/* Combinations with just one interface aren't real */
		if (WARN_ON(c->max_interfaces < 2))
			return -EINVAL;

		/* Need at least one channel */
		if (WARN_ON(!c->num_different_channels))
			return -EINVAL;

		if (WARN_ON(!c->n_limits))
			return -EINVAL;

		for (j = 0; j < c->n_limits; j++) {
			u16 types = c->limits[j].types;

			/*
			 * interface types shouldn't overlap, this is
			 * used in cfg80211_can_change_interface()
			 */
			if (WARN_ON(types & all_iftypes))
				return -EINVAL;
			all_iftypes |= types;

			if (WARN_ON(!c->limits[j].max))
				return -EINVAL;

			/* Shouldn't list software iftypes in combinations! */
			if (WARN_ON(wiphy->software_iftypes & types))
				return -EINVAL;

			cnt += c->limits[j].max;
			/*
			 * Don't advertise an unsupported type
			 * in a combination.
			 */
			if (WARN_ON((wiphy->interface_modes & types) != types))
				return -EINVAL;
		}

		/* You can't even choose that many! */
		if (WARN_ON(cnt < c->max_interfaces))
			return -EINVAL;
	}

	return 0;
}

481 482
int wiphy_register(struct wiphy *wiphy)
{
483
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
484
	int res;
485 486 487 488
	enum ieee80211_band band;
	struct ieee80211_supported_band *sband;
	bool have_band = false;
	int i;
489 490
	u16 ifmodes = wiphy->interface_modes;

491 492 493 494 495 496 497 498 499 500 501 502
	if (WARN_ON(wiphy->addresses && !wiphy->n_addresses))
		return -EINVAL;

	if (WARN_ON(wiphy->addresses &&
		    !is_zero_ether_addr(wiphy->perm_addr) &&
		    memcmp(wiphy->perm_addr, wiphy->addresses[0].addr,
			   ETH_ALEN)))
		return -EINVAL;

	if (wiphy->addresses)
		memcpy(wiphy->perm_addr, wiphy->addresses[0].addr, ETH_ALEN);

503 504
	/* sanity check ifmodes */
	WARN_ON(!ifmodes);
505
	ifmodes &= ((1 << NUM_NL80211_IFTYPES) - 1) & ~1;
506 507
	if (WARN_ON(ifmodes != wiphy->interface_modes))
		wiphy->interface_modes = ifmodes;
508

509 510 511 512
	res = wiphy_verify_combinations(wiphy);
	if (res)
		return res;

513 514 515 516 517 518 519 520
	/* sanity check supported bands/channels */
	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
		sband = wiphy->bands[band];
		if (!sband)
			continue;

		sband->band = band;

521 522 523
		if (WARN_ON(!sband->n_channels || !sband->n_bitrates))
			return -EINVAL;

524 525 526 527 528 529 530 531 532 533 534 535
		/*
		 * Since cfg80211_disable_40mhz_24ghz is global, we can
		 * modify the sband's ht data even if the driver uses a
		 * global structure for that.
		 */
		if (cfg80211_disable_40mhz_24ghz &&
		    band == IEEE80211_BAND_2GHZ &&
		    sband->ht_cap.ht_supported) {
			sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SUP_WIDTH_20_40;
			sband->ht_cap.cap &= ~IEEE80211_HT_CAP_SGI_40;
		}

536 537 538 539 540 541
		/*
		 * Since we use a u32 for rate bitmaps in
		 * ieee80211_get_response_rate, we cannot
		 * have more than 32 legacy rates.
		 */
		if (WARN_ON(sband->n_bitrates > 32))
542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561
			return -EINVAL;

		for (i = 0; i < sband->n_channels; i++) {
			sband->channels[i].orig_flags =
				sband->channels[i].flags;
			sband->channels[i].orig_mag =
				sband->channels[i].max_antenna_gain;
			sband->channels[i].orig_mpwr =
				sband->channels[i].max_power;
			sband->channels[i].band = band;
		}

		have_band = true;
	}

	if (!have_band) {
		WARN_ON(1);
		return -EINVAL;
	}

J
Johannes Berg 已提交
562 563 564 565 566 567 568
	if (rdev->wiphy.wowlan.n_patterns) {
		if (WARN_ON(!rdev->wiphy.wowlan.pattern_min_len ||
			    rdev->wiphy.wowlan.pattern_min_len >
			    rdev->wiphy.wowlan.pattern_max_len))
			return -EINVAL;
	}

569 570 571
	/* check and set up bitrates */
	ieee80211_set_bitrate_flags(wiphy);

572 573
	mutex_lock(&cfg80211_mutex);

574
	res = device_add(&rdev->wiphy.dev);
575 576 577 578
	if (res) {
		mutex_unlock(&cfg80211_mutex);
		return res;
	}
J
Johannes Berg 已提交
579

580 581 582
	/* set up regulatory info */
	wiphy_update_regulatory(wiphy, NL80211_REGDOM_SET_BY_CORE);

J
Johannes Berg 已提交
583
	list_add_rcu(&rdev->list, &cfg80211_rdev_list);
584
	cfg80211_rdev_list_generation++;
585 586

	/* add to debugfs */
587 588
	rdev->wiphy.debugfsdir =
		debugfs_create_dir(wiphy_name(&rdev->wiphy),
589
				   ieee80211_debugfs_dir);
590 591
	if (IS_ERR(rdev->wiphy.debugfsdir))
		rdev->wiphy.debugfsdir = NULL;
592

J
Johannes Berg 已提交
593
	if (wiphy->flags & WIPHY_FLAG_CUSTOM_REGULATORY) {
594 595 596 597 598 599 600 601 602 603
		struct regulatory_request request;

		request.wiphy_idx = get_wiphy_idx(wiphy);
		request.initiator = NL80211_REGDOM_SET_BY_DRIVER;
		request.alpha2[0] = '9';
		request.alpha2[1] = '9';

		nl80211_send_reg_change_event(&request);
	}

604
	cfg80211_debugfs_rdev_add(rdev);
605
	mutex_unlock(&cfg80211_mutex);
606

607 608 609 610 611 612 613 614
	/*
	 * due to a locking dependency this has to be outside of the
	 * cfg80211_mutex lock
	 */
	res = rfkill_register(rdev->rfkill);
	if (res)
		goto out_rm_dev;

615
	return 0;
J
Johannes Berg 已提交
616

617
out_rm_dev:
618
	device_del(&rdev->wiphy.dev);
619 620 621 622
	return res;
}
EXPORT_SYMBOL(wiphy_register);

J
Johannes Berg 已提交
623 624
void wiphy_rfkill_start_polling(struct wiphy *wiphy)
{
625
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
J
Johannes Berg 已提交
626

627
	if (!rdev->ops->rfkill_poll)
J
Johannes Berg 已提交
628
		return;
629 630
	rdev->rfkill_ops.poll = cfg80211_rfkill_poll;
	rfkill_resume_polling(rdev->rfkill);
J
Johannes Berg 已提交
631 632 633 634 635
}
EXPORT_SYMBOL(wiphy_rfkill_start_polling);

void wiphy_rfkill_stop_polling(struct wiphy *wiphy)
{
636
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
J
Johannes Berg 已提交
637

638
	rfkill_pause_polling(rdev->rfkill);
J
Johannes Berg 已提交
639 640 641
}
EXPORT_SYMBOL(wiphy_rfkill_stop_polling);

642 643
void wiphy_unregister(struct wiphy *wiphy)
{
644
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
645

646
	rfkill_unregister(rdev->rfkill);
J
Johannes Berg 已提交
647

648
	/* protect the device list */
649
	mutex_lock(&cfg80211_mutex);
650

651 652 653 654 655 656 657 658
	wait_event(rdev->dev_wait, ({
		int __count;
		mutex_lock(&rdev->devlist_mtx);
		__count = rdev->opencount;
		mutex_unlock(&rdev->devlist_mtx);
		__count == 0;}));

	mutex_lock(&rdev->devlist_mtx);
659
	BUG_ON(!list_empty(&rdev->netdev_list));
660 661 662 663 664 665
	mutex_unlock(&rdev->devlist_mtx);

	/*
	 * First remove the hardware from everywhere, this makes
	 * it impossible to find from userspace.
	 */
666
	debugfs_remove_recursive(rdev->wiphy.debugfsdir);
J
Johannes Berg 已提交
667 668
	list_del_rcu(&rdev->list);
	synchronize_rcu();
669 670

	/*
671
	 * Try to grab rdev->mtx. If a command is still in progress,
672 673 674 675
	 * hopefully the driver will refuse it since it's tearing
	 * down the device already. We wait for this command to complete
	 * before unlinking the item from the list.
	 * Note: as codified by the BUG_ON above we cannot get here if
676 677 678
	 * a virtual interface is still present. Hence, we can only get
	 * to lock contention here if userspace issues a command that
	 * identified the hardware by wiphy index.
679
	 */
J
Johannes Berg 已提交
680
	cfg80211_lock_rdev(rdev);
681
	/* nothing */
J
Johannes Berg 已提交
682
	cfg80211_unlock_rdev(rdev);
683

684 685 686 687
	/* If this device got a regulatory hint tell core its
	 * free to listen now to a new shiny device regulatory hint */
	reg_device_remove(wiphy);

688
	cfg80211_rdev_list_generation++;
689
	device_del(&rdev->wiphy.dev);
690

691
	mutex_unlock(&cfg80211_mutex);
J
Johannes Berg 已提交
692

693
	flush_work(&rdev->scan_done_wk);
J
Johannes Berg 已提交
694 695
	cancel_work_sync(&rdev->conn_work);
	flush_work(&rdev->event_work);
696 697 698
}
EXPORT_SYMBOL(wiphy_unregister);

699
void cfg80211_dev_free(struct cfg80211_registered_device *rdev)
700
{
701
	struct cfg80211_internal_bss *scan, *tmp;
702 703 704
	rfkill_destroy(rdev->rfkill);
	mutex_destroy(&rdev->mtx);
	mutex_destroy(&rdev->devlist_mtx);
705
	mutex_destroy(&rdev->sched_scan_mtx);
706
	list_for_each_entry_safe(scan, tmp, &rdev->bss_list, list)
J
Johannes Berg 已提交
707
		cfg80211_put_bss(&scan->pub);
J
Johannes Berg 已提交
708
	cfg80211_rdev_free_wowlan(rdev);
709
	kfree(rdev);
710 711 712 713 714 715 716 717
}

void wiphy_free(struct wiphy *wiphy)
{
	put_device(&wiphy->dev);
}
EXPORT_SYMBOL(wiphy_free);

J
Johannes Berg 已提交
718 719
void wiphy_rfkill_set_hw_state(struct wiphy *wiphy, bool blocked)
{
720
	struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
J
Johannes Berg 已提交
721

722 723
	if (rfkill_set_hw_state(rdev->rfkill, blocked))
		schedule_work(&rdev->rfkill_sync);
J
Johannes Berg 已提交
724 725 726
}
EXPORT_SYMBOL(wiphy_rfkill_set_hw_state);

727 728 729 730 731 732 733 734 735 736 737 738
static void wdev_cleanup_work(struct work_struct *work)
{
	struct wireless_dev *wdev;
	struct cfg80211_registered_device *rdev;

	wdev = container_of(work, struct wireless_dev, cleanup_work);
	rdev = wiphy_to_dev(wdev->wiphy);

	cfg80211_lock_rdev(rdev);

	if (WARN_ON(rdev->scan_req && rdev->scan_req->dev == wdev->netdev)) {
		rdev->scan_req->aborted = true;
739
		___cfg80211_scan_done(rdev, true);
740 741
	}

742 743 744 745
	cfg80211_unlock_rdev(rdev);

	mutex_lock(&rdev->sched_scan_mtx);

746 747 748 749 750
	if (WARN_ON(rdev->sched_scan_req &&
		    rdev->sched_scan_req->dev == wdev->netdev)) {
		__cfg80211_stop_sched_scan(rdev, false);
	}

751
	mutex_unlock(&rdev->sched_scan_mtx);
752 753 754 755 756 757 758 759 760

	mutex_lock(&rdev->devlist_mtx);
	rdev->opencount--;
	mutex_unlock(&rdev->devlist_mtx);
	wake_up(&rdev->dev_wait);

	dev_put(wdev->netdev);
}

761 762 763 764
static struct device_type wiphy_type = {
	.name	= "wlan",
};

765 766 767 768 769
static int cfg80211_netdev_notifier_call(struct notifier_block * nb,
					 unsigned long state,
					 void *ndev)
{
	struct net_device *dev = ndev;
770
	struct wireless_dev *wdev = dev->ieee80211_ptr;
771
	struct cfg80211_registered_device *rdev;
772
	int ret;
773

774
	if (!wdev)
J
Johannes Berg 已提交
775
		return NOTIFY_DONE;
776

777
	rdev = wiphy_to_dev(wdev->wiphy);
778

779
	WARN_ON(wdev->iftype == NL80211_IFTYPE_UNSPECIFIED);
J
Johannes Berg 已提交
780

781
	switch (state) {
782 783 784
	case NETDEV_POST_INIT:
		SET_NETDEV_DEVTYPE(dev, &wiphy_type);
		break;
785
	case NETDEV_REGISTER:
J
Johannes Berg 已提交
786 787 788 789 790
		/*
		 * NB: cannot take rdev->mtx here because this may be
		 * called within code protected by it when interfaces
		 * are added with nl80211.
		 */
J
Johannes Berg 已提交
791
		mutex_init(&wdev->mtx);
792
		INIT_WORK(&wdev->cleanup_work, wdev_cleanup_work);
J
Johannes Berg 已提交
793 794
		INIT_LIST_HEAD(&wdev->event_list);
		spin_lock_init(&wdev->event_lock);
795 796
		INIT_LIST_HEAD(&wdev->mgmt_registrations);
		spin_lock_init(&wdev->mgmt_registrations_lock);
797

798
		mutex_lock(&rdev->devlist_mtx);
J
Johannes Berg 已提交
799
		list_add_rcu(&wdev->list, &rdev->netdev_list);
800
		rdev->devlist_generation++;
801 802 803
		/* can only change netns with wiphy */
		dev->features |= NETIF_F_NETNS_LOCAL;

804 805
		if (sysfs_create_link(&dev->dev.kobj, &rdev->wiphy.dev.kobj,
				      "phy80211")) {
806
			pr_err("failed to add phy80211 symlink to netdev!\n");
807
		}
808
		wdev->netdev = dev;
S
Samuel Ortiz 已提交
809
		wdev->sme_state = CFG80211_SME_IDLE;
J
Johannes Berg 已提交
810
		mutex_unlock(&rdev->devlist_mtx);
J
Johannes Berg 已提交
811
#ifdef CONFIG_CFG80211_WEXT
812 813
		wdev->wext.default_key = -1;
		wdev->wext.default_mgmt_key = -1;
814
		wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
K
Kalle Valo 已提交
815 816
#endif

J
Johannes Berg 已提交
817
		if (wdev->wiphy->flags & WIPHY_FLAG_PS_ON_BY_DEFAULT)
K
Kalle Valo 已提交
818
			wdev->ps = true;
J
Johannes Berg 已提交
819
		else
K
Kalle Valo 已提交
820
			wdev->ps = false;
821 822
		/* allow mac80211 to determine the timeout */
		wdev->ps_timeout = -1;
K
Kalle Valo 已提交
823

824 825
		if (!dev->ethtool_ops)
			dev->ethtool_ops = &cfg80211_ethtool_ops;
826 827

		if ((wdev->iftype == NL80211_IFTYPE_STATION ||
828
		     wdev->iftype == NL80211_IFTYPE_P2P_CLIENT ||
829 830
		     wdev->iftype == NL80211_IFTYPE_ADHOC) && !wdev->use_4addr)
			dev->priv_flags |= IFF_DONT_BRIDGE;
831
		break;
J
Johannes Berg 已提交
832
	case NETDEV_GOING_DOWN:
S
Samuel Ortiz 已提交
833 834 835 836
		switch (wdev->iftype) {
		case NL80211_IFTYPE_ADHOC:
			cfg80211_leave_ibss(rdev, dev, true);
			break;
837
		case NL80211_IFTYPE_P2P_CLIENT:
S
Samuel Ortiz 已提交
838
		case NL80211_IFTYPE_STATION:
839
			mutex_lock(&rdev->sched_scan_mtx);
840
			__cfg80211_stop_sched_scan(rdev, false);
841
			mutex_unlock(&rdev->sched_scan_mtx);
842

J
Johannes Berg 已提交
843
			wdev_lock(wdev);
J
Johannes Berg 已提交
844
#ifdef CONFIG_CFG80211_WEXT
845 846 847
			kfree(wdev->wext.ie);
			wdev->wext.ie = NULL;
			wdev->wext.ie_len = 0;
J
Johannes Berg 已提交
848
			wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
849
#endif
J
Johannes Berg 已提交
850 851
			__cfg80211_disconnect(rdev, dev,
					      WLAN_REASON_DEAUTH_LEAVING, true);
J
Johannes Berg 已提交
852
			cfg80211_mlme_down(rdev, dev);
J
Johannes Berg 已提交
853
			wdev_unlock(wdev);
S
Samuel Ortiz 已提交
854
			break;
855 856 857
		case NL80211_IFTYPE_MESH_POINT:
			cfg80211_leave_mesh(rdev, dev);
			break;
S
Samuel Ortiz 已提交
858 859 860
		default:
			break;
		}
861
		wdev->beacon_interval = 0;
862 863
		break;
	case NETDEV_DOWN:
864
		dev_hold(dev);
865
		queue_work(cfg80211_wq, &wdev->cleanup_work);
J
Johannes Berg 已提交
866 867
		break;
	case NETDEV_UP:
868 869 870 871 872 873 874 875 876 877 878 879
		/*
		 * If we have a really quick DOWN/UP succession we may
		 * have this work still pending ... cancel it and see
		 * if it was pending, in which case we need to account
		 * for some of the work it would have done.
		 */
		if (cancel_work_sync(&wdev->cleanup_work)) {
			mutex_lock(&rdev->devlist_mtx);
			rdev->opencount--;
			mutex_unlock(&rdev->devlist_mtx);
			dev_put(dev);
		}
J
Johannes Berg 已提交
880
		cfg80211_lock_rdev(rdev);
881
		mutex_lock(&rdev->devlist_mtx);
J
Johannes Berg 已提交
882
		wdev_lock(wdev);
883
		switch (wdev->iftype) {
884
#ifdef CONFIG_CFG80211_WEXT
885
		case NL80211_IFTYPE_ADHOC:
J
Johannes Berg 已提交
886
			cfg80211_ibss_wext_join(rdev, wdev);
J
Johannes Berg 已提交
887
			break;
888
		case NL80211_IFTYPE_STATION:
J
Johannes Berg 已提交
889
			cfg80211_mgd_wext_connect(rdev, wdev);
890
			break;
891
#endif
892
#ifdef CONFIG_MAC80211_MESH
893
		case NL80211_IFTYPE_MESH_POINT:
894 895 896 897 898 899 900 901 902 903 904 905 906 907 908
			{
				/* backward compat code... */
				struct mesh_setup setup;
				memcpy(&setup, &default_mesh_setup,
						sizeof(setup));
				 /* back compat only needed for mesh_id */
				setup.mesh_id = wdev->ssid;
				setup.mesh_id_len = wdev->mesh_id_up_len;
				if (wdev->mesh_id_up_len)
					__cfg80211_join_mesh(rdev, dev,
							&setup,
							&default_mesh_config);
				break;
			}
#endif
909
		default:
J
Johannes Berg 已提交
910
			break;
911
		}
J
Johannes Berg 已提交
912
		wdev_unlock(wdev);
913
		rdev->opencount++;
914
		mutex_unlock(&rdev->devlist_mtx);
J
Johannes Berg 已提交
915
		cfg80211_unlock_rdev(rdev);
916 917 918 919 920 921 922 923 924 925 926 927 928

		/*
		 * Configure power management to the driver here so that its
		 * correctly set also after interface type changes etc.
		 */
		if (wdev->iftype == NL80211_IFTYPE_STATION &&
		    rdev->ops->set_power_mgmt)
			if (rdev->ops->set_power_mgmt(wdev->wiphy, dev,
						      wdev->ps,
						      wdev->ps_timeout)) {
				/* assume this means it's off */
				wdev->ps = false;
			}
929
		break;
930
	case NETDEV_UNREGISTER:
J
Johannes Berg 已提交
931 932 933 934 935
		/*
		 * NB: cannot take rdev->mtx here because this may be
		 * called within code protected by it when interfaces
		 * are removed with nl80211.
		 */
936
		mutex_lock(&rdev->devlist_mtx);
937 938 939 940 941 942 943
		/*
		 * It is possible to get NETDEV_UNREGISTER
		 * multiple times. To detect that, check
		 * that the interface is still on the list
		 * of registered interfaces, and only then
		 * remove and clean it up.
		 */
944
		if (!list_empty(&wdev->list)) {
945
			sysfs_remove_link(&dev->dev.kobj, "phy80211");
J
Johannes Berg 已提交
946
			list_del_rcu(&wdev->list);
947
			rdev->devlist_generation++;
948
			cfg80211_mlme_purge_registrations(wdev);
J
Johannes Berg 已提交
949
#ifdef CONFIG_CFG80211_WEXT
950
			kfree(wdev->wext.keys);
J
Johannes Berg 已提交
951
#endif
952 953
		}
		mutex_unlock(&rdev->devlist_mtx);
J
Johannes Berg 已提交
954 955 956 957 958 959 960 961
		/*
		 * synchronise (so that we won't find this netdev
		 * from other code any more) and then clear the list
		 * head so that the above code can safely check for
		 * !list_empty() to avoid double-cleanup.
		 */
		synchronize_rcu();
		INIT_LIST_HEAD(&wdev->list);
962
		break;
J
Johannes Berg 已提交
963
	case NETDEV_PRE_UP:
964 965
		if (!(wdev->wiphy->interface_modes & BIT(wdev->iftype)))
			return notifier_from_errno(-EOPNOTSUPP);
J
Johannes Berg 已提交
966 967
		if (rfkill_blocked(rdev->rfkill))
			return notifier_from_errno(-ERFKILL);
968 969 970
		ret = cfg80211_can_add_interface(rdev, wdev->iftype);
		if (ret)
			return notifier_from_errno(ret);
J
Johannes Berg 已提交
971
		break;
972 973
	}

J
Johannes Berg 已提交
974
	return NOTIFY_DONE;
975 976 977 978 979 980
}

static struct notifier_block cfg80211_netdev_notifier = {
	.notifier_call = cfg80211_netdev_notifier_call,
};

981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999
static void __net_exit cfg80211_pernet_exit(struct net *net)
{
	struct cfg80211_registered_device *rdev;

	rtnl_lock();
	mutex_lock(&cfg80211_mutex);
	list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
		if (net_eq(wiphy_net(&rdev->wiphy), net))
			WARN_ON(cfg80211_switch_netns(rdev, &init_net));
	}
	mutex_unlock(&cfg80211_mutex);
	rtnl_unlock();
}

static struct pernet_operations cfg80211_pernet_ops = {
	.exit = cfg80211_pernet_exit,
};

static int __init cfg80211_init(void)
1000
{
1001 1002
	int err;

1003 1004 1005 1006
	err = register_pernet_device(&cfg80211_pernet_ops);
	if (err)
		goto out_fail_pernet;

1007
	err = wiphy_sysfs_init();
1008 1009 1010 1011 1012 1013 1014
	if (err)
		goto out_fail_sysfs;

	err = register_netdevice_notifier(&cfg80211_netdev_notifier);
	if (err)
		goto out_fail_notifier;

1015 1016 1017 1018
	err = nl80211_init();
	if (err)
		goto out_fail_nl80211;

1019 1020
	ieee80211_debugfs_dir = debugfs_create_dir("ieee80211", NULL);

1021 1022 1023 1024
	err = regulatory_init();
	if (err)
		goto out_fail_reg;

1025 1026 1027 1028
	cfg80211_wq = create_singlethread_workqueue("cfg80211");
	if (!cfg80211_wq)
		goto out_fail_wq;

1029 1030
	return 0;

1031 1032
out_fail_wq:
	regulatory_exit();
1033 1034
out_fail_reg:
	debugfs_remove(ieee80211_debugfs_dir);
1035 1036
out_fail_nl80211:
	unregister_netdevice_notifier(&cfg80211_netdev_notifier);
1037 1038 1039
out_fail_notifier:
	wiphy_sysfs_exit();
out_fail_sysfs:
1040 1041
	unregister_pernet_device(&cfg80211_pernet_ops);
out_fail_pernet:
1042 1043
	return err;
}
1044
subsys_initcall(cfg80211_init);
1045

1046
static void __exit cfg80211_exit(void)
1047 1048
{
	debugfs_remove(ieee80211_debugfs_dir);
1049
	nl80211_exit();
1050 1051
	unregister_netdevice_notifier(&cfg80211_netdev_notifier);
	wiphy_sysfs_exit();
1052
	regulatory_exit();
1053
	unregister_pernet_device(&cfg80211_pernet_ops);
1054
	destroy_workqueue(cfg80211_wq);
1055 1056
}
module_exit(cfg80211_exit);