cfg80211: fix dangling scan request checking
[safe/jmp/linux-2.6] / net / wireless / core.c
1 /*
2  * This is the linux wireless configuration interface.
3  *
4  * Copyright 2006-2009          Johannes Berg <johannes@sipsolutions.net>
5  */
6
7 #include <linux/if.h>
8 #include <linux/module.h>
9 #include <linux/err.h>
10 #include <linux/list.h>
11 #include <linux/nl80211.h>
12 #include <linux/debugfs.h>
13 #include <linux/notifier.h>
14 #include <linux/device.h>
15 #include <linux/rtnetlink.h>
16 #include <net/genetlink.h>
17 #include <net/cfg80211.h>
18 #include "nl80211.h"
19 #include "core.h"
20 #include "sysfs.h"
21 #include "debugfs.h"
22 #include "wext-compat.h"
23
24 /* name for sysfs, %d is appended */
25 #define PHY_NAME "phy"
26
27 MODULE_AUTHOR("Johannes Berg");
28 MODULE_LICENSE("GPL");
29 MODULE_DESCRIPTION("wireless configuration support");
30
31 /* RCU might be appropriate here since we usually
32  * only read the list, and that can happen quite
33  * often because we need to do it for each command */
34 LIST_HEAD(cfg80211_rdev_list);
35 int cfg80211_rdev_list_generation;
36
37 /*
38  * This is used to protect the cfg80211_rdev_list
39  */
40 DEFINE_MUTEX(cfg80211_mutex);
41
42 /* for debugfs */
43 static struct dentry *ieee80211_debugfs_dir;
44
45 /* requires cfg80211_mutex to be held! */
46 struct cfg80211_registered_device *cfg80211_rdev_by_wiphy_idx(int wiphy_idx)
47 {
48         struct cfg80211_registered_device *result = NULL, *rdev;
49
50         if (!wiphy_idx_valid(wiphy_idx))
51                 return NULL;
52
53         assert_cfg80211_lock();
54
55         list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
56                 if (rdev->wiphy_idx == wiphy_idx) {
57                         result = rdev;
58                         break;
59                 }
60         }
61
62         return result;
63 }
64
65 int get_wiphy_idx(struct wiphy *wiphy)
66 {
67         struct cfg80211_registered_device *rdev;
68         if (!wiphy)
69                 return WIPHY_IDX_STALE;
70         rdev = wiphy_to_dev(wiphy);
71         return rdev->wiphy_idx;
72 }
73
74 /* requires cfg80211_rdev_mutex to be held! */
75 struct wiphy *wiphy_idx_to_wiphy(int wiphy_idx)
76 {
77         struct cfg80211_registered_device *rdev;
78
79         if (!wiphy_idx_valid(wiphy_idx))
80                 return NULL;
81
82         assert_cfg80211_lock();
83
84         rdev = cfg80211_rdev_by_wiphy_idx(wiphy_idx);
85         if (!rdev)
86                 return NULL;
87         return &rdev->wiphy;
88 }
89
90 /* requires cfg80211_mutex to be held! */
91 struct cfg80211_registered_device *
92 __cfg80211_rdev_from_info(struct genl_info *info)
93 {
94         int ifindex;
95         struct cfg80211_registered_device *bywiphyidx = NULL, *byifidx = NULL;
96         struct net_device *dev;
97         int err = -EINVAL;
98
99         assert_cfg80211_lock();
100
101         if (info->attrs[NL80211_ATTR_WIPHY]) {
102                 bywiphyidx = cfg80211_rdev_by_wiphy_idx(
103                                 nla_get_u32(info->attrs[NL80211_ATTR_WIPHY]));
104                 err = -ENODEV;
105         }
106
107         if (info->attrs[NL80211_ATTR_IFINDEX]) {
108                 ifindex = nla_get_u32(info->attrs[NL80211_ATTR_IFINDEX]);
109                 dev = dev_get_by_index(genl_info_net(info), ifindex);
110                 if (dev) {
111                         if (dev->ieee80211_ptr)
112                                 byifidx =
113                                         wiphy_to_dev(dev->ieee80211_ptr->wiphy);
114                         dev_put(dev);
115                 }
116                 err = -ENODEV;
117         }
118
119         if (bywiphyidx && byifidx) {
120                 if (bywiphyidx != byifidx)
121                         return ERR_PTR(-EINVAL);
122                 else
123                         return bywiphyidx; /* == byifidx */
124         }
125         if (bywiphyidx)
126                 return bywiphyidx;
127
128         if (byifidx)
129                 return byifidx;
130
131         return ERR_PTR(err);
132 }
133
134 struct cfg80211_registered_device *
135 cfg80211_get_dev_from_info(struct genl_info *info)
136 {
137         struct cfg80211_registered_device *rdev;
138
139         mutex_lock(&cfg80211_mutex);
140         rdev = __cfg80211_rdev_from_info(info);
141
142         /* if it is not an error we grab the lock on
143          * it to assure it won't be going away while
144          * we operate on it */
145         if (!IS_ERR(rdev))
146                 mutex_lock(&rdev->mtx);
147
148         mutex_unlock(&cfg80211_mutex);
149
150         return rdev;
151 }
152
153 struct cfg80211_registered_device *
154 cfg80211_get_dev_from_ifindex(struct net *net, int ifindex)
155 {
156         struct cfg80211_registered_device *rdev = ERR_PTR(-ENODEV);
157         struct net_device *dev;
158
159         mutex_lock(&cfg80211_mutex);
160         dev = dev_get_by_index(net, ifindex);
161         if (!dev)
162                 goto out;
163         if (dev->ieee80211_ptr) {
164                 rdev = wiphy_to_dev(dev->ieee80211_ptr->wiphy);
165                 mutex_lock(&rdev->mtx);
166         } else
167                 rdev = ERR_PTR(-ENODEV);
168         dev_put(dev);
169  out:
170         mutex_unlock(&cfg80211_mutex);
171         return rdev;
172 }
173
174 /* requires cfg80211_mutex to be held */
175 int cfg80211_dev_rename(struct cfg80211_registered_device *rdev,
176                         char *newname)
177 {
178         struct cfg80211_registered_device *rdev2;
179         int wiphy_idx, taken = -1, result, digits;
180
181         assert_cfg80211_lock();
182
183         /* prohibit calling the thing phy%d when %d is not its number */
184         sscanf(newname, PHY_NAME "%d%n", &wiphy_idx, &taken);
185         if (taken == strlen(newname) && wiphy_idx != rdev->wiphy_idx) {
186                 /* count number of places needed to print wiphy_idx */
187                 digits = 1;
188                 while (wiphy_idx /= 10)
189                         digits++;
190                 /*
191                  * deny the name if it is phy<idx> where <idx> is printed
192                  * without leading zeroes. taken == strlen(newname) here
193                  */
194                 if (taken == strlen(PHY_NAME) + digits)
195                         return -EINVAL;
196         }
197
198
199         /* Ignore nop renames */
200         if (strcmp(newname, dev_name(&rdev->wiphy.dev)) == 0)
201                 return 0;
202
203         /* Ensure another device does not already have this name. */
204         list_for_each_entry(rdev2, &cfg80211_rdev_list, list)
205                 if (strcmp(newname, dev_name(&rdev2->wiphy.dev)) == 0)
206                         return -EINVAL;
207
208         result = device_rename(&rdev->wiphy.dev, newname);
209         if (result)
210                 return result;
211
212         if (rdev->wiphy.debugfsdir &&
213             !debugfs_rename(rdev->wiphy.debugfsdir->d_parent,
214                             rdev->wiphy.debugfsdir,
215                             rdev->wiphy.debugfsdir->d_parent,
216                             newname))
217                 printk(KERN_ERR "cfg80211: failed to rename debugfs dir to %s!\n",
218                        newname);
219
220         nl80211_notify_dev_rename(rdev);
221
222         return 0;
223 }
224
225 int cfg80211_switch_netns(struct cfg80211_registered_device *rdev,
226                           struct net *net)
227 {
228         struct wireless_dev *wdev;
229         int err = 0;
230
231         if (!rdev->wiphy.netnsok)
232                 return -EOPNOTSUPP;
233
234         list_for_each_entry(wdev, &rdev->netdev_list, list) {
235                 wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL;
236                 err = dev_change_net_namespace(wdev->netdev, net, "wlan%d");
237                 if (err)
238                         break;
239                 wdev->netdev->features |= NETIF_F_NETNS_LOCAL;
240         }
241
242         if (err) {
243                 /* failed -- clean up to old netns */
244                 net = wiphy_net(&rdev->wiphy);
245
246                 list_for_each_entry_continue_reverse(wdev, &rdev->netdev_list,
247                                                      list) {
248                         wdev->netdev->features &= ~NETIF_F_NETNS_LOCAL;
249                         err = dev_change_net_namespace(wdev->netdev, net,
250                                                         "wlan%d");
251                         WARN_ON(err);
252                         wdev->netdev->features |= NETIF_F_NETNS_LOCAL;
253                 }
254         }
255
256         wiphy_net_set(&rdev->wiphy, net);
257
258         return err;
259 }
260
261 static void cfg80211_rfkill_poll(struct rfkill *rfkill, void *data)
262 {
263         struct cfg80211_registered_device *rdev = data;
264
265         rdev->ops->rfkill_poll(&rdev->wiphy);
266 }
267
268 static int cfg80211_rfkill_set_block(void *data, bool blocked)
269 {
270         struct cfg80211_registered_device *rdev = data;
271         struct wireless_dev *wdev;
272
273         if (!blocked)
274                 return 0;
275
276         rtnl_lock();
277         mutex_lock(&rdev->devlist_mtx);
278
279         list_for_each_entry(wdev, &rdev->netdev_list, list)
280                 dev_close(wdev->netdev);
281
282         mutex_unlock(&rdev->devlist_mtx);
283         rtnl_unlock();
284
285         return 0;
286 }
287
288 static void cfg80211_rfkill_sync_work(struct work_struct *work)
289 {
290         struct cfg80211_registered_device *rdev;
291
292         rdev = container_of(work, struct cfg80211_registered_device, rfkill_sync);
293         cfg80211_rfkill_set_block(rdev, rfkill_blocked(rdev->rfkill));
294 }
295
296 static void cfg80211_process_events(struct wireless_dev *wdev)
297 {
298         struct cfg80211_event *ev;
299         unsigned long flags;
300
301         spin_lock_irqsave(&wdev->event_lock, flags);
302         while (!list_empty(&wdev->event_list)) {
303                 ev = list_first_entry(&wdev->event_list,
304                                       struct cfg80211_event, list);
305                 list_del(&ev->list);
306                 spin_unlock_irqrestore(&wdev->event_lock, flags);
307
308                 wdev_lock(wdev);
309                 switch (ev->type) {
310                 case EVENT_CONNECT_RESULT:
311                         __cfg80211_connect_result(
312                                 wdev->netdev, ev->cr.bssid,
313                                 ev->cr.req_ie, ev->cr.req_ie_len,
314                                 ev->cr.resp_ie, ev->cr.resp_ie_len,
315                                 ev->cr.status,
316                                 ev->cr.status == WLAN_STATUS_SUCCESS,
317                                 NULL);
318                         break;
319                 case EVENT_ROAMED:
320                         __cfg80211_roamed(wdev, ev->rm.bssid,
321                                           ev->rm.req_ie, ev->rm.req_ie_len,
322                                           ev->rm.resp_ie, ev->rm.resp_ie_len);
323                         break;
324                 case EVENT_DISCONNECTED:
325                         __cfg80211_disconnected(wdev->netdev,
326                                                 ev->dc.ie, ev->dc.ie_len,
327                                                 ev->dc.reason, true);
328                         break;
329                 case EVENT_IBSS_JOINED:
330                         __cfg80211_ibss_joined(wdev->netdev, ev->ij.bssid);
331                         break;
332                 }
333                 wdev_unlock(wdev);
334
335                 kfree(ev);
336
337                 spin_lock_irqsave(&wdev->event_lock, flags);
338         }
339         spin_unlock_irqrestore(&wdev->event_lock, flags);
340 }
341
342 static void cfg80211_event_work(struct work_struct *work)
343 {
344         struct cfg80211_registered_device *rdev;
345         struct wireless_dev *wdev;
346
347         rdev = container_of(work, struct cfg80211_registered_device,
348                             event_work);
349
350         rtnl_lock();
351         cfg80211_lock_rdev(rdev);
352         mutex_lock(&rdev->devlist_mtx);
353
354         list_for_each_entry(wdev, &rdev->netdev_list, list)
355                 cfg80211_process_events(wdev);
356
357         mutex_unlock(&rdev->devlist_mtx);
358         cfg80211_unlock_rdev(rdev);
359         rtnl_unlock();
360 }
361
362 /* exported functions */
363
364 struct wiphy *wiphy_new(const struct cfg80211_ops *ops, int sizeof_priv)
365 {
366         static int wiphy_counter;
367
368         struct cfg80211_registered_device *rdev;
369         int alloc_size;
370
371         WARN_ON(ops->add_key && (!ops->del_key || !ops->set_default_key));
372         WARN_ON(ops->auth && (!ops->assoc || !ops->deauth || !ops->disassoc));
373         WARN_ON(ops->connect && !ops->disconnect);
374         WARN_ON(ops->join_ibss && !ops->leave_ibss);
375         WARN_ON(ops->add_virtual_intf && !ops->del_virtual_intf);
376         WARN_ON(ops->add_station && !ops->del_station);
377         WARN_ON(ops->add_mpath && !ops->del_mpath);
378
379         alloc_size = sizeof(*rdev) + sizeof_priv;
380
381         rdev = kzalloc(alloc_size, GFP_KERNEL);
382         if (!rdev)
383                 return NULL;
384
385         rdev->ops = ops;
386
387         mutex_lock(&cfg80211_mutex);
388
389         rdev->wiphy_idx = wiphy_counter++;
390
391         if (unlikely(!wiphy_idx_valid(rdev->wiphy_idx))) {
392                 wiphy_counter--;
393                 mutex_unlock(&cfg80211_mutex);
394                 /* ugh, wrapped! */
395                 kfree(rdev);
396                 return NULL;
397         }
398
399         mutex_unlock(&cfg80211_mutex);
400
401         /* give it a proper name */
402         dev_set_name(&rdev->wiphy.dev, PHY_NAME "%d", rdev->wiphy_idx);
403
404         mutex_init(&rdev->mtx);
405         mutex_init(&rdev->devlist_mtx);
406         INIT_LIST_HEAD(&rdev->netdev_list);
407         spin_lock_init(&rdev->bss_lock);
408         INIT_LIST_HEAD(&rdev->bss_list);
409         INIT_WORK(&rdev->scan_done_wk, __cfg80211_scan_done);
410
411         device_initialize(&rdev->wiphy.dev);
412         rdev->wiphy.dev.class = &ieee80211_class;
413         rdev->wiphy.dev.platform_data = rdev;
414
415         rdev->wiphy.ps_default = CONFIG_CFG80211_DEFAULT_PS_VALUE;
416
417         wiphy_net_set(&rdev->wiphy, &init_net);
418
419         rdev->rfkill_ops.set_block = cfg80211_rfkill_set_block;
420         rdev->rfkill = rfkill_alloc(dev_name(&rdev->wiphy.dev),
421                                    &rdev->wiphy.dev, RFKILL_TYPE_WLAN,
422                                    &rdev->rfkill_ops, rdev);
423
424         if (!rdev->rfkill) {
425                 kfree(rdev);
426                 return NULL;
427         }
428
429         INIT_WORK(&rdev->rfkill_sync, cfg80211_rfkill_sync_work);
430         INIT_WORK(&rdev->conn_work, cfg80211_conn_work);
431         INIT_WORK(&rdev->event_work, cfg80211_event_work);
432
433         init_waitqueue_head(&rdev->dev_wait);
434
435         /*
436          * Initialize wiphy parameters to IEEE 802.11 MIB default values.
437          * Fragmentation and RTS threshold are disabled by default with the
438          * special -1 value.
439          */
440         rdev->wiphy.retry_short = 7;
441         rdev->wiphy.retry_long = 4;
442         rdev->wiphy.frag_threshold = (u32) -1;
443         rdev->wiphy.rts_threshold = (u32) -1;
444
445         return &rdev->wiphy;
446 }
447 EXPORT_SYMBOL(wiphy_new);
448
449 int wiphy_register(struct wiphy *wiphy)
450 {
451         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
452         int res;
453         enum ieee80211_band band;
454         struct ieee80211_supported_band *sband;
455         bool have_band = false;
456         int i;
457         u16 ifmodes = wiphy->interface_modes;
458
459         /* sanity check ifmodes */
460         WARN_ON(!ifmodes);
461         ifmodes &= ((1 << __NL80211_IFTYPE_AFTER_LAST) - 1) & ~1;
462         if (WARN_ON(ifmodes != wiphy->interface_modes))
463                 wiphy->interface_modes = ifmodes;
464
465         /* sanity check supported bands/channels */
466         for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
467                 sband = wiphy->bands[band];
468                 if (!sband)
469                         continue;
470
471                 sband->band = band;
472
473                 if (WARN_ON(!sband->n_channels || !sband->n_bitrates))
474                         return -EINVAL;
475
476                 /*
477                  * Since we use a u32 for rate bitmaps in
478                  * ieee80211_get_response_rate, we cannot
479                  * have more than 32 legacy rates.
480                  */
481                 if (WARN_ON(sband->n_bitrates > 32))
482                         return -EINVAL;
483
484                 for (i = 0; i < sband->n_channels; i++) {
485                         sband->channels[i].orig_flags =
486                                 sband->channels[i].flags;
487                         sband->channels[i].orig_mag =
488                                 sband->channels[i].max_antenna_gain;
489                         sband->channels[i].orig_mpwr =
490                                 sband->channels[i].max_power;
491                         sband->channels[i].band = band;
492                 }
493
494                 have_band = true;
495         }
496
497         if (!have_band) {
498                 WARN_ON(1);
499                 return -EINVAL;
500         }
501
502         /* check and set up bitrates */
503         ieee80211_set_bitrate_flags(wiphy);
504
505         res = device_add(&rdev->wiphy.dev);
506         if (res)
507                 return res;
508
509         res = rfkill_register(rdev->rfkill);
510         if (res)
511                 goto out_rm_dev;
512
513         mutex_lock(&cfg80211_mutex);
514
515         /* set up regulatory info */
516         wiphy_update_regulatory(wiphy, NL80211_REGDOM_SET_BY_CORE);
517
518         list_add(&rdev->list, &cfg80211_rdev_list);
519         cfg80211_rdev_list_generation++;
520
521         mutex_unlock(&cfg80211_mutex);
522
523         /* add to debugfs */
524         rdev->wiphy.debugfsdir =
525                 debugfs_create_dir(wiphy_name(&rdev->wiphy),
526                                    ieee80211_debugfs_dir);
527         if (IS_ERR(rdev->wiphy.debugfsdir))
528                 rdev->wiphy.debugfsdir = NULL;
529
530         if (wiphy->custom_regulatory) {
531                 struct regulatory_request request;
532
533                 request.wiphy_idx = get_wiphy_idx(wiphy);
534                 request.initiator = NL80211_REGDOM_SET_BY_DRIVER;
535                 request.alpha2[0] = '9';
536                 request.alpha2[1] = '9';
537
538                 nl80211_send_reg_change_event(&request);
539         }
540
541         cfg80211_debugfs_rdev_add(rdev);
542
543         return 0;
544
545  out_rm_dev:
546         device_del(&rdev->wiphy.dev);
547         return res;
548 }
549 EXPORT_SYMBOL(wiphy_register);
550
551 void wiphy_rfkill_start_polling(struct wiphy *wiphy)
552 {
553         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
554
555         if (!rdev->ops->rfkill_poll)
556                 return;
557         rdev->rfkill_ops.poll = cfg80211_rfkill_poll;
558         rfkill_resume_polling(rdev->rfkill);
559 }
560 EXPORT_SYMBOL(wiphy_rfkill_start_polling);
561
562 void wiphy_rfkill_stop_polling(struct wiphy *wiphy)
563 {
564         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
565
566         rfkill_pause_polling(rdev->rfkill);
567 }
568 EXPORT_SYMBOL(wiphy_rfkill_stop_polling);
569
570 void wiphy_unregister(struct wiphy *wiphy)
571 {
572         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
573
574         rfkill_unregister(rdev->rfkill);
575
576         /* protect the device list */
577         mutex_lock(&cfg80211_mutex);
578
579         wait_event(rdev->dev_wait, ({
580                 int __count;
581                 mutex_lock(&rdev->devlist_mtx);
582                 __count = rdev->opencount;
583                 mutex_unlock(&rdev->devlist_mtx);
584                 __count == 0;}));
585
586         mutex_lock(&rdev->devlist_mtx);
587         BUG_ON(!list_empty(&rdev->netdev_list));
588         mutex_unlock(&rdev->devlist_mtx);
589
590         /*
591          * First remove the hardware from everywhere, this makes
592          * it impossible to find from userspace.
593          */
594         cfg80211_debugfs_rdev_del(rdev);
595         list_del(&rdev->list);
596
597         /*
598          * Try to grab rdev->mtx. If a command is still in progress,
599          * hopefully the driver will refuse it since it's tearing
600          * down the device already. We wait for this command to complete
601          * before unlinking the item from the list.
602          * Note: as codified by the BUG_ON above we cannot get here if
603          * a virtual interface is still present. Hence, we can only get
604          * to lock contention here if userspace issues a command that
605          * identified the hardware by wiphy index.
606          */
607         cfg80211_lock_rdev(rdev);
608         /* nothing */
609         cfg80211_unlock_rdev(rdev);
610
611         /* If this device got a regulatory hint tell core its
612          * free to listen now to a new shiny device regulatory hint */
613         reg_device_remove(wiphy);
614
615         cfg80211_rdev_list_generation++;
616         device_del(&rdev->wiphy.dev);
617         debugfs_remove(rdev->wiphy.debugfsdir);
618
619         mutex_unlock(&cfg80211_mutex);
620
621         flush_work(&rdev->scan_done_wk);
622         cancel_work_sync(&rdev->conn_work);
623         flush_work(&rdev->event_work);
624 }
625 EXPORT_SYMBOL(wiphy_unregister);
626
627 void cfg80211_dev_free(struct cfg80211_registered_device *rdev)
628 {
629         struct cfg80211_internal_bss *scan, *tmp;
630         rfkill_destroy(rdev->rfkill);
631         mutex_destroy(&rdev->mtx);
632         mutex_destroy(&rdev->devlist_mtx);
633         list_for_each_entry_safe(scan, tmp, &rdev->bss_list, list)
634                 cfg80211_put_bss(&scan->pub);
635         kfree(rdev);
636 }
637
638 void wiphy_free(struct wiphy *wiphy)
639 {
640         put_device(&wiphy->dev);
641 }
642 EXPORT_SYMBOL(wiphy_free);
643
644 void wiphy_rfkill_set_hw_state(struct wiphy *wiphy, bool blocked)
645 {
646         struct cfg80211_registered_device *rdev = wiphy_to_dev(wiphy);
647
648         if (rfkill_set_hw_state(rdev->rfkill, blocked))
649                 schedule_work(&rdev->rfkill_sync);
650 }
651 EXPORT_SYMBOL(wiphy_rfkill_set_hw_state);
652
653 static void wdev_cleanup_work(struct work_struct *work)
654 {
655         struct wireless_dev *wdev;
656         struct cfg80211_registered_device *rdev;
657
658         wdev = container_of(work, struct wireless_dev, cleanup_work);
659         rdev = wiphy_to_dev(wdev->wiphy);
660
661         cfg80211_lock_rdev(rdev);
662
663         if (WARN_ON(rdev->scan_req && rdev->scan_req->dev == wdev->netdev)) {
664                 rdev->scan_req->aborted = true;
665                 ___cfg80211_scan_done(rdev);
666         }
667
668         cfg80211_unlock_rdev(rdev);
669
670         mutex_lock(&rdev->devlist_mtx);
671         rdev->opencount--;
672         mutex_unlock(&rdev->devlist_mtx);
673         wake_up(&rdev->dev_wait);
674
675         dev_put(wdev->netdev);
676 }
677
678 static int cfg80211_netdev_notifier_call(struct notifier_block * nb,
679                                          unsigned long state,
680                                          void *ndev)
681 {
682         struct net_device *dev = ndev;
683         struct wireless_dev *wdev = dev->ieee80211_ptr;
684         struct cfg80211_registered_device *rdev;
685
686         if (!wdev)
687                 return NOTIFY_DONE;
688
689         rdev = wiphy_to_dev(wdev->wiphy);
690
691         WARN_ON(wdev->iftype == NL80211_IFTYPE_UNSPECIFIED);
692
693         switch (state) {
694         case NETDEV_REGISTER:
695                 /*
696                  * NB: cannot take rdev->mtx here because this may be
697                  * called within code protected by it when interfaces
698                  * are added with nl80211.
699                  */
700                 mutex_init(&wdev->mtx);
701                 INIT_WORK(&wdev->cleanup_work, wdev_cleanup_work);
702                 INIT_LIST_HEAD(&wdev->event_list);
703                 spin_lock_init(&wdev->event_lock);
704                 mutex_lock(&rdev->devlist_mtx);
705                 list_add(&wdev->list, &rdev->netdev_list);
706                 rdev->devlist_generation++;
707                 /* can only change netns with wiphy */
708                 dev->features |= NETIF_F_NETNS_LOCAL;
709
710                 if (sysfs_create_link(&dev->dev.kobj, &rdev->wiphy.dev.kobj,
711                                       "phy80211")) {
712                         printk(KERN_ERR "wireless: failed to add phy80211 "
713                                 "symlink to netdev!\n");
714                 }
715                 wdev->netdev = dev;
716                 wdev->sme_state = CFG80211_SME_IDLE;
717                 mutex_unlock(&rdev->devlist_mtx);
718 #ifdef CONFIG_WIRELESS_EXT
719                 if (!dev->wireless_handlers)
720                         dev->wireless_handlers = &cfg80211_wext_handler;
721                 wdev->wext.default_key = -1;
722                 wdev->wext.default_mgmt_key = -1;
723                 wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
724                 wdev->wext.ps = wdev->wiphy->ps_default;
725                 wdev->wext.ps_timeout = 100;
726                 if (rdev->ops->set_power_mgmt)
727                         if (rdev->ops->set_power_mgmt(wdev->wiphy, dev,
728                                                       wdev->wext.ps,
729                                                       wdev->wext.ps_timeout)) {
730                                 /* assume this means it's off */
731                                 wdev->wext.ps = false;
732                         }
733 #endif
734                 break;
735         case NETDEV_GOING_DOWN:
736                 switch (wdev->iftype) {
737                 case NL80211_IFTYPE_ADHOC:
738                         cfg80211_leave_ibss(rdev, dev, true);
739                         break;
740                 case NL80211_IFTYPE_STATION:
741                         wdev_lock(wdev);
742 #ifdef CONFIG_WIRELESS_EXT
743                         kfree(wdev->wext.ie);
744                         wdev->wext.ie = NULL;
745                         wdev->wext.ie_len = 0;
746                         wdev->wext.connect.auth_type = NL80211_AUTHTYPE_AUTOMATIC;
747 #endif
748                         __cfg80211_disconnect(rdev, dev,
749                                               WLAN_REASON_DEAUTH_LEAVING, true);
750                         cfg80211_mlme_down(rdev, dev);
751                         wdev_unlock(wdev);
752                         break;
753                 default:
754                         break;
755                 }
756                 dev_hold(dev);
757                 schedule_work(&wdev->cleanup_work);
758                 break;
759         case NETDEV_UP:
760                 /*
761                  * If we have a really quick DOWN/UP succession we may
762                  * have this work still pending ... cancel it and see
763                  * if it was pending, in which case we need to account
764                  * for some of the work it would have done.
765                  */
766                 if (cancel_work_sync(&wdev->cleanup_work)) {
767                         mutex_lock(&rdev->devlist_mtx);
768                         rdev->opencount--;
769                         mutex_unlock(&rdev->devlist_mtx);
770                         dev_put(dev);
771                 }
772 #ifdef CONFIG_WIRELESS_EXT
773                 cfg80211_lock_rdev(rdev);
774                 mutex_lock(&rdev->devlist_mtx);
775                 wdev_lock(wdev);
776                 switch (wdev->iftype) {
777                 case NL80211_IFTYPE_ADHOC:
778                         cfg80211_ibss_wext_join(rdev, wdev);
779                         break;
780                 case NL80211_IFTYPE_STATION:
781                         cfg80211_mgd_wext_connect(rdev, wdev);
782                         break;
783                 default:
784                         break;
785                 }
786                 wdev_unlock(wdev);
787                 rdev->opencount++;
788                 mutex_unlock(&rdev->devlist_mtx);
789                 cfg80211_unlock_rdev(rdev);
790 #endif
791                 break;
792         case NETDEV_UNREGISTER:
793                 /*
794                  * NB: cannot take rdev->mtx here because this may be
795                  * called within code protected by it when interfaces
796                  * are removed with nl80211.
797                  */
798                 mutex_lock(&rdev->devlist_mtx);
799                 /*
800                  * It is possible to get NETDEV_UNREGISTER
801                  * multiple times. To detect that, check
802                  * that the interface is still on the list
803                  * of registered interfaces, and only then
804                  * remove and clean it up.
805                  */
806                 if (!list_empty(&wdev->list)) {
807                         sysfs_remove_link(&dev->dev.kobj, "phy80211");
808                         list_del_init(&wdev->list);
809                         rdev->devlist_generation++;
810 #ifdef CONFIG_WIRELESS_EXT
811                         kfree(wdev->wext.keys);
812 #endif
813                 }
814                 mutex_unlock(&rdev->devlist_mtx);
815                 break;
816         case NETDEV_PRE_UP:
817                 if (!(wdev->wiphy->interface_modes & BIT(wdev->iftype)))
818                         return notifier_from_errno(-EOPNOTSUPP);
819                 if (rfkill_blocked(rdev->rfkill))
820                         return notifier_from_errno(-ERFKILL);
821                 break;
822         }
823
824         return NOTIFY_DONE;
825 }
826
827 static struct notifier_block cfg80211_netdev_notifier = {
828         .notifier_call = cfg80211_netdev_notifier_call,
829 };
830
831 static void __net_exit cfg80211_pernet_exit(struct net *net)
832 {
833         struct cfg80211_registered_device *rdev;
834
835         rtnl_lock();
836         mutex_lock(&cfg80211_mutex);
837         list_for_each_entry(rdev, &cfg80211_rdev_list, list) {
838                 if (net_eq(wiphy_net(&rdev->wiphy), net))
839                         WARN_ON(cfg80211_switch_netns(rdev, &init_net));
840         }
841         mutex_unlock(&cfg80211_mutex);
842         rtnl_unlock();
843 }
844
845 static struct pernet_operations cfg80211_pernet_ops = {
846         .exit = cfg80211_pernet_exit,
847 };
848
849 static int __init cfg80211_init(void)
850 {
851         int err;
852
853         err = register_pernet_device(&cfg80211_pernet_ops);
854         if (err)
855                 goto out_fail_pernet;
856
857         err = wiphy_sysfs_init();
858         if (err)
859                 goto out_fail_sysfs;
860
861         err = register_netdevice_notifier(&cfg80211_netdev_notifier);
862         if (err)
863                 goto out_fail_notifier;
864
865         err = nl80211_init();
866         if (err)
867                 goto out_fail_nl80211;
868
869         ieee80211_debugfs_dir = debugfs_create_dir("ieee80211", NULL);
870
871         err = regulatory_init();
872         if (err)
873                 goto out_fail_reg;
874
875         return 0;
876
877 out_fail_reg:
878         debugfs_remove(ieee80211_debugfs_dir);
879 out_fail_nl80211:
880         unregister_netdevice_notifier(&cfg80211_netdev_notifier);
881 out_fail_notifier:
882         wiphy_sysfs_exit();
883 out_fail_sysfs:
884         unregister_pernet_device(&cfg80211_pernet_ops);
885 out_fail_pernet:
886         return err;
887 }
888 subsys_initcall(cfg80211_init);
889
890 static void cfg80211_exit(void)
891 {
892         debugfs_remove(ieee80211_debugfs_dir);
893         nl80211_exit();
894         unregister_netdevice_notifier(&cfg80211_netdev_notifier);
895         wiphy_sysfs_exit();
896         regulatory_exit();
897         unregister_pernet_device(&cfg80211_pernet_ops);
898 }
899 module_exit(cfg80211_exit);