1 /*
2  * mac80211_hwsim - software simulator of 802.11 radio(s) for mac80211
3  * Copyright (c) 2008, Jouni Malinen <j@w1.fi>
4  * Copyright (c) 2011, Javier Lopez <jlopex@gmail.com>
5  * Copyright (c) 2016 - 2017 Intel Deutschland GmbH
6  *
7  * This program is free software; you can redistribute it and/or modify
8  * it under the terms of the GNU General Public License version 2 as
9  * published by the Free Software Foundation.
10  */
11 
12 /*
13  * TODO:
14  * - Add TSF sync and fix IBSS beacon transmission by adding
15  *   competition for "air time" at TBTT
16  * - RX filtering based on filter configuration (data->rx_filter)
17  */
18 
19 #include <linux/list.h>
20 #include <linux/slab.h>
21 #include <linux/spinlock.h>
22 #include <net/dst.h>
23 #include <net/xfrm.h>
24 #include <net/mac80211.h>
25 #include <net/ieee80211_radiotap.h>
26 #include <linux/if_arp.h>
27 #include <linux/rtnetlink.h>
28 #include <linux/etherdevice.h>
29 #include <linux/platform_device.h>
30 #include <linux/debugfs.h>
31 #include <linux/module.h>
32 #include <linux/ktime.h>
33 #include <net/genetlink.h>
34 #include <net/net_namespace.h>
35 #include <net/netns/generic.h>
36 #include <linux/rhashtable.h>
37 #include <linux/nospec.h>
38 #include "mac80211_hwsim.h"
39 
40 #define WARN_QUEUE 100
41 #define MAX_QUEUE 200
42 
43 MODULE_AUTHOR("Jouni Malinen");
44 MODULE_DESCRIPTION("Software simulator of 802.11 radio(s) for mac80211");
45 MODULE_LICENSE("GPL");
46 
47 static int radios = 2;
48 module_param(radios, int, 0444);
49 MODULE_PARM_DESC(radios, "Number of simulated radios");
50 
51 static int channels = 1;
52 module_param(channels, int, 0444);
53 MODULE_PARM_DESC(channels, "Number of concurrent channels");
54 
55 static bool paged_rx = false;
56 module_param(paged_rx, bool, 0644);
57 MODULE_PARM_DESC(paged_rx, "Use paged SKBs for RX instead of linear ones");
58 
59 static bool rctbl = false;
60 module_param(rctbl, bool, 0444);
61 MODULE_PARM_DESC(rctbl, "Handle rate control table");
62 
63 static bool support_p2p_device = true;
64 module_param(support_p2p_device, bool, 0444);
65 MODULE_PARM_DESC(support_p2p_device, "Support P2P-Device interface type");
66 
67 /**
68  * enum hwsim_regtest - the type of regulatory tests we offer
69  *
70  * These are the different values you can use for the regtest
71  * module parameter. This is useful to help test world roaming
72  * and the driver regulatory_hint() call and combinations of these.
73  * If you want to do specific alpha2 regulatory domain tests simply
74  * use the userspace regulatory request as that will be respected as
75  * well without the need of this module parameter. This is designed
76  * only for testing the driver regulatory request, world roaming
77  * and all possible combinations.
78  *
79  * @HWSIM_REGTEST_DISABLED: No regulatory tests are performed,
80  * 	this is the default value.
81  * @HWSIM_REGTEST_DRIVER_REG_FOLLOW: Used for testing the driver regulatory
82  *	hint, only one driver regulatory hint will be sent as such the
83  * 	secondary radios are expected to follow.
84  * @HWSIM_REGTEST_DRIVER_REG_ALL: Used for testing the driver regulatory
85  * 	request with all radios reporting the same regulatory domain.
86  * @HWSIM_REGTEST_DIFF_COUNTRY: Used for testing the drivers calling
87  * 	different regulatory domains requests. Expected behaviour is for
88  * 	an intersection to occur but each device will still use their
89  * 	respective regulatory requested domains. Subsequent radios will
90  * 	use the resulting intersection.
91  * @HWSIM_REGTEST_WORLD_ROAM: Used for testing the world roaming. We accomplish
92  *	this by using a custom beacon-capable regulatory domain for the first
93  *	radio. All other device world roam.
94  * @HWSIM_REGTEST_CUSTOM_WORLD: Used for testing the custom world regulatory
95  * 	domain requests. All radios will adhere to this custom world regulatory
96  * 	domain.
97  * @HWSIM_REGTEST_CUSTOM_WORLD_2: Used for testing 2 custom world regulatory
98  * 	domain requests. The first radio will adhere to the first custom world
99  * 	regulatory domain, the second one to the second custom world regulatory
100  * 	domain. All other devices will world roam.
101  * @HWSIM_REGTEST_STRICT_FOLLOW_: Used for testing strict regulatory domain
102  *	settings, only the first radio will send a regulatory domain request
103  *	and use strict settings. The rest of the radios are expected to follow.
104  * @HWSIM_REGTEST_STRICT_ALL: Used for testing strict regulatory domain
105  *	settings. All radios will adhere to this.
106  * @HWSIM_REGTEST_STRICT_AND_DRIVER_REG: Used for testing strict regulatory
107  *	domain settings, combined with secondary driver regulatory domain
108  *	settings. The first radio will get a strict regulatory domain setting
109  *	using the first driver regulatory request and the second radio will use
110  *	non-strict settings using the second driver regulatory request. All
111  *	other devices should follow the intersection created between the
112  *	first two.
113  * @HWSIM_REGTEST_ALL: Used for testing every possible mix. You will need
114  * 	at least 6 radios for a complete test. We will test in this order:
115  * 	1 - driver custom world regulatory domain
116  * 	2 - second custom world regulatory domain
117  * 	3 - first driver regulatory domain request
118  * 	4 - second driver regulatory domain request
119  * 	5 - strict regulatory domain settings using the third driver regulatory
120  * 	    domain request
121  * 	6 and on - should follow the intersection of the 3rd, 4rth and 5th radio
122  * 	           regulatory requests.
123  */
124 enum hwsim_regtest {
125 	HWSIM_REGTEST_DISABLED = 0,
126 	HWSIM_REGTEST_DRIVER_REG_FOLLOW = 1,
127 	HWSIM_REGTEST_DRIVER_REG_ALL = 2,
128 	HWSIM_REGTEST_DIFF_COUNTRY = 3,
129 	HWSIM_REGTEST_WORLD_ROAM = 4,
130 	HWSIM_REGTEST_CUSTOM_WORLD = 5,
131 	HWSIM_REGTEST_CUSTOM_WORLD_2 = 6,
132 	HWSIM_REGTEST_STRICT_FOLLOW = 7,
133 	HWSIM_REGTEST_STRICT_ALL = 8,
134 	HWSIM_REGTEST_STRICT_AND_DRIVER_REG = 9,
135 	HWSIM_REGTEST_ALL = 10,
136 };
137 
138 /* Set to one of the HWSIM_REGTEST_* values above */
139 static int regtest = HWSIM_REGTEST_DISABLED;
140 module_param(regtest, int, 0444);
141 MODULE_PARM_DESC(regtest, "The type of regulatory test we want to run");
142 
143 static const char *hwsim_alpha2s[] = {
144 	"FI",
145 	"AL",
146 	"US",
147 	"DE",
148 	"JP",
149 	"AL",
150 };
151 
152 static const struct ieee80211_regdomain hwsim_world_regdom_custom_01 = {
153 	.n_reg_rules = 4,
154 	.alpha2 =  "99",
155 	.reg_rules = {
156 		REG_RULE(2412-10, 2462+10, 40, 0, 20, 0),
157 		REG_RULE(2484-10, 2484+10, 40, 0, 20, 0),
158 		REG_RULE(5150-10, 5240+10, 40, 0, 30, 0),
159 		REG_RULE(5745-10, 5825+10, 40, 0, 30, 0),
160 	}
161 };
162 
163 static const struct ieee80211_regdomain hwsim_world_regdom_custom_02 = {
164 	.n_reg_rules = 2,
165 	.alpha2 =  "99",
166 	.reg_rules = {
167 		REG_RULE(2412-10, 2462+10, 40, 0, 20, 0),
168 		REG_RULE(5725-10, 5850+10, 40, 0, 30,
169 			 NL80211_RRF_NO_IR),
170 	}
171 };
172 
173 static const struct ieee80211_regdomain *hwsim_world_regdom_custom[] = {
174 	&hwsim_world_regdom_custom_01,
175 	&hwsim_world_regdom_custom_02,
176 };
177 
178 struct hwsim_vif_priv {
179 	u32 magic;
180 	u8 bssid[ETH_ALEN];
181 	bool assoc;
182 	bool bcn_en;
183 	u16 aid;
184 };
185 
186 #define HWSIM_VIF_MAGIC	0x69537748
187 
hwsim_check_magic(struct ieee80211_vif * vif)188 static inline void hwsim_check_magic(struct ieee80211_vif *vif)
189 {
190 	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
191 	WARN(vp->magic != HWSIM_VIF_MAGIC,
192 	     "Invalid VIF (%p) magic %#x, %pM, %d/%d\n",
193 	     vif, vp->magic, vif->addr, vif->type, vif->p2p);
194 }
195 
hwsim_set_magic(struct ieee80211_vif * vif)196 static inline void hwsim_set_magic(struct ieee80211_vif *vif)
197 {
198 	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
199 	vp->magic = HWSIM_VIF_MAGIC;
200 }
201 
hwsim_clear_magic(struct ieee80211_vif * vif)202 static inline void hwsim_clear_magic(struct ieee80211_vif *vif)
203 {
204 	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
205 	vp->magic = 0;
206 }
207 
208 struct hwsim_sta_priv {
209 	u32 magic;
210 };
211 
212 #define HWSIM_STA_MAGIC	0x6d537749
213 
hwsim_check_sta_magic(struct ieee80211_sta * sta)214 static inline void hwsim_check_sta_magic(struct ieee80211_sta *sta)
215 {
216 	struct hwsim_sta_priv *sp = (void *)sta->drv_priv;
217 	WARN_ON(sp->magic != HWSIM_STA_MAGIC);
218 }
219 
hwsim_set_sta_magic(struct ieee80211_sta * sta)220 static inline void hwsim_set_sta_magic(struct ieee80211_sta *sta)
221 {
222 	struct hwsim_sta_priv *sp = (void *)sta->drv_priv;
223 	sp->magic = HWSIM_STA_MAGIC;
224 }
225 
hwsim_clear_sta_magic(struct ieee80211_sta * sta)226 static inline void hwsim_clear_sta_magic(struct ieee80211_sta *sta)
227 {
228 	struct hwsim_sta_priv *sp = (void *)sta->drv_priv;
229 	sp->magic = 0;
230 }
231 
232 struct hwsim_chanctx_priv {
233 	u32 magic;
234 };
235 
236 #define HWSIM_CHANCTX_MAGIC 0x6d53774a
237 
hwsim_check_chanctx_magic(struct ieee80211_chanctx_conf * c)238 static inline void hwsim_check_chanctx_magic(struct ieee80211_chanctx_conf *c)
239 {
240 	struct hwsim_chanctx_priv *cp = (void *)c->drv_priv;
241 	WARN_ON(cp->magic != HWSIM_CHANCTX_MAGIC);
242 }
243 
hwsim_set_chanctx_magic(struct ieee80211_chanctx_conf * c)244 static inline void hwsim_set_chanctx_magic(struct ieee80211_chanctx_conf *c)
245 {
246 	struct hwsim_chanctx_priv *cp = (void *)c->drv_priv;
247 	cp->magic = HWSIM_CHANCTX_MAGIC;
248 }
249 
hwsim_clear_chanctx_magic(struct ieee80211_chanctx_conf * c)250 static inline void hwsim_clear_chanctx_magic(struct ieee80211_chanctx_conf *c)
251 {
252 	struct hwsim_chanctx_priv *cp = (void *)c->drv_priv;
253 	cp->magic = 0;
254 }
255 
256 static unsigned int hwsim_net_id;
257 
258 static DEFINE_IDA(hwsim_netgroup_ida);
259 
260 struct hwsim_net {
261 	int netgroup;
262 	u32 wmediumd;
263 };
264 
hwsim_net_get_netgroup(struct net * net)265 static inline int hwsim_net_get_netgroup(struct net *net)
266 {
267 	struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id);
268 
269 	return hwsim_net->netgroup;
270 }
271 
hwsim_net_set_netgroup(struct net * net)272 static inline int hwsim_net_set_netgroup(struct net *net)
273 {
274 	struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id);
275 
276 	hwsim_net->netgroup = ida_simple_get(&hwsim_netgroup_ida,
277 					     0, 0, GFP_KERNEL);
278 	return hwsim_net->netgroup >= 0 ? 0 : -ENOMEM;
279 }
280 
hwsim_net_get_wmediumd(struct net * net)281 static inline u32 hwsim_net_get_wmediumd(struct net *net)
282 {
283 	struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id);
284 
285 	return hwsim_net->wmediumd;
286 }
287 
hwsim_net_set_wmediumd(struct net * net,u32 portid)288 static inline void hwsim_net_set_wmediumd(struct net *net, u32 portid)
289 {
290 	struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id);
291 
292 	hwsim_net->wmediumd = portid;
293 }
294 
295 static struct class *hwsim_class;
296 
297 static struct net_device *hwsim_mon; /* global monitor netdev */
298 
299 #define CHAN2G(_freq)  { \
300 	.band = NL80211_BAND_2GHZ, \
301 	.center_freq = (_freq), \
302 	.hw_value = (_freq), \
303 	.max_power = 20, \
304 }
305 
306 #define CHAN5G(_freq) { \
307 	.band = NL80211_BAND_5GHZ, \
308 	.center_freq = (_freq), \
309 	.hw_value = (_freq), \
310 	.max_power = 20, \
311 }
312 
313 static const struct ieee80211_channel hwsim_channels_2ghz[] = {
314 	CHAN2G(2412), /* Channel 1 */
315 	CHAN2G(2417), /* Channel 2 */
316 	CHAN2G(2422), /* Channel 3 */
317 	CHAN2G(2427), /* Channel 4 */
318 	CHAN2G(2432), /* Channel 5 */
319 	CHAN2G(2437), /* Channel 6 */
320 	CHAN2G(2442), /* Channel 7 */
321 	CHAN2G(2447), /* Channel 8 */
322 	CHAN2G(2452), /* Channel 9 */
323 	CHAN2G(2457), /* Channel 10 */
324 	CHAN2G(2462), /* Channel 11 */
325 	CHAN2G(2467), /* Channel 12 */
326 	CHAN2G(2472), /* Channel 13 */
327 	CHAN2G(2484), /* Channel 14 */
328 };
329 
330 static const struct ieee80211_channel hwsim_channels_5ghz[] = {
331 	CHAN5G(5180), /* Channel 36 */
332 	CHAN5G(5200), /* Channel 40 */
333 	CHAN5G(5220), /* Channel 44 */
334 	CHAN5G(5240), /* Channel 48 */
335 
336 	CHAN5G(5260), /* Channel 52 */
337 	CHAN5G(5280), /* Channel 56 */
338 	CHAN5G(5300), /* Channel 60 */
339 	CHAN5G(5320), /* Channel 64 */
340 
341 	CHAN5G(5500), /* Channel 100 */
342 	CHAN5G(5520), /* Channel 104 */
343 	CHAN5G(5540), /* Channel 108 */
344 	CHAN5G(5560), /* Channel 112 */
345 	CHAN5G(5580), /* Channel 116 */
346 	CHAN5G(5600), /* Channel 120 */
347 	CHAN5G(5620), /* Channel 124 */
348 	CHAN5G(5640), /* Channel 128 */
349 	CHAN5G(5660), /* Channel 132 */
350 	CHAN5G(5680), /* Channel 136 */
351 	CHAN5G(5700), /* Channel 140 */
352 
353 	CHAN5G(5745), /* Channel 149 */
354 	CHAN5G(5765), /* Channel 153 */
355 	CHAN5G(5785), /* Channel 157 */
356 	CHAN5G(5805), /* Channel 161 */
357 	CHAN5G(5825), /* Channel 165 */
358 	CHAN5G(5845), /* Channel 169 */
359 };
360 
361 static const struct ieee80211_rate hwsim_rates[] = {
362 	{ .bitrate = 10 },
363 	{ .bitrate = 20, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
364 	{ .bitrate = 55, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
365 	{ .bitrate = 110, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
366 	{ .bitrate = 60 },
367 	{ .bitrate = 90 },
368 	{ .bitrate = 120 },
369 	{ .bitrate = 180 },
370 	{ .bitrate = 240 },
371 	{ .bitrate = 360 },
372 	{ .bitrate = 480 },
373 	{ .bitrate = 540 }
374 };
375 
376 #define OUI_QCA 0x001374
377 #define QCA_NL80211_SUBCMD_TEST 1
378 enum qca_nl80211_vendor_subcmds {
379 	QCA_WLAN_VENDOR_ATTR_TEST = 8,
380 	QCA_WLAN_VENDOR_ATTR_MAX = QCA_WLAN_VENDOR_ATTR_TEST
381 };
382 
383 static const struct nla_policy
384 hwsim_vendor_test_policy[QCA_WLAN_VENDOR_ATTR_MAX + 1] = {
385 	[QCA_WLAN_VENDOR_ATTR_MAX] = { .type = NLA_U32 },
386 };
387 
mac80211_hwsim_vendor_cmd_test(struct wiphy * wiphy,struct wireless_dev * wdev,const void * data,int data_len)388 static int mac80211_hwsim_vendor_cmd_test(struct wiphy *wiphy,
389 					  struct wireless_dev *wdev,
390 					  const void *data, int data_len)
391 {
392 	struct sk_buff *skb;
393 	struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_MAX + 1];
394 	int err;
395 	u32 val;
396 
397 	err = nla_parse(tb, QCA_WLAN_VENDOR_ATTR_MAX, data, data_len,
398 			hwsim_vendor_test_policy, NULL);
399 	if (err)
400 		return err;
401 	if (!tb[QCA_WLAN_VENDOR_ATTR_TEST])
402 		return -EINVAL;
403 	val = nla_get_u32(tb[QCA_WLAN_VENDOR_ATTR_TEST]);
404 	wiphy_dbg(wiphy, "%s: test=%u\n", __func__, val);
405 
406 	/* Send a vendor event as a test. Note that this would not normally be
407 	 * done within a command handler, but rather, based on some other
408 	 * trigger. For simplicity, this command is used to trigger the event
409 	 * here.
410 	 *
411 	 * event_idx = 0 (index in mac80211_hwsim_vendor_commands)
412 	 */
413 	skb = cfg80211_vendor_event_alloc(wiphy, wdev, 100, 0, GFP_KERNEL);
414 	if (skb) {
415 		/* skb_put() or nla_put() will fill up data within
416 		 * NL80211_ATTR_VENDOR_DATA.
417 		 */
418 
419 		/* Add vendor data */
420 		nla_put_u32(skb, QCA_WLAN_VENDOR_ATTR_TEST, val + 1);
421 
422 		/* Send the event - this will call nla_nest_end() */
423 		cfg80211_vendor_event(skb, GFP_KERNEL);
424 	}
425 
426 	/* Send a response to the command */
427 	skb = cfg80211_vendor_cmd_alloc_reply_skb(wiphy, 10);
428 	if (!skb)
429 		return -ENOMEM;
430 
431 	/* skb_put() or nla_put() will fill up data within
432 	 * NL80211_ATTR_VENDOR_DATA
433 	 */
434 	nla_put_u32(skb, QCA_WLAN_VENDOR_ATTR_TEST, val + 2);
435 
436 	return cfg80211_vendor_cmd_reply(skb);
437 }
438 
439 static struct wiphy_vendor_command mac80211_hwsim_vendor_commands[] = {
440 	{
441 		.info = { .vendor_id = OUI_QCA,
442 			  .subcmd = QCA_NL80211_SUBCMD_TEST },
443 		.flags = WIPHY_VENDOR_CMD_NEED_NETDEV,
444 		.doit = mac80211_hwsim_vendor_cmd_test,
445 	}
446 };
447 
448 /* Advertise support vendor specific events */
449 static const struct nl80211_vendor_cmd_info mac80211_hwsim_vendor_events[] = {
450 	{ .vendor_id = OUI_QCA, .subcmd = 1 },
451 };
452 
453 static const struct ieee80211_iface_limit hwsim_if_limits[] = {
454 	{ .max = 1, .types = BIT(NL80211_IFTYPE_ADHOC) },
455 	{ .max = 2048,  .types = BIT(NL80211_IFTYPE_STATION) |
456 				 BIT(NL80211_IFTYPE_P2P_CLIENT) |
457 #ifdef CONFIG_MAC80211_MESH
458 				 BIT(NL80211_IFTYPE_MESH_POINT) |
459 #endif
460 				 BIT(NL80211_IFTYPE_AP) |
461 				 BIT(NL80211_IFTYPE_P2P_GO) },
462 	/* must be last, see hwsim_if_comb */
463 	{ .max = 1, .types = BIT(NL80211_IFTYPE_P2P_DEVICE) }
464 };
465 
466 static const struct ieee80211_iface_combination hwsim_if_comb[] = {
467 	{
468 		.limits = hwsim_if_limits,
469 		/* remove the last entry which is P2P_DEVICE */
470 		.n_limits = ARRAY_SIZE(hwsim_if_limits) - 1,
471 		.max_interfaces = 2048,
472 		.num_different_channels = 1,
473 		.radar_detect_widths = BIT(NL80211_CHAN_WIDTH_20_NOHT) |
474 				       BIT(NL80211_CHAN_WIDTH_20) |
475 				       BIT(NL80211_CHAN_WIDTH_40) |
476 				       BIT(NL80211_CHAN_WIDTH_80) |
477 				       BIT(NL80211_CHAN_WIDTH_160),
478 	},
479 };
480 
481 static const struct ieee80211_iface_combination hwsim_if_comb_p2p_dev[] = {
482 	{
483 		.limits = hwsim_if_limits,
484 		.n_limits = ARRAY_SIZE(hwsim_if_limits),
485 		.max_interfaces = 2048,
486 		.num_different_channels = 1,
487 		.radar_detect_widths = BIT(NL80211_CHAN_WIDTH_20_NOHT) |
488 				       BIT(NL80211_CHAN_WIDTH_20) |
489 				       BIT(NL80211_CHAN_WIDTH_40) |
490 				       BIT(NL80211_CHAN_WIDTH_80) |
491 				       BIT(NL80211_CHAN_WIDTH_160),
492 	},
493 };
494 
495 static spinlock_t hwsim_radio_lock;
496 static LIST_HEAD(hwsim_radios);
497 static struct workqueue_struct *hwsim_wq;
498 static struct rhashtable hwsim_radios_rht;
499 static int hwsim_radio_idx;
500 static int hwsim_radios_generation = 1;
501 
502 static struct platform_driver mac80211_hwsim_driver = {
503 	.driver = {
504 		.name = "mac80211_hwsim",
505 	},
506 };
507 
508 struct mac80211_hwsim_data {
509 	struct list_head list;
510 	struct rhash_head rht;
511 	struct ieee80211_hw *hw;
512 	struct device *dev;
513 	struct ieee80211_supported_band bands[NUM_NL80211_BANDS];
514 	struct ieee80211_channel channels_2ghz[ARRAY_SIZE(hwsim_channels_2ghz)];
515 	struct ieee80211_channel channels_5ghz[ARRAY_SIZE(hwsim_channels_5ghz)];
516 	struct ieee80211_rate rates[ARRAY_SIZE(hwsim_rates)];
517 	struct ieee80211_iface_combination if_combination;
518 
519 	struct mac_address addresses[2];
520 	int channels, idx;
521 	bool use_chanctx;
522 	bool destroy_on_close;
523 	u32 portid;
524 	char alpha2[2];
525 	const struct ieee80211_regdomain *regd;
526 
527 	struct ieee80211_channel *tmp_chan;
528 	struct ieee80211_channel *roc_chan;
529 	u32 roc_duration;
530 	struct delayed_work roc_start;
531 	struct delayed_work roc_done;
532 	struct delayed_work hw_scan;
533 	struct cfg80211_scan_request *hw_scan_request;
534 	struct ieee80211_vif *hw_scan_vif;
535 	int scan_chan_idx;
536 	u8 scan_addr[ETH_ALEN];
537 	struct {
538 		struct ieee80211_channel *channel;
539 		unsigned long next_start, start, end;
540 	} survey_data[ARRAY_SIZE(hwsim_channels_2ghz) +
541 		      ARRAY_SIZE(hwsim_channels_5ghz)];
542 
543 	struct ieee80211_channel *channel;
544 	u64 beacon_int	/* beacon interval in us */;
545 	unsigned int rx_filter;
546 	bool started, idle, scanning;
547 	struct mutex mutex;
548 	struct tasklet_hrtimer beacon_timer;
549 	enum ps_mode {
550 		PS_DISABLED, PS_ENABLED, PS_AUTO_POLL, PS_MANUAL_POLL
551 	} ps;
552 	bool ps_poll_pending;
553 	struct dentry *debugfs;
554 
555 	uintptr_t pending_cookie;
556 	struct sk_buff_head pending;	/* packets pending */
557 	/*
558 	 * Only radios in the same group can communicate together (the
559 	 * channel has to match too). Each bit represents a group. A
560 	 * radio can be in more than one group.
561 	 */
562 	u64 group;
563 
564 	/* group shared by radios created in the same netns */
565 	int netgroup;
566 	/* wmediumd portid responsible for netgroup of this radio */
567 	u32 wmediumd;
568 
569 	/* difference between this hw's clock and the real clock, in usecs */
570 	s64 tsf_offset;
571 	s64 bcn_delta;
572 	/* absolute beacon transmission time. Used to cover up "tx" delay. */
573 	u64 abs_bcn_ts;
574 
575 	/* Stats */
576 	u64 tx_pkts;
577 	u64 rx_pkts;
578 	u64 tx_bytes;
579 	u64 rx_bytes;
580 	u64 tx_dropped;
581 	u64 tx_failed;
582 };
583 
584 static const struct rhashtable_params hwsim_rht_params = {
585 	.nelem_hint = 2,
586 	.automatic_shrinking = true,
587 	.key_len = ETH_ALEN,
588 	.key_offset = offsetof(struct mac80211_hwsim_data, addresses[1]),
589 	.head_offset = offsetof(struct mac80211_hwsim_data, rht),
590 };
591 
592 struct hwsim_radiotap_hdr {
593 	struct ieee80211_radiotap_header hdr;
594 	__le64 rt_tsft;
595 	u8 rt_flags;
596 	u8 rt_rate;
597 	__le16 rt_channel;
598 	__le16 rt_chbitmask;
599 } __packed;
600 
601 struct hwsim_radiotap_ack_hdr {
602 	struct ieee80211_radiotap_header hdr;
603 	u8 rt_flags;
604 	u8 pad;
605 	__le16 rt_channel;
606 	__le16 rt_chbitmask;
607 } __packed;
608 
609 /* MAC80211_HWSIM netlink family */
610 static struct genl_family hwsim_genl_family;
611 
612 enum hwsim_multicast_groups {
613 	HWSIM_MCGRP_CONFIG,
614 };
615 
616 static const struct genl_multicast_group hwsim_mcgrps[] = {
617 	[HWSIM_MCGRP_CONFIG] = { .name = "config", },
618 };
619 
620 /* MAC80211_HWSIM netlink policy */
621 
622 static const struct nla_policy hwsim_genl_policy[HWSIM_ATTR_MAX + 1] = {
623 	[HWSIM_ATTR_ADDR_RECEIVER] = { .type = NLA_UNSPEC, .len = ETH_ALEN },
624 	[HWSIM_ATTR_ADDR_TRANSMITTER] = { .type = NLA_UNSPEC, .len = ETH_ALEN },
625 	[HWSIM_ATTR_FRAME] = { .type = NLA_BINARY,
626 			       .len = IEEE80211_MAX_DATA_LEN },
627 	[HWSIM_ATTR_FLAGS] = { .type = NLA_U32 },
628 	[HWSIM_ATTR_RX_RATE] = { .type = NLA_U32 },
629 	[HWSIM_ATTR_SIGNAL] = { .type = NLA_U32 },
630 	[HWSIM_ATTR_TX_INFO] = { .type = NLA_UNSPEC,
631 				 .len = IEEE80211_TX_MAX_RATES *
632 					sizeof(struct hwsim_tx_rate)},
633 	[HWSIM_ATTR_COOKIE] = { .type = NLA_U64 },
634 	[HWSIM_ATTR_CHANNELS] = { .type = NLA_U32 },
635 	[HWSIM_ATTR_RADIO_ID] = { .type = NLA_U32 },
636 	[HWSIM_ATTR_REG_HINT_ALPHA2] = { .type = NLA_STRING, .len = 2 },
637 	[HWSIM_ATTR_REG_CUSTOM_REG] = { .type = NLA_U32 },
638 	[HWSIM_ATTR_REG_STRICT_REG] = { .type = NLA_FLAG },
639 	[HWSIM_ATTR_SUPPORT_P2P_DEVICE] = { .type = NLA_FLAG },
640 	[HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE] = { .type = NLA_FLAG },
641 	[HWSIM_ATTR_RADIO_NAME] = { .type = NLA_STRING },
642 	[HWSIM_ATTR_NO_VIF] = { .type = NLA_FLAG },
643 	[HWSIM_ATTR_FREQ] = { .type = NLA_U32 },
644 	[HWSIM_ATTR_PERM_ADDR] = { .type = NLA_UNSPEC, .len = ETH_ALEN },
645 };
646 
647 static void mac80211_hwsim_tx_frame(struct ieee80211_hw *hw,
648 				    struct sk_buff *skb,
649 				    struct ieee80211_channel *chan);
650 
651 /* sysfs attributes */
hwsim_send_ps_poll(void * dat,u8 * mac,struct ieee80211_vif * vif)652 static void hwsim_send_ps_poll(void *dat, u8 *mac, struct ieee80211_vif *vif)
653 {
654 	struct mac80211_hwsim_data *data = dat;
655 	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
656 	struct sk_buff *skb;
657 	struct ieee80211_pspoll *pspoll;
658 
659 	if (!vp->assoc)
660 		return;
661 
662 	wiphy_dbg(data->hw->wiphy,
663 		  "%s: send PS-Poll to %pM for aid %d\n",
664 		  __func__, vp->bssid, vp->aid);
665 
666 	skb = dev_alloc_skb(sizeof(*pspoll));
667 	if (!skb)
668 		return;
669 	pspoll = skb_put(skb, sizeof(*pspoll));
670 	pspoll->frame_control = cpu_to_le16(IEEE80211_FTYPE_CTL |
671 					    IEEE80211_STYPE_PSPOLL |
672 					    IEEE80211_FCTL_PM);
673 	pspoll->aid = cpu_to_le16(0xc000 | vp->aid);
674 	memcpy(pspoll->bssid, vp->bssid, ETH_ALEN);
675 	memcpy(pspoll->ta, mac, ETH_ALEN);
676 
677 	rcu_read_lock();
678 	mac80211_hwsim_tx_frame(data->hw, skb,
679 				rcu_dereference(vif->chanctx_conf)->def.chan);
680 	rcu_read_unlock();
681 }
682 
hwsim_send_nullfunc(struct mac80211_hwsim_data * data,u8 * mac,struct ieee80211_vif * vif,int ps)683 static void hwsim_send_nullfunc(struct mac80211_hwsim_data *data, u8 *mac,
684 				struct ieee80211_vif *vif, int ps)
685 {
686 	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
687 	struct sk_buff *skb;
688 	struct ieee80211_hdr *hdr;
689 
690 	if (!vp->assoc)
691 		return;
692 
693 	wiphy_dbg(data->hw->wiphy,
694 		  "%s: send data::nullfunc to %pM ps=%d\n",
695 		  __func__, vp->bssid, ps);
696 
697 	skb = dev_alloc_skb(sizeof(*hdr));
698 	if (!skb)
699 		return;
700 	hdr = skb_put(skb, sizeof(*hdr) - ETH_ALEN);
701 	hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
702 					 IEEE80211_STYPE_NULLFUNC |
703 					 IEEE80211_FCTL_TODS |
704 					 (ps ? IEEE80211_FCTL_PM : 0));
705 	hdr->duration_id = cpu_to_le16(0);
706 	memcpy(hdr->addr1, vp->bssid, ETH_ALEN);
707 	memcpy(hdr->addr2, mac, ETH_ALEN);
708 	memcpy(hdr->addr3, vp->bssid, ETH_ALEN);
709 
710 	rcu_read_lock();
711 	mac80211_hwsim_tx_frame(data->hw, skb,
712 				rcu_dereference(vif->chanctx_conf)->def.chan);
713 	rcu_read_unlock();
714 }
715 
716 
hwsim_send_nullfunc_ps(void * dat,u8 * mac,struct ieee80211_vif * vif)717 static void hwsim_send_nullfunc_ps(void *dat, u8 *mac,
718 				   struct ieee80211_vif *vif)
719 {
720 	struct mac80211_hwsim_data *data = dat;
721 	hwsim_send_nullfunc(data, mac, vif, 1);
722 }
723 
hwsim_send_nullfunc_no_ps(void * dat,u8 * mac,struct ieee80211_vif * vif)724 static void hwsim_send_nullfunc_no_ps(void *dat, u8 *mac,
725 				      struct ieee80211_vif *vif)
726 {
727 	struct mac80211_hwsim_data *data = dat;
728 	hwsim_send_nullfunc(data, mac, vif, 0);
729 }
730 
hwsim_fops_ps_read(void * dat,u64 * val)731 static int hwsim_fops_ps_read(void *dat, u64 *val)
732 {
733 	struct mac80211_hwsim_data *data = dat;
734 	*val = data->ps;
735 	return 0;
736 }
737 
hwsim_fops_ps_write(void * dat,u64 val)738 static int hwsim_fops_ps_write(void *dat, u64 val)
739 {
740 	struct mac80211_hwsim_data *data = dat;
741 	enum ps_mode old_ps;
742 
743 	if (val != PS_DISABLED && val != PS_ENABLED && val != PS_AUTO_POLL &&
744 	    val != PS_MANUAL_POLL)
745 		return -EINVAL;
746 
747 	if (val == PS_MANUAL_POLL) {
748 		if (data->ps != PS_ENABLED)
749 			return -EINVAL;
750 		local_bh_disable();
751 		ieee80211_iterate_active_interfaces_atomic(
752 			data->hw, IEEE80211_IFACE_ITER_NORMAL,
753 			hwsim_send_ps_poll, data);
754 		local_bh_enable();
755 		return 0;
756 	}
757 	old_ps = data->ps;
758 	data->ps = val;
759 
760 	local_bh_disable();
761 	if (old_ps == PS_DISABLED && val != PS_DISABLED) {
762 		ieee80211_iterate_active_interfaces_atomic(
763 			data->hw, IEEE80211_IFACE_ITER_NORMAL,
764 			hwsim_send_nullfunc_ps, data);
765 	} else if (old_ps != PS_DISABLED && val == PS_DISABLED) {
766 		ieee80211_iterate_active_interfaces_atomic(
767 			data->hw, IEEE80211_IFACE_ITER_NORMAL,
768 			hwsim_send_nullfunc_no_ps, data);
769 	}
770 	local_bh_enable();
771 
772 	return 0;
773 }
774 
775 DEFINE_SIMPLE_ATTRIBUTE(hwsim_fops_ps, hwsim_fops_ps_read, hwsim_fops_ps_write,
776 			"%llu\n");
777 
hwsim_write_simulate_radar(void * dat,u64 val)778 static int hwsim_write_simulate_radar(void *dat, u64 val)
779 {
780 	struct mac80211_hwsim_data *data = dat;
781 
782 	ieee80211_radar_detected(data->hw);
783 
784 	return 0;
785 }
786 
787 DEFINE_SIMPLE_ATTRIBUTE(hwsim_simulate_radar, NULL,
788 			hwsim_write_simulate_radar, "%llu\n");
789 
hwsim_fops_group_read(void * dat,u64 * val)790 static int hwsim_fops_group_read(void *dat, u64 *val)
791 {
792 	struct mac80211_hwsim_data *data = dat;
793 	*val = data->group;
794 	return 0;
795 }
796 
hwsim_fops_group_write(void * dat,u64 val)797 static int hwsim_fops_group_write(void *dat, u64 val)
798 {
799 	struct mac80211_hwsim_data *data = dat;
800 	data->group = val;
801 	return 0;
802 }
803 
804 DEFINE_SIMPLE_ATTRIBUTE(hwsim_fops_group,
805 			hwsim_fops_group_read, hwsim_fops_group_write,
806 			"%llx\n");
807 
hwsim_mon_xmit(struct sk_buff * skb,struct net_device * dev)808 static netdev_tx_t hwsim_mon_xmit(struct sk_buff *skb,
809 					struct net_device *dev)
810 {
811 	/* TODO: allow packet injection */
812 	dev_kfree_skb(skb);
813 	return NETDEV_TX_OK;
814 }
815 
mac80211_hwsim_get_tsf_raw(void)816 static inline u64 mac80211_hwsim_get_tsf_raw(void)
817 {
818 	return ktime_to_us(ktime_get_real());
819 }
820 
__mac80211_hwsim_get_tsf(struct mac80211_hwsim_data * data)821 static __le64 __mac80211_hwsim_get_tsf(struct mac80211_hwsim_data *data)
822 {
823 	u64 now = mac80211_hwsim_get_tsf_raw();
824 	return cpu_to_le64(now + data->tsf_offset);
825 }
826 
mac80211_hwsim_get_tsf(struct ieee80211_hw * hw,struct ieee80211_vif * vif)827 static u64 mac80211_hwsim_get_tsf(struct ieee80211_hw *hw,
828 				  struct ieee80211_vif *vif)
829 {
830 	struct mac80211_hwsim_data *data = hw->priv;
831 	return le64_to_cpu(__mac80211_hwsim_get_tsf(data));
832 }
833 
mac80211_hwsim_set_tsf(struct ieee80211_hw * hw,struct ieee80211_vif * vif,u64 tsf)834 static void mac80211_hwsim_set_tsf(struct ieee80211_hw *hw,
835 		struct ieee80211_vif *vif, u64 tsf)
836 {
837 	struct mac80211_hwsim_data *data = hw->priv;
838 	u64 now = mac80211_hwsim_get_tsf(hw, vif);
839 	u32 bcn_int = data->beacon_int;
840 	u64 delta = abs(tsf - now);
841 
842 	/* adjust after beaconing with new timestamp at old TBTT */
843 	if (tsf > now) {
844 		data->tsf_offset += delta;
845 		data->bcn_delta = do_div(delta, bcn_int);
846 	} else {
847 		data->tsf_offset -= delta;
848 		data->bcn_delta = -(s64)do_div(delta, bcn_int);
849 	}
850 }
851 
mac80211_hwsim_monitor_rx(struct ieee80211_hw * hw,struct sk_buff * tx_skb,struct ieee80211_channel * chan)852 static void mac80211_hwsim_monitor_rx(struct ieee80211_hw *hw,
853 				      struct sk_buff *tx_skb,
854 				      struct ieee80211_channel *chan)
855 {
856 	struct mac80211_hwsim_data *data = hw->priv;
857 	struct sk_buff *skb;
858 	struct hwsim_radiotap_hdr *hdr;
859 	u16 flags;
860 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(tx_skb);
861 	struct ieee80211_rate *txrate = ieee80211_get_tx_rate(hw, info);
862 
863 	if (WARN_ON(!txrate))
864 		return;
865 
866 	if (!netif_running(hwsim_mon))
867 		return;
868 
869 	skb = skb_copy_expand(tx_skb, sizeof(*hdr), 0, GFP_ATOMIC);
870 	if (skb == NULL)
871 		return;
872 
873 	hdr = skb_push(skb, sizeof(*hdr));
874 	hdr->hdr.it_version = PKTHDR_RADIOTAP_VERSION;
875 	hdr->hdr.it_pad = 0;
876 	hdr->hdr.it_len = cpu_to_le16(sizeof(*hdr));
877 	hdr->hdr.it_present = cpu_to_le32((1 << IEEE80211_RADIOTAP_FLAGS) |
878 					  (1 << IEEE80211_RADIOTAP_RATE) |
879 					  (1 << IEEE80211_RADIOTAP_TSFT) |
880 					  (1 << IEEE80211_RADIOTAP_CHANNEL));
881 	hdr->rt_tsft = __mac80211_hwsim_get_tsf(data);
882 	hdr->rt_flags = 0;
883 	hdr->rt_rate = txrate->bitrate / 5;
884 	hdr->rt_channel = cpu_to_le16(chan->center_freq);
885 	flags = IEEE80211_CHAN_2GHZ;
886 	if (txrate->flags & IEEE80211_RATE_ERP_G)
887 		flags |= IEEE80211_CHAN_OFDM;
888 	else
889 		flags |= IEEE80211_CHAN_CCK;
890 	hdr->rt_chbitmask = cpu_to_le16(flags);
891 
892 	skb->dev = hwsim_mon;
893 	skb_reset_mac_header(skb);
894 	skb->ip_summed = CHECKSUM_UNNECESSARY;
895 	skb->pkt_type = PACKET_OTHERHOST;
896 	skb->protocol = htons(ETH_P_802_2);
897 	memset(skb->cb, 0, sizeof(skb->cb));
898 	netif_rx(skb);
899 }
900 
901 
mac80211_hwsim_monitor_ack(struct ieee80211_channel * chan,const u8 * addr)902 static void mac80211_hwsim_monitor_ack(struct ieee80211_channel *chan,
903 				       const u8 *addr)
904 {
905 	struct sk_buff *skb;
906 	struct hwsim_radiotap_ack_hdr *hdr;
907 	u16 flags;
908 	struct ieee80211_hdr *hdr11;
909 
910 	if (!netif_running(hwsim_mon))
911 		return;
912 
913 	skb = dev_alloc_skb(100);
914 	if (skb == NULL)
915 		return;
916 
917 	hdr = skb_put(skb, sizeof(*hdr));
918 	hdr->hdr.it_version = PKTHDR_RADIOTAP_VERSION;
919 	hdr->hdr.it_pad = 0;
920 	hdr->hdr.it_len = cpu_to_le16(sizeof(*hdr));
921 	hdr->hdr.it_present = cpu_to_le32((1 << IEEE80211_RADIOTAP_FLAGS) |
922 					  (1 << IEEE80211_RADIOTAP_CHANNEL));
923 	hdr->rt_flags = 0;
924 	hdr->pad = 0;
925 	hdr->rt_channel = cpu_to_le16(chan->center_freq);
926 	flags = IEEE80211_CHAN_2GHZ;
927 	hdr->rt_chbitmask = cpu_to_le16(flags);
928 
929 	hdr11 = skb_put(skb, 10);
930 	hdr11->frame_control = cpu_to_le16(IEEE80211_FTYPE_CTL |
931 					   IEEE80211_STYPE_ACK);
932 	hdr11->duration_id = cpu_to_le16(0);
933 	memcpy(hdr11->addr1, addr, ETH_ALEN);
934 
935 	skb->dev = hwsim_mon;
936 	skb_reset_mac_header(skb);
937 	skb->ip_summed = CHECKSUM_UNNECESSARY;
938 	skb->pkt_type = PACKET_OTHERHOST;
939 	skb->protocol = htons(ETH_P_802_2);
940 	memset(skb->cb, 0, sizeof(skb->cb));
941 	netif_rx(skb);
942 }
943 
944 struct mac80211_hwsim_addr_match_data {
945 	u8 addr[ETH_ALEN];
946 	bool ret;
947 };
948 
mac80211_hwsim_addr_iter(void * data,u8 * mac,struct ieee80211_vif * vif)949 static void mac80211_hwsim_addr_iter(void *data, u8 *mac,
950 				     struct ieee80211_vif *vif)
951 {
952 	struct mac80211_hwsim_addr_match_data *md = data;
953 
954 	if (memcmp(mac, md->addr, ETH_ALEN) == 0)
955 		md->ret = true;
956 }
957 
mac80211_hwsim_addr_match(struct mac80211_hwsim_data * data,const u8 * addr)958 static bool mac80211_hwsim_addr_match(struct mac80211_hwsim_data *data,
959 				      const u8 *addr)
960 {
961 	struct mac80211_hwsim_addr_match_data md = {
962 		.ret = false,
963 	};
964 
965 	if (data->scanning && memcmp(addr, data->scan_addr, ETH_ALEN) == 0)
966 		return true;
967 
968 	memcpy(md.addr, addr, ETH_ALEN);
969 
970 	ieee80211_iterate_active_interfaces_atomic(data->hw,
971 						   IEEE80211_IFACE_ITER_NORMAL,
972 						   mac80211_hwsim_addr_iter,
973 						   &md);
974 
975 	return md.ret;
976 }
977 
hwsim_ps_rx_ok(struct mac80211_hwsim_data * data,struct sk_buff * skb)978 static bool hwsim_ps_rx_ok(struct mac80211_hwsim_data *data,
979 			   struct sk_buff *skb)
980 {
981 	switch (data->ps) {
982 	case PS_DISABLED:
983 		return true;
984 	case PS_ENABLED:
985 		return false;
986 	case PS_AUTO_POLL:
987 		/* TODO: accept (some) Beacons by default and other frames only
988 		 * if pending PS-Poll has been sent */
989 		return true;
990 	case PS_MANUAL_POLL:
991 		/* Allow unicast frames to own address if there is a pending
992 		 * PS-Poll */
993 		if (data->ps_poll_pending &&
994 		    mac80211_hwsim_addr_match(data, skb->data + 4)) {
995 			data->ps_poll_pending = false;
996 			return true;
997 		}
998 		return false;
999 	}
1000 
1001 	return true;
1002 }
1003 
hwsim_unicast_netgroup(struct mac80211_hwsim_data * data,struct sk_buff * skb,int portid)1004 static int hwsim_unicast_netgroup(struct mac80211_hwsim_data *data,
1005 				  struct sk_buff *skb, int portid)
1006 {
1007 	struct net *net;
1008 	bool found = false;
1009 	int res = -ENOENT;
1010 
1011 	rcu_read_lock();
1012 	for_each_net_rcu(net) {
1013 		if (data->netgroup == hwsim_net_get_netgroup(net)) {
1014 			res = genlmsg_unicast(net, skb, portid);
1015 			found = true;
1016 			break;
1017 		}
1018 	}
1019 	rcu_read_unlock();
1020 
1021 	if (!found)
1022 		nlmsg_free(skb);
1023 
1024 	return res;
1025 }
1026 
trans_tx_rate_flags_ieee2hwsim(struct ieee80211_tx_rate * rate)1027 static inline u16 trans_tx_rate_flags_ieee2hwsim(struct ieee80211_tx_rate *rate)
1028 {
1029 	u16 result = 0;
1030 
1031 	if (rate->flags & IEEE80211_TX_RC_USE_RTS_CTS)
1032 		result |= MAC80211_HWSIM_TX_RC_USE_RTS_CTS;
1033 	if (rate->flags & IEEE80211_TX_RC_USE_CTS_PROTECT)
1034 		result |= MAC80211_HWSIM_TX_RC_USE_CTS_PROTECT;
1035 	if (rate->flags & IEEE80211_TX_RC_USE_SHORT_PREAMBLE)
1036 		result |= MAC80211_HWSIM_TX_RC_USE_SHORT_PREAMBLE;
1037 	if (rate->flags & IEEE80211_TX_RC_MCS)
1038 		result |= MAC80211_HWSIM_TX_RC_MCS;
1039 	if (rate->flags & IEEE80211_TX_RC_GREEN_FIELD)
1040 		result |= MAC80211_HWSIM_TX_RC_GREEN_FIELD;
1041 	if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
1042 		result |= MAC80211_HWSIM_TX_RC_40_MHZ_WIDTH;
1043 	if (rate->flags & IEEE80211_TX_RC_DUP_DATA)
1044 		result |= MAC80211_HWSIM_TX_RC_DUP_DATA;
1045 	if (rate->flags & IEEE80211_TX_RC_SHORT_GI)
1046 		result |= MAC80211_HWSIM_TX_RC_SHORT_GI;
1047 	if (rate->flags & IEEE80211_TX_RC_VHT_MCS)
1048 		result |= MAC80211_HWSIM_TX_RC_VHT_MCS;
1049 	if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
1050 		result |= MAC80211_HWSIM_TX_RC_80_MHZ_WIDTH;
1051 	if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
1052 		result |= MAC80211_HWSIM_TX_RC_160_MHZ_WIDTH;
1053 
1054 	return result;
1055 }
1056 
mac80211_hwsim_tx_frame_nl(struct ieee80211_hw * hw,struct sk_buff * my_skb,int dst_portid)1057 static void mac80211_hwsim_tx_frame_nl(struct ieee80211_hw *hw,
1058 				       struct sk_buff *my_skb,
1059 				       int dst_portid)
1060 {
1061 	struct sk_buff *skb;
1062 	struct mac80211_hwsim_data *data = hw->priv;
1063 	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) my_skb->data;
1064 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(my_skb);
1065 	void *msg_head;
1066 	unsigned int hwsim_flags = 0;
1067 	int i;
1068 	struct hwsim_tx_rate tx_attempts[IEEE80211_TX_MAX_RATES];
1069 	struct hwsim_tx_rate_flag tx_attempts_flags[IEEE80211_TX_MAX_RATES];
1070 	uintptr_t cookie;
1071 
1072 	if (data->ps != PS_DISABLED)
1073 		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM);
1074 	/* If the queue contains MAX_QUEUE skb's drop some */
1075 	if (skb_queue_len(&data->pending) >= MAX_QUEUE) {
1076 		/* Droping until WARN_QUEUE level */
1077 		while (skb_queue_len(&data->pending) >= WARN_QUEUE) {
1078 			ieee80211_free_txskb(hw, skb_dequeue(&data->pending));
1079 			data->tx_dropped++;
1080 		}
1081 	}
1082 
1083 	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_ATOMIC);
1084 	if (skb == NULL)
1085 		goto nla_put_failure;
1086 
1087 	msg_head = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0,
1088 			       HWSIM_CMD_FRAME);
1089 	if (msg_head == NULL) {
1090 		pr_debug("mac80211_hwsim: problem with msg_head\n");
1091 		goto nla_put_failure;
1092 	}
1093 
1094 	if (nla_put(skb, HWSIM_ATTR_ADDR_TRANSMITTER,
1095 		    ETH_ALEN, data->addresses[1].addr))
1096 		goto nla_put_failure;
1097 
1098 	/* We get the skb->data */
1099 	if (nla_put(skb, HWSIM_ATTR_FRAME, my_skb->len, my_skb->data))
1100 		goto nla_put_failure;
1101 
1102 	/* We get the flags for this transmission, and we translate them to
1103 	   wmediumd flags  */
1104 
1105 	if (info->flags & IEEE80211_TX_CTL_REQ_TX_STATUS)
1106 		hwsim_flags |= HWSIM_TX_CTL_REQ_TX_STATUS;
1107 
1108 	if (info->flags & IEEE80211_TX_CTL_NO_ACK)
1109 		hwsim_flags |= HWSIM_TX_CTL_NO_ACK;
1110 
1111 	if (nla_put_u32(skb, HWSIM_ATTR_FLAGS, hwsim_flags))
1112 		goto nla_put_failure;
1113 
1114 	if (nla_put_u32(skb, HWSIM_ATTR_FREQ, data->channel->center_freq))
1115 		goto nla_put_failure;
1116 
1117 	/* We get the tx control (rate and retries) info*/
1118 
1119 	for (i = 0; i < IEEE80211_TX_MAX_RATES; i++) {
1120 		tx_attempts[i].idx = info->status.rates[i].idx;
1121 		tx_attempts_flags[i].idx = info->status.rates[i].idx;
1122 		tx_attempts[i].count = info->status.rates[i].count;
1123 		tx_attempts_flags[i].flags =
1124 				trans_tx_rate_flags_ieee2hwsim(
1125 						&info->status.rates[i]);
1126 	}
1127 
1128 	if (nla_put(skb, HWSIM_ATTR_TX_INFO,
1129 		    sizeof(struct hwsim_tx_rate)*IEEE80211_TX_MAX_RATES,
1130 		    tx_attempts))
1131 		goto nla_put_failure;
1132 
1133 	if (nla_put(skb, HWSIM_ATTR_TX_INFO_FLAGS,
1134 		    sizeof(struct hwsim_tx_rate_flag) * IEEE80211_TX_MAX_RATES,
1135 		    tx_attempts_flags))
1136 		goto nla_put_failure;
1137 
1138 	/* We create a cookie to identify this skb */
1139 	data->pending_cookie++;
1140 	cookie = data->pending_cookie;
1141 	info->rate_driver_data[0] = (void *)cookie;
1142 	if (nla_put_u64_64bit(skb, HWSIM_ATTR_COOKIE, cookie, HWSIM_ATTR_PAD))
1143 		goto nla_put_failure;
1144 
1145 	genlmsg_end(skb, msg_head);
1146 	if (hwsim_unicast_netgroup(data, skb, dst_portid))
1147 		goto err_free_txskb;
1148 
1149 	/* Enqueue the packet */
1150 	skb_queue_tail(&data->pending, my_skb);
1151 	data->tx_pkts++;
1152 	data->tx_bytes += my_skb->len;
1153 	return;
1154 
1155 nla_put_failure:
1156 	nlmsg_free(skb);
1157 err_free_txskb:
1158 	pr_debug("mac80211_hwsim: error occurred in %s\n", __func__);
1159 	ieee80211_free_txskb(hw, my_skb);
1160 	data->tx_failed++;
1161 }
1162 
hwsim_chans_compat(struct ieee80211_channel * c1,struct ieee80211_channel * c2)1163 static bool hwsim_chans_compat(struct ieee80211_channel *c1,
1164 			       struct ieee80211_channel *c2)
1165 {
1166 	if (!c1 || !c2)
1167 		return false;
1168 
1169 	return c1->center_freq == c2->center_freq;
1170 }
1171 
1172 struct tx_iter_data {
1173 	struct ieee80211_channel *channel;
1174 	bool receive;
1175 };
1176 
mac80211_hwsim_tx_iter(void * _data,u8 * addr,struct ieee80211_vif * vif)1177 static void mac80211_hwsim_tx_iter(void *_data, u8 *addr,
1178 				   struct ieee80211_vif *vif)
1179 {
1180 	struct tx_iter_data *data = _data;
1181 
1182 	if (!vif->chanctx_conf)
1183 		return;
1184 
1185 	if (!hwsim_chans_compat(data->channel,
1186 				rcu_dereference(vif->chanctx_conf)->def.chan))
1187 		return;
1188 
1189 	data->receive = true;
1190 }
1191 
mac80211_hwsim_add_vendor_rtap(struct sk_buff * skb)1192 static void mac80211_hwsim_add_vendor_rtap(struct sk_buff *skb)
1193 {
1194 	/*
1195 	 * To enable this code, #define the HWSIM_RADIOTAP_OUI,
1196 	 * e.g. like this:
1197 	 * #define HWSIM_RADIOTAP_OUI "\x02\x00\x00"
1198 	 * (but you should use a valid OUI, not that)
1199 	 *
1200 	 * If anyone wants to 'donate' a radiotap OUI/subns code
1201 	 * please send a patch removing this #ifdef and changing
1202 	 * the values accordingly.
1203 	 */
1204 #ifdef HWSIM_RADIOTAP_OUI
1205 	struct ieee80211_vendor_radiotap *rtap;
1206 
1207 	/*
1208 	 * Note that this code requires the headroom in the SKB
1209 	 * that was allocated earlier.
1210 	 */
1211 	rtap = skb_push(skb, sizeof(*rtap) + 8 + 4);
1212 	rtap->oui[0] = HWSIM_RADIOTAP_OUI[0];
1213 	rtap->oui[1] = HWSIM_RADIOTAP_OUI[1];
1214 	rtap->oui[2] = HWSIM_RADIOTAP_OUI[2];
1215 	rtap->subns = 127;
1216 
1217 	/*
1218 	 * Radiotap vendor namespaces can (and should) also be
1219 	 * split into fields by using the standard radiotap
1220 	 * presence bitmap mechanism. Use just BIT(0) here for
1221 	 * the presence bitmap.
1222 	 */
1223 	rtap->present = BIT(0);
1224 	/* We have 8 bytes of (dummy) data */
1225 	rtap->len = 8;
1226 	/* For testing, also require it to be aligned */
1227 	rtap->align = 8;
1228 	/* And also test that padding works, 4 bytes */
1229 	rtap->pad = 4;
1230 	/* push the data */
1231 	memcpy(rtap->data, "ABCDEFGH", 8);
1232 	/* make sure to clear padding, mac80211 doesn't */
1233 	memset(rtap->data + 8, 0, 4);
1234 
1235 	IEEE80211_SKB_RXCB(skb)->flag |= RX_FLAG_RADIOTAP_VENDOR_DATA;
1236 #endif
1237 }
1238 
mac80211_hwsim_tx_frame_no_nl(struct ieee80211_hw * hw,struct sk_buff * skb,struct ieee80211_channel * chan)1239 static bool mac80211_hwsim_tx_frame_no_nl(struct ieee80211_hw *hw,
1240 					  struct sk_buff *skb,
1241 					  struct ieee80211_channel *chan)
1242 {
1243 	struct mac80211_hwsim_data *data = hw->priv, *data2;
1244 	bool ack = false;
1245 	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data;
1246 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
1247 	struct ieee80211_rx_status rx_status;
1248 	u64 now;
1249 
1250 	memset(&rx_status, 0, sizeof(rx_status));
1251 	rx_status.flag |= RX_FLAG_MACTIME_START;
1252 	rx_status.freq = chan->center_freq;
1253 	rx_status.band = chan->band;
1254 	if (info->control.rates[0].flags & IEEE80211_TX_RC_VHT_MCS) {
1255 		rx_status.rate_idx =
1256 			ieee80211_rate_get_vht_mcs(&info->control.rates[0]);
1257 		rx_status.nss =
1258 			ieee80211_rate_get_vht_nss(&info->control.rates[0]);
1259 		rx_status.encoding = RX_ENC_VHT;
1260 	} else {
1261 		rx_status.rate_idx = info->control.rates[0].idx;
1262 		if (info->control.rates[0].flags & IEEE80211_TX_RC_MCS)
1263 			rx_status.encoding = RX_ENC_HT;
1264 	}
1265 	if (info->control.rates[0].flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
1266 		rx_status.bw = RATE_INFO_BW_40;
1267 	else if (info->control.rates[0].flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
1268 		rx_status.bw = RATE_INFO_BW_80;
1269 	else if (info->control.rates[0].flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
1270 		rx_status.bw = RATE_INFO_BW_160;
1271 	else
1272 		rx_status.bw = RATE_INFO_BW_20;
1273 	if (info->control.rates[0].flags & IEEE80211_TX_RC_SHORT_GI)
1274 		rx_status.enc_flags |= RX_ENC_FLAG_SHORT_GI;
1275 	/* TODO: simulate real signal strength (and optional packet loss) */
1276 	rx_status.signal = -50;
1277 	if (info->control.vif)
1278 		rx_status.signal += info->control.vif->bss_conf.txpower;
1279 
1280 	if (data->ps != PS_DISABLED)
1281 		hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM);
1282 
1283 	/* release the skb's source info */
1284 	skb_orphan(skb);
1285 	skb_dst_drop(skb);
1286 	skb->mark = 0;
1287 	secpath_reset(skb);
1288 	nf_reset(skb);
1289 
1290 	/*
1291 	 * Get absolute mactime here so all HWs RX at the "same time", and
1292 	 * absolute TX time for beacon mactime so the timestamp matches.
1293 	 * Giving beacons a different mactime than non-beacons looks messy, but
1294 	 * it helps the Toffset be exact and a ~10us mactime discrepancy
1295 	 * probably doesn't really matter.
1296 	 */
1297 	if (ieee80211_is_beacon(hdr->frame_control) ||
1298 	    ieee80211_is_probe_resp(hdr->frame_control))
1299 		now = data->abs_bcn_ts;
1300 	else
1301 		now = mac80211_hwsim_get_tsf_raw();
1302 
1303 	/* Copy skb to all enabled radios that are on the current frequency */
1304 	spin_lock(&hwsim_radio_lock);
1305 	list_for_each_entry(data2, &hwsim_radios, list) {
1306 		struct sk_buff *nskb;
1307 		struct tx_iter_data tx_iter_data = {
1308 			.receive = false,
1309 			.channel = chan,
1310 		};
1311 
1312 		if (data == data2)
1313 			continue;
1314 
1315 		if (!data2->started || (data2->idle && !data2->tmp_chan) ||
1316 		    !hwsim_ps_rx_ok(data2, skb))
1317 			continue;
1318 
1319 		if (!(data->group & data2->group))
1320 			continue;
1321 
1322 		if (data->netgroup != data2->netgroup)
1323 			continue;
1324 
1325 		if (!hwsim_chans_compat(chan, data2->tmp_chan) &&
1326 		    !hwsim_chans_compat(chan, data2->channel)) {
1327 			ieee80211_iterate_active_interfaces_atomic(
1328 				data2->hw, IEEE80211_IFACE_ITER_NORMAL,
1329 				mac80211_hwsim_tx_iter, &tx_iter_data);
1330 			if (!tx_iter_data.receive)
1331 				continue;
1332 		}
1333 
1334 		/*
1335 		 * reserve some space for our vendor and the normal
1336 		 * radiotap header, since we're copying anyway
1337 		 */
1338 		if (skb->len < PAGE_SIZE && paged_rx) {
1339 			struct page *page = alloc_page(GFP_ATOMIC);
1340 
1341 			if (!page)
1342 				continue;
1343 
1344 			nskb = dev_alloc_skb(128);
1345 			if (!nskb) {
1346 				__free_page(page);
1347 				continue;
1348 			}
1349 
1350 			memcpy(page_address(page), skb->data, skb->len);
1351 			skb_add_rx_frag(nskb, 0, page, 0, skb->len, skb->len);
1352 		} else {
1353 			nskb = skb_copy(skb, GFP_ATOMIC);
1354 			if (!nskb)
1355 				continue;
1356 		}
1357 
1358 		if (mac80211_hwsim_addr_match(data2, hdr->addr1))
1359 			ack = true;
1360 
1361 		rx_status.mactime = now + data2->tsf_offset;
1362 
1363 		memcpy(IEEE80211_SKB_RXCB(nskb), &rx_status, sizeof(rx_status));
1364 
1365 		mac80211_hwsim_add_vendor_rtap(nskb);
1366 
1367 		data2->rx_pkts++;
1368 		data2->rx_bytes += nskb->len;
1369 		ieee80211_rx_irqsafe(data2->hw, nskb);
1370 	}
1371 	spin_unlock(&hwsim_radio_lock);
1372 
1373 	return ack;
1374 }
1375 
mac80211_hwsim_tx(struct ieee80211_hw * hw,struct ieee80211_tx_control * control,struct sk_buff * skb)1376 static void mac80211_hwsim_tx(struct ieee80211_hw *hw,
1377 			      struct ieee80211_tx_control *control,
1378 			      struct sk_buff *skb)
1379 {
1380 	struct mac80211_hwsim_data *data = hw->priv;
1381 	struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
1382 	struct ieee80211_hdr *hdr = (void *)skb->data;
1383 	struct ieee80211_chanctx_conf *chanctx_conf;
1384 	struct ieee80211_channel *channel;
1385 	bool ack;
1386 	u32 _portid;
1387 
1388 	if (WARN_ON(skb->len < 10)) {
1389 		/* Should not happen; just a sanity check for addr1 use */
1390 		ieee80211_free_txskb(hw, skb);
1391 		return;
1392 	}
1393 
1394 	if (!data->use_chanctx) {
1395 		channel = data->channel;
1396 	} else if (txi->hw_queue == 4) {
1397 		channel = data->tmp_chan;
1398 	} else {
1399 		chanctx_conf = rcu_dereference(txi->control.vif->chanctx_conf);
1400 		if (chanctx_conf)
1401 			channel = chanctx_conf->def.chan;
1402 		else
1403 			channel = NULL;
1404 	}
1405 
1406 	if (WARN(!channel, "TX w/o channel - queue = %d\n", txi->hw_queue)) {
1407 		ieee80211_free_txskb(hw, skb);
1408 		return;
1409 	}
1410 
1411 	if (data->idle && !data->tmp_chan) {
1412 		wiphy_dbg(hw->wiphy, "Trying to TX when idle - reject\n");
1413 		ieee80211_free_txskb(hw, skb);
1414 		return;
1415 	}
1416 
1417 	if (txi->control.vif)
1418 		hwsim_check_magic(txi->control.vif);
1419 	if (control->sta)
1420 		hwsim_check_sta_magic(control->sta);
1421 
1422 	if (ieee80211_hw_check(hw, SUPPORTS_RC_TABLE))
1423 		ieee80211_get_tx_rates(txi->control.vif, control->sta, skb,
1424 				       txi->control.rates,
1425 				       ARRAY_SIZE(txi->control.rates));
1426 
1427 	if (skb->len >= 24 + 8 &&
1428 	    ieee80211_is_probe_resp(hdr->frame_control)) {
1429 		/* fake header transmission time */
1430 		struct ieee80211_mgmt *mgmt;
1431 		struct ieee80211_rate *txrate;
1432 		u64 ts;
1433 
1434 		mgmt = (struct ieee80211_mgmt *)skb->data;
1435 		txrate = ieee80211_get_tx_rate(hw, txi);
1436 		ts = mac80211_hwsim_get_tsf_raw();
1437 		mgmt->u.probe_resp.timestamp =
1438 			cpu_to_le64(ts + data->tsf_offset +
1439 				    24 * 8 * 10 / txrate->bitrate);
1440 	}
1441 
1442 	mac80211_hwsim_monitor_rx(hw, skb, channel);
1443 
1444 	/* wmediumd mode check */
1445 	_portid = READ_ONCE(data->wmediumd);
1446 
1447 	if (_portid)
1448 		return mac80211_hwsim_tx_frame_nl(hw, skb, _portid);
1449 
1450 	/* NO wmediumd detected, perfect medium simulation */
1451 	data->tx_pkts++;
1452 	data->tx_bytes += skb->len;
1453 	ack = mac80211_hwsim_tx_frame_no_nl(hw, skb, channel);
1454 
1455 	if (ack && skb->len >= 16)
1456 		mac80211_hwsim_monitor_ack(channel, hdr->addr2);
1457 
1458 	ieee80211_tx_info_clear_status(txi);
1459 
1460 	/* frame was transmitted at most favorable rate at first attempt */
1461 	txi->control.rates[0].count = 1;
1462 	txi->control.rates[1].idx = -1;
1463 
1464 	if (!(txi->flags & IEEE80211_TX_CTL_NO_ACK) && ack)
1465 		txi->flags |= IEEE80211_TX_STAT_ACK;
1466 	ieee80211_tx_status_irqsafe(hw, skb);
1467 }
1468 
1469 
mac80211_hwsim_start(struct ieee80211_hw * hw)1470 static int mac80211_hwsim_start(struct ieee80211_hw *hw)
1471 {
1472 	struct mac80211_hwsim_data *data = hw->priv;
1473 	wiphy_dbg(hw->wiphy, "%s\n", __func__);
1474 	data->started = true;
1475 	return 0;
1476 }
1477 
1478 
mac80211_hwsim_stop(struct ieee80211_hw * hw)1479 static void mac80211_hwsim_stop(struct ieee80211_hw *hw)
1480 {
1481 	struct mac80211_hwsim_data *data = hw->priv;
1482 	data->started = false;
1483 	tasklet_hrtimer_cancel(&data->beacon_timer);
1484 	wiphy_dbg(hw->wiphy, "%s\n", __func__);
1485 }
1486 
1487 
mac80211_hwsim_add_interface(struct ieee80211_hw * hw,struct ieee80211_vif * vif)1488 static int mac80211_hwsim_add_interface(struct ieee80211_hw *hw,
1489 					struct ieee80211_vif *vif)
1490 {
1491 	wiphy_dbg(hw->wiphy, "%s (type=%d mac_addr=%pM)\n",
1492 		  __func__, ieee80211_vif_type_p2p(vif),
1493 		  vif->addr);
1494 	hwsim_set_magic(vif);
1495 
1496 	vif->cab_queue = 0;
1497 	vif->hw_queue[IEEE80211_AC_VO] = 0;
1498 	vif->hw_queue[IEEE80211_AC_VI] = 1;
1499 	vif->hw_queue[IEEE80211_AC_BE] = 2;
1500 	vif->hw_queue[IEEE80211_AC_BK] = 3;
1501 
1502 	return 0;
1503 }
1504 
1505 
mac80211_hwsim_change_interface(struct ieee80211_hw * hw,struct ieee80211_vif * vif,enum nl80211_iftype newtype,bool newp2p)1506 static int mac80211_hwsim_change_interface(struct ieee80211_hw *hw,
1507 					   struct ieee80211_vif *vif,
1508 					   enum nl80211_iftype newtype,
1509 					   bool newp2p)
1510 {
1511 	newtype = ieee80211_iftype_p2p(newtype, newp2p);
1512 	wiphy_dbg(hw->wiphy,
1513 		  "%s (old type=%d, new type=%d, mac_addr=%pM)\n",
1514 		  __func__, ieee80211_vif_type_p2p(vif),
1515 		    newtype, vif->addr);
1516 	hwsim_check_magic(vif);
1517 
1518 	/*
1519 	 * interface may change from non-AP to AP in
1520 	 * which case this needs to be set up again
1521 	 */
1522 	vif->cab_queue = 0;
1523 
1524 	return 0;
1525 }
1526 
mac80211_hwsim_remove_interface(struct ieee80211_hw * hw,struct ieee80211_vif * vif)1527 static void mac80211_hwsim_remove_interface(
1528 	struct ieee80211_hw *hw, struct ieee80211_vif *vif)
1529 {
1530 	wiphy_dbg(hw->wiphy, "%s (type=%d mac_addr=%pM)\n",
1531 		  __func__, ieee80211_vif_type_p2p(vif),
1532 		  vif->addr);
1533 	hwsim_check_magic(vif);
1534 	hwsim_clear_magic(vif);
1535 }
1536 
mac80211_hwsim_tx_frame(struct ieee80211_hw * hw,struct sk_buff * skb,struct ieee80211_channel * chan)1537 static void mac80211_hwsim_tx_frame(struct ieee80211_hw *hw,
1538 				    struct sk_buff *skb,
1539 				    struct ieee80211_channel *chan)
1540 {
1541 	struct mac80211_hwsim_data *data = hw->priv;
1542 	u32 _pid = READ_ONCE(data->wmediumd);
1543 
1544 	if (ieee80211_hw_check(hw, SUPPORTS_RC_TABLE)) {
1545 		struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb);
1546 		ieee80211_get_tx_rates(txi->control.vif, NULL, skb,
1547 				       txi->control.rates,
1548 				       ARRAY_SIZE(txi->control.rates));
1549 	}
1550 
1551 	mac80211_hwsim_monitor_rx(hw, skb, chan);
1552 
1553 	if (_pid)
1554 		return mac80211_hwsim_tx_frame_nl(hw, skb, _pid);
1555 
1556 	mac80211_hwsim_tx_frame_no_nl(hw, skb, chan);
1557 	dev_kfree_skb(skb);
1558 }
1559 
mac80211_hwsim_beacon_tx(void * arg,u8 * mac,struct ieee80211_vif * vif)1560 static void mac80211_hwsim_beacon_tx(void *arg, u8 *mac,
1561 				     struct ieee80211_vif *vif)
1562 {
1563 	struct mac80211_hwsim_data *data = arg;
1564 	struct ieee80211_hw *hw = data->hw;
1565 	struct ieee80211_tx_info *info;
1566 	struct ieee80211_rate *txrate;
1567 	struct ieee80211_mgmt *mgmt;
1568 	struct sk_buff *skb;
1569 
1570 	hwsim_check_magic(vif);
1571 
1572 	if (vif->type != NL80211_IFTYPE_AP &&
1573 	    vif->type != NL80211_IFTYPE_MESH_POINT &&
1574 	    vif->type != NL80211_IFTYPE_ADHOC)
1575 		return;
1576 
1577 	skb = ieee80211_beacon_get(hw, vif);
1578 	if (skb == NULL)
1579 		return;
1580 	info = IEEE80211_SKB_CB(skb);
1581 	if (ieee80211_hw_check(hw, SUPPORTS_RC_TABLE))
1582 		ieee80211_get_tx_rates(vif, NULL, skb,
1583 				       info->control.rates,
1584 				       ARRAY_SIZE(info->control.rates));
1585 
1586 	txrate = ieee80211_get_tx_rate(hw, info);
1587 
1588 	mgmt = (struct ieee80211_mgmt *) skb->data;
1589 	/* fake header transmission time */
1590 	data->abs_bcn_ts = mac80211_hwsim_get_tsf_raw();
1591 	mgmt->u.beacon.timestamp = cpu_to_le64(data->abs_bcn_ts +
1592 					       data->tsf_offset +
1593 					       24 * 8 * 10 / txrate->bitrate);
1594 
1595 	mac80211_hwsim_tx_frame(hw, skb,
1596 				rcu_dereference(vif->chanctx_conf)->def.chan);
1597 
1598 	if (vif->csa_active && ieee80211_csa_is_complete(vif))
1599 		ieee80211_csa_finish(vif);
1600 }
1601 
1602 static enum hrtimer_restart
mac80211_hwsim_beacon(struct hrtimer * timer)1603 mac80211_hwsim_beacon(struct hrtimer *timer)
1604 {
1605 	struct mac80211_hwsim_data *data =
1606 		container_of(timer, struct mac80211_hwsim_data,
1607 			     beacon_timer.timer);
1608 	struct ieee80211_hw *hw = data->hw;
1609 	u64 bcn_int = data->beacon_int;
1610 	ktime_t next_bcn;
1611 
1612 	if (!data->started)
1613 		goto out;
1614 
1615 	ieee80211_iterate_active_interfaces_atomic(
1616 		hw, IEEE80211_IFACE_ITER_NORMAL,
1617 		mac80211_hwsim_beacon_tx, data);
1618 
1619 	/* beacon at new TBTT + beacon interval */
1620 	if (data->bcn_delta) {
1621 		bcn_int -= data->bcn_delta;
1622 		data->bcn_delta = 0;
1623 	}
1624 
1625 	next_bcn = ktime_add(hrtimer_get_expires(timer),
1626 			     ns_to_ktime(bcn_int * 1000));
1627 	tasklet_hrtimer_start(&data->beacon_timer, next_bcn, HRTIMER_MODE_ABS);
1628 out:
1629 	return HRTIMER_NORESTART;
1630 }
1631 
1632 static const char * const hwsim_chanwidths[] = {
1633 	[NL80211_CHAN_WIDTH_20_NOHT] = "noht",
1634 	[NL80211_CHAN_WIDTH_20] = "ht20",
1635 	[NL80211_CHAN_WIDTH_40] = "ht40",
1636 	[NL80211_CHAN_WIDTH_80] = "vht80",
1637 	[NL80211_CHAN_WIDTH_80P80] = "vht80p80",
1638 	[NL80211_CHAN_WIDTH_160] = "vht160",
1639 };
1640 
mac80211_hwsim_config(struct ieee80211_hw * hw,u32 changed)1641 static int mac80211_hwsim_config(struct ieee80211_hw *hw, u32 changed)
1642 {
1643 	struct mac80211_hwsim_data *data = hw->priv;
1644 	struct ieee80211_conf *conf = &hw->conf;
1645 	static const char *smps_modes[IEEE80211_SMPS_NUM_MODES] = {
1646 		[IEEE80211_SMPS_AUTOMATIC] = "auto",
1647 		[IEEE80211_SMPS_OFF] = "off",
1648 		[IEEE80211_SMPS_STATIC] = "static",
1649 		[IEEE80211_SMPS_DYNAMIC] = "dynamic",
1650 	};
1651 	int idx;
1652 
1653 	if (conf->chandef.chan)
1654 		wiphy_dbg(hw->wiphy,
1655 			  "%s (freq=%d(%d - %d)/%s idle=%d ps=%d smps=%s)\n",
1656 			  __func__,
1657 			  conf->chandef.chan->center_freq,
1658 			  conf->chandef.center_freq1,
1659 			  conf->chandef.center_freq2,
1660 			  hwsim_chanwidths[conf->chandef.width],
1661 			  !!(conf->flags & IEEE80211_CONF_IDLE),
1662 			  !!(conf->flags & IEEE80211_CONF_PS),
1663 			  smps_modes[conf->smps_mode]);
1664 	else
1665 		wiphy_dbg(hw->wiphy,
1666 			  "%s (freq=0 idle=%d ps=%d smps=%s)\n",
1667 			  __func__,
1668 			  !!(conf->flags & IEEE80211_CONF_IDLE),
1669 			  !!(conf->flags & IEEE80211_CONF_PS),
1670 			  smps_modes[conf->smps_mode]);
1671 
1672 	data->idle = !!(conf->flags & IEEE80211_CONF_IDLE);
1673 
1674 	WARN_ON(conf->chandef.chan && data->use_chanctx);
1675 
1676 	mutex_lock(&data->mutex);
1677 	if (data->scanning && conf->chandef.chan) {
1678 		for (idx = 0; idx < ARRAY_SIZE(data->survey_data); idx++) {
1679 			if (data->survey_data[idx].channel == data->channel) {
1680 				data->survey_data[idx].start =
1681 					data->survey_data[idx].next_start;
1682 				data->survey_data[idx].end = jiffies;
1683 				break;
1684 			}
1685 		}
1686 
1687 		data->channel = conf->chandef.chan;
1688 
1689 		for (idx = 0; idx < ARRAY_SIZE(data->survey_data); idx++) {
1690 			if (data->survey_data[idx].channel &&
1691 			    data->survey_data[idx].channel != data->channel)
1692 				continue;
1693 			data->survey_data[idx].channel = data->channel;
1694 			data->survey_data[idx].next_start = jiffies;
1695 			break;
1696 		}
1697 	} else {
1698 		data->channel = conf->chandef.chan;
1699 	}
1700 	mutex_unlock(&data->mutex);
1701 
1702 	if (!data->started || !data->beacon_int)
1703 		tasklet_hrtimer_cancel(&data->beacon_timer);
1704 	else if (!hrtimer_is_queued(&data->beacon_timer.timer)) {
1705 		u64 tsf = mac80211_hwsim_get_tsf(hw, NULL);
1706 		u32 bcn_int = data->beacon_int;
1707 		u64 until_tbtt = bcn_int - do_div(tsf, bcn_int);
1708 
1709 		tasklet_hrtimer_start(&data->beacon_timer,
1710 				      ns_to_ktime(until_tbtt * 1000),
1711 				      HRTIMER_MODE_REL);
1712 	}
1713 
1714 	return 0;
1715 }
1716 
1717 
mac80211_hwsim_configure_filter(struct ieee80211_hw * hw,unsigned int changed_flags,unsigned int * total_flags,u64 multicast)1718 static void mac80211_hwsim_configure_filter(struct ieee80211_hw *hw,
1719 					    unsigned int changed_flags,
1720 					    unsigned int *total_flags,u64 multicast)
1721 {
1722 	struct mac80211_hwsim_data *data = hw->priv;
1723 
1724 	wiphy_dbg(hw->wiphy, "%s\n", __func__);
1725 
1726 	data->rx_filter = 0;
1727 	if (*total_flags & FIF_ALLMULTI)
1728 		data->rx_filter |= FIF_ALLMULTI;
1729 
1730 	*total_flags = data->rx_filter;
1731 }
1732 
mac80211_hwsim_bcn_en_iter(void * data,u8 * mac,struct ieee80211_vif * vif)1733 static void mac80211_hwsim_bcn_en_iter(void *data, u8 *mac,
1734 				       struct ieee80211_vif *vif)
1735 {
1736 	unsigned int *count = data;
1737 	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
1738 
1739 	if (vp->bcn_en)
1740 		(*count)++;
1741 }
1742 
mac80211_hwsim_bss_info_changed(struct ieee80211_hw * hw,struct ieee80211_vif * vif,struct ieee80211_bss_conf * info,u32 changed)1743 static void mac80211_hwsim_bss_info_changed(struct ieee80211_hw *hw,
1744 					    struct ieee80211_vif *vif,
1745 					    struct ieee80211_bss_conf *info,
1746 					    u32 changed)
1747 {
1748 	struct hwsim_vif_priv *vp = (void *)vif->drv_priv;
1749 	struct mac80211_hwsim_data *data = hw->priv;
1750 
1751 	hwsim_check_magic(vif);
1752 
1753 	wiphy_dbg(hw->wiphy, "%s(changed=0x%x vif->addr=%pM)\n",
1754 		  __func__, changed, vif->addr);
1755 
1756 	if (changed & BSS_CHANGED_BSSID) {
1757 		wiphy_dbg(hw->wiphy, "%s: BSSID changed: %pM\n",
1758 			  __func__, info->bssid);
1759 		memcpy(vp->bssid, info->bssid, ETH_ALEN);
1760 	}
1761 
1762 	if (changed & BSS_CHANGED_ASSOC) {
1763 		wiphy_dbg(hw->wiphy, "  ASSOC: assoc=%d aid=%d\n",
1764 			  info->assoc, info->aid);
1765 		vp->assoc = info->assoc;
1766 		vp->aid = info->aid;
1767 	}
1768 
1769 	if (changed & BSS_CHANGED_BEACON_ENABLED) {
1770 		wiphy_dbg(hw->wiphy, "  BCN EN: %d (BI=%u)\n",
1771 			  info->enable_beacon, info->beacon_int);
1772 		vp->bcn_en = info->enable_beacon;
1773 		if (data->started &&
1774 		    !hrtimer_is_queued(&data->beacon_timer.timer) &&
1775 		    info->enable_beacon) {
1776 			u64 tsf, until_tbtt;
1777 			u32 bcn_int;
1778 			data->beacon_int = info->beacon_int * 1024;
1779 			tsf = mac80211_hwsim_get_tsf(hw, vif);
1780 			bcn_int = data->beacon_int;
1781 			until_tbtt = bcn_int - do_div(tsf, bcn_int);
1782 			tasklet_hrtimer_start(&data->beacon_timer,
1783 					      ns_to_ktime(until_tbtt * 1000),
1784 					      HRTIMER_MODE_REL);
1785 		} else if (!info->enable_beacon) {
1786 			unsigned int count = 0;
1787 			ieee80211_iterate_active_interfaces_atomic(
1788 				data->hw, IEEE80211_IFACE_ITER_NORMAL,
1789 				mac80211_hwsim_bcn_en_iter, &count);
1790 			wiphy_dbg(hw->wiphy, "  beaconing vifs remaining: %u",
1791 				  count);
1792 			if (count == 0) {
1793 				tasklet_hrtimer_cancel(&data->beacon_timer);
1794 				data->beacon_int = 0;
1795 			}
1796 		}
1797 	}
1798 
1799 	if (changed & BSS_CHANGED_ERP_CTS_PROT) {
1800 		wiphy_dbg(hw->wiphy, "  ERP_CTS_PROT: %d\n",
1801 			  info->use_cts_prot);
1802 	}
1803 
1804 	if (changed & BSS_CHANGED_ERP_PREAMBLE) {
1805 		wiphy_dbg(hw->wiphy, "  ERP_PREAMBLE: %d\n",
1806 			  info->use_short_preamble);
1807 	}
1808 
1809 	if (changed & BSS_CHANGED_ERP_SLOT) {
1810 		wiphy_dbg(hw->wiphy, "  ERP_SLOT: %d\n", info->use_short_slot);
1811 	}
1812 
1813 	if (changed & BSS_CHANGED_HT) {
1814 		wiphy_dbg(hw->wiphy, "  HT: op_mode=0x%x\n",
1815 			  info->ht_operation_mode);
1816 	}
1817 
1818 	if (changed & BSS_CHANGED_BASIC_RATES) {
1819 		wiphy_dbg(hw->wiphy, "  BASIC_RATES: 0x%llx\n",
1820 			  (unsigned long long) info->basic_rates);
1821 	}
1822 
1823 	if (changed & BSS_CHANGED_TXPOWER)
1824 		wiphy_dbg(hw->wiphy, "  TX Power: %d dBm\n", info->txpower);
1825 }
1826 
mac80211_hwsim_sta_add(struct ieee80211_hw * hw,struct ieee80211_vif * vif,struct ieee80211_sta * sta)1827 static int mac80211_hwsim_sta_add(struct ieee80211_hw *hw,
1828 				  struct ieee80211_vif *vif,
1829 				  struct ieee80211_sta *sta)
1830 {
1831 	hwsim_check_magic(vif);
1832 	hwsim_set_sta_magic(sta);
1833 
1834 	return 0;
1835 }
1836 
mac80211_hwsim_sta_remove(struct ieee80211_hw * hw,struct ieee80211_vif * vif,struct ieee80211_sta * sta)1837 static int mac80211_hwsim_sta_remove(struct ieee80211_hw *hw,
1838 				     struct ieee80211_vif *vif,
1839 				     struct ieee80211_sta *sta)
1840 {
1841 	hwsim_check_magic(vif);
1842 	hwsim_clear_sta_magic(sta);
1843 
1844 	return 0;
1845 }
1846 
mac80211_hwsim_sta_notify(struct ieee80211_hw * hw,struct ieee80211_vif * vif,enum sta_notify_cmd cmd,struct ieee80211_sta * sta)1847 static void mac80211_hwsim_sta_notify(struct ieee80211_hw *hw,
1848 				      struct ieee80211_vif *vif,
1849 				      enum sta_notify_cmd cmd,
1850 				      struct ieee80211_sta *sta)
1851 {
1852 	hwsim_check_magic(vif);
1853 
1854 	switch (cmd) {
1855 	case STA_NOTIFY_SLEEP:
1856 	case STA_NOTIFY_AWAKE:
1857 		/* TODO: make good use of these flags */
1858 		break;
1859 	default:
1860 		WARN(1, "Invalid sta notify: %d\n", cmd);
1861 		break;
1862 	}
1863 }
1864 
mac80211_hwsim_set_tim(struct ieee80211_hw * hw,struct ieee80211_sta * sta,bool set)1865 static int mac80211_hwsim_set_tim(struct ieee80211_hw *hw,
1866 				  struct ieee80211_sta *sta,
1867 				  bool set)
1868 {
1869 	hwsim_check_sta_magic(sta);
1870 	return 0;
1871 }
1872 
mac80211_hwsim_conf_tx(struct ieee80211_hw * hw,struct ieee80211_vif * vif,u16 queue,const struct ieee80211_tx_queue_params * params)1873 static int mac80211_hwsim_conf_tx(
1874 	struct ieee80211_hw *hw,
1875 	struct ieee80211_vif *vif, u16 queue,
1876 	const struct ieee80211_tx_queue_params *params)
1877 {
1878 	wiphy_dbg(hw->wiphy,
1879 		  "%s (queue=%d txop=%d cw_min=%d cw_max=%d aifs=%d)\n",
1880 		  __func__, queue,
1881 		  params->txop, params->cw_min,
1882 		  params->cw_max, params->aifs);
1883 	return 0;
1884 }
1885 
mac80211_hwsim_get_survey(struct ieee80211_hw * hw,int idx,struct survey_info * survey)1886 static int mac80211_hwsim_get_survey(struct ieee80211_hw *hw, int idx,
1887 				     struct survey_info *survey)
1888 {
1889 	struct mac80211_hwsim_data *hwsim = hw->priv;
1890 
1891 	if (idx < 0 || idx >= ARRAY_SIZE(hwsim->survey_data))
1892 		return -ENOENT;
1893 
1894 	mutex_lock(&hwsim->mutex);
1895 	survey->channel = hwsim->survey_data[idx].channel;
1896 	if (!survey->channel) {
1897 		mutex_unlock(&hwsim->mutex);
1898 		return -ENOENT;
1899 	}
1900 
1901 	/*
1902 	 * Magically conjured dummy values --- this is only ok for simulated hardware.
1903 	 *
1904 	 * A real driver which cannot determine real values noise MUST NOT
1905 	 * report any, especially not a magically conjured ones :-)
1906 	 */
1907 	survey->filled = SURVEY_INFO_NOISE_DBM |
1908 			 SURVEY_INFO_TIME |
1909 			 SURVEY_INFO_TIME_BUSY;
1910 	survey->noise = -92;
1911 	survey->time =
1912 		jiffies_to_msecs(hwsim->survey_data[idx].end -
1913 				 hwsim->survey_data[idx].start);
1914 	/* report 12.5% of channel time is used */
1915 	survey->time_busy = survey->time/8;
1916 	mutex_unlock(&hwsim->mutex);
1917 
1918 	return 0;
1919 }
1920 
1921 #ifdef CONFIG_NL80211_TESTMODE
1922 /*
1923  * This section contains example code for using netlink
1924  * attributes with the testmode command in nl80211.
1925  */
1926 
1927 /* These enums need to be kept in sync with userspace */
1928 enum hwsim_testmode_attr {
1929 	__HWSIM_TM_ATTR_INVALID	= 0,
1930 	HWSIM_TM_ATTR_CMD	= 1,
1931 	HWSIM_TM_ATTR_PS	= 2,
1932 
1933 	/* keep last */
1934 	__HWSIM_TM_ATTR_AFTER_LAST,
1935 	HWSIM_TM_ATTR_MAX	= __HWSIM_TM_ATTR_AFTER_LAST - 1
1936 };
1937 
1938 enum hwsim_testmode_cmd {
1939 	HWSIM_TM_CMD_SET_PS		= 0,
1940 	HWSIM_TM_CMD_GET_PS		= 1,
1941 	HWSIM_TM_CMD_STOP_QUEUES	= 2,
1942 	HWSIM_TM_CMD_WAKE_QUEUES	= 3,
1943 };
1944 
1945 static const struct nla_policy hwsim_testmode_policy[HWSIM_TM_ATTR_MAX + 1] = {
1946 	[HWSIM_TM_ATTR_CMD] = { .type = NLA_U32 },
1947 	[HWSIM_TM_ATTR_PS] = { .type = NLA_U32 },
1948 };
1949 
mac80211_hwsim_testmode_cmd(struct ieee80211_hw * hw,struct ieee80211_vif * vif,void * data,int len)1950 static int mac80211_hwsim_testmode_cmd(struct ieee80211_hw *hw,
1951 				       struct ieee80211_vif *vif,
1952 				       void *data, int len)
1953 {
1954 	struct mac80211_hwsim_data *hwsim = hw->priv;
1955 	struct nlattr *tb[HWSIM_TM_ATTR_MAX + 1];
1956 	struct sk_buff *skb;
1957 	int err, ps;
1958 
1959 	err = nla_parse(tb, HWSIM_TM_ATTR_MAX, data, len,
1960 			hwsim_testmode_policy, NULL);
1961 	if (err)
1962 		return err;
1963 
1964 	if (!tb[HWSIM_TM_ATTR_CMD])
1965 		return -EINVAL;
1966 
1967 	switch (nla_get_u32(tb[HWSIM_TM_ATTR_CMD])) {
1968 	case HWSIM_TM_CMD_SET_PS:
1969 		if (!tb[HWSIM_TM_ATTR_PS])
1970 			return -EINVAL;
1971 		ps = nla_get_u32(tb[HWSIM_TM_ATTR_PS]);
1972 		return hwsim_fops_ps_write(hwsim, ps);
1973 	case HWSIM_TM_CMD_GET_PS:
1974 		skb = cfg80211_testmode_alloc_reply_skb(hw->wiphy,
1975 						nla_total_size(sizeof(u32)));
1976 		if (!skb)
1977 			return -ENOMEM;
1978 		if (nla_put_u32(skb, HWSIM_TM_ATTR_PS, hwsim->ps))
1979 			goto nla_put_failure;
1980 		return cfg80211_testmode_reply(skb);
1981 	case HWSIM_TM_CMD_STOP_QUEUES:
1982 		ieee80211_stop_queues(hw);
1983 		return 0;
1984 	case HWSIM_TM_CMD_WAKE_QUEUES:
1985 		ieee80211_wake_queues(hw);
1986 		return 0;
1987 	default:
1988 		return -EOPNOTSUPP;
1989 	}
1990 
1991  nla_put_failure:
1992 	kfree_skb(skb);
1993 	return -ENOBUFS;
1994 }
1995 #endif
1996 
mac80211_hwsim_ampdu_action(struct ieee80211_hw * hw,struct ieee80211_vif * vif,struct ieee80211_ampdu_params * params)1997 static int mac80211_hwsim_ampdu_action(struct ieee80211_hw *hw,
1998 				       struct ieee80211_vif *vif,
1999 				       struct ieee80211_ampdu_params *params)
2000 {
2001 	struct ieee80211_sta *sta = params->sta;
2002 	enum ieee80211_ampdu_mlme_action action = params->action;
2003 	u16 tid = params->tid;
2004 
2005 	switch (action) {
2006 	case IEEE80211_AMPDU_TX_START:
2007 		ieee80211_start_tx_ba_cb_irqsafe(vif, sta->addr, tid);
2008 		break;
2009 	case IEEE80211_AMPDU_TX_STOP_CONT:
2010 	case IEEE80211_AMPDU_TX_STOP_FLUSH:
2011 	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
2012 		ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid);
2013 		break;
2014 	case IEEE80211_AMPDU_TX_OPERATIONAL:
2015 		break;
2016 	case IEEE80211_AMPDU_RX_START:
2017 	case IEEE80211_AMPDU_RX_STOP:
2018 		break;
2019 	default:
2020 		return -EOPNOTSUPP;
2021 	}
2022 
2023 	return 0;
2024 }
2025 
mac80211_hwsim_flush(struct ieee80211_hw * hw,struct ieee80211_vif * vif,u32 queues,bool drop)2026 static void mac80211_hwsim_flush(struct ieee80211_hw *hw,
2027 				 struct ieee80211_vif *vif,
2028 				 u32 queues, bool drop)
2029 {
2030 	/* Not implemented, queues only on kernel side */
2031 }
2032 
hw_scan_work(struct work_struct * work)2033 static void hw_scan_work(struct work_struct *work)
2034 {
2035 	struct mac80211_hwsim_data *hwsim =
2036 		container_of(work, struct mac80211_hwsim_data, hw_scan.work);
2037 	struct cfg80211_scan_request *req = hwsim->hw_scan_request;
2038 	int dwell, i;
2039 
2040 	mutex_lock(&hwsim->mutex);
2041 	if (hwsim->scan_chan_idx >= req->n_channels) {
2042 		struct cfg80211_scan_info info = {
2043 			.aborted = false,
2044 		};
2045 
2046 		wiphy_dbg(hwsim->hw->wiphy, "hw scan complete\n");
2047 		ieee80211_scan_completed(hwsim->hw, &info);
2048 		hwsim->hw_scan_request = NULL;
2049 		hwsim->hw_scan_vif = NULL;
2050 		hwsim->tmp_chan = NULL;
2051 		mutex_unlock(&hwsim->mutex);
2052 		return;
2053 	}
2054 
2055 	wiphy_dbg(hwsim->hw->wiphy, "hw scan %d MHz\n",
2056 		  req->channels[hwsim->scan_chan_idx]->center_freq);
2057 
2058 	hwsim->tmp_chan = req->channels[hwsim->scan_chan_idx];
2059 	if (hwsim->tmp_chan->flags & (IEEE80211_CHAN_NO_IR |
2060 				      IEEE80211_CHAN_RADAR) ||
2061 	    !req->n_ssids) {
2062 		dwell = 120;
2063 	} else {
2064 		dwell = 30;
2065 		/* send probes */
2066 		for (i = 0; i < req->n_ssids; i++) {
2067 			struct sk_buff *probe;
2068 			struct ieee80211_mgmt *mgmt;
2069 
2070 			probe = ieee80211_probereq_get(hwsim->hw,
2071 						       hwsim->scan_addr,
2072 						       req->ssids[i].ssid,
2073 						       req->ssids[i].ssid_len,
2074 						       req->ie_len);
2075 			if (!probe)
2076 				continue;
2077 
2078 			mgmt = (struct ieee80211_mgmt *) probe->data;
2079 			memcpy(mgmt->da, req->bssid, ETH_ALEN);
2080 			memcpy(mgmt->bssid, req->bssid, ETH_ALEN);
2081 
2082 			if (req->ie_len)
2083 				skb_put_data(probe, req->ie, req->ie_len);
2084 
2085 			local_bh_disable();
2086 			mac80211_hwsim_tx_frame(hwsim->hw, probe,
2087 						hwsim->tmp_chan);
2088 			local_bh_enable();
2089 		}
2090 	}
2091 	ieee80211_queue_delayed_work(hwsim->hw, &hwsim->hw_scan,
2092 				     msecs_to_jiffies(dwell));
2093 	hwsim->survey_data[hwsim->scan_chan_idx].channel = hwsim->tmp_chan;
2094 	hwsim->survey_data[hwsim->scan_chan_idx].start = jiffies;
2095 	hwsim->survey_data[hwsim->scan_chan_idx].end =
2096 		jiffies + msecs_to_jiffies(dwell);
2097 	hwsim->scan_chan_idx++;
2098 	mutex_unlock(&hwsim->mutex);
2099 }
2100 
mac80211_hwsim_hw_scan(struct ieee80211_hw * hw,struct ieee80211_vif * vif,struct ieee80211_scan_request * hw_req)2101 static int mac80211_hwsim_hw_scan(struct ieee80211_hw *hw,
2102 				  struct ieee80211_vif *vif,
2103 				  struct ieee80211_scan_request *hw_req)
2104 {
2105 	struct mac80211_hwsim_data *hwsim = hw->priv;
2106 	struct cfg80211_scan_request *req = &hw_req->req;
2107 
2108 	mutex_lock(&hwsim->mutex);
2109 	if (WARN_ON(hwsim->tmp_chan || hwsim->hw_scan_request)) {
2110 		mutex_unlock(&hwsim->mutex);
2111 		return -EBUSY;
2112 	}
2113 	hwsim->hw_scan_request = req;
2114 	hwsim->hw_scan_vif = vif;
2115 	hwsim->scan_chan_idx = 0;
2116 	if (req->flags & NL80211_SCAN_FLAG_RANDOM_ADDR)
2117 		get_random_mask_addr(hwsim->scan_addr,
2118 				     hw_req->req.mac_addr,
2119 				     hw_req->req.mac_addr_mask);
2120 	else
2121 		memcpy(hwsim->scan_addr, vif->addr, ETH_ALEN);
2122 	memset(hwsim->survey_data, 0, sizeof(hwsim->survey_data));
2123 	mutex_unlock(&hwsim->mutex);
2124 
2125 	wiphy_dbg(hw->wiphy, "hwsim hw_scan request\n");
2126 
2127 	ieee80211_queue_delayed_work(hwsim->hw, &hwsim->hw_scan, 0);
2128 
2129 	return 0;
2130 }
2131 
mac80211_hwsim_cancel_hw_scan(struct ieee80211_hw * hw,struct ieee80211_vif * vif)2132 static void mac80211_hwsim_cancel_hw_scan(struct ieee80211_hw *hw,
2133 					  struct ieee80211_vif *vif)
2134 {
2135 	struct mac80211_hwsim_data *hwsim = hw->priv;
2136 	struct cfg80211_scan_info info = {
2137 		.aborted = true,
2138 	};
2139 
2140 	wiphy_dbg(hw->wiphy, "hwsim cancel_hw_scan\n");
2141 
2142 	cancel_delayed_work_sync(&hwsim->hw_scan);
2143 
2144 	mutex_lock(&hwsim->mutex);
2145 	ieee80211_scan_completed(hwsim->hw, &info);
2146 	hwsim->tmp_chan = NULL;
2147 	hwsim->hw_scan_request = NULL;
2148 	hwsim->hw_scan_vif = NULL;
2149 	mutex_unlock(&hwsim->mutex);
2150 }
2151 
mac80211_hwsim_sw_scan(struct ieee80211_hw * hw,struct ieee80211_vif * vif,const u8 * mac_addr)2152 static void mac80211_hwsim_sw_scan(struct ieee80211_hw *hw,
2153 				   struct ieee80211_vif *vif,
2154 				   const u8 *mac_addr)
2155 {
2156 	struct mac80211_hwsim_data *hwsim = hw->priv;
2157 
2158 	mutex_lock(&hwsim->mutex);
2159 
2160 	if (hwsim->scanning) {
2161 		pr_debug("two hwsim sw_scans detected!\n");
2162 		goto out;
2163 	}
2164 
2165 	pr_debug("hwsim sw_scan request, prepping stuff\n");
2166 
2167 	memcpy(hwsim->scan_addr, mac_addr, ETH_ALEN);
2168 	hwsim->scanning = true;
2169 	memset(hwsim->survey_data, 0, sizeof(hwsim->survey_data));
2170 
2171 out:
2172 	mutex_unlock(&hwsim->mutex);
2173 }
2174 
mac80211_hwsim_sw_scan_complete(struct ieee80211_hw * hw,struct ieee80211_vif * vif)2175 static void mac80211_hwsim_sw_scan_complete(struct ieee80211_hw *hw,
2176 					    struct ieee80211_vif *vif)
2177 {
2178 	struct mac80211_hwsim_data *hwsim = hw->priv;
2179 
2180 	mutex_lock(&hwsim->mutex);
2181 
2182 	pr_debug("hwsim sw_scan_complete\n");
2183 	hwsim->scanning = false;
2184 	eth_zero_addr(hwsim->scan_addr);
2185 
2186 	mutex_unlock(&hwsim->mutex);
2187 }
2188 
hw_roc_start(struct work_struct * work)2189 static void hw_roc_start(struct work_struct *work)
2190 {
2191 	struct mac80211_hwsim_data *hwsim =
2192 		container_of(work, struct mac80211_hwsim_data, roc_start.work);
2193 
2194 	mutex_lock(&hwsim->mutex);
2195 
2196 	wiphy_dbg(hwsim->hw->wiphy, "hwsim ROC begins\n");
2197 	hwsim->tmp_chan = hwsim->roc_chan;
2198 	ieee80211_ready_on_channel(hwsim->hw);
2199 
2200 	ieee80211_queue_delayed_work(hwsim->hw, &hwsim->roc_done,
2201 				     msecs_to_jiffies(hwsim->roc_duration));
2202 
2203 	mutex_unlock(&hwsim->mutex);
2204 }
2205 
hw_roc_done(struct work_struct * work)2206 static void hw_roc_done(struct work_struct *work)
2207 {
2208 	struct mac80211_hwsim_data *hwsim =
2209 		container_of(work, struct mac80211_hwsim_data, roc_done.work);
2210 
2211 	mutex_lock(&hwsim->mutex);
2212 	ieee80211_remain_on_channel_expired(hwsim->hw);
2213 	hwsim->tmp_chan = NULL;
2214 	mutex_unlock(&hwsim->mutex);
2215 
2216 	wiphy_dbg(hwsim->hw->wiphy, "hwsim ROC expired\n");
2217 }
2218 
mac80211_hwsim_roc(struct ieee80211_hw * hw,struct ieee80211_vif * vif,struct ieee80211_channel * chan,int duration,enum ieee80211_roc_type type)2219 static int mac80211_hwsim_roc(struct ieee80211_hw *hw,
2220 			      struct ieee80211_vif *vif,
2221 			      struct ieee80211_channel *chan,
2222 			      int duration,
2223 			      enum ieee80211_roc_type type)
2224 {
2225 	struct mac80211_hwsim_data *hwsim = hw->priv;
2226 
2227 	mutex_lock(&hwsim->mutex);
2228 	if (WARN_ON(hwsim->tmp_chan || hwsim->hw_scan_request)) {
2229 		mutex_unlock(&hwsim->mutex);
2230 		return -EBUSY;
2231 	}
2232 
2233 	hwsim->roc_chan = chan;
2234 	hwsim->roc_duration = duration;
2235 	mutex_unlock(&hwsim->mutex);
2236 
2237 	wiphy_dbg(hw->wiphy, "hwsim ROC (%d MHz, %d ms)\n",
2238 		  chan->center_freq, duration);
2239 	ieee80211_queue_delayed_work(hw, &hwsim->roc_start, HZ/50);
2240 
2241 	return 0;
2242 }
2243 
mac80211_hwsim_croc(struct ieee80211_hw * hw)2244 static int mac80211_hwsim_croc(struct ieee80211_hw *hw)
2245 {
2246 	struct mac80211_hwsim_data *hwsim = hw->priv;
2247 
2248 	cancel_delayed_work_sync(&hwsim->roc_start);
2249 	cancel_delayed_work_sync(&hwsim->roc_done);
2250 
2251 	mutex_lock(&hwsim->mutex);
2252 	hwsim->tmp_chan = NULL;
2253 	mutex_unlock(&hwsim->mutex);
2254 
2255 	wiphy_dbg(hw->wiphy, "hwsim ROC canceled\n");
2256 
2257 	return 0;
2258 }
2259 
mac80211_hwsim_add_chanctx(struct ieee80211_hw * hw,struct ieee80211_chanctx_conf * ctx)2260 static int mac80211_hwsim_add_chanctx(struct ieee80211_hw *hw,
2261 				      struct ieee80211_chanctx_conf *ctx)
2262 {
2263 	hwsim_set_chanctx_magic(ctx);
2264 	wiphy_dbg(hw->wiphy,
2265 		  "add channel context control: %d MHz/width: %d/cfreqs:%d/%d MHz\n",
2266 		  ctx->def.chan->center_freq, ctx->def.width,
2267 		  ctx->def.center_freq1, ctx->def.center_freq2);
2268 	return 0;
2269 }
2270 
mac80211_hwsim_remove_chanctx(struct ieee80211_hw * hw,struct ieee80211_chanctx_conf * ctx)2271 static void mac80211_hwsim_remove_chanctx(struct ieee80211_hw *hw,
2272 					  struct ieee80211_chanctx_conf *ctx)
2273 {
2274 	wiphy_dbg(hw->wiphy,
2275 		  "remove channel context control: %d MHz/width: %d/cfreqs:%d/%d MHz\n",
2276 		  ctx->def.chan->center_freq, ctx->def.width,
2277 		  ctx->def.center_freq1, ctx->def.center_freq2);
2278 	hwsim_check_chanctx_magic(ctx);
2279 	hwsim_clear_chanctx_magic(ctx);
2280 }
2281 
mac80211_hwsim_change_chanctx(struct ieee80211_hw * hw,struct ieee80211_chanctx_conf * ctx,u32 changed)2282 static void mac80211_hwsim_change_chanctx(struct ieee80211_hw *hw,
2283 					  struct ieee80211_chanctx_conf *ctx,
2284 					  u32 changed)
2285 {
2286 	hwsim_check_chanctx_magic(ctx);
2287 	wiphy_dbg(hw->wiphy,
2288 		  "change channel context control: %d MHz/width: %d/cfreqs:%d/%d MHz\n",
2289 		  ctx->def.chan->center_freq, ctx->def.width,
2290 		  ctx->def.center_freq1, ctx->def.center_freq2);
2291 }
2292 
mac80211_hwsim_assign_vif_chanctx(struct ieee80211_hw * hw,struct ieee80211_vif * vif,struct ieee80211_chanctx_conf * ctx)2293 static int mac80211_hwsim_assign_vif_chanctx(struct ieee80211_hw *hw,
2294 					     struct ieee80211_vif *vif,
2295 					     struct ieee80211_chanctx_conf *ctx)
2296 {
2297 	hwsim_check_magic(vif);
2298 	hwsim_check_chanctx_magic(ctx);
2299 
2300 	return 0;
2301 }
2302 
mac80211_hwsim_unassign_vif_chanctx(struct ieee80211_hw * hw,struct ieee80211_vif * vif,struct ieee80211_chanctx_conf * ctx)2303 static void mac80211_hwsim_unassign_vif_chanctx(struct ieee80211_hw *hw,
2304 						struct ieee80211_vif *vif,
2305 						struct ieee80211_chanctx_conf *ctx)
2306 {
2307 	hwsim_check_magic(vif);
2308 	hwsim_check_chanctx_magic(ctx);
2309 }
2310 
2311 static const char mac80211_hwsim_gstrings_stats[][ETH_GSTRING_LEN] = {
2312 	"tx_pkts_nic",
2313 	"tx_bytes_nic",
2314 	"rx_pkts_nic",
2315 	"rx_bytes_nic",
2316 	"d_tx_dropped",
2317 	"d_tx_failed",
2318 	"d_ps_mode",
2319 	"d_group",
2320 };
2321 
2322 #define MAC80211_HWSIM_SSTATS_LEN ARRAY_SIZE(mac80211_hwsim_gstrings_stats)
2323 
mac80211_hwsim_get_et_strings(struct ieee80211_hw * hw,struct ieee80211_vif * vif,u32 sset,u8 * data)2324 static void mac80211_hwsim_get_et_strings(struct ieee80211_hw *hw,
2325 					  struct ieee80211_vif *vif,
2326 					  u32 sset, u8 *data)
2327 {
2328 	if (sset == ETH_SS_STATS)
2329 		memcpy(data, *mac80211_hwsim_gstrings_stats,
2330 		       sizeof(mac80211_hwsim_gstrings_stats));
2331 }
2332 
mac80211_hwsim_get_et_sset_count(struct ieee80211_hw * hw,struct ieee80211_vif * vif,int sset)2333 static int mac80211_hwsim_get_et_sset_count(struct ieee80211_hw *hw,
2334 					    struct ieee80211_vif *vif, int sset)
2335 {
2336 	if (sset == ETH_SS_STATS)
2337 		return MAC80211_HWSIM_SSTATS_LEN;
2338 	return 0;
2339 }
2340 
mac80211_hwsim_get_et_stats(struct ieee80211_hw * hw,struct ieee80211_vif * vif,struct ethtool_stats * stats,u64 * data)2341 static void mac80211_hwsim_get_et_stats(struct ieee80211_hw *hw,
2342 					struct ieee80211_vif *vif,
2343 					struct ethtool_stats *stats, u64 *data)
2344 {
2345 	struct mac80211_hwsim_data *ar = hw->priv;
2346 	int i = 0;
2347 
2348 	data[i++] = ar->tx_pkts;
2349 	data[i++] = ar->tx_bytes;
2350 	data[i++] = ar->rx_pkts;
2351 	data[i++] = ar->rx_bytes;
2352 	data[i++] = ar->tx_dropped;
2353 	data[i++] = ar->tx_failed;
2354 	data[i++] = ar->ps;
2355 	data[i++] = ar->group;
2356 
2357 	WARN_ON(i != MAC80211_HWSIM_SSTATS_LEN);
2358 }
2359 
2360 #define HWSIM_COMMON_OPS					\
2361 	.tx = mac80211_hwsim_tx,				\
2362 	.start = mac80211_hwsim_start,				\
2363 	.stop = mac80211_hwsim_stop,				\
2364 	.add_interface = mac80211_hwsim_add_interface,		\
2365 	.change_interface = mac80211_hwsim_change_interface,	\
2366 	.remove_interface = mac80211_hwsim_remove_interface,	\
2367 	.config = mac80211_hwsim_config,			\
2368 	.configure_filter = mac80211_hwsim_configure_filter,	\
2369 	.bss_info_changed = mac80211_hwsim_bss_info_changed,	\
2370 	.sta_add = mac80211_hwsim_sta_add,			\
2371 	.sta_remove = mac80211_hwsim_sta_remove,		\
2372 	.sta_notify = mac80211_hwsim_sta_notify,		\
2373 	.set_tim = mac80211_hwsim_set_tim,			\
2374 	.conf_tx = mac80211_hwsim_conf_tx,			\
2375 	.get_survey = mac80211_hwsim_get_survey,		\
2376 	CFG80211_TESTMODE_CMD(mac80211_hwsim_testmode_cmd)	\
2377 	.ampdu_action = mac80211_hwsim_ampdu_action,		\
2378 	.flush = mac80211_hwsim_flush,				\
2379 	.get_tsf = mac80211_hwsim_get_tsf,			\
2380 	.set_tsf = mac80211_hwsim_set_tsf,			\
2381 	.get_et_sset_count = mac80211_hwsim_get_et_sset_count,	\
2382 	.get_et_stats = mac80211_hwsim_get_et_stats,		\
2383 	.get_et_strings = mac80211_hwsim_get_et_strings,
2384 
2385 static const struct ieee80211_ops mac80211_hwsim_ops = {
2386 	HWSIM_COMMON_OPS
2387 	.sw_scan_start = mac80211_hwsim_sw_scan,
2388 	.sw_scan_complete = mac80211_hwsim_sw_scan_complete,
2389 };
2390 
2391 static const struct ieee80211_ops mac80211_hwsim_mchan_ops = {
2392 	HWSIM_COMMON_OPS
2393 	.hw_scan = mac80211_hwsim_hw_scan,
2394 	.cancel_hw_scan = mac80211_hwsim_cancel_hw_scan,
2395 	.sw_scan_start = NULL,
2396 	.sw_scan_complete = NULL,
2397 	.remain_on_channel = mac80211_hwsim_roc,
2398 	.cancel_remain_on_channel = mac80211_hwsim_croc,
2399 	.add_chanctx = mac80211_hwsim_add_chanctx,
2400 	.remove_chanctx = mac80211_hwsim_remove_chanctx,
2401 	.change_chanctx = mac80211_hwsim_change_chanctx,
2402 	.assign_vif_chanctx = mac80211_hwsim_assign_vif_chanctx,
2403 	.unassign_vif_chanctx = mac80211_hwsim_unassign_vif_chanctx,
2404 };
2405 
2406 struct hwsim_new_radio_params {
2407 	unsigned int channels;
2408 	const char *reg_alpha2;
2409 	const struct ieee80211_regdomain *regd;
2410 	bool reg_strict;
2411 	bool p2p_device;
2412 	bool use_chanctx;
2413 	bool destroy_on_close;
2414 	const char *hwname;
2415 	bool no_vif;
2416 	const u8 *perm_addr;
2417 };
2418 
hwsim_mcast_config_msg(struct sk_buff * mcast_skb,struct genl_info * info)2419 static void hwsim_mcast_config_msg(struct sk_buff *mcast_skb,
2420 				   struct genl_info *info)
2421 {
2422 	if (info)
2423 		genl_notify(&hwsim_genl_family, mcast_skb, info,
2424 			    HWSIM_MCGRP_CONFIG, GFP_KERNEL);
2425 	else
2426 		genlmsg_multicast(&hwsim_genl_family, mcast_skb, 0,
2427 				  HWSIM_MCGRP_CONFIG, GFP_KERNEL);
2428 }
2429 
append_radio_msg(struct sk_buff * skb,int id,struct hwsim_new_radio_params * param)2430 static int append_radio_msg(struct sk_buff *skb, int id,
2431 			    struct hwsim_new_radio_params *param)
2432 {
2433 	int ret;
2434 
2435 	ret = nla_put_u32(skb, HWSIM_ATTR_RADIO_ID, id);
2436 	if (ret < 0)
2437 		return ret;
2438 
2439 	if (param->channels) {
2440 		ret = nla_put_u32(skb, HWSIM_ATTR_CHANNELS, param->channels);
2441 		if (ret < 0)
2442 			return ret;
2443 	}
2444 
2445 	if (param->reg_alpha2) {
2446 		ret = nla_put(skb, HWSIM_ATTR_REG_HINT_ALPHA2, 2,
2447 			      param->reg_alpha2);
2448 		if (ret < 0)
2449 			return ret;
2450 	}
2451 
2452 	if (param->regd) {
2453 		int i;
2454 
2455 		for (i = 0; i < ARRAY_SIZE(hwsim_world_regdom_custom); i++) {
2456 			if (hwsim_world_regdom_custom[i] != param->regd)
2457 				continue;
2458 
2459 			ret = nla_put_u32(skb, HWSIM_ATTR_REG_CUSTOM_REG, i);
2460 			if (ret < 0)
2461 				return ret;
2462 			break;
2463 		}
2464 	}
2465 
2466 	if (param->reg_strict) {
2467 		ret = nla_put_flag(skb, HWSIM_ATTR_REG_STRICT_REG);
2468 		if (ret < 0)
2469 			return ret;
2470 	}
2471 
2472 	if (param->p2p_device) {
2473 		ret = nla_put_flag(skb, HWSIM_ATTR_SUPPORT_P2P_DEVICE);
2474 		if (ret < 0)
2475 			return ret;
2476 	}
2477 
2478 	if (param->use_chanctx) {
2479 		ret = nla_put_flag(skb, HWSIM_ATTR_USE_CHANCTX);
2480 		if (ret < 0)
2481 			return ret;
2482 	}
2483 
2484 	if (param->hwname) {
2485 		ret = nla_put(skb, HWSIM_ATTR_RADIO_NAME,
2486 			      strlen(param->hwname), param->hwname);
2487 		if (ret < 0)
2488 			return ret;
2489 	}
2490 
2491 	return 0;
2492 }
2493 
hwsim_mcast_new_radio(int id,struct genl_info * info,struct hwsim_new_radio_params * param)2494 static void hwsim_mcast_new_radio(int id, struct genl_info *info,
2495 				  struct hwsim_new_radio_params *param)
2496 {
2497 	struct sk_buff *mcast_skb;
2498 	void *data;
2499 
2500 	mcast_skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
2501 	if (!mcast_skb)
2502 		return;
2503 
2504 	data = genlmsg_put(mcast_skb, 0, 0, &hwsim_genl_family, 0,
2505 			   HWSIM_CMD_NEW_RADIO);
2506 	if (!data)
2507 		goto out_err;
2508 
2509 	if (append_radio_msg(mcast_skb, id, param) < 0)
2510 		goto out_err;
2511 
2512 	genlmsg_end(mcast_skb, data);
2513 
2514 	hwsim_mcast_config_msg(mcast_skb, info);
2515 	return;
2516 
2517 out_err:
2518 	nlmsg_free(mcast_skb);
2519 }
2520 
2521 static const struct ieee80211_sband_iftype_data he_capa_2ghz = {
2522 	/* TODO: should we support other types, e.g., P2P?*/
2523 	.types_mask = BIT(NL80211_IFTYPE_STATION) | BIT(NL80211_IFTYPE_AP),
2524 	.he_cap = {
2525 		.has_he = true,
2526 		.he_cap_elem = {
2527 			.mac_cap_info[0] =
2528 				IEEE80211_HE_MAC_CAP0_HTC_HE,
2529 			.mac_cap_info[1] =
2530 				IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US |
2531 				IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_QOS_8,
2532 			.mac_cap_info[2] =
2533 				IEEE80211_HE_MAC_CAP2_BSR |
2534 				IEEE80211_HE_MAC_CAP2_MU_CASCADING |
2535 				IEEE80211_HE_MAC_CAP2_ACK_EN,
2536 			.mac_cap_info[3] =
2537 				IEEE80211_HE_MAC_CAP3_GRP_ADDR_MULTI_STA_BA_DL_MU |
2538 				IEEE80211_HE_MAC_CAP3_OMI_CONTROL |
2539 				IEEE80211_HE_MAC_CAP3_MAX_A_AMPDU_LEN_EXP_VHT_2,
2540 			.mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMDSU_IN_AMPDU,
2541 			.phy_cap_info[0] =
2542 				IEEE80211_HE_PHY_CAP0_DUAL_BAND,
2543 			.phy_cap_info[1] =
2544 				IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK |
2545 				IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A |
2546 				IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD |
2547 				IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_MAX_NSTS,
2548 			.phy_cap_info[2] =
2549 				IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US |
2550 				IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ |
2551 				IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ |
2552 				IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO |
2553 				IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO,
2554 
2555 			/* Leave all the other PHY capability bytes unset, as
2556 			 * DCM, beam forming, RU and PPE threshold information
2557 			 * are not supported
2558 			 */
2559 		},
2560 		.he_mcs_nss_supp = {
2561 			.rx_mcs_80 = cpu_to_le16(0xfffa),
2562 			.tx_mcs_80 = cpu_to_le16(0xfffa),
2563 			.rx_mcs_160 = cpu_to_le16(0xffff),
2564 			.tx_mcs_160 = cpu_to_le16(0xffff),
2565 			.rx_mcs_80p80 = cpu_to_le16(0xffff),
2566 			.tx_mcs_80p80 = cpu_to_le16(0xffff),
2567 		},
2568 	},
2569 };
2570 
2571 static const struct ieee80211_sband_iftype_data he_capa_5ghz = {
2572 	/* TODO: should we support other types, e.g., P2P?*/
2573 	.types_mask = BIT(NL80211_IFTYPE_STATION) | BIT(NL80211_IFTYPE_AP),
2574 	.he_cap = {
2575 		.has_he = true,
2576 		.he_cap_elem = {
2577 			.mac_cap_info[0] =
2578 				IEEE80211_HE_MAC_CAP0_HTC_HE,
2579 			.mac_cap_info[1] =
2580 				IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US |
2581 				IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_QOS_8,
2582 			.mac_cap_info[2] =
2583 				IEEE80211_HE_MAC_CAP2_BSR |
2584 				IEEE80211_HE_MAC_CAP2_MU_CASCADING |
2585 				IEEE80211_HE_MAC_CAP2_ACK_EN,
2586 			.mac_cap_info[3] =
2587 				IEEE80211_HE_MAC_CAP3_GRP_ADDR_MULTI_STA_BA_DL_MU |
2588 				IEEE80211_HE_MAC_CAP3_OMI_CONTROL |
2589 				IEEE80211_HE_MAC_CAP3_MAX_A_AMPDU_LEN_EXP_VHT_2,
2590 			.mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMDSU_IN_AMPDU,
2591 			.phy_cap_info[0] =
2592 				IEEE80211_HE_PHY_CAP0_DUAL_BAND |
2593 				IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G |
2594 				IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G |
2595 				IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G,
2596 			.phy_cap_info[1] =
2597 				IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK |
2598 				IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A |
2599 				IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD |
2600 				IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_MAX_NSTS,
2601 			.phy_cap_info[2] =
2602 				IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US |
2603 				IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ |
2604 				IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ |
2605 				IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO |
2606 				IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO,
2607 
2608 			/* Leave all the other PHY capability bytes unset, as
2609 			 * DCM, beam forming, RU and PPE threshold information
2610 			 * are not supported
2611 			 */
2612 		},
2613 		.he_mcs_nss_supp = {
2614 			.rx_mcs_80 = cpu_to_le16(0xfffa),
2615 			.tx_mcs_80 = cpu_to_le16(0xfffa),
2616 			.rx_mcs_160 = cpu_to_le16(0xfffa),
2617 			.tx_mcs_160 = cpu_to_le16(0xfffa),
2618 			.rx_mcs_80p80 = cpu_to_le16(0xfffa),
2619 			.tx_mcs_80p80 = cpu_to_le16(0xfffa),
2620 		},
2621 	},
2622 };
2623 
mac80211_hswim_he_capab(struct ieee80211_supported_band * sband)2624 static void mac80211_hswim_he_capab(struct ieee80211_supported_band *sband)
2625 {
2626 	if (sband->band == NL80211_BAND_2GHZ)
2627 		sband->iftype_data =
2628 			(struct ieee80211_sband_iftype_data *)&he_capa_2ghz;
2629 	else if (sband->band == NL80211_BAND_5GHZ)
2630 		sband->iftype_data =
2631 			(struct ieee80211_sband_iftype_data *)&he_capa_5ghz;
2632 	else
2633 		return;
2634 
2635 	sband->n_iftype_data = 1;
2636 }
2637 
mac80211_hwsim_new_radio(struct genl_info * info,struct hwsim_new_radio_params * param)2638 static int mac80211_hwsim_new_radio(struct genl_info *info,
2639 				    struct hwsim_new_radio_params *param)
2640 {
2641 	int err;
2642 	u8 addr[ETH_ALEN];
2643 	struct mac80211_hwsim_data *data;
2644 	struct ieee80211_hw *hw;
2645 	enum nl80211_band band;
2646 	const struct ieee80211_ops *ops = &mac80211_hwsim_ops;
2647 	struct net *net;
2648 	int idx;
2649 
2650 	if (WARN_ON(param->channels > 1 && !param->use_chanctx))
2651 		return -EINVAL;
2652 
2653 	spin_lock_bh(&hwsim_radio_lock);
2654 	idx = hwsim_radio_idx++;
2655 	spin_unlock_bh(&hwsim_radio_lock);
2656 
2657 	if (param->use_chanctx)
2658 		ops = &mac80211_hwsim_mchan_ops;
2659 	hw = ieee80211_alloc_hw_nm(sizeof(*data), ops, param->hwname);
2660 	if (!hw) {
2661 		pr_debug("mac80211_hwsim: ieee80211_alloc_hw failed\n");
2662 		err = -ENOMEM;
2663 		goto failed;
2664 	}
2665 
2666 	/* ieee80211_alloc_hw_nm may have used a default name */
2667 	param->hwname = wiphy_name(hw->wiphy);
2668 
2669 	if (info)
2670 		net = genl_info_net(info);
2671 	else
2672 		net = &init_net;
2673 	wiphy_net_set(hw->wiphy, net);
2674 
2675 	data = hw->priv;
2676 	data->hw = hw;
2677 
2678 	data->dev = device_create(hwsim_class, NULL, 0, hw, "hwsim%d", idx);
2679 	if (IS_ERR(data->dev)) {
2680 		printk(KERN_DEBUG
2681 		       "mac80211_hwsim: device_create failed (%ld)\n",
2682 		       PTR_ERR(data->dev));
2683 		err = -ENOMEM;
2684 		goto failed_drvdata;
2685 	}
2686 	data->dev->driver = &mac80211_hwsim_driver.driver;
2687 	err = device_bind_driver(data->dev);
2688 	if (err != 0) {
2689 		pr_debug("mac80211_hwsim: device_bind_driver failed (%d)\n",
2690 		       err);
2691 		goto failed_bind;
2692 	}
2693 
2694 	skb_queue_head_init(&data->pending);
2695 
2696 	SET_IEEE80211_DEV(hw, data->dev);
2697 	if (!param->perm_addr) {
2698 		eth_zero_addr(addr);
2699 		addr[0] = 0x02;
2700 		addr[3] = idx >> 8;
2701 		addr[4] = idx;
2702 		memcpy(data->addresses[0].addr, addr, ETH_ALEN);
2703 		/* Why need here second address ? */
2704 		memcpy(data->addresses[1].addr, addr, ETH_ALEN);
2705 		data->addresses[1].addr[0] |= 0x40;
2706 		hw->wiphy->n_addresses = 2;
2707 		hw->wiphy->addresses = data->addresses;
2708 		/* possible address clash is checked at hash table insertion */
2709 	} else {
2710 		memcpy(data->addresses[0].addr, param->perm_addr, ETH_ALEN);
2711 		/* compatibility with automatically generated mac addr */
2712 		memcpy(data->addresses[1].addr, param->perm_addr, ETH_ALEN);
2713 		hw->wiphy->n_addresses = 2;
2714 		hw->wiphy->addresses = data->addresses;
2715 	}
2716 
2717 	data->channels = param->channels;
2718 	data->use_chanctx = param->use_chanctx;
2719 	data->idx = idx;
2720 	data->destroy_on_close = param->destroy_on_close;
2721 	if (info)
2722 		data->portid = info->snd_portid;
2723 
2724 	if (data->use_chanctx) {
2725 		hw->wiphy->max_scan_ssids = 255;
2726 		hw->wiphy->max_scan_ie_len = IEEE80211_MAX_DATA_LEN;
2727 		hw->wiphy->max_remain_on_channel_duration = 1000;
2728 		hw->wiphy->iface_combinations = &data->if_combination;
2729 		if (param->p2p_device)
2730 			data->if_combination = hwsim_if_comb_p2p_dev[0];
2731 		else
2732 			data->if_combination = hwsim_if_comb[0];
2733 		hw->wiphy->n_iface_combinations = 1;
2734 		/* For channels > 1 DFS is not allowed */
2735 		data->if_combination.radar_detect_widths = 0;
2736 		data->if_combination.num_different_channels = data->channels;
2737 	} else if (param->p2p_device) {
2738 		hw->wiphy->iface_combinations = hwsim_if_comb_p2p_dev;
2739 		hw->wiphy->n_iface_combinations =
2740 			ARRAY_SIZE(hwsim_if_comb_p2p_dev);
2741 	} else {
2742 		hw->wiphy->iface_combinations = hwsim_if_comb;
2743 		hw->wiphy->n_iface_combinations = ARRAY_SIZE(hwsim_if_comb);
2744 	}
2745 
2746 	INIT_DELAYED_WORK(&data->roc_start, hw_roc_start);
2747 	INIT_DELAYED_WORK(&data->roc_done, hw_roc_done);
2748 	INIT_DELAYED_WORK(&data->hw_scan, hw_scan_work);
2749 
2750 	hw->queues = 5;
2751 	hw->offchannel_tx_hw_queue = 4;
2752 	hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
2753 				     BIT(NL80211_IFTYPE_AP) |
2754 				     BIT(NL80211_IFTYPE_P2P_CLIENT) |
2755 				     BIT(NL80211_IFTYPE_P2P_GO) |
2756 				     BIT(NL80211_IFTYPE_ADHOC) |
2757 				     BIT(NL80211_IFTYPE_MESH_POINT);
2758 
2759 	if (param->p2p_device)
2760 		hw->wiphy->interface_modes |= BIT(NL80211_IFTYPE_P2P_DEVICE);
2761 
2762 	ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
2763 	ieee80211_hw_set(hw, CHANCTX_STA_CSA);
2764 	ieee80211_hw_set(hw, SUPPORTS_HT_CCK_RATES);
2765 	ieee80211_hw_set(hw, QUEUE_CONTROL);
2766 	ieee80211_hw_set(hw, WANT_MONITOR_VIF);
2767 	ieee80211_hw_set(hw, AMPDU_AGGREGATION);
2768 	ieee80211_hw_set(hw, MFP_CAPABLE);
2769 	ieee80211_hw_set(hw, SIGNAL_DBM);
2770 	ieee80211_hw_set(hw, SUPPORTS_PS);
2771 	ieee80211_hw_set(hw, TDLS_WIDER_BW);
2772 	if (rctbl)
2773 		ieee80211_hw_set(hw, SUPPORTS_RC_TABLE);
2774 
2775 	hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS |
2776 			    WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL |
2777 			    WIPHY_FLAG_AP_UAPSD |
2778 			    WIPHY_FLAG_HAS_CHANNEL_SWITCH;
2779 	hw->wiphy->features |= NL80211_FEATURE_ACTIVE_MONITOR |
2780 			       NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE |
2781 			       NL80211_FEATURE_STATIC_SMPS |
2782 			       NL80211_FEATURE_DYNAMIC_SMPS |
2783 			       NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR;
2784 	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_VHT_IBSS);
2785 
2786 	/* ask mac80211 to reserve space for magic */
2787 	hw->vif_data_size = sizeof(struct hwsim_vif_priv);
2788 	hw->sta_data_size = sizeof(struct hwsim_sta_priv);
2789 	hw->chanctx_data_size = sizeof(struct hwsim_chanctx_priv);
2790 
2791 	memcpy(data->channels_2ghz, hwsim_channels_2ghz,
2792 		sizeof(hwsim_channels_2ghz));
2793 	memcpy(data->channels_5ghz, hwsim_channels_5ghz,
2794 		sizeof(hwsim_channels_5ghz));
2795 	memcpy(data->rates, hwsim_rates, sizeof(hwsim_rates));
2796 
2797 	for (band = NL80211_BAND_2GHZ; band < NUM_NL80211_BANDS; band++) {
2798 		struct ieee80211_supported_band *sband = &data->bands[band];
2799 
2800 		sband->band = band;
2801 
2802 		switch (band) {
2803 		case NL80211_BAND_2GHZ:
2804 			sband->channels = data->channels_2ghz;
2805 			sband->n_channels = ARRAY_SIZE(hwsim_channels_2ghz);
2806 			sband->bitrates = data->rates;
2807 			sband->n_bitrates = ARRAY_SIZE(hwsim_rates);
2808 			break;
2809 		case NL80211_BAND_5GHZ:
2810 			sband->channels = data->channels_5ghz;
2811 			sband->n_channels = ARRAY_SIZE(hwsim_channels_5ghz);
2812 			sband->bitrates = data->rates + 4;
2813 			sband->n_bitrates = ARRAY_SIZE(hwsim_rates) - 4;
2814 
2815 			sband->vht_cap.vht_supported = true;
2816 			sband->vht_cap.cap =
2817 				IEEE80211_VHT_CAP_MAX_MPDU_LENGTH_11454 |
2818 				IEEE80211_VHT_CAP_SUPP_CHAN_WIDTH_160_80PLUS80MHZ |
2819 				IEEE80211_VHT_CAP_RXLDPC |
2820 				IEEE80211_VHT_CAP_SHORT_GI_80 |
2821 				IEEE80211_VHT_CAP_SHORT_GI_160 |
2822 				IEEE80211_VHT_CAP_TXSTBC |
2823 				IEEE80211_VHT_CAP_RXSTBC_4 |
2824 				IEEE80211_VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_MASK;
2825 			sband->vht_cap.vht_mcs.rx_mcs_map =
2826 				cpu_to_le16(IEEE80211_VHT_MCS_SUPPORT_0_9 << 0 |
2827 					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 2 |
2828 					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 4 |
2829 					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 6 |
2830 					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 8 |
2831 					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 10 |
2832 					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 12 |
2833 					    IEEE80211_VHT_MCS_SUPPORT_0_9 << 14);
2834 			sband->vht_cap.vht_mcs.tx_mcs_map =
2835 				sband->vht_cap.vht_mcs.rx_mcs_map;
2836 			break;
2837 		default:
2838 			continue;
2839 		}
2840 
2841 		sband->ht_cap.ht_supported = true;
2842 		sband->ht_cap.cap = IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
2843 				    IEEE80211_HT_CAP_GRN_FLD |
2844 				    IEEE80211_HT_CAP_SGI_20 |
2845 				    IEEE80211_HT_CAP_SGI_40 |
2846 				    IEEE80211_HT_CAP_DSSSCCK40;
2847 		sband->ht_cap.ampdu_factor = 0x3;
2848 		sband->ht_cap.ampdu_density = 0x6;
2849 		memset(&sband->ht_cap.mcs, 0,
2850 		       sizeof(sband->ht_cap.mcs));
2851 		sband->ht_cap.mcs.rx_mask[0] = 0xff;
2852 		sband->ht_cap.mcs.rx_mask[1] = 0xff;
2853 		sband->ht_cap.mcs.tx_params = IEEE80211_HT_MCS_TX_DEFINED;
2854 
2855 		mac80211_hswim_he_capab(sband);
2856 
2857 		hw->wiphy->bands[band] = sband;
2858 	}
2859 
2860 	/* By default all radios belong to the first group */
2861 	data->group = 1;
2862 	mutex_init(&data->mutex);
2863 
2864 	data->netgroup = hwsim_net_get_netgroup(net);
2865 	data->wmediumd = hwsim_net_get_wmediumd(net);
2866 
2867 	/* Enable frame retransmissions for lossy channels */
2868 	hw->max_rates = 4;
2869 	hw->max_rate_tries = 11;
2870 
2871 	hw->wiphy->vendor_commands = mac80211_hwsim_vendor_commands;
2872 	hw->wiphy->n_vendor_commands =
2873 		ARRAY_SIZE(mac80211_hwsim_vendor_commands);
2874 	hw->wiphy->vendor_events = mac80211_hwsim_vendor_events;
2875 	hw->wiphy->n_vendor_events = ARRAY_SIZE(mac80211_hwsim_vendor_events);
2876 
2877 	if (param->reg_strict)
2878 		hw->wiphy->regulatory_flags |= REGULATORY_STRICT_REG;
2879 	if (param->regd) {
2880 		data->regd = param->regd;
2881 		hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG;
2882 		wiphy_apply_custom_regulatory(hw->wiphy, param->regd);
2883 		/* give the regulatory workqueue a chance to run */
2884 		schedule_timeout_interruptible(1);
2885 	}
2886 
2887 	if (param->no_vif)
2888 		ieee80211_hw_set(hw, NO_AUTO_VIF);
2889 
2890 	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_CQM_RSSI_LIST);
2891 
2892 	err = ieee80211_register_hw(hw);
2893 	if (err < 0) {
2894 		pr_debug("mac80211_hwsim: ieee80211_register_hw failed (%d)\n",
2895 		       err);
2896 		goto failed_hw;
2897 	}
2898 
2899 	wiphy_dbg(hw->wiphy, "hwaddr %pM registered\n", hw->wiphy->perm_addr);
2900 
2901 	if (param->reg_alpha2) {
2902 		data->alpha2[0] = param->reg_alpha2[0];
2903 		data->alpha2[1] = param->reg_alpha2[1];
2904 		regulatory_hint(hw->wiphy, param->reg_alpha2);
2905 	}
2906 
2907 	data->debugfs = debugfs_create_dir("hwsim", hw->wiphy->debugfsdir);
2908 	debugfs_create_file("ps", 0666, data->debugfs, data, &hwsim_fops_ps);
2909 	debugfs_create_file("group", 0666, data->debugfs, data,
2910 			    &hwsim_fops_group);
2911 	if (!data->use_chanctx)
2912 		debugfs_create_file("dfs_simulate_radar", 0222,
2913 				    data->debugfs,
2914 				    data, &hwsim_simulate_radar);
2915 
2916 	tasklet_hrtimer_init(&data->beacon_timer,
2917 			     mac80211_hwsim_beacon,
2918 			     CLOCK_MONOTONIC, HRTIMER_MODE_ABS);
2919 
2920 	spin_lock_bh(&hwsim_radio_lock);
2921 	err = rhashtable_insert_fast(&hwsim_radios_rht, &data->rht,
2922 				     hwsim_rht_params);
2923 	if (err < 0) {
2924 		if (info) {
2925 			GENL_SET_ERR_MSG(info, "perm addr already present");
2926 			NL_SET_BAD_ATTR(info->extack,
2927 					info->attrs[HWSIM_ATTR_PERM_ADDR]);
2928 		}
2929 		spin_unlock_bh(&hwsim_radio_lock);
2930 		goto failed_final_insert;
2931 	}
2932 
2933 	list_add_tail(&data->list, &hwsim_radios);
2934 	hwsim_radios_generation++;
2935 	spin_unlock_bh(&hwsim_radio_lock);
2936 
2937 	hwsim_mcast_new_radio(idx, info, param);
2938 
2939 	return idx;
2940 
2941 failed_final_insert:
2942 	debugfs_remove_recursive(data->debugfs);
2943 	ieee80211_unregister_hw(data->hw);
2944 failed_hw:
2945 	device_release_driver(data->dev);
2946 failed_bind:
2947 	device_unregister(data->dev);
2948 failed_drvdata:
2949 	ieee80211_free_hw(hw);
2950 failed:
2951 	return err;
2952 }
2953 
hwsim_mcast_del_radio(int id,const char * hwname,struct genl_info * info)2954 static void hwsim_mcast_del_radio(int id, const char *hwname,
2955 				  struct genl_info *info)
2956 {
2957 	struct sk_buff *skb;
2958 	void *data;
2959 	int ret;
2960 
2961 	skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
2962 	if (!skb)
2963 		return;
2964 
2965 	data = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0,
2966 			   HWSIM_CMD_DEL_RADIO);
2967 	if (!data)
2968 		goto error;
2969 
2970 	ret = nla_put_u32(skb, HWSIM_ATTR_RADIO_ID, id);
2971 	if (ret < 0)
2972 		goto error;
2973 
2974 	ret = nla_put(skb, HWSIM_ATTR_RADIO_NAME, strlen(hwname),
2975 		      hwname);
2976 	if (ret < 0)
2977 		goto error;
2978 
2979 	genlmsg_end(skb, data);
2980 
2981 	hwsim_mcast_config_msg(skb, info);
2982 
2983 	return;
2984 
2985 error:
2986 	nlmsg_free(skb);
2987 }
2988 
mac80211_hwsim_del_radio(struct mac80211_hwsim_data * data,const char * hwname,struct genl_info * info)2989 static void mac80211_hwsim_del_radio(struct mac80211_hwsim_data *data,
2990 				     const char *hwname,
2991 				     struct genl_info *info)
2992 {
2993 	hwsim_mcast_del_radio(data->idx, hwname, info);
2994 	debugfs_remove_recursive(data->debugfs);
2995 	ieee80211_unregister_hw(data->hw);
2996 	device_release_driver(data->dev);
2997 	device_unregister(data->dev);
2998 	ieee80211_free_hw(data->hw);
2999 }
3000 
mac80211_hwsim_get_radio(struct sk_buff * skb,struct mac80211_hwsim_data * data,u32 portid,u32 seq,struct netlink_callback * cb,int flags)3001 static int mac80211_hwsim_get_radio(struct sk_buff *skb,
3002 				    struct mac80211_hwsim_data *data,
3003 				    u32 portid, u32 seq,
3004 				    struct netlink_callback *cb, int flags)
3005 {
3006 	void *hdr;
3007 	struct hwsim_new_radio_params param = { };
3008 	int res = -EMSGSIZE;
3009 
3010 	hdr = genlmsg_put(skb, portid, seq, &hwsim_genl_family, flags,
3011 			  HWSIM_CMD_GET_RADIO);
3012 	if (!hdr)
3013 		return -EMSGSIZE;
3014 
3015 	if (cb)
3016 		genl_dump_check_consistent(cb, hdr);
3017 
3018 	if (data->alpha2[0] && data->alpha2[1])
3019 		param.reg_alpha2 = data->alpha2;
3020 
3021 	param.reg_strict = !!(data->hw->wiphy->regulatory_flags &
3022 					REGULATORY_STRICT_REG);
3023 	param.p2p_device = !!(data->hw->wiphy->interface_modes &
3024 					BIT(NL80211_IFTYPE_P2P_DEVICE));
3025 	param.use_chanctx = data->use_chanctx;
3026 	param.regd = data->regd;
3027 	param.channels = data->channels;
3028 	param.hwname = wiphy_name(data->hw->wiphy);
3029 
3030 	res = append_radio_msg(skb, data->idx, &param);
3031 	if (res < 0)
3032 		goto out_err;
3033 
3034 	genlmsg_end(skb, hdr);
3035 	return 0;
3036 
3037 out_err:
3038 	genlmsg_cancel(skb, hdr);
3039 	return res;
3040 }
3041 
mac80211_hwsim_free(void)3042 static void mac80211_hwsim_free(void)
3043 {
3044 	struct mac80211_hwsim_data *data;
3045 
3046 	spin_lock_bh(&hwsim_radio_lock);
3047 	while ((data = list_first_entry_or_null(&hwsim_radios,
3048 						struct mac80211_hwsim_data,
3049 						list))) {
3050 		list_del(&data->list);
3051 		spin_unlock_bh(&hwsim_radio_lock);
3052 		mac80211_hwsim_del_radio(data, wiphy_name(data->hw->wiphy),
3053 					 NULL);
3054 		spin_lock_bh(&hwsim_radio_lock);
3055 	}
3056 	spin_unlock_bh(&hwsim_radio_lock);
3057 	class_destroy(hwsim_class);
3058 }
3059 
3060 static const struct net_device_ops hwsim_netdev_ops = {
3061 	.ndo_start_xmit 	= hwsim_mon_xmit,
3062 	.ndo_set_mac_address 	= eth_mac_addr,
3063 	.ndo_validate_addr	= eth_validate_addr,
3064 };
3065 
hwsim_mon_setup(struct net_device * dev)3066 static void hwsim_mon_setup(struct net_device *dev)
3067 {
3068 	dev->netdev_ops = &hwsim_netdev_ops;
3069 	dev->needs_free_netdev = true;
3070 	ether_setup(dev);
3071 	dev->priv_flags |= IFF_NO_QUEUE;
3072 	dev->type = ARPHRD_IEEE80211_RADIOTAP;
3073 	eth_zero_addr(dev->dev_addr);
3074 	dev->dev_addr[0] = 0x12;
3075 }
3076 
get_hwsim_data_ref_from_addr(const u8 * addr)3077 static struct mac80211_hwsim_data *get_hwsim_data_ref_from_addr(const u8 *addr)
3078 {
3079 	return rhashtable_lookup_fast(&hwsim_radios_rht,
3080 				      addr,
3081 				      hwsim_rht_params);
3082 }
3083 
hwsim_register_wmediumd(struct net * net,u32 portid)3084 static void hwsim_register_wmediumd(struct net *net, u32 portid)
3085 {
3086 	struct mac80211_hwsim_data *data;
3087 
3088 	hwsim_net_set_wmediumd(net, portid);
3089 
3090 	spin_lock_bh(&hwsim_radio_lock);
3091 	list_for_each_entry(data, &hwsim_radios, list) {
3092 		if (data->netgroup == hwsim_net_get_netgroup(net))
3093 			data->wmediumd = portid;
3094 	}
3095 	spin_unlock_bh(&hwsim_radio_lock);
3096 }
3097 
hwsim_tx_info_frame_received_nl(struct sk_buff * skb_2,struct genl_info * info)3098 static int hwsim_tx_info_frame_received_nl(struct sk_buff *skb_2,
3099 					   struct genl_info *info)
3100 {
3101 
3102 	struct ieee80211_hdr *hdr;
3103 	struct mac80211_hwsim_data *data2;
3104 	struct ieee80211_tx_info *txi;
3105 	struct hwsim_tx_rate *tx_attempts;
3106 	u64 ret_skb_cookie;
3107 	struct sk_buff *skb, *tmp;
3108 	const u8 *src;
3109 	unsigned int hwsim_flags;
3110 	int i;
3111 	bool found = false;
3112 
3113 	if (!info->attrs[HWSIM_ATTR_ADDR_TRANSMITTER] ||
3114 	    !info->attrs[HWSIM_ATTR_FLAGS] ||
3115 	    !info->attrs[HWSIM_ATTR_COOKIE] ||
3116 	    !info->attrs[HWSIM_ATTR_SIGNAL] ||
3117 	    !info->attrs[HWSIM_ATTR_TX_INFO])
3118 		goto out;
3119 
3120 	src = (void *)nla_data(info->attrs[HWSIM_ATTR_ADDR_TRANSMITTER]);
3121 	hwsim_flags = nla_get_u32(info->attrs[HWSIM_ATTR_FLAGS]);
3122 	ret_skb_cookie = nla_get_u64(info->attrs[HWSIM_ATTR_COOKIE]);
3123 
3124 	data2 = get_hwsim_data_ref_from_addr(src);
3125 	if (!data2)
3126 		goto out;
3127 
3128 	if (hwsim_net_get_netgroup(genl_info_net(info)) != data2->netgroup)
3129 		goto out;
3130 
3131 	if (info->snd_portid != data2->wmediumd)
3132 		goto out;
3133 
3134 	/* look for the skb matching the cookie passed back from user */
3135 	skb_queue_walk_safe(&data2->pending, skb, tmp) {
3136 		u64 skb_cookie;
3137 
3138 		txi = IEEE80211_SKB_CB(skb);
3139 		skb_cookie = (u64)(uintptr_t)txi->rate_driver_data[0];
3140 
3141 		if (skb_cookie == ret_skb_cookie) {
3142 			skb_unlink(skb, &data2->pending);
3143 			found = true;
3144 			break;
3145 		}
3146 	}
3147 
3148 	/* not found */
3149 	if (!found)
3150 		goto out;
3151 
3152 	/* Tx info received because the frame was broadcasted on user space,
3153 	 so we get all the necessary info: tx attempts and skb control buff */
3154 
3155 	tx_attempts = (struct hwsim_tx_rate *)nla_data(
3156 		       info->attrs[HWSIM_ATTR_TX_INFO]);
3157 
3158 	/* now send back TX status */
3159 	txi = IEEE80211_SKB_CB(skb);
3160 
3161 	ieee80211_tx_info_clear_status(txi);
3162 
3163 	for (i = 0; i < IEEE80211_TX_MAX_RATES; i++) {
3164 		txi->status.rates[i].idx = tx_attempts[i].idx;
3165 		txi->status.rates[i].count = tx_attempts[i].count;
3166 	}
3167 
3168 	txi->status.ack_signal = nla_get_u32(info->attrs[HWSIM_ATTR_SIGNAL]);
3169 
3170 	if (!(hwsim_flags & HWSIM_TX_CTL_NO_ACK) &&
3171 	   (hwsim_flags & HWSIM_TX_STAT_ACK)) {
3172 		if (skb->len >= 16) {
3173 			hdr = (struct ieee80211_hdr *) skb->data;
3174 			mac80211_hwsim_monitor_ack(data2->channel,
3175 						   hdr->addr2);
3176 		}
3177 		txi->flags |= IEEE80211_TX_STAT_ACK;
3178 	}
3179 	ieee80211_tx_status_irqsafe(data2->hw, skb);
3180 	return 0;
3181 out:
3182 	return -EINVAL;
3183 
3184 }
3185 
hwsim_cloned_frame_received_nl(struct sk_buff * skb_2,struct genl_info * info)3186 static int hwsim_cloned_frame_received_nl(struct sk_buff *skb_2,
3187 					  struct genl_info *info)
3188 {
3189 	struct mac80211_hwsim_data *data2;
3190 	struct ieee80211_rx_status rx_status;
3191 	const u8 *dst;
3192 	int frame_data_len;
3193 	void *frame_data;
3194 	struct sk_buff *skb = NULL;
3195 
3196 	if (!info->attrs[HWSIM_ATTR_ADDR_RECEIVER] ||
3197 	    !info->attrs[HWSIM_ATTR_FRAME] ||
3198 	    !info->attrs[HWSIM_ATTR_RX_RATE] ||
3199 	    !info->attrs[HWSIM_ATTR_SIGNAL])
3200 		goto out;
3201 
3202 	dst = (void *)nla_data(info->attrs[HWSIM_ATTR_ADDR_RECEIVER]);
3203 	frame_data_len = nla_len(info->attrs[HWSIM_ATTR_FRAME]);
3204 	frame_data = (void *)nla_data(info->attrs[HWSIM_ATTR_FRAME]);
3205 
3206 	/* Allocate new skb here */
3207 	skb = alloc_skb(frame_data_len, GFP_KERNEL);
3208 	if (skb == NULL)
3209 		goto err;
3210 
3211 	if (frame_data_len > IEEE80211_MAX_DATA_LEN)
3212 		goto err;
3213 
3214 	/* Copy the data */
3215 	skb_put_data(skb, frame_data, frame_data_len);
3216 
3217 	data2 = get_hwsim_data_ref_from_addr(dst);
3218 	if (!data2)
3219 		goto out;
3220 
3221 	if (hwsim_net_get_netgroup(genl_info_net(info)) != data2->netgroup)
3222 		goto out;
3223 
3224 	if (info->snd_portid != data2->wmediumd)
3225 		goto out;
3226 
3227 	/* check if radio is configured properly */
3228 
3229 	if (data2->idle || !data2->started)
3230 		goto out;
3231 
3232 	/* A frame is received from user space */
3233 	memset(&rx_status, 0, sizeof(rx_status));
3234 	if (info->attrs[HWSIM_ATTR_FREQ]) {
3235 		/* throw away off-channel packets, but allow both the temporary
3236 		 * ("hw" scan/remain-on-channel) and regular channel, since the
3237 		 * internal datapath also allows this
3238 		 */
3239 		mutex_lock(&data2->mutex);
3240 		rx_status.freq = nla_get_u32(info->attrs[HWSIM_ATTR_FREQ]);
3241 
3242 		if (rx_status.freq != data2->channel->center_freq &&
3243 		    (!data2->tmp_chan ||
3244 		     rx_status.freq != data2->tmp_chan->center_freq)) {
3245 			mutex_unlock(&data2->mutex);
3246 			goto out;
3247 		}
3248 		mutex_unlock(&data2->mutex);
3249 	} else {
3250 		rx_status.freq = data2->channel->center_freq;
3251 	}
3252 
3253 	rx_status.band = data2->channel->band;
3254 	rx_status.rate_idx = nla_get_u32(info->attrs[HWSIM_ATTR_RX_RATE]);
3255 	rx_status.signal = nla_get_u32(info->attrs[HWSIM_ATTR_SIGNAL]);
3256 
3257 	memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status));
3258 	data2->rx_pkts++;
3259 	data2->rx_bytes += skb->len;
3260 	ieee80211_rx_irqsafe(data2->hw, skb);
3261 
3262 	return 0;
3263 err:
3264 	pr_debug("mac80211_hwsim: error occurred in %s\n", __func__);
3265 out:
3266 	dev_kfree_skb(skb);
3267 	return -EINVAL;
3268 }
3269 
hwsim_register_received_nl(struct sk_buff * skb_2,struct genl_info * info)3270 static int hwsim_register_received_nl(struct sk_buff *skb_2,
3271 				      struct genl_info *info)
3272 {
3273 	struct net *net = genl_info_net(info);
3274 	struct mac80211_hwsim_data *data;
3275 	int chans = 1;
3276 
3277 	spin_lock_bh(&hwsim_radio_lock);
3278 	list_for_each_entry(data, &hwsim_radios, list)
3279 		chans = max(chans, data->channels);
3280 	spin_unlock_bh(&hwsim_radio_lock);
3281 
3282 	/* In the future we should revise the userspace API and allow it
3283 	 * to set a flag that it does support multi-channel, then we can
3284 	 * let this pass conditionally on the flag.
3285 	 * For current userspace, prohibit it since it won't work right.
3286 	 */
3287 	if (chans > 1)
3288 		return -EOPNOTSUPP;
3289 
3290 	if (hwsim_net_get_wmediumd(net))
3291 		return -EBUSY;
3292 
3293 	hwsim_register_wmediumd(net, info->snd_portid);
3294 
3295 	pr_debug("mac80211_hwsim: received a REGISTER, "
3296 	       "switching to wmediumd mode with pid %d\n", info->snd_portid);
3297 
3298 	return 0;
3299 }
3300 
hwsim_new_radio_nl(struct sk_buff * msg,struct genl_info * info)3301 static int hwsim_new_radio_nl(struct sk_buff *msg, struct genl_info *info)
3302 {
3303 	struct hwsim_new_radio_params param = { 0 };
3304 	const char *hwname = NULL;
3305 	int ret;
3306 
3307 	param.reg_strict = info->attrs[HWSIM_ATTR_REG_STRICT_REG];
3308 	param.p2p_device = info->attrs[HWSIM_ATTR_SUPPORT_P2P_DEVICE];
3309 	param.channels = channels;
3310 	param.destroy_on_close =
3311 		info->attrs[HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE];
3312 
3313 	if (info->attrs[HWSIM_ATTR_CHANNELS])
3314 		param.channels = nla_get_u32(info->attrs[HWSIM_ATTR_CHANNELS]);
3315 
3316 	if (param.channels < 1) {
3317 		GENL_SET_ERR_MSG(info, "must have at least one channel");
3318 		return -EINVAL;
3319 	}
3320 
3321 	if (param.channels > CFG80211_MAX_NUM_DIFFERENT_CHANNELS) {
3322 		GENL_SET_ERR_MSG(info, "too many channels specified");
3323 		return -EINVAL;
3324 	}
3325 
3326 	if (info->attrs[HWSIM_ATTR_NO_VIF])
3327 		param.no_vif = true;
3328 
3329 	if (info->attrs[HWSIM_ATTR_RADIO_NAME]) {
3330 		hwname = kasprintf(GFP_KERNEL, "%.*s",
3331 				   nla_len(info->attrs[HWSIM_ATTR_RADIO_NAME]),
3332 				   (char *)nla_data(info->attrs[HWSIM_ATTR_RADIO_NAME]));
3333 		if (!hwname)
3334 			return -ENOMEM;
3335 		param.hwname = hwname;
3336 	}
3337 
3338 	if (info->attrs[HWSIM_ATTR_USE_CHANCTX])
3339 		param.use_chanctx = true;
3340 	else
3341 		param.use_chanctx = (param.channels > 1);
3342 
3343 	if (info->attrs[HWSIM_ATTR_REG_HINT_ALPHA2])
3344 		param.reg_alpha2 =
3345 			nla_data(info->attrs[HWSIM_ATTR_REG_HINT_ALPHA2]);
3346 
3347 	if (info->attrs[HWSIM_ATTR_REG_CUSTOM_REG]) {
3348 		u32 idx = nla_get_u32(info->attrs[HWSIM_ATTR_REG_CUSTOM_REG]);
3349 
3350 		if (idx >= ARRAY_SIZE(hwsim_world_regdom_custom)) {
3351 			kfree(hwname);
3352 			return -EINVAL;
3353 		}
3354 
3355 		idx = array_index_nospec(idx,
3356 					 ARRAY_SIZE(hwsim_world_regdom_custom));
3357 		param.regd = hwsim_world_regdom_custom[idx];
3358 	}
3359 
3360 	if (info->attrs[HWSIM_ATTR_PERM_ADDR]) {
3361 		if (!is_valid_ether_addr(
3362 				nla_data(info->attrs[HWSIM_ATTR_PERM_ADDR]))) {
3363 			GENL_SET_ERR_MSG(info,"MAC is no valid source addr");
3364 			NL_SET_BAD_ATTR(info->extack,
3365 					info->attrs[HWSIM_ATTR_PERM_ADDR]);
3366 			kfree(hwname);
3367 			return -EINVAL;
3368 		}
3369 
3370 
3371 		param.perm_addr = nla_data(info->attrs[HWSIM_ATTR_PERM_ADDR]);
3372 	}
3373 
3374 	ret = mac80211_hwsim_new_radio(info, &param);
3375 	kfree(hwname);
3376 	return ret;
3377 }
3378 
hwsim_del_radio_nl(struct sk_buff * msg,struct genl_info * info)3379 static int hwsim_del_radio_nl(struct sk_buff *msg, struct genl_info *info)
3380 {
3381 	struct mac80211_hwsim_data *data;
3382 	s64 idx = -1;
3383 	const char *hwname = NULL;
3384 
3385 	if (info->attrs[HWSIM_ATTR_RADIO_ID]) {
3386 		idx = nla_get_u32(info->attrs[HWSIM_ATTR_RADIO_ID]);
3387 	} else if (info->attrs[HWSIM_ATTR_RADIO_NAME]) {
3388 		hwname = kasprintf(GFP_KERNEL, "%.*s",
3389 				   nla_len(info->attrs[HWSIM_ATTR_RADIO_NAME]),
3390 				   (char *)nla_data(info->attrs[HWSIM_ATTR_RADIO_NAME]));
3391 		if (!hwname)
3392 			return -ENOMEM;
3393 	} else
3394 		return -EINVAL;
3395 
3396 	spin_lock_bh(&hwsim_radio_lock);
3397 	list_for_each_entry(data, &hwsim_radios, list) {
3398 		if (idx >= 0) {
3399 			if (data->idx != idx)
3400 				continue;
3401 		} else {
3402 			if (!hwname ||
3403 			    strcmp(hwname, wiphy_name(data->hw->wiphy)))
3404 				continue;
3405 		}
3406 
3407 		if (!net_eq(wiphy_net(data->hw->wiphy), genl_info_net(info)))
3408 			continue;
3409 
3410 		list_del(&data->list);
3411 		rhashtable_remove_fast(&hwsim_radios_rht, &data->rht,
3412 				       hwsim_rht_params);
3413 		hwsim_radios_generation++;
3414 		spin_unlock_bh(&hwsim_radio_lock);
3415 		mac80211_hwsim_del_radio(data, wiphy_name(data->hw->wiphy),
3416 					 info);
3417 		kfree(hwname);
3418 		return 0;
3419 	}
3420 	spin_unlock_bh(&hwsim_radio_lock);
3421 
3422 	kfree(hwname);
3423 	return -ENODEV;
3424 }
3425 
hwsim_get_radio_nl(struct sk_buff * msg,struct genl_info * info)3426 static int hwsim_get_radio_nl(struct sk_buff *msg, struct genl_info *info)
3427 {
3428 	struct mac80211_hwsim_data *data;
3429 	struct sk_buff *skb;
3430 	int idx, res = -ENODEV;
3431 
3432 	if (!info->attrs[HWSIM_ATTR_RADIO_ID])
3433 		return -EINVAL;
3434 	idx = nla_get_u32(info->attrs[HWSIM_ATTR_RADIO_ID]);
3435 
3436 	spin_lock_bh(&hwsim_radio_lock);
3437 	list_for_each_entry(data, &hwsim_radios, list) {
3438 		if (data->idx != idx)
3439 			continue;
3440 
3441 		if (!net_eq(wiphy_net(data->hw->wiphy), genl_info_net(info)))
3442 			continue;
3443 
3444 		skb = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC);
3445 		if (!skb) {
3446 			res = -ENOMEM;
3447 			goto out_err;
3448 		}
3449 
3450 		res = mac80211_hwsim_get_radio(skb, data, info->snd_portid,
3451 					       info->snd_seq, NULL, 0);
3452 		if (res < 0) {
3453 			nlmsg_free(skb);
3454 			goto out_err;
3455 		}
3456 
3457 		genlmsg_reply(skb, info);
3458 		break;
3459 	}
3460 
3461 out_err:
3462 	spin_unlock_bh(&hwsim_radio_lock);
3463 
3464 	return res;
3465 }
3466 
hwsim_dump_radio_nl(struct sk_buff * skb,struct netlink_callback * cb)3467 static int hwsim_dump_radio_nl(struct sk_buff *skb,
3468 			       struct netlink_callback *cb)
3469 {
3470 	int last_idx = cb->args[0] - 1;
3471 	struct mac80211_hwsim_data *data = NULL;
3472 	int res = 0;
3473 	void *hdr;
3474 
3475 	spin_lock_bh(&hwsim_radio_lock);
3476 	cb->seq = hwsim_radios_generation;
3477 
3478 	if (last_idx >= hwsim_radio_idx-1)
3479 		goto done;
3480 
3481 	list_for_each_entry(data, &hwsim_radios, list) {
3482 		if (data->idx <= last_idx)
3483 			continue;
3484 
3485 		if (!net_eq(wiphy_net(data->hw->wiphy), sock_net(skb->sk)))
3486 			continue;
3487 
3488 		res = mac80211_hwsim_get_radio(skb, data,
3489 					       NETLINK_CB(cb->skb).portid,
3490 					       cb->nlh->nlmsg_seq, cb,
3491 					       NLM_F_MULTI);
3492 		if (res < 0)
3493 			break;
3494 
3495 		last_idx = data->idx;
3496 	}
3497 
3498 	cb->args[0] = last_idx + 1;
3499 
3500 	/* list changed, but no new element sent, set interrupted flag */
3501 	if (skb->len == 0 && cb->prev_seq && cb->seq != cb->prev_seq) {
3502 		hdr = genlmsg_put(skb, NETLINK_CB(cb->skb).portid,
3503 				  cb->nlh->nlmsg_seq, &hwsim_genl_family,
3504 				  NLM_F_MULTI, HWSIM_CMD_GET_RADIO);
3505 		if (!hdr)
3506 			res = -EMSGSIZE;
3507 		genl_dump_check_consistent(cb, hdr);
3508 		genlmsg_end(skb, hdr);
3509 	}
3510 
3511 done:
3512 	spin_unlock_bh(&hwsim_radio_lock);
3513 	return res ?: skb->len;
3514 }
3515 
3516 /* Generic Netlink operations array */
3517 static const struct genl_ops hwsim_ops[] = {
3518 	{
3519 		.cmd = HWSIM_CMD_REGISTER,
3520 		.policy = hwsim_genl_policy,
3521 		.doit = hwsim_register_received_nl,
3522 		.flags = GENL_UNS_ADMIN_PERM,
3523 	},
3524 	{
3525 		.cmd = HWSIM_CMD_FRAME,
3526 		.policy = hwsim_genl_policy,
3527 		.doit = hwsim_cloned_frame_received_nl,
3528 	},
3529 	{
3530 		.cmd = HWSIM_CMD_TX_INFO_FRAME,
3531 		.policy = hwsim_genl_policy,
3532 		.doit = hwsim_tx_info_frame_received_nl,
3533 	},
3534 	{
3535 		.cmd = HWSIM_CMD_NEW_RADIO,
3536 		.policy = hwsim_genl_policy,
3537 		.doit = hwsim_new_radio_nl,
3538 		.flags = GENL_UNS_ADMIN_PERM,
3539 	},
3540 	{
3541 		.cmd = HWSIM_CMD_DEL_RADIO,
3542 		.policy = hwsim_genl_policy,
3543 		.doit = hwsim_del_radio_nl,
3544 		.flags = GENL_UNS_ADMIN_PERM,
3545 	},
3546 	{
3547 		.cmd = HWSIM_CMD_GET_RADIO,
3548 		.policy = hwsim_genl_policy,
3549 		.doit = hwsim_get_radio_nl,
3550 		.dumpit = hwsim_dump_radio_nl,
3551 	},
3552 };
3553 
3554 static struct genl_family hwsim_genl_family __ro_after_init = {
3555 	.name = "MAC80211_HWSIM",
3556 	.version = 1,
3557 	.maxattr = HWSIM_ATTR_MAX,
3558 	.netnsok = true,
3559 	.module = THIS_MODULE,
3560 	.ops = hwsim_ops,
3561 	.n_ops = ARRAY_SIZE(hwsim_ops),
3562 	.mcgrps = hwsim_mcgrps,
3563 	.n_mcgrps = ARRAY_SIZE(hwsim_mcgrps),
3564 };
3565 
remove_user_radios(u32 portid)3566 static void remove_user_radios(u32 portid)
3567 {
3568 	struct mac80211_hwsim_data *entry, *tmp;
3569 	LIST_HEAD(list);
3570 
3571 	spin_lock_bh(&hwsim_radio_lock);
3572 	list_for_each_entry_safe(entry, tmp, &hwsim_radios, list) {
3573 		if (entry->destroy_on_close && entry->portid == portid) {
3574 			list_move(&entry->list, &list);
3575 			rhashtable_remove_fast(&hwsim_radios_rht, &entry->rht,
3576 					       hwsim_rht_params);
3577 			hwsim_radios_generation++;
3578 		}
3579 	}
3580 	spin_unlock_bh(&hwsim_radio_lock);
3581 
3582 	list_for_each_entry_safe(entry, tmp, &list, list) {
3583 		list_del(&entry->list);
3584 		mac80211_hwsim_del_radio(entry, wiphy_name(entry->hw->wiphy),
3585 					 NULL);
3586 	}
3587 }
3588 
mac80211_hwsim_netlink_notify(struct notifier_block * nb,unsigned long state,void * _notify)3589 static int mac80211_hwsim_netlink_notify(struct notifier_block *nb,
3590 					 unsigned long state,
3591 					 void *_notify)
3592 {
3593 	struct netlink_notify *notify = _notify;
3594 
3595 	if (state != NETLINK_URELEASE)
3596 		return NOTIFY_DONE;
3597 
3598 	remove_user_radios(notify->portid);
3599 
3600 	if (notify->portid == hwsim_net_get_wmediumd(notify->net)) {
3601 		printk(KERN_INFO "mac80211_hwsim: wmediumd released netlink"
3602 		       " socket, switching to perfect channel medium\n");
3603 		hwsim_register_wmediumd(notify->net, 0);
3604 	}
3605 	return NOTIFY_DONE;
3606 
3607 }
3608 
3609 static struct notifier_block hwsim_netlink_notifier = {
3610 	.notifier_call = mac80211_hwsim_netlink_notify,
3611 };
3612 
hwsim_init_netlink(void)3613 static int __init hwsim_init_netlink(void)
3614 {
3615 	int rc;
3616 
3617 	printk(KERN_INFO "mac80211_hwsim: initializing netlink\n");
3618 
3619 	rc = genl_register_family(&hwsim_genl_family);
3620 	if (rc)
3621 		goto failure;
3622 
3623 	rc = netlink_register_notifier(&hwsim_netlink_notifier);
3624 	if (rc) {
3625 		genl_unregister_family(&hwsim_genl_family);
3626 		goto failure;
3627 	}
3628 
3629 	return 0;
3630 
3631 failure:
3632 	pr_debug("mac80211_hwsim: error occurred in %s\n", __func__);
3633 	return -EINVAL;
3634 }
3635 
hwsim_init_net(struct net * net)3636 static __net_init int hwsim_init_net(struct net *net)
3637 {
3638 	return hwsim_net_set_netgroup(net);
3639 }
3640 
hwsim_exit_net(struct net * net)3641 static void __net_exit hwsim_exit_net(struct net *net)
3642 {
3643 	struct mac80211_hwsim_data *data, *tmp;
3644 	LIST_HEAD(list);
3645 
3646 	spin_lock_bh(&hwsim_radio_lock);
3647 	list_for_each_entry_safe(data, tmp, &hwsim_radios, list) {
3648 		if (!net_eq(wiphy_net(data->hw->wiphy), net))
3649 			continue;
3650 
3651 		/* Radios created in init_net are returned to init_net. */
3652 		if (data->netgroup == hwsim_net_get_netgroup(&init_net))
3653 			continue;
3654 
3655 		list_move(&data->list, &list);
3656 		rhashtable_remove_fast(&hwsim_radios_rht, &data->rht,
3657 				       hwsim_rht_params);
3658 		hwsim_radios_generation++;
3659 	}
3660 	spin_unlock_bh(&hwsim_radio_lock);
3661 
3662 	list_for_each_entry_safe(data, tmp, &list, list) {
3663 		list_del(&data->list);
3664 		mac80211_hwsim_del_radio(data,
3665 					 wiphy_name(data->hw->wiphy),
3666 					 NULL);
3667 	}
3668 
3669 	ida_simple_remove(&hwsim_netgroup_ida, hwsim_net_get_netgroup(net));
3670 }
3671 
3672 static struct pernet_operations hwsim_net_ops = {
3673 	.init = hwsim_init_net,
3674 	.exit = hwsim_exit_net,
3675 	.id   = &hwsim_net_id,
3676 	.size = sizeof(struct hwsim_net),
3677 };
3678 
hwsim_exit_netlink(void)3679 static void hwsim_exit_netlink(void)
3680 {
3681 	/* unregister the notifier */
3682 	netlink_unregister_notifier(&hwsim_netlink_notifier);
3683 	/* unregister the family */
3684 	genl_unregister_family(&hwsim_genl_family);
3685 }
3686 
init_mac80211_hwsim(void)3687 static int __init init_mac80211_hwsim(void)
3688 {
3689 	int i, err;
3690 
3691 	if (radios < 0 || radios > 100)
3692 		return -EINVAL;
3693 
3694 	if (channels < 1)
3695 		return -EINVAL;
3696 
3697 	spin_lock_init(&hwsim_radio_lock);
3698 
3699 	hwsim_wq = alloc_workqueue("hwsim_wq", 0, 0);
3700 	if (!hwsim_wq)
3701 		return -ENOMEM;
3702 
3703 	err = rhashtable_init(&hwsim_radios_rht, &hwsim_rht_params);
3704 	if (err)
3705 		goto out_free_wq;
3706 
3707 	err = register_pernet_device(&hwsim_net_ops);
3708 	if (err)
3709 		goto out_free_rht;
3710 
3711 	err = platform_driver_register(&mac80211_hwsim_driver);
3712 	if (err)
3713 		goto out_unregister_pernet;
3714 
3715 	hwsim_class = class_create(THIS_MODULE, "mac80211_hwsim");
3716 	if (IS_ERR(hwsim_class)) {
3717 		err = PTR_ERR(hwsim_class);
3718 		goto out_unregister_driver;
3719 	}
3720 
3721 	err = hwsim_init_netlink();
3722 	if (err < 0)
3723 		goto out_unregister_driver;
3724 
3725 	for (i = 0; i < radios; i++) {
3726 		struct hwsim_new_radio_params param = { 0 };
3727 
3728 		param.channels = channels;
3729 
3730 		switch (regtest) {
3731 		case HWSIM_REGTEST_DIFF_COUNTRY:
3732 			if (i < ARRAY_SIZE(hwsim_alpha2s))
3733 				param.reg_alpha2 = hwsim_alpha2s[i];
3734 			break;
3735 		case HWSIM_REGTEST_DRIVER_REG_FOLLOW:
3736 			if (!i)
3737 				param.reg_alpha2 = hwsim_alpha2s[0];
3738 			break;
3739 		case HWSIM_REGTEST_STRICT_ALL:
3740 			param.reg_strict = true;
3741 		case HWSIM_REGTEST_DRIVER_REG_ALL:
3742 			param.reg_alpha2 = hwsim_alpha2s[0];
3743 			break;
3744 		case HWSIM_REGTEST_WORLD_ROAM:
3745 			if (i == 0)
3746 				param.regd = &hwsim_world_regdom_custom_01;
3747 			break;
3748 		case HWSIM_REGTEST_CUSTOM_WORLD:
3749 			param.regd = &hwsim_world_regdom_custom_01;
3750 			break;
3751 		case HWSIM_REGTEST_CUSTOM_WORLD_2:
3752 			if (i == 0)
3753 				param.regd = &hwsim_world_regdom_custom_01;
3754 			else if (i == 1)
3755 				param.regd = &hwsim_world_regdom_custom_02;
3756 			break;
3757 		case HWSIM_REGTEST_STRICT_FOLLOW:
3758 			if (i == 0) {
3759 				param.reg_strict = true;
3760 				param.reg_alpha2 = hwsim_alpha2s[0];
3761 			}
3762 			break;
3763 		case HWSIM_REGTEST_STRICT_AND_DRIVER_REG:
3764 			if (i == 0) {
3765 				param.reg_strict = true;
3766 				param.reg_alpha2 = hwsim_alpha2s[0];
3767 			} else if (i == 1) {
3768 				param.reg_alpha2 = hwsim_alpha2s[1];
3769 			}
3770 			break;
3771 		case HWSIM_REGTEST_ALL:
3772 			switch (i) {
3773 			case 0:
3774 				param.regd = &hwsim_world_regdom_custom_01;
3775 				break;
3776 			case 1:
3777 				param.regd = &hwsim_world_regdom_custom_02;
3778 				break;
3779 			case 2:
3780 				param.reg_alpha2 = hwsim_alpha2s[0];
3781 				break;
3782 			case 3:
3783 				param.reg_alpha2 = hwsim_alpha2s[1];
3784 				break;
3785 			case 4:
3786 				param.reg_strict = true;
3787 				param.reg_alpha2 = hwsim_alpha2s[2];
3788 				break;
3789 			}
3790 			break;
3791 		default:
3792 			break;
3793 		}
3794 
3795 		param.p2p_device = support_p2p_device;
3796 		param.use_chanctx = channels > 1;
3797 
3798 		err = mac80211_hwsim_new_radio(NULL, &param);
3799 		if (err < 0)
3800 			goto out_free_radios;
3801 	}
3802 
3803 	hwsim_mon = alloc_netdev(0, "hwsim%d", NET_NAME_UNKNOWN,
3804 				 hwsim_mon_setup);
3805 	if (hwsim_mon == NULL) {
3806 		err = -ENOMEM;
3807 		goto out_free_radios;
3808 	}
3809 
3810 	rtnl_lock();
3811 	err = dev_alloc_name(hwsim_mon, hwsim_mon->name);
3812 	if (err < 0) {
3813 		rtnl_unlock();
3814 		goto out_free_radios;
3815 	}
3816 
3817 	err = register_netdevice(hwsim_mon);
3818 	if (err < 0) {
3819 		rtnl_unlock();
3820 		goto out_free_mon;
3821 	}
3822 	rtnl_unlock();
3823 
3824 	return 0;
3825 
3826 out_free_mon:
3827 	free_netdev(hwsim_mon);
3828 out_free_radios:
3829 	mac80211_hwsim_free();
3830 out_unregister_driver:
3831 	platform_driver_unregister(&mac80211_hwsim_driver);
3832 out_unregister_pernet:
3833 	unregister_pernet_device(&hwsim_net_ops);
3834 out_free_rht:
3835 	rhashtable_destroy(&hwsim_radios_rht);
3836 out_free_wq:
3837 	destroy_workqueue(hwsim_wq);
3838 	return err;
3839 }
3840 module_init(init_mac80211_hwsim);
3841 
exit_mac80211_hwsim(void)3842 static void __exit exit_mac80211_hwsim(void)
3843 {
3844 	pr_debug("mac80211_hwsim: unregister radios\n");
3845 
3846 	hwsim_exit_netlink();
3847 
3848 	mac80211_hwsim_free();
3849 	flush_workqueue(hwsim_wq);
3850 
3851 	rhashtable_destroy(&hwsim_radios_rht);
3852 	unregister_netdev(hwsim_mon);
3853 	platform_driver_unregister(&mac80211_hwsim_driver);
3854 	unregister_pernet_device(&hwsim_net_ops);
3855 	destroy_workqueue(hwsim_wq);
3856 }
3857 module_exit(exit_mac80211_hwsim);
3858