drivers/net/wireless/brcm80211/brcmfmac/vendor.c

   1 /*
   2  * Copyright (c) 2014 Broadcom Corporation
   3  *
   4  * Permission to use, copy, modify, and/or distribute this software for any
   5  * purpose with or without fee is hereby granted, provided that the above
   6  * copyright notice and this permission notice appear in all copies.
   7  *
   8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
   9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
  11  * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
  13  * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
  14  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  15  */
  16
  17 #include <linux/vmalloc.h>
  18 #include <net/cfg80211.h>
  19 #include <net/netlink.h>
  20
  21 #include <brcmu_wifi.h>
  22 #include "fwil_types.h"
  23 #include "core.h"
  24 #include "p2p.h"
  25 #include "debug.h"
  26 #include "cfg80211.h"
  27 #include "vendor.h"
  28 #include "fwil.h"
  29
  30 static int brcmf_cfg80211_vndr_cmds_dcmd_handler(struct wiphy *wiphy,
  31                                                  struct wireless_dev *wdev,
  32                                                  const void *data, int len)
  33 {
  34         struct brcmf_cfg80211_vif *vif;
  35         struct brcmf_if *ifp;
  36         const struct brcmf_vndr_dcmd_hdr *cmdhdr = data;
  37         struct sk_buff *reply;
  38         int ret, payload, ret_len;
  39         void *dcmd_buf = NULL, *wr_pointer;
  40         u16 msglen, maxmsglen = PAGE_SIZE - 0x100;
  41
  42         brcmf_dbg(TRACE, "cmd %x set %d len %d\n", cmdhdr->cmd, cmdhdr->set,
  43                   cmdhdr->len);
  44
  45         vif = container_of(wdev, struct brcmf_cfg80211_vif, wdev);
  46         ifp = vif->ifp;
  47
  48         len -= sizeof(struct brcmf_vndr_dcmd_hdr);
  49         ret_len = cmdhdr->len;
  50         if (ret_len > 0 || len > 0) {
  51                 if (len > BRCMF_DCMD_MAXLEN) {
  52                         brcmf_err("oversize input buffer %d\n", len);
  53                         len = BRCMF_DCMD_MAXLEN;
  54                 }
  55                 if (ret_len > BRCMF_DCMD_MAXLEN) {
  56                         brcmf_err("oversize return buffer %d\n", ret_len);
  57                         ret_len = BRCMF_DCMD_MAXLEN;
  58                 }
  59                 payload = max(ret_len, len) + 1;
  60                 dcmd_buf = vzalloc(payload);
  61                 if (NULL == dcmd_buf)
  62                         return -ENOMEM;
  63
  64                 memcpy(dcmd_buf, (void *)cmdhdr + cmdhdr->offset, len);
  65                 *(char *)(dcmd_buf + len)  = '\0';
  66         }
  67
  68         if (cmdhdr->set)
  69                 ret = brcmf_fil_cmd_data_set(ifp, cmdhdr->cmd, dcmd_buf,
  70                                              ret_len);
  71         else
  72                 ret = brcmf_fil_cmd_data_get(ifp, cmdhdr->cmd, dcmd_buf,
  73                                              ret_len);
  74         if (ret != 0)
  75                 goto exit;
  76
  77         wr_pointer = dcmd_buf;
  78         while (ret_len > 0) {
  79                 msglen = ret_len > maxmsglen ? maxmsglen : ret_len;
  80                 ret_len -= msglen;
  81                 payload = msglen + sizeof(msglen);
  82                 reply = cfg80211_vendor_cmd_alloc_reply_skb(wiphy, payload);
  83                 if (NULL == reply) {
  84                         ret = -ENOMEM;
  85                         break;
  86                 }
  87
  88                 if (nla_put(reply, BRCMF_NLATTR_DATA, msglen, wr_pointer) ||
  89                     nla_put_u16(reply, BRCMF_NLATTR_LEN, msglen)) {
  90                         kfree_skb(reply);
  91                         ret = -ENOBUFS;
  92                         break;
  93                 }
  94
  95                 ret = cfg80211_vendor_cmd_reply(reply);
  96                 if (ret)
  97                         break;
  98
  99                 wr_pointer += msglen;
 100         }
 101
 102 exit:
 103         vfree(dcmd_buf);
 104
 105         return ret;
 106 }
 107
 108 const struct wiphy_vendor_command brcmf_vendor_cmds[] = {
 109         {
 110                 {
 111                         .vendor_id = BROADCOM_OUI,
 112                         .subcmd = BRCMF_VNDR_CMDS_DCMD
 113                 },
 114                 .flags = WIPHY_VENDOR_CMD_NEED_WDEV |
 115                          WIPHY_VENDOR_CMD_NEED_NETDEV,
 116                 .doit = brcmf_cfg80211_vndr_cmds_dcmd_handler
 117         },
 118 };