ieee80211_ioctl.c (186107) | ieee80211_ioctl.c (186302) |
---|---|
1/*- 2 * Copyright (c) 2001 Atsushi Onoe 3 * Copyright (c) 2002-2008 Sam Leffler, Errno Consulting 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: --- 11 unchanged lines hidden (view full) --- 20 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 21 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 22 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 24 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 25 */ 26 27#include <sys/cdefs.h> | 1/*- 2 * Copyright (c) 2001 Atsushi Onoe 3 * Copyright (c) 2002-2008 Sam Leffler, Errno Consulting 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: --- 11 unchanged lines hidden (view full) --- 20 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 21 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 22 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 24 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 25 */ 26 27#include <sys/cdefs.h> |
28__FBSDID("$FreeBSD: head/sys/net80211/ieee80211_ioctl.c 186107 2008-12-15 01:26:33Z sam $"); | 28__FBSDID("$FreeBSD: head/sys/net80211/ieee80211_ioctl.c 186302 2008-12-18 23:00:09Z sam $"); |
29 30/* 31 * IEEE 802.11 ioctl support (FreeBSD-specific) 32 */ 33 34#include "opt_inet.h" 35#include "opt_ipx.h" 36#include "opt_wlan.h" --- 278 unchanged lines hidden (view full) --- 315 if (req.space > ireq->i_len) 316 req.space = ireq->i_len; 317 if (req.space > 0) { 318 size_t space; 319 void *p; 320 321 space = req.space; 322 /* XXX M_WAITOK after driver lock released */ | 29 30/* 31 * IEEE 802.11 ioctl support (FreeBSD-specific) 32 */ 33 34#include "opt_inet.h" 35#include "opt_ipx.h" 36#include "opt_wlan.h" --- 278 unchanged lines hidden (view full) --- 315 if (req.space > ireq->i_len) 316 req.space = ireq->i_len; 317 if (req.space > 0) { 318 size_t space; 319 void *p; 320 321 space = req.space; 322 /* XXX M_WAITOK after driver lock released */ |
323 MALLOC(p, void *, space, M_TEMP, M_NOWAIT | M_ZERO); | 323 p = malloc(space, M_TEMP, M_NOWAIT | M_ZERO); |
324 if (p == NULL) 325 return ENOMEM; 326 req.sr = p; 327 ieee80211_scan_iterate(vap, get_scan_result, &req); 328 ireq->i_len = space - req.space; 329 error = copyout(p, ireq->i_data, ireq->i_len); | 324 if (p == NULL) 325 return ENOMEM; 326 req.sr = p; 327 ieee80211_scan_iterate(vap, get_scan_result, &req); 328 ireq->i_len = space - req.space; 329 error = copyout(p, ireq->i_data, ireq->i_len); |
330 FREE(p, M_TEMP); | 330 free(p, M_TEMP); |
331 } else 332 ireq->i_len = 0; 333 334 return error; 335} 336 337struct stainforeq { 338 struct ieee80211vap *vap; --- 123 unchanged lines hidden (view full) --- 462 ieee80211_iterate_nodes(&ic->ic_sta, get_sta_space, &req); 463 else 464 get_sta_space(&req, ni); 465 if (req.space > ireq->i_len) 466 req.space = ireq->i_len; 467 if (req.space > 0) { 468 space = req.space; 469 /* XXX M_WAITOK after driver lock released */ | 331 } else 332 ireq->i_len = 0; 333 334 return error; 335} 336 337struct stainforeq { 338 struct ieee80211vap *vap; --- 123 unchanged lines hidden (view full) --- 462 ieee80211_iterate_nodes(&ic->ic_sta, get_sta_space, &req); 463 else 464 get_sta_space(&req, ni); 465 if (req.space > ireq->i_len) 466 req.space = ireq->i_len; 467 if (req.space > 0) { 468 space = req.space; 469 /* XXX M_WAITOK after driver lock released */ |
470 MALLOC(p, void *, space, M_TEMP, M_NOWAIT | M_ZERO); | 470 p = malloc(space, M_TEMP, M_NOWAIT | M_ZERO); |
471 if (p == NULL) { 472 error = ENOMEM; 473 goto bad; 474 } 475 req.si = p; 476 if (ni == NULL) 477 ieee80211_iterate_nodes(&ic->ic_sta, get_sta_info, &req); 478 else 479 get_sta_info(&req, ni); 480 ireq->i_len = space - req.space; 481 error = copyout(p, (uint8_t *) ireq->i_data+off, ireq->i_len); | 471 if (p == NULL) { 472 error = ENOMEM; 473 goto bad; 474 } 475 req.si = p; 476 if (ni == NULL) 477 ieee80211_iterate_nodes(&ic->ic_sta, get_sta_info, &req); 478 else 479 get_sta_info(&req, ni); 480 ireq->i_len = space - req.space; 481 error = copyout(p, (uint8_t *) ireq->i_data+off, ireq->i_len); |
482 FREE(p, M_TEMP); | 482 free(p, M_TEMP); |
483 } else 484 ireq->i_len = 0; 485bad: 486 if (ni != NULL) 487 ieee80211_free_node(ni); 488 return error; 489} 490 --- 200 unchanged lines hidden (view full) --- 691 const struct ieee80211req *ireq) 692{ 693 struct ieee80211_devcaps_req *dc; 694 struct ieee80211req_chaninfo *ci; 695 int error; 696 697 if (ireq->i_len != sizeof(struct ieee80211_devcaps_req)) 698 return EINVAL; | 483 } else 484 ireq->i_len = 0; 485bad: 486 if (ni != NULL) 487 ieee80211_free_node(ni); 488 return error; 489} 490 --- 200 unchanged lines hidden (view full) --- 691 const struct ieee80211req *ireq) 692{ 693 struct ieee80211_devcaps_req *dc; 694 struct ieee80211req_chaninfo *ci; 695 int error; 696 697 if (ireq->i_len != sizeof(struct ieee80211_devcaps_req)) 698 return EINVAL; |
699 MALLOC(dc, struct ieee80211_devcaps_req *, | 699 dc = (struct ieee80211_devcaps_req *) malloc( |
700 sizeof(struct ieee80211_devcaps_req), M_TEMP, M_NOWAIT | M_ZERO); 701 if (dc == NULL) 702 return ENOMEM; 703 dc->dc_drivercaps = ic->ic_caps; 704 dc->dc_cryptocaps = ic->ic_cryptocaps; 705 dc->dc_htcaps = ic->ic_htcaps; 706 ci = &dc->dc_chaninfo; 707 ic->ic_getradiocaps(ic, &ci->ic_nchans, ci->ic_chans); 708 ieee80211_sort_channels(ci->ic_chans, ci->ic_nchans); 709 error = copyout(dc, ireq->i_data, sizeof(*dc)); | 700 sizeof(struct ieee80211_devcaps_req), M_TEMP, M_NOWAIT | M_ZERO); 701 if (dc == NULL) 702 return ENOMEM; 703 dc->dc_drivercaps = ic->ic_caps; 704 dc->dc_cryptocaps = ic->ic_cryptocaps; 705 dc->dc_htcaps = ic->ic_htcaps; 706 ci = &dc->dc_chaninfo; 707 ic->ic_getradiocaps(ic, &ci->ic_nchans, ci->ic_chans); 708 ieee80211_sort_channels(ci->ic_chans, ci->ic_nchans); 709 error = copyout(dc, ireq->i_data, sizeof(*dc)); |
710 FREE(dc, M_TEMP); | 710 free(dc, M_TEMP); |
711 return error; 712} 713 714static __noinline int 715ieee80211_ioctl_getstavlan(struct ieee80211vap *vap, struct ieee80211req *ireq) 716{ 717 struct ieee80211_node *ni; 718 struct ieee80211req_sta_vlan vlan; --- 1261 unchanged lines hidden (view full) --- 1980ieee80211_ioctl_setregdomain(struct ieee80211vap *vap, 1981 const struct ieee80211req *ireq) 1982{ 1983 struct ieee80211_regdomain_req *reg; 1984 int error; 1985 1986 if (ireq->i_len != sizeof(struct ieee80211_regdomain_req)) 1987 return EINVAL; | 711 return error; 712} 713 714static __noinline int 715ieee80211_ioctl_getstavlan(struct ieee80211vap *vap, struct ieee80211req *ireq) 716{ 717 struct ieee80211_node *ni; 718 struct ieee80211req_sta_vlan vlan; --- 1261 unchanged lines hidden (view full) --- 1980ieee80211_ioctl_setregdomain(struct ieee80211vap *vap, 1981 const struct ieee80211req *ireq) 1982{ 1983 struct ieee80211_regdomain_req *reg; 1984 int error; 1985 1986 if (ireq->i_len != sizeof(struct ieee80211_regdomain_req)) 1987 return EINVAL; |
1988 MALLOC(reg, struct ieee80211_regdomain_req *, | 1988 reg = (struct ieee80211_regdomain_req *) malloc( |
1989 sizeof(struct ieee80211_regdomain_req), M_TEMP, M_NOWAIT); 1990 if (reg == NULL) 1991 return ENOMEM; 1992 error = copyin(ireq->i_data, reg, sizeof(*reg)); 1993 if (error == 0) 1994 error = ieee80211_setregdomain(vap, reg); | 1989 sizeof(struct ieee80211_regdomain_req), M_TEMP, M_NOWAIT); 1990 if (reg == NULL) 1991 return ENOMEM; 1992 error = copyin(ireq->i_data, reg, sizeof(*reg)); 1993 if (error == 0) 1994 error = ieee80211_setregdomain(vap, reg); |
1995 FREE(reg, M_TEMP); | 1995 free(reg, M_TEMP); |
1996 1997 return (error == 0 ? ENETRESET : error); 1998} 1999 2000static int 2001ieee80211_ioctl_setroam(struct ieee80211vap *vap, 2002 const struct ieee80211req *ireq) 2003{ --- 122 unchanged lines hidden (view full) --- 2126{ 2127 struct ieee80211_appie *app = *aie; 2128 struct ieee80211_appie *napp; 2129 int error; 2130 2131 if (ireq->i_len == 0) { /* delete any existing ie */ 2132 if (app != NULL) { 2133 *aie = NULL; /* XXX racey */ | 1996 1997 return (error == 0 ? ENETRESET : error); 1998} 1999 2000static int 2001ieee80211_ioctl_setroam(struct ieee80211vap *vap, 2002 const struct ieee80211req *ireq) 2003{ --- 122 unchanged lines hidden (view full) --- 2126{ 2127 struct ieee80211_appie *app = *aie; 2128 struct ieee80211_appie *napp; 2129 int error; 2130 2131 if (ireq->i_len == 0) { /* delete any existing ie */ 2132 if (app != NULL) { 2133 *aie = NULL; /* XXX racey */ |
2134 FREE(app, M_80211_NODE_IE); | 2134 free(app, M_80211_NODE_IE); |
2135 } 2136 return 0; 2137 } 2138 if (!(2 <= ireq->i_len && ireq->i_len <= IEEE80211_MAX_APPIE)) 2139 return EINVAL; 2140 /* 2141 * Allocate a new appie structure and copy in the user data. 2142 * When done swap in the new structure. Note that we do not 2143 * guard against users holding a ref to the old structure; 2144 * this must be handled outside this code. 2145 * 2146 * XXX bad bad bad 2147 */ | 2135 } 2136 return 0; 2137 } 2138 if (!(2 <= ireq->i_len && ireq->i_len <= IEEE80211_MAX_APPIE)) 2139 return EINVAL; 2140 /* 2141 * Allocate a new appie structure and copy in the user data. 2142 * When done swap in the new structure. Note that we do not 2143 * guard against users holding a ref to the old structure; 2144 * this must be handled outside this code. 2145 * 2146 * XXX bad bad bad 2147 */ |
2148 MALLOC(napp, struct ieee80211_appie *, | 2148 napp = (struct ieee80211_appie *) malloc( |
2149 sizeof(struct ieee80211_appie) + ireq->i_len, M_80211_NODE_IE, M_NOWAIT); 2150 if (napp == NULL) 2151 return ENOMEM; 2152 /* XXX holding ic lock */ 2153 error = copyin(ireq->i_data, napp->ie_data, ireq->i_len); 2154 if (error) { | 2149 sizeof(struct ieee80211_appie) + ireq->i_len, M_80211_NODE_IE, M_NOWAIT); 2150 if (napp == NULL) 2151 return ENOMEM; 2152 /* XXX holding ic lock */ 2153 error = copyin(ireq->i_data, napp->ie_data, ireq->i_len); 2154 if (error) { |
2155 FREE(napp, M_80211_NODE_IE); | 2155 free(napp, M_80211_NODE_IE); |
2156 return error; 2157 } 2158 napp->ie_len = ireq->i_len; 2159 *aie = napp; 2160 if (app != NULL) | 2156 return error; 2157 } 2158 napp->ie_len = ireq->i_len; 2159 *aie = napp; 2160 if (app != NULL) |
2161 FREE(app, M_80211_NODE_IE); | 2161 free(app, M_80211_NODE_IE); |
2162 return 0; 2163} 2164 2165static void 2166setwparsnie(struct ieee80211vap *vap, uint8_t *ie, int space) 2167{ 2168 /* validate data is present as best we can */ 2169 if (space == 0 || 2+ie[1] > space) --- 1137 unchanged lines hidden --- | 2162 return 0; 2163} 2164 2165static void 2166setwparsnie(struct ieee80211vap *vap, uint8_t *ie, int space) 2167{ 2168 /* validate data is present as best we can */ 2169 if (space == 0 || 2+ie[1] > space) --- 1137 unchanged lines hidden --- |