/* * Copyright (c) 2014 Broadcom Corporation * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies. * * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ #include <linux/vmalloc.h> #include <net/cfg80211.h> #include <net/netlink.h> #include <brcmu_wifi.h> #include "fwil_types.h" #include "dhd.h" #include "p2p.h" #include "dhd_dbg.h" #include "wl_cfg80211.h" #include "vendor.h" #include "fwil.h" static int brcmf_cfg80211_vndr_cmds_dcmd_handler(struct wiphy *wiphy, struct wireless_dev *wdev, const void *data, int len) { struct brcmf_cfg80211_info *cfg = wiphy_to_cfg(wiphy); struct net_device *ndev = cfg_to_ndev(cfg); const struct brcmf_vndr_dcmd_hdr *cmdhdr = data; struct sk_buff *reply; int ret, payload, ret_len; void *dcmd_buf = NULL, *wr_pointer; u16 msglen, maxmsglen = PAGE_SIZE - 0x100; brcmf_dbg(TRACE, "cmd %x set %d len %d\n", cmdhdr->cmd, cmdhdr->set, cmdhdr->len); len -= sizeof(struct brcmf_vndr_dcmd_hdr); ret_len = cmdhdr->len; if (ret_len > 0 || len > 0) { if (len > BRCMF_DCMD_MAXLEN) { brcmf_err("oversize input buffer %d\n", len); len = BRCMF_DCMD_MAXLEN; } if (ret_len > BRCMF_DCMD_MAXLEN) { brcmf_err("oversize return buffer %d\n", ret_len); ret_len = BRCMF_DCMD_MAXLEN; } payload = max(ret_len, len) + 1; dcmd_buf = vzalloc(payload); if (NULL == dcmd_buf) return -ENOMEM; memcpy(dcmd_buf, (void *)cmdhdr + cmdhdr->offset, len); *(char *)(dcmd_buf + len) = '\0'; } if (cmdhdr->set) ret = brcmf_fil_cmd_data_set(netdev_priv(ndev), cmdhdr->cmd, dcmd_buf, ret_len); else ret = brcmf_fil_cmd_data_get(netdev_priv(ndev), cmdhdr->cmd, dcmd_buf, ret_len); if (ret != 0) goto exit; wr_pointer = dcmd_buf; while (ret_len > 0) { msglen = ret_len > maxmsglen ? maxmsglen : ret_len; ret_len -= msglen; payload = msglen + sizeof(msglen); reply = cfg80211_vendor_cmd_alloc_reply_skb(wiphy, payload); if (NULL == reply) { ret = -ENOMEM; break; } if (nla_put(reply, BRCMF_NLATTR_DATA, msglen, wr_pointer) || nla_put_u16(reply, BRCMF_NLATTR_LEN, msglen)) { kfree_skb(reply); ret = -ENOBUFS; break; } ret = cfg80211_vendor_cmd_reply(reply); if (ret) break; wr_pointer += msglen; } exit: vfree(dcmd_buf); return ret; } const struct wiphy_vendor_command brcmf_vendor_cmds[] = { { { .vendor_id = BROADCOM_OUI, .subcmd = BRCMF_VNDR_CMDS_DCMD }, .flags = WIPHY_VENDOR_CMD_NEED_WDEV | WIPHY_VENDOR_CMD_NEED_NETDEV, .doit = brcmf_cfg80211_vndr_cmds_dcmd_handler }, };