143d40f3ab
This reverts commit e6c5fc53d0
.
Based on this regression report:
Date: Thu, 05 Nov 2009 15:59:16 +0100
From: Holger Schurig <holgerschurig@gmail.com>
To: linux-wireless@vger.kernel.org
Subject: BUG: oops when "rmmod ipw2200"
This happened on wireless-testing v2.6.32-rc6-41575-g5e68bfb. I
modprobed ipw2200, put it into monitor mode, used tshark a while to
monitor, then I stopped tshark, "ifconfig eth2 down" and finally
"rmmod ipw2200", and voila:
[ 917.189620] ------------[ cut here ]------------
[ 917.189717] kernel BUG at net/wireless/core.c:543!
[ 917.189805] invalid opcode: 0000 [#1] PREEMPT SMP
[ 917.190002] last sysfs file: /sys/devices/pci0000:00/0000:00:1e.0/0000:02:0d.0/firmware/0000:02:0d.0/loading
[ 917.190136] Modules linked in: lib80211_crypt_wep ipw2200(-) libipw lib80211 ath5k mac80211 ath cfg80211 psmouse uhci_hcd
[ 917.190680]
[ 917.190759] Pid: 1763, comm: rmmod Not tainted (2.6.32-rc6-wl #26) Amilo M1425
[ 917.190886] EIP: 0060:[<f8accf34>] EFLAGS: 00010202 CPU: 0
[ 917.190992] EIP is at wiphy_unregister+0xd3/0x175 [cfg80211]
[ 917.191083] EAX: f601d4c4 EBX: 00000000 ECX: 00000000 EDX: f79e8600
[ 917.191176] ESI: f601d400 EDI: f95b4350 EBP: f6009eb4 ESP: f6009e8c
[ 917.191269] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
[ 917.191360] Process rmmod (pid: 1763, ti=f6008000 task=f79e8130 task.ti=f6008000)
[ 917.191486] Stack:
[ 917.191562] f601d5a0 f601d484 f6460e98 f6009ea0 c01407ee f6009eb8 00000246 f64604c0
[ 917.191916] <0> f6460e5c f95b4350 f6009ec0 f94fd030 f6460e98 f6009edc f95a9d4f f787bc00
[ 917.192100] <0> f787bc58 f787bc00 f95b4350 f95b4350 f6009ee8 c0207fca f787bc58 f6009ef8
[ 917.192100] Call Trace:
[ 917.192100] [<c01407ee>] ? trace_hardirqs_on+0xb/0xd
[ 917.192100] [<f94fd030>] ? unregister_ieee80211+0xe/0x27 [libipw]
[ 917.192100] [<f95a9d4f>] ? ipw_pci_remove+0x59/0x227 [ipw2200]
[ 917.192100] [<c0207fca>] ? pci_device_remove+0x19/0x39
[ 917.192100] [<c02b93a4>] ? __device_release_driver+0x59/0x9d
[ 917.192100] [<c02b944f>] ? driver_detach+0x67/0x85
[ 917.192100] [<c02b88d6>] ? bus_remove_driver+0x69/0x85
[ 917.192100] [<c02b9878>] ? driver_unregister+0x4d/0x54
[ 917.192100] [<c02081c3>] ? pci_unregister_driver+0x28/0x71
[ 917.192100] [<f95a9cf4>] ? ipw_exit+0x1c/0x1e [ipw2200]
[ 917.192100] [<c0148e2b>] ? sys_delete_module+0x192/0x1ef
[ 917.192100] [<c0162cdb>] ? remove_vma+0x52/0x58
[ 917.192100] [<c01028bb>] ? sysenter_exit+0xf/0x18
[ 917.192100] [<c0102888>] ? sysenter_do_call+0x12/0x36
[ 917.192100] Code: 74 07 e8 81 bc 8c c7 eb c8 8d 55 e0 89 f8 e8 d6 6d 66 c7 8b 45 dc 31 d2 e8 81 cc 8c c7 8d 86 c4 00 00 00 39 86 c4 00 00 00 74 04 <0f> 0b eb fe 8b 45 dc 8d 5e 0c e8 5a cc 8c c7 8b 86 94 03 00 00
[ 917.192100] EIP: [<f8accf34>] wiphy_unregister+0xd3/0x175 [cfg80211] SS:ESP 0068:f6009e8c
[ 917.203718] ---[ end trace bcaaf449945a5100 ]---
Signed-off-by: John W. Linville <linville@tuxdriver.com>
333 lines
8.7 KiB
C
333 lines
8.7 KiB
C
/*******************************************************************************
|
|
|
|
Copyright(c) 2004-2005 Intel Corporation. All rights reserved.
|
|
|
|
Portions of this file are based on the WEP enablement code provided by the
|
|
Host AP project hostap-drivers v0.1.3
|
|
Copyright (c) 2001-2002, SSH Communications Security Corp and Jouni Malinen
|
|
<j@w1.fi>
|
|
Copyright (c) 2002-2003, Jouni Malinen <j@w1.fi>
|
|
|
|
This program is free software; you can redistribute it and/or modify it
|
|
under the terms of version 2 of the GNU General Public License as
|
|
published by the Free Software Foundation.
|
|
|
|
This program is distributed in the hope that it will be useful, but WITHOUT
|
|
ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|
|
more details.
|
|
|
|
You should have received a copy of the GNU General Public License along with
|
|
this program; if not, write to the Free Software Foundation, Inc., 59
|
|
Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
|
|
The full GNU General Public License is included in this distribution in the
|
|
file called LICENSE.
|
|
|
|
Contact Information:
|
|
Intel Linux Wireless <ilw@linux.intel.com>
|
|
Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
|
|
|
|
*******************************************************************************/
|
|
|
|
#include <linux/compiler.h>
|
|
#include <linux/errno.h>
|
|
#include <linux/if_arp.h>
|
|
#include <linux/in6.h>
|
|
#include <linux/in.h>
|
|
#include <linux/ip.h>
|
|
#include <linux/kernel.h>
|
|
#include <linux/module.h>
|
|
#include <linux/netdevice.h>
|
|
#include <linux/proc_fs.h>
|
|
#include <linux/skbuff.h>
|
|
#include <linux/slab.h>
|
|
#include <linux/tcp.h>
|
|
#include <linux/types.h>
|
|
#include <linux/wireless.h>
|
|
#include <linux/etherdevice.h>
|
|
#include <asm/uaccess.h>
|
|
#include <net/net_namespace.h>
|
|
#include <net/arp.h>
|
|
|
|
#include "libipw.h"
|
|
|
|
#define DRV_DESCRIPTION "802.11 data/management/control stack"
|
|
#define DRV_NAME "ieee80211"
|
|
#define DRV_VERSION LIBIPW_VERSION
|
|
#define DRV_COPYRIGHT "Copyright (C) 2004-2005 Intel Corporation <jketreno@linux.intel.com>"
|
|
|
|
MODULE_VERSION(DRV_VERSION);
|
|
MODULE_DESCRIPTION(DRV_DESCRIPTION);
|
|
MODULE_AUTHOR(DRV_COPYRIGHT);
|
|
MODULE_LICENSE("GPL");
|
|
|
|
struct cfg80211_ops libipw_config_ops = { };
|
|
void *libipw_wiphy_privid = &libipw_wiphy_privid;
|
|
|
|
static int libipw_networks_allocate(struct libipw_device *ieee)
|
|
{
|
|
if (ieee->networks)
|
|
return 0;
|
|
|
|
ieee->networks =
|
|
kzalloc(MAX_NETWORK_COUNT * sizeof(struct libipw_network),
|
|
GFP_KERNEL);
|
|
if (!ieee->networks) {
|
|
printk(KERN_WARNING "%s: Out of memory allocating beacons\n",
|
|
ieee->dev->name);
|
|
return -ENOMEM;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
void libipw_network_reset(struct libipw_network *network)
|
|
{
|
|
if (!network)
|
|
return;
|
|
|
|
if (network->ibss_dfs) {
|
|
kfree(network->ibss_dfs);
|
|
network->ibss_dfs = NULL;
|
|
}
|
|
}
|
|
|
|
static inline void libipw_networks_free(struct libipw_device *ieee)
|
|
{
|
|
int i;
|
|
|
|
if (!ieee->networks)
|
|
return;
|
|
|
|
for (i = 0; i < MAX_NETWORK_COUNT; i++)
|
|
if (ieee->networks[i].ibss_dfs)
|
|
kfree(ieee->networks[i].ibss_dfs);
|
|
|
|
kfree(ieee->networks);
|
|
ieee->networks = NULL;
|
|
}
|
|
|
|
void libipw_networks_age(struct libipw_device *ieee,
|
|
unsigned long age_secs)
|
|
{
|
|
struct libipw_network *network = NULL;
|
|
unsigned long flags;
|
|
unsigned long age_jiffies = msecs_to_jiffies(age_secs * MSEC_PER_SEC);
|
|
|
|
spin_lock_irqsave(&ieee->lock, flags);
|
|
list_for_each_entry(network, &ieee->network_list, list) {
|
|
network->last_scanned -= age_jiffies;
|
|
}
|
|
spin_unlock_irqrestore(&ieee->lock, flags);
|
|
}
|
|
EXPORT_SYMBOL(libipw_networks_age);
|
|
|
|
static void libipw_networks_initialize(struct libipw_device *ieee)
|
|
{
|
|
int i;
|
|
|
|
INIT_LIST_HEAD(&ieee->network_free_list);
|
|
INIT_LIST_HEAD(&ieee->network_list);
|
|
for (i = 0; i < MAX_NETWORK_COUNT; i++)
|
|
list_add_tail(&ieee->networks[i].list,
|
|
&ieee->network_free_list);
|
|
}
|
|
|
|
int libipw_change_mtu(struct net_device *dev, int new_mtu)
|
|
{
|
|
if ((new_mtu < 68) || (new_mtu > LIBIPW_DATA_LEN))
|
|
return -EINVAL;
|
|
dev->mtu = new_mtu;
|
|
return 0;
|
|
}
|
|
EXPORT_SYMBOL(libipw_change_mtu);
|
|
|
|
struct net_device *alloc_ieee80211(int sizeof_priv, int monitor)
|
|
{
|
|
struct libipw_device *ieee;
|
|
struct net_device *dev;
|
|
int err;
|
|
|
|
LIBIPW_DEBUG_INFO("Initializing...\n");
|
|
|
|
dev = alloc_etherdev(sizeof(struct libipw_device) + sizeof_priv);
|
|
if (!dev) {
|
|
LIBIPW_ERROR("Unable to allocate network device.\n");
|
|
goto failed;
|
|
}
|
|
ieee = netdev_priv(dev);
|
|
|
|
ieee->dev = dev;
|
|
|
|
if (!monitor) {
|
|
ieee->wdev.wiphy = wiphy_new(&libipw_config_ops, 0);
|
|
if (!ieee->wdev.wiphy) {
|
|
LIBIPW_ERROR("Unable to allocate wiphy.\n");
|
|
goto failed_free_netdev;
|
|
}
|
|
|
|
ieee->dev->ieee80211_ptr = &ieee->wdev;
|
|
ieee->wdev.iftype = NL80211_IFTYPE_STATION;
|
|
|
|
/* Fill-out wiphy structure bits we know... Not enough info
|
|
here to call set_wiphy_dev or set MAC address or channel info
|
|
-- have to do that in ->ndo_init... */
|
|
ieee->wdev.wiphy->privid = libipw_wiphy_privid;
|
|
|
|
ieee->wdev.wiphy->max_scan_ssids = 1;
|
|
ieee->wdev.wiphy->max_scan_ie_len = 0;
|
|
ieee->wdev.wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION)
|
|
| BIT(NL80211_IFTYPE_ADHOC);
|
|
}
|
|
|
|
err = libipw_networks_allocate(ieee);
|
|
if (err) {
|
|
LIBIPW_ERROR("Unable to allocate beacon storage: %d\n", err);
|
|
goto failed_free_wiphy;
|
|
}
|
|
libipw_networks_initialize(ieee);
|
|
|
|
/* Default fragmentation threshold is maximum payload size */
|
|
ieee->fts = DEFAULT_FTS;
|
|
ieee->rts = DEFAULT_FTS;
|
|
ieee->scan_age = DEFAULT_MAX_SCAN_AGE;
|
|
ieee->open_wep = 1;
|
|
|
|
/* Default to enabling full open WEP with host based encrypt/decrypt */
|
|
ieee->host_encrypt = 1;
|
|
ieee->host_decrypt = 1;
|
|
ieee->host_mc_decrypt = 1;
|
|
|
|
/* Host fragementation in Open mode. Default is enabled.
|
|
* Note: host fragmentation is always enabled if host encryption
|
|
* is enabled. For cards can do hardware encryption, they must do
|
|
* hardware fragmentation as well. So we don't need a variable
|
|
* like host_enc_frag. */
|
|
ieee->host_open_frag = 1;
|
|
ieee->ieee802_1x = 1; /* Default to supporting 802.1x */
|
|
|
|
spin_lock_init(&ieee->lock);
|
|
|
|
lib80211_crypt_info_init(&ieee->crypt_info, dev->name, &ieee->lock);
|
|
|
|
ieee->wpa_enabled = 0;
|
|
ieee->drop_unencrypted = 0;
|
|
ieee->privacy_invoked = 0;
|
|
|
|
return dev;
|
|
|
|
failed_free_wiphy:
|
|
if (!monitor)
|
|
wiphy_free(ieee->wdev.wiphy);
|
|
failed_free_netdev:
|
|
free_netdev(dev);
|
|
failed:
|
|
return NULL;
|
|
}
|
|
|
|
void free_ieee80211(struct net_device *dev, int monitor)
|
|
{
|
|
struct libipw_device *ieee = netdev_priv(dev);
|
|
|
|
lib80211_crypt_info_free(&ieee->crypt_info);
|
|
|
|
libipw_networks_free(ieee);
|
|
|
|
/* free cfg80211 resources */
|
|
if (!monitor) {
|
|
wiphy_unregister(ieee->wdev.wiphy);
|
|
kfree(ieee->a_band.channels);
|
|
kfree(ieee->bg_band.channels);
|
|
wiphy_free(ieee->wdev.wiphy);
|
|
}
|
|
|
|
free_netdev(dev);
|
|
}
|
|
|
|
#ifdef CONFIG_LIBIPW_DEBUG
|
|
|
|
static int debug = 0;
|
|
u32 libipw_debug_level = 0;
|
|
EXPORT_SYMBOL_GPL(libipw_debug_level);
|
|
static struct proc_dir_entry *libipw_proc = NULL;
|
|
|
|
static int show_debug_level(char *page, char **start, off_t offset,
|
|
int count, int *eof, void *data)
|
|
{
|
|
return snprintf(page, count, "0x%08X\n", libipw_debug_level);
|
|
}
|
|
|
|
static int store_debug_level(struct file *file, const char __user * buffer,
|
|
unsigned long count, void *data)
|
|
{
|
|
char buf[] = "0x00000000\n";
|
|
unsigned long len = min((unsigned long)sizeof(buf) - 1, count);
|
|
unsigned long val;
|
|
|
|
if (copy_from_user(buf, buffer, len))
|
|
return count;
|
|
buf[len] = 0;
|
|
if (sscanf(buf, "%li", &val) != 1)
|
|
printk(KERN_INFO DRV_NAME
|
|
": %s is not in hex or decimal form.\n", buf);
|
|
else
|
|
libipw_debug_level = val;
|
|
|
|
return strnlen(buf, len);
|
|
}
|
|
#endif /* CONFIG_LIBIPW_DEBUG */
|
|
|
|
static int __init libipw_init(void)
|
|
{
|
|
#ifdef CONFIG_LIBIPW_DEBUG
|
|
struct proc_dir_entry *e;
|
|
|
|
libipw_debug_level = debug;
|
|
libipw_proc = proc_mkdir(DRV_NAME, init_net.proc_net);
|
|
if (libipw_proc == NULL) {
|
|
LIBIPW_ERROR("Unable to create " DRV_NAME
|
|
" proc directory\n");
|
|
return -EIO;
|
|
}
|
|
e = create_proc_entry("debug_level", S_IFREG | S_IRUGO | S_IWUSR,
|
|
libipw_proc);
|
|
if (!e) {
|
|
remove_proc_entry(DRV_NAME, init_net.proc_net);
|
|
libipw_proc = NULL;
|
|
return -EIO;
|
|
}
|
|
e->read_proc = show_debug_level;
|
|
e->write_proc = store_debug_level;
|
|
e->data = NULL;
|
|
#endif /* CONFIG_LIBIPW_DEBUG */
|
|
|
|
printk(KERN_INFO DRV_NAME ": " DRV_DESCRIPTION ", " DRV_VERSION "\n");
|
|
printk(KERN_INFO DRV_NAME ": " DRV_COPYRIGHT "\n");
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void __exit libipw_exit(void)
|
|
{
|
|
#ifdef CONFIG_LIBIPW_DEBUG
|
|
if (libipw_proc) {
|
|
remove_proc_entry("debug_level", libipw_proc);
|
|
remove_proc_entry(DRV_NAME, init_net.proc_net);
|
|
libipw_proc = NULL;
|
|
}
|
|
#endif /* CONFIG_LIBIPW_DEBUG */
|
|
}
|
|
|
|
#ifdef CONFIG_LIBIPW_DEBUG
|
|
#include <linux/moduleparam.h>
|
|
module_param(debug, int, 0444);
|
|
MODULE_PARM_DESC(debug, "debug output mask");
|
|
#endif /* CONFIG_LIBIPW_DEBUG */
|
|
|
|
module_exit(libipw_exit);
|
|
module_init(libipw_init);
|
|
|
|
EXPORT_SYMBOL(alloc_ieee80211);
|
|
EXPORT_SYMBOL(free_ieee80211);
|