Home | History | Annotate | Download | only in p2p
      1 /*
      2  * Wi-Fi Direct - P2P Group Owner Negotiation
      3  * Copyright (c) 2009-2010, Atheros Communications
      4  *
      5  * This software may be distributed under the terms of the BSD license.
      6  * See README for more details.
      7  */
      8 
      9 #include "includes.h"
     10 
     11 #include "common.h"
     12 #include "utils/eloop.h"
     13 #include "common/ieee802_11_defs.h"
     14 #include "common/wpa_ctrl.h"
     15 #include "wps/wps_defs.h"
     16 #include "p2p_i.h"
     17 #include "p2p.h"
     18 
     19 
     20 static int p2p_go_det(u8 own_intent, u8 peer_value)
     21 {
     22 	u8 peer_intent = peer_value >> 1;
     23 	if (own_intent == peer_intent) {
     24 		if (own_intent == P2P_MAX_GO_INTENT)
     25 			return -1; /* both devices want to become GO */
     26 
     27 		/* Use tie breaker bit to determine GO */
     28 		return (peer_value & 0x01) ? 0 : 1;
     29 	}
     30 
     31 	return own_intent > peer_intent;
     32 }
     33 
     34 
     35 int p2p_peer_channels_check(struct p2p_data *p2p, struct p2p_channels *own,
     36 			    struct p2p_device *dev,
     37 			    const u8 *channel_list, size_t channel_list_len)
     38 {
     39 	const u8 *pos, *end;
     40 	struct p2p_channels *ch;
     41 	u8 channels;
     42 	struct p2p_channels intersection;
     43 
     44 	ch = &dev->channels;
     45 	os_memset(ch, 0, sizeof(*ch));
     46 	pos = channel_list;
     47 	end = channel_list + channel_list_len;
     48 
     49 	if (end - pos < 3)
     50 		return -1;
     51 	os_memcpy(dev->country, pos, 3);
     52 	wpa_hexdump_ascii(MSG_DEBUG, "P2P: Peer country", pos, 3);
     53 	if (pos[2] != 0x04 && os_memcmp(pos, p2p->cfg->country, 2) != 0) {
     54 		p2p_info(p2p, "Mismatching country (ours=%c%c peer's=%c%c)",
     55 			p2p->cfg->country[0], p2p->cfg->country[1],
     56 			pos[0], pos[1]);
     57 		return -1;
     58 	}
     59 	pos += 3;
     60 
     61 	while (end - pos > 2) {
     62 		struct p2p_reg_class *cl = &ch->reg_class[ch->reg_classes];
     63 		cl->reg_class = *pos++;
     64 		channels = *pos++;
     65 		if (channels > end - pos) {
     66 			p2p_info(p2p, "Invalid peer Channel List");
     67 			return -1;
     68 		}
     69 		cl->channels = channels > P2P_MAX_REG_CLASS_CHANNELS ?
     70 			P2P_MAX_REG_CLASS_CHANNELS : channels;
     71 		os_memcpy(cl->channel, pos, cl->channels);
     72 		pos += channels;
     73 		ch->reg_classes++;
     74 		if (ch->reg_classes == P2P_MAX_REG_CLASSES)
     75 			break;
     76 	}
     77 
     78 	p2p_channels_intersect(own, &dev->channels, &intersection);
     79 	p2p_dbg(p2p, "Own reg_classes %d peer reg_classes %d intersection reg_classes %d",
     80 		(int) own->reg_classes,
     81 		(int) dev->channels.reg_classes,
     82 		(int) intersection.reg_classes);
     83 	if (intersection.reg_classes == 0) {
     84 		p2p_info(p2p, "No common channels found");
     85 		return -1;
     86 	}
     87 	return 0;
     88 }
     89 
     90 
     91 static int p2p_peer_channels(struct p2p_data *p2p, struct p2p_device *dev,
     92 			     const u8 *channel_list, size_t channel_list_len)
     93 {
     94 	return p2p_peer_channels_check(p2p, &p2p->channels, dev,
     95 				       channel_list, channel_list_len);
     96 }
     97 
     98 
     99 u16 p2p_wps_method_pw_id(enum p2p_wps_method wps_method)
    100 {
    101 	switch (wps_method) {
    102 	case WPS_PIN_DISPLAY:
    103 		return DEV_PW_REGISTRAR_SPECIFIED;
    104 	case WPS_PIN_KEYPAD:
    105 		return DEV_PW_USER_SPECIFIED;
    106 	case WPS_PBC:
    107 		return DEV_PW_PUSHBUTTON;
    108 	case WPS_NFC:
    109 		return DEV_PW_NFC_CONNECTION_HANDOVER;
    110 	case WPS_P2PS:
    111 		return DEV_PW_P2PS_DEFAULT;
    112 	default:
    113 		return DEV_PW_DEFAULT;
    114 	}
    115 }
    116 
    117 
    118 static const char * p2p_wps_method_str(enum p2p_wps_method wps_method)
    119 {
    120 	switch (wps_method) {
    121 	case WPS_PIN_DISPLAY:
    122 		return "Display";
    123 	case WPS_PIN_KEYPAD:
    124 		return "Keypad";
    125 	case WPS_PBC:
    126 		return "PBC";
    127 	case WPS_NFC:
    128 		return "NFC";
    129 	case WPS_P2PS:
    130 		return "P2PS";
    131 	default:
    132 		return "??";
    133 	}
    134 }
    135 
    136 
    137 static struct wpabuf * p2p_build_go_neg_req(struct p2p_data *p2p,
    138 					    struct p2p_device *peer)
    139 {
    140 	struct wpabuf *buf;
    141 	u8 *len;
    142 	u8 group_capab;
    143 	size_t extra = 0;
    144 	u16 pw_id;
    145 
    146 #ifdef CONFIG_WIFI_DISPLAY
    147 	if (p2p->wfd_ie_go_neg)
    148 		extra = wpabuf_len(p2p->wfd_ie_go_neg);
    149 #endif /* CONFIG_WIFI_DISPLAY */
    150 
    151 	if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_REQ])
    152 		extra += wpabuf_len(p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_REQ]);
    153 
    154 	buf = wpabuf_alloc(1000 + extra);
    155 	if (buf == NULL)
    156 		return NULL;
    157 
    158 	p2p_buf_add_public_action_hdr(buf, P2P_GO_NEG_REQ, peer->dialog_token);
    159 
    160 	len = p2p_buf_add_ie_hdr(buf);
    161 	group_capab = 0;
    162 	if (peer->flags & P2P_DEV_PREFER_PERSISTENT_GROUP) {
    163 		group_capab |= P2P_GROUP_CAPAB_PERSISTENT_GROUP;
    164 		if (peer->flags & P2P_DEV_PREFER_PERSISTENT_RECONN)
    165 			group_capab |= P2P_GROUP_CAPAB_PERSISTENT_RECONN;
    166 	}
    167 	if (p2p->cross_connect)
    168 		group_capab |= P2P_GROUP_CAPAB_CROSS_CONN;
    169 	if (p2p->cfg->p2p_intra_bss)
    170 		group_capab |= P2P_GROUP_CAPAB_INTRA_BSS_DIST;
    171 	p2p_buf_add_capability(buf, p2p->dev_capab &
    172 			       ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY,
    173 			       group_capab);
    174 	p2p_buf_add_go_intent(buf, (p2p->go_intent << 1) | peer->tie_breaker);
    175 	p2p_buf_add_config_timeout(buf, p2p->go_timeout, p2p->client_timeout);
    176 	p2p_buf_add_listen_channel(buf, p2p->cfg->country, p2p->cfg->reg_class,
    177 				   p2p->cfg->channel);
    178 	if (p2p->ext_listen_interval)
    179 		p2p_buf_add_ext_listen_timing(buf, p2p->ext_listen_period,
    180 					      p2p->ext_listen_interval);
    181 	p2p_buf_add_intended_addr(buf, p2p->intended_addr);
    182 	p2p_buf_add_channel_list(buf, p2p->cfg->country, &p2p->channels);
    183 	p2p_buf_add_device_info(buf, p2p, peer);
    184 	p2p_buf_add_operating_channel(buf, p2p->cfg->country,
    185 				      p2p->op_reg_class, p2p->op_channel);
    186 	p2p_buf_update_ie_hdr(buf, len);
    187 
    188 	p2p_buf_add_pref_channel_list(buf, p2p->pref_freq_list,
    189 				      p2p->num_pref_freq);
    190 
    191 	/* WPS IE with Device Password ID attribute */
    192 	pw_id = p2p_wps_method_pw_id(peer->wps_method);
    193 	if (peer->oob_pw_id)
    194 		pw_id = peer->oob_pw_id;
    195 	if (p2p_build_wps_ie(p2p, buf, pw_id, 0) < 0) {
    196 		p2p_dbg(p2p, "Failed to build WPS IE for GO Negotiation Request");
    197 		wpabuf_free(buf);
    198 		return NULL;
    199 	}
    200 
    201 #ifdef CONFIG_WIFI_DISPLAY
    202 	if (p2p->wfd_ie_go_neg)
    203 		wpabuf_put_buf(buf, p2p->wfd_ie_go_neg);
    204 #endif /* CONFIG_WIFI_DISPLAY */
    205 
    206 	if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_REQ])
    207 		wpabuf_put_buf(buf, p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_REQ]);
    208 
    209 	return buf;
    210 }
    211 
    212 
    213 int p2p_connect_send(struct p2p_data *p2p, struct p2p_device *dev)
    214 {
    215 	struct wpabuf *req;
    216 	int freq;
    217 
    218 	if (dev->flags & P2P_DEV_PD_BEFORE_GO_NEG) {
    219 		u16 config_method;
    220 		p2p_dbg(p2p, "Use PD-before-GO-Neg workaround for " MACSTR,
    221 			MAC2STR(dev->info.p2p_device_addr));
    222 		if (dev->wps_method == WPS_PIN_DISPLAY)
    223 			config_method = WPS_CONFIG_KEYPAD;
    224 		else if (dev->wps_method == WPS_PIN_KEYPAD)
    225 			config_method = WPS_CONFIG_DISPLAY;
    226 		else if (dev->wps_method == WPS_PBC)
    227 			config_method = WPS_CONFIG_PUSHBUTTON;
    228 		else if (dev->wps_method == WPS_P2PS)
    229 			config_method = WPS_CONFIG_P2PS;
    230 		else
    231 			return -1;
    232 		return p2p_prov_disc_req(p2p, dev->info.p2p_device_addr,
    233 					 NULL, config_method, 0, 0, 1);
    234 	}
    235 
    236 	freq = dev->listen_freq > 0 ? dev->listen_freq : dev->oper_freq;
    237 	if (dev->oob_go_neg_freq > 0)
    238 		freq = dev->oob_go_neg_freq;
    239 	if (freq <= 0) {
    240 		p2p_dbg(p2p, "No Listen/Operating frequency known for the peer "
    241 			MACSTR " to send GO Negotiation Request",
    242 			MAC2STR(dev->info.p2p_device_addr));
    243 		return -1;
    244 	}
    245 
    246 	req = p2p_build_go_neg_req(p2p, dev);
    247 	if (req == NULL)
    248 		return -1;
    249 	p2p_dbg(p2p, "Sending GO Negotiation Request");
    250 	p2p_set_state(p2p, P2P_CONNECT);
    251 	p2p->pending_action_state = P2P_PENDING_GO_NEG_REQUEST;
    252 	p2p->go_neg_peer = dev;
    253 	eloop_cancel_timeout(p2p_go_neg_wait_timeout, p2p, NULL);
    254 	dev->flags |= P2P_DEV_WAIT_GO_NEG_RESPONSE;
    255 	dev->connect_reqs++;
    256 	if (p2p_send_action(p2p, freq, dev->info.p2p_device_addr,
    257 			    p2p->cfg->dev_addr, dev->info.p2p_device_addr,
    258 			    wpabuf_head(req), wpabuf_len(req), 500) < 0) {
    259 		p2p_dbg(p2p, "Failed to send Action frame");
    260 		/* Use P2P find to recover and retry */
    261 		p2p_set_timeout(p2p, 0, 0);
    262 	} else
    263 		dev->go_neg_req_sent++;
    264 
    265 	wpabuf_free(req);
    266 
    267 	return 0;
    268 }
    269 
    270 
    271 static struct wpabuf * p2p_build_go_neg_resp(struct p2p_data *p2p,
    272 					     struct p2p_device *peer,
    273 					     u8 dialog_token, u8 status,
    274 					     u8 tie_breaker)
    275 {
    276 	struct wpabuf *buf;
    277 	u8 *len;
    278 	u8 group_capab;
    279 	size_t extra = 0;
    280 	u16 pw_id;
    281 
    282 	p2p_dbg(p2p, "Building GO Negotiation Response");
    283 
    284 #ifdef CONFIG_WIFI_DISPLAY
    285 	if (p2p->wfd_ie_go_neg)
    286 		extra = wpabuf_len(p2p->wfd_ie_go_neg);
    287 #endif /* CONFIG_WIFI_DISPLAY */
    288 
    289 	if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_RESP])
    290 		extra += wpabuf_len(p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_RESP]);
    291 
    292 	buf = wpabuf_alloc(1000 + extra);
    293 	if (buf == NULL)
    294 		return NULL;
    295 
    296 	p2p_buf_add_public_action_hdr(buf, P2P_GO_NEG_RESP, dialog_token);
    297 
    298 	len = p2p_buf_add_ie_hdr(buf);
    299 	p2p_buf_add_status(buf, status);
    300 	group_capab = 0;
    301 	if (peer && peer->go_state == LOCAL_GO) {
    302 		if (peer->flags & P2P_DEV_PREFER_PERSISTENT_GROUP) {
    303 			group_capab |= P2P_GROUP_CAPAB_PERSISTENT_GROUP;
    304 			if (peer->flags & P2P_DEV_PREFER_PERSISTENT_RECONN)
    305 				group_capab |=
    306 					P2P_GROUP_CAPAB_PERSISTENT_RECONN;
    307 		}
    308 		if (p2p->cross_connect)
    309 			group_capab |= P2P_GROUP_CAPAB_CROSS_CONN;
    310 		if (p2p->cfg->p2p_intra_bss)
    311 			group_capab |= P2P_GROUP_CAPAB_INTRA_BSS_DIST;
    312 	}
    313 	p2p_buf_add_capability(buf, p2p->dev_capab &
    314 			       ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY,
    315 			       group_capab);
    316 	p2p_buf_add_go_intent(buf, (p2p->go_intent << 1) | tie_breaker);
    317 	p2p_buf_add_config_timeout(buf, p2p->go_timeout, p2p->client_timeout);
    318 	if (p2p->override_pref_op_class) {
    319 		p2p_dbg(p2p, "Override operating channel preference");
    320 		p2p_buf_add_operating_channel(buf, p2p->cfg->country,
    321 					      p2p->override_pref_op_class,
    322 					      p2p->override_pref_channel);
    323 	} else if (peer && peer->go_state == REMOTE_GO && !p2p->num_pref_freq) {
    324 		p2p_dbg(p2p, "Omit Operating Channel attribute");
    325 	} else {
    326 		p2p_buf_add_operating_channel(buf, p2p->cfg->country,
    327 					      p2p->op_reg_class,
    328 					      p2p->op_channel);
    329 	}
    330 	p2p_buf_add_intended_addr(buf, p2p->intended_addr);
    331 	if (status || peer == NULL) {
    332 		p2p_buf_add_channel_list(buf, p2p->cfg->country,
    333 					 &p2p->channels);
    334 	} else if (peer->go_state == REMOTE_GO) {
    335 		p2p_buf_add_channel_list(buf, p2p->cfg->country,
    336 					 &p2p->channels);
    337 	} else {
    338 		struct p2p_channels res;
    339 		p2p_channels_intersect(&p2p->channels, &peer->channels,
    340 				       &res);
    341 		p2p_buf_add_channel_list(buf, p2p->cfg->country, &res);
    342 	}
    343 	p2p_buf_add_device_info(buf, p2p, peer);
    344 	if (peer && peer->go_state == LOCAL_GO) {
    345 		p2p_buf_add_group_id(buf, p2p->cfg->dev_addr, p2p->ssid,
    346 				     p2p->ssid_len);
    347 	}
    348 	p2p_buf_update_ie_hdr(buf, len);
    349 
    350 	/* WPS IE with Device Password ID attribute */
    351 	pw_id = p2p_wps_method_pw_id(peer ? peer->wps_method : WPS_NOT_READY);
    352 	if (peer && peer->oob_pw_id)
    353 		pw_id = peer->oob_pw_id;
    354 	if (p2p_build_wps_ie(p2p, buf, pw_id, 0) < 0) {
    355 		p2p_dbg(p2p, "Failed to build WPS IE for GO Negotiation Response");
    356 		wpabuf_free(buf);
    357 		return NULL;
    358 	}
    359 
    360 #ifdef CONFIG_WIFI_DISPLAY
    361 	if (p2p->wfd_ie_go_neg)
    362 		wpabuf_put_buf(buf, p2p->wfd_ie_go_neg);
    363 #endif /* CONFIG_WIFI_DISPLAY */
    364 
    365 	if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_RESP])
    366 		wpabuf_put_buf(buf, p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_RESP]);
    367 
    368 	return buf;
    369 }
    370 
    371 
    372 /**
    373  * p2p_reselect_channel - Re-select operating channel based on peer information
    374  * @p2p: P2P module context from p2p_init()
    375  * @intersection: Support channel list intersection from local and peer
    376  *
    377  * This function is used to re-select the best channel after having received
    378  * information from the peer to allow supported channel lists to be intersected.
    379  * This can be used to improve initial channel selection done in
    380  * p2p_prepare_channel() prior to the start of GO Negotiation. In addition, this
    381  * can be used for Invitation case.
    382  */
    383 void p2p_reselect_channel(struct p2p_data *p2p,
    384 			  struct p2p_channels *intersection)
    385 {
    386 	struct p2p_reg_class *cl;
    387 	int freq;
    388 	u8 op_reg_class, op_channel;
    389 	unsigned int i;
    390 	const int op_classes_5ghz[] = { 124, 125, 115, 0 };
    391 	const int op_classes_ht40[] = { 126, 127, 116, 117, 0 };
    392 	const int op_classes_vht[] = { 128, 129, 130, 0 };
    393 
    394 	if (p2p->own_freq_preference > 0 &&
    395 	    p2p_freq_to_channel(p2p->own_freq_preference,
    396 				&op_reg_class, &op_channel) == 0 &&
    397 	    p2p_channels_includes(intersection, op_reg_class, op_channel)) {
    398 		p2p_dbg(p2p, "Pick own channel preference (reg_class %u channel %u) from intersection",
    399 			op_reg_class, op_channel);
    400 		p2p->op_reg_class = op_reg_class;
    401 		p2p->op_channel = op_channel;
    402 		return;
    403 	}
    404 
    405 	if (p2p->best_freq_overall > 0 &&
    406 	    p2p_freq_to_channel(p2p->best_freq_overall,
    407 				&op_reg_class, &op_channel) == 0 &&
    408 	    p2p_channels_includes(intersection, op_reg_class, op_channel)) {
    409 		p2p_dbg(p2p, "Pick best overall channel (reg_class %u channel %u) from intersection",
    410 			op_reg_class, op_channel);
    411 		p2p->op_reg_class = op_reg_class;
    412 		p2p->op_channel = op_channel;
    413 		return;
    414 	}
    415 
    416 	/* First, try to pick the best channel from another band */
    417 	freq = p2p_channel_to_freq(p2p->op_reg_class, p2p->op_channel);
    418 	if (freq >= 2400 && freq < 2500 && p2p->best_freq_5 > 0 &&
    419 	    !p2p_channels_includes(intersection, p2p->op_reg_class,
    420 				   p2p->op_channel) &&
    421 	    p2p_freq_to_channel(p2p->best_freq_5,
    422 				&op_reg_class, &op_channel) == 0 &&
    423 	    p2p_channels_includes(intersection, op_reg_class, op_channel)) {
    424 		p2p_dbg(p2p, "Pick best 5 GHz channel (reg_class %u channel %u) from intersection",
    425 			op_reg_class, op_channel);
    426 		p2p->op_reg_class = op_reg_class;
    427 		p2p->op_channel = op_channel;
    428 		return;
    429 	}
    430 
    431 	if (freq >= 4900 && freq < 6000 && p2p->best_freq_24 > 0 &&
    432 	    !p2p_channels_includes(intersection, p2p->op_reg_class,
    433 				   p2p->op_channel) &&
    434 	    p2p_freq_to_channel(p2p->best_freq_24,
    435 				&op_reg_class, &op_channel) == 0 &&
    436 	    p2p_channels_includes(intersection, op_reg_class, op_channel)) {
    437 		p2p_dbg(p2p, "Pick best 2.4 GHz channel (reg_class %u channel %u) from intersection",
    438 			op_reg_class, op_channel);
    439 		p2p->op_reg_class = op_reg_class;
    440 		p2p->op_channel = op_channel;
    441 		return;
    442 	}
    443 
    444 	/* Select channel with highest preference if the peer supports it */
    445 	for (i = 0; p2p->cfg->pref_chan && i < p2p->cfg->num_pref_chan; i++) {
    446 		if (p2p_channels_includes(intersection,
    447 					  p2p->cfg->pref_chan[i].op_class,
    448 					  p2p->cfg->pref_chan[i].chan)) {
    449 			p2p->op_reg_class = p2p->cfg->pref_chan[i].op_class;
    450 			p2p->op_channel = p2p->cfg->pref_chan[i].chan;
    451 			p2p_dbg(p2p, "Pick highest preferred channel (op_class %u channel %u) from intersection",
    452 				p2p->op_reg_class, p2p->op_channel);
    453 			return;
    454 		}
    455 	}
    456 
    457 	/* Try a channel where we might be able to use VHT */
    458 	if (p2p_channel_select(intersection, op_classes_vht,
    459 			       &p2p->op_reg_class, &p2p->op_channel) == 0) {
    460 		p2p_dbg(p2p, "Pick possible VHT channel (op_class %u channel %u) from intersection",
    461 			p2p->op_reg_class, p2p->op_channel);
    462 		return;
    463 	}
    464 
    465 	/* Try a channel where we might be able to use HT40 */
    466 	if (p2p_channel_select(intersection, op_classes_ht40,
    467 			       &p2p->op_reg_class, &p2p->op_channel) == 0) {
    468 		p2p_dbg(p2p, "Pick possible HT40 channel (op_class %u channel %u) from intersection",
    469 			p2p->op_reg_class, p2p->op_channel);
    470 		return;
    471 	}
    472 
    473 	/* Prefer a 5 GHz channel */
    474 	if (p2p_channel_select(intersection, op_classes_5ghz,
    475 			       &p2p->op_reg_class, &p2p->op_channel) == 0) {
    476 		p2p_dbg(p2p, "Pick possible 5 GHz channel (op_class %u channel %u) from intersection",
    477 			p2p->op_reg_class, p2p->op_channel);
    478 		return;
    479 	}
    480 
    481 	/*
    482 	 * Try to see if the original channel is in the intersection. If
    483 	 * so, no need to change anything, as it already contains some
    484 	 * randomness.
    485 	 */
    486 	if (p2p_channels_includes(intersection, p2p->op_reg_class,
    487 				  p2p->op_channel)) {
    488 		p2p_dbg(p2p, "Using original operating class and channel (op_class %u channel %u) from intersection",
    489 			p2p->op_reg_class, p2p->op_channel);
    490 		return;
    491 	}
    492 
    493 	/*
    494 	 * Fall back to whatever is included in the channel intersection since
    495 	 * no better options seems to be available.
    496 	 */
    497 	cl = &intersection->reg_class[0];
    498 	p2p_dbg(p2p, "Pick another channel (reg_class %u channel %u) from intersection",
    499 		cl->reg_class, cl->channel[0]);
    500 	p2p->op_reg_class = cl->reg_class;
    501 	p2p->op_channel = cl->channel[0];
    502 }
    503 
    504 
    505 int p2p_go_select_channel(struct p2p_data *p2p, struct p2p_device *dev,
    506 			  u8 *status)
    507 {
    508 	struct p2p_channels tmp, intersection;
    509 
    510 	p2p_channels_dump(p2p, "own channels", &p2p->channels);
    511 	p2p_channels_dump(p2p, "peer channels", &dev->channels);
    512 	p2p_channels_intersect(&p2p->channels, &dev->channels, &tmp);
    513 	p2p_channels_dump(p2p, "intersection", &tmp);
    514 	p2p_channels_remove_freqs(&tmp, &p2p->no_go_freq);
    515 	p2p_channels_dump(p2p, "intersection after no-GO removal", &tmp);
    516 	p2p_channels_intersect(&tmp, &p2p->cfg->channels, &intersection);
    517 	p2p_channels_dump(p2p, "intersection with local channel list",
    518 			  &intersection);
    519 	if (intersection.reg_classes == 0 ||
    520 	    intersection.reg_class[0].channels == 0) {
    521 		*status = P2P_SC_FAIL_NO_COMMON_CHANNELS;
    522 		p2p_dbg(p2p, "No common channels found");
    523 		return -1;
    524 	}
    525 
    526 	if (!p2p_channels_includes(&intersection, p2p->op_reg_class,
    527 				   p2p->op_channel)) {
    528 		if (dev->flags & P2P_DEV_FORCE_FREQ) {
    529 			*status = P2P_SC_FAIL_NO_COMMON_CHANNELS;
    530 			p2p_dbg(p2p, "Peer does not support the forced channel");
    531 			return -1;
    532 		}
    533 
    534 		p2p_dbg(p2p, "Selected operating channel (op_class %u channel %u) not acceptable to the peer",
    535 			p2p->op_reg_class, p2p->op_channel);
    536 		p2p_reselect_channel(p2p, &intersection);
    537 	} else if (!(dev->flags & P2P_DEV_FORCE_FREQ) &&
    538 		   !p2p->cfg->cfg_op_channel) {
    539 		p2p_dbg(p2p, "Try to optimize channel selection with peer information received; previously selected op_class %u channel %u",
    540 			p2p->op_reg_class, p2p->op_channel);
    541 		p2p_reselect_channel(p2p, &intersection);
    542 	}
    543 
    544 	if (!p2p->ssid_set) {
    545 		p2p_build_ssid(p2p, p2p->ssid, &p2p->ssid_len);
    546 		p2p->ssid_set = 1;
    547 	}
    548 
    549 	return 0;
    550 }
    551 
    552 
    553 static void p2p_check_pref_chan_no_recv(struct p2p_data *p2p, int go,
    554 					struct p2p_device *dev,
    555 					struct p2p_message *msg,
    556 					unsigned freq_list[], unsigned int size)
    557 {
    558 	u8 op_class, op_channel;
    559 	unsigned int oper_freq = 0, i, j;
    560 	int found = 0;
    561 
    562 	p2p_dbg(p2p,
    563 		"Peer didn't provide a preferred frequency list, see if any of our preferred channels are supported by peer device");
    564 
    565 	/*
    566 	 * Search for a common channel in our preferred frequency list which is
    567 	 * also supported by the peer device.
    568 	 */
    569 	for (i = 0; i < size && !found; i++) {
    570 		/* Make sure that the common frequency is supported by peer. */
    571 		oper_freq = freq_list[i];
    572 		if (p2p_freq_to_channel(oper_freq, &op_class,
    573 					&op_channel) < 0)
    574 			continue; /* cannot happen due to earlier check */
    575 		for (j = 0; j < msg->channel_list_len; j++) {
    576 
    577 			if (op_channel != msg->channel_list[j])
    578 				continue;
    579 
    580 			p2p->op_reg_class = op_class;
    581 			p2p->op_channel = op_channel;
    582 			os_memcpy(&p2p->channels, &p2p->cfg->channels,
    583 				  sizeof(struct p2p_channels));
    584 			found = 1;
    585 			break;
    586 		}
    587 	}
    588 
    589 	if (found) {
    590 		p2p_dbg(p2p,
    591 			"Freq %d MHz is a preferred channel and is also supported by peer, use it as the operating channel",
    592 			oper_freq);
    593 	} else {
    594 		p2p_dbg(p2p,
    595 			"None of our preferred channels are supported by peer!");
    596 	}
    597 }
    598 
    599 
    600 static void p2p_check_pref_chan_recv(struct p2p_data *p2p, int go,
    601 				     struct p2p_device *dev,
    602 				     struct p2p_message *msg,
    603 				     unsigned freq_list[], unsigned int size)
    604 {
    605 	u8 op_class, op_channel;
    606 	unsigned int oper_freq = 0, i, j;
    607 	int found = 0;
    608 
    609 	/*
    610 	 * Peer device supports a Preferred Frequency List.
    611 	 * Search for a common channel in the preferred frequency lists
    612 	 * of both peer and local devices.
    613 	 */
    614 	for (i = 0; i < size && !found; i++) {
    615 		for (j = 2; j < (msg->pref_freq_list_len / 2); j++) {
    616 			oper_freq = p2p_channel_to_freq(
    617 				msg->pref_freq_list[2 * j],
    618 				msg->pref_freq_list[2 * j + 1]);
    619 			if (freq_list[i] != oper_freq)
    620 				continue;
    621 			if (p2p_freq_to_channel(oper_freq, &op_class,
    622 						&op_channel) < 0)
    623 				continue; /* cannot happen */
    624 			p2p->op_reg_class = op_class;
    625 			p2p->op_channel = op_channel;
    626 			os_memcpy(&p2p->channels, &p2p->cfg->channels,
    627 				  sizeof(struct p2p_channels));
    628 			found = 1;
    629 			break;
    630 		}
    631 	}
    632 
    633 	if (found) {
    634 		p2p_dbg(p2p,
    635 			"Freq %d MHz is a common preferred channel for both peer and local, use it as operating channel",
    636 			oper_freq);
    637 	} else {
    638 		p2p_dbg(p2p, "No common preferred channels found!");
    639 	}
    640 }
    641 
    642 
    643 void p2p_check_pref_chan(struct p2p_data *p2p, int go,
    644 			 struct p2p_device *dev, struct p2p_message *msg)
    645 {
    646 	unsigned int freq_list[P2P_MAX_PREF_CHANNELS], size;
    647 	unsigned int i;
    648 	u8 op_class, op_channel;
    649 	char txt[100], *pos, *end;
    650 	int res;
    651 
    652 	/*
    653 	 * Use the preferred channel list from the driver only if there is no
    654 	 * forced_freq, e.g., P2P_CONNECT freq=..., and no preferred operating
    655 	 * channel hardcoded in the configuration file.
    656 	 */
    657 	if (!p2p->cfg->get_pref_freq_list || p2p->cfg->num_pref_chan ||
    658 	    (dev->flags & P2P_DEV_FORCE_FREQ) || p2p->cfg->cfg_op_channel)
    659 		return;
    660 
    661 	/* Obtain our preferred frequency list from driver based on P2P role. */
    662 	size = P2P_MAX_PREF_CHANNELS;
    663 	if (p2p->cfg->get_pref_freq_list(p2p->cfg->cb_ctx, go, &size,
    664 					 freq_list))
    665 		return;
    666 	/* Filter out frequencies that are not acceptable for P2P use */
    667 	i = 0;
    668 	while (i < size) {
    669 		if (p2p_freq_to_channel(freq_list[i], &op_class,
    670 					&op_channel) < 0 ||
    671 		    (!p2p_channels_includes(&p2p->cfg->channels,
    672 					    op_class, op_channel) &&
    673 		     (go || !p2p_channels_includes(&p2p->cfg->cli_channels,
    674 						   op_class, op_channel)))) {
    675 			p2p_dbg(p2p,
    676 				"Ignore local driver frequency preference %u MHz since it is not acceptable for P2P use (go=%d)",
    677 				freq_list[i], go);
    678 			if (size - i - 1 > 0)
    679 				os_memmove(&freq_list[i], &freq_list[i + 1], size - i - 1);
    680 			size--;
    681 			continue;
    682 		}
    683 
    684 		/* Preferred frequency is acceptable for P2P use */
    685 		i++;
    686 	}
    687 
    688 	pos = txt;
    689 	end = pos + sizeof(txt);
    690 	for (i = 0; i < size; i++) {
    691 		res = os_snprintf(pos, end - pos, " %u", freq_list[i]);
    692 		if (os_snprintf_error(end - pos, res))
    693 			break;
    694 		pos += res;
    695 	}
    696 	*pos = '\0';
    697 	p2p_dbg(p2p, "Local driver frequency preference (size=%u):%s",
    698 		size, txt);
    699 
    700 	/*
    701 	 * Check if peer's preference of operating channel is in
    702 	 * our preferred channel list.
    703 	 */
    704 	for (i = 0; i < size; i++) {
    705 		if (freq_list[i] == (unsigned int) dev->oper_freq)
    706 			break;
    707 	}
    708 	if (i != size &&
    709 	    p2p_freq_to_channel(freq_list[i], &op_class, &op_channel) == 0) {
    710 		/* Peer operating channel preference matches our preference */
    711 		p2p->op_reg_class = op_class;
    712 		p2p->op_channel = op_channel;
    713 		os_memcpy(&p2p->channels, &p2p->cfg->channels,
    714 			  sizeof(struct p2p_channels));
    715 		return;
    716 	}
    717 
    718 	p2p_dbg(p2p,
    719 		"Peer operating channel preference: %d MHz is not in our preferred channel list",
    720 		dev->oper_freq);
    721 
    722 	/*
    723 	  Check if peer's preferred channel list is
    724 	  * _not_ included in the GO Negotiation Request or Invitation Request.
    725 	  */
    726 	if (msg->pref_freq_list_len == 0)
    727 		p2p_check_pref_chan_no_recv(p2p, go, dev, msg, freq_list, size);
    728 	else
    729 		p2p_check_pref_chan_recv(p2p, go, dev, msg, freq_list, size);
    730 }
    731 
    732 
    733 void p2p_process_go_neg_req(struct p2p_data *p2p, const u8 *sa,
    734 			    const u8 *data, size_t len, int rx_freq)
    735 {
    736 	struct p2p_device *dev = NULL;
    737 	struct wpabuf *resp;
    738 	struct p2p_message msg;
    739 	u8 status = P2P_SC_FAIL_INVALID_PARAMS;
    740 	int tie_breaker = 0;
    741 	int freq;
    742 
    743 	p2p_dbg(p2p, "Received GO Negotiation Request from " MACSTR "(freq=%d)",
    744 		MAC2STR(sa), rx_freq);
    745 
    746 	if (p2p_parse(data, len, &msg))
    747 		return;
    748 
    749 	if (!msg.capability) {
    750 		p2p_dbg(p2p, "Mandatory Capability attribute missing from GO Negotiation Request");
    751 #ifdef CONFIG_P2P_STRICT
    752 		goto fail;
    753 #endif /* CONFIG_P2P_STRICT */
    754 	}
    755 
    756 	if (msg.go_intent)
    757 		tie_breaker = *msg.go_intent & 0x01;
    758 	else {
    759 		p2p_dbg(p2p, "Mandatory GO Intent attribute missing from GO Negotiation Request");
    760 #ifdef CONFIG_P2P_STRICT
    761 		goto fail;
    762 #endif /* CONFIG_P2P_STRICT */
    763 	}
    764 
    765 	if (!msg.config_timeout) {
    766 		p2p_dbg(p2p, "Mandatory Configuration Timeout attribute missing from GO Negotiation Request");
    767 #ifdef CONFIG_P2P_STRICT
    768 		goto fail;
    769 #endif /* CONFIG_P2P_STRICT */
    770 	}
    771 
    772 	if (!msg.listen_channel) {
    773 		p2p_dbg(p2p, "No Listen Channel attribute received");
    774 		goto fail;
    775 	}
    776 	if (!msg.operating_channel) {
    777 		p2p_dbg(p2p, "No Operating Channel attribute received");
    778 		goto fail;
    779 	}
    780 	if (!msg.channel_list) {
    781 		p2p_dbg(p2p, "No Channel List attribute received");
    782 		goto fail;
    783 	}
    784 	if (!msg.intended_addr) {
    785 		p2p_dbg(p2p, "No Intended P2P Interface Address attribute received");
    786 		goto fail;
    787 	}
    788 	if (!msg.p2p_device_info) {
    789 		p2p_dbg(p2p, "No P2P Device Info attribute received");
    790 		goto fail;
    791 	}
    792 
    793 	if (os_memcmp(msg.p2p_device_addr, sa, ETH_ALEN) != 0) {
    794 		p2p_dbg(p2p, "Unexpected GO Negotiation Request SA=" MACSTR
    795 			" != dev_addr=" MACSTR,
    796 			MAC2STR(sa), MAC2STR(msg.p2p_device_addr));
    797 		goto fail;
    798 	}
    799 
    800 	dev = p2p_get_device(p2p, sa);
    801 
    802 	if (msg.status && *msg.status) {
    803 		p2p_dbg(p2p, "Unexpected Status attribute (%d) in GO Negotiation Request",
    804 			*msg.status);
    805 		if (dev && p2p->go_neg_peer == dev &&
    806 		    *msg.status == P2P_SC_FAIL_REJECTED_BY_USER) {
    807 			/*
    808 			 * This mechanism for using Status attribute in GO
    809 			 * Negotiation Request is not compliant with the P2P
    810 			 * specification, but some deployed devices use it to
    811 			 * indicate rejection of GO Negotiation in a case where
    812 			 * they have sent out GO Negotiation Response with
    813 			 * status 1. The P2P specification explicitly disallows
    814 			 * this. To avoid unnecessary interoperability issues
    815 			 * and extra frames, mark the pending negotiation as
    816 			 * failed and do not reply to this GO Negotiation
    817 			 * Request frame.
    818 			 */
    819 			p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
    820 			p2p_go_neg_failed(p2p, *msg.status);
    821 			p2p_parse_free(&msg);
    822 			return;
    823 		}
    824 		goto fail;
    825 	}
    826 
    827 	if (dev == NULL)
    828 		dev = p2p_add_dev_from_go_neg_req(p2p, sa, &msg);
    829 	else if ((dev->flags & P2P_DEV_PROBE_REQ_ONLY) ||
    830 		  !(dev->flags & P2P_DEV_REPORTED))
    831 		p2p_add_dev_info(p2p, sa, dev, &msg);
    832 	else if (!dev->listen_freq && !dev->oper_freq) {
    833 		/*
    834 		 * This may happen if the peer entry was added based on PD
    835 		 * Request and no Probe Request/Response frame has been received
    836 		 * from this peer (or that information has timed out).
    837 		 */
    838 		p2p_dbg(p2p, "Update peer " MACSTR
    839 			" based on GO Neg Req since listen/oper freq not known",
    840 			MAC2STR(dev->info.p2p_device_addr));
    841 		p2p_add_dev_info(p2p, sa, dev, &msg);
    842 	}
    843 
    844 	if (p2p->go_neg_peer && p2p->go_neg_peer == dev)
    845 		eloop_cancel_timeout(p2p_go_neg_wait_timeout, p2p, NULL);
    846 
    847 	if (dev && dev->flags & P2P_DEV_USER_REJECTED) {
    848 		p2p_dbg(p2p, "User has rejected this peer");
    849 		status = P2P_SC_FAIL_REJECTED_BY_USER;
    850 	} else if (dev == NULL ||
    851 		   (dev->wps_method == WPS_NOT_READY &&
    852 		    (p2p->authorized_oob_dev_pw_id == 0 ||
    853 		     p2p->authorized_oob_dev_pw_id !=
    854 		     msg.dev_password_id))) {
    855 		p2p_dbg(p2p, "Not ready for GO negotiation with " MACSTR,
    856 			MAC2STR(sa));
    857 		status = P2P_SC_FAIL_INFO_CURRENTLY_UNAVAILABLE;
    858 		p2p->cfg->go_neg_req_rx(p2p->cfg->cb_ctx, sa,
    859 					msg.dev_password_id,
    860 					msg.go_intent ? (*msg.go_intent >> 1) :
    861 					0);
    862 	} else if (p2p->go_neg_peer && p2p->go_neg_peer != dev) {
    863 		p2p_dbg(p2p, "Already in Group Formation with another peer");
    864 		status = P2P_SC_FAIL_UNABLE_TO_ACCOMMODATE;
    865 	} else {
    866 		int go;
    867 
    868 		if (!p2p->go_neg_peer) {
    869 			p2p_dbg(p2p, "Starting GO Negotiation with previously authorized peer");
    870 			if (!(dev->flags & P2P_DEV_FORCE_FREQ)) {
    871 				p2p_dbg(p2p, "Use default channel settings");
    872 				p2p->op_reg_class = p2p->cfg->op_reg_class;
    873 				p2p->op_channel = p2p->cfg->op_channel;
    874 				os_memcpy(&p2p->channels, &p2p->cfg->channels,
    875 					  sizeof(struct p2p_channels));
    876 			} else {
    877 				p2p_dbg(p2p, "Use previously configured forced channel settings");
    878 			}
    879 		}
    880 
    881 		dev->flags &= ~P2P_DEV_NOT_YET_READY;
    882 
    883 		if (!msg.go_intent) {
    884 			p2p_dbg(p2p, "No GO Intent attribute received");
    885 			goto fail;
    886 		}
    887 		if ((*msg.go_intent >> 1) > P2P_MAX_GO_INTENT) {
    888 			p2p_dbg(p2p, "Invalid GO Intent value (%u) received",
    889 				*msg.go_intent >> 1);
    890 			goto fail;
    891 		}
    892 
    893 		if (dev->go_neg_req_sent &&
    894 		    os_memcmp(sa, p2p->cfg->dev_addr, ETH_ALEN) > 0) {
    895 			p2p_dbg(p2p, "Do not reply since peer has higher address and GO Neg Request already sent");
    896 			p2p_parse_free(&msg);
    897 			return;
    898 		}
    899 
    900 		if (dev->go_neg_req_sent &&
    901 		    (dev->flags & P2P_DEV_PEER_WAITING_RESPONSE)) {
    902 			p2p_dbg(p2p,
    903 				"Do not reply since peer is waiting for us to start a new GO Negotiation and GO Neg Request already sent");
    904 			p2p_parse_free(&msg);
    905 			return;
    906 		}
    907 
    908 		go = p2p_go_det(p2p->go_intent, *msg.go_intent);
    909 		if (go < 0) {
    910 			p2p_dbg(p2p, "Incompatible GO Intent");
    911 			status = P2P_SC_FAIL_BOTH_GO_INTENT_15;
    912 			goto fail;
    913 		}
    914 
    915 		if (p2p_peer_channels(p2p, dev, msg.channel_list,
    916 				      msg.channel_list_len) < 0) {
    917 			p2p_dbg(p2p, "No common channels found");
    918 			status = P2P_SC_FAIL_NO_COMMON_CHANNELS;
    919 			goto fail;
    920 		}
    921 
    922 		switch (msg.dev_password_id) {
    923 		case DEV_PW_REGISTRAR_SPECIFIED:
    924 			p2p_dbg(p2p, "PIN from peer Display");
    925 			if (dev->wps_method != WPS_PIN_KEYPAD) {
    926 				p2p_dbg(p2p, "We have wps_method=%s -> incompatible",
    927 					p2p_wps_method_str(dev->wps_method));
    928 				status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
    929 				goto fail;
    930 			}
    931 			break;
    932 		case DEV_PW_USER_SPECIFIED:
    933 			p2p_dbg(p2p, "Peer entered PIN on Keypad");
    934 			if (dev->wps_method != WPS_PIN_DISPLAY) {
    935 				p2p_dbg(p2p, "We have wps_method=%s -> incompatible",
    936 					p2p_wps_method_str(dev->wps_method));
    937 				status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
    938 				goto fail;
    939 			}
    940 			break;
    941 		case DEV_PW_PUSHBUTTON:
    942 			p2p_dbg(p2p, "Peer using pushbutton");
    943 			if (dev->wps_method != WPS_PBC) {
    944 				p2p_dbg(p2p, "We have wps_method=%s -> incompatible",
    945 					p2p_wps_method_str(dev->wps_method));
    946 				status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
    947 				goto fail;
    948 			}
    949 			break;
    950 		case DEV_PW_P2PS_DEFAULT:
    951 			p2p_dbg(p2p, "Peer using P2PS pin");
    952 			if (dev->wps_method != WPS_P2PS) {
    953 				p2p_dbg(p2p,
    954 					"We have wps_method=%s -> incompatible",
    955 					p2p_wps_method_str(dev->wps_method));
    956 				status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
    957 				goto fail;
    958 			}
    959 			break;
    960 		default:
    961 			if (msg.dev_password_id &&
    962 			    msg.dev_password_id == dev->oob_pw_id) {
    963 				p2p_dbg(p2p, "Peer using NFC");
    964 				if (dev->wps_method != WPS_NFC) {
    965 					p2p_dbg(p2p, "We have wps_method=%s -> incompatible",
    966 						p2p_wps_method_str(
    967 							dev->wps_method));
    968 					status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
    969 					goto fail;
    970 				}
    971 				break;
    972 			}
    973 #ifdef CONFIG_WPS_NFC
    974 			if (p2p->authorized_oob_dev_pw_id &&
    975 			    msg.dev_password_id ==
    976 			    p2p->authorized_oob_dev_pw_id) {
    977 				p2p_dbg(p2p, "Using static handover with our device password from NFC Tag");
    978 				dev->wps_method = WPS_NFC;
    979 				dev->oob_pw_id = p2p->authorized_oob_dev_pw_id;
    980 				break;
    981 			}
    982 #endif /* CONFIG_WPS_NFC */
    983 			p2p_dbg(p2p, "Unsupported Device Password ID %d",
    984 				msg.dev_password_id);
    985 			status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
    986 			goto fail;
    987 		}
    988 
    989 		if (go && p2p_go_select_channel(p2p, dev, &status) < 0)
    990 			goto fail;
    991 
    992 		dev->go_state = go ? LOCAL_GO : REMOTE_GO;
    993 		dev->oper_freq = p2p_channel_to_freq(msg.operating_channel[3],
    994 						     msg.operating_channel[4]);
    995 		p2p_dbg(p2p, "Peer operating channel preference: %d MHz",
    996 			dev->oper_freq);
    997 
    998 		/*
    999 		 * Use the driver preferred frequency list extension if
   1000 		 * supported.
   1001 		 */
   1002 		p2p_check_pref_chan(p2p, go, dev, &msg);
   1003 
   1004 		if (msg.config_timeout) {
   1005 			dev->go_timeout = msg.config_timeout[0];
   1006 			dev->client_timeout = msg.config_timeout[1];
   1007 		}
   1008 
   1009 		p2p_dbg(p2p, "GO Negotiation with " MACSTR, MAC2STR(sa));
   1010 		if (p2p->state != P2P_IDLE)
   1011 			p2p_stop_find_for_freq(p2p, rx_freq);
   1012 		p2p_set_state(p2p, P2P_GO_NEG);
   1013 		p2p_clear_timeout(p2p);
   1014 		dev->dialog_token = msg.dialog_token;
   1015 		os_memcpy(dev->intended_addr, msg.intended_addr, ETH_ALEN);
   1016 		p2p->go_neg_peer = dev;
   1017 		eloop_cancel_timeout(p2p_go_neg_wait_timeout, p2p, NULL);
   1018 		status = P2P_SC_SUCCESS;
   1019 	}
   1020 
   1021 fail:
   1022 	if (dev)
   1023 		dev->status = status;
   1024 	resp = p2p_build_go_neg_resp(p2p, dev, msg.dialog_token, status,
   1025 				     !tie_breaker);
   1026 	p2p_parse_free(&msg);
   1027 	if (resp == NULL)
   1028 		return;
   1029 	p2p_dbg(p2p, "Sending GO Negotiation Response");
   1030 	if (rx_freq > 0)
   1031 		freq = rx_freq;
   1032 	else
   1033 		freq = p2p_channel_to_freq(p2p->cfg->reg_class,
   1034 					   p2p->cfg->channel);
   1035 	if (freq < 0) {
   1036 		p2p_dbg(p2p, "Unknown regulatory class/channel");
   1037 		wpabuf_free(resp);
   1038 		return;
   1039 	}
   1040 	if (status == P2P_SC_SUCCESS) {
   1041 		p2p->pending_action_state = P2P_PENDING_GO_NEG_RESPONSE;
   1042 		dev->flags |= P2P_DEV_WAIT_GO_NEG_CONFIRM;
   1043 		if (os_memcmp(sa, p2p->cfg->dev_addr, ETH_ALEN) < 0) {
   1044 			/*
   1045 			 * Peer has smaller address, so the GO Negotiation
   1046 			 * Response from us is expected to complete
   1047 			 * negotiation. Ignore a GO Negotiation Response from
   1048 			 * the peer if it happens to be received after this
   1049 			 * point due to a race condition in GO Negotiation
   1050 			 * Request transmission and processing.
   1051 			 */
   1052 			dev->flags &= ~P2P_DEV_WAIT_GO_NEG_RESPONSE;
   1053 		}
   1054 	} else
   1055 		p2p->pending_action_state =
   1056 			P2P_PENDING_GO_NEG_RESPONSE_FAILURE;
   1057 	if (p2p_send_action(p2p, freq, sa, p2p->cfg->dev_addr,
   1058 			    p2p->cfg->dev_addr,
   1059 			    wpabuf_head(resp), wpabuf_len(resp), 100) < 0) {
   1060 		p2p_dbg(p2p, "Failed to send Action frame");
   1061 	}
   1062 
   1063 	wpabuf_free(resp);
   1064 }
   1065 
   1066 
   1067 static struct wpabuf * p2p_build_go_neg_conf(struct p2p_data *p2p,
   1068 					     struct p2p_device *peer,
   1069 					     u8 dialog_token, u8 status,
   1070 					     const u8 *resp_chan, int go)
   1071 {
   1072 	struct wpabuf *buf;
   1073 	u8 *len;
   1074 	struct p2p_channels res;
   1075 	u8 group_capab;
   1076 	size_t extra = 0;
   1077 
   1078 	p2p_dbg(p2p, "Building GO Negotiation Confirm");
   1079 
   1080 #ifdef CONFIG_WIFI_DISPLAY
   1081 	if (p2p->wfd_ie_go_neg)
   1082 		extra = wpabuf_len(p2p->wfd_ie_go_neg);
   1083 #endif /* CONFIG_WIFI_DISPLAY */
   1084 
   1085 	if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_CONF])
   1086 		extra += wpabuf_len(p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_CONF]);
   1087 
   1088 	buf = wpabuf_alloc(1000 + extra);
   1089 	if (buf == NULL)
   1090 		return NULL;
   1091 
   1092 	p2p_buf_add_public_action_hdr(buf, P2P_GO_NEG_CONF, dialog_token);
   1093 
   1094 	len = p2p_buf_add_ie_hdr(buf);
   1095 	p2p_buf_add_status(buf, status);
   1096 	group_capab = 0;
   1097 	if (peer->go_state == LOCAL_GO) {
   1098 		if (peer->flags & P2P_DEV_PREFER_PERSISTENT_GROUP) {
   1099 			group_capab |= P2P_GROUP_CAPAB_PERSISTENT_GROUP;
   1100 			if (peer->flags & P2P_DEV_PREFER_PERSISTENT_RECONN)
   1101 				group_capab |=
   1102 					P2P_GROUP_CAPAB_PERSISTENT_RECONN;
   1103 		}
   1104 		if (p2p->cross_connect)
   1105 			group_capab |= P2P_GROUP_CAPAB_CROSS_CONN;
   1106 		if (p2p->cfg->p2p_intra_bss)
   1107 			group_capab |= P2P_GROUP_CAPAB_INTRA_BSS_DIST;
   1108 	}
   1109 	p2p_buf_add_capability(buf, p2p->dev_capab &
   1110 			       ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY,
   1111 			       group_capab);
   1112 	if (go || resp_chan == NULL)
   1113 		p2p_buf_add_operating_channel(buf, p2p->cfg->country,
   1114 					      p2p->op_reg_class,
   1115 					      p2p->op_channel);
   1116 	else
   1117 		p2p_buf_add_operating_channel(buf, (const char *) resp_chan,
   1118 					      resp_chan[3], resp_chan[4]);
   1119 	p2p_channels_intersect(&p2p->channels, &peer->channels, &res);
   1120 	p2p_buf_add_channel_list(buf, p2p->cfg->country, &res);
   1121 	if (go) {
   1122 		p2p_buf_add_group_id(buf, p2p->cfg->dev_addr, p2p->ssid,
   1123 				     p2p->ssid_len);
   1124 	}
   1125 	p2p_buf_update_ie_hdr(buf, len);
   1126 
   1127 #ifdef CONFIG_WIFI_DISPLAY
   1128 	if (p2p->wfd_ie_go_neg)
   1129 		wpabuf_put_buf(buf, p2p->wfd_ie_go_neg);
   1130 #endif /* CONFIG_WIFI_DISPLAY */
   1131 
   1132 	if (p2p->vendor_elem && p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_CONF])
   1133 		wpabuf_put_buf(buf, p2p->vendor_elem[VENDOR_ELEM_P2P_GO_NEG_CONF]);
   1134 
   1135 	return buf;
   1136 }
   1137 
   1138 
   1139 void p2p_process_go_neg_resp(struct p2p_data *p2p, const u8 *sa,
   1140 			     const u8 *data, size_t len, int rx_freq)
   1141 {
   1142 	struct p2p_device *dev;
   1143 	int go = -1;
   1144 	struct p2p_message msg;
   1145 	u8 status = P2P_SC_SUCCESS;
   1146 	int freq;
   1147 
   1148 	p2p_dbg(p2p, "Received GO Negotiation Response from " MACSTR
   1149 		" (freq=%d)", MAC2STR(sa), rx_freq);
   1150 	dev = p2p_get_device(p2p, sa);
   1151 	if (dev == NULL || dev->wps_method == WPS_NOT_READY ||
   1152 	    dev != p2p->go_neg_peer) {
   1153 		p2p_dbg(p2p, "Not ready for GO negotiation with " MACSTR,
   1154 			MAC2STR(sa));
   1155 		return;
   1156 	}
   1157 
   1158 	if (p2p_parse(data, len, &msg))
   1159 		return;
   1160 
   1161 	if (!(dev->flags & P2P_DEV_WAIT_GO_NEG_RESPONSE)) {
   1162 		p2p_dbg(p2p, "Was not expecting GO Negotiation Response - ignore");
   1163 		p2p_parse_free(&msg);
   1164 		return;
   1165 	}
   1166 	dev->flags &= ~P2P_DEV_WAIT_GO_NEG_RESPONSE;
   1167 
   1168 	if (msg.dialog_token != dev->dialog_token) {
   1169 		p2p_dbg(p2p, "Unexpected Dialog Token %u (expected %u)",
   1170 			msg.dialog_token, dev->dialog_token);
   1171 		p2p_parse_free(&msg);
   1172 		return;
   1173 	}
   1174 
   1175 	if (!msg.status) {
   1176 		p2p_dbg(p2p, "No Status attribute received");
   1177 		status = P2P_SC_FAIL_INVALID_PARAMS;
   1178 		goto fail;
   1179 	}
   1180 	if (*msg.status) {
   1181 		p2p_dbg(p2p, "GO Negotiation rejected: status %d", *msg.status);
   1182 		dev->go_neg_req_sent = 0;
   1183 		if (*msg.status == P2P_SC_FAIL_INFO_CURRENTLY_UNAVAILABLE) {
   1184 			p2p_dbg(p2p, "Wait for the peer to become ready for GO Negotiation");
   1185 			dev->flags |= P2P_DEV_NOT_YET_READY;
   1186 			eloop_cancel_timeout(p2p_go_neg_wait_timeout, p2p,
   1187 					     NULL);
   1188 			eloop_register_timeout(120, 0, p2p_go_neg_wait_timeout,
   1189 					       p2p, NULL);
   1190 			if (p2p->state == P2P_CONNECT_LISTEN)
   1191 				p2p_set_state(p2p, P2P_WAIT_PEER_CONNECT);
   1192 			else
   1193 				p2p_set_state(p2p, P2P_WAIT_PEER_IDLE);
   1194 			p2p_set_timeout(p2p, 0, 0);
   1195 		} else {
   1196 			p2p_dbg(p2p, "Stop GO Negotiation attempt");
   1197 			p2p_go_neg_failed(p2p, *msg.status);
   1198 		}
   1199 		p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
   1200 		p2p_parse_free(&msg);
   1201 		return;
   1202 	}
   1203 
   1204 	if (!msg.capability) {
   1205 		p2p_dbg(p2p, "Mandatory Capability attribute missing from GO Negotiation Response");
   1206 #ifdef CONFIG_P2P_STRICT
   1207 		status = P2P_SC_FAIL_INVALID_PARAMS;
   1208 		goto fail;
   1209 #endif /* CONFIG_P2P_STRICT */
   1210 	}
   1211 
   1212 	if (!msg.p2p_device_info) {
   1213 		p2p_dbg(p2p, "Mandatory P2P Device Info attribute missing from GO Negotiation Response");
   1214 #ifdef CONFIG_P2P_STRICT
   1215 		status = P2P_SC_FAIL_INVALID_PARAMS;
   1216 		goto fail;
   1217 #endif /* CONFIG_P2P_STRICT */
   1218 	}
   1219 
   1220 	if (!msg.intended_addr) {
   1221 		p2p_dbg(p2p, "No Intended P2P Interface Address attribute received");
   1222 		status = P2P_SC_FAIL_INVALID_PARAMS;
   1223 		goto fail;
   1224 	}
   1225 
   1226 	if (!msg.go_intent) {
   1227 		p2p_dbg(p2p, "No GO Intent attribute received");
   1228 		status = P2P_SC_FAIL_INVALID_PARAMS;
   1229 		goto fail;
   1230 	}
   1231 	if ((*msg.go_intent >> 1) > P2P_MAX_GO_INTENT) {
   1232 		p2p_dbg(p2p, "Invalid GO Intent value (%u) received",
   1233 			*msg.go_intent >> 1);
   1234 		status = P2P_SC_FAIL_INVALID_PARAMS;
   1235 		goto fail;
   1236 	}
   1237 
   1238 	go = p2p_go_det(p2p->go_intent, *msg.go_intent);
   1239 	if (go < 0) {
   1240 		p2p_dbg(p2p, "Incompatible GO Intent");
   1241 		status = P2P_SC_FAIL_INCOMPATIBLE_PARAMS;
   1242 		goto fail;
   1243 	}
   1244 
   1245 	if (!go && msg.group_id) {
   1246 		/* Store SSID for Provisioning step */
   1247 		p2p->ssid_len = msg.group_id_len - ETH_ALEN;
   1248 		os_memcpy(p2p->ssid, msg.group_id + ETH_ALEN, p2p->ssid_len);
   1249 	} else if (!go) {
   1250 		p2p_dbg(p2p, "Mandatory P2P Group ID attribute missing from GO Negotiation Response");
   1251 		p2p->ssid_len = 0;
   1252 		status = P2P_SC_FAIL_INVALID_PARAMS;
   1253 		goto fail;
   1254 	}
   1255 
   1256 	if (!msg.config_timeout) {
   1257 		p2p_dbg(p2p, "Mandatory Configuration Timeout attribute missing from GO Negotiation Response");
   1258 #ifdef CONFIG_P2P_STRICT
   1259 		status = P2P_SC_FAIL_INVALID_PARAMS;
   1260 		goto fail;
   1261 #endif /* CONFIG_P2P_STRICT */
   1262 	} else {
   1263 		dev->go_timeout = msg.config_timeout[0];
   1264 		dev->client_timeout = msg.config_timeout[1];
   1265 	}
   1266 
   1267 	if (msg.wfd_subelems) {
   1268 		wpabuf_free(dev->info.wfd_subelems);
   1269 		dev->info.wfd_subelems = wpabuf_dup(msg.wfd_subelems);
   1270 	}
   1271 
   1272 	if (!msg.operating_channel && !go) {
   1273 		/*
   1274 		 * Note: P2P Client may omit Operating Channel attribute to
   1275 		 * indicate it does not have a preference.
   1276 		 */
   1277 		p2p_dbg(p2p, "No Operating Channel attribute received");
   1278 		status = P2P_SC_FAIL_INVALID_PARAMS;
   1279 		goto fail;
   1280 	}
   1281 	if (!msg.channel_list) {
   1282 		p2p_dbg(p2p, "No Channel List attribute received");
   1283 		status = P2P_SC_FAIL_INVALID_PARAMS;
   1284 		goto fail;
   1285 	}
   1286 
   1287 	if (p2p_peer_channels(p2p, dev, msg.channel_list,
   1288 			      msg.channel_list_len) < 0) {
   1289 		p2p_dbg(p2p, "No common channels found");
   1290 		status = P2P_SC_FAIL_NO_COMMON_CHANNELS;
   1291 		goto fail;
   1292 	}
   1293 
   1294 	if (msg.operating_channel) {
   1295 		dev->oper_freq = p2p_channel_to_freq(msg.operating_channel[3],
   1296 						     msg.operating_channel[4]);
   1297 		p2p_dbg(p2p, "Peer operating channel preference: %d MHz",
   1298 			dev->oper_freq);
   1299 	} else
   1300 		dev->oper_freq = 0;
   1301 
   1302 	switch (msg.dev_password_id) {
   1303 	case DEV_PW_REGISTRAR_SPECIFIED:
   1304 		p2p_dbg(p2p, "PIN from peer Display");
   1305 		if (dev->wps_method != WPS_PIN_KEYPAD) {
   1306 			p2p_dbg(p2p, "We have wps_method=%s -> incompatible",
   1307 				p2p_wps_method_str(dev->wps_method));
   1308 			status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
   1309 			goto fail;
   1310 		}
   1311 		break;
   1312 	case DEV_PW_USER_SPECIFIED:
   1313 		p2p_dbg(p2p, "Peer entered PIN on Keypad");
   1314 		if (dev->wps_method != WPS_PIN_DISPLAY) {
   1315 			p2p_dbg(p2p, "We have wps_method=%s -> incompatible",
   1316 				p2p_wps_method_str(dev->wps_method));
   1317 			status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
   1318 			goto fail;
   1319 		}
   1320 		break;
   1321 	case DEV_PW_PUSHBUTTON:
   1322 		p2p_dbg(p2p, "Peer using pushbutton");
   1323 		if (dev->wps_method != WPS_PBC) {
   1324 			p2p_dbg(p2p, "We have wps_method=%s -> incompatible",
   1325 				p2p_wps_method_str(dev->wps_method));
   1326 			status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
   1327 			goto fail;
   1328 		}
   1329 		break;
   1330 	case DEV_PW_P2PS_DEFAULT:
   1331 		p2p_dbg(p2p, "P2P: Peer using P2PS default pin");
   1332 		if (dev->wps_method != WPS_P2PS) {
   1333 			p2p_dbg(p2p, "We have wps_method=%s -> incompatible",
   1334 				p2p_wps_method_str(dev->wps_method));
   1335 			status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
   1336 			goto fail;
   1337 		}
   1338 		break;
   1339 	default:
   1340 		if (msg.dev_password_id &&
   1341 		    msg.dev_password_id == dev->oob_pw_id) {
   1342 			p2p_dbg(p2p, "Peer using NFC");
   1343 			if (dev->wps_method != WPS_NFC) {
   1344 				p2p_dbg(p2p, "We have wps_method=%s -> incompatible",
   1345 					p2p_wps_method_str(dev->wps_method));
   1346 				status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
   1347 				goto fail;
   1348 			}
   1349 			break;
   1350 		}
   1351 		p2p_dbg(p2p, "Unsupported Device Password ID %d",
   1352 			msg.dev_password_id);
   1353 		status = P2P_SC_FAIL_INCOMPATIBLE_PROV_METHOD;
   1354 		goto fail;
   1355 	}
   1356 
   1357 	if (go && p2p_go_select_channel(p2p, dev, &status) < 0)
   1358 		goto fail;
   1359 
   1360 	/*
   1361 	 * Use the driver preferred frequency list extension if local device is
   1362 	 * GO.
   1363 	 */
   1364 	if (go)
   1365 		p2p_check_pref_chan(p2p, go, dev, &msg);
   1366 
   1367 	p2p_set_state(p2p, P2P_GO_NEG);
   1368 	p2p_clear_timeout(p2p);
   1369 
   1370 	p2p_dbg(p2p, "GO Negotiation with " MACSTR, MAC2STR(sa));
   1371 	os_memcpy(dev->intended_addr, msg.intended_addr, ETH_ALEN);
   1372 
   1373 fail:
   1374 	/* Store GO Negotiation Confirmation to allow retransmission */
   1375 	wpabuf_free(dev->go_neg_conf);
   1376 	dev->go_neg_conf = p2p_build_go_neg_conf(p2p, dev, msg.dialog_token,
   1377 						 status, msg.operating_channel,
   1378 						 go);
   1379 	p2p_parse_free(&msg);
   1380 	if (dev->go_neg_conf == NULL)
   1381 		return;
   1382 	p2p_dbg(p2p, "Sending GO Negotiation Confirm");
   1383 	if (status == P2P_SC_SUCCESS) {
   1384 		p2p->pending_action_state = P2P_PENDING_GO_NEG_CONFIRM;
   1385 		dev->go_state = go ? LOCAL_GO : REMOTE_GO;
   1386 	} else
   1387 		p2p->pending_action_state = P2P_NO_PENDING_ACTION;
   1388 	if (rx_freq > 0)
   1389 		freq = rx_freq;
   1390 	else
   1391 		freq = dev->listen_freq;
   1392 
   1393 	dev->go_neg_conf_freq = freq;
   1394 	dev->go_neg_conf_sent = 0;
   1395 
   1396 	if (p2p_send_action(p2p, freq, sa, p2p->cfg->dev_addr, sa,
   1397 			    wpabuf_head(dev->go_neg_conf),
   1398 			    wpabuf_len(dev->go_neg_conf), 50) < 0) {
   1399 		p2p_dbg(p2p, "Failed to send Action frame");
   1400 		p2p_go_neg_failed(p2p, -1);
   1401 		p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
   1402 	} else
   1403 		dev->go_neg_conf_sent++;
   1404 	if (status != P2P_SC_SUCCESS) {
   1405 		p2p_dbg(p2p, "GO Negotiation failed");
   1406 		p2p_go_neg_failed(p2p, status);
   1407 	}
   1408 }
   1409 
   1410 
   1411 void p2p_process_go_neg_conf(struct p2p_data *p2p, const u8 *sa,
   1412 			     const u8 *data, size_t len)
   1413 {
   1414 	struct p2p_device *dev;
   1415 	struct p2p_message msg;
   1416 
   1417 	p2p_dbg(p2p, "Received GO Negotiation Confirm from " MACSTR,
   1418 		MAC2STR(sa));
   1419 	dev = p2p_get_device(p2p, sa);
   1420 	if (dev == NULL || dev->wps_method == WPS_NOT_READY ||
   1421 	    dev != p2p->go_neg_peer) {
   1422 		p2p_dbg(p2p, "Not ready for GO negotiation with " MACSTR,
   1423 			MAC2STR(sa));
   1424 		return;
   1425 	}
   1426 
   1427 	if (p2p->pending_action_state == P2P_PENDING_GO_NEG_RESPONSE) {
   1428 		p2p_dbg(p2p, "Stopped waiting for TX status on GO Negotiation Response since we already received Confirmation");
   1429 		p2p->pending_action_state = P2P_NO_PENDING_ACTION;
   1430 	}
   1431 
   1432 	if (p2p_parse(data, len, &msg))
   1433 		return;
   1434 
   1435 	if (!(dev->flags & P2P_DEV_WAIT_GO_NEG_CONFIRM)) {
   1436 		p2p_dbg(p2p, "Was not expecting GO Negotiation Confirm - ignore");
   1437 		p2p_parse_free(&msg);
   1438 		return;
   1439 	}
   1440 	dev->flags &= ~P2P_DEV_WAIT_GO_NEG_CONFIRM;
   1441 	p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
   1442 
   1443 	if (msg.dialog_token != dev->dialog_token) {
   1444 		p2p_dbg(p2p, "Unexpected Dialog Token %u (expected %u)",
   1445 			msg.dialog_token, dev->dialog_token);
   1446 		p2p_parse_free(&msg);
   1447 		return;
   1448 	}
   1449 
   1450 	if (!msg.status) {
   1451 		p2p_dbg(p2p, "No Status attribute received");
   1452 		p2p_parse_free(&msg);
   1453 		return;
   1454 	}
   1455 	if (*msg.status) {
   1456 		p2p_dbg(p2p, "GO Negotiation rejected: status %d", *msg.status);
   1457 		p2p_go_neg_failed(p2p, *msg.status);
   1458 		p2p_parse_free(&msg);
   1459 		return;
   1460 	}
   1461 
   1462 	if (dev->go_state == REMOTE_GO && msg.group_id) {
   1463 		/* Store SSID for Provisioning step */
   1464 		p2p->ssid_len = msg.group_id_len - ETH_ALEN;
   1465 		os_memcpy(p2p->ssid, msg.group_id + ETH_ALEN, p2p->ssid_len);
   1466 	} else if (dev->go_state == REMOTE_GO) {
   1467 		p2p_dbg(p2p, "Mandatory P2P Group ID attribute missing from GO Negotiation Confirmation");
   1468 		p2p->ssid_len = 0;
   1469 		p2p_go_neg_failed(p2p, P2P_SC_FAIL_INVALID_PARAMS);
   1470 		p2p_parse_free(&msg);
   1471 		return;
   1472 	}
   1473 
   1474 	if (!msg.operating_channel) {
   1475 		p2p_dbg(p2p, "Mandatory Operating Channel attribute missing from GO Negotiation Confirmation");
   1476 #ifdef CONFIG_P2P_STRICT
   1477 		p2p_parse_free(&msg);
   1478 		return;
   1479 #endif /* CONFIG_P2P_STRICT */
   1480 	} else if (dev->go_state == REMOTE_GO) {
   1481 		int oper_freq = p2p_channel_to_freq(msg.operating_channel[3],
   1482 						    msg.operating_channel[4]);
   1483 		if (oper_freq != dev->oper_freq) {
   1484 			p2p_dbg(p2p, "Updated peer (GO) operating channel preference from %d MHz to %d MHz",
   1485 				dev->oper_freq, oper_freq);
   1486 			dev->oper_freq = oper_freq;
   1487 		}
   1488 	}
   1489 
   1490 	if (!msg.channel_list) {
   1491 		p2p_dbg(p2p, "Mandatory Operating Channel attribute missing from GO Negotiation Confirmation");
   1492 #ifdef CONFIG_P2P_STRICT
   1493 		p2p_parse_free(&msg);
   1494 		return;
   1495 #endif /* CONFIG_P2P_STRICT */
   1496 	}
   1497 
   1498 	p2p_parse_free(&msg);
   1499 
   1500 	if (dev->go_state == UNKNOWN_GO) {
   1501 		/*
   1502 		 * This should not happen since GO negotiation has already
   1503 		 * been completed.
   1504 		 */
   1505 		p2p_dbg(p2p, "Unexpected GO Neg state - do not know which end becomes GO");
   1506 		return;
   1507 	}
   1508 
   1509 	/*
   1510 	 * The peer could have missed our ctrl::ack frame for GO Negotiation
   1511 	 * Confirm and continue retransmitting the frame. To reduce the
   1512 	 * likelihood of the peer not getting successful TX status for the
   1513 	 * GO Negotiation Confirm frame, wait a short time here before starting
   1514 	 * the group so that we will remain on the current channel to
   1515 	 * acknowledge any possible retransmission from the peer.
   1516 	 */
   1517 	p2p_dbg(p2p, "20 ms wait on current channel before starting group");
   1518 	os_sleep(0, 20000);
   1519 
   1520 	p2p_go_complete(p2p, dev);
   1521 }
   1522