1 /* 2 * hostapd / Configuration file parser 3 * Copyright (c) 2003-2015, Jouni Malinen <j (at) w1.fi> 4 * 5 * This software may be distributed under the terms of the BSD license. 6 * See README for more details. 7 */ 8 9 #include "utils/includes.h" 10 #ifndef CONFIG_NATIVE_WINDOWS 11 #include <grp.h> 12 #endif /* CONFIG_NATIVE_WINDOWS */ 13 14 #include "utils/common.h" 15 #include "utils/uuid.h" 16 #include "common/ieee802_11_defs.h" 17 #include "drivers/driver.h" 18 #include "eap_server/eap.h" 19 #include "radius/radius_client.h" 20 #include "ap/wpa_auth.h" 21 #include "ap/ap_config.h" 22 #include "config_file.h" 23 24 25 #ifndef CONFIG_NO_RADIUS 26 #ifdef EAP_SERVER 27 static struct hostapd_radius_attr * 28 hostapd_parse_radius_attr(const char *value); 29 #endif /* EAP_SERVER */ 30 #endif /* CONFIG_NO_RADIUS */ 31 32 33 #ifndef CONFIG_NO_VLAN 34 static int hostapd_config_read_vlan_file(struct hostapd_bss_config *bss, 35 const char *fname) 36 { 37 FILE *f; 38 char buf[128], *pos, *pos2; 39 int line = 0, vlan_id; 40 struct hostapd_vlan *vlan; 41 42 f = fopen(fname, "r"); 43 if (!f) { 44 wpa_printf(MSG_ERROR, "VLAN file '%s' not readable.", fname); 45 return -1; 46 } 47 48 while (fgets(buf, sizeof(buf), f)) { 49 line++; 50 51 if (buf[0] == '#') 52 continue; 53 pos = buf; 54 while (*pos != '\0') { 55 if (*pos == '\n') { 56 *pos = '\0'; 57 break; 58 } 59 pos++; 60 } 61 if (buf[0] == '\0') 62 continue; 63 64 if (buf[0] == '*') { 65 vlan_id = VLAN_ID_WILDCARD; 66 pos = buf + 1; 67 } else { 68 vlan_id = strtol(buf, &pos, 10); 69 if (buf == pos || vlan_id < 1 || 70 vlan_id > MAX_VLAN_ID) { 71 wpa_printf(MSG_ERROR, "Invalid VLAN ID at " 72 "line %d in '%s'", line, fname); 73 fclose(f); 74 return -1; 75 } 76 } 77 78 while (*pos == ' ' || *pos == '\t') 79 pos++; 80 pos2 = pos; 81 while (*pos2 != ' ' && *pos2 != '\t' && *pos2 != '\0') 82 pos2++; 83 *pos2 = '\0'; 84 if (*pos == '\0' || os_strlen(pos) > IFNAMSIZ) { 85 wpa_printf(MSG_ERROR, "Invalid VLAN ifname at line %d " 86 "in '%s'", line, fname); 87 fclose(f); 88 return -1; 89 } 90 91 vlan = os_zalloc(sizeof(*vlan)); 92 if (vlan == NULL) { 93 wpa_printf(MSG_ERROR, "Out of memory while reading " 94 "VLAN interfaces from '%s'", fname); 95 fclose(f); 96 return -1; 97 } 98 99 vlan->vlan_id = vlan_id; 100 os_strlcpy(vlan->ifname, pos, sizeof(vlan->ifname)); 101 vlan->next = bss->vlan; 102 bss->vlan = vlan; 103 } 104 105 fclose(f); 106 107 return 0; 108 } 109 #endif /* CONFIG_NO_VLAN */ 110 111 112 static int hostapd_acl_comp(const void *a, const void *b) 113 { 114 const struct mac_acl_entry *aa = a; 115 const struct mac_acl_entry *bb = b; 116 return os_memcmp(aa->addr, bb->addr, sizeof(macaddr)); 117 } 118 119 120 static int hostapd_config_read_maclist(const char *fname, 121 struct mac_acl_entry **acl, int *num) 122 { 123 FILE *f; 124 char buf[128], *pos; 125 int line = 0; 126 u8 addr[ETH_ALEN]; 127 struct mac_acl_entry *newacl; 128 int vlan_id; 129 130 if (!fname) 131 return 0; 132 133 f = fopen(fname, "r"); 134 if (!f) { 135 wpa_printf(MSG_ERROR, "MAC list file '%s' not found.", fname); 136 return -1; 137 } 138 139 while (fgets(buf, sizeof(buf), f)) { 140 int i, rem = 0; 141 142 line++; 143 144 if (buf[0] == '#') 145 continue; 146 pos = buf; 147 while (*pos != '\0') { 148 if (*pos == '\n') { 149 *pos = '\0'; 150 break; 151 } 152 pos++; 153 } 154 if (buf[0] == '\0') 155 continue; 156 pos = buf; 157 if (buf[0] == '-') { 158 rem = 1; 159 pos++; 160 } 161 162 if (hwaddr_aton(pos, addr)) { 163 wpa_printf(MSG_ERROR, "Invalid MAC address '%s' at " 164 "line %d in '%s'", pos, line, fname); 165 fclose(f); 166 return -1; 167 } 168 169 if (rem) { 170 i = 0; 171 while (i < *num) { 172 if (os_memcmp((*acl)[i].addr, addr, ETH_ALEN) == 173 0) { 174 os_remove_in_array(*acl, *num, 175 sizeof(**acl), i); 176 (*num)--; 177 } else 178 i++; 179 } 180 continue; 181 } 182 vlan_id = 0; 183 pos = buf; 184 while (*pos != '\0' && *pos != ' ' && *pos != '\t') 185 pos++; 186 while (*pos == ' ' || *pos == '\t') 187 pos++; 188 if (*pos != '\0') 189 vlan_id = atoi(pos); 190 191 newacl = os_realloc_array(*acl, *num + 1, sizeof(**acl)); 192 if (newacl == NULL) { 193 wpa_printf(MSG_ERROR, "MAC list reallocation failed"); 194 fclose(f); 195 return -1; 196 } 197 198 *acl = newacl; 199 os_memcpy((*acl)[*num].addr, addr, ETH_ALEN); 200 (*acl)[*num].vlan_id = vlan_id; 201 (*num)++; 202 } 203 204 fclose(f); 205 206 qsort(*acl, *num, sizeof(**acl), hostapd_acl_comp); 207 208 return 0; 209 } 210 211 212 #ifdef EAP_SERVER 213 static int hostapd_config_read_eap_user(const char *fname, 214 struct hostapd_bss_config *conf) 215 { 216 FILE *f; 217 char buf[512], *pos, *start, *pos2; 218 int line = 0, ret = 0, num_methods; 219 struct hostapd_eap_user *user = NULL, *tail = NULL, *new_user = NULL; 220 221 if (!fname) 222 return 0; 223 224 if (os_strncmp(fname, "sqlite:", 7) == 0) { 225 #ifdef CONFIG_SQLITE 226 os_free(conf->eap_user_sqlite); 227 conf->eap_user_sqlite = os_strdup(fname + 7); 228 return 0; 229 #else /* CONFIG_SQLITE */ 230 wpa_printf(MSG_ERROR, 231 "EAP user file in SQLite DB, but CONFIG_SQLITE was not enabled in the build."); 232 return -1; 233 #endif /* CONFIG_SQLITE */ 234 } 235 236 f = fopen(fname, "r"); 237 if (!f) { 238 wpa_printf(MSG_ERROR, "EAP user file '%s' not found.", fname); 239 return -1; 240 } 241 242 /* Lines: "user" METHOD,METHOD2 "password" (password optional) */ 243 while (fgets(buf, sizeof(buf), f)) { 244 line++; 245 246 if (buf[0] == '#') 247 continue; 248 pos = buf; 249 while (*pos != '\0') { 250 if (*pos == '\n') { 251 *pos = '\0'; 252 break; 253 } 254 pos++; 255 } 256 if (buf[0] == '\0') 257 continue; 258 259 #ifndef CONFIG_NO_RADIUS 260 if (user && os_strncmp(buf, "radius_accept_attr=", 19) == 0) { 261 struct hostapd_radius_attr *attr, *a; 262 attr = hostapd_parse_radius_attr(buf + 19); 263 if (attr == NULL) { 264 wpa_printf(MSG_ERROR, "Invalid radius_auth_req_attr: %s", 265 buf + 19); 266 user = NULL; /* already in the BSS list */ 267 goto failed; 268 } 269 if (user->accept_attr == NULL) { 270 user->accept_attr = attr; 271 } else { 272 a = user->accept_attr; 273 while (a->next) 274 a = a->next; 275 a->next = attr; 276 } 277 continue; 278 } 279 #endif /* CONFIG_NO_RADIUS */ 280 281 user = NULL; 282 283 if (buf[0] != '"' && buf[0] != '*') { 284 wpa_printf(MSG_ERROR, "Invalid EAP identity (no \" in " 285 "start) on line %d in '%s'", line, fname); 286 goto failed; 287 } 288 289 user = os_zalloc(sizeof(*user)); 290 if (user == NULL) { 291 wpa_printf(MSG_ERROR, "EAP user allocation failed"); 292 goto failed; 293 } 294 user->force_version = -1; 295 296 if (buf[0] == '*') { 297 pos = buf; 298 } else { 299 pos = buf + 1; 300 start = pos; 301 while (*pos != '"' && *pos != '\0') 302 pos++; 303 if (*pos == '\0') { 304 wpa_printf(MSG_ERROR, "Invalid EAP identity " 305 "(no \" in end) on line %d in '%s'", 306 line, fname); 307 goto failed; 308 } 309 310 user->identity = os_malloc(pos - start); 311 if (user->identity == NULL) { 312 wpa_printf(MSG_ERROR, "Failed to allocate " 313 "memory for EAP identity"); 314 goto failed; 315 } 316 os_memcpy(user->identity, start, pos - start); 317 user->identity_len = pos - start; 318 319 if (pos[0] == '"' && pos[1] == '*') { 320 user->wildcard_prefix = 1; 321 pos++; 322 } 323 } 324 pos++; 325 while (*pos == ' ' || *pos == '\t') 326 pos++; 327 328 if (*pos == '\0') { 329 wpa_printf(MSG_ERROR, "No EAP method on line %d in " 330 "'%s'", line, fname); 331 goto failed; 332 } 333 334 start = pos; 335 while (*pos != ' ' && *pos != '\t' && *pos != '\0') 336 pos++; 337 if (*pos == '\0') { 338 pos = NULL; 339 } else { 340 *pos = '\0'; 341 pos++; 342 } 343 num_methods = 0; 344 while (*start) { 345 char *pos3 = os_strchr(start, ','); 346 if (pos3) { 347 *pos3++ = '\0'; 348 } 349 user->methods[num_methods].method = 350 eap_server_get_type( 351 start, 352 &user->methods[num_methods].vendor); 353 if (user->methods[num_methods].vendor == 354 EAP_VENDOR_IETF && 355 user->methods[num_methods].method == EAP_TYPE_NONE) 356 { 357 if (os_strcmp(start, "TTLS-PAP") == 0) { 358 user->ttls_auth |= EAP_TTLS_AUTH_PAP; 359 goto skip_eap; 360 } 361 if (os_strcmp(start, "TTLS-CHAP") == 0) { 362 user->ttls_auth |= EAP_TTLS_AUTH_CHAP; 363 goto skip_eap; 364 } 365 if (os_strcmp(start, "TTLS-MSCHAP") == 0) { 366 user->ttls_auth |= 367 EAP_TTLS_AUTH_MSCHAP; 368 goto skip_eap; 369 } 370 if (os_strcmp(start, "TTLS-MSCHAPV2") == 0) { 371 user->ttls_auth |= 372 EAP_TTLS_AUTH_MSCHAPV2; 373 goto skip_eap; 374 } 375 if (os_strcmp(start, "MACACL") == 0) { 376 user->macacl = 1; 377 goto skip_eap; 378 } 379 wpa_printf(MSG_ERROR, "Unsupported EAP type " 380 "'%s' on line %d in '%s'", 381 start, line, fname); 382 goto failed; 383 } 384 385 num_methods++; 386 if (num_methods >= EAP_MAX_METHODS) 387 break; 388 skip_eap: 389 if (pos3 == NULL) 390 break; 391 start = pos3; 392 } 393 if (num_methods == 0 && user->ttls_auth == 0 && !user->macacl) { 394 wpa_printf(MSG_ERROR, "No EAP types configured on " 395 "line %d in '%s'", line, fname); 396 goto failed; 397 } 398 399 if (pos == NULL) 400 goto done; 401 402 while (*pos == ' ' || *pos == '\t') 403 pos++; 404 if (*pos == '\0') 405 goto done; 406 407 if (os_strncmp(pos, "[ver=0]", 7) == 0) { 408 user->force_version = 0; 409 goto done; 410 } 411 412 if (os_strncmp(pos, "[ver=1]", 7) == 0) { 413 user->force_version = 1; 414 goto done; 415 } 416 417 if (os_strncmp(pos, "[2]", 3) == 0) { 418 user->phase2 = 1; 419 goto done; 420 } 421 422 if (*pos == '"') { 423 pos++; 424 start = pos; 425 while (*pos != '"' && *pos != '\0') 426 pos++; 427 if (*pos == '\0') { 428 wpa_printf(MSG_ERROR, "Invalid EAP password " 429 "(no \" in end) on line %d in '%s'", 430 line, fname); 431 goto failed; 432 } 433 434 user->password = os_malloc(pos - start); 435 if (user->password == NULL) { 436 wpa_printf(MSG_ERROR, "Failed to allocate " 437 "memory for EAP password"); 438 goto failed; 439 } 440 os_memcpy(user->password, start, pos - start); 441 user->password_len = pos - start; 442 443 pos++; 444 } else if (os_strncmp(pos, "hash:", 5) == 0) { 445 pos += 5; 446 pos2 = pos; 447 while (*pos2 != '\0' && *pos2 != ' ' && 448 *pos2 != '\t' && *pos2 != '#') 449 pos2++; 450 if (pos2 - pos != 32) { 451 wpa_printf(MSG_ERROR, "Invalid password hash " 452 "on line %d in '%s'", line, fname); 453 goto failed; 454 } 455 user->password = os_malloc(16); 456 if (user->password == NULL) { 457 wpa_printf(MSG_ERROR, "Failed to allocate " 458 "memory for EAP password hash"); 459 goto failed; 460 } 461 if (hexstr2bin(pos, user->password, 16) < 0) { 462 wpa_printf(MSG_ERROR, "Invalid hash password " 463 "on line %d in '%s'", line, fname); 464 goto failed; 465 } 466 user->password_len = 16; 467 user->password_hash = 1; 468 pos = pos2; 469 } else { 470 pos2 = pos; 471 while (*pos2 != '\0' && *pos2 != ' ' && 472 *pos2 != '\t' && *pos2 != '#') 473 pos2++; 474 if ((pos2 - pos) & 1) { 475 wpa_printf(MSG_ERROR, "Invalid hex password " 476 "on line %d in '%s'", line, fname); 477 goto failed; 478 } 479 user->password = os_malloc((pos2 - pos) / 2); 480 if (user->password == NULL) { 481 wpa_printf(MSG_ERROR, "Failed to allocate " 482 "memory for EAP password"); 483 goto failed; 484 } 485 if (hexstr2bin(pos, user->password, 486 (pos2 - pos) / 2) < 0) { 487 wpa_printf(MSG_ERROR, "Invalid hex password " 488 "on line %d in '%s'", line, fname); 489 goto failed; 490 } 491 user->password_len = (pos2 - pos) / 2; 492 pos = pos2; 493 } 494 495 while (*pos == ' ' || *pos == '\t') 496 pos++; 497 if (os_strncmp(pos, "[2]", 3) == 0) { 498 user->phase2 = 1; 499 } 500 501 done: 502 if (tail == NULL) { 503 tail = new_user = user; 504 } else { 505 tail->next = user; 506 tail = user; 507 } 508 continue; 509 510 failed: 511 if (user) 512 hostapd_config_free_eap_user(user); 513 ret = -1; 514 break; 515 } 516 517 fclose(f); 518 519 if (ret == 0) { 520 user = conf->eap_user; 521 while (user) { 522 struct hostapd_eap_user *prev; 523 524 prev = user; 525 user = user->next; 526 hostapd_config_free_eap_user(prev); 527 } 528 conf->eap_user = new_user; 529 } 530 531 return ret; 532 } 533 #endif /* EAP_SERVER */ 534 535 536 #ifndef CONFIG_NO_RADIUS 537 static int 538 hostapd_config_read_radius_addr(struct hostapd_radius_server **server, 539 int *num_server, const char *val, int def_port, 540 struct hostapd_radius_server **curr_serv) 541 { 542 struct hostapd_radius_server *nserv; 543 int ret; 544 static int server_index = 1; 545 546 nserv = os_realloc_array(*server, *num_server + 1, sizeof(*nserv)); 547 if (nserv == NULL) 548 return -1; 549 550 *server = nserv; 551 nserv = &nserv[*num_server]; 552 (*num_server)++; 553 (*curr_serv) = nserv; 554 555 os_memset(nserv, 0, sizeof(*nserv)); 556 nserv->port = def_port; 557 ret = hostapd_parse_ip_addr(val, &nserv->addr); 558 nserv->index = server_index++; 559 560 return ret; 561 } 562 563 564 static struct hostapd_radius_attr * 565 hostapd_parse_radius_attr(const char *value) 566 { 567 const char *pos; 568 char syntax; 569 struct hostapd_radius_attr *attr; 570 size_t len; 571 572 attr = os_zalloc(sizeof(*attr)); 573 if (attr == NULL) 574 return NULL; 575 576 attr->type = atoi(value); 577 578 pos = os_strchr(value, ':'); 579 if (pos == NULL) { 580 attr->val = wpabuf_alloc(1); 581 if (attr->val == NULL) { 582 os_free(attr); 583 return NULL; 584 } 585 wpabuf_put_u8(attr->val, 0); 586 return attr; 587 } 588 589 pos++; 590 if (pos[0] == '\0' || pos[1] != ':') { 591 os_free(attr); 592 return NULL; 593 } 594 syntax = *pos++; 595 pos++; 596 597 switch (syntax) { 598 case 's': 599 attr->val = wpabuf_alloc_copy(pos, os_strlen(pos)); 600 break; 601 case 'x': 602 len = os_strlen(pos); 603 if (len & 1) 604 break; 605 len /= 2; 606 attr->val = wpabuf_alloc(len); 607 if (attr->val == NULL) 608 break; 609 if (hexstr2bin(pos, wpabuf_put(attr->val, len), len) < 0) { 610 wpabuf_free(attr->val); 611 os_free(attr); 612 return NULL; 613 } 614 break; 615 case 'd': 616 attr->val = wpabuf_alloc(4); 617 if (attr->val) 618 wpabuf_put_be32(attr->val, atoi(pos)); 619 break; 620 default: 621 os_free(attr); 622 return NULL; 623 } 624 625 if (attr->val == NULL) { 626 os_free(attr); 627 return NULL; 628 } 629 630 return attr; 631 } 632 633 634 static int hostapd_parse_das_client(struct hostapd_bss_config *bss, 635 const char *val) 636 { 637 char *secret; 638 639 secret = os_strchr(val, ' '); 640 if (secret == NULL) 641 return -1; 642 643 secret++; 644 645 if (hostapd_parse_ip_addr(val, &bss->radius_das_client_addr)) 646 return -1; 647 648 os_free(bss->radius_das_shared_secret); 649 bss->radius_das_shared_secret = (u8 *) os_strdup(secret); 650 if (bss->radius_das_shared_secret == NULL) 651 return -1; 652 bss->radius_das_shared_secret_len = os_strlen(secret); 653 654 return 0; 655 } 656 #endif /* CONFIG_NO_RADIUS */ 657 658 659 static int hostapd_config_parse_key_mgmt(int line, const char *value) 660 { 661 int val = 0, last; 662 char *start, *end, *buf; 663 664 buf = os_strdup(value); 665 if (buf == NULL) 666 return -1; 667 start = buf; 668 669 while (*start != '\0') { 670 while (*start == ' ' || *start == '\t') 671 start++; 672 if (*start == '\0') 673 break; 674 end = start; 675 while (*end != ' ' && *end != '\t' && *end != '\0') 676 end++; 677 last = *end == '\0'; 678 *end = '\0'; 679 if (os_strcmp(start, "WPA-PSK") == 0) 680 val |= WPA_KEY_MGMT_PSK; 681 else if (os_strcmp(start, "WPA-EAP") == 0) 682 val |= WPA_KEY_MGMT_IEEE8021X; 683 #ifdef CONFIG_IEEE80211R 684 else if (os_strcmp(start, "FT-PSK") == 0) 685 val |= WPA_KEY_MGMT_FT_PSK; 686 else if (os_strcmp(start, "FT-EAP") == 0) 687 val |= WPA_KEY_MGMT_FT_IEEE8021X; 688 #endif /* CONFIG_IEEE80211R */ 689 #ifdef CONFIG_IEEE80211W 690 else if (os_strcmp(start, "WPA-PSK-SHA256") == 0) 691 val |= WPA_KEY_MGMT_PSK_SHA256; 692 else if (os_strcmp(start, "WPA-EAP-SHA256") == 0) 693 val |= WPA_KEY_MGMT_IEEE8021X_SHA256; 694 #endif /* CONFIG_IEEE80211W */ 695 #ifdef CONFIG_SAE 696 else if (os_strcmp(start, "SAE") == 0) 697 val |= WPA_KEY_MGMT_SAE; 698 else if (os_strcmp(start, "FT-SAE") == 0) 699 val |= WPA_KEY_MGMT_FT_SAE; 700 #endif /* CONFIG_SAE */ 701 #ifdef CONFIG_SUITEB 702 else if (os_strcmp(start, "WPA-EAP-SUITE-B") == 0) 703 val |= WPA_KEY_MGMT_IEEE8021X_SUITE_B; 704 #endif /* CONFIG_SUITEB */ 705 #ifdef CONFIG_SUITEB192 706 else if (os_strcmp(start, "WPA-EAP-SUITE-B-192") == 0) 707 val |= WPA_KEY_MGMT_IEEE8021X_SUITE_B_192; 708 #endif /* CONFIG_SUITEB192 */ 709 else { 710 wpa_printf(MSG_ERROR, "Line %d: invalid key_mgmt '%s'", 711 line, start); 712 os_free(buf); 713 return -1; 714 } 715 716 if (last) 717 break; 718 start = end + 1; 719 } 720 721 os_free(buf); 722 if (val == 0) { 723 wpa_printf(MSG_ERROR, "Line %d: no key_mgmt values " 724 "configured.", line); 725 return -1; 726 } 727 728 return val; 729 } 730 731 732 static int hostapd_config_parse_cipher(int line, const char *value) 733 { 734 int val = wpa_parse_cipher(value); 735 if (val < 0) { 736 wpa_printf(MSG_ERROR, "Line %d: invalid cipher '%s'.", 737 line, value); 738 return -1; 739 } 740 if (val == 0) { 741 wpa_printf(MSG_ERROR, "Line %d: no cipher values configured.", 742 line); 743 return -1; 744 } 745 return val; 746 } 747 748 749 static int hostapd_config_read_wep(struct hostapd_wep_keys *wep, int keyidx, 750 char *val) 751 { 752 size_t len = os_strlen(val); 753 754 if (keyidx < 0 || keyidx > 3 || wep->key[keyidx] != NULL) 755 return -1; 756 757 if (val[0] == '"') { 758 if (len < 2 || val[len - 1] != '"') 759 return -1; 760 len -= 2; 761 wep->key[keyidx] = os_malloc(len); 762 if (wep->key[keyidx] == NULL) 763 return -1; 764 os_memcpy(wep->key[keyidx], val + 1, len); 765 wep->len[keyidx] = len; 766 } else { 767 if (len & 1) 768 return -1; 769 len /= 2; 770 wep->key[keyidx] = os_malloc(len); 771 if (wep->key[keyidx] == NULL) 772 return -1; 773 wep->len[keyidx] = len; 774 if (hexstr2bin(val, wep->key[keyidx], len) < 0) 775 return -1; 776 } 777 778 wep->keys_set++; 779 780 return 0; 781 } 782 783 784 static int hostapd_parse_chanlist(struct hostapd_config *conf, char *val) 785 { 786 char *pos; 787 788 /* for backwards compatibility, translate ' ' in conf str to ',' */ 789 pos = val; 790 while (pos) { 791 pos = os_strchr(pos, ' '); 792 if (pos) 793 *pos++ = ','; 794 } 795 if (freq_range_list_parse(&conf->acs_ch_list, val)) 796 return -1; 797 798 return 0; 799 } 800 801 802 static int hostapd_parse_intlist(int **int_list, char *val) 803 { 804 int *list; 805 int count; 806 char *pos, *end; 807 808 os_free(*int_list); 809 *int_list = NULL; 810 811 pos = val; 812 count = 0; 813 while (*pos != '\0') { 814 if (*pos == ' ') 815 count++; 816 pos++; 817 } 818 819 list = os_malloc(sizeof(int) * (count + 2)); 820 if (list == NULL) 821 return -1; 822 pos = val; 823 count = 0; 824 while (*pos != '\0') { 825 end = os_strchr(pos, ' '); 826 if (end) 827 *end = '\0'; 828 829 list[count++] = atoi(pos); 830 if (!end) 831 break; 832 pos = end + 1; 833 } 834 list[count] = -1; 835 836 *int_list = list; 837 return 0; 838 } 839 840 841 static int hostapd_config_bss(struct hostapd_config *conf, const char *ifname) 842 { 843 struct hostapd_bss_config **all, *bss; 844 845 if (*ifname == '\0') 846 return -1; 847 848 all = os_realloc_array(conf->bss, conf->num_bss + 1, 849 sizeof(struct hostapd_bss_config *)); 850 if (all == NULL) { 851 wpa_printf(MSG_ERROR, "Failed to allocate memory for " 852 "multi-BSS entry"); 853 return -1; 854 } 855 conf->bss = all; 856 857 bss = os_zalloc(sizeof(*bss)); 858 if (bss == NULL) 859 return -1; 860 bss->radius = os_zalloc(sizeof(*bss->radius)); 861 if (bss->radius == NULL) { 862 wpa_printf(MSG_ERROR, "Failed to allocate memory for " 863 "multi-BSS RADIUS data"); 864 os_free(bss); 865 return -1; 866 } 867 868 conf->bss[conf->num_bss++] = bss; 869 conf->last_bss = bss; 870 871 hostapd_config_defaults_bss(bss); 872 os_strlcpy(bss->iface, ifname, sizeof(bss->iface)); 873 os_memcpy(bss->ssid.vlan, bss->iface, IFNAMSIZ + 1); 874 875 return 0; 876 } 877 878 879 /* convert floats with one decimal place to value*10 int, i.e., 880 * "1.5" will return 15 */ 881 static int hostapd_config_read_int10(const char *value) 882 { 883 int i, d; 884 char *pos; 885 886 i = atoi(value); 887 pos = os_strchr(value, '.'); 888 d = 0; 889 if (pos) { 890 pos++; 891 if (*pos >= '0' && *pos <= '9') 892 d = *pos - '0'; 893 } 894 895 return i * 10 + d; 896 } 897 898 899 static int valid_cw(int cw) 900 { 901 return (cw == 1 || cw == 3 || cw == 7 || cw == 15 || cw == 31 || 902 cw == 63 || cw == 127 || cw == 255 || cw == 511 || cw == 1023 || 903 cw == 2047 || cw == 4095 || cw == 8191 || cw == 16383 || 904 cw == 32767); 905 } 906 907 908 enum { 909 IEEE80211_TX_QUEUE_DATA0 = 0, /* used for EDCA AC_VO data */ 910 IEEE80211_TX_QUEUE_DATA1 = 1, /* used for EDCA AC_VI data */ 911 IEEE80211_TX_QUEUE_DATA2 = 2, /* used for EDCA AC_BE data */ 912 IEEE80211_TX_QUEUE_DATA3 = 3 /* used for EDCA AC_BK data */ 913 }; 914 915 static int hostapd_config_tx_queue(struct hostapd_config *conf, char *name, 916 char *val) 917 { 918 int num; 919 char *pos; 920 struct hostapd_tx_queue_params *queue; 921 922 /* skip 'tx_queue_' prefix */ 923 pos = name + 9; 924 if (os_strncmp(pos, "data", 4) == 0 && 925 pos[4] >= '0' && pos[4] <= '9' && pos[5] == '_') { 926 num = pos[4] - '0'; 927 pos += 6; 928 } else if (os_strncmp(pos, "after_beacon_", 13) == 0 || 929 os_strncmp(pos, "beacon_", 7) == 0) { 930 wpa_printf(MSG_INFO, "DEPRECATED: '%s' not used", name); 931 return 0; 932 } else { 933 wpa_printf(MSG_ERROR, "Unknown tx_queue name '%s'", pos); 934 return -1; 935 } 936 937 if (num >= NUM_TX_QUEUES) { 938 /* for backwards compatibility, do not trigger failure */ 939 wpa_printf(MSG_INFO, "DEPRECATED: '%s' not used", name); 940 return 0; 941 } 942 943 queue = &conf->tx_queue[num]; 944 945 if (os_strcmp(pos, "aifs") == 0) { 946 queue->aifs = atoi(val); 947 if (queue->aifs < 0 || queue->aifs > 255) { 948 wpa_printf(MSG_ERROR, "Invalid AIFS value %d", 949 queue->aifs); 950 return -1; 951 } 952 } else if (os_strcmp(pos, "cwmin") == 0) { 953 queue->cwmin = atoi(val); 954 if (!valid_cw(queue->cwmin)) { 955 wpa_printf(MSG_ERROR, "Invalid cwMin value %d", 956 queue->cwmin); 957 return -1; 958 } 959 } else if (os_strcmp(pos, "cwmax") == 0) { 960 queue->cwmax = atoi(val); 961 if (!valid_cw(queue->cwmax)) { 962 wpa_printf(MSG_ERROR, "Invalid cwMax value %d", 963 queue->cwmax); 964 return -1; 965 } 966 } else if (os_strcmp(pos, "burst") == 0) { 967 queue->burst = hostapd_config_read_int10(val); 968 } else { 969 wpa_printf(MSG_ERROR, "Unknown tx_queue field '%s'", pos); 970 return -1; 971 } 972 973 return 0; 974 } 975 976 977 #ifdef CONFIG_IEEE80211R 978 static int add_r0kh(struct hostapd_bss_config *bss, char *value) 979 { 980 struct ft_remote_r0kh *r0kh; 981 char *pos, *next; 982 983 r0kh = os_zalloc(sizeof(*r0kh)); 984 if (r0kh == NULL) 985 return -1; 986 987 /* 02:01:02:03:04:05 a.example.com 000102030405060708090a0b0c0d0e0f */ 988 pos = value; 989 next = os_strchr(pos, ' '); 990 if (next) 991 *next++ = '\0'; 992 if (next == NULL || hwaddr_aton(pos, r0kh->addr)) { 993 wpa_printf(MSG_ERROR, "Invalid R0KH MAC address: '%s'", pos); 994 os_free(r0kh); 995 return -1; 996 } 997 998 pos = next; 999 next = os_strchr(pos, ' '); 1000 if (next) 1001 *next++ = '\0'; 1002 if (next == NULL || next - pos > FT_R0KH_ID_MAX_LEN) { 1003 wpa_printf(MSG_ERROR, "Invalid R0KH-ID: '%s'", pos); 1004 os_free(r0kh); 1005 return -1; 1006 } 1007 r0kh->id_len = next - pos - 1; 1008 os_memcpy(r0kh->id, pos, r0kh->id_len); 1009 1010 pos = next; 1011 if (hexstr2bin(pos, r0kh->key, sizeof(r0kh->key))) { 1012 wpa_printf(MSG_ERROR, "Invalid R0KH key: '%s'", pos); 1013 os_free(r0kh); 1014 return -1; 1015 } 1016 1017 r0kh->next = bss->r0kh_list; 1018 bss->r0kh_list = r0kh; 1019 1020 return 0; 1021 } 1022 1023 1024 static int add_r1kh(struct hostapd_bss_config *bss, char *value) 1025 { 1026 struct ft_remote_r1kh *r1kh; 1027 char *pos, *next; 1028 1029 r1kh = os_zalloc(sizeof(*r1kh)); 1030 if (r1kh == NULL) 1031 return -1; 1032 1033 /* 02:01:02:03:04:05 02:01:02:03:04:05 1034 * 000102030405060708090a0b0c0d0e0f */ 1035 pos = value; 1036 next = os_strchr(pos, ' '); 1037 if (next) 1038 *next++ = '\0'; 1039 if (next == NULL || hwaddr_aton(pos, r1kh->addr)) { 1040 wpa_printf(MSG_ERROR, "Invalid R1KH MAC address: '%s'", pos); 1041 os_free(r1kh); 1042 return -1; 1043 } 1044 1045 pos = next; 1046 next = os_strchr(pos, ' '); 1047 if (next) 1048 *next++ = '\0'; 1049 if (next == NULL || hwaddr_aton(pos, r1kh->id)) { 1050 wpa_printf(MSG_ERROR, "Invalid R1KH-ID: '%s'", pos); 1051 os_free(r1kh); 1052 return -1; 1053 } 1054 1055 pos = next; 1056 if (hexstr2bin(pos, r1kh->key, sizeof(r1kh->key))) { 1057 wpa_printf(MSG_ERROR, "Invalid R1KH key: '%s'", pos); 1058 os_free(r1kh); 1059 return -1; 1060 } 1061 1062 r1kh->next = bss->r1kh_list; 1063 bss->r1kh_list = r1kh; 1064 1065 return 0; 1066 } 1067 #endif /* CONFIG_IEEE80211R */ 1068 1069 1070 #ifdef CONFIG_IEEE80211N 1071 static int hostapd_config_ht_capab(struct hostapd_config *conf, 1072 const char *capab) 1073 { 1074 if (os_strstr(capab, "[LDPC]")) 1075 conf->ht_capab |= HT_CAP_INFO_LDPC_CODING_CAP; 1076 if (os_strstr(capab, "[HT40-]")) { 1077 conf->ht_capab |= HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET; 1078 conf->secondary_channel = -1; 1079 } 1080 if (os_strstr(capab, "[HT40+]")) { 1081 conf->ht_capab |= HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET; 1082 conf->secondary_channel = 1; 1083 } 1084 if (os_strstr(capab, "[SMPS-STATIC]")) { 1085 conf->ht_capab &= ~HT_CAP_INFO_SMPS_MASK; 1086 conf->ht_capab |= HT_CAP_INFO_SMPS_STATIC; 1087 } 1088 if (os_strstr(capab, "[SMPS-DYNAMIC]")) { 1089 conf->ht_capab &= ~HT_CAP_INFO_SMPS_MASK; 1090 conf->ht_capab |= HT_CAP_INFO_SMPS_DYNAMIC; 1091 } 1092 if (os_strstr(capab, "[GF]")) 1093 conf->ht_capab |= HT_CAP_INFO_GREEN_FIELD; 1094 if (os_strstr(capab, "[SHORT-GI-20]")) 1095 conf->ht_capab |= HT_CAP_INFO_SHORT_GI20MHZ; 1096 if (os_strstr(capab, "[SHORT-GI-40]")) 1097 conf->ht_capab |= HT_CAP_INFO_SHORT_GI40MHZ; 1098 if (os_strstr(capab, "[TX-STBC]")) 1099 conf->ht_capab |= HT_CAP_INFO_TX_STBC; 1100 if (os_strstr(capab, "[RX-STBC1]")) { 1101 conf->ht_capab &= ~HT_CAP_INFO_RX_STBC_MASK; 1102 conf->ht_capab |= HT_CAP_INFO_RX_STBC_1; 1103 } 1104 if (os_strstr(capab, "[RX-STBC12]")) { 1105 conf->ht_capab &= ~HT_CAP_INFO_RX_STBC_MASK; 1106 conf->ht_capab |= HT_CAP_INFO_RX_STBC_12; 1107 } 1108 if (os_strstr(capab, "[RX-STBC123]")) { 1109 conf->ht_capab &= ~HT_CAP_INFO_RX_STBC_MASK; 1110 conf->ht_capab |= HT_CAP_INFO_RX_STBC_123; 1111 } 1112 if (os_strstr(capab, "[DELAYED-BA]")) 1113 conf->ht_capab |= HT_CAP_INFO_DELAYED_BA; 1114 if (os_strstr(capab, "[MAX-AMSDU-7935]")) 1115 conf->ht_capab |= HT_CAP_INFO_MAX_AMSDU_SIZE; 1116 if (os_strstr(capab, "[DSSS_CCK-40]")) 1117 conf->ht_capab |= HT_CAP_INFO_DSSS_CCK40MHZ; 1118 if (os_strstr(capab, "[40-INTOLERANT]")) 1119 conf->ht_capab |= HT_CAP_INFO_40MHZ_INTOLERANT; 1120 if (os_strstr(capab, "[LSIG-TXOP-PROT]")) 1121 conf->ht_capab |= HT_CAP_INFO_LSIG_TXOP_PROTECT_SUPPORT; 1122 1123 return 0; 1124 } 1125 #endif /* CONFIG_IEEE80211N */ 1126 1127 1128 #ifdef CONFIG_IEEE80211AC 1129 static int hostapd_config_vht_capab(struct hostapd_config *conf, 1130 const char *capab) 1131 { 1132 if (os_strstr(capab, "[MAX-MPDU-7991]")) 1133 conf->vht_capab |= VHT_CAP_MAX_MPDU_LENGTH_7991; 1134 if (os_strstr(capab, "[MAX-MPDU-11454]")) 1135 conf->vht_capab |= VHT_CAP_MAX_MPDU_LENGTH_11454; 1136 if (os_strstr(capab, "[VHT160]")) 1137 conf->vht_capab |= VHT_CAP_SUPP_CHAN_WIDTH_160MHZ; 1138 if (os_strstr(capab, "[VHT160-80PLUS80]")) 1139 conf->vht_capab |= VHT_CAP_SUPP_CHAN_WIDTH_160_80PLUS80MHZ; 1140 if (os_strstr(capab, "[RXLDPC]")) 1141 conf->vht_capab |= VHT_CAP_RXLDPC; 1142 if (os_strstr(capab, "[SHORT-GI-80]")) 1143 conf->vht_capab |= VHT_CAP_SHORT_GI_80; 1144 if (os_strstr(capab, "[SHORT-GI-160]")) 1145 conf->vht_capab |= VHT_CAP_SHORT_GI_160; 1146 if (os_strstr(capab, "[TX-STBC-2BY1]")) 1147 conf->vht_capab |= VHT_CAP_TXSTBC; 1148 if (os_strstr(capab, "[RX-STBC-1]")) 1149 conf->vht_capab |= VHT_CAP_RXSTBC_1; 1150 if (os_strstr(capab, "[RX-STBC-12]")) 1151 conf->vht_capab |= VHT_CAP_RXSTBC_2; 1152 if (os_strstr(capab, "[RX-STBC-123]")) 1153 conf->vht_capab |= VHT_CAP_RXSTBC_3; 1154 if (os_strstr(capab, "[RX-STBC-1234]")) 1155 conf->vht_capab |= VHT_CAP_RXSTBC_4; 1156 if (os_strstr(capab, "[SU-BEAMFORMER]")) 1157 conf->vht_capab |= VHT_CAP_SU_BEAMFORMER_CAPABLE; 1158 if (os_strstr(capab, "[SU-BEAMFORMEE]")) 1159 conf->vht_capab |= VHT_CAP_SU_BEAMFORMEE_CAPABLE; 1160 if (os_strstr(capab, "[BF-ANTENNA-2]") && 1161 (conf->vht_capab & VHT_CAP_SU_BEAMFORMEE_CAPABLE)) 1162 conf->vht_capab |= (1 << VHT_CAP_BEAMFORMEE_STS_OFFSET); 1163 if (os_strstr(capab, "[SOUNDING-DIMENSION-2]") && 1164 (conf->vht_capab & VHT_CAP_SU_BEAMFORMER_CAPABLE)) 1165 conf->vht_capab |= (1 << VHT_CAP_SOUNDING_DIMENSION_OFFSET); 1166 if (os_strstr(capab, "[MU-BEAMFORMER]")) 1167 conf->vht_capab |= VHT_CAP_MU_BEAMFORMER_CAPABLE; 1168 if (os_strstr(capab, "[VHT-TXOP-PS]")) 1169 conf->vht_capab |= VHT_CAP_VHT_TXOP_PS; 1170 if (os_strstr(capab, "[HTC-VHT]")) 1171 conf->vht_capab |= VHT_CAP_HTC_VHT; 1172 if (os_strstr(capab, "[MAX-A-MPDU-LEN-EXP7]")) 1173 conf->vht_capab |= VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_MAX; 1174 else if (os_strstr(capab, "[MAX-A-MPDU-LEN-EXP6]")) 1175 conf->vht_capab |= VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_6; 1176 else if (os_strstr(capab, "[MAX-A-MPDU-LEN-EXP5]")) 1177 conf->vht_capab |= VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_5; 1178 else if (os_strstr(capab, "[MAX-A-MPDU-LEN-EXP4]")) 1179 conf->vht_capab |= VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_4; 1180 else if (os_strstr(capab, "[MAX-A-MPDU-LEN-EXP3]")) 1181 conf->vht_capab |= VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_3; 1182 else if (os_strstr(capab, "[MAX-A-MPDU-LEN-EXP2]")) 1183 conf->vht_capab |= VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_2; 1184 else if (os_strstr(capab, "[MAX-A-MPDU-LEN-EXP1]")) 1185 conf->vht_capab |= VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_1; 1186 if (os_strstr(capab, "[VHT-LINK-ADAPT2]") && 1187 (conf->vht_capab & VHT_CAP_HTC_VHT)) 1188 conf->vht_capab |= VHT_CAP_VHT_LINK_ADAPTATION_VHT_UNSOL_MFB; 1189 if (os_strstr(capab, "[VHT-LINK-ADAPT3]") && 1190 (conf->vht_capab & VHT_CAP_HTC_VHT)) 1191 conf->vht_capab |= VHT_CAP_VHT_LINK_ADAPTATION_VHT_MRQ_MFB; 1192 if (os_strstr(capab, "[RX-ANTENNA-PATTERN]")) 1193 conf->vht_capab |= VHT_CAP_RX_ANTENNA_PATTERN; 1194 if (os_strstr(capab, "[TX-ANTENNA-PATTERN]")) 1195 conf->vht_capab |= VHT_CAP_TX_ANTENNA_PATTERN; 1196 return 0; 1197 } 1198 #endif /* CONFIG_IEEE80211AC */ 1199 1200 1201 #ifdef CONFIG_INTERWORKING 1202 static int parse_roaming_consortium(struct hostapd_bss_config *bss, char *pos, 1203 int line) 1204 { 1205 size_t len = os_strlen(pos); 1206 u8 oi[MAX_ROAMING_CONSORTIUM_LEN]; 1207 1208 struct hostapd_roaming_consortium *rc; 1209 1210 if ((len & 1) || len < 2 * 3 || len / 2 > MAX_ROAMING_CONSORTIUM_LEN || 1211 hexstr2bin(pos, oi, len / 2)) { 1212 wpa_printf(MSG_ERROR, "Line %d: invalid roaming_consortium " 1213 "'%s'", line, pos); 1214 return -1; 1215 } 1216 len /= 2; 1217 1218 rc = os_realloc_array(bss->roaming_consortium, 1219 bss->roaming_consortium_count + 1, 1220 sizeof(struct hostapd_roaming_consortium)); 1221 if (rc == NULL) 1222 return -1; 1223 1224 os_memcpy(rc[bss->roaming_consortium_count].oi, oi, len); 1225 rc[bss->roaming_consortium_count].len = len; 1226 1227 bss->roaming_consortium = rc; 1228 bss->roaming_consortium_count++; 1229 1230 return 0; 1231 } 1232 1233 1234 static int parse_lang_string(struct hostapd_lang_string **array, 1235 unsigned int *count, char *pos) 1236 { 1237 char *sep, *str = NULL; 1238 size_t clen, nlen, slen; 1239 struct hostapd_lang_string *ls; 1240 int ret = -1; 1241 1242 if (*pos == '"' || (*pos == 'P' && pos[1] == '"')) { 1243 str = wpa_config_parse_string(pos, &slen); 1244 if (!str) 1245 return -1; 1246 pos = str; 1247 } 1248 1249 sep = os_strchr(pos, ':'); 1250 if (sep == NULL) 1251 goto fail; 1252 *sep++ = '\0'; 1253 1254 clen = os_strlen(pos); 1255 if (clen < 2 || clen > sizeof(ls->lang)) 1256 goto fail; 1257 nlen = os_strlen(sep); 1258 if (nlen > 252) 1259 goto fail; 1260 1261 ls = os_realloc_array(*array, *count + 1, 1262 sizeof(struct hostapd_lang_string)); 1263 if (ls == NULL) 1264 goto fail; 1265 1266 *array = ls; 1267 ls = &(*array)[*count]; 1268 (*count)++; 1269 1270 os_memset(ls->lang, 0, sizeof(ls->lang)); 1271 os_memcpy(ls->lang, pos, clen); 1272 ls->name_len = nlen; 1273 os_memcpy(ls->name, sep, nlen); 1274 1275 ret = 0; 1276 fail: 1277 os_free(str); 1278 return ret; 1279 } 1280 1281 1282 static int parse_venue_name(struct hostapd_bss_config *bss, char *pos, 1283 int line) 1284 { 1285 if (parse_lang_string(&bss->venue_name, &bss->venue_name_count, pos)) { 1286 wpa_printf(MSG_ERROR, "Line %d: Invalid venue_name '%s'", 1287 line, pos); 1288 return -1; 1289 } 1290 return 0; 1291 } 1292 1293 1294 static int parse_3gpp_cell_net(struct hostapd_bss_config *bss, char *buf, 1295 int line) 1296 { 1297 size_t count; 1298 char *pos; 1299 u8 *info = NULL, *ipos; 1300 1301 /* format: <MCC1,MNC1>[;<MCC2,MNC2>][;...] */ 1302 1303 count = 1; 1304 for (pos = buf; *pos; pos++) { 1305 if ((*pos < '0' || *pos > '9') && *pos != ';' && *pos != ',') 1306 goto fail; 1307 if (*pos == ';') 1308 count++; 1309 } 1310 if (1 + count * 3 > 0x7f) 1311 goto fail; 1312 1313 info = os_zalloc(2 + 3 + count * 3); 1314 if (info == NULL) 1315 return -1; 1316 1317 ipos = info; 1318 *ipos++ = 0; /* GUD - Version 1 */ 1319 *ipos++ = 3 + count * 3; /* User Data Header Length (UDHL) */ 1320 *ipos++ = 0; /* PLMN List IEI */ 1321 /* ext(b8) | Length of PLMN List value contents(b7..1) */ 1322 *ipos++ = 1 + count * 3; 1323 *ipos++ = count; /* Number of PLMNs */ 1324 1325 pos = buf; 1326 while (pos && *pos) { 1327 char *mcc, *mnc; 1328 size_t mnc_len; 1329 1330 mcc = pos; 1331 mnc = os_strchr(pos, ','); 1332 if (mnc == NULL) 1333 goto fail; 1334 *mnc++ = '\0'; 1335 pos = os_strchr(mnc, ';'); 1336 if (pos) 1337 *pos++ = '\0'; 1338 1339 mnc_len = os_strlen(mnc); 1340 if (os_strlen(mcc) != 3 || (mnc_len != 2 && mnc_len != 3)) 1341 goto fail; 1342 1343 /* BC coded MCC,MNC */ 1344 /* MCC digit 2 | MCC digit 1 */ 1345 *ipos++ = ((mcc[1] - '0') << 4) | (mcc[0] - '0'); 1346 /* MNC digit 3 | MCC digit 3 */ 1347 *ipos++ = (((mnc_len == 2) ? 0xf0 : ((mnc[2] - '0') << 4))) | 1348 (mcc[2] - '0'); 1349 /* MNC digit 2 | MNC digit 1 */ 1350 *ipos++ = ((mnc[1] - '0') << 4) | (mnc[0] - '0'); 1351 } 1352 1353 os_free(bss->anqp_3gpp_cell_net); 1354 bss->anqp_3gpp_cell_net = info; 1355 bss->anqp_3gpp_cell_net_len = 2 + 3 + 3 * count; 1356 wpa_hexdump(MSG_MSGDUMP, "3GPP Cellular Network information", 1357 bss->anqp_3gpp_cell_net, bss->anqp_3gpp_cell_net_len); 1358 1359 return 0; 1360 1361 fail: 1362 wpa_printf(MSG_ERROR, "Line %d: Invalid anqp_3gpp_cell_net: %s", 1363 line, buf); 1364 os_free(info); 1365 return -1; 1366 } 1367 1368 1369 static int parse_nai_realm(struct hostapd_bss_config *bss, char *buf, int line) 1370 { 1371 struct hostapd_nai_realm_data *realm; 1372 size_t i, j, len; 1373 int *offsets; 1374 char *pos, *end, *rpos; 1375 1376 offsets = os_calloc(bss->nai_realm_count * MAX_NAI_REALMS, 1377 sizeof(int)); 1378 if (offsets == NULL) 1379 return -1; 1380 1381 for (i = 0; i < bss->nai_realm_count; i++) { 1382 realm = &bss->nai_realm_data[i]; 1383 for (j = 0; j < MAX_NAI_REALMS; j++) { 1384 offsets[i * MAX_NAI_REALMS + j] = 1385 realm->realm[j] ? 1386 realm->realm[j] - realm->realm_buf : -1; 1387 } 1388 } 1389 1390 realm = os_realloc_array(bss->nai_realm_data, bss->nai_realm_count + 1, 1391 sizeof(struct hostapd_nai_realm_data)); 1392 if (realm == NULL) { 1393 os_free(offsets); 1394 return -1; 1395 } 1396 bss->nai_realm_data = realm; 1397 1398 /* patch the pointers after realloc */ 1399 for (i = 0; i < bss->nai_realm_count; i++) { 1400 realm = &bss->nai_realm_data[i]; 1401 for (j = 0; j < MAX_NAI_REALMS; j++) { 1402 int offs = offsets[i * MAX_NAI_REALMS + j]; 1403 if (offs >= 0) 1404 realm->realm[j] = realm->realm_buf + offs; 1405 else 1406 realm->realm[j] = NULL; 1407 } 1408 } 1409 os_free(offsets); 1410 1411 realm = &bss->nai_realm_data[bss->nai_realm_count]; 1412 os_memset(realm, 0, sizeof(*realm)); 1413 1414 pos = buf; 1415 realm->encoding = atoi(pos); 1416 pos = os_strchr(pos, ','); 1417 if (pos == NULL) 1418 goto fail; 1419 pos++; 1420 1421 end = os_strchr(pos, ','); 1422 if (end) { 1423 len = end - pos; 1424 *end = '\0'; 1425 } else { 1426 len = os_strlen(pos); 1427 } 1428 1429 if (len > MAX_NAI_REALMLEN) { 1430 wpa_printf(MSG_ERROR, "Too long a realm string (%d > max %d " 1431 "characters)", (int) len, MAX_NAI_REALMLEN); 1432 goto fail; 1433 } 1434 os_memcpy(realm->realm_buf, pos, len); 1435 1436 if (end) 1437 pos = end + 1; 1438 else 1439 pos = NULL; 1440 1441 while (pos && *pos) { 1442 struct hostapd_nai_realm_eap *eap; 1443 1444 if (realm->eap_method_count >= MAX_NAI_EAP_METHODS) { 1445 wpa_printf(MSG_ERROR, "Too many EAP methods"); 1446 goto fail; 1447 } 1448 1449 eap = &realm->eap_method[realm->eap_method_count]; 1450 realm->eap_method_count++; 1451 1452 end = os_strchr(pos, ','); 1453 if (end == NULL) 1454 end = pos + os_strlen(pos); 1455 1456 eap->eap_method = atoi(pos); 1457 for (;;) { 1458 pos = os_strchr(pos, '['); 1459 if (pos == NULL || pos > end) 1460 break; 1461 pos++; 1462 if (eap->num_auths >= MAX_NAI_AUTH_TYPES) { 1463 wpa_printf(MSG_ERROR, "Too many auth params"); 1464 goto fail; 1465 } 1466 eap->auth_id[eap->num_auths] = atoi(pos); 1467 pos = os_strchr(pos, ':'); 1468 if (pos == NULL || pos > end) 1469 goto fail; 1470 pos++; 1471 eap->auth_val[eap->num_auths] = atoi(pos); 1472 pos = os_strchr(pos, ']'); 1473 if (pos == NULL || pos > end) 1474 goto fail; 1475 pos++; 1476 eap->num_auths++; 1477 } 1478 1479 if (*end != ',') 1480 break; 1481 1482 pos = end + 1; 1483 } 1484 1485 /* Split realm list into null terminated realms */ 1486 rpos = realm->realm_buf; 1487 i = 0; 1488 while (*rpos) { 1489 if (i >= MAX_NAI_REALMS) { 1490 wpa_printf(MSG_ERROR, "Too many realms"); 1491 goto fail; 1492 } 1493 realm->realm[i++] = rpos; 1494 rpos = os_strchr(rpos, ';'); 1495 if (rpos == NULL) 1496 break; 1497 *rpos++ = '\0'; 1498 } 1499 1500 bss->nai_realm_count++; 1501 1502 return 0; 1503 1504 fail: 1505 wpa_printf(MSG_ERROR, "Line %d: invalid nai_realm '%s'", line, buf); 1506 return -1; 1507 } 1508 1509 1510 static int parse_qos_map_set(struct hostapd_bss_config *bss, 1511 char *buf, int line) 1512 { 1513 u8 qos_map_set[16 + 2 * 21], count = 0; 1514 char *pos = buf; 1515 int val; 1516 1517 for (;;) { 1518 if (count == sizeof(qos_map_set)) { 1519 wpa_printf(MSG_ERROR, "Line %d: Too many qos_map_set " 1520 "parameters '%s'", line, buf); 1521 return -1; 1522 } 1523 1524 val = atoi(pos); 1525 if (val > 255 || val < 0) { 1526 wpa_printf(MSG_ERROR, "Line %d: Invalid qos_map_set " 1527 "'%s'", line, buf); 1528 return -1; 1529 } 1530 1531 qos_map_set[count++] = val; 1532 pos = os_strchr(pos, ','); 1533 if (!pos) 1534 break; 1535 pos++; 1536 } 1537 1538 if (count < 16 || count & 1) { 1539 wpa_printf(MSG_ERROR, "Line %d: Invalid qos_map_set '%s'", 1540 line, buf); 1541 return -1; 1542 } 1543 1544 os_memcpy(bss->qos_map_set, qos_map_set, count); 1545 bss->qos_map_set_len = count; 1546 1547 return 0; 1548 } 1549 1550 #endif /* CONFIG_INTERWORKING */ 1551 1552 1553 #ifdef CONFIG_HS20 1554 static int hs20_parse_conn_capab(struct hostapd_bss_config *bss, char *buf, 1555 int line) 1556 { 1557 u8 *conn_cap; 1558 char *pos; 1559 1560 if (bss->hs20_connection_capability_len >= 0xfff0) 1561 return -1; 1562 1563 conn_cap = os_realloc(bss->hs20_connection_capability, 1564 bss->hs20_connection_capability_len + 4); 1565 if (conn_cap == NULL) 1566 return -1; 1567 1568 bss->hs20_connection_capability = conn_cap; 1569 conn_cap += bss->hs20_connection_capability_len; 1570 pos = buf; 1571 conn_cap[0] = atoi(pos); 1572 pos = os_strchr(pos, ':'); 1573 if (pos == NULL) 1574 return -1; 1575 pos++; 1576 WPA_PUT_LE16(conn_cap + 1, atoi(pos)); 1577 pos = os_strchr(pos, ':'); 1578 if (pos == NULL) 1579 return -1; 1580 pos++; 1581 conn_cap[3] = atoi(pos); 1582 bss->hs20_connection_capability_len += 4; 1583 1584 return 0; 1585 } 1586 1587 1588 static int hs20_parse_wan_metrics(struct hostapd_bss_config *bss, char *buf, 1589 int line) 1590 { 1591 u8 *wan_metrics; 1592 char *pos; 1593 1594 /* <WAN Info>:<DL Speed>:<UL Speed>:<DL Load>:<UL Load>:<LMD> */ 1595 1596 wan_metrics = os_zalloc(13); 1597 if (wan_metrics == NULL) 1598 return -1; 1599 1600 pos = buf; 1601 /* WAN Info */ 1602 if (hexstr2bin(pos, wan_metrics, 1) < 0) 1603 goto fail; 1604 pos += 2; 1605 if (*pos != ':') 1606 goto fail; 1607 pos++; 1608 1609 /* Downlink Speed */ 1610 WPA_PUT_LE32(wan_metrics + 1, atoi(pos)); 1611 pos = os_strchr(pos, ':'); 1612 if (pos == NULL) 1613 goto fail; 1614 pos++; 1615 1616 /* Uplink Speed */ 1617 WPA_PUT_LE32(wan_metrics + 5, atoi(pos)); 1618 pos = os_strchr(pos, ':'); 1619 if (pos == NULL) 1620 goto fail; 1621 pos++; 1622 1623 /* Downlink Load */ 1624 wan_metrics[9] = atoi(pos); 1625 pos = os_strchr(pos, ':'); 1626 if (pos == NULL) 1627 goto fail; 1628 pos++; 1629 1630 /* Uplink Load */ 1631 wan_metrics[10] = atoi(pos); 1632 pos = os_strchr(pos, ':'); 1633 if (pos == NULL) 1634 goto fail; 1635 pos++; 1636 1637 /* LMD */ 1638 WPA_PUT_LE16(wan_metrics + 11, atoi(pos)); 1639 1640 os_free(bss->hs20_wan_metrics); 1641 bss->hs20_wan_metrics = wan_metrics; 1642 1643 return 0; 1644 1645 fail: 1646 wpa_printf(MSG_ERROR, "Line %d: Invalid hs20_wan_metrics '%s'", 1647 line, buf); 1648 os_free(wan_metrics); 1649 return -1; 1650 } 1651 1652 1653 static int hs20_parse_oper_friendly_name(struct hostapd_bss_config *bss, 1654 char *pos, int line) 1655 { 1656 if (parse_lang_string(&bss->hs20_oper_friendly_name, 1657 &bss->hs20_oper_friendly_name_count, pos)) { 1658 wpa_printf(MSG_ERROR, "Line %d: Invalid " 1659 "hs20_oper_friendly_name '%s'", line, pos); 1660 return -1; 1661 } 1662 return 0; 1663 } 1664 1665 1666 static int hs20_parse_icon(struct hostapd_bss_config *bss, char *pos) 1667 { 1668 struct hs20_icon *icon; 1669 char *end; 1670 1671 icon = os_realloc_array(bss->hs20_icons, bss->hs20_icons_count + 1, 1672 sizeof(struct hs20_icon)); 1673 if (icon == NULL) 1674 return -1; 1675 bss->hs20_icons = icon; 1676 icon = &bss->hs20_icons[bss->hs20_icons_count]; 1677 os_memset(icon, 0, sizeof(*icon)); 1678 1679 icon->width = atoi(pos); 1680 pos = os_strchr(pos, ':'); 1681 if (pos == NULL) 1682 return -1; 1683 pos++; 1684 1685 icon->height = atoi(pos); 1686 pos = os_strchr(pos, ':'); 1687 if (pos == NULL) 1688 return -1; 1689 pos++; 1690 1691 end = os_strchr(pos, ':'); 1692 if (end == NULL || end - pos > 3) 1693 return -1; 1694 os_memcpy(icon->language, pos, end - pos); 1695 pos = end + 1; 1696 1697 end = os_strchr(pos, ':'); 1698 if (end == NULL || end - pos > 255) 1699 return -1; 1700 os_memcpy(icon->type, pos, end - pos); 1701 pos = end + 1; 1702 1703 end = os_strchr(pos, ':'); 1704 if (end == NULL || end - pos > 255) 1705 return -1; 1706 os_memcpy(icon->name, pos, end - pos); 1707 pos = end + 1; 1708 1709 if (os_strlen(pos) > 255) 1710 return -1; 1711 os_memcpy(icon->file, pos, os_strlen(pos)); 1712 1713 bss->hs20_icons_count++; 1714 1715 return 0; 1716 } 1717 1718 1719 static int hs20_parse_osu_ssid(struct hostapd_bss_config *bss, 1720 char *pos, int line) 1721 { 1722 size_t slen; 1723 char *str; 1724 1725 str = wpa_config_parse_string(pos, &slen); 1726 if (str == NULL || slen < 1 || slen > SSID_MAX_LEN) { 1727 wpa_printf(MSG_ERROR, "Line %d: Invalid SSID '%s'", line, pos); 1728 os_free(str); 1729 return -1; 1730 } 1731 1732 os_memcpy(bss->osu_ssid, str, slen); 1733 bss->osu_ssid_len = slen; 1734 os_free(str); 1735 1736 return 0; 1737 } 1738 1739 1740 static int hs20_parse_osu_server_uri(struct hostapd_bss_config *bss, 1741 char *pos, int line) 1742 { 1743 struct hs20_osu_provider *p; 1744 1745 p = os_realloc_array(bss->hs20_osu_providers, 1746 bss->hs20_osu_providers_count + 1, sizeof(*p)); 1747 if (p == NULL) 1748 return -1; 1749 1750 bss->hs20_osu_providers = p; 1751 bss->last_osu = &bss->hs20_osu_providers[bss->hs20_osu_providers_count]; 1752 bss->hs20_osu_providers_count++; 1753 os_memset(bss->last_osu, 0, sizeof(*p)); 1754 bss->last_osu->server_uri = os_strdup(pos); 1755 1756 return 0; 1757 } 1758 1759 1760 static int hs20_parse_osu_friendly_name(struct hostapd_bss_config *bss, 1761 char *pos, int line) 1762 { 1763 if (bss->last_osu == NULL) { 1764 wpa_printf(MSG_ERROR, "Line %d: Unexpected OSU field", line); 1765 return -1; 1766 } 1767 1768 if (parse_lang_string(&bss->last_osu->friendly_name, 1769 &bss->last_osu->friendly_name_count, pos)) { 1770 wpa_printf(MSG_ERROR, "Line %d: Invalid osu_friendly_name '%s'", 1771 line, pos); 1772 return -1; 1773 } 1774 1775 return 0; 1776 } 1777 1778 1779 static int hs20_parse_osu_nai(struct hostapd_bss_config *bss, 1780 char *pos, int line) 1781 { 1782 if (bss->last_osu == NULL) { 1783 wpa_printf(MSG_ERROR, "Line %d: Unexpected OSU field", line); 1784 return -1; 1785 } 1786 1787 os_free(bss->last_osu->osu_nai); 1788 bss->last_osu->osu_nai = os_strdup(pos); 1789 if (bss->last_osu->osu_nai == NULL) 1790 return -1; 1791 1792 return 0; 1793 } 1794 1795 1796 static int hs20_parse_osu_method_list(struct hostapd_bss_config *bss, char *pos, 1797 int line) 1798 { 1799 if (bss->last_osu == NULL) { 1800 wpa_printf(MSG_ERROR, "Line %d: Unexpected OSU field", line); 1801 return -1; 1802 } 1803 1804 if (hostapd_parse_intlist(&bss->last_osu->method_list, pos)) { 1805 wpa_printf(MSG_ERROR, "Line %d: Invalid osu_method_list", line); 1806 return -1; 1807 } 1808 1809 return 0; 1810 } 1811 1812 1813 static int hs20_parse_osu_icon(struct hostapd_bss_config *bss, char *pos, 1814 int line) 1815 { 1816 char **n; 1817 struct hs20_osu_provider *p = bss->last_osu; 1818 1819 if (p == NULL) { 1820 wpa_printf(MSG_ERROR, "Line %d: Unexpected OSU field", line); 1821 return -1; 1822 } 1823 1824 n = os_realloc_array(p->icons, p->icons_count + 1, sizeof(char *)); 1825 if (n == NULL) 1826 return -1; 1827 p->icons = n; 1828 p->icons[p->icons_count] = os_strdup(pos); 1829 if (p->icons[p->icons_count] == NULL) 1830 return -1; 1831 p->icons_count++; 1832 1833 return 0; 1834 } 1835 1836 1837 static int hs20_parse_osu_service_desc(struct hostapd_bss_config *bss, 1838 char *pos, int line) 1839 { 1840 if (bss->last_osu == NULL) { 1841 wpa_printf(MSG_ERROR, "Line %d: Unexpected OSU field", line); 1842 return -1; 1843 } 1844 1845 if (parse_lang_string(&bss->last_osu->service_desc, 1846 &bss->last_osu->service_desc_count, pos)) { 1847 wpa_printf(MSG_ERROR, "Line %d: Invalid osu_service_desc '%s'", 1848 line, pos); 1849 return -1; 1850 } 1851 1852 return 0; 1853 } 1854 1855 #endif /* CONFIG_HS20 */ 1856 1857 1858 #ifdef CONFIG_WPS_NFC 1859 static struct wpabuf * hostapd_parse_bin(const char *buf) 1860 { 1861 size_t len; 1862 struct wpabuf *ret; 1863 1864 len = os_strlen(buf); 1865 if (len & 0x01) 1866 return NULL; 1867 len /= 2; 1868 1869 ret = wpabuf_alloc(len); 1870 if (ret == NULL) 1871 return NULL; 1872 1873 if (hexstr2bin(buf, wpabuf_put(ret, len), len)) { 1874 wpabuf_free(ret); 1875 return NULL; 1876 } 1877 1878 return ret; 1879 } 1880 #endif /* CONFIG_WPS_NFC */ 1881 1882 1883 #ifdef CONFIG_ACS 1884 static int hostapd_config_parse_acs_chan_bias(struct hostapd_config *conf, 1885 char *pos) 1886 { 1887 struct acs_bias *bias = NULL, *tmp; 1888 unsigned int num = 0; 1889 char *end; 1890 1891 while (*pos) { 1892 tmp = os_realloc_array(bias, num + 1, sizeof(*bias)); 1893 if (!tmp) 1894 goto fail; 1895 bias = tmp; 1896 1897 bias[num].channel = atoi(pos); 1898 if (bias[num].channel <= 0) 1899 goto fail; 1900 pos = os_strchr(pos, ':'); 1901 if (!pos) 1902 goto fail; 1903 pos++; 1904 bias[num].bias = strtod(pos, &end); 1905 if (end == pos || bias[num].bias < 0.0) 1906 goto fail; 1907 pos = end; 1908 if (*pos != ' ' && *pos != '\0') 1909 goto fail; 1910 num++; 1911 } 1912 1913 os_free(conf->acs_chan_bias); 1914 conf->acs_chan_bias = bias; 1915 conf->num_acs_chan_bias = num; 1916 1917 return 0; 1918 fail: 1919 os_free(bias); 1920 return -1; 1921 } 1922 #endif /* CONFIG_ACS */ 1923 1924 1925 static int hostapd_config_fill(struct hostapd_config *conf, 1926 struct hostapd_bss_config *bss, 1927 char *buf, char *pos, int line) 1928 { 1929 if (os_strcmp(buf, "interface") == 0) { 1930 os_strlcpy(conf->bss[0]->iface, pos, 1931 sizeof(conf->bss[0]->iface)); 1932 } else if (os_strcmp(buf, "bridge") == 0) { 1933 os_strlcpy(bss->bridge, pos, sizeof(bss->bridge)); 1934 } else if (os_strcmp(buf, "vlan_bridge") == 0) { 1935 os_strlcpy(bss->vlan_bridge, pos, sizeof(bss->vlan_bridge)); 1936 } else if (os_strcmp(buf, "wds_bridge") == 0) { 1937 os_strlcpy(bss->wds_bridge, pos, sizeof(bss->wds_bridge)); 1938 } else if (os_strcmp(buf, "driver") == 0) { 1939 int j; 1940 /* clear to get error below if setting is invalid */ 1941 conf->driver = NULL; 1942 for (j = 0; wpa_drivers[j]; j++) { 1943 if (os_strcmp(pos, wpa_drivers[j]->name) == 0) { 1944 conf->driver = wpa_drivers[j]; 1945 break; 1946 } 1947 } 1948 if (conf->driver == NULL) { 1949 wpa_printf(MSG_ERROR, 1950 "Line %d: invalid/unknown driver '%s'", 1951 line, pos); 1952 return 1; 1953 } 1954 } else if (os_strcmp(buf, "driver_params") == 0) { 1955 os_free(conf->driver_params); 1956 conf->driver_params = os_strdup(pos); 1957 } else if (os_strcmp(buf, "debug") == 0) { 1958 wpa_printf(MSG_DEBUG, "Line %d: DEPRECATED: 'debug' configuration variable is not used anymore", 1959 line); 1960 } else if (os_strcmp(buf, "logger_syslog_level") == 0) { 1961 bss->logger_syslog_level = atoi(pos); 1962 } else if (os_strcmp(buf, "logger_stdout_level") == 0) { 1963 bss->logger_stdout_level = atoi(pos); 1964 } else if (os_strcmp(buf, "logger_syslog") == 0) { 1965 bss->logger_syslog = atoi(pos); 1966 } else if (os_strcmp(buf, "logger_stdout") == 0) { 1967 bss->logger_stdout = atoi(pos); 1968 } else if (os_strcmp(buf, "dump_file") == 0) { 1969 wpa_printf(MSG_INFO, "Line %d: DEPRECATED: 'dump_file' configuration variable is not used anymore", 1970 line); 1971 } else if (os_strcmp(buf, "ssid") == 0) { 1972 bss->ssid.ssid_len = os_strlen(pos); 1973 if (bss->ssid.ssid_len > SSID_MAX_LEN || 1974 bss->ssid.ssid_len < 1) { 1975 wpa_printf(MSG_ERROR, "Line %d: invalid SSID '%s'", 1976 line, pos); 1977 return 1; 1978 } 1979 os_memcpy(bss->ssid.ssid, pos, bss->ssid.ssid_len); 1980 bss->ssid.ssid_set = 1; 1981 } else if (os_strcmp(buf, "ssid2") == 0) { 1982 size_t slen; 1983 char *str = wpa_config_parse_string(pos, &slen); 1984 if (str == NULL || slen < 1 || slen > SSID_MAX_LEN) { 1985 wpa_printf(MSG_ERROR, "Line %d: invalid SSID '%s'", 1986 line, pos); 1987 os_free(str); 1988 return 1; 1989 } 1990 os_memcpy(bss->ssid.ssid, str, slen); 1991 bss->ssid.ssid_len = slen; 1992 bss->ssid.ssid_set = 1; 1993 os_free(str); 1994 } else if (os_strcmp(buf, "utf8_ssid") == 0) { 1995 bss->ssid.utf8_ssid = atoi(pos) > 0; 1996 } else if (os_strcmp(buf, "macaddr_acl") == 0) { 1997 bss->macaddr_acl = atoi(pos); 1998 if (bss->macaddr_acl != ACCEPT_UNLESS_DENIED && 1999 bss->macaddr_acl != DENY_UNLESS_ACCEPTED && 2000 bss->macaddr_acl != USE_EXTERNAL_RADIUS_AUTH) { 2001 wpa_printf(MSG_ERROR, "Line %d: unknown macaddr_acl %d", 2002 line, bss->macaddr_acl); 2003 } 2004 } else if (os_strcmp(buf, "accept_mac_file") == 0) { 2005 if (hostapd_config_read_maclist(pos, &bss->accept_mac, 2006 &bss->num_accept_mac)) { 2007 wpa_printf(MSG_ERROR, "Line %d: Failed to read accept_mac_file '%s'", 2008 line, pos); 2009 return 1; 2010 } 2011 } else if (os_strcmp(buf, "deny_mac_file") == 0) { 2012 if (hostapd_config_read_maclist(pos, &bss->deny_mac, 2013 &bss->num_deny_mac)) { 2014 wpa_printf(MSG_ERROR, "Line %d: Failed to read deny_mac_file '%s'", 2015 line, pos); 2016 return 1; 2017 } 2018 } else if (os_strcmp(buf, "wds_sta") == 0) { 2019 bss->wds_sta = atoi(pos); 2020 } else if (os_strcmp(buf, "start_disabled") == 0) { 2021 bss->start_disabled = atoi(pos); 2022 } else if (os_strcmp(buf, "ap_isolate") == 0) { 2023 bss->isolate = atoi(pos); 2024 } else if (os_strcmp(buf, "ap_max_inactivity") == 0) { 2025 bss->ap_max_inactivity = atoi(pos); 2026 } else if (os_strcmp(buf, "skip_inactivity_poll") == 0) { 2027 bss->skip_inactivity_poll = atoi(pos); 2028 } else if (os_strcmp(buf, "country_code") == 0) { 2029 os_memcpy(conf->country, pos, 2); 2030 /* FIX: make this configurable */ 2031 conf->country[2] = ' '; 2032 } else if (os_strcmp(buf, "ieee80211d") == 0) { 2033 conf->ieee80211d = atoi(pos); 2034 } else if (os_strcmp(buf, "ieee80211h") == 0) { 2035 conf->ieee80211h = atoi(pos); 2036 } else if (os_strcmp(buf, "ieee8021x") == 0) { 2037 bss->ieee802_1x = atoi(pos); 2038 } else if (os_strcmp(buf, "eapol_version") == 0) { 2039 bss->eapol_version = atoi(pos); 2040 if (bss->eapol_version < 1 || bss->eapol_version > 2) { 2041 wpa_printf(MSG_ERROR, 2042 "Line %d: invalid EAPOL version (%d): '%s'.", 2043 line, bss->eapol_version, pos); 2044 return 1; 2045 } 2046 wpa_printf(MSG_DEBUG, "eapol_version=%d", bss->eapol_version); 2047 #ifdef EAP_SERVER 2048 } else if (os_strcmp(buf, "eap_authenticator") == 0) { 2049 bss->eap_server = atoi(pos); 2050 wpa_printf(MSG_ERROR, "Line %d: obsolete eap_authenticator used; this has been renamed to eap_server", line); 2051 } else if (os_strcmp(buf, "eap_server") == 0) { 2052 bss->eap_server = atoi(pos); 2053 } else if (os_strcmp(buf, "eap_user_file") == 0) { 2054 if (hostapd_config_read_eap_user(pos, bss)) 2055 return 1; 2056 } else if (os_strcmp(buf, "ca_cert") == 0) { 2057 os_free(bss->ca_cert); 2058 bss->ca_cert = os_strdup(pos); 2059 } else if (os_strcmp(buf, "server_cert") == 0) { 2060 os_free(bss->server_cert); 2061 bss->server_cert = os_strdup(pos); 2062 } else if (os_strcmp(buf, "private_key") == 0) { 2063 os_free(bss->private_key); 2064 bss->private_key = os_strdup(pos); 2065 } else if (os_strcmp(buf, "private_key_passwd") == 0) { 2066 os_free(bss->private_key_passwd); 2067 bss->private_key_passwd = os_strdup(pos); 2068 } else if (os_strcmp(buf, "check_crl") == 0) { 2069 bss->check_crl = atoi(pos); 2070 } else if (os_strcmp(buf, "ocsp_stapling_response") == 0) { 2071 os_free(bss->ocsp_stapling_response); 2072 bss->ocsp_stapling_response = os_strdup(pos); 2073 } else if (os_strcmp(buf, "dh_file") == 0) { 2074 os_free(bss->dh_file); 2075 bss->dh_file = os_strdup(pos); 2076 } else if (os_strcmp(buf, "openssl_ciphers") == 0) { 2077 os_free(bss->openssl_ciphers); 2078 bss->openssl_ciphers = os_strdup(pos); 2079 } else if (os_strcmp(buf, "fragment_size") == 0) { 2080 bss->fragment_size = atoi(pos); 2081 #ifdef EAP_SERVER_FAST 2082 } else if (os_strcmp(buf, "pac_opaque_encr_key") == 0) { 2083 os_free(bss->pac_opaque_encr_key); 2084 bss->pac_opaque_encr_key = os_malloc(16); 2085 if (bss->pac_opaque_encr_key == NULL) { 2086 wpa_printf(MSG_ERROR, 2087 "Line %d: No memory for pac_opaque_encr_key", 2088 line); 2089 return 1; 2090 } else if (hexstr2bin(pos, bss->pac_opaque_encr_key, 16)) { 2091 wpa_printf(MSG_ERROR, "Line %d: Invalid pac_opaque_encr_key", 2092 line); 2093 return 1; 2094 } 2095 } else if (os_strcmp(buf, "eap_fast_a_id") == 0) { 2096 size_t idlen = os_strlen(pos); 2097 if (idlen & 1) { 2098 wpa_printf(MSG_ERROR, "Line %d: Invalid eap_fast_a_id", 2099 line); 2100 return 1; 2101 } 2102 os_free(bss->eap_fast_a_id); 2103 bss->eap_fast_a_id = os_malloc(idlen / 2); 2104 if (bss->eap_fast_a_id == NULL || 2105 hexstr2bin(pos, bss->eap_fast_a_id, idlen / 2)) { 2106 wpa_printf(MSG_ERROR, "Line %d: Failed to parse eap_fast_a_id", 2107 line); 2108 os_free(bss->eap_fast_a_id); 2109 bss->eap_fast_a_id = NULL; 2110 return 1; 2111 } else { 2112 bss->eap_fast_a_id_len = idlen / 2; 2113 } 2114 } else if (os_strcmp(buf, "eap_fast_a_id_info") == 0) { 2115 os_free(bss->eap_fast_a_id_info); 2116 bss->eap_fast_a_id_info = os_strdup(pos); 2117 } else if (os_strcmp(buf, "eap_fast_prov") == 0) { 2118 bss->eap_fast_prov = atoi(pos); 2119 } else if (os_strcmp(buf, "pac_key_lifetime") == 0) { 2120 bss->pac_key_lifetime = atoi(pos); 2121 } else if (os_strcmp(buf, "pac_key_refresh_time") == 0) { 2122 bss->pac_key_refresh_time = atoi(pos); 2123 #endif /* EAP_SERVER_FAST */ 2124 #ifdef EAP_SERVER_SIM 2125 } else if (os_strcmp(buf, "eap_sim_db") == 0) { 2126 os_free(bss->eap_sim_db); 2127 bss->eap_sim_db = os_strdup(pos); 2128 } else if (os_strcmp(buf, "eap_sim_aka_result_ind") == 0) { 2129 bss->eap_sim_aka_result_ind = atoi(pos); 2130 #endif /* EAP_SERVER_SIM */ 2131 #ifdef EAP_SERVER_TNC 2132 } else if (os_strcmp(buf, "tnc") == 0) { 2133 bss->tnc = atoi(pos); 2134 #endif /* EAP_SERVER_TNC */ 2135 #ifdef EAP_SERVER_PWD 2136 } else if (os_strcmp(buf, "pwd_group") == 0) { 2137 bss->pwd_group = atoi(pos); 2138 #endif /* EAP_SERVER_PWD */ 2139 } else if (os_strcmp(buf, "eap_server_erp") == 0) { 2140 bss->eap_server_erp = atoi(pos); 2141 #endif /* EAP_SERVER */ 2142 } else if (os_strcmp(buf, "eap_message") == 0) { 2143 char *term; 2144 os_free(bss->eap_req_id_text); 2145 bss->eap_req_id_text = os_strdup(pos); 2146 if (bss->eap_req_id_text == NULL) { 2147 wpa_printf(MSG_ERROR, "Line %d: Failed to allocate memory for eap_req_id_text", 2148 line); 2149 return 1; 2150 } 2151 bss->eap_req_id_text_len = os_strlen(bss->eap_req_id_text); 2152 term = os_strstr(bss->eap_req_id_text, "\\0"); 2153 if (term) { 2154 *term++ = '\0'; 2155 os_memmove(term, term + 1, 2156 bss->eap_req_id_text_len - 2157 (term - bss->eap_req_id_text) - 1); 2158 bss->eap_req_id_text_len--; 2159 } 2160 } else if (os_strcmp(buf, "erp_send_reauth_start") == 0) { 2161 bss->erp_send_reauth_start = atoi(pos); 2162 } else if (os_strcmp(buf, "erp_domain") == 0) { 2163 os_free(bss->erp_domain); 2164 bss->erp_domain = os_strdup(pos); 2165 } else if (os_strcmp(buf, "wep_key_len_broadcast") == 0) { 2166 bss->default_wep_key_len = atoi(pos); 2167 if (bss->default_wep_key_len > 13) { 2168 wpa_printf(MSG_ERROR, "Line %d: invalid WEP key len %lu (= %lu bits)", 2169 line, 2170 (unsigned long) bss->default_wep_key_len, 2171 (unsigned long) 2172 bss->default_wep_key_len * 8); 2173 return 1; 2174 } 2175 } else if (os_strcmp(buf, "wep_key_len_unicast") == 0) { 2176 bss->individual_wep_key_len = atoi(pos); 2177 if (bss->individual_wep_key_len < 0 || 2178 bss->individual_wep_key_len > 13) { 2179 wpa_printf(MSG_ERROR, "Line %d: invalid WEP key len %d (= %d bits)", 2180 line, bss->individual_wep_key_len, 2181 bss->individual_wep_key_len * 8); 2182 return 1; 2183 } 2184 } else if (os_strcmp(buf, "wep_rekey_period") == 0) { 2185 bss->wep_rekeying_period = atoi(pos); 2186 if (bss->wep_rekeying_period < 0) { 2187 wpa_printf(MSG_ERROR, "Line %d: invalid period %d", 2188 line, bss->wep_rekeying_period); 2189 return 1; 2190 } 2191 } else if (os_strcmp(buf, "eap_reauth_period") == 0) { 2192 bss->eap_reauth_period = atoi(pos); 2193 if (bss->eap_reauth_period < 0) { 2194 wpa_printf(MSG_ERROR, "Line %d: invalid period %d", 2195 line, bss->eap_reauth_period); 2196 return 1; 2197 } 2198 } else if (os_strcmp(buf, "eapol_key_index_workaround") == 0) { 2199 bss->eapol_key_index_workaround = atoi(pos); 2200 #ifdef CONFIG_IAPP 2201 } else if (os_strcmp(buf, "iapp_interface") == 0) { 2202 bss->ieee802_11f = 1; 2203 os_strlcpy(bss->iapp_iface, pos, sizeof(bss->iapp_iface)); 2204 #endif /* CONFIG_IAPP */ 2205 } else if (os_strcmp(buf, "own_ip_addr") == 0) { 2206 if (hostapd_parse_ip_addr(pos, &bss->own_ip_addr)) { 2207 wpa_printf(MSG_ERROR, 2208 "Line %d: invalid IP address '%s'", 2209 line, pos); 2210 return 1; 2211 } 2212 } else if (os_strcmp(buf, "nas_identifier") == 0) { 2213 os_free(bss->nas_identifier); 2214 bss->nas_identifier = os_strdup(pos); 2215 #ifndef CONFIG_NO_RADIUS 2216 } else if (os_strcmp(buf, "radius_client_addr") == 0) { 2217 if (hostapd_parse_ip_addr(pos, &bss->radius->client_addr)) { 2218 wpa_printf(MSG_ERROR, 2219 "Line %d: invalid IP address '%s'", 2220 line, pos); 2221 return 1; 2222 } 2223 bss->radius->force_client_addr = 1; 2224 } else if (os_strcmp(buf, "auth_server_addr") == 0) { 2225 if (hostapd_config_read_radius_addr( 2226 &bss->radius->auth_servers, 2227 &bss->radius->num_auth_servers, pos, 1812, 2228 &bss->radius->auth_server)) { 2229 wpa_printf(MSG_ERROR, 2230 "Line %d: invalid IP address '%s'", 2231 line, pos); 2232 return 1; 2233 } 2234 } else if (bss->radius->auth_server && 2235 os_strcmp(buf, "auth_server_addr_replace") == 0) { 2236 if (hostapd_parse_ip_addr(pos, 2237 &bss->radius->auth_server->addr)) { 2238 wpa_printf(MSG_ERROR, 2239 "Line %d: invalid IP address '%s'", 2240 line, pos); 2241 return 1; 2242 } 2243 } else if (bss->radius->auth_server && 2244 os_strcmp(buf, "auth_server_port") == 0) { 2245 bss->radius->auth_server->port = atoi(pos); 2246 } else if (bss->radius->auth_server && 2247 os_strcmp(buf, "auth_server_shared_secret") == 0) { 2248 int len = os_strlen(pos); 2249 if (len == 0) { 2250 /* RFC 2865, Ch. 3 */ 2251 wpa_printf(MSG_ERROR, "Line %d: empty shared secret is not allowed", 2252 line); 2253 return 1; 2254 } 2255 os_free(bss->radius->auth_server->shared_secret); 2256 bss->radius->auth_server->shared_secret = (u8 *) os_strdup(pos); 2257 bss->radius->auth_server->shared_secret_len = len; 2258 } else if (os_strcmp(buf, "acct_server_addr") == 0) { 2259 if (hostapd_config_read_radius_addr( 2260 &bss->radius->acct_servers, 2261 &bss->radius->num_acct_servers, pos, 1813, 2262 &bss->radius->acct_server)) { 2263 wpa_printf(MSG_ERROR, 2264 "Line %d: invalid IP address '%s'", 2265 line, pos); 2266 return 1; 2267 } 2268 } else if (bss->radius->acct_server && 2269 os_strcmp(buf, "acct_server_addr_replace") == 0) { 2270 if (hostapd_parse_ip_addr(pos, 2271 &bss->radius->acct_server->addr)) { 2272 wpa_printf(MSG_ERROR, 2273 "Line %d: invalid IP address '%s'", 2274 line, pos); 2275 return 1; 2276 } 2277 } else if (bss->radius->acct_server && 2278 os_strcmp(buf, "acct_server_port") == 0) { 2279 bss->radius->acct_server->port = atoi(pos); 2280 } else if (bss->radius->acct_server && 2281 os_strcmp(buf, "acct_server_shared_secret") == 0) { 2282 int len = os_strlen(pos); 2283 if (len == 0) { 2284 /* RFC 2865, Ch. 3 */ 2285 wpa_printf(MSG_ERROR, "Line %d: empty shared secret is not allowed", 2286 line); 2287 return 1; 2288 } 2289 os_free(bss->radius->acct_server->shared_secret); 2290 bss->radius->acct_server->shared_secret = (u8 *) os_strdup(pos); 2291 bss->radius->acct_server->shared_secret_len = len; 2292 } else if (os_strcmp(buf, "radius_retry_primary_interval") == 0) { 2293 bss->radius->retry_primary_interval = atoi(pos); 2294 } else if (os_strcmp(buf, "radius_acct_interim_interval") == 0) { 2295 bss->acct_interim_interval = atoi(pos); 2296 } else if (os_strcmp(buf, "radius_request_cui") == 0) { 2297 bss->radius_request_cui = atoi(pos); 2298 } else if (os_strcmp(buf, "radius_auth_req_attr") == 0) { 2299 struct hostapd_radius_attr *attr, *a; 2300 attr = hostapd_parse_radius_attr(pos); 2301 if (attr == NULL) { 2302 wpa_printf(MSG_ERROR, 2303 "Line %d: invalid radius_auth_req_attr", 2304 line); 2305 return 1; 2306 } else if (bss->radius_auth_req_attr == NULL) { 2307 bss->radius_auth_req_attr = attr; 2308 } else { 2309 a = bss->radius_auth_req_attr; 2310 while (a->next) 2311 a = a->next; 2312 a->next = attr; 2313 } 2314 } else if (os_strcmp(buf, "radius_acct_req_attr") == 0) { 2315 struct hostapd_radius_attr *attr, *a; 2316 attr = hostapd_parse_radius_attr(pos); 2317 if (attr == NULL) { 2318 wpa_printf(MSG_ERROR, 2319 "Line %d: invalid radius_acct_req_attr", 2320 line); 2321 return 1; 2322 } else if (bss->radius_acct_req_attr == NULL) { 2323 bss->radius_acct_req_attr = attr; 2324 } else { 2325 a = bss->radius_acct_req_attr; 2326 while (a->next) 2327 a = a->next; 2328 a->next = attr; 2329 } 2330 } else if (os_strcmp(buf, "radius_das_port") == 0) { 2331 bss->radius_das_port = atoi(pos); 2332 } else if (os_strcmp(buf, "radius_das_client") == 0) { 2333 if (hostapd_parse_das_client(bss, pos) < 0) { 2334 wpa_printf(MSG_ERROR, "Line %d: invalid DAS client", 2335 line); 2336 return 1; 2337 } 2338 } else if (os_strcmp(buf, "radius_das_time_window") == 0) { 2339 bss->radius_das_time_window = atoi(pos); 2340 } else if (os_strcmp(buf, "radius_das_require_event_timestamp") == 0) { 2341 bss->radius_das_require_event_timestamp = atoi(pos); 2342 #endif /* CONFIG_NO_RADIUS */ 2343 } else if (os_strcmp(buf, "auth_algs") == 0) { 2344 bss->auth_algs = atoi(pos); 2345 if (bss->auth_algs == 0) { 2346 wpa_printf(MSG_ERROR, "Line %d: no authentication algorithms allowed", 2347 line); 2348 return 1; 2349 } 2350 } else if (os_strcmp(buf, "max_num_sta") == 0) { 2351 bss->max_num_sta = atoi(pos); 2352 if (bss->max_num_sta < 0 || 2353 bss->max_num_sta > MAX_STA_COUNT) { 2354 wpa_printf(MSG_ERROR, "Line %d: Invalid max_num_sta=%d; allowed range 0..%d", 2355 line, bss->max_num_sta, MAX_STA_COUNT); 2356 return 1; 2357 } 2358 } else if (os_strcmp(buf, "wpa") == 0) { 2359 bss->wpa = atoi(pos); 2360 } else if (os_strcmp(buf, "wpa_group_rekey") == 0) { 2361 bss->wpa_group_rekey = atoi(pos); 2362 } else if (os_strcmp(buf, "wpa_strict_rekey") == 0) { 2363 bss->wpa_strict_rekey = atoi(pos); 2364 } else if (os_strcmp(buf, "wpa_gmk_rekey") == 0) { 2365 bss->wpa_gmk_rekey = atoi(pos); 2366 } else if (os_strcmp(buf, "wpa_ptk_rekey") == 0) { 2367 bss->wpa_ptk_rekey = atoi(pos); 2368 } else if (os_strcmp(buf, "wpa_passphrase") == 0) { 2369 int len = os_strlen(pos); 2370 if (len < 8 || len > 63) { 2371 wpa_printf(MSG_ERROR, "Line %d: invalid WPA passphrase length %d (expected 8..63)", 2372 line, len); 2373 return 1; 2374 } 2375 os_free(bss->ssid.wpa_passphrase); 2376 bss->ssid.wpa_passphrase = os_strdup(pos); 2377 if (bss->ssid.wpa_passphrase) { 2378 hostapd_config_clear_wpa_psk(&bss->ssid.wpa_psk); 2379 bss->ssid.wpa_passphrase_set = 1; 2380 } 2381 } else if (os_strcmp(buf, "wpa_psk") == 0) { 2382 hostapd_config_clear_wpa_psk(&bss->ssid.wpa_psk); 2383 bss->ssid.wpa_psk = os_zalloc(sizeof(struct hostapd_wpa_psk)); 2384 if (bss->ssid.wpa_psk == NULL) 2385 return 1; 2386 if (hexstr2bin(pos, bss->ssid.wpa_psk->psk, PMK_LEN) || 2387 pos[PMK_LEN * 2] != '\0') { 2388 wpa_printf(MSG_ERROR, "Line %d: Invalid PSK '%s'.", 2389 line, pos); 2390 hostapd_config_clear_wpa_psk(&bss->ssid.wpa_psk); 2391 return 1; 2392 } 2393 bss->ssid.wpa_psk->group = 1; 2394 os_free(bss->ssid.wpa_passphrase); 2395 bss->ssid.wpa_passphrase = NULL; 2396 bss->ssid.wpa_psk_set = 1; 2397 } else if (os_strcmp(buf, "wpa_psk_file") == 0) { 2398 os_free(bss->ssid.wpa_psk_file); 2399 bss->ssid.wpa_psk_file = os_strdup(pos); 2400 if (!bss->ssid.wpa_psk_file) { 2401 wpa_printf(MSG_ERROR, "Line %d: allocation failed", 2402 line); 2403 return 1; 2404 } 2405 } else if (os_strcmp(buf, "wpa_key_mgmt") == 0) { 2406 bss->wpa_key_mgmt = hostapd_config_parse_key_mgmt(line, pos); 2407 if (bss->wpa_key_mgmt == -1) 2408 return 1; 2409 } else if (os_strcmp(buf, "wpa_psk_radius") == 0) { 2410 bss->wpa_psk_radius = atoi(pos); 2411 if (bss->wpa_psk_radius != PSK_RADIUS_IGNORED && 2412 bss->wpa_psk_radius != PSK_RADIUS_ACCEPTED && 2413 bss->wpa_psk_radius != PSK_RADIUS_REQUIRED) { 2414 wpa_printf(MSG_ERROR, 2415 "Line %d: unknown wpa_psk_radius %d", 2416 line, bss->wpa_psk_radius); 2417 return 1; 2418 } 2419 } else if (os_strcmp(buf, "wpa_pairwise") == 0) { 2420 bss->wpa_pairwise = hostapd_config_parse_cipher(line, pos); 2421 if (bss->wpa_pairwise == -1 || bss->wpa_pairwise == 0) 2422 return 1; 2423 if (bss->wpa_pairwise & 2424 (WPA_CIPHER_NONE | WPA_CIPHER_WEP40 | WPA_CIPHER_WEP104)) { 2425 wpa_printf(MSG_ERROR, "Line %d: unsupported pairwise cipher suite '%s'", 2426 bss->wpa_pairwise, pos); 2427 return 1; 2428 } 2429 } else if (os_strcmp(buf, "rsn_pairwise") == 0) { 2430 bss->rsn_pairwise = hostapd_config_parse_cipher(line, pos); 2431 if (bss->rsn_pairwise == -1 || bss->rsn_pairwise == 0) 2432 return 1; 2433 if (bss->rsn_pairwise & 2434 (WPA_CIPHER_NONE | WPA_CIPHER_WEP40 | WPA_CIPHER_WEP104)) { 2435 wpa_printf(MSG_ERROR, "Line %d: unsupported pairwise cipher suite '%s'", 2436 bss->rsn_pairwise, pos); 2437 return 1; 2438 } 2439 #ifdef CONFIG_RSN_PREAUTH 2440 } else if (os_strcmp(buf, "rsn_preauth") == 0) { 2441 bss->rsn_preauth = atoi(pos); 2442 } else if (os_strcmp(buf, "rsn_preauth_interfaces") == 0) { 2443 os_free(bss->rsn_preauth_interfaces); 2444 bss->rsn_preauth_interfaces = os_strdup(pos); 2445 #endif /* CONFIG_RSN_PREAUTH */ 2446 #ifdef CONFIG_PEERKEY 2447 } else if (os_strcmp(buf, "peerkey") == 0) { 2448 bss->peerkey = atoi(pos); 2449 #endif /* CONFIG_PEERKEY */ 2450 #ifdef CONFIG_IEEE80211R 2451 } else if (os_strcmp(buf, "mobility_domain") == 0) { 2452 if (os_strlen(pos) != 2 * MOBILITY_DOMAIN_ID_LEN || 2453 hexstr2bin(pos, bss->mobility_domain, 2454 MOBILITY_DOMAIN_ID_LEN) != 0) { 2455 wpa_printf(MSG_ERROR, 2456 "Line %d: Invalid mobility_domain '%s'", 2457 line, pos); 2458 return 1; 2459 } 2460 } else if (os_strcmp(buf, "r1_key_holder") == 0) { 2461 if (os_strlen(pos) != 2 * FT_R1KH_ID_LEN || 2462 hexstr2bin(pos, bss->r1_key_holder, FT_R1KH_ID_LEN) != 0) { 2463 wpa_printf(MSG_ERROR, 2464 "Line %d: Invalid r1_key_holder '%s'", 2465 line, pos); 2466 return 1; 2467 } 2468 } else if (os_strcmp(buf, "r0_key_lifetime") == 0) { 2469 bss->r0_key_lifetime = atoi(pos); 2470 } else if (os_strcmp(buf, "reassociation_deadline") == 0) { 2471 bss->reassociation_deadline = atoi(pos); 2472 } else if (os_strcmp(buf, "r0kh") == 0) { 2473 if (add_r0kh(bss, pos) < 0) { 2474 wpa_printf(MSG_DEBUG, "Line %d: Invalid r0kh '%s'", 2475 line, pos); 2476 return 1; 2477 } 2478 } else if (os_strcmp(buf, "r1kh") == 0) { 2479 if (add_r1kh(bss, pos) < 0) { 2480 wpa_printf(MSG_DEBUG, "Line %d: Invalid r1kh '%s'", 2481 line, pos); 2482 return 1; 2483 } 2484 } else if (os_strcmp(buf, "pmk_r1_push") == 0) { 2485 bss->pmk_r1_push = atoi(pos); 2486 } else if (os_strcmp(buf, "ft_over_ds") == 0) { 2487 bss->ft_over_ds = atoi(pos); 2488 #endif /* CONFIG_IEEE80211R */ 2489 #ifndef CONFIG_NO_CTRL_IFACE 2490 } else if (os_strcmp(buf, "ctrl_interface") == 0) { 2491 os_free(bss->ctrl_interface); 2492 bss->ctrl_interface = os_strdup(pos); 2493 } else if (os_strcmp(buf, "ctrl_interface_group") == 0) { 2494 #ifndef CONFIG_NATIVE_WINDOWS 2495 struct group *grp; 2496 char *endp; 2497 const char *group = pos; 2498 2499 grp = getgrnam(group); 2500 if (grp) { 2501 bss->ctrl_interface_gid = grp->gr_gid; 2502 bss->ctrl_interface_gid_set = 1; 2503 wpa_printf(MSG_DEBUG, "ctrl_interface_group=%d (from group name '%s')", 2504 bss->ctrl_interface_gid, group); 2505 return 0; 2506 } 2507 2508 /* Group name not found - try to parse this as gid */ 2509 bss->ctrl_interface_gid = strtol(group, &endp, 10); 2510 if (*group == '\0' || *endp != '\0') { 2511 wpa_printf(MSG_DEBUG, "Line %d: Invalid group '%s'", 2512 line, group); 2513 return 1; 2514 } 2515 bss->ctrl_interface_gid_set = 1; 2516 wpa_printf(MSG_DEBUG, "ctrl_interface_group=%d", 2517 bss->ctrl_interface_gid); 2518 #endif /* CONFIG_NATIVE_WINDOWS */ 2519 #endif /* CONFIG_NO_CTRL_IFACE */ 2520 #ifdef RADIUS_SERVER 2521 } else if (os_strcmp(buf, "radius_server_clients") == 0) { 2522 os_free(bss->radius_server_clients); 2523 bss->radius_server_clients = os_strdup(pos); 2524 } else if (os_strcmp(buf, "radius_server_auth_port") == 0) { 2525 bss->radius_server_auth_port = atoi(pos); 2526 } else if (os_strcmp(buf, "radius_server_acct_port") == 0) { 2527 bss->radius_server_acct_port = atoi(pos); 2528 } else if (os_strcmp(buf, "radius_server_ipv6") == 0) { 2529 bss->radius_server_ipv6 = atoi(pos); 2530 #endif /* RADIUS_SERVER */ 2531 } else if (os_strcmp(buf, "use_pae_group_addr") == 0) { 2532 bss->use_pae_group_addr = atoi(pos); 2533 } else if (os_strcmp(buf, "hw_mode") == 0) { 2534 if (os_strcmp(pos, "a") == 0) 2535 conf->hw_mode = HOSTAPD_MODE_IEEE80211A; 2536 else if (os_strcmp(pos, "b") == 0) 2537 conf->hw_mode = HOSTAPD_MODE_IEEE80211B; 2538 else if (os_strcmp(pos, "g") == 0) 2539 conf->hw_mode = HOSTAPD_MODE_IEEE80211G; 2540 else if (os_strcmp(pos, "ad") == 0) 2541 conf->hw_mode = HOSTAPD_MODE_IEEE80211AD; 2542 else if (os_strcmp(pos, "any") == 0) 2543 conf->hw_mode = HOSTAPD_MODE_IEEE80211ANY; 2544 else { 2545 wpa_printf(MSG_ERROR, "Line %d: unknown hw_mode '%s'", 2546 line, pos); 2547 return 1; 2548 } 2549 } else if (os_strcmp(buf, "wps_rf_bands") == 0) { 2550 if (os_strcmp(pos, "ad") == 0) 2551 bss->wps_rf_bands = WPS_RF_60GHZ; 2552 else if (os_strcmp(pos, "a") == 0) 2553 bss->wps_rf_bands = WPS_RF_50GHZ; 2554 else if (os_strcmp(pos, "g") == 0 || 2555 os_strcmp(pos, "b") == 0) 2556 bss->wps_rf_bands = WPS_RF_24GHZ; 2557 else if (os_strcmp(pos, "ag") == 0 || 2558 os_strcmp(pos, "ga") == 0) 2559 bss->wps_rf_bands = WPS_RF_24GHZ | WPS_RF_50GHZ; 2560 else { 2561 wpa_printf(MSG_ERROR, 2562 "Line %d: unknown wps_rf_band '%s'", 2563 line, pos); 2564 return 1; 2565 } 2566 } else if (os_strcmp(buf, "channel") == 0) { 2567 if (os_strcmp(pos, "acs_survey") == 0) { 2568 #ifndef CONFIG_ACS 2569 wpa_printf(MSG_ERROR, "Line %d: tries to enable ACS but CONFIG_ACS disabled", 2570 line); 2571 return 1; 2572 #else /* CONFIG_ACS */ 2573 conf->acs = 1; 2574 conf->channel = 0; 2575 #endif /* CONFIG_ACS */ 2576 } else { 2577 conf->channel = atoi(pos); 2578 conf->acs = conf->channel == 0; 2579 } 2580 } else if (os_strcmp(buf, "chanlist") == 0) { 2581 if (hostapd_parse_chanlist(conf, pos)) { 2582 wpa_printf(MSG_ERROR, "Line %d: invalid channel list", 2583 line); 2584 return 1; 2585 } 2586 } else if (os_strcmp(buf, "beacon_int") == 0) { 2587 int val = atoi(pos); 2588 /* MIB defines range as 1..65535, but very small values 2589 * cause problems with the current implementation. 2590 * Since it is unlikely that this small numbers are 2591 * useful in real life scenarios, do not allow beacon 2592 * period to be set below 15 TU. */ 2593 if (val < 15 || val > 65535) { 2594 wpa_printf(MSG_ERROR, "Line %d: invalid beacon_int %d (expected 15..65535)", 2595 line, val); 2596 return 1; 2597 } 2598 conf->beacon_int = val; 2599 #ifdef CONFIG_ACS 2600 } else if (os_strcmp(buf, "acs_num_scans") == 0) { 2601 int val = atoi(pos); 2602 if (val <= 0 || val > 100) { 2603 wpa_printf(MSG_ERROR, "Line %d: invalid acs_num_scans %d (expected 1..100)", 2604 line, val); 2605 return 1; 2606 } 2607 conf->acs_num_scans = val; 2608 } else if (os_strcmp(buf, "acs_chan_bias") == 0) { 2609 if (hostapd_config_parse_acs_chan_bias(conf, pos)) { 2610 wpa_printf(MSG_ERROR, "Line %d: invalid acs_chan_bias", 2611 line); 2612 return -1; 2613 } 2614 #endif /* CONFIG_ACS */ 2615 } else if (os_strcmp(buf, "dtim_period") == 0) { 2616 bss->dtim_period = atoi(pos); 2617 if (bss->dtim_period < 1 || bss->dtim_period > 255) { 2618 wpa_printf(MSG_ERROR, "Line %d: invalid dtim_period %d", 2619 line, bss->dtim_period); 2620 return 1; 2621 } 2622 } else if (os_strcmp(buf, "bss_load_update_period") == 0) { 2623 bss->bss_load_update_period = atoi(pos); 2624 if (bss->bss_load_update_period < 0 || 2625 bss->bss_load_update_period > 100) { 2626 wpa_printf(MSG_ERROR, 2627 "Line %d: invalid bss_load_update_period %d", 2628 line, bss->bss_load_update_period); 2629 return 1; 2630 } 2631 } else if (os_strcmp(buf, "rts_threshold") == 0) { 2632 conf->rts_threshold = atoi(pos); 2633 if (conf->rts_threshold < 0 || conf->rts_threshold > 2347) { 2634 wpa_printf(MSG_ERROR, 2635 "Line %d: invalid rts_threshold %d", 2636 line, conf->rts_threshold); 2637 return 1; 2638 } 2639 } else if (os_strcmp(buf, "fragm_threshold") == 0) { 2640 conf->fragm_threshold = atoi(pos); 2641 if (conf->fragm_threshold < 256 || 2642 conf->fragm_threshold > 2346) { 2643 wpa_printf(MSG_ERROR, 2644 "Line %d: invalid fragm_threshold %d", 2645 line, conf->fragm_threshold); 2646 return 1; 2647 } 2648 } else if (os_strcmp(buf, "send_probe_response") == 0) { 2649 int val = atoi(pos); 2650 if (val != 0 && val != 1) { 2651 wpa_printf(MSG_ERROR, "Line %d: invalid send_probe_response %d (expected 0 or 1)", 2652 line, val); 2653 return 1; 2654 } 2655 conf->send_probe_response = val; 2656 } else if (os_strcmp(buf, "supported_rates") == 0) { 2657 if (hostapd_parse_intlist(&conf->supported_rates, pos)) { 2658 wpa_printf(MSG_ERROR, "Line %d: invalid rate list", 2659 line); 2660 return 1; 2661 } 2662 } else if (os_strcmp(buf, "basic_rates") == 0) { 2663 if (hostapd_parse_intlist(&conf->basic_rates, pos)) { 2664 wpa_printf(MSG_ERROR, "Line %d: invalid rate list", 2665 line); 2666 return 1; 2667 } 2668 } else if (os_strcmp(buf, "preamble") == 0) { 2669 if (atoi(pos)) 2670 conf->preamble = SHORT_PREAMBLE; 2671 else 2672 conf->preamble = LONG_PREAMBLE; 2673 } else if (os_strcmp(buf, "ignore_broadcast_ssid") == 0) { 2674 bss->ignore_broadcast_ssid = atoi(pos); 2675 } else if (os_strcmp(buf, "wep_default_key") == 0) { 2676 bss->ssid.wep.idx = atoi(pos); 2677 if (bss->ssid.wep.idx > 3) { 2678 wpa_printf(MSG_ERROR, 2679 "Invalid wep_default_key index %d", 2680 bss->ssid.wep.idx); 2681 return 1; 2682 } 2683 } else if (os_strcmp(buf, "wep_key0") == 0 || 2684 os_strcmp(buf, "wep_key1") == 0 || 2685 os_strcmp(buf, "wep_key2") == 0 || 2686 os_strcmp(buf, "wep_key3") == 0) { 2687 if (hostapd_config_read_wep(&bss->ssid.wep, 2688 buf[7] - '0', pos)) { 2689 wpa_printf(MSG_ERROR, "Line %d: invalid WEP key '%s'", 2690 line, buf); 2691 return 1; 2692 } 2693 #ifndef CONFIG_NO_VLAN 2694 } else if (os_strcmp(buf, "dynamic_vlan") == 0) { 2695 bss->ssid.dynamic_vlan = atoi(pos); 2696 } else if (os_strcmp(buf, "vlan_file") == 0) { 2697 if (hostapd_config_read_vlan_file(bss, pos)) { 2698 wpa_printf(MSG_ERROR, "Line %d: failed to read VLAN file '%s'", 2699 line, pos); 2700 return 1; 2701 } 2702 } else if (os_strcmp(buf, "vlan_naming") == 0) { 2703 bss->ssid.vlan_naming = atoi(pos); 2704 if (bss->ssid.vlan_naming >= DYNAMIC_VLAN_NAMING_END || 2705 bss->ssid.vlan_naming < 0) { 2706 wpa_printf(MSG_ERROR, 2707 "Line %d: invalid naming scheme %d", 2708 line, bss->ssid.vlan_naming); 2709 return 1; 2710 } 2711 #ifdef CONFIG_FULL_DYNAMIC_VLAN 2712 } else if (os_strcmp(buf, "vlan_tagged_interface") == 0) { 2713 os_free(bss->ssid.vlan_tagged_interface); 2714 bss->ssid.vlan_tagged_interface = os_strdup(pos); 2715 #endif /* CONFIG_FULL_DYNAMIC_VLAN */ 2716 #endif /* CONFIG_NO_VLAN */ 2717 } else if (os_strcmp(buf, "ap_table_max_size") == 0) { 2718 conf->ap_table_max_size = atoi(pos); 2719 } else if (os_strcmp(buf, "ap_table_expiration_time") == 0) { 2720 conf->ap_table_expiration_time = atoi(pos); 2721 } else if (os_strncmp(buf, "tx_queue_", 9) == 0) { 2722 if (hostapd_config_tx_queue(conf, buf, pos)) { 2723 wpa_printf(MSG_ERROR, "Line %d: invalid TX queue item", 2724 line); 2725 return 1; 2726 } 2727 } else if (os_strcmp(buf, "wme_enabled") == 0 || 2728 os_strcmp(buf, "wmm_enabled") == 0) { 2729 bss->wmm_enabled = atoi(pos); 2730 } else if (os_strcmp(buf, "uapsd_advertisement_enabled") == 0) { 2731 bss->wmm_uapsd = atoi(pos); 2732 } else if (os_strncmp(buf, "wme_ac_", 7) == 0 || 2733 os_strncmp(buf, "wmm_ac_", 7) == 0) { 2734 if (hostapd_config_wmm_ac(conf->wmm_ac_params, buf, pos)) { 2735 wpa_printf(MSG_ERROR, "Line %d: invalid WMM ac item", 2736 line); 2737 return 1; 2738 } 2739 } else if (os_strcmp(buf, "bss") == 0) { 2740 if (hostapd_config_bss(conf, pos)) { 2741 wpa_printf(MSG_ERROR, "Line %d: invalid bss item", 2742 line); 2743 return 1; 2744 } 2745 } else if (os_strcmp(buf, "bssid") == 0) { 2746 if (hwaddr_aton(pos, bss->bssid)) { 2747 wpa_printf(MSG_ERROR, "Line %d: invalid bssid item", 2748 line); 2749 return 1; 2750 } 2751 #ifdef CONFIG_IEEE80211W 2752 } else if (os_strcmp(buf, "ieee80211w") == 0) { 2753 bss->ieee80211w = atoi(pos); 2754 } else if (os_strcmp(buf, "group_mgmt_cipher") == 0) { 2755 if (os_strcmp(pos, "AES-128-CMAC") == 0) { 2756 bss->group_mgmt_cipher = WPA_CIPHER_AES_128_CMAC; 2757 } else if (os_strcmp(pos, "BIP-GMAC-128") == 0) { 2758 bss->group_mgmt_cipher = WPA_CIPHER_BIP_GMAC_128; 2759 } else if (os_strcmp(pos, "BIP-GMAC-256") == 0) { 2760 bss->group_mgmt_cipher = WPA_CIPHER_BIP_GMAC_256; 2761 } else if (os_strcmp(pos, "BIP-CMAC-256") == 0) { 2762 bss->group_mgmt_cipher = WPA_CIPHER_BIP_CMAC_256; 2763 } else { 2764 wpa_printf(MSG_ERROR, "Line %d: invalid group_mgmt_cipher: %s", 2765 line, pos); 2766 return 1; 2767 } 2768 } else if (os_strcmp(buf, "assoc_sa_query_max_timeout") == 0) { 2769 bss->assoc_sa_query_max_timeout = atoi(pos); 2770 if (bss->assoc_sa_query_max_timeout == 0) { 2771 wpa_printf(MSG_ERROR, "Line %d: invalid assoc_sa_query_max_timeout", 2772 line); 2773 return 1; 2774 } 2775 } else if (os_strcmp(buf, "assoc_sa_query_retry_timeout") == 0) { 2776 bss->assoc_sa_query_retry_timeout = atoi(pos); 2777 if (bss->assoc_sa_query_retry_timeout == 0) { 2778 wpa_printf(MSG_ERROR, "Line %d: invalid assoc_sa_query_retry_timeout", 2779 line); 2780 return 1; 2781 } 2782 #endif /* CONFIG_IEEE80211W */ 2783 #ifdef CONFIG_IEEE80211N 2784 } else if (os_strcmp(buf, "ieee80211n") == 0) { 2785 conf->ieee80211n = atoi(pos); 2786 } else if (os_strcmp(buf, "ht_capab") == 0) { 2787 if (hostapd_config_ht_capab(conf, pos) < 0) { 2788 wpa_printf(MSG_ERROR, "Line %d: invalid ht_capab", 2789 line); 2790 return 1; 2791 } 2792 } else if (os_strcmp(buf, "require_ht") == 0) { 2793 conf->require_ht = atoi(pos); 2794 } else if (os_strcmp(buf, "obss_interval") == 0) { 2795 conf->obss_interval = atoi(pos); 2796 #endif /* CONFIG_IEEE80211N */ 2797 #ifdef CONFIG_IEEE80211AC 2798 } else if (os_strcmp(buf, "ieee80211ac") == 0) { 2799 conf->ieee80211ac = atoi(pos); 2800 } else if (os_strcmp(buf, "vht_capab") == 0) { 2801 if (hostapd_config_vht_capab(conf, pos) < 0) { 2802 wpa_printf(MSG_ERROR, "Line %d: invalid vht_capab", 2803 line); 2804 return 1; 2805 } 2806 } else if (os_strcmp(buf, "require_vht") == 0) { 2807 conf->require_vht = atoi(pos); 2808 } else if (os_strcmp(buf, "vht_oper_chwidth") == 0) { 2809 conf->vht_oper_chwidth = atoi(pos); 2810 } else if (os_strcmp(buf, "vht_oper_centr_freq_seg0_idx") == 0) { 2811 conf->vht_oper_centr_freq_seg0_idx = atoi(pos); 2812 } else if (os_strcmp(buf, "vht_oper_centr_freq_seg1_idx") == 0) { 2813 conf->vht_oper_centr_freq_seg1_idx = atoi(pos); 2814 } else if (os_strcmp(buf, "vendor_vht") == 0) { 2815 bss->vendor_vht = atoi(pos); 2816 #endif /* CONFIG_IEEE80211AC */ 2817 } else if (os_strcmp(buf, "max_listen_interval") == 0) { 2818 bss->max_listen_interval = atoi(pos); 2819 } else if (os_strcmp(buf, "disable_pmksa_caching") == 0) { 2820 bss->disable_pmksa_caching = atoi(pos); 2821 } else if (os_strcmp(buf, "okc") == 0) { 2822 bss->okc = atoi(pos); 2823 #ifdef CONFIG_WPS 2824 } else if (os_strcmp(buf, "wps_state") == 0) { 2825 bss->wps_state = atoi(pos); 2826 if (bss->wps_state < 0 || bss->wps_state > 2) { 2827 wpa_printf(MSG_ERROR, "Line %d: invalid wps_state", 2828 line); 2829 return 1; 2830 } 2831 } else if (os_strcmp(buf, "wps_independent") == 0) { 2832 bss->wps_independent = atoi(pos); 2833 } else if (os_strcmp(buf, "ap_setup_locked") == 0) { 2834 bss->ap_setup_locked = atoi(pos); 2835 } else if (os_strcmp(buf, "uuid") == 0) { 2836 if (uuid_str2bin(pos, bss->uuid)) { 2837 wpa_printf(MSG_ERROR, "Line %d: invalid UUID", line); 2838 return 1; 2839 } 2840 } else if (os_strcmp(buf, "wps_pin_requests") == 0) { 2841 os_free(bss->wps_pin_requests); 2842 bss->wps_pin_requests = os_strdup(pos); 2843 } else if (os_strcmp(buf, "device_name") == 0) { 2844 if (os_strlen(pos) > WPS_DEV_NAME_MAX_LEN) { 2845 wpa_printf(MSG_ERROR, "Line %d: Too long " 2846 "device_name", line); 2847 return 1; 2848 } 2849 os_free(bss->device_name); 2850 bss->device_name = os_strdup(pos); 2851 } else if (os_strcmp(buf, "manufacturer") == 0) { 2852 if (os_strlen(pos) > 64) { 2853 wpa_printf(MSG_ERROR, "Line %d: Too long manufacturer", 2854 line); 2855 return 1; 2856 } 2857 os_free(bss->manufacturer); 2858 bss->manufacturer = os_strdup(pos); 2859 } else if (os_strcmp(buf, "model_name") == 0) { 2860 if (os_strlen(pos) > 32) { 2861 wpa_printf(MSG_ERROR, "Line %d: Too long model_name", 2862 line); 2863 return 1; 2864 } 2865 os_free(bss->model_name); 2866 bss->model_name = os_strdup(pos); 2867 } else if (os_strcmp(buf, "model_number") == 0) { 2868 if (os_strlen(pos) > 32) { 2869 wpa_printf(MSG_ERROR, "Line %d: Too long model_number", 2870 line); 2871 return 1; 2872 } 2873 os_free(bss->model_number); 2874 bss->model_number = os_strdup(pos); 2875 } else if (os_strcmp(buf, "serial_number") == 0) { 2876 if (os_strlen(pos) > 32) { 2877 wpa_printf(MSG_ERROR, "Line %d: Too long serial_number", 2878 line); 2879 return 1; 2880 } 2881 os_free(bss->serial_number); 2882 bss->serial_number = os_strdup(pos); 2883 } else if (os_strcmp(buf, "device_type") == 0) { 2884 if (wps_dev_type_str2bin(pos, bss->device_type)) 2885 return 1; 2886 } else if (os_strcmp(buf, "config_methods") == 0) { 2887 os_free(bss->config_methods); 2888 bss->config_methods = os_strdup(pos); 2889 } else if (os_strcmp(buf, "os_version") == 0) { 2890 if (hexstr2bin(pos, bss->os_version, 4)) { 2891 wpa_printf(MSG_ERROR, "Line %d: invalid os_version", 2892 line); 2893 return 1; 2894 } 2895 } else if (os_strcmp(buf, "ap_pin") == 0) { 2896 os_free(bss->ap_pin); 2897 bss->ap_pin = os_strdup(pos); 2898 } else if (os_strcmp(buf, "skip_cred_build") == 0) { 2899 bss->skip_cred_build = atoi(pos); 2900 } else if (os_strcmp(buf, "extra_cred") == 0) { 2901 os_free(bss->extra_cred); 2902 bss->extra_cred = (u8 *) os_readfile(pos, &bss->extra_cred_len); 2903 if (bss->extra_cred == NULL) { 2904 wpa_printf(MSG_ERROR, "Line %d: could not read Credentials from '%s'", 2905 line, pos); 2906 return 1; 2907 } 2908 } else if (os_strcmp(buf, "wps_cred_processing") == 0) { 2909 bss->wps_cred_processing = atoi(pos); 2910 } else if (os_strcmp(buf, "ap_settings") == 0) { 2911 os_free(bss->ap_settings); 2912 bss->ap_settings = 2913 (u8 *) os_readfile(pos, &bss->ap_settings_len); 2914 if (bss->ap_settings == NULL) { 2915 wpa_printf(MSG_ERROR, "Line %d: could not read AP Settings from '%s'", 2916 line, pos); 2917 return 1; 2918 } 2919 } else if (os_strcmp(buf, "upnp_iface") == 0) { 2920 os_free(bss->upnp_iface); 2921 bss->upnp_iface = os_strdup(pos); 2922 } else if (os_strcmp(buf, "friendly_name") == 0) { 2923 os_free(bss->friendly_name); 2924 bss->friendly_name = os_strdup(pos); 2925 } else if (os_strcmp(buf, "manufacturer_url") == 0) { 2926 os_free(bss->manufacturer_url); 2927 bss->manufacturer_url = os_strdup(pos); 2928 } else if (os_strcmp(buf, "model_description") == 0) { 2929 os_free(bss->model_description); 2930 bss->model_description = os_strdup(pos); 2931 } else if (os_strcmp(buf, "model_url") == 0) { 2932 os_free(bss->model_url); 2933 bss->model_url = os_strdup(pos); 2934 } else if (os_strcmp(buf, "upc") == 0) { 2935 os_free(bss->upc); 2936 bss->upc = os_strdup(pos); 2937 } else if (os_strcmp(buf, "pbc_in_m1") == 0) { 2938 bss->pbc_in_m1 = atoi(pos); 2939 } else if (os_strcmp(buf, "server_id") == 0) { 2940 os_free(bss->server_id); 2941 bss->server_id = os_strdup(pos); 2942 #ifdef CONFIG_WPS_NFC 2943 } else if (os_strcmp(buf, "wps_nfc_dev_pw_id") == 0) { 2944 bss->wps_nfc_dev_pw_id = atoi(pos); 2945 if (bss->wps_nfc_dev_pw_id < 0x10 || 2946 bss->wps_nfc_dev_pw_id > 0xffff) { 2947 wpa_printf(MSG_ERROR, "Line %d: Invalid wps_nfc_dev_pw_id value", 2948 line); 2949 return 1; 2950 } 2951 bss->wps_nfc_pw_from_config = 1; 2952 } else if (os_strcmp(buf, "wps_nfc_dh_pubkey") == 0) { 2953 wpabuf_free(bss->wps_nfc_dh_pubkey); 2954 bss->wps_nfc_dh_pubkey = hostapd_parse_bin(pos); 2955 bss->wps_nfc_pw_from_config = 1; 2956 } else if (os_strcmp(buf, "wps_nfc_dh_privkey") == 0) { 2957 wpabuf_free(bss->wps_nfc_dh_privkey); 2958 bss->wps_nfc_dh_privkey = hostapd_parse_bin(pos); 2959 bss->wps_nfc_pw_from_config = 1; 2960 } else if (os_strcmp(buf, "wps_nfc_dev_pw") == 0) { 2961 wpabuf_free(bss->wps_nfc_dev_pw); 2962 bss->wps_nfc_dev_pw = hostapd_parse_bin(pos); 2963 bss->wps_nfc_pw_from_config = 1; 2964 #endif /* CONFIG_WPS_NFC */ 2965 #endif /* CONFIG_WPS */ 2966 #ifdef CONFIG_P2P_MANAGER 2967 } else if (os_strcmp(buf, "manage_p2p") == 0) { 2968 if (atoi(pos)) 2969 bss->p2p |= P2P_MANAGE; 2970 else 2971 bss->p2p &= ~P2P_MANAGE; 2972 } else if (os_strcmp(buf, "allow_cross_connection") == 0) { 2973 if (atoi(pos)) 2974 bss->p2p |= P2P_ALLOW_CROSS_CONNECTION; 2975 else 2976 bss->p2p &= ~P2P_ALLOW_CROSS_CONNECTION; 2977 #endif /* CONFIG_P2P_MANAGER */ 2978 } else if (os_strcmp(buf, "disassoc_low_ack") == 0) { 2979 bss->disassoc_low_ack = atoi(pos); 2980 } else if (os_strcmp(buf, "tdls_prohibit") == 0) { 2981 if (atoi(pos)) 2982 bss->tdls |= TDLS_PROHIBIT; 2983 else 2984 bss->tdls &= ~TDLS_PROHIBIT; 2985 } else if (os_strcmp(buf, "tdls_prohibit_chan_switch") == 0) { 2986 if (atoi(pos)) 2987 bss->tdls |= TDLS_PROHIBIT_CHAN_SWITCH; 2988 else 2989 bss->tdls &= ~TDLS_PROHIBIT_CHAN_SWITCH; 2990 #ifdef CONFIG_RSN_TESTING 2991 } else if (os_strcmp(buf, "rsn_testing") == 0) { 2992 extern int rsn_testing; 2993 rsn_testing = atoi(pos); 2994 #endif /* CONFIG_RSN_TESTING */ 2995 } else if (os_strcmp(buf, "time_advertisement") == 0) { 2996 bss->time_advertisement = atoi(pos); 2997 } else if (os_strcmp(buf, "time_zone") == 0) { 2998 size_t tz_len = os_strlen(pos); 2999 if (tz_len < 4 || tz_len > 255) { 3000 wpa_printf(MSG_DEBUG, "Line %d: invalid time_zone", 3001 line); 3002 return 1; 3003 } 3004 os_free(bss->time_zone); 3005 bss->time_zone = os_strdup(pos); 3006 if (bss->time_zone == NULL) 3007 return 1; 3008 #ifdef CONFIG_WNM 3009 } else if (os_strcmp(buf, "wnm_sleep_mode") == 0) { 3010 bss->wnm_sleep_mode = atoi(pos); 3011 } else if (os_strcmp(buf, "bss_transition") == 0) { 3012 bss->bss_transition = atoi(pos); 3013 #endif /* CONFIG_WNM */ 3014 #ifdef CONFIG_INTERWORKING 3015 } else if (os_strcmp(buf, "interworking") == 0) { 3016 bss->interworking = atoi(pos); 3017 } else if (os_strcmp(buf, "access_network_type") == 0) { 3018 bss->access_network_type = atoi(pos); 3019 if (bss->access_network_type < 0 || 3020 bss->access_network_type > 15) { 3021 wpa_printf(MSG_ERROR, 3022 "Line %d: invalid access_network_type", 3023 line); 3024 return 1; 3025 } 3026 } else if (os_strcmp(buf, "internet") == 0) { 3027 bss->internet = atoi(pos); 3028 } else if (os_strcmp(buf, "asra") == 0) { 3029 bss->asra = atoi(pos); 3030 } else if (os_strcmp(buf, "esr") == 0) { 3031 bss->esr = atoi(pos); 3032 } else if (os_strcmp(buf, "uesa") == 0) { 3033 bss->uesa = atoi(pos); 3034 } else if (os_strcmp(buf, "venue_group") == 0) { 3035 bss->venue_group = atoi(pos); 3036 bss->venue_info_set = 1; 3037 } else if (os_strcmp(buf, "venue_type") == 0) { 3038 bss->venue_type = atoi(pos); 3039 bss->venue_info_set = 1; 3040 } else if (os_strcmp(buf, "hessid") == 0) { 3041 if (hwaddr_aton(pos, bss->hessid)) { 3042 wpa_printf(MSG_ERROR, "Line %d: invalid hessid", line); 3043 return 1; 3044 } 3045 } else if (os_strcmp(buf, "roaming_consortium") == 0) { 3046 if (parse_roaming_consortium(bss, pos, line) < 0) 3047 return 1; 3048 } else if (os_strcmp(buf, "venue_name") == 0) { 3049 if (parse_venue_name(bss, pos, line) < 0) 3050 return 1; 3051 } else if (os_strcmp(buf, "network_auth_type") == 0) { 3052 u8 auth_type; 3053 u16 redirect_url_len; 3054 if (hexstr2bin(pos, &auth_type, 1)) { 3055 wpa_printf(MSG_ERROR, 3056 "Line %d: Invalid network_auth_type '%s'", 3057 line, pos); 3058 return 1; 3059 } 3060 if (auth_type == 0 || auth_type == 2) 3061 redirect_url_len = os_strlen(pos + 2); 3062 else 3063 redirect_url_len = 0; 3064 os_free(bss->network_auth_type); 3065 bss->network_auth_type = os_malloc(redirect_url_len + 3 + 1); 3066 if (bss->network_auth_type == NULL) 3067 return 1; 3068 *bss->network_auth_type = auth_type; 3069 WPA_PUT_LE16(bss->network_auth_type + 1, redirect_url_len); 3070 if (redirect_url_len) 3071 os_memcpy(bss->network_auth_type + 3, pos + 2, 3072 redirect_url_len); 3073 bss->network_auth_type_len = 3 + redirect_url_len; 3074 } else if (os_strcmp(buf, "ipaddr_type_availability") == 0) { 3075 if (hexstr2bin(pos, &bss->ipaddr_type_availability, 1)) { 3076 wpa_printf(MSG_ERROR, "Line %d: Invalid ipaddr_type_availability '%s'", 3077 line, pos); 3078 bss->ipaddr_type_configured = 0; 3079 return 1; 3080 } 3081 bss->ipaddr_type_configured = 1; 3082 } else if (os_strcmp(buf, "domain_name") == 0) { 3083 int j, num_domains, domain_len, domain_list_len = 0; 3084 char *tok_start, *tok_prev; 3085 u8 *domain_list, *domain_ptr; 3086 3087 domain_list_len = os_strlen(pos) + 1; 3088 domain_list = os_malloc(domain_list_len); 3089 if (domain_list == NULL) 3090 return 1; 3091 3092 domain_ptr = domain_list; 3093 tok_prev = pos; 3094 num_domains = 1; 3095 while ((tok_prev = os_strchr(tok_prev, ','))) { 3096 num_domains++; 3097 tok_prev++; 3098 } 3099 tok_prev = pos; 3100 for (j = 0; j < num_domains; j++) { 3101 tok_start = os_strchr(tok_prev, ','); 3102 if (tok_start) { 3103 domain_len = tok_start - tok_prev; 3104 *domain_ptr = domain_len; 3105 os_memcpy(domain_ptr + 1, tok_prev, domain_len); 3106 domain_ptr += domain_len + 1; 3107 tok_prev = ++tok_start; 3108 } else { 3109 domain_len = os_strlen(tok_prev); 3110 *domain_ptr = domain_len; 3111 os_memcpy(domain_ptr + 1, tok_prev, domain_len); 3112 domain_ptr += domain_len + 1; 3113 } 3114 } 3115 3116 os_free(bss->domain_name); 3117 bss->domain_name = domain_list; 3118 bss->domain_name_len = domain_list_len; 3119 } else if (os_strcmp(buf, "anqp_3gpp_cell_net") == 0) { 3120 if (parse_3gpp_cell_net(bss, pos, line) < 0) 3121 return 1; 3122 } else if (os_strcmp(buf, "nai_realm") == 0) { 3123 if (parse_nai_realm(bss, pos, line) < 0) 3124 return 1; 3125 } else if (os_strcmp(buf, "gas_frag_limit") == 0) { 3126 bss->gas_frag_limit = atoi(pos); 3127 } else if (os_strcmp(buf, "gas_comeback_delay") == 0) { 3128 bss->gas_comeback_delay = atoi(pos); 3129 } else if (os_strcmp(buf, "qos_map_set") == 0) { 3130 if (parse_qos_map_set(bss, pos, line) < 0) 3131 return 1; 3132 #endif /* CONFIG_INTERWORKING */ 3133 #ifdef CONFIG_RADIUS_TEST 3134 } else if (os_strcmp(buf, "dump_msk_file") == 0) { 3135 os_free(bss->dump_msk_file); 3136 bss->dump_msk_file = os_strdup(pos); 3137 #endif /* CONFIG_RADIUS_TEST */ 3138 #ifdef CONFIG_HS20 3139 } else if (os_strcmp(buf, "hs20") == 0) { 3140 bss->hs20 = atoi(pos); 3141 } else if (os_strcmp(buf, "disable_dgaf") == 0) { 3142 bss->disable_dgaf = atoi(pos); 3143 } else if (os_strcmp(buf, "proxy_arp") == 0) { 3144 bss->proxy_arp = atoi(pos); 3145 } else if (os_strcmp(buf, "na_mcast_to_ucast") == 0) { 3146 bss->na_mcast_to_ucast = atoi(pos); 3147 } else if (os_strcmp(buf, "osen") == 0) { 3148 bss->osen = atoi(pos); 3149 } else if (os_strcmp(buf, "anqp_domain_id") == 0) { 3150 bss->anqp_domain_id = atoi(pos); 3151 } else if (os_strcmp(buf, "hs20_deauth_req_timeout") == 0) { 3152 bss->hs20_deauth_req_timeout = atoi(pos); 3153 } else if (os_strcmp(buf, "hs20_oper_friendly_name") == 0) { 3154 if (hs20_parse_oper_friendly_name(bss, pos, line) < 0) 3155 return 1; 3156 } else if (os_strcmp(buf, "hs20_wan_metrics") == 0) { 3157 if (hs20_parse_wan_metrics(bss, pos, line) < 0) 3158 return 1; 3159 } else if (os_strcmp(buf, "hs20_conn_capab") == 0) { 3160 if (hs20_parse_conn_capab(bss, pos, line) < 0) { 3161 return 1; 3162 } 3163 } else if (os_strcmp(buf, "hs20_operating_class") == 0) { 3164 u8 *oper_class; 3165 size_t oper_class_len; 3166 oper_class_len = os_strlen(pos); 3167 if (oper_class_len < 2 || (oper_class_len & 0x01)) { 3168 wpa_printf(MSG_ERROR, 3169 "Line %d: Invalid hs20_operating_class '%s'", 3170 line, pos); 3171 return 1; 3172 } 3173 oper_class_len /= 2; 3174 oper_class = os_malloc(oper_class_len); 3175 if (oper_class == NULL) 3176 return 1; 3177 if (hexstr2bin(pos, oper_class, oper_class_len)) { 3178 wpa_printf(MSG_ERROR, 3179 "Line %d: Invalid hs20_operating_class '%s'", 3180 line, pos); 3181 os_free(oper_class); 3182 return 1; 3183 } 3184 os_free(bss->hs20_operating_class); 3185 bss->hs20_operating_class = oper_class; 3186 bss->hs20_operating_class_len = oper_class_len; 3187 } else if (os_strcmp(buf, "hs20_icon") == 0) { 3188 if (hs20_parse_icon(bss, pos) < 0) { 3189 wpa_printf(MSG_ERROR, "Line %d: Invalid hs20_icon '%s'", 3190 line, pos); 3191 return 1; 3192 } 3193 } else if (os_strcmp(buf, "osu_ssid") == 0) { 3194 if (hs20_parse_osu_ssid(bss, pos, line) < 0) 3195 return 1; 3196 } else if (os_strcmp(buf, "osu_server_uri") == 0) { 3197 if (hs20_parse_osu_server_uri(bss, pos, line) < 0) 3198 return 1; 3199 } else if (os_strcmp(buf, "osu_friendly_name") == 0) { 3200 if (hs20_parse_osu_friendly_name(bss, pos, line) < 0) 3201 return 1; 3202 } else if (os_strcmp(buf, "osu_nai") == 0) { 3203 if (hs20_parse_osu_nai(bss, pos, line) < 0) 3204 return 1; 3205 } else if (os_strcmp(buf, "osu_method_list") == 0) { 3206 if (hs20_parse_osu_method_list(bss, pos, line) < 0) 3207 return 1; 3208 } else if (os_strcmp(buf, "osu_icon") == 0) { 3209 if (hs20_parse_osu_icon(bss, pos, line) < 0) 3210 return 1; 3211 } else if (os_strcmp(buf, "osu_service_desc") == 0) { 3212 if (hs20_parse_osu_service_desc(bss, pos, line) < 0) 3213 return 1; 3214 } else if (os_strcmp(buf, "subscr_remediation_url") == 0) { 3215 os_free(bss->subscr_remediation_url); 3216 bss->subscr_remediation_url = os_strdup(pos); 3217 } else if (os_strcmp(buf, "subscr_remediation_method") == 0) { 3218 bss->subscr_remediation_method = atoi(pos); 3219 #endif /* CONFIG_HS20 */ 3220 #ifdef CONFIG_TESTING_OPTIONS 3221 #define PARSE_TEST_PROBABILITY(_val) \ 3222 } else if (os_strcmp(buf, #_val) == 0) { \ 3223 char *end; \ 3224 \ 3225 conf->_val = strtod(pos, &end); \ 3226 if (*end || conf->_val < 0.0 || \ 3227 conf->_val > 1.0) { \ 3228 wpa_printf(MSG_ERROR, \ 3229 "Line %d: Invalid value '%s'", \ 3230 line, pos); \ 3231 return 1; \ 3232 } 3233 PARSE_TEST_PROBABILITY(ignore_probe_probability) 3234 PARSE_TEST_PROBABILITY(ignore_auth_probability) 3235 PARSE_TEST_PROBABILITY(ignore_assoc_probability) 3236 PARSE_TEST_PROBABILITY(ignore_reassoc_probability) 3237 PARSE_TEST_PROBABILITY(corrupt_gtk_rekey_mic_probability) 3238 } else if (os_strcmp(buf, "bss_load_test") == 0) { 3239 WPA_PUT_LE16(bss->bss_load_test, atoi(pos)); 3240 pos = os_strchr(pos, ':'); 3241 if (pos == NULL) { 3242 wpa_printf(MSG_ERROR, "Line %d: Invalid bss_load_test", 3243 line); 3244 return 1; 3245 } 3246 pos++; 3247 bss->bss_load_test[2] = atoi(pos); 3248 pos = os_strchr(pos, ':'); 3249 if (pos == NULL) { 3250 wpa_printf(MSG_ERROR, "Line %d: Invalid bss_load_test", 3251 line); 3252 return 1; 3253 } 3254 pos++; 3255 WPA_PUT_LE16(&bss->bss_load_test[3], atoi(pos)); 3256 bss->bss_load_test_set = 1; 3257 } else if (os_strcmp(buf, "radio_measurements") == 0) { 3258 bss->radio_measurements = atoi(pos); 3259 #endif /* CONFIG_TESTING_OPTIONS */ 3260 } else if (os_strcmp(buf, "vendor_elements") == 0) { 3261 struct wpabuf *elems; 3262 size_t len = os_strlen(pos); 3263 if (len & 0x01) { 3264 wpa_printf(MSG_ERROR, 3265 "Line %d: Invalid vendor_elements '%s'", 3266 line, pos); 3267 return 1; 3268 } 3269 len /= 2; 3270 if (len == 0) { 3271 wpabuf_free(bss->vendor_elements); 3272 bss->vendor_elements = NULL; 3273 return 0; 3274 } 3275 3276 elems = wpabuf_alloc(len); 3277 if (elems == NULL) 3278 return 1; 3279 3280 if (hexstr2bin(pos, wpabuf_put(elems, len), len)) { 3281 wpabuf_free(elems); 3282 wpa_printf(MSG_ERROR, 3283 "Line %d: Invalid vendor_elements '%s'", 3284 line, pos); 3285 return 1; 3286 } 3287 3288 wpabuf_free(bss->vendor_elements); 3289 bss->vendor_elements = elems; 3290 } else if (os_strcmp(buf, "sae_anti_clogging_threshold") == 0) { 3291 bss->sae_anti_clogging_threshold = atoi(pos); 3292 } else if (os_strcmp(buf, "sae_groups") == 0) { 3293 if (hostapd_parse_intlist(&bss->sae_groups, pos)) { 3294 wpa_printf(MSG_ERROR, 3295 "Line %d: Invalid sae_groups value '%s'", 3296 line, pos); 3297 return 1; 3298 } 3299 } else if (os_strcmp(buf, "local_pwr_constraint") == 0) { 3300 int val = atoi(pos); 3301 if (val < 0 || val > 255) { 3302 wpa_printf(MSG_ERROR, "Line %d: Invalid local_pwr_constraint %d (expected 0..255)", 3303 line, val); 3304 return 1; 3305 } 3306 conf->local_pwr_constraint = val; 3307 } else if (os_strcmp(buf, "spectrum_mgmt_required") == 0) { 3308 conf->spectrum_mgmt_required = atoi(pos); 3309 } else if (os_strcmp(buf, "wowlan_triggers") == 0) { 3310 os_free(bss->wowlan_triggers); 3311 bss->wowlan_triggers = os_strdup(pos); 3312 } else { 3313 wpa_printf(MSG_ERROR, 3314 "Line %d: unknown configuration item '%s'", 3315 line, buf); 3316 return 1; 3317 } 3318 3319 return 0; 3320 } 3321 3322 3323 /** 3324 * hostapd_config_read - Read and parse a configuration file 3325 * @fname: Configuration file name (including path, if needed) 3326 * Returns: Allocated configuration data structure 3327 */ 3328 struct hostapd_config * hostapd_config_read(const char *fname) 3329 { 3330 struct hostapd_config *conf; 3331 FILE *f; 3332 char buf[512], *pos; 3333 int line = 0; 3334 int errors = 0; 3335 size_t i; 3336 3337 f = fopen(fname, "r"); 3338 if (f == NULL) { 3339 wpa_printf(MSG_ERROR, "Could not open configuration file '%s' " 3340 "for reading.", fname); 3341 return NULL; 3342 } 3343 3344 conf = hostapd_config_defaults(); 3345 if (conf == NULL) { 3346 fclose(f); 3347 return NULL; 3348 } 3349 3350 /* set default driver based on configuration */ 3351 conf->driver = wpa_drivers[0]; 3352 if (conf->driver == NULL) { 3353 wpa_printf(MSG_ERROR, "No driver wrappers registered!"); 3354 hostapd_config_free(conf); 3355 fclose(f); 3356 return NULL; 3357 } 3358 3359 conf->last_bss = conf->bss[0]; 3360 3361 while (fgets(buf, sizeof(buf), f)) { 3362 struct hostapd_bss_config *bss; 3363 3364 bss = conf->last_bss; 3365 line++; 3366 3367 if (buf[0] == '#') 3368 continue; 3369 pos = buf; 3370 while (*pos != '\0') { 3371 if (*pos == '\n') { 3372 *pos = '\0'; 3373 break; 3374 } 3375 pos++; 3376 } 3377 if (buf[0] == '\0') 3378 continue; 3379 3380 pos = os_strchr(buf, '='); 3381 if (pos == NULL) { 3382 wpa_printf(MSG_ERROR, "Line %d: invalid line '%s'", 3383 line, buf); 3384 errors++; 3385 continue; 3386 } 3387 *pos = '\0'; 3388 pos++; 3389 errors += hostapd_config_fill(conf, bss, buf, pos, line); 3390 } 3391 3392 fclose(f); 3393 3394 for (i = 0; i < conf->num_bss; i++) 3395 hostapd_set_security_params(conf->bss[i], 1); 3396 3397 if (hostapd_config_check(conf, 1)) 3398 errors++; 3399 3400 #ifndef WPA_IGNORE_CONFIG_ERRORS 3401 if (errors) { 3402 wpa_printf(MSG_ERROR, "%d errors found in configuration file " 3403 "'%s'", errors, fname); 3404 hostapd_config_free(conf); 3405 conf = NULL; 3406 } 3407 #endif /* WPA_IGNORE_CONFIG_ERRORS */ 3408 3409 return conf; 3410 } 3411 3412 3413 int hostapd_set_iface(struct hostapd_config *conf, 3414 struct hostapd_bss_config *bss, char *field, char *value) 3415 { 3416 int errors; 3417 size_t i; 3418 3419 errors = hostapd_config_fill(conf, bss, field, value, 0); 3420 if (errors) { 3421 wpa_printf(MSG_INFO, "Failed to set configuration field '%s' " 3422 "to value '%s'", field, value); 3423 return -1; 3424 } 3425 3426 for (i = 0; i < conf->num_bss; i++) 3427 hostapd_set_security_params(conf->bss[i], 0); 3428 3429 if (hostapd_config_check(conf, 0)) { 3430 wpa_printf(MSG_ERROR, "Configuration check failed"); 3431 return -1; 3432 } 3433 3434 return 0; 3435 } 3436