1 /* 2 * Neighbor Discovery snooping for Proxy ARP 3 * Copyright (c) 2014, Qualcomm Atheros, Inc. 4 * 5 * This software may be distributed under the terms of the BSD license. 6 * See README for more details. 7 */ 8 9 #include "utils/includes.h" 10 #include <netinet/ip6.h> 11 #include <netinet/icmp6.h> 12 13 #include "utils/common.h" 14 #include "l2_packet/l2_packet.h" 15 #include "hostapd.h" 16 #include "sta_info.h" 17 #include "ap_drv_ops.h" 18 #include "list.h" 19 #include "x_snoop.h" 20 21 struct ip6addr { 22 struct in6_addr addr; 23 struct dl_list list; 24 }; 25 26 struct icmpv6_ndmsg { 27 struct ip6_hdr ipv6h; 28 struct icmp6_hdr icmp6h; 29 struct in6_addr target_addr; 30 u8 opt_type; 31 u8 len; 32 u8 opt_lladdr[0]; 33 } STRUCT_PACKED; 34 35 #define ROUTER_ADVERTISEMENT 134 36 #define NEIGHBOR_SOLICITATION 135 37 #define NEIGHBOR_ADVERTISEMENT 136 38 #define SOURCE_LL_ADDR 1 39 40 static int sta_ip6addr_add(struct sta_info *sta, struct in6_addr *addr) 41 { 42 struct ip6addr *ip6addr; 43 44 ip6addr = os_zalloc(sizeof(*ip6addr)); 45 if (!ip6addr) 46 return -1; 47 48 os_memcpy(&ip6addr->addr, addr, sizeof(*addr)); 49 50 dl_list_add_tail(&sta->ip6addr, &ip6addr->list); 51 52 return 0; 53 } 54 55 56 void sta_ip6addr_del(struct hostapd_data *hapd, struct sta_info *sta) 57 { 58 struct ip6addr *ip6addr, *prev; 59 60 dl_list_for_each_safe(ip6addr, prev, &sta->ip6addr, struct ip6addr, 61 list) { 62 hostapd_drv_br_delete_ip_neigh(hapd, 6, (u8 *) &ip6addr->addr); 63 os_free(ip6addr); 64 } 65 } 66 67 68 static int sta_has_ip6addr(struct sta_info *sta, struct in6_addr *addr) 69 { 70 struct ip6addr *ip6addr; 71 72 dl_list_for_each(ip6addr, &sta->ip6addr, struct ip6addr, list) { 73 if (ip6addr->addr.s6_addr32[0] == addr->s6_addr32[0] && 74 ip6addr->addr.s6_addr32[1] == addr->s6_addr32[1] && 75 ip6addr->addr.s6_addr32[2] == addr->s6_addr32[2] && 76 ip6addr->addr.s6_addr32[3] == addr->s6_addr32[3]) 77 return 1; 78 } 79 80 return 0; 81 } 82 83 84 static void ucast_to_stas(struct hostapd_data *hapd, const u8 *buf, size_t len) 85 { 86 struct sta_info *sta; 87 88 for (sta = hapd->sta_list; sta; sta = sta->next) { 89 if (!(sta->flags & WLAN_STA_AUTHORIZED)) 90 continue; 91 x_snoop_mcast_to_ucast_convert_send(hapd, sta, (u8 *) buf, len); 92 } 93 } 94 95 96 static void handle_ndisc(void *ctx, const u8 *src_addr, const u8 *buf, 97 size_t len) 98 { 99 struct hostapd_data *hapd = ctx; 100 struct icmpv6_ndmsg *msg; 101 struct in6_addr *saddr; 102 struct sta_info *sta; 103 int res; 104 char addrtxt[INET6_ADDRSTRLEN + 1]; 105 106 if (len < ETH_HLEN + sizeof(struct ip6_hdr) + sizeof(struct icmp6_hdr)) 107 return; 108 msg = (struct icmpv6_ndmsg *) &buf[ETH_HLEN]; 109 switch (msg->icmp6h.icmp6_type) { 110 case NEIGHBOR_SOLICITATION: 111 if (len < ETH_HLEN + sizeof(*msg)) 112 return; 113 if (msg->opt_type != SOURCE_LL_ADDR) 114 return; 115 116 saddr = &msg->ipv6h.ip6_src; 117 if (!(saddr->s6_addr32[0] == 0 && saddr->s6_addr32[1] == 0 && 118 saddr->s6_addr32[2] == 0 && saddr->s6_addr32[3] == 0)) { 119 if (len < ETH_HLEN + sizeof(*msg) + ETH_ALEN) 120 return; 121 sta = ap_get_sta(hapd, msg->opt_lladdr); 122 if (!sta) 123 return; 124 125 if (sta_has_ip6addr(sta, saddr)) 126 return; 127 128 if (inet_ntop(AF_INET6, saddr, addrtxt, sizeof(addrtxt)) 129 == NULL) 130 addrtxt[0] = '\0'; 131 wpa_printf(MSG_DEBUG, "ndisc_snoop: Learned new IPv6 address %s for " 132 MACSTR, addrtxt, MAC2STR(sta->addr)); 133 hostapd_drv_br_delete_ip_neigh(hapd, 6, (u8 *) saddr); 134 res = hostapd_drv_br_add_ip_neigh(hapd, 6, (u8 *) saddr, 135 128, sta->addr); 136 if (res) { 137 wpa_printf(MSG_ERROR, 138 "ndisc_snoop: Adding ip neigh failed: %d", 139 res); 140 return; 141 } 142 143 if (sta_ip6addr_add(sta, saddr)) 144 return; 145 } 146 break; 147 case ROUTER_ADVERTISEMENT: 148 if (hapd->conf->disable_dgaf) 149 ucast_to_stas(hapd, buf, len); 150 break; 151 case NEIGHBOR_ADVERTISEMENT: 152 if (hapd->conf->na_mcast_to_ucast) 153 ucast_to_stas(hapd, buf, len); 154 break; 155 default: 156 break; 157 } 158 } 159 160 161 int ndisc_snoop_init(struct hostapd_data *hapd) 162 { 163 hapd->sock_ndisc = x_snoop_get_l2_packet(hapd, handle_ndisc, 164 L2_PACKET_FILTER_NDISC); 165 if (hapd->sock_ndisc == NULL) { 166 wpa_printf(MSG_DEBUG, 167 "ndisc_snoop: Failed to initialize L2 packet processing for NDISC packets: %s", 168 strerror(errno)); 169 return -1; 170 } 171 172 return 0; 173 } 174 175 176 void ndisc_snoop_deinit(struct hostapd_data *hapd) 177 { 178 l2_packet_deinit(hapd->sock_ndisc); 179 } 180
