1 /* 2 * hostapd / Callback functions for driver wrappers 3 * Copyright (c) 2002-2013, Jouni Malinen <j (at) w1.fi> 4 * 5 * This software may be distributed under the terms of the BSD license. 6 * See README for more details. 7 */ 8 9 #include "utils/includes.h" 10 11 #include "utils/common.h" 12 #include "utils/eloop.h" 13 #include "radius/radius.h" 14 #include "drivers/driver.h" 15 #include "common/ieee802_11_defs.h" 16 #include "common/ieee802_11_common.h" 17 #include "common/wpa_ctrl.h" 18 #include "crypto/random.h" 19 #include "p2p/p2p.h" 20 #include "wps/wps.h" 21 #include "fst/fst.h" 22 #include "wnm_ap.h" 23 #include "hostapd.h" 24 #include "ieee802_11.h" 25 #include "ieee802_11_auth.h" 26 #include "sta_info.h" 27 #include "accounting.h" 28 #include "tkip_countermeasures.h" 29 #include "ieee802_1x.h" 30 #include "wpa_auth.h" 31 #include "wps_hostapd.h" 32 #include "ap_drv_ops.h" 33 #include "ap_config.h" 34 #include "ap_mlme.h" 35 #include "hw_features.h" 36 #include "dfs.h" 37 #include "beacon.h" 38 #include "mbo_ap.h" 39 #include "dpp_hostapd.h" 40 #include "fils_hlp.h" 41 42 43 #ifdef CONFIG_FILS 44 void hostapd_notify_assoc_fils_finish(struct hostapd_data *hapd, 45 struct sta_info *sta) 46 { 47 u16 reply_res = WLAN_STATUS_SUCCESS; 48 struct ieee802_11_elems elems; 49 u8 buf[IEEE80211_MAX_MMPDU_SIZE], *p = buf; 50 int new_assoc; 51 52 wpa_printf(MSG_DEBUG, "%s FILS: Finish association with " MACSTR, 53 __func__, MAC2STR(sta->addr)); 54 eloop_cancel_timeout(fils_hlp_timeout, hapd, sta); 55 if (!sta->fils_pending_assoc_req) 56 return; 57 58 ieee802_11_parse_elems(sta->fils_pending_assoc_req, 59 sta->fils_pending_assoc_req_len, &elems, 0); 60 if (!elems.fils_session) { 61 wpa_printf(MSG_DEBUG, "%s failed to find FILS Session element", 62 __func__); 63 return; 64 } 65 66 p = hostapd_eid_assoc_fils_session(sta->wpa_sm, p, 67 elems.fils_session, 68 sta->fils_hlp_resp); 69 70 reply_res = hostapd_sta_assoc(hapd, sta->addr, 71 sta->fils_pending_assoc_is_reassoc, 72 WLAN_STATUS_SUCCESS, 73 buf, p - buf); 74 ap_sta_set_authorized(hapd, sta, 1); 75 new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0; 76 sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC; 77 sta->flags &= ~WLAN_STA_WNM_SLEEP_MODE; 78 hostapd_set_sta_flags(hapd, sta); 79 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FILS); 80 ieee802_1x_notify_port_enabled(sta->eapol_sm, 1); 81 hostapd_new_assoc_sta(hapd, sta, !new_assoc); 82 os_free(sta->fils_pending_assoc_req); 83 sta->fils_pending_assoc_req = NULL; 84 sta->fils_pending_assoc_req_len = 0; 85 wpabuf_free(sta->fils_hlp_resp); 86 sta->fils_hlp_resp = NULL; 87 wpabuf_free(sta->hlp_dhcp_discover); 88 sta->hlp_dhcp_discover = NULL; 89 fils_hlp_deinit(hapd); 90 91 /* 92 * Remove the station in case transmission of a success response fails 93 * (the STA was added associated to the driver) or if the station was 94 * previously added unassociated. 95 */ 96 if (reply_res != WLAN_STATUS_SUCCESS || sta->added_unassoc) { 97 hostapd_drv_sta_remove(hapd, sta->addr); 98 sta->added_unassoc = 0; 99 } 100 } 101 #endif /* CONFIG_FILS */ 102 103 104 int hostapd_notif_assoc(struct hostapd_data *hapd, const u8 *addr, 105 const u8 *req_ies, size_t req_ies_len, int reassoc) 106 { 107 struct sta_info *sta; 108 int new_assoc, res; 109 struct ieee802_11_elems elems; 110 const u8 *ie; 111 size_t ielen; 112 #if defined(CONFIG_IEEE80211R_AP) || defined(CONFIG_IEEE80211W) || defined(CONFIG_FILS) 113 u8 buf[sizeof(struct ieee80211_mgmt) + 1024]; 114 u8 *p = buf; 115 #endif /* CONFIG_IEEE80211R_AP || CONFIG_IEEE80211W || CONFIG_FILS */ 116 u16 reason = WLAN_REASON_UNSPECIFIED; 117 u16 status = WLAN_STATUS_SUCCESS; 118 const u8 *p2p_dev_addr = NULL; 119 120 if (addr == NULL) { 121 /* 122 * This could potentially happen with unexpected event from the 123 * driver wrapper. This was seen at least in one case where the 124 * driver ended up being set to station mode while hostapd was 125 * running, so better make sure we stop processing such an 126 * event here. 127 */ 128 wpa_printf(MSG_DEBUG, 129 "hostapd_notif_assoc: Skip event with no address"); 130 return -1; 131 } 132 random_add_randomness(addr, ETH_ALEN); 133 134 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211, 135 HOSTAPD_LEVEL_INFO, "associated"); 136 137 ieee802_11_parse_elems(req_ies, req_ies_len, &elems, 0); 138 if (elems.wps_ie) { 139 ie = elems.wps_ie - 2; 140 ielen = elems.wps_ie_len + 2; 141 wpa_printf(MSG_DEBUG, "STA included WPS IE in (Re)AssocReq"); 142 } else if (elems.rsn_ie) { 143 ie = elems.rsn_ie - 2; 144 ielen = elems.rsn_ie_len + 2; 145 wpa_printf(MSG_DEBUG, "STA included RSN IE in (Re)AssocReq"); 146 } else if (elems.wpa_ie) { 147 ie = elems.wpa_ie - 2; 148 ielen = elems.wpa_ie_len + 2; 149 wpa_printf(MSG_DEBUG, "STA included WPA IE in (Re)AssocReq"); 150 #ifdef CONFIG_HS20 151 } else if (elems.osen) { 152 ie = elems.osen - 2; 153 ielen = elems.osen_len + 2; 154 wpa_printf(MSG_DEBUG, "STA included OSEN IE in (Re)AssocReq"); 155 #endif /* CONFIG_HS20 */ 156 } else { 157 ie = NULL; 158 ielen = 0; 159 wpa_printf(MSG_DEBUG, 160 "STA did not include WPS/RSN/WPA IE in (Re)AssocReq"); 161 } 162 163 sta = ap_get_sta(hapd, addr); 164 if (sta) { 165 ap_sta_no_session_timeout(hapd, sta); 166 accounting_sta_stop(hapd, sta); 167 168 /* 169 * Make sure that the previously registered inactivity timer 170 * will not remove the STA immediately. 171 */ 172 sta->timeout_next = STA_NULLFUNC; 173 } else { 174 sta = ap_sta_add(hapd, addr); 175 if (sta == NULL) { 176 hostapd_drv_sta_disassoc(hapd, addr, 177 WLAN_REASON_DISASSOC_AP_BUSY); 178 return -1; 179 } 180 } 181 sta->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS | WLAN_STA_WPS2); 182 183 /* 184 * ACL configurations to the drivers (implementing AP SME and ACL 185 * offload) without hostapd's knowledge, can result in a disconnection 186 * though the driver accepts the connection. Skip the hostapd check for 187 * ACL if the driver supports ACL offload to avoid potentially 188 * conflicting ACL rules. 189 */ 190 if (hapd->iface->drv_max_acl_mac_addrs == 0 && 191 hostapd_check_acl(hapd, addr, NULL) != HOSTAPD_ACL_ACCEPT) { 192 wpa_printf(MSG_INFO, "STA " MACSTR " not allowed to connect", 193 MAC2STR(addr)); 194 reason = WLAN_REASON_UNSPECIFIED; 195 goto fail; 196 } 197 198 #ifdef CONFIG_P2P 199 if (elems.p2p) { 200 wpabuf_free(sta->p2p_ie); 201 sta->p2p_ie = ieee802_11_vendor_ie_concat(req_ies, req_ies_len, 202 P2P_IE_VENDOR_TYPE); 203 if (sta->p2p_ie) 204 p2p_dev_addr = p2p_get_go_dev_addr(sta->p2p_ie); 205 } 206 #endif /* CONFIG_P2P */ 207 208 #ifdef CONFIG_IEEE80211N 209 #ifdef NEED_AP_MLME 210 if (elems.ht_capabilities && 211 (hapd->iface->conf->ht_capab & 212 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET)) { 213 struct ieee80211_ht_capabilities *ht_cap = 214 (struct ieee80211_ht_capabilities *) 215 elems.ht_capabilities; 216 217 if (le_to_host16(ht_cap->ht_capabilities_info) & 218 HT_CAP_INFO_40MHZ_INTOLERANT) 219 ht40_intolerant_add(hapd->iface, sta); 220 } 221 #endif /* NEED_AP_MLME */ 222 #endif /* CONFIG_IEEE80211N */ 223 224 #ifdef CONFIG_INTERWORKING 225 if (elems.ext_capab && elems.ext_capab_len > 4) { 226 if (elems.ext_capab[4] & 0x01) 227 sta->qos_map_enabled = 1; 228 } 229 #endif /* CONFIG_INTERWORKING */ 230 231 #ifdef CONFIG_HS20 232 wpabuf_free(sta->hs20_ie); 233 if (elems.hs20 && elems.hs20_len > 4) { 234 sta->hs20_ie = wpabuf_alloc_copy(elems.hs20 + 4, 235 elems.hs20_len - 4); 236 } else 237 sta->hs20_ie = NULL; 238 #endif /* CONFIG_HS20 */ 239 240 #ifdef CONFIG_FST 241 wpabuf_free(sta->mb_ies); 242 if (hapd->iface->fst) 243 sta->mb_ies = mb_ies_by_info(&elems.mb_ies); 244 else 245 sta->mb_ies = NULL; 246 #endif /* CONFIG_FST */ 247 248 mbo_ap_check_sta_assoc(hapd, sta, &elems); 249 250 ap_copy_sta_supp_op_classes(sta, elems.supp_op_classes, 251 elems.supp_op_classes_len); 252 253 if (hapd->conf->wpa) { 254 if (ie == NULL || ielen == 0) { 255 #ifdef CONFIG_WPS 256 if (hapd->conf->wps_state) { 257 wpa_printf(MSG_DEBUG, 258 "STA did not include WPA/RSN IE in (Re)Association Request - possible WPS use"); 259 sta->flags |= WLAN_STA_MAYBE_WPS; 260 goto skip_wpa_check; 261 } 262 #endif /* CONFIG_WPS */ 263 264 wpa_printf(MSG_DEBUG, "No WPA/RSN IE from STA"); 265 return -1; 266 } 267 #ifdef CONFIG_WPS 268 if (hapd->conf->wps_state && ie[0] == 0xdd && ie[1] >= 4 && 269 os_memcmp(ie + 2, "\x00\x50\xf2\x04", 4) == 0) { 270 struct wpabuf *wps; 271 272 sta->flags |= WLAN_STA_WPS; 273 wps = ieee802_11_vendor_ie_concat(ie, ielen, 274 WPS_IE_VENDOR_TYPE); 275 if (wps) { 276 if (wps_is_20(wps)) { 277 wpa_printf(MSG_DEBUG, 278 "WPS: STA supports WPS 2.0"); 279 sta->flags |= WLAN_STA_WPS2; 280 } 281 wpabuf_free(wps); 282 } 283 goto skip_wpa_check; 284 } 285 #endif /* CONFIG_WPS */ 286 287 if (sta->wpa_sm == NULL) 288 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth, 289 sta->addr, 290 p2p_dev_addr); 291 if (sta->wpa_sm == NULL) { 292 wpa_printf(MSG_ERROR, 293 "Failed to initialize WPA state machine"); 294 return -1; 295 } 296 res = wpa_validate_wpa_ie(hapd->wpa_auth, sta->wpa_sm, 297 ie, ielen, 298 elems.mdie, elems.mdie_len, 299 elems.owe_dh, elems.owe_dh_len); 300 if (res != WPA_IE_OK) { 301 wpa_printf(MSG_DEBUG, 302 "WPA/RSN information element rejected? (res %u)", 303 res); 304 wpa_hexdump(MSG_DEBUG, "IE", ie, ielen); 305 if (res == WPA_INVALID_GROUP) { 306 reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID; 307 status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID; 308 } else if (res == WPA_INVALID_PAIRWISE) { 309 reason = WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID; 310 status = WLAN_STATUS_PAIRWISE_CIPHER_NOT_VALID; 311 } else if (res == WPA_INVALID_AKMP) { 312 reason = WLAN_REASON_AKMP_NOT_VALID; 313 status = WLAN_STATUS_AKMP_NOT_VALID; 314 } 315 #ifdef CONFIG_IEEE80211W 316 else if (res == WPA_MGMT_FRAME_PROTECTION_VIOLATION) { 317 reason = WLAN_REASON_INVALID_IE; 318 status = WLAN_STATUS_INVALID_IE; 319 } else if (res == WPA_INVALID_MGMT_GROUP_CIPHER) { 320 reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID; 321 status = WLAN_STATUS_GROUP_CIPHER_NOT_VALID; 322 } 323 #endif /* CONFIG_IEEE80211W */ 324 else { 325 reason = WLAN_REASON_INVALID_IE; 326 status = WLAN_STATUS_INVALID_IE; 327 } 328 goto fail; 329 } 330 #ifdef CONFIG_IEEE80211W 331 if ((sta->flags & WLAN_STA_MFP) && !sta->sa_query_timed_out && 332 sta->sa_query_count > 0) 333 ap_check_sa_query_timeout(hapd, sta); 334 if ((sta->flags & WLAN_STA_MFP) && !sta->sa_query_timed_out && 335 (sta->auth_alg != WLAN_AUTH_FT)) { 336 /* 337 * STA has already been associated with MFP and SA 338 * Query timeout has not been reached. Reject the 339 * association attempt temporarily and start SA Query, 340 * if one is not pending. 341 */ 342 343 if (sta->sa_query_count == 0) 344 ap_sta_start_sa_query(hapd, sta); 345 346 status = WLAN_STATUS_ASSOC_REJECTED_TEMPORARILY; 347 348 p = hostapd_eid_assoc_comeback_time(hapd, sta, p); 349 350 hostapd_sta_assoc(hapd, addr, reassoc, status, buf, 351 p - buf); 352 return 0; 353 } 354 355 if (wpa_auth_uses_mfp(sta->wpa_sm)) 356 sta->flags |= WLAN_STA_MFP; 357 else 358 sta->flags &= ~WLAN_STA_MFP; 359 #endif /* CONFIG_IEEE80211W */ 360 361 #ifdef CONFIG_IEEE80211R_AP 362 if (sta->auth_alg == WLAN_AUTH_FT) { 363 status = wpa_ft_validate_reassoc(sta->wpa_sm, req_ies, 364 req_ies_len); 365 if (status != WLAN_STATUS_SUCCESS) { 366 if (status == WLAN_STATUS_INVALID_PMKID) 367 reason = WLAN_REASON_INVALID_IE; 368 if (status == WLAN_STATUS_INVALID_MDIE) 369 reason = WLAN_REASON_INVALID_IE; 370 if (status == WLAN_STATUS_INVALID_FTIE) 371 reason = WLAN_REASON_INVALID_IE; 372 goto fail; 373 } 374 } 375 #endif /* CONFIG_IEEE80211R_AP */ 376 } else if (hapd->conf->wps_state) { 377 #ifdef CONFIG_WPS 378 struct wpabuf *wps; 379 380 if (req_ies) 381 wps = ieee802_11_vendor_ie_concat(req_ies, req_ies_len, 382 WPS_IE_VENDOR_TYPE); 383 else 384 wps = NULL; 385 #ifdef CONFIG_WPS_STRICT 386 if (wps && wps_validate_assoc_req(wps) < 0) { 387 reason = WLAN_REASON_INVALID_IE; 388 status = WLAN_STATUS_INVALID_IE; 389 wpabuf_free(wps); 390 goto fail; 391 } 392 #endif /* CONFIG_WPS_STRICT */ 393 if (wps) { 394 sta->flags |= WLAN_STA_WPS; 395 if (wps_is_20(wps)) { 396 wpa_printf(MSG_DEBUG, 397 "WPS: STA supports WPS 2.0"); 398 sta->flags |= WLAN_STA_WPS2; 399 } 400 } else 401 sta->flags |= WLAN_STA_MAYBE_WPS; 402 wpabuf_free(wps); 403 #endif /* CONFIG_WPS */ 404 #ifdef CONFIG_HS20 405 } else if (hapd->conf->osen) { 406 if (elems.osen == NULL) { 407 hostapd_logger( 408 hapd, sta->addr, HOSTAPD_MODULE_IEEE80211, 409 HOSTAPD_LEVEL_INFO, 410 "No HS 2.0 OSEN element in association request"); 411 return WLAN_STATUS_INVALID_IE; 412 } 413 414 wpa_printf(MSG_DEBUG, "HS 2.0: OSEN association"); 415 if (sta->wpa_sm == NULL) 416 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth, 417 sta->addr, NULL); 418 if (sta->wpa_sm == NULL) { 419 wpa_printf(MSG_WARNING, 420 "Failed to initialize WPA state machine"); 421 return WLAN_STATUS_UNSPECIFIED_FAILURE; 422 } 423 if (wpa_validate_osen(hapd->wpa_auth, sta->wpa_sm, 424 elems.osen - 2, elems.osen_len + 2) < 0) 425 return WLAN_STATUS_INVALID_IE; 426 #endif /* CONFIG_HS20 */ 427 } 428 429 #ifdef CONFIG_MBO 430 if (hapd->conf->mbo_enabled && (hapd->conf->wpa & 2) && 431 elems.mbo && sta->cell_capa && !(sta->flags & WLAN_STA_MFP) && 432 hapd->conf->ieee80211w != NO_MGMT_FRAME_PROTECTION) { 433 wpa_printf(MSG_INFO, 434 "MBO: Reject WPA2 association without PMF"); 435 return WLAN_STATUS_UNSPECIFIED_FAILURE; 436 } 437 #endif /* CONFIG_MBO */ 438 439 #ifdef CONFIG_WPS 440 skip_wpa_check: 441 #endif /* CONFIG_WPS */ 442 443 #ifdef CONFIG_IEEE80211R_AP 444 p = wpa_sm_write_assoc_resp_ies(sta->wpa_sm, buf, sizeof(buf), 445 sta->auth_alg, req_ies, req_ies_len); 446 #endif /* CONFIG_IEEE80211R_AP */ 447 448 #ifdef CONFIG_FILS 449 if (sta->auth_alg == WLAN_AUTH_FILS_SK || 450 sta->auth_alg == WLAN_AUTH_FILS_SK_PFS || 451 sta->auth_alg == WLAN_AUTH_FILS_PK) { 452 int delay_assoc = 0; 453 454 if (!req_ies) 455 return WLAN_STATUS_UNSPECIFIED_FAILURE; 456 457 if (!wpa_fils_validate_fils_session(sta->wpa_sm, req_ies, 458 req_ies_len, 459 sta->fils_session)) { 460 wpa_printf(MSG_DEBUG, 461 "FILS: Session validation failed"); 462 return WLAN_STATUS_UNSPECIFIED_FAILURE; 463 } 464 465 res = wpa_fils_validate_key_confirm(sta->wpa_sm, req_ies, 466 req_ies_len); 467 if (res < 0) { 468 wpa_printf(MSG_DEBUG, 469 "FILS: Key Confirm validation failed"); 470 return WLAN_STATUS_UNSPECIFIED_FAILURE; 471 } 472 473 if (fils_process_hlp(hapd, sta, req_ies, req_ies_len) > 0) { 474 wpa_printf(MSG_DEBUG, 475 "FILS: Delaying Assoc Response (HLP)"); 476 delay_assoc = 1; 477 } else { 478 wpa_printf(MSG_DEBUG, 479 "FILS: Going ahead with Assoc Response (no HLP)"); 480 } 481 482 if (sta) { 483 wpa_printf(MSG_DEBUG, "FILS: HLP callback cleanup"); 484 eloop_cancel_timeout(fils_hlp_timeout, hapd, sta); 485 os_free(sta->fils_pending_assoc_req); 486 sta->fils_pending_assoc_req = NULL; 487 sta->fils_pending_assoc_req_len = 0; 488 wpabuf_free(sta->fils_hlp_resp); 489 sta->fils_hlp_resp = NULL; 490 sta->fils_drv_assoc_finish = 0; 491 } 492 493 if (sta && delay_assoc && status == WLAN_STATUS_SUCCESS) { 494 u8 *req_tmp; 495 496 req_tmp = os_malloc(req_ies_len); 497 if (!req_tmp) { 498 wpa_printf(MSG_DEBUG, 499 "FILS: buffer allocation failed for assoc req"); 500 goto fail; 501 } 502 os_memcpy(req_tmp, req_ies, req_ies_len); 503 sta->fils_pending_assoc_req = req_tmp; 504 sta->fils_pending_assoc_req_len = req_ies_len; 505 sta->fils_pending_assoc_is_reassoc = reassoc; 506 sta->fils_drv_assoc_finish = 1; 507 wpa_printf(MSG_DEBUG, 508 "FILS: Waiting for HLP processing before sending (Re)Association Response frame to " 509 MACSTR, MAC2STR(sta->addr)); 510 eloop_register_timeout( 511 0, hapd->conf->fils_hlp_wait_time * 1024, 512 fils_hlp_timeout, hapd, sta); 513 return 0; 514 } 515 p = hostapd_eid_assoc_fils_session(sta->wpa_sm, p, 516 elems.fils_session, 517 sta->fils_hlp_resp); 518 wpa_hexdump(MSG_DEBUG, "FILS Assoc Resp BUF (IEs)", 519 buf, p - buf); 520 } 521 #endif /* CONFIG_FILS */ 522 523 #if defined(CONFIG_IEEE80211R_AP) || defined(CONFIG_FILS) 524 hostapd_sta_assoc(hapd, addr, reassoc, status, buf, p - buf); 525 526 if (sta->auth_alg == WLAN_AUTH_FT || 527 sta->auth_alg == WLAN_AUTH_FILS_SK || 528 sta->auth_alg == WLAN_AUTH_FILS_SK_PFS || 529 sta->auth_alg == WLAN_AUTH_FILS_PK) 530 ap_sta_set_authorized(hapd, sta, 1); 531 #else /* CONFIG_IEEE80211R_AP || CONFIG_FILS */ 532 /* Keep compiler silent about unused variables */ 533 if (status) { 534 } 535 #endif /* CONFIG_IEEE80211R_AP || CONFIG_FILS */ 536 537 new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0; 538 sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC; 539 sta->flags &= ~WLAN_STA_WNM_SLEEP_MODE; 540 541 hostapd_set_sta_flags(hapd, sta); 542 543 if (reassoc && (sta->auth_alg == WLAN_AUTH_FT)) 544 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FT); 545 #ifdef CONFIG_FILS 546 else if (sta->auth_alg == WLAN_AUTH_FILS_SK || 547 sta->auth_alg == WLAN_AUTH_FILS_SK_PFS || 548 sta->auth_alg == WLAN_AUTH_FILS_PK) 549 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC_FILS); 550 #endif /* CONFIG_FILS */ 551 else 552 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC); 553 554 hostapd_new_assoc_sta(hapd, sta, !new_assoc); 555 556 ieee802_1x_notify_port_enabled(sta->eapol_sm, 1); 557 558 #ifdef CONFIG_P2P 559 if (req_ies) { 560 p2p_group_notif_assoc(hapd->p2p_group, sta->addr, 561 req_ies, req_ies_len); 562 } 563 #endif /* CONFIG_P2P */ 564 565 return 0; 566 567 fail: 568 #ifdef CONFIG_IEEE80211R_AP 569 hostapd_sta_assoc(hapd, addr, reassoc, status, buf, p - buf); 570 #endif /* CONFIG_IEEE80211R_AP */ 571 hostapd_drv_sta_disassoc(hapd, sta->addr, reason); 572 ap_free_sta(hapd, sta); 573 return -1; 574 } 575 576 577 void hostapd_notif_disassoc(struct hostapd_data *hapd, const u8 *addr) 578 { 579 struct sta_info *sta; 580 581 if (addr == NULL) { 582 /* 583 * This could potentially happen with unexpected event from the 584 * driver wrapper. This was seen at least in one case where the 585 * driver ended up reporting a station mode event while hostapd 586 * was running, so better make sure we stop processing such an 587 * event here. 588 */ 589 wpa_printf(MSG_DEBUG, 590 "hostapd_notif_disassoc: Skip event with no address"); 591 return; 592 } 593 594 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211, 595 HOSTAPD_LEVEL_INFO, "disassociated"); 596 597 sta = ap_get_sta(hapd, addr); 598 if (sta == NULL) { 599 wpa_printf(MSG_DEBUG, 600 "Disassociation notification for unknown STA " 601 MACSTR, MAC2STR(addr)); 602 return; 603 } 604 605 ap_sta_set_authorized(hapd, sta, 0); 606 sta->flags &= ~(WLAN_STA_AUTH | WLAN_STA_ASSOC); 607 wpa_auth_sm_event(sta->wpa_sm, WPA_DISASSOC); 608 sta->acct_terminate_cause = RADIUS_ACCT_TERMINATE_CAUSE_USER_REQUEST; 609 ieee802_1x_notify_port_enabled(sta->eapol_sm, 0); 610 ap_free_sta(hapd, sta); 611 } 612 613 614 void hostapd_event_sta_low_ack(struct hostapd_data *hapd, const u8 *addr) 615 { 616 struct sta_info *sta = ap_get_sta(hapd, addr); 617 618 if (!sta || !hapd->conf->disassoc_low_ack) 619 return; 620 621 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211, 622 HOSTAPD_LEVEL_INFO, 623 "disconnected due to excessive missing ACKs"); 624 hostapd_drv_sta_disassoc(hapd, addr, WLAN_REASON_DISASSOC_LOW_ACK); 625 ap_sta_disassociate(hapd, sta, WLAN_REASON_DISASSOC_LOW_ACK); 626 } 627 628 629 void hostapd_event_ch_switch(struct hostapd_data *hapd, int freq, int ht, 630 int offset, int width, int cf1, int cf2) 631 { 632 #ifdef NEED_AP_MLME 633 int channel, chwidth, is_dfs; 634 u8 seg0_idx = 0, seg1_idx = 0; 635 636 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211, 637 HOSTAPD_LEVEL_INFO, 638 "driver had channel switch: freq=%d, ht=%d, offset=%d, width=%d (%s), cf1=%d, cf2=%d", 639 freq, ht, offset, width, channel_width_to_string(width), 640 cf1, cf2); 641 642 hapd->iface->freq = freq; 643 644 channel = hostapd_hw_get_channel(hapd, freq); 645 if (!channel) { 646 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211, 647 HOSTAPD_LEVEL_WARNING, 648 "driver switched to bad channel!"); 649 return; 650 } 651 652 switch (width) { 653 case CHAN_WIDTH_80: 654 chwidth = VHT_CHANWIDTH_80MHZ; 655 break; 656 case CHAN_WIDTH_80P80: 657 chwidth = VHT_CHANWIDTH_80P80MHZ; 658 break; 659 case CHAN_WIDTH_160: 660 chwidth = VHT_CHANWIDTH_160MHZ; 661 break; 662 case CHAN_WIDTH_20_NOHT: 663 case CHAN_WIDTH_20: 664 case CHAN_WIDTH_40: 665 default: 666 chwidth = VHT_CHANWIDTH_USE_HT; 667 break; 668 } 669 670 switch (hapd->iface->current_mode->mode) { 671 case HOSTAPD_MODE_IEEE80211A: 672 if (cf1 > 5000) 673 seg0_idx = (cf1 - 5000) / 5; 674 if (cf2 > 5000) 675 seg1_idx = (cf2 - 5000) / 5; 676 break; 677 default: 678 ieee80211_freq_to_chan(cf1, &seg0_idx); 679 ieee80211_freq_to_chan(cf2, &seg1_idx); 680 break; 681 } 682 683 hapd->iconf->channel = channel; 684 hapd->iconf->ieee80211n = ht; 685 if (!ht) 686 hapd->iconf->ieee80211ac = 0; 687 hapd->iconf->secondary_channel = offset; 688 hapd->iconf->vht_oper_chwidth = chwidth; 689 hapd->iconf->vht_oper_centr_freq_seg0_idx = seg0_idx; 690 hapd->iconf->vht_oper_centr_freq_seg1_idx = seg1_idx; 691 692 is_dfs = ieee80211_is_dfs(freq); 693 694 if (hapd->csa_in_progress && 695 freq == hapd->cs_freq_params.freq) { 696 hostapd_cleanup_cs_params(hapd); 697 ieee802_11_set_beacon(hapd); 698 699 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_CSA_FINISHED 700 "freq=%d dfs=%d", freq, is_dfs); 701 } else if (hapd->iface->drv_flags & WPA_DRIVER_FLAGS_DFS_OFFLOAD) { 702 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_CSA_FINISHED 703 "freq=%d dfs=%d", freq, is_dfs); 704 } 705 #endif /* NEED_AP_MLME */ 706 } 707 708 709 void hostapd_event_connect_failed_reason(struct hostapd_data *hapd, 710 const u8 *addr, int reason_code) 711 { 712 switch (reason_code) { 713 case MAX_CLIENT_REACHED: 714 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_REJECTED_MAX_STA MACSTR, 715 MAC2STR(addr)); 716 break; 717 case BLOCKED_CLIENT: 718 wpa_msg(hapd->msg_ctx, MSG_INFO, AP_REJECTED_BLOCKED_STA MACSTR, 719 MAC2STR(addr)); 720 break; 721 } 722 } 723 724 725 #ifdef CONFIG_ACS 726 void hostapd_acs_channel_selected(struct hostapd_data *hapd, 727 struct acs_selected_channels *acs_res) 728 { 729 int ret, i; 730 int err = 0; 731 732 if (hapd->iconf->channel) { 733 wpa_printf(MSG_INFO, "ACS: Channel was already set to %d", 734 hapd->iconf->channel); 735 return; 736 } 737 738 if (!hapd->iface->current_mode) { 739 for (i = 0; i < hapd->iface->num_hw_features; i++) { 740 struct hostapd_hw_modes *mode = 741 &hapd->iface->hw_features[i]; 742 743 if (mode->mode == acs_res->hw_mode) { 744 hapd->iface->current_mode = mode; 745 break; 746 } 747 } 748 if (!hapd->iface->current_mode) { 749 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211, 750 HOSTAPD_LEVEL_WARNING, 751 "driver selected to bad hw_mode"); 752 err = 1; 753 goto out; 754 } 755 } 756 757 hapd->iface->freq = hostapd_hw_get_freq(hapd, acs_res->pri_channel); 758 759 if (!acs_res->pri_channel) { 760 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211, 761 HOSTAPD_LEVEL_WARNING, 762 "driver switched to bad channel"); 763 err = 1; 764 goto out; 765 } 766 767 hapd->iconf->channel = acs_res->pri_channel; 768 hapd->iconf->acs = 1; 769 770 if (acs_res->sec_channel == 0) 771 hapd->iconf->secondary_channel = 0; 772 else if (acs_res->sec_channel < acs_res->pri_channel) 773 hapd->iconf->secondary_channel = -1; 774 else if (acs_res->sec_channel > acs_res->pri_channel) 775 hapd->iconf->secondary_channel = 1; 776 else { 777 wpa_printf(MSG_ERROR, "Invalid secondary channel!"); 778 err = 1; 779 goto out; 780 } 781 782 if (hapd->iface->conf->ieee80211ac) { 783 /* set defaults for backwards compatibility */ 784 hapd->iconf->vht_oper_centr_freq_seg1_idx = 0; 785 hapd->iconf->vht_oper_centr_freq_seg0_idx = 0; 786 hapd->iconf->vht_oper_chwidth = VHT_CHANWIDTH_USE_HT; 787 if (acs_res->ch_width == 80) { 788 hapd->iconf->vht_oper_centr_freq_seg0_idx = 789 acs_res->vht_seg0_center_ch; 790 hapd->iconf->vht_oper_chwidth = VHT_CHANWIDTH_80MHZ; 791 } else if (acs_res->ch_width == 160) { 792 if (acs_res->vht_seg1_center_ch == 0) { 793 hapd->iconf->vht_oper_centr_freq_seg0_idx = 794 acs_res->vht_seg0_center_ch; 795 hapd->iconf->vht_oper_chwidth = 796 VHT_CHANWIDTH_160MHZ; 797 } else { 798 hapd->iconf->vht_oper_centr_freq_seg0_idx = 799 acs_res->vht_seg0_center_ch; 800 hapd->iconf->vht_oper_centr_freq_seg1_idx = 801 acs_res->vht_seg1_center_ch; 802 hapd->iconf->vht_oper_chwidth = 803 VHT_CHANWIDTH_80P80MHZ; 804 } 805 } 806 } 807 808 out: 809 ret = hostapd_acs_completed(hapd->iface, err); 810 if (ret) { 811 wpa_printf(MSG_ERROR, 812 "ACS: Possibly channel configuration is invalid"); 813 } 814 } 815 #endif /* CONFIG_ACS */ 816 817 818 int hostapd_probe_req_rx(struct hostapd_data *hapd, const u8 *sa, const u8 *da, 819 const u8 *bssid, const u8 *ie, size_t ie_len, 820 int ssi_signal) 821 { 822 size_t i; 823 int ret = 0; 824 825 if (sa == NULL || ie == NULL) 826 return -1; 827 828 random_add_randomness(sa, ETH_ALEN); 829 for (i = 0; hapd->probereq_cb && i < hapd->num_probereq_cb; i++) { 830 if (hapd->probereq_cb[i].cb(hapd->probereq_cb[i].ctx, 831 sa, da, bssid, ie, ie_len, 832 ssi_signal) > 0) { 833 ret = 1; 834 break; 835 } 836 } 837 return ret; 838 } 839 840 841 #ifdef HOSTAPD 842 843 #ifdef CONFIG_IEEE80211R_AP 844 static void hostapd_notify_auth_ft_finish(void *ctx, const u8 *dst, 845 const u8 *bssid, 846 u16 auth_transaction, u16 status, 847 const u8 *ies, size_t ies_len) 848 { 849 struct hostapd_data *hapd = ctx; 850 struct sta_info *sta; 851 852 sta = ap_get_sta(hapd, dst); 853 if (sta == NULL) 854 return; 855 856 hostapd_logger(hapd, dst, HOSTAPD_MODULE_IEEE80211, 857 HOSTAPD_LEVEL_DEBUG, "authentication OK (FT)"); 858 sta->flags |= WLAN_STA_AUTH; 859 860 hostapd_sta_auth(hapd, dst, auth_transaction, status, ies, ies_len); 861 } 862 #endif /* CONFIG_IEEE80211R_AP */ 863 864 865 #ifdef CONFIG_FILS 866 static void hostapd_notify_auth_fils_finish(struct hostapd_data *hapd, 867 struct sta_info *sta, u16 resp, 868 struct wpabuf *data, int pub) 869 { 870 if (resp == WLAN_STATUS_SUCCESS) { 871 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211, 872 HOSTAPD_LEVEL_DEBUG, "authentication OK (FILS)"); 873 sta->flags |= WLAN_STA_AUTH; 874 wpa_auth_sm_event(sta->wpa_sm, WPA_AUTH); 875 sta->auth_alg = WLAN_AUTH_FILS_SK; 876 mlme_authenticate_indication(hapd, sta); 877 } else { 878 hostapd_logger(hapd, sta->addr, HOSTAPD_MODULE_IEEE80211, 879 HOSTAPD_LEVEL_DEBUG, 880 "authentication failed (FILS)"); 881 } 882 883 hostapd_sta_auth(hapd, sta->addr, 2, resp, 884 data ? wpabuf_head(data) : NULL, 885 data ? wpabuf_len(data) : 0); 886 wpabuf_free(data); 887 } 888 #endif /* CONFIG_FILS */ 889 890 891 static void hostapd_notif_auth(struct hostapd_data *hapd, 892 struct auth_info *rx_auth) 893 { 894 struct sta_info *sta; 895 u16 status = WLAN_STATUS_SUCCESS; 896 u8 resp_ies[2 + WLAN_AUTH_CHALLENGE_LEN]; 897 size_t resp_ies_len = 0; 898 899 sta = ap_get_sta(hapd, rx_auth->peer); 900 if (!sta) { 901 sta = ap_sta_add(hapd, rx_auth->peer); 902 if (sta == NULL) { 903 status = WLAN_STATUS_AP_UNABLE_TO_HANDLE_NEW_STA; 904 goto fail; 905 } 906 } 907 sta->flags &= ~WLAN_STA_PREAUTH; 908 ieee802_1x_notify_pre_auth(sta->eapol_sm, 0); 909 #ifdef CONFIG_IEEE80211R_AP 910 if (rx_auth->auth_type == WLAN_AUTH_FT && hapd->wpa_auth) { 911 sta->auth_alg = WLAN_AUTH_FT; 912 if (sta->wpa_sm == NULL) 913 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth, 914 sta->addr, NULL); 915 if (sta->wpa_sm == NULL) { 916 wpa_printf(MSG_DEBUG, 917 "FT: Failed to initialize WPA state machine"); 918 status = WLAN_STATUS_UNSPECIFIED_FAILURE; 919 goto fail; 920 } 921 wpa_ft_process_auth(sta->wpa_sm, rx_auth->bssid, 922 rx_auth->auth_transaction, rx_auth->ies, 923 rx_auth->ies_len, 924 hostapd_notify_auth_ft_finish, hapd); 925 return; 926 } 927 #endif /* CONFIG_IEEE80211R_AP */ 928 929 #ifdef CONFIG_FILS 930 if (rx_auth->auth_type == WLAN_AUTH_FILS_SK) { 931 sta->auth_alg = WLAN_AUTH_FILS_SK; 932 handle_auth_fils(hapd, sta, rx_auth->ies, rx_auth->ies_len, 933 rx_auth->auth_type, rx_auth->auth_transaction, 934 rx_auth->status_code, 935 hostapd_notify_auth_fils_finish); 936 return; 937 } 938 #endif /* CONFIG_FILS */ 939 940 fail: 941 hostapd_sta_auth(hapd, rx_auth->peer, rx_auth->auth_transaction + 1, 942 status, resp_ies, resp_ies_len); 943 } 944 945 946 static void hostapd_action_rx(struct hostapd_data *hapd, 947 struct rx_mgmt *drv_mgmt) 948 { 949 struct ieee80211_mgmt *mgmt; 950 struct sta_info *sta; 951 size_t plen __maybe_unused; 952 u16 fc; 953 954 if (drv_mgmt->frame_len < 24 + 1) 955 return; 956 957 plen = drv_mgmt->frame_len - 24 - 1; 958 959 mgmt = (struct ieee80211_mgmt *) drv_mgmt->frame; 960 fc = le_to_host16(mgmt->frame_control); 961 if (WLAN_FC_GET_STYPE(fc) != WLAN_FC_STYPE_ACTION) 962 return; /* handled by the driver */ 963 964 wpa_printf(MSG_DEBUG, "RX_ACTION cat %d action plen %d", 965 mgmt->u.action.category, (int) plen); 966 967 sta = ap_get_sta(hapd, mgmt->sa); 968 if (sta == NULL) { 969 wpa_printf(MSG_DEBUG, "%s: station not found", __func__); 970 return; 971 } 972 #ifdef CONFIG_IEEE80211R_AP 973 if (mgmt->u.action.category == WLAN_ACTION_FT) { 974 const u8 *payload = drv_mgmt->frame + 24 + 1; 975 976 wpa_ft_action_rx(sta->wpa_sm, payload, plen); 977 } 978 #endif /* CONFIG_IEEE80211R_AP */ 979 #ifdef CONFIG_IEEE80211W 980 if (mgmt->u.action.category == WLAN_ACTION_SA_QUERY && plen >= 4) { 981 ieee802_11_sa_query_action( 982 hapd, mgmt->sa, 983 mgmt->u.action.u.sa_query_resp.action, 984 mgmt->u.action.u.sa_query_resp.trans_id); 985 } 986 #endif /* CONFIG_IEEE80211W */ 987 #ifdef CONFIG_WNM_AP 988 if (mgmt->u.action.category == WLAN_ACTION_WNM) { 989 ieee802_11_rx_wnm_action_ap(hapd, mgmt, drv_mgmt->frame_len); 990 } 991 #endif /* CONFIG_WNM_AP */ 992 #ifdef CONFIG_FST 993 if (mgmt->u.action.category == WLAN_ACTION_FST && hapd->iface->fst) { 994 fst_rx_action(hapd->iface->fst, mgmt, drv_mgmt->frame_len); 995 return; 996 } 997 #endif /* CONFIG_FST */ 998 #ifdef CONFIG_DPP 999 if (plen >= 1 + 4 && 1000 mgmt->u.action.u.vs_public_action.action == 1001 WLAN_PA_VENDOR_SPECIFIC && 1002 WPA_GET_BE24(mgmt->u.action.u.vs_public_action.oui) == 1003 OUI_WFA && 1004 mgmt->u.action.u.vs_public_action.variable[0] == 1005 DPP_OUI_TYPE) { 1006 const u8 *pos, *end; 1007 1008 pos = mgmt->u.action.u.vs_public_action.oui; 1009 end = drv_mgmt->frame + drv_mgmt->frame_len; 1010 hostapd_dpp_rx_action(hapd, mgmt->sa, pos, end - pos, 1011 drv_mgmt->freq); 1012 return; 1013 } 1014 #endif /* CONFIG_DPP */ 1015 } 1016 1017 1018 #ifdef NEED_AP_MLME 1019 1020 #define HAPD_BROADCAST ((struct hostapd_data *) -1) 1021 1022 static struct hostapd_data * get_hapd_bssid(struct hostapd_iface *iface, 1023 const u8 *bssid) 1024 { 1025 size_t i; 1026 1027 if (bssid == NULL) 1028 return NULL; 1029 if (bssid[0] == 0xff && bssid[1] == 0xff && bssid[2] == 0xff && 1030 bssid[3] == 0xff && bssid[4] == 0xff && bssid[5] == 0xff) 1031 return HAPD_BROADCAST; 1032 1033 for (i = 0; i < iface->num_bss; i++) { 1034 if (os_memcmp(bssid, iface->bss[i]->own_addr, ETH_ALEN) == 0) 1035 return iface->bss[i]; 1036 } 1037 1038 return NULL; 1039 } 1040 1041 1042 static void hostapd_rx_from_unknown_sta(struct hostapd_data *hapd, 1043 const u8 *bssid, const u8 *addr, 1044 int wds) 1045 { 1046 hapd = get_hapd_bssid(hapd->iface, bssid); 1047 if (hapd == NULL || hapd == HAPD_BROADCAST) 1048 return; 1049 1050 ieee802_11_rx_from_unknown(hapd, addr, wds); 1051 } 1052 1053 1054 static int hostapd_mgmt_rx(struct hostapd_data *hapd, struct rx_mgmt *rx_mgmt) 1055 { 1056 struct hostapd_iface *iface = hapd->iface; 1057 const struct ieee80211_hdr *hdr; 1058 const u8 *bssid; 1059 struct hostapd_frame_info fi; 1060 int ret; 1061 1062 #ifdef CONFIG_TESTING_OPTIONS 1063 if (hapd->ext_mgmt_frame_handling) { 1064 size_t hex_len = 2 * rx_mgmt->frame_len + 1; 1065 char *hex = os_malloc(hex_len); 1066 1067 if (hex) { 1068 wpa_snprintf_hex(hex, hex_len, rx_mgmt->frame, 1069 rx_mgmt->frame_len); 1070 wpa_msg(hapd->msg_ctx, MSG_INFO, "MGMT-RX %s", hex); 1071 os_free(hex); 1072 } 1073 return 1; 1074 } 1075 #endif /* CONFIG_TESTING_OPTIONS */ 1076 1077 hdr = (const struct ieee80211_hdr *) rx_mgmt->frame; 1078 bssid = get_hdr_bssid(hdr, rx_mgmt->frame_len); 1079 if (bssid == NULL) 1080 return 0; 1081 1082 hapd = get_hapd_bssid(iface, bssid); 1083 if (hapd == NULL) { 1084 u16 fc = le_to_host16(hdr->frame_control); 1085 1086 /* 1087 * Drop frames to unknown BSSIDs except for Beacon frames which 1088 * could be used to update neighbor information. 1089 */ 1090 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT && 1091 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON) 1092 hapd = iface->bss[0]; 1093 else 1094 return 0; 1095 } 1096 1097 os_memset(&fi, 0, sizeof(fi)); 1098 fi.datarate = rx_mgmt->datarate; 1099 fi.ssi_signal = rx_mgmt->ssi_signal; 1100 1101 if (hapd == HAPD_BROADCAST) { 1102 size_t i; 1103 1104 ret = 0; 1105 for (i = 0; i < iface->num_bss; i++) { 1106 /* if bss is set, driver will call this function for 1107 * each bss individually. */ 1108 if (rx_mgmt->drv_priv && 1109 (iface->bss[i]->drv_priv != rx_mgmt->drv_priv)) 1110 continue; 1111 1112 if (ieee802_11_mgmt(iface->bss[i], rx_mgmt->frame, 1113 rx_mgmt->frame_len, &fi) > 0) 1114 ret = 1; 1115 } 1116 } else 1117 ret = ieee802_11_mgmt(hapd, rx_mgmt->frame, rx_mgmt->frame_len, 1118 &fi); 1119 1120 random_add_randomness(&fi, sizeof(fi)); 1121 1122 return ret; 1123 } 1124 1125 1126 static void hostapd_mgmt_tx_cb(struct hostapd_data *hapd, const u8 *buf, 1127 size_t len, u16 stype, int ok) 1128 { 1129 struct ieee80211_hdr *hdr; 1130 struct hostapd_data *orig_hapd = hapd; 1131 1132 hdr = (struct ieee80211_hdr *) buf; 1133 hapd = get_hapd_bssid(hapd->iface, get_hdr_bssid(hdr, len)); 1134 if (!hapd) 1135 return; 1136 if (hapd == HAPD_BROADCAST) { 1137 if (stype != WLAN_FC_STYPE_ACTION || len <= 25 || 1138 buf[24] != WLAN_ACTION_PUBLIC) 1139 return; 1140 hapd = get_hapd_bssid(orig_hapd->iface, hdr->addr2); 1141 if (!hapd || hapd == HAPD_BROADCAST) 1142 return; 1143 /* 1144 * Allow processing of TX status for a Public Action frame that 1145 * used wildcard BBSID. 1146 */ 1147 } 1148 ieee802_11_mgmt_cb(hapd, buf, len, stype, ok); 1149 } 1150 1151 #endif /* NEED_AP_MLME */ 1152 1153 1154 static int hostapd_event_new_sta(struct hostapd_data *hapd, const u8 *addr) 1155 { 1156 struct sta_info *sta = ap_get_sta(hapd, addr); 1157 1158 if (sta) 1159 return 0; 1160 1161 wpa_printf(MSG_DEBUG, "Data frame from unknown STA " MACSTR 1162 " - adding a new STA", MAC2STR(addr)); 1163 sta = ap_sta_add(hapd, addr); 1164 if (sta) { 1165 hostapd_new_assoc_sta(hapd, sta, 0); 1166 } else { 1167 wpa_printf(MSG_DEBUG, "Failed to add STA entry for " MACSTR, 1168 MAC2STR(addr)); 1169 return -1; 1170 } 1171 1172 return 0; 1173 } 1174 1175 1176 static void hostapd_event_eapol_rx(struct hostapd_data *hapd, const u8 *src, 1177 const u8 *data, size_t data_len) 1178 { 1179 struct hostapd_iface *iface = hapd->iface; 1180 struct sta_info *sta; 1181 size_t j; 1182 1183 for (j = 0; j < iface->num_bss; j++) { 1184 sta = ap_get_sta(iface->bss[j], src); 1185 if (sta && sta->flags & WLAN_STA_ASSOC) { 1186 hapd = iface->bss[j]; 1187 break; 1188 } 1189 } 1190 1191 ieee802_1x_receive(hapd, src, data, data_len); 1192 } 1193 1194 #endif /* HOSTAPD */ 1195 1196 1197 static struct hostapd_channel_data * hostapd_get_mode_channel( 1198 struct hostapd_iface *iface, unsigned int freq) 1199 { 1200 int i; 1201 struct hostapd_channel_data *chan; 1202 1203 for (i = 0; i < iface->current_mode->num_channels; i++) { 1204 chan = &iface->current_mode->channels[i]; 1205 if ((unsigned int) chan->freq == freq) 1206 return chan; 1207 } 1208 1209 return NULL; 1210 } 1211 1212 1213 static void hostapd_update_nf(struct hostapd_iface *iface, 1214 struct hostapd_channel_data *chan, 1215 struct freq_survey *survey) 1216 { 1217 if (!iface->chans_surveyed) { 1218 chan->min_nf = survey->nf; 1219 iface->lowest_nf = survey->nf; 1220 } else { 1221 if (dl_list_empty(&chan->survey_list)) 1222 chan->min_nf = survey->nf; 1223 else if (survey->nf < chan->min_nf) 1224 chan->min_nf = survey->nf; 1225 if (survey->nf < iface->lowest_nf) 1226 iface->lowest_nf = survey->nf; 1227 } 1228 } 1229 1230 1231 static void hostapd_single_channel_get_survey(struct hostapd_iface *iface, 1232 struct survey_results *survey_res) 1233 { 1234 struct hostapd_channel_data *chan; 1235 struct freq_survey *survey; 1236 u64 divisor, dividend; 1237 1238 survey = dl_list_first(&survey_res->survey_list, struct freq_survey, 1239 list); 1240 if (!survey || !survey->freq) 1241 return; 1242 1243 chan = hostapd_get_mode_channel(iface, survey->freq); 1244 if (!chan || chan->flag & HOSTAPD_CHAN_DISABLED) 1245 return; 1246 1247 wpa_printf(MSG_DEBUG, 1248 "Single Channel Survey: (freq=%d channel_time=%ld channel_time_busy=%ld)", 1249 survey->freq, 1250 (unsigned long int) survey->channel_time, 1251 (unsigned long int) survey->channel_time_busy); 1252 1253 if (survey->channel_time > iface->last_channel_time && 1254 survey->channel_time > survey->channel_time_busy) { 1255 dividend = survey->channel_time_busy - 1256 iface->last_channel_time_busy; 1257 divisor = survey->channel_time - iface->last_channel_time; 1258 1259 iface->channel_utilization = dividend * 255 / divisor; 1260 wpa_printf(MSG_DEBUG, "Channel Utilization: %d", 1261 iface->channel_utilization); 1262 } 1263 iface->last_channel_time = survey->channel_time; 1264 iface->last_channel_time_busy = survey->channel_time_busy; 1265 } 1266 1267 1268 void hostapd_event_get_survey(struct hostapd_iface *iface, 1269 struct survey_results *survey_results) 1270 { 1271 struct freq_survey *survey, *tmp; 1272 struct hostapd_channel_data *chan; 1273 1274 if (dl_list_empty(&survey_results->survey_list)) { 1275 wpa_printf(MSG_DEBUG, "No survey data received"); 1276 return; 1277 } 1278 1279 if (survey_results->freq_filter) { 1280 hostapd_single_channel_get_survey(iface, survey_results); 1281 return; 1282 } 1283 1284 dl_list_for_each_safe(survey, tmp, &survey_results->survey_list, 1285 struct freq_survey, list) { 1286 chan = hostapd_get_mode_channel(iface, survey->freq); 1287 if (!chan) 1288 continue; 1289 if (chan->flag & HOSTAPD_CHAN_DISABLED) 1290 continue; 1291 1292 dl_list_del(&survey->list); 1293 dl_list_add_tail(&chan->survey_list, &survey->list); 1294 1295 hostapd_update_nf(iface, chan, survey); 1296 1297 iface->chans_surveyed++; 1298 } 1299 } 1300 1301 1302 #ifdef HOSTAPD 1303 #ifdef NEED_AP_MLME 1304 1305 static void hostapd_event_iface_unavailable(struct hostapd_data *hapd) 1306 { 1307 wpa_printf(MSG_DEBUG, "Interface %s is unavailable -- stopped", 1308 hapd->conf->iface); 1309 1310 if (hapd->csa_in_progress) { 1311 wpa_printf(MSG_INFO, "CSA failed (%s was stopped)", 1312 hapd->conf->iface); 1313 hostapd_switch_channel_fallback(hapd->iface, 1314 &hapd->cs_freq_params); 1315 } 1316 } 1317 1318 1319 static void hostapd_event_dfs_radar_detected(struct hostapd_data *hapd, 1320 struct dfs_event *radar) 1321 { 1322 wpa_printf(MSG_DEBUG, "DFS radar detected on %d MHz", radar->freq); 1323 hostapd_dfs_radar_detected(hapd->iface, radar->freq, radar->ht_enabled, 1324 radar->chan_offset, radar->chan_width, 1325 radar->cf1, radar->cf2); 1326 } 1327 1328 1329 static void hostapd_event_dfs_pre_cac_expired(struct hostapd_data *hapd, 1330 struct dfs_event *radar) 1331 { 1332 wpa_printf(MSG_DEBUG, "DFS Pre-CAC expired on %d MHz", radar->freq); 1333 hostapd_dfs_pre_cac_expired(hapd->iface, radar->freq, radar->ht_enabled, 1334 radar->chan_offset, radar->chan_width, 1335 radar->cf1, radar->cf2); 1336 } 1337 1338 1339 static void hostapd_event_dfs_cac_finished(struct hostapd_data *hapd, 1340 struct dfs_event *radar) 1341 { 1342 wpa_printf(MSG_DEBUG, "DFS CAC finished on %d MHz", radar->freq); 1343 hostapd_dfs_complete_cac(hapd->iface, 1, radar->freq, radar->ht_enabled, 1344 radar->chan_offset, radar->chan_width, 1345 radar->cf1, radar->cf2); 1346 } 1347 1348 1349 static void hostapd_event_dfs_cac_aborted(struct hostapd_data *hapd, 1350 struct dfs_event *radar) 1351 { 1352 wpa_printf(MSG_DEBUG, "DFS CAC aborted on %d MHz", radar->freq); 1353 hostapd_dfs_complete_cac(hapd->iface, 0, radar->freq, radar->ht_enabled, 1354 radar->chan_offset, radar->chan_width, 1355 radar->cf1, radar->cf2); 1356 } 1357 1358 1359 static void hostapd_event_dfs_nop_finished(struct hostapd_data *hapd, 1360 struct dfs_event *radar) 1361 { 1362 wpa_printf(MSG_DEBUG, "DFS NOP finished on %d MHz", radar->freq); 1363 hostapd_dfs_nop_finished(hapd->iface, radar->freq, radar->ht_enabled, 1364 radar->chan_offset, radar->chan_width, 1365 radar->cf1, radar->cf2); 1366 } 1367 1368 1369 static void hostapd_event_dfs_cac_started(struct hostapd_data *hapd, 1370 struct dfs_event *radar) 1371 { 1372 wpa_printf(MSG_DEBUG, "DFS offload CAC started on %d MHz", radar->freq); 1373 hostapd_dfs_start_cac(hapd->iface, radar->freq, radar->ht_enabled, 1374 radar->chan_offset, radar->chan_width, 1375 radar->cf1, radar->cf2); 1376 } 1377 1378 #endif /* NEED_AP_MLME */ 1379 1380 1381 void wpa_supplicant_event(void *ctx, enum wpa_event_type event, 1382 union wpa_event_data *data) 1383 { 1384 struct hostapd_data *hapd = ctx; 1385 #ifndef CONFIG_NO_STDOUT_DEBUG 1386 int level = MSG_DEBUG; 1387 1388 if (event == EVENT_RX_MGMT && data->rx_mgmt.frame && 1389 data->rx_mgmt.frame_len >= 24) { 1390 const struct ieee80211_hdr *hdr; 1391 u16 fc; 1392 1393 hdr = (const struct ieee80211_hdr *) data->rx_mgmt.frame; 1394 fc = le_to_host16(hdr->frame_control); 1395 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT && 1396 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON) 1397 level = MSG_EXCESSIVE; 1398 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT && 1399 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_PROBE_REQ) 1400 level = MSG_EXCESSIVE; 1401 } 1402 1403 wpa_dbg(hapd->msg_ctx, level, "Event %s (%d) received", 1404 event_to_string(event), event); 1405 #endif /* CONFIG_NO_STDOUT_DEBUG */ 1406 1407 switch (event) { 1408 case EVENT_MICHAEL_MIC_FAILURE: 1409 michael_mic_failure(hapd, data->michael_mic_failure.src, 1); 1410 break; 1411 case EVENT_SCAN_RESULTS: 1412 if (hapd->iface->scan_cb) 1413 hapd->iface->scan_cb(hapd->iface); 1414 break; 1415 case EVENT_WPS_BUTTON_PUSHED: 1416 hostapd_wps_button_pushed(hapd, NULL); 1417 break; 1418 #ifdef NEED_AP_MLME 1419 case EVENT_TX_STATUS: 1420 switch (data->tx_status.type) { 1421 case WLAN_FC_TYPE_MGMT: 1422 hostapd_mgmt_tx_cb(hapd, data->tx_status.data, 1423 data->tx_status.data_len, 1424 data->tx_status.stype, 1425 data->tx_status.ack); 1426 break; 1427 case WLAN_FC_TYPE_DATA: 1428 hostapd_tx_status(hapd, data->tx_status.dst, 1429 data->tx_status.data, 1430 data->tx_status.data_len, 1431 data->tx_status.ack); 1432 break; 1433 } 1434 break; 1435 case EVENT_EAPOL_TX_STATUS: 1436 hostapd_eapol_tx_status(hapd, data->eapol_tx_status.dst, 1437 data->eapol_tx_status.data, 1438 data->eapol_tx_status.data_len, 1439 data->eapol_tx_status.ack); 1440 break; 1441 case EVENT_DRIVER_CLIENT_POLL_OK: 1442 hostapd_client_poll_ok(hapd, data->client_poll.addr); 1443 break; 1444 case EVENT_RX_FROM_UNKNOWN: 1445 hostapd_rx_from_unknown_sta(hapd, data->rx_from_unknown.bssid, 1446 data->rx_from_unknown.addr, 1447 data->rx_from_unknown.wds); 1448 break; 1449 #endif /* NEED_AP_MLME */ 1450 case EVENT_RX_MGMT: 1451 if (!data->rx_mgmt.frame) 1452 break; 1453 #ifdef NEED_AP_MLME 1454 if (hostapd_mgmt_rx(hapd, &data->rx_mgmt) > 0) 1455 break; 1456 #endif /* NEED_AP_MLME */ 1457 hostapd_action_rx(hapd, &data->rx_mgmt); 1458 break; 1459 case EVENT_RX_PROBE_REQ: 1460 if (data->rx_probe_req.sa == NULL || 1461 data->rx_probe_req.ie == NULL) 1462 break; 1463 hostapd_probe_req_rx(hapd, data->rx_probe_req.sa, 1464 data->rx_probe_req.da, 1465 data->rx_probe_req.bssid, 1466 data->rx_probe_req.ie, 1467 data->rx_probe_req.ie_len, 1468 data->rx_probe_req.ssi_signal); 1469 break; 1470 case EVENT_NEW_STA: 1471 hostapd_event_new_sta(hapd, data->new_sta.addr); 1472 break; 1473 case EVENT_EAPOL_RX: 1474 hostapd_event_eapol_rx(hapd, data->eapol_rx.src, 1475 data->eapol_rx.data, 1476 data->eapol_rx.data_len); 1477 break; 1478 case EVENT_ASSOC: 1479 if (!data) 1480 return; 1481 hostapd_notif_assoc(hapd, data->assoc_info.addr, 1482 data->assoc_info.req_ies, 1483 data->assoc_info.req_ies_len, 1484 data->assoc_info.reassoc); 1485 break; 1486 case EVENT_DISASSOC: 1487 if (data) 1488 hostapd_notif_disassoc(hapd, data->disassoc_info.addr); 1489 break; 1490 case EVENT_DEAUTH: 1491 if (data) 1492 hostapd_notif_disassoc(hapd, data->deauth_info.addr); 1493 break; 1494 case EVENT_STATION_LOW_ACK: 1495 if (!data) 1496 break; 1497 hostapd_event_sta_low_ack(hapd, data->low_ack.addr); 1498 break; 1499 case EVENT_AUTH: 1500 hostapd_notif_auth(hapd, &data->auth); 1501 break; 1502 case EVENT_CH_SWITCH: 1503 if (!data) 1504 break; 1505 hostapd_event_ch_switch(hapd, data->ch_switch.freq, 1506 data->ch_switch.ht_enabled, 1507 data->ch_switch.ch_offset, 1508 data->ch_switch.ch_width, 1509 data->ch_switch.cf1, 1510 data->ch_switch.cf2); 1511 break; 1512 case EVENT_CONNECT_FAILED_REASON: 1513 if (!data) 1514 break; 1515 hostapd_event_connect_failed_reason( 1516 hapd, data->connect_failed_reason.addr, 1517 data->connect_failed_reason.code); 1518 break; 1519 case EVENT_SURVEY: 1520 hostapd_event_get_survey(hapd->iface, &data->survey_results); 1521 break; 1522 #ifdef NEED_AP_MLME 1523 case EVENT_INTERFACE_UNAVAILABLE: 1524 hostapd_event_iface_unavailable(hapd); 1525 break; 1526 case EVENT_DFS_RADAR_DETECTED: 1527 if (!data) 1528 break; 1529 hostapd_event_dfs_radar_detected(hapd, &data->dfs_event); 1530 break; 1531 case EVENT_DFS_PRE_CAC_EXPIRED: 1532 if (!data) 1533 break; 1534 hostapd_event_dfs_pre_cac_expired(hapd, &data->dfs_event); 1535 break; 1536 case EVENT_DFS_CAC_FINISHED: 1537 if (!data) 1538 break; 1539 hostapd_event_dfs_cac_finished(hapd, &data->dfs_event); 1540 break; 1541 case EVENT_DFS_CAC_ABORTED: 1542 if (!data) 1543 break; 1544 hostapd_event_dfs_cac_aborted(hapd, &data->dfs_event); 1545 break; 1546 case EVENT_DFS_NOP_FINISHED: 1547 if (!data) 1548 break; 1549 hostapd_event_dfs_nop_finished(hapd, &data->dfs_event); 1550 break; 1551 case EVENT_CHANNEL_LIST_CHANGED: 1552 /* channel list changed (regulatory?), update channel list */ 1553 /* TODO: check this. hostapd_get_hw_features() initializes 1554 * too much stuff. */ 1555 /* hostapd_get_hw_features(hapd->iface); */ 1556 hostapd_channel_list_updated( 1557 hapd->iface, data->channel_list_changed.initiator); 1558 break; 1559 case EVENT_DFS_CAC_STARTED: 1560 if (!data) 1561 break; 1562 hostapd_event_dfs_cac_started(hapd, &data->dfs_event); 1563 break; 1564 #endif /* NEED_AP_MLME */ 1565 case EVENT_INTERFACE_ENABLED: 1566 wpa_msg(hapd->msg_ctx, MSG_INFO, INTERFACE_ENABLED); 1567 if (hapd->disabled && hapd->started) { 1568 hapd->disabled = 0; 1569 /* 1570 * Try to re-enable interface if the driver stopped it 1571 * when the interface got disabled. 1572 */ 1573 wpa_auth_reconfig_group_keys(hapd->wpa_auth); 1574 hapd->reenable_beacon = 1; 1575 ieee802_11_set_beacon(hapd); 1576 } 1577 break; 1578 case EVENT_INTERFACE_DISABLED: 1579 hostapd_free_stas(hapd); 1580 wpa_msg(hapd->msg_ctx, MSG_INFO, INTERFACE_DISABLED); 1581 hapd->disabled = 1; 1582 break; 1583 #ifdef CONFIG_ACS 1584 case EVENT_ACS_CHANNEL_SELECTED: 1585 hostapd_acs_channel_selected(hapd, 1586 &data->acs_selected_channels); 1587 break; 1588 #endif /* CONFIG_ACS */ 1589 default: 1590 wpa_printf(MSG_DEBUG, "Unknown event %d", event); 1591 break; 1592 } 1593 } 1594 1595 1596 void wpa_supplicant_event_global(void *ctx, enum wpa_event_type event, 1597 union wpa_event_data *data) 1598 { 1599 struct hapd_interfaces *interfaces = ctx; 1600 struct hostapd_data *hapd; 1601 1602 if (event != EVENT_INTERFACE_STATUS) 1603 return; 1604 1605 hapd = hostapd_get_iface(interfaces, data->interface_status.ifname); 1606 if (hapd && hapd->driver && hapd->driver->get_ifindex && 1607 hapd->drv_priv) { 1608 unsigned int ifindex; 1609 1610 ifindex = hapd->driver->get_ifindex(hapd->drv_priv); 1611 if (ifindex != data->interface_status.ifindex) { 1612 wpa_dbg(hapd->msg_ctx, MSG_DEBUG, 1613 "interface status ifindex %d mismatch (%d)", 1614 ifindex, data->interface_status.ifindex); 1615 return; 1616 } 1617 } 1618 if (hapd) 1619 wpa_supplicant_event(hapd, event, data); 1620 } 1621 1622 #endif /* HOSTAPD */ 1623
