events.c 57 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399140014011402140314041405140614071408140914101411141214131414141514161417141814191420142114221423142414251426142714281429143014311432143314341435143614371438143914401441144214431444144514461447144814491450145114521453145414551456145714581459146014611462146314641465146614671468146914701471147214731474147514761477147814791480148114821483148414851486148714881489149014911492149314941495149614971498149915001501150215031504150515061507150815091510151115121513151415151516151715181519152015211522152315241525152615271528152915301531153215331534153515361537153815391540154115421543154415451546154715481549155015511552155315541555155615571558155915601561156215631564156515661567156815691570157115721573157415751576157715781579158015811582158315841585158615871588158915901591159215931594159515961597159815991600160116021603160416051606160716081609161016111612161316141615161616171618161916201621162216231624162516261627162816291630163116321633163416351636163716381639164016411642164316441645164616471648164916501651165216531654165516561657165816591660166116621663166416651666166716681669167016711672167316741675167616771678167916801681168216831684168516861687168816891690169116921693169416951696169716981699170017011702170317041705170617071708170917101711171217131714171517161717171817191720172117221723172417251726172717281729173017311732173317341735173617371738173917401741174217431744174517461747174817491750175117521753175417551756175717581759176017611762176317641765176617671768176917701771177217731774177517761777177817791780178117821783178417851786178717881789179017911792179317941795179617971798179918001801180218031804180518061807180818091810181118121813181418151816181718181819182018211822182318241825182618271828182918301831183218331834183518361837183818391840184118421843184418451846184718481849185018511852185318541855185618571858185918601861186218631864186518661867186818691870187118721873187418751876187718781879188018811882188318841885188618871888188918901891189218931894189518961897189818991900190119021903190419051906190719081909191019111912191319141915191619171918191919201921192219231924192519261927192819291930193119321933193419351936193719381939194019411942194319441945194619471948194919501951195219531954195519561957195819591960196119621963196419651966196719681969197019711972197319741975197619771978197919801981198219831984198519861987198819891990199119921993199419951996199719981999200020012002200320042005200620072008200920102011201220132014201520162017201820192020202120222023202420252026202720282029203020312032203320342035203620372038203920402041204220432044204520462047204820492050205120522053205420552056205720582059206020612062206320642065206620672068206920702071207220732074207520762077207820792080208120822083208420852086208720882089209020912092209320942095209620972098209921002101210221032104
  1. /*
  2. * WPA Supplicant - Driver event processing
  3. * Copyright (c) 2003-2010, Jouni Malinen <j@w1.fi>
  4. *
  5. * This program is free software; you can redistribute it and/or modify
  6. * it under the terms of the GNU General Public License version 2 as
  7. * published by the Free Software Foundation.
  8. *
  9. * Alternatively, this software may be distributed under the terms of BSD
  10. * license.
  11. *
  12. * See README and COPYING for more details.
  13. */
  14. #include "includes.h"
  15. #include "common.h"
  16. #include "eapol_supp/eapol_supp_sm.h"
  17. #include "rsn_supp/wpa.h"
  18. #include "eloop.h"
  19. #include "config.h"
  20. #include "l2_packet/l2_packet.h"
  21. #include "wpa_supplicant_i.h"
  22. #include "driver_i.h"
  23. #include "pcsc_funcs.h"
  24. #include "rsn_supp/preauth.h"
  25. #include "rsn_supp/pmksa_cache.h"
  26. #include "common/wpa_ctrl.h"
  27. #include "eap_peer/eap.h"
  28. #include "ap/hostapd.h"
  29. #include "p2p/p2p.h"
  30. #include "notify.h"
  31. #include "common/ieee802_11_defs.h"
  32. #include "common/ieee802_11_common.h"
  33. #include "crypto/random.h"
  34. #include "blacklist.h"
  35. #include "wpas_glue.h"
  36. #include "wps_supplicant.h"
  37. #include "ibss_rsn.h"
  38. #include "sme.h"
  39. #include "p2p_supplicant.h"
  40. #include "bgscan.h"
  41. #include "ap.h"
  42. #include "bss.h"
  43. #include "mlme.h"
  44. #include "scan.h"
  45. static int wpa_supplicant_select_config(struct wpa_supplicant *wpa_s)
  46. {
  47. struct wpa_ssid *ssid, *old_ssid;
  48. if (wpa_s->conf->ap_scan == 1 && wpa_s->current_ssid)
  49. return 0;
  50. wpa_printf(MSG_DEBUG, "Select network based on association "
  51. "information");
  52. ssid = wpa_supplicant_get_ssid(wpa_s);
  53. if (ssid == NULL) {
  54. wpa_printf(MSG_INFO, "No network configuration found for the "
  55. "current AP");
  56. return -1;
  57. }
  58. if (ssid->disabled) {
  59. wpa_printf(MSG_DEBUG, "Selected network is disabled");
  60. return -1;
  61. }
  62. wpa_printf(MSG_DEBUG, "Network configuration found for the current "
  63. "AP");
  64. if (ssid->key_mgmt & (WPA_KEY_MGMT_PSK | WPA_KEY_MGMT_IEEE8021X |
  65. WPA_KEY_MGMT_WPA_NONE |
  66. WPA_KEY_MGMT_FT_PSK | WPA_KEY_MGMT_FT_IEEE8021X |
  67. WPA_KEY_MGMT_PSK_SHA256 |
  68. WPA_KEY_MGMT_IEEE8021X_SHA256)) {
  69. u8 wpa_ie[80];
  70. size_t wpa_ie_len = sizeof(wpa_ie);
  71. wpa_supplicant_set_suites(wpa_s, NULL, ssid,
  72. wpa_ie, &wpa_ie_len);
  73. } else {
  74. wpa_supplicant_set_non_wpa_policy(wpa_s, ssid);
  75. }
  76. if (wpa_s->current_ssid && wpa_s->current_ssid != ssid)
  77. eapol_sm_invalidate_cached_session(wpa_s->eapol);
  78. old_ssid = wpa_s->current_ssid;
  79. wpa_s->current_ssid = ssid;
  80. wpa_supplicant_rsn_supp_set_config(wpa_s, wpa_s->current_ssid);
  81. wpa_supplicant_initiate_eapol(wpa_s);
  82. if (old_ssid != wpa_s->current_ssid)
  83. wpas_notify_network_changed(wpa_s);
  84. return 0;
  85. }
  86. static void wpa_supplicant_stop_countermeasures(void *eloop_ctx,
  87. void *sock_ctx)
  88. {
  89. struct wpa_supplicant *wpa_s = eloop_ctx;
  90. if (wpa_s->countermeasures) {
  91. wpa_s->countermeasures = 0;
  92. wpa_drv_set_countermeasures(wpa_s, 0);
  93. wpa_msg(wpa_s, MSG_INFO, "WPA: TKIP countermeasures stopped");
  94. wpa_supplicant_req_scan(wpa_s, 0, 0);
  95. }
  96. }
  97. void wpa_supplicant_mark_disassoc(struct wpa_supplicant *wpa_s)
  98. {
  99. int bssid_changed;
  100. if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
  101. return;
  102. wpa_supplicant_set_state(wpa_s, WPA_DISCONNECTED);
  103. bssid_changed = !is_zero_ether_addr(wpa_s->bssid);
  104. os_memset(wpa_s->bssid, 0, ETH_ALEN);
  105. os_memset(wpa_s->pending_bssid, 0, ETH_ALEN);
  106. wpa_s->current_bss = NULL;
  107. wpa_s->assoc_freq = 0;
  108. if (bssid_changed)
  109. wpas_notify_bssid_changed(wpa_s);
  110. eapol_sm_notify_portEnabled(wpa_s->eapol, FALSE);
  111. eapol_sm_notify_portValid(wpa_s->eapol, FALSE);
  112. if (wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt))
  113. eapol_sm_notify_eap_success(wpa_s->eapol, FALSE);
  114. wpa_s->ap_ies_from_associnfo = 0;
  115. }
  116. static void wpa_find_assoc_pmkid(struct wpa_supplicant *wpa_s)
  117. {
  118. struct wpa_ie_data ie;
  119. int pmksa_set = -1;
  120. size_t i;
  121. if (wpa_sm_parse_own_wpa_ie(wpa_s->wpa, &ie) < 0 ||
  122. ie.pmkid == NULL)
  123. return;
  124. for (i = 0; i < ie.num_pmkid; i++) {
  125. pmksa_set = pmksa_cache_set_current(wpa_s->wpa,
  126. ie.pmkid + i * PMKID_LEN,
  127. NULL, NULL, 0);
  128. if (pmksa_set == 0) {
  129. eapol_sm_notify_pmkid_attempt(wpa_s->eapol, 1);
  130. break;
  131. }
  132. }
  133. wpa_printf(MSG_DEBUG, "RSN: PMKID from assoc IE %sfound from PMKSA "
  134. "cache", pmksa_set == 0 ? "" : "not ");
  135. }
  136. static void wpa_supplicant_event_pmkid_candidate(struct wpa_supplicant *wpa_s,
  137. union wpa_event_data *data)
  138. {
  139. if (data == NULL) {
  140. wpa_printf(MSG_DEBUG, "RSN: No data in PMKID candidate event");
  141. return;
  142. }
  143. wpa_printf(MSG_DEBUG, "RSN: PMKID candidate event - bssid=" MACSTR
  144. " index=%d preauth=%d",
  145. MAC2STR(data->pmkid_candidate.bssid),
  146. data->pmkid_candidate.index,
  147. data->pmkid_candidate.preauth);
  148. pmksa_candidate_add(wpa_s->wpa, data->pmkid_candidate.bssid,
  149. data->pmkid_candidate.index,
  150. data->pmkid_candidate.preauth);
  151. }
  152. static int wpa_supplicant_dynamic_keys(struct wpa_supplicant *wpa_s)
  153. {
  154. if (wpa_s->key_mgmt == WPA_KEY_MGMT_NONE ||
  155. wpa_s->key_mgmt == WPA_KEY_MGMT_WPA_NONE)
  156. return 0;
  157. #ifdef IEEE8021X_EAPOL
  158. if (wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA &&
  159. wpa_s->current_ssid &&
  160. !(wpa_s->current_ssid->eapol_flags &
  161. (EAPOL_FLAG_REQUIRE_KEY_UNICAST |
  162. EAPOL_FLAG_REQUIRE_KEY_BROADCAST))) {
  163. /* IEEE 802.1X, but not using dynamic WEP keys (i.e., either
  164. * plaintext or static WEP keys). */
  165. return 0;
  166. }
  167. #endif /* IEEE8021X_EAPOL */
  168. return 1;
  169. }
  170. /**
  171. * wpa_supplicant_scard_init - Initialize SIM/USIM access with PC/SC
  172. * @wpa_s: pointer to wpa_supplicant data
  173. * @ssid: Configuration data for the network
  174. * Returns: 0 on success, -1 on failure
  175. *
  176. * This function is called when starting authentication with a network that is
  177. * configured to use PC/SC for SIM/USIM access (EAP-SIM or EAP-AKA).
  178. */
  179. int wpa_supplicant_scard_init(struct wpa_supplicant *wpa_s,
  180. struct wpa_ssid *ssid)
  181. {
  182. #ifdef IEEE8021X_EAPOL
  183. int aka = 0, sim = 0, type;
  184. if (ssid->eap.pcsc == NULL || wpa_s->scard != NULL)
  185. return 0;
  186. if (ssid->eap.eap_methods == NULL) {
  187. sim = 1;
  188. aka = 1;
  189. } else {
  190. struct eap_method_type *eap = ssid->eap.eap_methods;
  191. while (eap->vendor != EAP_VENDOR_IETF ||
  192. eap->method != EAP_TYPE_NONE) {
  193. if (eap->vendor == EAP_VENDOR_IETF) {
  194. if (eap->method == EAP_TYPE_SIM)
  195. sim = 1;
  196. else if (eap->method == EAP_TYPE_AKA)
  197. aka = 1;
  198. }
  199. eap++;
  200. }
  201. }
  202. if (eap_peer_get_eap_method(EAP_VENDOR_IETF, EAP_TYPE_SIM) == NULL)
  203. sim = 0;
  204. if (eap_peer_get_eap_method(EAP_VENDOR_IETF, EAP_TYPE_AKA) == NULL)
  205. aka = 0;
  206. if (!sim && !aka) {
  207. wpa_printf(MSG_DEBUG, "Selected network is configured to use "
  208. "SIM, but neither EAP-SIM nor EAP-AKA are enabled");
  209. return 0;
  210. }
  211. wpa_printf(MSG_DEBUG, "Selected network is configured to use SIM "
  212. "(sim=%d aka=%d) - initialize PCSC", sim, aka);
  213. if (sim && aka)
  214. type = SCARD_TRY_BOTH;
  215. else if (aka)
  216. type = SCARD_USIM_ONLY;
  217. else
  218. type = SCARD_GSM_SIM_ONLY;
  219. wpa_s->scard = scard_init(type);
  220. if (wpa_s->scard == NULL) {
  221. wpa_printf(MSG_WARNING, "Failed to initialize SIM "
  222. "(pcsc-lite)");
  223. return -1;
  224. }
  225. wpa_sm_set_scard_ctx(wpa_s->wpa, wpa_s->scard);
  226. eapol_sm_register_scard_ctx(wpa_s->eapol, wpa_s->scard);
  227. #endif /* IEEE8021X_EAPOL */
  228. return 0;
  229. }
  230. #ifndef CONFIG_NO_SCAN_PROCESSING
  231. static int wpa_supplicant_match_privacy(struct wpa_scan_res *bss,
  232. struct wpa_ssid *ssid)
  233. {
  234. int i, privacy = 0;
  235. if (ssid->mixed_cell)
  236. return 1;
  237. #ifdef CONFIG_WPS
  238. if (ssid->key_mgmt & WPA_KEY_MGMT_WPS)
  239. return 1;
  240. #endif /* CONFIG_WPS */
  241. for (i = 0; i < NUM_WEP_KEYS; i++) {
  242. if (ssid->wep_key_len[i]) {
  243. privacy = 1;
  244. break;
  245. }
  246. }
  247. #ifdef IEEE8021X_EAPOL
  248. if ((ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X_NO_WPA) &&
  249. ssid->eapol_flags & (EAPOL_FLAG_REQUIRE_KEY_UNICAST |
  250. EAPOL_FLAG_REQUIRE_KEY_BROADCAST))
  251. privacy = 1;
  252. #endif /* IEEE8021X_EAPOL */
  253. if (bss->caps & IEEE80211_CAP_PRIVACY)
  254. return privacy;
  255. return !privacy;
  256. }
  257. static int wpa_supplicant_ssid_bss_match(struct wpa_supplicant *wpa_s,
  258. struct wpa_ssid *ssid,
  259. struct wpa_scan_res *bss)
  260. {
  261. struct wpa_ie_data ie;
  262. int proto_match = 0;
  263. const u8 *rsn_ie, *wpa_ie;
  264. int ret;
  265. int wep_ok;
  266. ret = wpas_wps_ssid_bss_match(wpa_s, ssid, bss);
  267. if (ret >= 0)
  268. return ret;
  269. /* Allow TSN if local configuration accepts WEP use without WPA/WPA2 */
  270. wep_ok = !wpa_key_mgmt_wpa(ssid->key_mgmt) &&
  271. (((ssid->key_mgmt & WPA_KEY_MGMT_NONE) &&
  272. ssid->wep_key_len[ssid->wep_tx_keyidx] > 0) ||
  273. (ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X_NO_WPA));
  274. rsn_ie = wpa_scan_get_ie(bss, WLAN_EID_RSN);
  275. while ((ssid->proto & WPA_PROTO_RSN) && rsn_ie) {
  276. proto_match++;
  277. if (wpa_parse_wpa_ie(rsn_ie, 2 + rsn_ie[1], &ie)) {
  278. wpa_printf(MSG_DEBUG, " skip RSN IE - parse failed");
  279. break;
  280. }
  281. if (wep_ok &&
  282. (ie.group_cipher & (WPA_CIPHER_WEP40 | WPA_CIPHER_WEP104)))
  283. {
  284. wpa_printf(MSG_DEBUG, " selected based on TSN in "
  285. "RSN IE");
  286. return 1;
  287. }
  288. if (!(ie.proto & ssid->proto)) {
  289. wpa_printf(MSG_DEBUG, " skip RSN IE - proto "
  290. "mismatch");
  291. break;
  292. }
  293. if (!(ie.pairwise_cipher & ssid->pairwise_cipher)) {
  294. wpa_printf(MSG_DEBUG, " skip RSN IE - PTK cipher "
  295. "mismatch");
  296. break;
  297. }
  298. if (!(ie.group_cipher & ssid->group_cipher)) {
  299. wpa_printf(MSG_DEBUG, " skip RSN IE - GTK cipher "
  300. "mismatch");
  301. break;
  302. }
  303. if (!(ie.key_mgmt & ssid->key_mgmt)) {
  304. wpa_printf(MSG_DEBUG, " skip RSN IE - key mgmt "
  305. "mismatch");
  306. break;
  307. }
  308. #ifdef CONFIG_IEEE80211W
  309. if (!(ie.capabilities & WPA_CAPABILITY_MFPC) &&
  310. ssid->ieee80211w == MGMT_FRAME_PROTECTION_REQUIRED) {
  311. wpa_printf(MSG_DEBUG, " skip RSN IE - no mgmt frame "
  312. "protection");
  313. break;
  314. }
  315. #endif /* CONFIG_IEEE80211W */
  316. wpa_printf(MSG_DEBUG, " selected based on RSN IE");
  317. return 1;
  318. }
  319. wpa_ie = wpa_scan_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
  320. while ((ssid->proto & WPA_PROTO_WPA) && wpa_ie) {
  321. proto_match++;
  322. if (wpa_parse_wpa_ie(wpa_ie, 2 + wpa_ie[1], &ie)) {
  323. wpa_printf(MSG_DEBUG, " skip WPA IE - parse failed");
  324. break;
  325. }
  326. if (wep_ok &&
  327. (ie.group_cipher & (WPA_CIPHER_WEP40 | WPA_CIPHER_WEP104)))
  328. {
  329. wpa_printf(MSG_DEBUG, " selected based on TSN in "
  330. "WPA IE");
  331. return 1;
  332. }
  333. if (!(ie.proto & ssid->proto)) {
  334. wpa_printf(MSG_DEBUG, " skip WPA IE - proto "
  335. "mismatch");
  336. break;
  337. }
  338. if (!(ie.pairwise_cipher & ssid->pairwise_cipher)) {
  339. wpa_printf(MSG_DEBUG, " skip WPA IE - PTK cipher "
  340. "mismatch");
  341. break;
  342. }
  343. if (!(ie.group_cipher & ssid->group_cipher)) {
  344. wpa_printf(MSG_DEBUG, " skip WPA IE - GTK cipher "
  345. "mismatch");
  346. break;
  347. }
  348. if (!(ie.key_mgmt & ssid->key_mgmt)) {
  349. wpa_printf(MSG_DEBUG, " skip WPA IE - key mgmt "
  350. "mismatch");
  351. break;
  352. }
  353. wpa_printf(MSG_DEBUG, " selected based on WPA IE");
  354. return 1;
  355. }
  356. if ((ssid->proto & (WPA_PROTO_WPA | WPA_PROTO_RSN)) &&
  357. wpa_key_mgmt_wpa(ssid->key_mgmt) && proto_match == 0) {
  358. wpa_printf(MSG_DEBUG, " skip - no WPA/RSN proto match");
  359. return 0;
  360. }
  361. /* Allow in non-WPA configuration */
  362. return 1;
  363. }
  364. static int freq_allowed(int *freqs, int freq)
  365. {
  366. int i;
  367. if (freqs == NULL)
  368. return 1;
  369. for (i = 0; freqs[i]; i++)
  370. if (freqs[i] == freq)
  371. return 1;
  372. return 0;
  373. }
  374. static struct wpa_ssid * wpa_scan_res_match(struct wpa_supplicant *wpa_s,
  375. int i, struct wpa_scan_res *bss,
  376. struct wpa_ssid *group)
  377. {
  378. const u8 *ssid_;
  379. u8 wpa_ie_len, rsn_ie_len, ssid_len;
  380. int wpa;
  381. struct wpa_blacklist *e;
  382. const u8 *ie;
  383. struct wpa_ssid *ssid;
  384. ie = wpa_scan_get_ie(bss, WLAN_EID_SSID);
  385. ssid_ = ie ? ie + 2 : (u8 *) "";
  386. ssid_len = ie ? ie[1] : 0;
  387. ie = wpa_scan_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
  388. wpa_ie_len = ie ? ie[1] : 0;
  389. ie = wpa_scan_get_ie(bss, WLAN_EID_RSN);
  390. rsn_ie_len = ie ? ie[1] : 0;
  391. wpa_printf(MSG_DEBUG, "%d: " MACSTR " ssid='%s' "
  392. "wpa_ie_len=%u rsn_ie_len=%u caps=0x%x level=%d%s",
  393. i, MAC2STR(bss->bssid), wpa_ssid_txt(ssid_, ssid_len),
  394. wpa_ie_len, rsn_ie_len, bss->caps, bss->level,
  395. wpa_scan_get_vendor_ie(bss, WPS_IE_VENDOR_TYPE) ?
  396. " wps" : "");
  397. e = wpa_blacklist_get(wpa_s, bss->bssid);
  398. if (e) {
  399. int limit = 1;
  400. if (wpa_supplicant_enabled_networks(wpa_s->conf) == 1) {
  401. /*
  402. * When only a single network is enabled, we can
  403. * trigger blacklisting on the first failure. This
  404. * should not be done with multiple enabled networks to
  405. * avoid getting forced to move into a worse ESS on
  406. * single error if there are no other BSSes of the
  407. * current ESS.
  408. */
  409. limit = 0;
  410. }
  411. if (e->count > limit) {
  412. wpa_printf(MSG_DEBUG, " skip - blacklisted "
  413. "(count=%d limit=%d)", e->count, limit);
  414. return 0;
  415. }
  416. }
  417. if (ssid_len == 0) {
  418. wpa_printf(MSG_DEBUG, " skip - SSID not known");
  419. return 0;
  420. }
  421. wpa = wpa_ie_len > 0 || rsn_ie_len > 0;
  422. for (ssid = group; ssid; ssid = ssid->pnext) {
  423. int check_ssid = wpa ? 1 : (ssid->ssid_len != 0);
  424. if (ssid->disabled) {
  425. wpa_printf(MSG_DEBUG, " skip - disabled");
  426. continue;
  427. }
  428. #ifdef CONFIG_WPS
  429. if ((ssid->key_mgmt & WPA_KEY_MGMT_WPS) && e && e->count > 0) {
  430. wpa_printf(MSG_DEBUG, " skip - blacklisted (WPS)");
  431. continue;
  432. }
  433. if (wpa && ssid->ssid_len == 0 &&
  434. wpas_wps_ssid_wildcard_ok(wpa_s, ssid, bss))
  435. check_ssid = 0;
  436. if (!wpa && (ssid->key_mgmt & WPA_KEY_MGMT_WPS)) {
  437. /* Only allow wildcard SSID match if an AP
  438. * advertises active WPS operation that matches
  439. * with our mode. */
  440. check_ssid = 1;
  441. if (ssid->ssid_len == 0 &&
  442. wpas_wps_ssid_wildcard_ok(wpa_s, ssid, bss))
  443. check_ssid = 0;
  444. }
  445. #endif /* CONFIG_WPS */
  446. if (check_ssid &&
  447. (ssid_len != ssid->ssid_len ||
  448. os_memcmp(ssid_, ssid->ssid, ssid_len) != 0)) {
  449. wpa_printf(MSG_DEBUG, " skip - SSID mismatch");
  450. continue;
  451. }
  452. if (ssid->bssid_set &&
  453. os_memcmp(bss->bssid, ssid->bssid, ETH_ALEN) != 0) {
  454. wpa_printf(MSG_DEBUG, " skip - BSSID mismatch");
  455. continue;
  456. }
  457. if (!wpa_supplicant_ssid_bss_match(wpa_s, ssid, bss))
  458. continue;
  459. if (!wpa &&
  460. !(ssid->key_mgmt & WPA_KEY_MGMT_NONE) &&
  461. !(ssid->key_mgmt & WPA_KEY_MGMT_WPS) &&
  462. !(ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X_NO_WPA)) {
  463. wpa_printf(MSG_DEBUG, " skip - non-WPA network not "
  464. "allowed");
  465. continue;
  466. }
  467. if (!wpa && !wpa_supplicant_match_privacy(bss, ssid)) {
  468. wpa_printf(MSG_DEBUG, " skip - privacy mismatch");
  469. continue;
  470. }
  471. if (!wpa && (bss->caps & IEEE80211_CAP_IBSS)) {
  472. wpa_printf(MSG_DEBUG, " skip - IBSS (adhoc) "
  473. "network");
  474. continue;
  475. }
  476. if (!freq_allowed(ssid->freq_list, bss->freq)) {
  477. wpa_printf(MSG_DEBUG, " skip - frequency not "
  478. "allowed");
  479. continue;
  480. }
  481. #ifdef CONFIG_P2P
  482. /*
  483. * TODO: skip the AP if its P2P IE has Group Formation
  484. * bit set in the P2P Group Capability Bitmap and we
  485. * are not in Group Formation with that device.
  486. */
  487. #endif /* CONFIG_P2P */
  488. /* Matching configuration found */
  489. return ssid;
  490. }
  491. /* No matching configuration found */
  492. return 0;
  493. }
  494. static struct wpa_bss *
  495. wpa_supplicant_select_bss(struct wpa_supplicant *wpa_s,
  496. struct wpa_scan_results *scan_res,
  497. struct wpa_ssid *group,
  498. struct wpa_ssid **selected_ssid)
  499. {
  500. size_t i;
  501. wpa_printf(MSG_DEBUG, "Selecting BSS from priority group %d",
  502. group->priority);
  503. for (i = 0; i < scan_res->num; i++) {
  504. struct wpa_scan_res *bss = scan_res->res[i];
  505. const u8 *ie, *ssid;
  506. u8 ssid_len;
  507. *selected_ssid = wpa_scan_res_match(wpa_s, i, bss, group);
  508. if (!*selected_ssid)
  509. continue;
  510. ie = wpa_scan_get_ie(bss, WLAN_EID_SSID);
  511. ssid = ie ? ie + 2 : (u8 *) "";
  512. ssid_len = ie ? ie[1] : 0;
  513. wpa_printf(MSG_DEBUG, " selected BSS " MACSTR " ssid='%s'",
  514. MAC2STR(bss->bssid), wpa_ssid_txt(ssid, ssid_len));
  515. return wpa_bss_get(wpa_s, bss->bssid, ssid, ssid_len);
  516. }
  517. return NULL;
  518. }
  519. static struct wpa_bss *
  520. wpa_supplicant_pick_network(struct wpa_supplicant *wpa_s,
  521. struct wpa_scan_results *scan_res,
  522. struct wpa_ssid **selected_ssid)
  523. {
  524. struct wpa_bss *selected = NULL;
  525. int prio;
  526. while (selected == NULL) {
  527. for (prio = 0; prio < wpa_s->conf->num_prio; prio++) {
  528. selected = wpa_supplicant_select_bss(
  529. wpa_s, scan_res, wpa_s->conf->pssid[prio],
  530. selected_ssid);
  531. if (selected)
  532. break;
  533. }
  534. if (selected == NULL && wpa_s->blacklist) {
  535. wpa_printf(MSG_DEBUG, "No APs found - clear blacklist "
  536. "and try again");
  537. wpa_blacklist_clear(wpa_s);
  538. wpa_s->blacklist_cleared++;
  539. } else if (selected == NULL)
  540. break;
  541. }
  542. return selected;
  543. }
  544. static void wpa_supplicant_req_new_scan(struct wpa_supplicant *wpa_s,
  545. int timeout_sec, int timeout_usec)
  546. {
  547. if (!wpa_supplicant_enabled_networks(wpa_s->conf)) {
  548. /*
  549. * No networks are enabled; short-circuit request so
  550. * we don't wait timeout seconds before transitioning
  551. * to INACTIVE state.
  552. */
  553. wpa_supplicant_set_state(wpa_s, WPA_INACTIVE);
  554. return;
  555. }
  556. wpa_supplicant_req_scan(wpa_s, timeout_sec, timeout_usec);
  557. }
  558. void wpa_supplicant_connect(struct wpa_supplicant *wpa_s,
  559. struct wpa_bss *selected,
  560. struct wpa_ssid *ssid)
  561. {
  562. if (wpas_wps_scan_pbc_overlap(wpa_s, selected, ssid)) {
  563. wpa_msg(wpa_s, MSG_INFO, WPS_EVENT_OVERLAP
  564. "PBC session overlap");
  565. #ifdef CONFIG_P2P
  566. if (wpas_p2p_notif_pbc_overlap(wpa_s) == 1)
  567. return;
  568. #endif /* CONFIG_P2P */
  569. #ifdef CONFIG_WPS
  570. wpas_wps_cancel(wpa_s);
  571. #endif /* CONFIG_WPS */
  572. return;
  573. }
  574. /*
  575. * Do not trigger new association unless the BSSID has changed or if
  576. * reassociation is requested. If we are in process of associating with
  577. * the selected BSSID, do not trigger new attempt.
  578. */
  579. if (wpa_s->reassociate ||
  580. (os_memcmp(selected->bssid, wpa_s->bssid, ETH_ALEN) != 0 &&
  581. (wpa_s->wpa_state != WPA_ASSOCIATING ||
  582. os_memcmp(selected->bssid, wpa_s->pending_bssid, ETH_ALEN) !=
  583. 0))) {
  584. if (wpa_supplicant_scard_init(wpa_s, ssid)) {
  585. wpa_supplicant_req_new_scan(wpa_s, 10, 0);
  586. return;
  587. }
  588. wpa_supplicant_associate(wpa_s, selected, ssid);
  589. } else {
  590. wpa_printf(MSG_DEBUG, "Already associated with the selected "
  591. "AP");
  592. }
  593. }
  594. static struct wpa_ssid *
  595. wpa_supplicant_pick_new_network(struct wpa_supplicant *wpa_s)
  596. {
  597. int prio;
  598. struct wpa_ssid *ssid;
  599. for (prio = 0; prio < wpa_s->conf->num_prio; prio++) {
  600. for (ssid = wpa_s->conf->pssid[prio]; ssid; ssid = ssid->pnext)
  601. {
  602. if (ssid->disabled)
  603. continue;
  604. if (ssid->mode == IEEE80211_MODE_IBSS ||
  605. ssid->mode == IEEE80211_MODE_AP)
  606. return ssid;
  607. }
  608. }
  609. return NULL;
  610. }
  611. /* TODO: move the rsn_preauth_scan_result*() to be called from notify.c based
  612. * on BSS added and BSS changed events */
  613. static void wpa_supplicant_rsn_preauth_scan_results(
  614. struct wpa_supplicant *wpa_s, struct wpa_scan_results *scan_res)
  615. {
  616. int i;
  617. if (rsn_preauth_scan_results(wpa_s->wpa) < 0)
  618. return;
  619. for (i = scan_res->num - 1; i >= 0; i--) {
  620. const u8 *ssid, *rsn;
  621. struct wpa_scan_res *r;
  622. r = scan_res->res[i];
  623. ssid = wpa_scan_get_ie(r, WLAN_EID_SSID);
  624. if (ssid == NULL)
  625. continue;
  626. rsn = wpa_scan_get_ie(r, WLAN_EID_RSN);
  627. if (rsn == NULL)
  628. continue;
  629. rsn_preauth_scan_result(wpa_s->wpa, r->bssid, ssid, rsn);
  630. }
  631. }
  632. static int wpa_supplicant_need_to_roam(struct wpa_supplicant *wpa_s,
  633. struct wpa_bss *selected,
  634. struct wpa_ssid *ssid,
  635. struct wpa_scan_results *scan_res)
  636. {
  637. size_t i;
  638. struct wpa_scan_res *current_bss = NULL;
  639. int min_diff;
  640. if (wpa_s->reassociate)
  641. return 1; /* explicit request to reassociate */
  642. if (wpa_s->wpa_state < WPA_ASSOCIATED)
  643. return 1; /* we are not associated; continue */
  644. if (wpa_s->current_ssid == NULL)
  645. return 1; /* unknown current SSID */
  646. if (wpa_s->current_ssid != ssid)
  647. return 1; /* different network block */
  648. for (i = 0; i < scan_res->num; i++) {
  649. struct wpa_scan_res *res = scan_res->res[i];
  650. const u8 *ie;
  651. if (os_memcmp(res->bssid, wpa_s->bssid, ETH_ALEN) != 0)
  652. continue;
  653. ie = wpa_scan_get_ie(res, WLAN_EID_SSID);
  654. if (ie == NULL)
  655. continue;
  656. if (ie[1] != wpa_s->current_ssid->ssid_len ||
  657. os_memcmp(ie + 2, wpa_s->current_ssid->ssid, ie[1]) != 0)
  658. continue;
  659. current_bss = res;
  660. break;
  661. }
  662. if (!current_bss)
  663. return 1; /* current BSS not seen in scan results */
  664. wpa_printf(MSG_DEBUG, "Considering within-ESS reassociation");
  665. wpa_printf(MSG_DEBUG, "Current BSS: " MACSTR " level=%d",
  666. MAC2STR(current_bss->bssid), current_bss->level);
  667. wpa_printf(MSG_DEBUG, "Selected BSS: " MACSTR " level=%d",
  668. MAC2STR(selected->bssid), selected->level);
  669. if (wpa_s->current_ssid->bssid_set &&
  670. os_memcmp(selected->bssid, wpa_s->current_ssid->bssid, ETH_ALEN) ==
  671. 0) {
  672. wpa_printf(MSG_DEBUG, "Allow reassociation - selected BSS has "
  673. "preferred BSSID");
  674. return 1;
  675. }
  676. min_diff = 2;
  677. if (current_bss->level < 0) {
  678. if (current_bss->level < -85)
  679. min_diff = 1;
  680. else if (current_bss->level < -80)
  681. min_diff = 2;
  682. else if (current_bss->level < -75)
  683. min_diff = 3;
  684. else if (current_bss->level < -70)
  685. min_diff = 4;
  686. else
  687. min_diff = 5;
  688. }
  689. if (abs(current_bss->level - selected->level) < min_diff) {
  690. wpa_printf(MSG_DEBUG, "Skip roam - too small difference in "
  691. "signal level");
  692. return 0;
  693. }
  694. return 1;
  695. }
  696. static void _wpa_supplicant_event_scan_results(struct wpa_supplicant *wpa_s,
  697. union wpa_event_data *data)
  698. {
  699. struct wpa_bss *selected;
  700. struct wpa_ssid *ssid = NULL;
  701. struct wpa_scan_results *scan_res;
  702. int ap = 0;
  703. #ifdef CONFIG_AP
  704. if (wpa_s->ap_iface)
  705. ap = 1;
  706. #endif /* CONFIG_AP */
  707. wpa_supplicant_notify_scanning(wpa_s, 0);
  708. scan_res = wpa_supplicant_get_scan_results(wpa_s,
  709. data ? &data->scan_info :
  710. NULL, 1);
  711. if (scan_res == NULL) {
  712. if (wpa_s->conf->ap_scan == 2 || ap)
  713. return;
  714. wpa_printf(MSG_DEBUG, "Failed to get scan results - try "
  715. "scanning again");
  716. wpa_supplicant_req_new_scan(wpa_s, 1, 0);
  717. return;
  718. }
  719. #ifndef CONFIG_NO_RANDOM_POOL
  720. size_t i, num;
  721. num = scan_res->num;
  722. if (num > 10)
  723. num = 10;
  724. for (i = 0; i < num; i++) {
  725. u8 buf[5];
  726. struct wpa_scan_res *res = scan_res->res[i];
  727. buf[0] = res->bssid[5];
  728. buf[1] = res->qual & 0xff;
  729. buf[2] = res->noise & 0xff;
  730. buf[3] = res->level & 0xff;
  731. buf[4] = res->tsf & 0xff;
  732. random_add_randomness(buf, sizeof(buf));
  733. }
  734. #endif /* CONFIG_NO_RANDOM_POOL */
  735. if (wpa_s->scan_res_handler) {
  736. void (*scan_res_handler)(struct wpa_supplicant *wpa_s,
  737. struct wpa_scan_results *scan_res);
  738. scan_res_handler = wpa_s->scan_res_handler;
  739. wpa_s->scan_res_handler = NULL;
  740. scan_res_handler(wpa_s, scan_res);
  741. wpa_scan_results_free(scan_res);
  742. return;
  743. }
  744. if (ap) {
  745. wpa_printf(MSG_DEBUG, "Ignore scan results in AP mode");
  746. wpa_scan_results_free(scan_res);
  747. return;
  748. }
  749. wpa_printf(MSG_DEBUG, "%s: New scan results available", wpa_s->ifname);
  750. wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_SCAN_RESULTS);
  751. wpas_notify_scan_results(wpa_s);
  752. wpas_notify_scan_done(wpa_s, 1);
  753. if ((wpa_s->conf->ap_scan == 2 && !wpas_wps_searching(wpa_s))) {
  754. wpa_scan_results_free(scan_res);
  755. return;
  756. }
  757. if (wpa_s->disconnected) {
  758. wpa_supplicant_set_state(wpa_s, WPA_DISCONNECTED);
  759. wpa_scan_results_free(scan_res);
  760. return;
  761. }
  762. if (bgscan_notify_scan(wpa_s, scan_res) == 1) {
  763. wpa_scan_results_free(scan_res);
  764. return;
  765. }
  766. wpa_supplicant_rsn_preauth_scan_results(wpa_s, scan_res);
  767. selected = wpa_supplicant_pick_network(wpa_s, scan_res, &ssid);
  768. if (selected) {
  769. int skip;
  770. skip = !wpa_supplicant_need_to_roam(wpa_s, selected, ssid,
  771. scan_res);
  772. wpa_scan_results_free(scan_res);
  773. if (skip)
  774. return;
  775. wpa_supplicant_connect(wpa_s, selected, ssid);
  776. } else {
  777. wpa_scan_results_free(scan_res);
  778. wpa_printf(MSG_DEBUG, "No suitable network found");
  779. ssid = wpa_supplicant_pick_new_network(wpa_s);
  780. if (ssid) {
  781. wpa_printf(MSG_DEBUG, "Setup a new network");
  782. wpa_supplicant_associate(wpa_s, NULL, ssid);
  783. } else {
  784. int timeout_sec = 5;
  785. int timeout_usec = 0;
  786. #ifdef CONFIG_P2P
  787. if (wpa_s->p2p_in_provisioning) {
  788. /*
  789. * Use shorter wait during P2P Provisioning
  790. * state to speed up group formation.
  791. */
  792. timeout_sec = 0;
  793. timeout_usec = 250000;
  794. }
  795. #endif /* CONFIG_P2P */
  796. wpa_supplicant_req_new_scan(wpa_s, timeout_sec,
  797. timeout_usec);
  798. }
  799. }
  800. }
  801. static void wpa_supplicant_event_scan_results(struct wpa_supplicant *wpa_s,
  802. union wpa_event_data *data)
  803. {
  804. const char *rn, *rn2;
  805. struct wpa_supplicant *ifs;
  806. _wpa_supplicant_event_scan_results(wpa_s, data);
  807. /*
  808. * Check other interfaces to see if they have the same radio-name. If
  809. * so, they get updated with this same scan info.
  810. */
  811. if (!wpa_s->driver->get_radio_name)
  812. return;
  813. rn = wpa_s->driver->get_radio_name(wpa_s->drv_priv);
  814. if (rn == NULL || rn[0] == '\0')
  815. return;
  816. wpa_printf(MSG_DEBUG, "%s: Checking for other virtual interfaces "
  817. "sharing same radio (%s) in event_scan_results",
  818. wpa_s->ifname, rn);
  819. for (ifs = wpa_s->global->ifaces; ifs; ifs = ifs->next) {
  820. if (ifs == wpa_s || !ifs->driver->get_radio_name)
  821. continue;
  822. rn2 = ifs->driver->get_radio_name(ifs->drv_priv);
  823. if (rn2 && os_strcmp(rn, rn2) == 0) {
  824. wpa_printf(MSG_DEBUG, "%s: Updating scan results from "
  825. "sibling", ifs->ifname);
  826. _wpa_supplicant_event_scan_results(ifs, data);
  827. }
  828. }
  829. }
  830. #endif /* CONFIG_NO_SCAN_PROCESSING */
  831. static int wpa_supplicant_event_associnfo(struct wpa_supplicant *wpa_s,
  832. union wpa_event_data *data)
  833. {
  834. int l, len, found = 0, wpa_found, rsn_found;
  835. const u8 *p;
  836. wpa_printf(MSG_DEBUG, "Association info event");
  837. if (data->assoc_info.req_ies)
  838. wpa_hexdump(MSG_DEBUG, "req_ies", data->assoc_info.req_ies,
  839. data->assoc_info.req_ies_len);
  840. if (data->assoc_info.resp_ies)
  841. wpa_hexdump(MSG_DEBUG, "resp_ies", data->assoc_info.resp_ies,
  842. data->assoc_info.resp_ies_len);
  843. if (data->assoc_info.beacon_ies)
  844. wpa_hexdump(MSG_DEBUG, "beacon_ies",
  845. data->assoc_info.beacon_ies,
  846. data->assoc_info.beacon_ies_len);
  847. if (data->assoc_info.freq)
  848. wpa_printf(MSG_DEBUG, "freq=%u MHz", data->assoc_info.freq);
  849. p = data->assoc_info.req_ies;
  850. l = data->assoc_info.req_ies_len;
  851. /* Go through the IEs and make a copy of the WPA/RSN IE, if present. */
  852. while (p && l >= 2) {
  853. len = p[1] + 2;
  854. if (len > l) {
  855. wpa_hexdump(MSG_DEBUG, "Truncated IE in assoc_info",
  856. p, l);
  857. break;
  858. }
  859. if ((p[0] == WLAN_EID_VENDOR_SPECIFIC && p[1] >= 6 &&
  860. (os_memcmp(&p[2], "\x00\x50\xF2\x01\x01\x00", 6) == 0)) ||
  861. (p[0] == WLAN_EID_RSN && p[1] >= 2)) {
  862. if (wpa_sm_set_assoc_wpa_ie(wpa_s->wpa, p, len))
  863. break;
  864. found = 1;
  865. wpa_find_assoc_pmkid(wpa_s);
  866. break;
  867. }
  868. l -= len;
  869. p += len;
  870. }
  871. if (!found && data->assoc_info.req_ies)
  872. wpa_sm_set_assoc_wpa_ie(wpa_s->wpa, NULL, 0);
  873. #ifdef CONFIG_IEEE80211R
  874. #ifdef CONFIG_SME
  875. if (wpa_s->sme.auth_alg == WPA_AUTH_ALG_FT) {
  876. u8 bssid[ETH_ALEN];
  877. if (wpa_drv_get_bssid(wpa_s, bssid) < 0 ||
  878. wpa_ft_validate_reassoc_resp(wpa_s->wpa,
  879. data->assoc_info.resp_ies,
  880. data->assoc_info.resp_ies_len,
  881. bssid) < 0) {
  882. wpa_printf(MSG_DEBUG, "FT: Validation of "
  883. "Reassociation Response failed");
  884. wpa_supplicant_deauthenticate(
  885. wpa_s, WLAN_REASON_INVALID_IE);
  886. return -1;
  887. }
  888. }
  889. p = data->assoc_info.resp_ies;
  890. l = data->assoc_info.resp_ies_len;
  891. #ifdef CONFIG_WPS_STRICT
  892. if (wpa_s->current_ssid &&
  893. wpa_s->current_ssid->key_mgmt == WPA_KEY_MGMT_WPS) {
  894. struct wpabuf *wps;
  895. wps = ieee802_11_vendor_ie_concat(p, l, WPS_IE_VENDOR_TYPE);
  896. if (wps == NULL) {
  897. wpa_printf(MSG_INFO, "WPS-STRICT: AP did not include "
  898. "WPS IE in (Re)Association Response");
  899. return -1;
  900. }
  901. if (wps_validate_assoc_resp(wps) < 0) {
  902. wpabuf_free(wps);
  903. wpa_supplicant_deauthenticate(
  904. wpa_s, WLAN_REASON_INVALID_IE);
  905. return -1;
  906. }
  907. wpabuf_free(wps);
  908. }
  909. #endif /* CONFIG_WPS_STRICT */
  910. /* Go through the IEs and make a copy of the MDIE, if present. */
  911. while (p && l >= 2) {
  912. len = p[1] + 2;
  913. if (len > l) {
  914. wpa_hexdump(MSG_DEBUG, "Truncated IE in assoc_info",
  915. p, l);
  916. break;
  917. }
  918. if (p[0] == WLAN_EID_MOBILITY_DOMAIN &&
  919. p[1] >= MOBILITY_DOMAIN_ID_LEN) {
  920. wpa_s->sme.ft_used = 1;
  921. os_memcpy(wpa_s->sme.mobility_domain, p + 2,
  922. MOBILITY_DOMAIN_ID_LEN);
  923. break;
  924. }
  925. l -= len;
  926. p += len;
  927. }
  928. #endif /* CONFIG_SME */
  929. wpa_sm_set_ft_params(wpa_s->wpa, data->assoc_info.resp_ies,
  930. data->assoc_info.resp_ies_len);
  931. #endif /* CONFIG_IEEE80211R */
  932. /* WPA/RSN IE from Beacon/ProbeResp */
  933. p = data->assoc_info.beacon_ies;
  934. l = data->assoc_info.beacon_ies_len;
  935. /* Go through the IEs and make a copy of the WPA/RSN IEs, if present.
  936. */
  937. wpa_found = rsn_found = 0;
  938. while (p && l >= 2) {
  939. len = p[1] + 2;
  940. if (len > l) {
  941. wpa_hexdump(MSG_DEBUG, "Truncated IE in beacon_ies",
  942. p, l);
  943. break;
  944. }
  945. if (!wpa_found &&
  946. p[0] == WLAN_EID_VENDOR_SPECIFIC && p[1] >= 6 &&
  947. os_memcmp(&p[2], "\x00\x50\xF2\x01\x01\x00", 6) == 0) {
  948. wpa_found = 1;
  949. wpa_sm_set_ap_wpa_ie(wpa_s->wpa, p, len);
  950. }
  951. if (!rsn_found &&
  952. p[0] == WLAN_EID_RSN && p[1] >= 2) {
  953. rsn_found = 1;
  954. wpa_sm_set_ap_rsn_ie(wpa_s->wpa, p, len);
  955. }
  956. l -= len;
  957. p += len;
  958. }
  959. if (!wpa_found && data->assoc_info.beacon_ies)
  960. wpa_sm_set_ap_wpa_ie(wpa_s->wpa, NULL, 0);
  961. if (!rsn_found && data->assoc_info.beacon_ies)
  962. wpa_sm_set_ap_rsn_ie(wpa_s->wpa, NULL, 0);
  963. if (wpa_found || rsn_found)
  964. wpa_s->ap_ies_from_associnfo = 1;
  965. wpa_s->assoc_freq = data->assoc_info.freq;
  966. return 0;
  967. }
  968. static void wpa_supplicant_event_assoc(struct wpa_supplicant *wpa_s,
  969. union wpa_event_data *data)
  970. {
  971. u8 bssid[ETH_ALEN];
  972. int ft_completed;
  973. int bssid_changed;
  974. struct wpa_driver_capa capa;
  975. #ifdef CONFIG_AP
  976. if (wpa_s->ap_iface) {
  977. hostapd_notif_assoc(wpa_s->ap_iface->bss[0],
  978. data->assoc_info.addr,
  979. data->assoc_info.req_ies,
  980. data->assoc_info.req_ies_len);
  981. return;
  982. }
  983. #endif /* CONFIG_AP */
  984. ft_completed = wpa_ft_is_completed(wpa_s->wpa);
  985. if (data && wpa_supplicant_event_associnfo(wpa_s, data) < 0)
  986. return;
  987. wpa_supplicant_set_state(wpa_s, WPA_ASSOCIATED);
  988. if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME)
  989. os_memcpy(bssid, wpa_s->bssid, ETH_ALEN);
  990. if ((wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME) ||
  991. (wpa_drv_get_bssid(wpa_s, bssid) >= 0 &&
  992. os_memcmp(bssid, wpa_s->bssid, ETH_ALEN) != 0)) {
  993. wpa_msg(wpa_s, MSG_DEBUG, "Associated to a new BSS: BSSID="
  994. MACSTR, MAC2STR(bssid));
  995. random_add_randomness(bssid, ETH_ALEN);
  996. bssid_changed = os_memcmp(wpa_s->bssid, bssid, ETH_ALEN);
  997. os_memcpy(wpa_s->bssid, bssid, ETH_ALEN);
  998. os_memset(wpa_s->pending_bssid, 0, ETH_ALEN);
  999. if (bssid_changed)
  1000. wpas_notify_bssid_changed(wpa_s);
  1001. if (wpa_supplicant_dynamic_keys(wpa_s) && !ft_completed) {
  1002. wpa_clear_keys(wpa_s, bssid);
  1003. }
  1004. if (wpa_supplicant_select_config(wpa_s) < 0) {
  1005. wpa_supplicant_disassociate(
  1006. wpa_s, WLAN_REASON_DEAUTH_LEAVING);
  1007. return;
  1008. }
  1009. if (wpa_s->current_ssid) {
  1010. struct wpa_bss *bss = NULL;
  1011. struct wpa_ssid *ssid = wpa_s->current_ssid;
  1012. if (ssid->ssid_len > 0)
  1013. bss = wpa_bss_get(wpa_s, bssid,
  1014. ssid->ssid, ssid->ssid_len);
  1015. if (!bss)
  1016. bss = wpa_bss_get_bssid(wpa_s, bssid);
  1017. if (bss)
  1018. wpa_s->current_bss = bss;
  1019. }
  1020. }
  1021. #ifdef CONFIG_SME
  1022. os_memcpy(wpa_s->sme.prev_bssid, bssid, ETH_ALEN);
  1023. wpa_s->sme.prev_bssid_set = 1;
  1024. #endif /* CONFIG_SME */
  1025. wpa_msg(wpa_s, MSG_INFO, "Associated with " MACSTR, MAC2STR(bssid));
  1026. if (wpa_s->current_ssid) {
  1027. /* When using scanning (ap_scan=1), SIM PC/SC interface can be
  1028. * initialized before association, but for other modes,
  1029. * initialize PC/SC here, if the current configuration needs
  1030. * smartcard or SIM/USIM. */
  1031. wpa_supplicant_scard_init(wpa_s, wpa_s->current_ssid);
  1032. }
  1033. wpa_sm_notify_assoc(wpa_s->wpa, bssid);
  1034. if (wpa_s->l2)
  1035. l2_packet_notify_auth_start(wpa_s->l2);
  1036. /*
  1037. * Set portEnabled first to FALSE in order to get EAP state machine out
  1038. * of the SUCCESS state and eapSuccess cleared. Without this, EAPOL PAE
  1039. * state machine may transit to AUTHENTICATING state based on obsolete
  1040. * eapSuccess and then trigger BE_AUTH to SUCCESS and PAE to
  1041. * AUTHENTICATED without ever giving chance to EAP state machine to
  1042. * reset the state.
  1043. */
  1044. if (!ft_completed) {
  1045. eapol_sm_notify_portEnabled(wpa_s->eapol, FALSE);
  1046. eapol_sm_notify_portValid(wpa_s->eapol, FALSE);
  1047. }
  1048. if (wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt) || ft_completed)
  1049. eapol_sm_notify_eap_success(wpa_s->eapol, FALSE);
  1050. /* 802.1X::portControl = Auto */
  1051. eapol_sm_notify_portEnabled(wpa_s->eapol, TRUE);
  1052. wpa_s->eapol_received = 0;
  1053. if (wpa_s->key_mgmt == WPA_KEY_MGMT_NONE ||
  1054. wpa_s->key_mgmt == WPA_KEY_MGMT_WPA_NONE ||
  1055. (wpa_s->current_ssid &&
  1056. wpa_s->current_ssid->mode == IEEE80211_MODE_IBSS)) {
  1057. wpa_supplicant_cancel_auth_timeout(wpa_s);
  1058. wpa_supplicant_set_state(wpa_s, WPA_COMPLETED);
  1059. } else if (!ft_completed) {
  1060. /* Timeout for receiving the first EAPOL packet */
  1061. wpa_supplicant_req_auth_timeout(wpa_s, 10, 0);
  1062. }
  1063. wpa_supplicant_cancel_scan(wpa_s);
  1064. if ((wpa_s->drv_flags & WPA_DRIVER_FLAGS_4WAY_HANDSHAKE) &&
  1065. wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt)) {
  1066. /*
  1067. * We are done; the driver will take care of RSN 4-way
  1068. * handshake.
  1069. */
  1070. wpa_supplicant_cancel_auth_timeout(wpa_s);
  1071. wpa_supplicant_set_state(wpa_s, WPA_COMPLETED);
  1072. eapol_sm_notify_portValid(wpa_s->eapol, TRUE);
  1073. eapol_sm_notify_eap_success(wpa_s->eapol, TRUE);
  1074. } else if ((wpa_s->drv_flags & WPA_DRIVER_FLAGS_4WAY_HANDSHAKE) &&
  1075. wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) {
  1076. /*
  1077. * The driver will take care of RSN 4-way handshake, so we need
  1078. * to allow EAPOL supplicant to complete its work without
  1079. * waiting for WPA supplicant.
  1080. */
  1081. eapol_sm_notify_portValid(wpa_s->eapol, TRUE);
  1082. }
  1083. if (wpa_s->pending_eapol_rx) {
  1084. struct os_time now, age;
  1085. os_get_time(&now);
  1086. os_time_sub(&now, &wpa_s->pending_eapol_rx_time, &age);
  1087. if (age.sec == 0 && age.usec < 100000 &&
  1088. os_memcmp(wpa_s->pending_eapol_rx_src, bssid, ETH_ALEN) ==
  1089. 0) {
  1090. wpa_printf(MSG_DEBUG, "Process pending EAPOL frame "
  1091. "that was received just before association "
  1092. "notification");
  1093. wpa_supplicant_rx_eapol(
  1094. wpa_s, wpa_s->pending_eapol_rx_src,
  1095. wpabuf_head(wpa_s->pending_eapol_rx),
  1096. wpabuf_len(wpa_s->pending_eapol_rx));
  1097. }
  1098. wpabuf_free(wpa_s->pending_eapol_rx);
  1099. wpa_s->pending_eapol_rx = NULL;
  1100. }
  1101. #ifdef CONFIG_BGSCAN
  1102. if (wpa_s->current_ssid != wpa_s->bgscan_ssid) {
  1103. bgscan_deinit(wpa_s);
  1104. if (wpa_s->current_ssid && wpa_s->current_ssid->bgscan) {
  1105. if (bgscan_init(wpa_s, wpa_s->current_ssid)) {
  1106. wpa_printf(MSG_DEBUG, "Failed to initialize "
  1107. "bgscan");
  1108. /*
  1109. * Live without bgscan; it is only used as a
  1110. * roaming optimization, so the initial
  1111. * connection is not affected.
  1112. */
  1113. } else
  1114. wpa_s->bgscan_ssid = wpa_s->current_ssid;
  1115. } else
  1116. wpa_s->bgscan_ssid = NULL;
  1117. }
  1118. #endif /* CONFIG_BGSCAN */
  1119. if ((wpa_s->key_mgmt == WPA_KEY_MGMT_NONE ||
  1120. wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) &&
  1121. wpa_s->current_ssid && wpa_drv_get_capa(wpa_s, &capa) == 0 &&
  1122. capa.flags & WPA_DRIVER_FLAGS_SET_KEYS_AFTER_ASSOC_DONE) {
  1123. /* Set static WEP keys again */
  1124. wpa_set_wep_keys(wpa_s, wpa_s->current_ssid);
  1125. }
  1126. #ifdef CONFIG_IBSS_RSN
  1127. if (wpa_s->current_ssid &&
  1128. wpa_s->current_ssid->mode == WPAS_MODE_IBSS &&
  1129. wpa_s->key_mgmt != WPA_KEY_MGMT_NONE &&
  1130. wpa_s->key_mgmt != WPA_KEY_MGMT_WPA_NONE)
  1131. ibss_rsn_connected(wpa_s->ibss_rsn);
  1132. #endif /* CONFIG_IBSS_RSN */
  1133. }
  1134. static void wpa_supplicant_event_disassoc(struct wpa_supplicant *wpa_s,
  1135. u16 reason_code)
  1136. {
  1137. const u8 *bssid;
  1138. #ifdef CONFIG_SME
  1139. int authenticating;
  1140. u8 prev_pending_bssid[ETH_ALEN];
  1141. authenticating = wpa_s->wpa_state == WPA_AUTHENTICATING;
  1142. os_memcpy(prev_pending_bssid, wpa_s->pending_bssid, ETH_ALEN);
  1143. #endif /* CONFIG_SME */
  1144. if (wpa_s->key_mgmt == WPA_KEY_MGMT_WPA_NONE) {
  1145. /*
  1146. * At least Host AP driver and a Prism3 card seemed to be
  1147. * generating streams of disconnected events when configuring
  1148. * IBSS for WPA-None. Ignore them for now.
  1149. */
  1150. wpa_printf(MSG_DEBUG, "Disconnect event - ignore in "
  1151. "IBSS/WPA-None mode");
  1152. return;
  1153. }
  1154. if (wpa_s->wpa_state == WPA_4WAY_HANDSHAKE &&
  1155. wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt)) {
  1156. wpa_msg(wpa_s, MSG_INFO, "WPA: 4-Way Handshake failed - "
  1157. "pre-shared key may be incorrect");
  1158. }
  1159. if (!wpa_s->auto_reconnect_disabled ||
  1160. wpa_s->key_mgmt == WPA_KEY_MGMT_WPS) {
  1161. wpa_printf(MSG_DEBUG, "WPA: Auto connect enabled: try to "
  1162. "reconnect (wps=%d)",
  1163. wpa_s->key_mgmt == WPA_KEY_MGMT_WPS);
  1164. if (wpa_s->wpa_state >= WPA_ASSOCIATING)
  1165. wpa_supplicant_req_scan(wpa_s, 0, 100000);
  1166. } else {
  1167. wpa_printf(MSG_DEBUG, "WPA: Auto connect disabled: do not try "
  1168. "to re-connect");
  1169. wpa_s->reassociate = 0;
  1170. wpa_s->disconnected = 1;
  1171. }
  1172. bssid = wpa_s->bssid;
  1173. if (is_zero_ether_addr(bssid))
  1174. bssid = wpa_s->pending_bssid;
  1175. wpas_connection_failed(wpa_s, bssid);
  1176. wpa_sm_notify_disassoc(wpa_s->wpa);
  1177. wpa_msg(wpa_s, MSG_INFO, WPA_EVENT_DISCONNECTED "bssid=" MACSTR
  1178. " reason=%d",
  1179. MAC2STR(bssid), reason_code);
  1180. if (wpa_supplicant_dynamic_keys(wpa_s)) {
  1181. wpa_printf(MSG_DEBUG, "Disconnect event - remove keys");
  1182. wpa_s->keys_cleared = 0;
  1183. wpa_clear_keys(wpa_s, wpa_s->bssid);
  1184. }
  1185. wpa_supplicant_mark_disassoc(wpa_s);
  1186. bgscan_deinit(wpa_s);
  1187. wpa_s->bgscan_ssid = NULL;
  1188. #ifdef CONFIG_SME
  1189. if (authenticating &&
  1190. (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME)) {
  1191. /*
  1192. * mac80211-workaround to force deauth on failed auth cmd,
  1193. * requires us to remain in authenticating state to allow the
  1194. * second authentication attempt to be continued properly.
  1195. */
  1196. wpa_printf(MSG_DEBUG, "SME: Allow pending authentication to "
  1197. "proceed after disconnection event");
  1198. wpa_supplicant_set_state(wpa_s, WPA_AUTHENTICATING);
  1199. os_memcpy(wpa_s->pending_bssid, prev_pending_bssid, ETH_ALEN);
  1200. }
  1201. #endif /* CONFIG_SME */
  1202. }
  1203. #ifdef CONFIG_DELAYED_MIC_ERROR_REPORT
  1204. static void wpa_supplicant_delayed_mic_error_report(void *eloop_ctx,
  1205. void *sock_ctx)
  1206. {
  1207. struct wpa_supplicant *wpa_s = eloop_ctx;
  1208. if (!wpa_s->pending_mic_error_report)
  1209. return;
  1210. wpa_printf(MSG_DEBUG, "WPA: Sending pending MIC error report");
  1211. wpa_sm_key_request(wpa_s->wpa, 1, wpa_s->pending_mic_error_pairwise);
  1212. wpa_s->pending_mic_error_report = 0;
  1213. }
  1214. #endif /* CONFIG_DELAYED_MIC_ERROR_REPORT */
  1215. static void
  1216. wpa_supplicant_event_michael_mic_failure(struct wpa_supplicant *wpa_s,
  1217. union wpa_event_data *data)
  1218. {
  1219. int pairwise;
  1220. struct os_time t;
  1221. wpa_msg(wpa_s, MSG_WARNING, "Michael MIC failure detected");
  1222. pairwise = (data && data->michael_mic_failure.unicast);
  1223. os_get_time(&t);
  1224. if ((wpa_s->last_michael_mic_error &&
  1225. t.sec - wpa_s->last_michael_mic_error <= 60) ||
  1226. wpa_s->pending_mic_error_report) {
  1227. if (wpa_s->pending_mic_error_report) {
  1228. /*
  1229. * Send the pending MIC error report immediately since
  1230. * we are going to start countermeasures and AP better
  1231. * do the same.
  1232. */
  1233. wpa_sm_key_request(wpa_s->wpa, 1,
  1234. wpa_s->pending_mic_error_pairwise);
  1235. }
  1236. /* Send the new MIC error report immediately since we are going
  1237. * to start countermeasures and AP better do the same.
  1238. */
  1239. wpa_sm_key_request(wpa_s->wpa, 1, pairwise);
  1240. /* initialize countermeasures */
  1241. wpa_s->countermeasures = 1;
  1242. wpa_msg(wpa_s, MSG_WARNING, "TKIP countermeasures started");
  1243. /*
  1244. * Need to wait for completion of request frame. We do not get
  1245. * any callback for the message completion, so just wait a
  1246. * short while and hope for the best. */
  1247. os_sleep(0, 10000);
  1248. wpa_drv_set_countermeasures(wpa_s, 1);
  1249. wpa_supplicant_deauthenticate(wpa_s,
  1250. WLAN_REASON_MICHAEL_MIC_FAILURE);
  1251. eloop_cancel_timeout(wpa_supplicant_stop_countermeasures,
  1252. wpa_s, NULL);
  1253. eloop_register_timeout(60, 0,
  1254. wpa_supplicant_stop_countermeasures,
  1255. wpa_s, NULL);
  1256. /* TODO: mark the AP rejected for 60 second. STA is
  1257. * allowed to associate with another AP.. */
  1258. } else {
  1259. #ifdef CONFIG_DELAYED_MIC_ERROR_REPORT
  1260. if (wpa_s->mic_errors_seen) {
  1261. /*
  1262. * Reduce the effectiveness of Michael MIC error
  1263. * reports as a means for attacking against TKIP if
  1264. * more than one MIC failure is noticed with the same
  1265. * PTK. We delay the transmission of the reports by a
  1266. * random time between 0 and 60 seconds in order to
  1267. * force the attacker wait 60 seconds before getting
  1268. * the information on whether a frame resulted in a MIC
  1269. * failure.
  1270. */
  1271. u8 rval[4];
  1272. int sec;
  1273. if (os_get_random(rval, sizeof(rval)) < 0)
  1274. sec = os_random() % 60;
  1275. else
  1276. sec = WPA_GET_BE32(rval) % 60;
  1277. wpa_printf(MSG_DEBUG, "WPA: Delay MIC error report %d "
  1278. "seconds", sec);
  1279. wpa_s->pending_mic_error_report = 1;
  1280. wpa_s->pending_mic_error_pairwise = pairwise;
  1281. eloop_cancel_timeout(
  1282. wpa_supplicant_delayed_mic_error_report,
  1283. wpa_s, NULL);
  1284. eloop_register_timeout(
  1285. sec, os_random() % 1000000,
  1286. wpa_supplicant_delayed_mic_error_report,
  1287. wpa_s, NULL);
  1288. } else {
  1289. wpa_sm_key_request(wpa_s->wpa, 1, pairwise);
  1290. }
  1291. #else /* CONFIG_DELAYED_MIC_ERROR_REPORT */
  1292. wpa_sm_key_request(wpa_s->wpa, 1, pairwise);
  1293. #endif /* CONFIG_DELAYED_MIC_ERROR_REPORT */
  1294. }
  1295. wpa_s->last_michael_mic_error = t.sec;
  1296. wpa_s->mic_errors_seen++;
  1297. }
  1298. #ifdef CONFIG_TERMINATE_ONLASTIF
  1299. static int any_interfaces(struct wpa_supplicant *head)
  1300. {
  1301. struct wpa_supplicant *wpa_s;
  1302. for (wpa_s = head; wpa_s != NULL; wpa_s = wpa_s->next)
  1303. if (!wpa_s->interface_removed)
  1304. return 1;
  1305. return 0;
  1306. }
  1307. #endif /* CONFIG_TERMINATE_ONLASTIF */
  1308. static void
  1309. wpa_supplicant_event_interface_status(struct wpa_supplicant *wpa_s,
  1310. union wpa_event_data *data)
  1311. {
  1312. if (os_strcmp(wpa_s->ifname, data->interface_status.ifname) != 0)
  1313. return;
  1314. switch (data->interface_status.ievent) {
  1315. case EVENT_INTERFACE_ADDED:
  1316. if (!wpa_s->interface_removed)
  1317. break;
  1318. wpa_s->interface_removed = 0;
  1319. wpa_printf(MSG_DEBUG, "Configured interface was added.");
  1320. if (wpa_supplicant_driver_init(wpa_s) < 0) {
  1321. wpa_printf(MSG_INFO, "Failed to initialize the driver "
  1322. "after interface was added.");
  1323. }
  1324. break;
  1325. case EVENT_INTERFACE_REMOVED:
  1326. wpa_printf(MSG_DEBUG, "Configured interface was removed.");
  1327. wpa_s->interface_removed = 1;
  1328. wpa_supplicant_mark_disassoc(wpa_s);
  1329. l2_packet_deinit(wpa_s->l2);
  1330. wpa_s->l2 = NULL;
  1331. #ifdef CONFIG_TERMINATE_ONLASTIF
  1332. /* check if last interface */
  1333. if (!any_interfaces(wpa_s->global->ifaces))
  1334. eloop_terminate();
  1335. #endif /* CONFIG_TERMINATE_ONLASTIF */
  1336. break;
  1337. }
  1338. }
  1339. #ifdef CONFIG_PEERKEY
  1340. static void
  1341. wpa_supplicant_event_stkstart(struct wpa_supplicant *wpa_s,
  1342. union wpa_event_data *data)
  1343. {
  1344. if (data == NULL)
  1345. return;
  1346. wpa_sm_stkstart(wpa_s->wpa, data->stkstart.peer);
  1347. }
  1348. #endif /* CONFIG_PEERKEY */
  1349. #ifdef CONFIG_IEEE80211R
  1350. static void
  1351. wpa_supplicant_event_ft_response(struct wpa_supplicant *wpa_s,
  1352. union wpa_event_data *data)
  1353. {
  1354. if (data == NULL)
  1355. return;
  1356. if (wpa_ft_process_response(wpa_s->wpa, data->ft_ies.ies,
  1357. data->ft_ies.ies_len,
  1358. data->ft_ies.ft_action,
  1359. data->ft_ies.target_ap,
  1360. data->ft_ies.ric_ies,
  1361. data->ft_ies.ric_ies_len) < 0) {
  1362. /* TODO: prevent MLME/driver from trying to associate? */
  1363. }
  1364. }
  1365. #endif /* CONFIG_IEEE80211R */
  1366. #ifdef CONFIG_IBSS_RSN
  1367. static void wpa_supplicant_event_ibss_rsn_start(struct wpa_supplicant *wpa_s,
  1368. union wpa_event_data *data)
  1369. {
  1370. struct wpa_ssid *ssid;
  1371. if (data == NULL)
  1372. return;
  1373. ssid = wpa_s->current_ssid;
  1374. if (ssid == NULL)
  1375. return;
  1376. if (ssid->mode != WPAS_MODE_IBSS || !wpa_key_mgmt_wpa(ssid->key_mgmt))
  1377. return;
  1378. ibss_rsn_start(wpa_s->ibss_rsn, data->ibss_rsn_start.peer);
  1379. }
  1380. #endif /* CONFIG_IBSS_RSN */
  1381. #ifdef CONFIG_IEEE80211R
  1382. static void ft_rx_action(struct wpa_supplicant *wpa_s, const u8 *data,
  1383. size_t len)
  1384. {
  1385. const u8 *sta_addr, *target_ap_addr;
  1386. u16 status;
  1387. wpa_hexdump(MSG_MSGDUMP, "FT: RX Action", data, len);
  1388. if (!(wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME))
  1389. return; /* only SME case supported for now */
  1390. if (len < 1 + 2 * ETH_ALEN + 2)
  1391. return;
  1392. if (data[0] != 2)
  1393. return; /* Only FT Action Response is supported for now */
  1394. sta_addr = data + 1;
  1395. target_ap_addr = data + 1 + ETH_ALEN;
  1396. status = WPA_GET_LE16(data + 1 + 2 * ETH_ALEN);
  1397. wpa_printf(MSG_DEBUG, "FT: Received FT Action Response: STA " MACSTR
  1398. " TargetAP " MACSTR " status %u",
  1399. MAC2STR(sta_addr), MAC2STR(target_ap_addr), status);
  1400. if (os_memcmp(sta_addr, wpa_s->own_addr, ETH_ALEN) != 0) {
  1401. wpa_printf(MSG_DEBUG, "FT: Foreign STA Address " MACSTR
  1402. " in FT Action Response", MAC2STR(sta_addr));
  1403. return;
  1404. }
  1405. if (status) {
  1406. wpa_printf(MSG_DEBUG, "FT: FT Action Response indicates "
  1407. "failure (status code %d)", status);
  1408. /* TODO: report error to FT code(?) */
  1409. return;
  1410. }
  1411. if (wpa_ft_process_response(wpa_s->wpa, data + 1 + 2 * ETH_ALEN + 2,
  1412. len - (1 + 2 * ETH_ALEN + 2), 1,
  1413. target_ap_addr, NULL, 0) < 0)
  1414. return;
  1415. #ifdef CONFIG_SME
  1416. {
  1417. struct wpa_bss *bss;
  1418. bss = wpa_bss_get_bssid(wpa_s, target_ap_addr);
  1419. if (bss)
  1420. wpa_s->sme.freq = bss->freq;
  1421. wpa_s->sme.auth_alg = WPA_AUTH_ALG_FT;
  1422. sme_associate(wpa_s, WPAS_MODE_INFRA, target_ap_addr,
  1423. WLAN_AUTH_FT);
  1424. }
  1425. #endif /* CONFIG_SME */
  1426. }
  1427. #endif /* CONFIG_IEEE80211R */
  1428. static void wpa_supplicant_event_unprot_deauth(struct wpa_supplicant *wpa_s,
  1429. struct unprot_deauth *e)
  1430. {
  1431. #ifdef CONFIG_IEEE80211W
  1432. wpa_printf(MSG_DEBUG, "Unprotected Deauthentication frame "
  1433. "dropped: " MACSTR " -> " MACSTR
  1434. " (reason code %u)",
  1435. MAC2STR(e->sa), MAC2STR(e->da), e->reason_code);
  1436. sme_event_unprot_disconnect(wpa_s, e->sa, e->da, e->reason_code);
  1437. #endif /* CONFIG_IEEE80211W */
  1438. }
  1439. static void wpa_supplicant_event_unprot_disassoc(struct wpa_supplicant *wpa_s,
  1440. struct unprot_disassoc *e)
  1441. {
  1442. #ifdef CONFIG_IEEE80211W
  1443. wpa_printf(MSG_DEBUG, "Unprotected Disassociation frame "
  1444. "dropped: " MACSTR " -> " MACSTR
  1445. " (reason code %u)",
  1446. MAC2STR(e->sa), MAC2STR(e->da), e->reason_code);
  1447. sme_event_unprot_disconnect(wpa_s, e->sa, e->da, e->reason_code);
  1448. #endif /* CONFIG_IEEE80211W */
  1449. }
  1450. void wpa_supplicant_event(void *ctx, enum wpa_event_type event,
  1451. union wpa_event_data *data)
  1452. {
  1453. struct wpa_supplicant *wpa_s = ctx;
  1454. u16 reason_code = 0;
  1455. if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED &&
  1456. event != EVENT_INTERFACE_ENABLED &&
  1457. event != EVENT_INTERFACE_STATUS) {
  1458. wpa_printf(MSG_DEBUG, "Ignore event %d while interface is "
  1459. "disabled", event);
  1460. return;
  1461. }
  1462. wpa_printf(MSG_DEBUG, "Event %d received on interface %s",
  1463. event, wpa_s->ifname);
  1464. switch (event) {
  1465. case EVENT_AUTH:
  1466. sme_event_auth(wpa_s, data);
  1467. break;
  1468. case EVENT_ASSOC:
  1469. wpa_supplicant_event_assoc(wpa_s, data);
  1470. break;
  1471. case EVENT_DISASSOC:
  1472. wpa_printf(MSG_DEBUG, "Disassociation notification");
  1473. if (data) {
  1474. wpa_printf(MSG_DEBUG, " * reason %u",
  1475. data->disassoc_info.reason_code);
  1476. if (data->disassoc_info.addr)
  1477. wpa_printf(MSG_DEBUG, " * address " MACSTR,
  1478. MAC2STR(data->disassoc_info.addr));
  1479. }
  1480. #ifdef CONFIG_AP
  1481. if (wpa_s->ap_iface && data && data->disassoc_info.addr) {
  1482. hostapd_notif_disassoc(wpa_s->ap_iface->bss[0],
  1483. data->disassoc_info.addr);
  1484. break;
  1485. }
  1486. #endif /* CONFIG_AP */
  1487. if (data) {
  1488. reason_code = data->disassoc_info.reason_code;
  1489. wpa_hexdump(MSG_DEBUG, "Disassociation frame IE(s)",
  1490. data->disassoc_info.ie,
  1491. data->disassoc_info.ie_len);
  1492. #ifdef CONFIG_P2P
  1493. wpas_p2p_disassoc_notif(
  1494. wpa_s, data->disassoc_info.addr, reason_code,
  1495. data->disassoc_info.ie,
  1496. data->disassoc_info.ie_len);
  1497. #endif /* CONFIG_P2P */
  1498. }
  1499. if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME)
  1500. sme_event_disassoc(wpa_s, data);
  1501. /* fall through */
  1502. case EVENT_DEAUTH:
  1503. if (event == EVENT_DEAUTH) {
  1504. wpa_printf(MSG_DEBUG, "Deauthentication notification");
  1505. if (data) {
  1506. reason_code = data->deauth_info.reason_code;
  1507. wpa_printf(MSG_DEBUG, " * reason %u",
  1508. data->deauth_info.reason_code);
  1509. if (data->deauth_info.addr) {
  1510. wpa_printf(MSG_DEBUG, " * address "
  1511. MACSTR,
  1512. MAC2STR(data->deauth_info.
  1513. addr));
  1514. }
  1515. wpa_hexdump(MSG_DEBUG,
  1516. "Deauthentication frame IE(s)",
  1517. data->deauth_info.ie,
  1518. data->deauth_info.ie_len);
  1519. #ifdef CONFIG_P2P
  1520. wpas_p2p_deauth_notif(
  1521. wpa_s, data->deauth_info.addr,
  1522. reason_code,
  1523. data->deauth_info.ie,
  1524. data->deauth_info.ie_len);
  1525. #endif /* CONFIG_P2P */
  1526. }
  1527. }
  1528. #ifdef CONFIG_AP
  1529. if (wpa_s->ap_iface && data && data->deauth_info.addr) {
  1530. hostapd_notif_disassoc(wpa_s->ap_iface->bss[0],
  1531. data->deauth_info.addr);
  1532. break;
  1533. }
  1534. #endif /* CONFIG_AP */
  1535. wpa_supplicant_event_disassoc(wpa_s, reason_code);
  1536. break;
  1537. case EVENT_MICHAEL_MIC_FAILURE:
  1538. wpa_supplicant_event_michael_mic_failure(wpa_s, data);
  1539. break;
  1540. #ifndef CONFIG_NO_SCAN_PROCESSING
  1541. case EVENT_SCAN_RESULTS:
  1542. wpa_supplicant_event_scan_results(wpa_s, data);
  1543. break;
  1544. #endif /* CONFIG_NO_SCAN_PROCESSING */
  1545. case EVENT_ASSOCINFO:
  1546. wpa_supplicant_event_associnfo(wpa_s, data);
  1547. break;
  1548. case EVENT_INTERFACE_STATUS:
  1549. wpa_supplicant_event_interface_status(wpa_s, data);
  1550. break;
  1551. case EVENT_PMKID_CANDIDATE:
  1552. wpa_supplicant_event_pmkid_candidate(wpa_s, data);
  1553. break;
  1554. #ifdef CONFIG_PEERKEY
  1555. case EVENT_STKSTART:
  1556. wpa_supplicant_event_stkstart(wpa_s, data);
  1557. break;
  1558. #endif /* CONFIG_PEERKEY */
  1559. #ifdef CONFIG_IEEE80211R
  1560. case EVENT_FT_RESPONSE:
  1561. wpa_supplicant_event_ft_response(wpa_s, data);
  1562. break;
  1563. #endif /* CONFIG_IEEE80211R */
  1564. #ifdef CONFIG_IBSS_RSN
  1565. case EVENT_IBSS_RSN_START:
  1566. wpa_supplicant_event_ibss_rsn_start(wpa_s, data);
  1567. break;
  1568. #endif /* CONFIG_IBSS_RSN */
  1569. case EVENT_ASSOC_REJECT:
  1570. if (data->assoc_reject.bssid)
  1571. wpa_msg(wpa_s, MSG_INFO, WPA_EVENT_ASSOC_REJECT
  1572. "bssid=" MACSTR " status_code=%u",
  1573. MAC2STR(data->assoc_reject.bssid),
  1574. data->assoc_reject.status_code);
  1575. else
  1576. wpa_msg(wpa_s, MSG_INFO, WPA_EVENT_ASSOC_REJECT
  1577. "status_code=%u",
  1578. data->assoc_reject.status_code);
  1579. if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME)
  1580. sme_event_assoc_reject(wpa_s, data);
  1581. break;
  1582. case EVENT_AUTH_TIMED_OUT:
  1583. if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME)
  1584. sme_event_auth_timed_out(wpa_s, data);
  1585. break;
  1586. case EVENT_ASSOC_TIMED_OUT:
  1587. if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME)
  1588. sme_event_assoc_timed_out(wpa_s, data);
  1589. break;
  1590. #ifdef CONFIG_AP
  1591. case EVENT_TX_STATUS:
  1592. wpa_printf(MSG_DEBUG, "EVENT_TX_STATUS on %s dst=" MACSTR
  1593. " type=%d stype=%d",
  1594. wpa_s->ifname, MAC2STR(data->tx_status.dst),
  1595. data->tx_status.type, data->tx_status.stype);
  1596. if (wpa_s->ap_iface == NULL) {
  1597. #ifdef CONFIG_P2P
  1598. if (data->tx_status.type == WLAN_FC_TYPE_MGMT &&
  1599. data->tx_status.stype == WLAN_FC_STYPE_ACTION)
  1600. wpas_send_action_tx_status(
  1601. wpa_s, data->tx_status.dst,
  1602. data->tx_status.data,
  1603. data->tx_status.data_len,
  1604. data->tx_status.ack ?
  1605. P2P_SEND_ACTION_SUCCESS :
  1606. P2P_SEND_ACTION_NO_ACK);
  1607. #endif /* CONFIG_P2P */
  1608. break;
  1609. }
  1610. #ifdef CONFIG_P2P
  1611. wpa_printf(MSG_DEBUG, "EVENT_TX_STATUS pending_dst=" MACSTR,
  1612. MAC2STR(wpa_s->parent->pending_action_dst));
  1613. /*
  1614. * Catch TX status events for Action frames we sent via group
  1615. * interface in GO mode.
  1616. */
  1617. if (data->tx_status.type == WLAN_FC_TYPE_MGMT &&
  1618. data->tx_status.stype == WLAN_FC_STYPE_ACTION &&
  1619. os_memcmp(wpa_s->parent->pending_action_dst,
  1620. data->tx_status.dst, ETH_ALEN) == 0) {
  1621. wpas_send_action_tx_status(
  1622. wpa_s->parent, data->tx_status.dst,
  1623. data->tx_status.data,
  1624. data->tx_status.data_len,
  1625. data->tx_status.ack ?
  1626. P2P_SEND_ACTION_SUCCESS :
  1627. P2P_SEND_ACTION_NO_ACK);
  1628. break;
  1629. }
  1630. #endif /* CONFIG_P2P */
  1631. switch (data->tx_status.type) {
  1632. case WLAN_FC_TYPE_MGMT:
  1633. ap_mgmt_tx_cb(wpa_s, data->tx_status.data,
  1634. data->tx_status.data_len,
  1635. data->tx_status.stype,
  1636. data->tx_status.ack);
  1637. break;
  1638. case WLAN_FC_TYPE_DATA:
  1639. ap_tx_status(wpa_s, data->tx_status.dst,
  1640. data->tx_status.data,
  1641. data->tx_status.data_len,
  1642. data->tx_status.ack);
  1643. break;
  1644. }
  1645. break;
  1646. case EVENT_RX_FROM_UNKNOWN:
  1647. if (wpa_s->ap_iface == NULL)
  1648. break;
  1649. ap_rx_from_unknown_sta(wpa_s, data->rx_from_unknown.frame,
  1650. data->rx_from_unknown.len);
  1651. break;
  1652. case EVENT_RX_MGMT:
  1653. if (wpa_s->ap_iface == NULL) {
  1654. #ifdef CONFIG_P2P
  1655. u16 fc, stype;
  1656. const struct ieee80211_mgmt *mgmt;
  1657. mgmt = (const struct ieee80211_mgmt *)
  1658. data->rx_mgmt.frame;
  1659. fc = le_to_host16(mgmt->frame_control);
  1660. stype = WLAN_FC_GET_STYPE(fc);
  1661. if (stype == WLAN_FC_STYPE_PROBE_REQ &&
  1662. data->rx_mgmt.frame_len > 24) {
  1663. const u8 *src = mgmt->sa;
  1664. const u8 *ie = mgmt->u.probe_req.variable;
  1665. size_t ie_len = data->rx_mgmt.frame_len -
  1666. (mgmt->u.probe_req.variable -
  1667. data->rx_mgmt.frame);
  1668. wpas_p2p_probe_req_rx(wpa_s, src, ie, ie_len);
  1669. break;
  1670. }
  1671. #endif /* CONFIG_P2P */
  1672. wpa_printf(MSG_DEBUG, "AP: ignore received management "
  1673. "frame in non-AP mode");
  1674. break;
  1675. }
  1676. ap_mgmt_rx(wpa_s, &data->rx_mgmt);
  1677. break;
  1678. #endif /* CONFIG_AP */
  1679. case EVENT_RX_ACTION:
  1680. wpa_printf(MSG_DEBUG, "Received Action frame: SA=" MACSTR
  1681. " Category=%u DataLen=%d freq=%d MHz",
  1682. MAC2STR(data->rx_action.sa),
  1683. data->rx_action.category, (int) data->rx_action.len,
  1684. data->rx_action.freq);
  1685. #ifdef CONFIG_IEEE80211R
  1686. if (data->rx_action.category == WLAN_ACTION_FT) {
  1687. ft_rx_action(wpa_s, data->rx_action.data,
  1688. data->rx_action.len);
  1689. break;
  1690. }
  1691. #endif /* CONFIG_IEEE80211R */
  1692. #ifdef CONFIG_IEEE80211W
  1693. #ifdef CONFIG_SME
  1694. if (data->rx_action.category == WLAN_ACTION_SA_QUERY) {
  1695. sme_sa_query_rx(wpa_s, data->rx_action.sa,
  1696. data->rx_action.data,
  1697. data->rx_action.len);
  1698. break;
  1699. }
  1700. #endif /* CONFIG_SME */
  1701. #endif /* CONFIG_IEEE80211W */
  1702. #ifdef CONFIG_P2P
  1703. wpas_p2p_rx_action(wpa_s, data->rx_action.da,
  1704. data->rx_action.sa,
  1705. data->rx_action.bssid,
  1706. data->rx_action.category,
  1707. data->rx_action.data,
  1708. data->rx_action.len, data->rx_action.freq);
  1709. #endif /* CONFIG_P2P */
  1710. break;
  1711. #ifdef CONFIG_P2P
  1712. case EVENT_REMAIN_ON_CHANNEL:
  1713. wpas_p2p_remain_on_channel_cb(
  1714. wpa_s, data->remain_on_channel.freq,
  1715. data->remain_on_channel.duration);
  1716. break;
  1717. case EVENT_CANCEL_REMAIN_ON_CHANNEL:
  1718. wpas_p2p_cancel_remain_on_channel_cb(
  1719. wpa_s, data->remain_on_channel.freq);
  1720. break;
  1721. case EVENT_RX_PROBE_REQ:
  1722. wpas_p2p_probe_req_rx(wpa_s, data->rx_probe_req.sa,
  1723. data->rx_probe_req.ie,
  1724. data->rx_probe_req.ie_len);
  1725. break;
  1726. case EVENT_P2P_DEV_FOUND:
  1727. wpas_dev_found(wpa_s, data->p2p_dev_found.addr,
  1728. data->p2p_dev_found.dev_addr,
  1729. data->p2p_dev_found.pri_dev_type,
  1730. data->p2p_dev_found.dev_name,
  1731. data->p2p_dev_found.config_methods,
  1732. data->p2p_dev_found.dev_capab,
  1733. data->p2p_dev_found.group_capab);
  1734. break;
  1735. case EVENT_P2P_GO_NEG_REQ_RX:
  1736. wpas_go_neg_req_rx(wpa_s, data->p2p_go_neg_req_rx.src,
  1737. data->p2p_go_neg_req_rx.dev_passwd_id);
  1738. break;
  1739. case EVENT_P2P_GO_NEG_COMPLETED:
  1740. wpas_go_neg_completed(wpa_s, data->p2p_go_neg_completed.res);
  1741. break;
  1742. case EVENT_P2P_PROV_DISC_REQUEST:
  1743. wpas_prov_disc_req(wpa_s, data->p2p_prov_disc_req.peer,
  1744. data->p2p_prov_disc_req.config_methods,
  1745. data->p2p_prov_disc_req.dev_addr,
  1746. data->p2p_prov_disc_req.pri_dev_type,
  1747. data->p2p_prov_disc_req.dev_name,
  1748. data->p2p_prov_disc_req.supp_config_methods,
  1749. data->p2p_prov_disc_req.dev_capab,
  1750. data->p2p_prov_disc_req.group_capab);
  1751. break;
  1752. case EVENT_P2P_PROV_DISC_RESPONSE:
  1753. wpas_prov_disc_resp(wpa_s, data->p2p_prov_disc_resp.peer,
  1754. data->p2p_prov_disc_resp.config_methods);
  1755. break;
  1756. case EVENT_P2P_SD_REQUEST:
  1757. wpas_sd_request(wpa_s, data->p2p_sd_req.freq,
  1758. data->p2p_sd_req.sa,
  1759. data->p2p_sd_req.dialog_token,
  1760. data->p2p_sd_req.update_indic,
  1761. data->p2p_sd_req.tlvs,
  1762. data->p2p_sd_req.tlvs_len);
  1763. break;
  1764. case EVENT_P2P_SD_RESPONSE:
  1765. wpas_sd_response(wpa_s, data->p2p_sd_resp.sa,
  1766. data->p2p_sd_resp.update_indic,
  1767. data->p2p_sd_resp.tlvs,
  1768. data->p2p_sd_resp.tlvs_len);
  1769. break;
  1770. #endif /* CONFIG_P2P */
  1771. #ifdef CONFIG_CLIENT_MLME
  1772. case EVENT_MLME_RX: {
  1773. struct ieee80211_rx_status rx_status;
  1774. os_memset(&rx_status, 0, sizeof(rx_status));
  1775. rx_status.freq = data->mlme_rx.freq;
  1776. rx_status.channel = data->mlme_rx.channel;
  1777. rx_status.ssi = data->mlme_rx.ssi;
  1778. ieee80211_sta_rx(wpa_s, data->mlme_rx.buf, data->mlme_rx.len,
  1779. &rx_status);
  1780. break;
  1781. }
  1782. #endif /* CONFIG_CLIENT_MLME */
  1783. case EVENT_EAPOL_RX:
  1784. wpa_supplicant_rx_eapol(wpa_s, data->eapol_rx.src,
  1785. data->eapol_rx.data,
  1786. data->eapol_rx.data_len);
  1787. break;
  1788. case EVENT_SIGNAL_CHANGE:
  1789. bgscan_notify_signal_change(
  1790. wpa_s, data->signal_change.above_threshold,
  1791. data->signal_change.current_signal,
  1792. data->signal_change.current_noise,
  1793. data->signal_change.current_txrate);
  1794. break;
  1795. case EVENT_INTERFACE_ENABLED:
  1796. wpa_printf(MSG_DEBUG, "Interface was enabled");
  1797. if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
  1798. #ifdef CONFIG_AP
  1799. if (!wpa_s->ap_iface) {
  1800. wpa_supplicant_set_state(wpa_s,
  1801. WPA_DISCONNECTED);
  1802. wpa_supplicant_req_scan(wpa_s, 0, 0);
  1803. } else
  1804. wpa_supplicant_set_state(wpa_s,
  1805. WPA_COMPLETED);
  1806. #else /* CONFIG_AP */
  1807. wpa_supplicant_set_state(wpa_s, WPA_DISCONNECTED);
  1808. wpa_supplicant_req_scan(wpa_s, 0, 0);
  1809. #endif /* CONFIG_AP */
  1810. }
  1811. break;
  1812. case EVENT_INTERFACE_DISABLED:
  1813. wpa_printf(MSG_DEBUG, "Interface was disabled");
  1814. wpa_supplicant_mark_disassoc(wpa_s);
  1815. wpa_supplicant_set_state(wpa_s, WPA_INTERFACE_DISABLED);
  1816. break;
  1817. case EVENT_CHANNEL_LIST_CHANGED:
  1818. if (wpa_s->drv_priv == NULL)
  1819. break; /* Ignore event during drv initialization */
  1820. #ifdef CONFIG_P2P
  1821. wpas_p2p_update_channel_list(wpa_s);
  1822. #endif /* CONFIG_P2P */
  1823. break;
  1824. case EVENT_INTERFACE_UNAVAILABLE:
  1825. #ifdef CONFIG_P2P
  1826. wpas_p2p_interface_unavailable(wpa_s);
  1827. #endif /* CONFIG_P2P */
  1828. break;
  1829. case EVENT_BEST_CHANNEL:
  1830. wpa_printf(MSG_DEBUG, "Best channel event received (%d %d %d)",
  1831. data->best_chan.freq_24, data->best_chan.freq_5,
  1832. data->best_chan.freq_overall);
  1833. wpa_s->best_24_freq = data->best_chan.freq_24;
  1834. wpa_s->best_5_freq = data->best_chan.freq_5;
  1835. wpa_s->best_overall_freq = data->best_chan.freq_overall;
  1836. #ifdef CONFIG_P2P
  1837. wpas_p2p_update_best_channels(wpa_s, data->best_chan.freq_24,
  1838. data->best_chan.freq_5,
  1839. data->best_chan.freq_overall);
  1840. #endif /* CONFIG_P2P */
  1841. break;
  1842. case EVENT_UNPROT_DEAUTH:
  1843. wpa_supplicant_event_unprot_deauth(wpa_s,
  1844. &data->unprot_deauth);
  1845. break;
  1846. case EVENT_UNPROT_DISASSOC:
  1847. wpa_supplicant_event_unprot_disassoc(wpa_s,
  1848. &data->unprot_disassoc);
  1849. break;
  1850. case EVENT_STATION_LOW_ACK:
  1851. #ifdef CONFIG_AP
  1852. if (wpa_s->ap_iface && data)
  1853. hostapd_event_sta_low_ack(wpa_s->ap_iface->bss[0],
  1854. data->low_ack.addr);
  1855. #endif /* CONFIG_AP */
  1856. break;
  1857. default:
  1858. wpa_printf(MSG_INFO, "Unknown event %d", event);
  1859. break;
  1860. }
  1861. }