1 /*
2 * WPA Supplicant / Control interface (shared code for all backends)
3 * Copyright (c) 2004-2015, Jouni Malinen <j@w1.fi>
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9 #include "utils/includes.h"
10 #ifdef CONFIG_TESTING_OPTIONS
11 #include <net/ethernet.h>
12 #include <netinet/ip.h>
13 #endif /* CONFIG_TESTING_OPTIONS */
14
15 #include "utils/common.h"
16 #include "utils/eloop.h"
17 #include "utils/uuid.h"
18 #include "common/version.h"
19 #include "common/ieee802_11_defs.h"
20 #include "common/ieee802_11_common.h"
21 #include "common/wpa_ctrl.h"
22 #include "crypto/tls.h"
23 #include "ap/hostapd.h"
24 #include "eap_peer/eap.h"
25 #include "eapol_supp/eapol_supp_sm.h"
26 #include "rsn_supp/wpa.h"
27 #include "rsn_supp/preauth.h"
28 #include "rsn_supp/pmksa_cache.h"
29 #include "l2_packet/l2_packet.h"
30 #include "wps/wps.h"
31 #include "config.h"
32 #include "wpa_supplicant_i.h"
33 #include "driver_i.h"
34 #include "wps_supplicant.h"
35 #include "ibss_rsn.h"
36 #include "ap.h"
37 #include "p2p_supplicant.h"
38 #include "p2p/p2p.h"
39 #include "hs20_supplicant.h"
40 #include "wifi_display.h"
41 #include "notify.h"
42 #include "bss.h"
43 #include "scan.h"
44 #include "ctrl_iface.h"
45 #include "interworking.h"
46 #include "blacklist.h"
47 #include "autoscan.h"
48 #include "wnm_sta.h"
49 #include "offchannel.h"
50 #include "drivers/driver.h"
51 #include "mesh.h"
52
53 static int wpa_supplicant_global_iface_list(struct wpa_global *global,
54 char *buf, int len);
55 static int wpa_supplicant_global_iface_interfaces(struct wpa_global *global,
56 char *buf, int len);
57 static int * freq_range_to_channel_list(struct wpa_supplicant *wpa_s,
58 char *val);
59
set_bssid_filter(struct wpa_supplicant * wpa_s,char * val)60 static int set_bssid_filter(struct wpa_supplicant *wpa_s, char *val)
61 {
62 char *pos;
63 u8 addr[ETH_ALEN], *filter = NULL, *n;
64 size_t count = 0;
65
66 pos = val;
67 while (pos) {
68 if (*pos == '\0')
69 break;
70 if (hwaddr_aton(pos, addr)) {
71 os_free(filter);
72 return -1;
73 }
74 n = os_realloc_array(filter, count + 1, ETH_ALEN);
75 if (n == NULL) {
76 os_free(filter);
77 return -1;
78 }
79 filter = n;
80 os_memcpy(filter + count * ETH_ALEN, addr, ETH_ALEN);
81 count++;
82
83 pos = os_strchr(pos, ' ');
84 if (pos)
85 pos++;
86 }
87
88 wpa_hexdump(MSG_DEBUG, "bssid_filter", filter, count * ETH_ALEN);
89 os_free(wpa_s->bssid_filter);
90 wpa_s->bssid_filter = filter;
91 wpa_s->bssid_filter_count = count;
92
93 return 0;
94 }
95
96
set_disallow_aps(struct wpa_supplicant * wpa_s,char * val)97 static int set_disallow_aps(struct wpa_supplicant *wpa_s, char *val)
98 {
99 char *pos;
100 u8 addr[ETH_ALEN], *bssid = NULL, *n;
101 struct wpa_ssid_value *ssid = NULL, *ns;
102 size_t count = 0, ssid_count = 0;
103 struct wpa_ssid *c;
104
105 /*
106 * disallow_list ::= <ssid_spec> | <bssid_spec> | <disallow_list> | ""
107 * SSID_SPEC ::= ssid <SSID_HEX>
108 * BSSID_SPEC ::= bssid <BSSID_HEX>
109 */
110
111 pos = val;
112 while (pos) {
113 if (*pos == '\0')
114 break;
115 if (os_strncmp(pos, "bssid ", 6) == 0) {
116 int res;
117 pos += 6;
118 res = hwaddr_aton2(pos, addr);
119 if (res < 0) {
120 os_free(ssid);
121 os_free(bssid);
122 wpa_printf(MSG_DEBUG, "Invalid disallow_aps "
123 "BSSID value '%s'", pos);
124 return -1;
125 }
126 pos += res;
127 n = os_realloc_array(bssid, count + 1, ETH_ALEN);
128 if (n == NULL) {
129 os_free(ssid);
130 os_free(bssid);
131 return -1;
132 }
133 bssid = n;
134 os_memcpy(bssid + count * ETH_ALEN, addr, ETH_ALEN);
135 count++;
136 } else if (os_strncmp(pos, "ssid ", 5) == 0) {
137 char *end;
138 pos += 5;
139
140 end = pos;
141 while (*end) {
142 if (*end == '\0' || *end == ' ')
143 break;
144 end++;
145 }
146
147 ns = os_realloc_array(ssid, ssid_count + 1,
148 sizeof(struct wpa_ssid_value));
149 if (ns == NULL) {
150 os_free(ssid);
151 os_free(bssid);
152 return -1;
153 }
154 ssid = ns;
155
156 if ((end - pos) & 0x01 ||
157 end - pos > 2 * SSID_MAX_LEN ||
158 hexstr2bin(pos, ssid[ssid_count].ssid,
159 (end - pos) / 2) < 0) {
160 os_free(ssid);
161 os_free(bssid);
162 wpa_printf(MSG_DEBUG, "Invalid disallow_aps "
163 "SSID value '%s'", pos);
164 return -1;
165 }
166 ssid[ssid_count].ssid_len = (end - pos) / 2;
167 wpa_hexdump_ascii(MSG_DEBUG, "disallow_aps SSID",
168 ssid[ssid_count].ssid,
169 ssid[ssid_count].ssid_len);
170 ssid_count++;
171 pos = end;
172 } else {
173 wpa_printf(MSG_DEBUG, "Unexpected disallow_aps value "
174 "'%s'", pos);
175 os_free(ssid);
176 os_free(bssid);
177 return -1;
178 }
179
180 pos = os_strchr(pos, ' ');
181 if (pos)
182 pos++;
183 }
184
185 wpa_hexdump(MSG_DEBUG, "disallow_aps_bssid", bssid, count * ETH_ALEN);
186 os_free(wpa_s->disallow_aps_bssid);
187 wpa_s->disallow_aps_bssid = bssid;
188 wpa_s->disallow_aps_bssid_count = count;
189
190 wpa_printf(MSG_DEBUG, "disallow_aps_ssid_count %d", (int) ssid_count);
191 os_free(wpa_s->disallow_aps_ssid);
192 wpa_s->disallow_aps_ssid = ssid;
193 wpa_s->disallow_aps_ssid_count = ssid_count;
194
195 if (!wpa_s->current_ssid || wpa_s->wpa_state < WPA_AUTHENTICATING)
196 return 0;
197
198 c = wpa_s->current_ssid;
199 if (c->mode != WPAS_MODE_INFRA && c->mode != WPAS_MODE_IBSS)
200 return 0;
201
202 if (!disallowed_bssid(wpa_s, wpa_s->bssid) &&
203 !disallowed_ssid(wpa_s, c->ssid, c->ssid_len))
204 return 0;
205
206 wpa_printf(MSG_DEBUG, "Disconnect and try to find another network "
207 "because current AP was marked disallowed");
208
209 #ifdef CONFIG_SME
210 wpa_s->sme.prev_bssid_set = 0;
211 #endif /* CONFIG_SME */
212 wpa_s->reassociate = 1;
213 wpa_s->own_disconnect_req = 1;
214 wpa_supplicant_deauthenticate(wpa_s, WLAN_REASON_DEAUTH_LEAVING);
215 wpa_supplicant_req_scan(wpa_s, 0, 0);
216
217 return 0;
218 }
219
220
221 #ifndef CONFIG_NO_CONFIG_BLOBS
wpas_ctrl_set_blob(struct wpa_supplicant * wpa_s,char * pos)222 static int wpas_ctrl_set_blob(struct wpa_supplicant *wpa_s, char *pos)
223 {
224 char *name = pos;
225 struct wpa_config_blob *blob;
226 size_t len;
227
228 pos = os_strchr(pos, ' ');
229 if (pos == NULL)
230 return -1;
231 *pos++ = '\0';
232 len = os_strlen(pos);
233 if (len & 1)
234 return -1;
235
236 wpa_printf(MSG_DEBUG, "CTRL: Set blob '%s'", name);
237 blob = os_zalloc(sizeof(*blob));
238 if (blob == NULL)
239 return -1;
240 blob->name = os_strdup(name);
241 blob->data = os_malloc(len / 2);
242 if (blob->name == NULL || blob->data == NULL) {
243 wpa_config_free_blob(blob);
244 return -1;
245 }
246
247 if (hexstr2bin(pos, blob->data, len / 2) < 0) {
248 wpa_printf(MSG_DEBUG, "CTRL: Invalid blob hex data");
249 wpa_config_free_blob(blob);
250 return -1;
251 }
252 blob->len = len / 2;
253
254 wpa_config_set_blob(wpa_s->conf, blob);
255
256 return 0;
257 }
258 #endif /* CONFIG_NO_CONFIG_BLOBS */
259
260
wpas_ctrl_pno(struct wpa_supplicant * wpa_s,char * cmd)261 static int wpas_ctrl_pno(struct wpa_supplicant *wpa_s, char *cmd)
262 {
263 char *params;
264 char *pos;
265 int *freqs = NULL;
266 int ret;
267
268 if (atoi(cmd)) {
269 params = os_strchr(cmd, ' ');
270 os_free(wpa_s->manual_sched_scan_freqs);
271 if (params) {
272 params++;
273 pos = os_strstr(params, "freq=");
274 if (pos)
275 freqs = freq_range_to_channel_list(wpa_s,
276 pos + 5);
277 }
278 wpa_s->manual_sched_scan_freqs = freqs;
279 ret = wpas_start_pno(wpa_s);
280 } else {
281 ret = wpas_stop_pno(wpa_s);
282 }
283 return ret;
284 }
285
286
wpa_supplicant_ctrl_iface_set(struct wpa_supplicant * wpa_s,char * cmd)287 static int wpa_supplicant_ctrl_iface_set(struct wpa_supplicant *wpa_s,
288 char *cmd)
289 {
290 char *value;
291 int ret = 0;
292
293 value = os_strchr(cmd, ' ');
294 if (value == NULL)
295 return -1;
296 *value++ = '\0';
297
298 wpa_printf(MSG_DEBUG, "CTRL_IFACE SET '%s'='%s'", cmd, value);
299 if (os_strcasecmp(cmd, "EAPOL::heldPeriod") == 0) {
300 eapol_sm_configure(wpa_s->eapol,
301 atoi(value), -1, -1, -1);
302 } else if (os_strcasecmp(cmd, "EAPOL::authPeriod") == 0) {
303 eapol_sm_configure(wpa_s->eapol,
304 -1, atoi(value), -1, -1);
305 } else if (os_strcasecmp(cmd, "EAPOL::startPeriod") == 0) {
306 eapol_sm_configure(wpa_s->eapol,
307 -1, -1, atoi(value), -1);
308 } else if (os_strcasecmp(cmd, "EAPOL::maxStart") == 0) {
309 eapol_sm_configure(wpa_s->eapol,
310 -1, -1, -1, atoi(value));
311 } else if (os_strcasecmp(cmd, "dot11RSNAConfigPMKLifetime") == 0) {
312 if (wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_LIFETIME,
313 atoi(value)))
314 ret = -1;
315 } else if (os_strcasecmp(cmd, "dot11RSNAConfigPMKReauthThreshold") ==
316 0) {
317 if (wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_REAUTH_THRESHOLD,
318 atoi(value)))
319 ret = -1;
320 } else if (os_strcasecmp(cmd, "dot11RSNAConfigSATimeout") == 0) {
321 if (wpa_sm_set_param(wpa_s->wpa, RSNA_SA_TIMEOUT, atoi(value)))
322 ret = -1;
323 } else if (os_strcasecmp(cmd, "wps_fragment_size") == 0) {
324 wpa_s->wps_fragment_size = atoi(value);
325 #ifdef CONFIG_WPS_TESTING
326 } else if (os_strcasecmp(cmd, "wps_version_number") == 0) {
327 long int val;
328 val = strtol(value, NULL, 0);
329 if (val < 0 || val > 0xff) {
330 ret = -1;
331 wpa_printf(MSG_DEBUG, "WPS: Invalid "
332 "wps_version_number %ld", val);
333 } else {
334 wps_version_number = val;
335 wpa_printf(MSG_DEBUG, "WPS: Testing - force WPS "
336 "version %u.%u",
337 (wps_version_number & 0xf0) >> 4,
338 wps_version_number & 0x0f);
339 }
340 } else if (os_strcasecmp(cmd, "wps_testing_dummy_cred") == 0) {
341 wps_testing_dummy_cred = atoi(value);
342 wpa_printf(MSG_DEBUG, "WPS: Testing - dummy_cred=%d",
343 wps_testing_dummy_cred);
344 } else if (os_strcasecmp(cmd, "wps_corrupt_pkhash") == 0) {
345 wps_corrupt_pkhash = atoi(value);
346 wpa_printf(MSG_DEBUG, "WPS: Testing - wps_corrupt_pkhash=%d",
347 wps_corrupt_pkhash);
348 #endif /* CONFIG_WPS_TESTING */
349 } else if (os_strcasecmp(cmd, "ampdu") == 0) {
350 if (wpa_drv_ampdu(wpa_s, atoi(value)) < 0)
351 ret = -1;
352 #ifdef CONFIG_TDLS
353 #ifdef CONFIG_TDLS_TESTING
354 } else if (os_strcasecmp(cmd, "tdls_testing") == 0) {
355 extern unsigned int tdls_testing;
356 tdls_testing = strtol(value, NULL, 0);
357 wpa_printf(MSG_DEBUG, "TDLS: tdls_testing=0x%x", tdls_testing);
358 #endif /* CONFIG_TDLS_TESTING */
359 } else if (os_strcasecmp(cmd, "tdls_disabled") == 0) {
360 int disabled = atoi(value);
361 wpa_printf(MSG_DEBUG, "TDLS: tdls_disabled=%d", disabled);
362 if (disabled) {
363 if (wpa_drv_tdls_oper(wpa_s, TDLS_DISABLE, NULL) < 0)
364 ret = -1;
365 } else if (wpa_drv_tdls_oper(wpa_s, TDLS_ENABLE, NULL) < 0)
366 ret = -1;
367 wpa_tdls_enable(wpa_s->wpa, !disabled);
368 #endif /* CONFIG_TDLS */
369 } else if (os_strcasecmp(cmd, "pno") == 0) {
370 ret = wpas_ctrl_pno(wpa_s, value);
371 } else if (os_strcasecmp(cmd, "radio_disabled") == 0) {
372 int disabled = atoi(value);
373 if (wpa_drv_radio_disable(wpa_s, disabled) < 0)
374 ret = -1;
375 else if (disabled)
376 wpa_supplicant_set_state(wpa_s, WPA_INACTIVE);
377 } else if (os_strcasecmp(cmd, "uapsd") == 0) {
378 if (os_strcmp(value, "disable") == 0)
379 wpa_s->set_sta_uapsd = 0;
380 else {
381 int be, bk, vi, vo;
382 char *pos;
383 /* format: BE,BK,VI,VO;max SP Length */
384 be = atoi(value);
385 pos = os_strchr(value, ',');
386 if (pos == NULL)
387 return -1;
388 pos++;
389 bk = atoi(pos);
390 pos = os_strchr(pos, ',');
391 if (pos == NULL)
392 return -1;
393 pos++;
394 vi = atoi(pos);
395 pos = os_strchr(pos, ',');
396 if (pos == NULL)
397 return -1;
398 pos++;
399 vo = atoi(pos);
400 /* ignore max SP Length for now */
401
402 wpa_s->set_sta_uapsd = 1;
403 wpa_s->sta_uapsd = 0;
404 if (be)
405 wpa_s->sta_uapsd |= BIT(0);
406 if (bk)
407 wpa_s->sta_uapsd |= BIT(1);
408 if (vi)
409 wpa_s->sta_uapsd |= BIT(2);
410 if (vo)
411 wpa_s->sta_uapsd |= BIT(3);
412 }
413 } else if (os_strcasecmp(cmd, "ps") == 0) {
414 ret = wpa_drv_set_p2p_powersave(wpa_s, atoi(value), -1, -1);
415 #ifdef CONFIG_WIFI_DISPLAY
416 } else if (os_strcasecmp(cmd, "wifi_display") == 0) {
417 int enabled = !!atoi(value);
418 if (enabled && !wpa_s->global->p2p)
419 ret = -1;
420 else
421 wifi_display_enable(wpa_s->global, enabled);
422 #endif /* CONFIG_WIFI_DISPLAY */
423 } else if (os_strcasecmp(cmd, "bssid_filter") == 0) {
424 ret = set_bssid_filter(wpa_s, value);
425 } else if (os_strcasecmp(cmd, "disallow_aps") == 0) {
426 ret = set_disallow_aps(wpa_s, value);
427 } else if (os_strcasecmp(cmd, "no_keep_alive") == 0) {
428 wpa_s->no_keep_alive = !!atoi(value);
429 #ifdef CONFIG_TESTING_OPTIONS
430 } else if (os_strcasecmp(cmd, "ext_mgmt_frame_handling") == 0) {
431 wpa_s->ext_mgmt_frame_handling = !!atoi(value);
432 } else if (os_strcasecmp(cmd, "ext_eapol_frame_io") == 0) {
433 wpa_s->ext_eapol_frame_io = !!atoi(value);
434 #ifdef CONFIG_AP
435 if (wpa_s->ap_iface) {
436 wpa_s->ap_iface->bss[0]->ext_eapol_frame_io =
437 wpa_s->ext_eapol_frame_io;
438 }
439 #endif /* CONFIG_AP */
440 } else if (os_strcasecmp(cmd, "extra_roc_dur") == 0) {
441 wpa_s->extra_roc_dur = atoi(value);
442 } else if (os_strcasecmp(cmd, "test_failure") == 0) {
443 wpa_s->test_failure = atoi(value);
444 #endif /* CONFIG_TESTING_OPTIONS */
445 #ifndef CONFIG_NO_CONFIG_BLOBS
446 } else if (os_strcmp(cmd, "blob") == 0) {
447 ret = wpas_ctrl_set_blob(wpa_s, value);
448 #endif /* CONFIG_NO_CONFIG_BLOBS */
449 } else if (os_strcasecmp(cmd, "setband") == 0) {
450 if (os_strcmp(value, "AUTO") == 0)
451 wpa_s->setband = WPA_SETBAND_AUTO;
452 else if (os_strcmp(value, "5G") == 0)
453 wpa_s->setband = WPA_SETBAND_5G;
454 else if (os_strcmp(value, "2G") == 0)
455 wpa_s->setband = WPA_SETBAND_2G;
456 else
457 ret = -1;
458 } else {
459 value[-1] = '=';
460 ret = wpa_config_process_global(wpa_s->conf, cmd, -1);
461 if (ret == 0)
462 wpa_supplicant_update_config(wpa_s);
463 }
464
465 return ret;
466 }
467
468
wpa_supplicant_ctrl_iface_get(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)469 static int wpa_supplicant_ctrl_iface_get(struct wpa_supplicant *wpa_s,
470 char *cmd, char *buf, size_t buflen)
471 {
472 int res = -1;
473
474 wpa_printf(MSG_DEBUG, "CTRL_IFACE GET '%s'", cmd);
475
476 if (os_strcmp(cmd, "version") == 0) {
477 res = os_snprintf(buf, buflen, "%s", VERSION_STR);
478 } else if (os_strcasecmp(cmd, "country") == 0) {
479 if (wpa_s->conf->country[0] && wpa_s->conf->country[1])
480 res = os_snprintf(buf, buflen, "%c%c",
481 wpa_s->conf->country[0],
482 wpa_s->conf->country[1]);
483 #ifdef CONFIG_WIFI_DISPLAY
484 } else if (os_strcasecmp(cmd, "wifi_display") == 0) {
485 int enabled;
486 if (wpa_s->global->p2p == NULL ||
487 wpa_s->global->p2p_disabled)
488 enabled = 0;
489 else
490 enabled = wpa_s->global->wifi_display;
491 res = os_snprintf(buf, buflen, "%d", enabled);
492 #endif /* CONFIG_WIFI_DISPLAY */
493 #ifdef CONFIG_TESTING_GET_GTK
494 } else if (os_strcmp(cmd, "gtk") == 0) {
495 if (wpa_s->last_gtk_len == 0)
496 return -1;
497 res = wpa_snprintf_hex(buf, buflen, wpa_s->last_gtk,
498 wpa_s->last_gtk_len);
499 return res;
500 #endif /* CONFIG_TESTING_GET_GTK */
501 } else if (os_strcmp(cmd, "tls_library") == 0) {
502 res = tls_get_library_version(buf, buflen);
503 } else {
504 res = wpa_config_get_value(cmd, wpa_s->conf, buf, buflen);
505 }
506
507 if (os_snprintf_error(buflen, res))
508 return -1;
509 return res;
510 }
511
512
513 #ifdef IEEE8021X_EAPOL
wpa_supplicant_ctrl_iface_preauth(struct wpa_supplicant * wpa_s,char * addr)514 static int wpa_supplicant_ctrl_iface_preauth(struct wpa_supplicant *wpa_s,
515 char *addr)
516 {
517 u8 bssid[ETH_ALEN];
518 struct wpa_ssid *ssid = wpa_s->current_ssid;
519
520 if (hwaddr_aton(addr, bssid)) {
521 wpa_printf(MSG_DEBUG, "CTRL_IFACE PREAUTH: invalid address "
522 "'%s'", addr);
523 return -1;
524 }
525
526 wpa_printf(MSG_DEBUG, "CTRL_IFACE PREAUTH " MACSTR, MAC2STR(bssid));
527 rsn_preauth_deinit(wpa_s->wpa);
528 if (rsn_preauth_init(wpa_s->wpa, bssid, ssid ? &ssid->eap : NULL))
529 return -1;
530
531 return 0;
532 }
533 #endif /* IEEE8021X_EAPOL */
534
535
536 #ifdef CONFIG_PEERKEY
537 /* MLME-STKSTART.request(peer) */
wpa_supplicant_ctrl_iface_stkstart(struct wpa_supplicant * wpa_s,char * addr)538 static int wpa_supplicant_ctrl_iface_stkstart(
539 struct wpa_supplicant *wpa_s, char *addr)
540 {
541 u8 peer[ETH_ALEN];
542
543 if (hwaddr_aton(addr, peer)) {
544 wpa_printf(MSG_DEBUG, "CTRL_IFACE STKSTART: invalid "
545 "address '%s'", addr);
546 return -1;
547 }
548
549 wpa_printf(MSG_DEBUG, "CTRL_IFACE STKSTART " MACSTR,
550 MAC2STR(peer));
551
552 return wpa_sm_stkstart(wpa_s->wpa, peer);
553 }
554 #endif /* CONFIG_PEERKEY */
555
556
557 #ifdef CONFIG_TDLS
558
wpa_supplicant_ctrl_iface_tdls_discover(struct wpa_supplicant * wpa_s,char * addr)559 static int wpa_supplicant_ctrl_iface_tdls_discover(
560 struct wpa_supplicant *wpa_s, char *addr)
561 {
562 u8 peer[ETH_ALEN];
563 int ret;
564
565 if (hwaddr_aton(addr, peer)) {
566 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_DISCOVER: invalid "
567 "address '%s'", addr);
568 return -1;
569 }
570
571 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_DISCOVER " MACSTR,
572 MAC2STR(peer));
573
574 if (wpa_tdls_is_external_setup(wpa_s->wpa))
575 ret = wpa_tdls_send_discovery_request(wpa_s->wpa, peer);
576 else
577 ret = wpa_drv_tdls_oper(wpa_s, TDLS_DISCOVERY_REQ, peer);
578
579 return ret;
580 }
581
582
wpa_supplicant_ctrl_iface_tdls_setup(struct wpa_supplicant * wpa_s,char * addr)583 static int wpa_supplicant_ctrl_iface_tdls_setup(
584 struct wpa_supplicant *wpa_s, char *addr)
585 {
586 u8 peer[ETH_ALEN];
587 int ret;
588
589 if (hwaddr_aton(addr, peer)) {
590 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_SETUP: invalid "
591 "address '%s'", addr);
592 return -1;
593 }
594
595 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_SETUP " MACSTR,
596 MAC2STR(peer));
597
598 if ((wpa_s->conf->tdls_external_control) &&
599 wpa_tdls_is_external_setup(wpa_s->wpa))
600 return wpa_drv_tdls_oper(wpa_s, TDLS_SETUP, peer);
601
602 wpa_tdls_remove(wpa_s->wpa, peer);
603
604 if (wpa_tdls_is_external_setup(wpa_s->wpa))
605 ret = wpa_tdls_start(wpa_s->wpa, peer);
606 else
607 ret = wpa_drv_tdls_oper(wpa_s, TDLS_SETUP, peer);
608
609 return ret;
610 }
611
612
wpa_supplicant_ctrl_iface_tdls_teardown(struct wpa_supplicant * wpa_s,char * addr)613 static int wpa_supplicant_ctrl_iface_tdls_teardown(
614 struct wpa_supplicant *wpa_s, char *addr)
615 {
616 u8 peer[ETH_ALEN];
617 int ret;
618
619 if (os_strcmp(addr, "*") == 0) {
620 /* remove everyone */
621 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN *");
622 wpa_tdls_teardown_peers(wpa_s->wpa);
623 return 0;
624 }
625
626 if (hwaddr_aton(addr, peer)) {
627 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN: invalid "
628 "address '%s'", addr);
629 return -1;
630 }
631
632 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN " MACSTR,
633 MAC2STR(peer));
634
635 if ((wpa_s->conf->tdls_external_control) &&
636 wpa_tdls_is_external_setup(wpa_s->wpa))
637 return wpa_drv_tdls_oper(wpa_s, TDLS_TEARDOWN, peer);
638
639 if (wpa_tdls_is_external_setup(wpa_s->wpa))
640 ret = wpa_tdls_teardown_link(
641 wpa_s->wpa, peer,
642 WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED);
643 else
644 ret = wpa_drv_tdls_oper(wpa_s, TDLS_TEARDOWN, peer);
645
646 return ret;
647 }
648
649
ctrl_iface_get_capability_tdls(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)650 static int ctrl_iface_get_capability_tdls(
651 struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
652 {
653 int ret;
654
655 ret = os_snprintf(buf, buflen, "%s\n",
656 wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_SUPPORT ?
657 (wpa_s->drv_flags &
658 WPA_DRIVER_FLAGS_TDLS_EXTERNAL_SETUP ?
659 "EXTERNAL" : "INTERNAL") : "UNSUPPORTED");
660 if (os_snprintf_error(buflen, ret))
661 return -1;
662 return ret;
663 }
664
665
wpa_supplicant_ctrl_iface_tdls_chan_switch(struct wpa_supplicant * wpa_s,char * cmd)666 static int wpa_supplicant_ctrl_iface_tdls_chan_switch(
667 struct wpa_supplicant *wpa_s, char *cmd)
668 {
669 u8 peer[ETH_ALEN];
670 struct hostapd_freq_params freq_params;
671 u8 oper_class;
672 char *pos, *end;
673
674 if (!wpa_tdls_is_external_setup(wpa_s->wpa)) {
675 wpa_printf(MSG_INFO,
676 "tdls_chanswitch: Only supported with external setup");
677 return -1;
678 }
679
680 os_memset(&freq_params, 0, sizeof(freq_params));
681
682 pos = os_strchr(cmd, ' ');
683 if (pos == NULL)
684 return -1;
685 *pos++ = '\0';
686
687 oper_class = strtol(pos, &end, 10);
688 if (pos == end) {
689 wpa_printf(MSG_INFO,
690 "tdls_chanswitch: Invalid op class provided");
691 return -1;
692 }
693
694 pos = end;
695 freq_params.freq = atoi(pos);
696 if (freq_params.freq == 0) {
697 wpa_printf(MSG_INFO, "tdls_chanswitch: Invalid freq provided");
698 return -1;
699 }
700
701 #define SET_FREQ_SETTING(str) \
702 do { \
703 const char *pos2 = os_strstr(pos, " " #str "="); \
704 if (pos2) { \
705 pos2 += sizeof(" " #str "=") - 1; \
706 freq_params.str = atoi(pos2); \
707 } \
708 } while (0)
709
710 SET_FREQ_SETTING(center_freq1);
711 SET_FREQ_SETTING(center_freq2);
712 SET_FREQ_SETTING(bandwidth);
713 SET_FREQ_SETTING(sec_channel_offset);
714 #undef SET_FREQ_SETTING
715
716 freq_params.ht_enabled = !!os_strstr(pos, " ht");
717 freq_params.vht_enabled = !!os_strstr(pos, " vht");
718
719 if (hwaddr_aton(cmd, peer)) {
720 wpa_printf(MSG_DEBUG,
721 "CTRL_IFACE TDLS_CHAN_SWITCH: Invalid address '%s'",
722 cmd);
723 return -1;
724 }
725
726 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_CHAN_SWITCH " MACSTR
727 " OP CLASS %d FREQ %d CENTER1 %d CENTER2 %d BW %d SEC_OFFSET %d%s%s",
728 MAC2STR(peer), oper_class, freq_params.freq,
729 freq_params.center_freq1, freq_params.center_freq2,
730 freq_params.bandwidth, freq_params.sec_channel_offset,
731 freq_params.ht_enabled ? " HT" : "",
732 freq_params.vht_enabled ? " VHT" : "");
733
734 return wpa_tdls_enable_chan_switch(wpa_s->wpa, peer, oper_class,
735 &freq_params);
736 }
737
738
wpa_supplicant_ctrl_iface_tdls_cancel_chan_switch(struct wpa_supplicant * wpa_s,char * cmd)739 static int wpa_supplicant_ctrl_iface_tdls_cancel_chan_switch(
740 struct wpa_supplicant *wpa_s, char *cmd)
741 {
742 u8 peer[ETH_ALEN];
743
744 if (!wpa_tdls_is_external_setup(wpa_s->wpa)) {
745 wpa_printf(MSG_INFO,
746 "tdls_chanswitch: Only supported with external setup");
747 return -1;
748 }
749
750 if (hwaddr_aton(cmd, peer)) {
751 wpa_printf(MSG_DEBUG,
752 "CTRL_IFACE TDLS_CANCEL_CHAN_SWITCH: Invalid address '%s'",
753 cmd);
754 return -1;
755 }
756
757 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_CANCEL_CHAN_SWITCH " MACSTR,
758 MAC2STR(peer));
759
760 return wpa_tdls_disable_chan_switch(wpa_s->wpa, peer);
761 }
762
763
wpa_supplicant_ctrl_iface_tdls_link_status(struct wpa_supplicant * wpa_s,const char * addr,char * buf,size_t buflen)764 static int wpa_supplicant_ctrl_iface_tdls_link_status(
765 struct wpa_supplicant *wpa_s, const char *addr,
766 char *buf, size_t buflen)
767 {
768 u8 peer[ETH_ALEN];
769 const char *tdls_status;
770 int ret;
771
772 if (hwaddr_aton(addr, peer)) {
773 wpa_printf(MSG_DEBUG,
774 "CTRL_IFACE TDLS_LINK_STATUS: Invalid address '%s'",
775 addr);
776 return -1;
777 }
778 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_LINK_STATUS " MACSTR,
779 MAC2STR(peer));
780
781 tdls_status = wpa_tdls_get_link_status(wpa_s->wpa, peer);
782 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_LINK_STATUS: %s", tdls_status);
783 ret = os_snprintf(buf, buflen, "TDLS link status: %s\n", tdls_status);
784 if (os_snprintf_error(buflen, ret))
785 return -1;
786
787 return ret;
788 }
789
790 #endif /* CONFIG_TDLS */
791
792
wmm_ac_ctrl_addts(struct wpa_supplicant * wpa_s,char * cmd)793 static int wmm_ac_ctrl_addts(struct wpa_supplicant *wpa_s, char *cmd)
794 {
795 char *token, *context = NULL;
796 struct wmm_ac_ts_setup_params params = {
797 .tsid = 0xff,
798 .direction = 0xff,
799 };
800
801 while ((token = str_token(cmd, " ", &context))) {
802 if (sscanf(token, "tsid=%i", ¶ms.tsid) == 1 ||
803 sscanf(token, "up=%i", ¶ms.user_priority) == 1 ||
804 sscanf(token, "nominal_msdu_size=%i",
805 ¶ms.nominal_msdu_size) == 1 ||
806 sscanf(token, "mean_data_rate=%i",
807 ¶ms.mean_data_rate) == 1 ||
808 sscanf(token, "min_phy_rate=%i",
809 ¶ms.minimum_phy_rate) == 1 ||
810 sscanf(token, "sba=%i",
811 ¶ms.surplus_bandwidth_allowance) == 1)
812 continue;
813
814 if (os_strcasecmp(token, "downlink") == 0) {
815 params.direction = WMM_TSPEC_DIRECTION_DOWNLINK;
816 } else if (os_strcasecmp(token, "uplink") == 0) {
817 params.direction = WMM_TSPEC_DIRECTION_UPLINK;
818 } else if (os_strcasecmp(token, "bidi") == 0) {
819 params.direction = WMM_TSPEC_DIRECTION_BI_DIRECTIONAL;
820 } else if (os_strcasecmp(token, "fixed_nominal_msdu") == 0) {
821 params.fixed_nominal_msdu = 1;
822 } else {
823 wpa_printf(MSG_DEBUG,
824 "CTRL: Invalid WMM_AC_ADDTS parameter: '%s'",
825 token);
826 return -1;
827 }
828
829 }
830
831 return wpas_wmm_ac_addts(wpa_s, ¶ms);
832 }
833
834
wmm_ac_ctrl_delts(struct wpa_supplicant * wpa_s,char * cmd)835 static int wmm_ac_ctrl_delts(struct wpa_supplicant *wpa_s, char *cmd)
836 {
837 u8 tsid = atoi(cmd);
838
839 return wpas_wmm_ac_delts(wpa_s, tsid);
840 }
841
842
843 #ifdef CONFIG_IEEE80211R
wpa_supplicant_ctrl_iface_ft_ds(struct wpa_supplicant * wpa_s,char * addr)844 static int wpa_supplicant_ctrl_iface_ft_ds(
845 struct wpa_supplicant *wpa_s, char *addr)
846 {
847 u8 target_ap[ETH_ALEN];
848 struct wpa_bss *bss;
849 const u8 *mdie;
850
851 if (hwaddr_aton(addr, target_ap)) {
852 wpa_printf(MSG_DEBUG, "CTRL_IFACE FT_DS: invalid "
853 "address '%s'", addr);
854 return -1;
855 }
856
857 wpa_printf(MSG_DEBUG, "CTRL_IFACE FT_DS " MACSTR, MAC2STR(target_ap));
858
859 bss = wpa_bss_get_bssid(wpa_s, target_ap);
860 if (bss)
861 mdie = wpa_bss_get_ie(bss, WLAN_EID_MOBILITY_DOMAIN);
862 else
863 mdie = NULL;
864
865 return wpa_ft_start_over_ds(wpa_s->wpa, target_ap, mdie);
866 }
867 #endif /* CONFIG_IEEE80211R */
868
869
870 #ifdef CONFIG_WPS
wpa_supplicant_ctrl_iface_wps_pbc(struct wpa_supplicant * wpa_s,char * cmd)871 static int wpa_supplicant_ctrl_iface_wps_pbc(struct wpa_supplicant *wpa_s,
872 char *cmd)
873 {
874 u8 bssid[ETH_ALEN], *_bssid = bssid;
875 #ifdef CONFIG_P2P
876 u8 p2p_dev_addr[ETH_ALEN];
877 #endif /* CONFIG_P2P */
878 #ifdef CONFIG_AP
879 u8 *_p2p_dev_addr = NULL;
880 #endif /* CONFIG_AP */
881
882 if (cmd == NULL || os_strcmp(cmd, "any") == 0) {
883 _bssid = NULL;
884 #ifdef CONFIG_P2P
885 } else if (os_strncmp(cmd, "p2p_dev_addr=", 13) == 0) {
886 if (hwaddr_aton(cmd + 13, p2p_dev_addr)) {
887 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PBC: invalid "
888 "P2P Device Address '%s'",
889 cmd + 13);
890 return -1;
891 }
892 _p2p_dev_addr = p2p_dev_addr;
893 #endif /* CONFIG_P2P */
894 } else if (hwaddr_aton(cmd, bssid)) {
895 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PBC: invalid BSSID '%s'",
896 cmd);
897 return -1;
898 }
899
900 #ifdef CONFIG_AP
901 if (wpa_s->ap_iface)
902 return wpa_supplicant_ap_wps_pbc(wpa_s, _bssid, _p2p_dev_addr);
903 #endif /* CONFIG_AP */
904
905 return wpas_wps_start_pbc(wpa_s, _bssid, 0);
906 }
907
908
wpa_supplicant_ctrl_iface_wps_pin(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)909 static int wpa_supplicant_ctrl_iface_wps_pin(struct wpa_supplicant *wpa_s,
910 char *cmd, char *buf,
911 size_t buflen)
912 {
913 u8 bssid[ETH_ALEN], *_bssid = bssid;
914 char *pin;
915 int ret;
916
917 pin = os_strchr(cmd, ' ');
918 if (pin)
919 *pin++ = '\0';
920
921 if (os_strcmp(cmd, "any") == 0)
922 _bssid = NULL;
923 else if (os_strcmp(cmd, "get") == 0) {
924 ret = wps_generate_pin();
925 goto done;
926 } else if (hwaddr_aton(cmd, bssid)) {
927 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PIN: invalid BSSID '%s'",
928 cmd);
929 return -1;
930 }
931
932 #ifdef CONFIG_AP
933 if (wpa_s->ap_iface) {
934 int timeout = 0;
935 char *pos;
936
937 if (pin) {
938 pos = os_strchr(pin, ' ');
939 if (pos) {
940 *pos++ = '\0';
941 timeout = atoi(pos);
942 }
943 }
944
945 return wpa_supplicant_ap_wps_pin(wpa_s, _bssid, pin,
946 buf, buflen, timeout);
947 }
948 #endif /* CONFIG_AP */
949
950 if (pin) {
951 ret = wpas_wps_start_pin(wpa_s, _bssid, pin, 0,
952 DEV_PW_DEFAULT);
953 if (ret < 0)
954 return -1;
955 ret = os_snprintf(buf, buflen, "%s", pin);
956 if (os_snprintf_error(buflen, ret))
957 return -1;
958 return ret;
959 }
960
961 ret = wpas_wps_start_pin(wpa_s, _bssid, NULL, 0, DEV_PW_DEFAULT);
962 if (ret < 0)
963 return -1;
964
965 done:
966 /* Return the generated PIN */
967 ret = os_snprintf(buf, buflen, "%08d", ret);
968 if (os_snprintf_error(buflen, ret))
969 return -1;
970 return ret;
971 }
972
973
wpa_supplicant_ctrl_iface_wps_check_pin(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)974 static int wpa_supplicant_ctrl_iface_wps_check_pin(
975 struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
976 {
977 char pin[9];
978 size_t len;
979 char *pos;
980 int ret;
981
982 wpa_hexdump_ascii_key(MSG_DEBUG, "WPS_CHECK_PIN",
983 (u8 *) cmd, os_strlen(cmd));
984 for (pos = cmd, len = 0; *pos != '\0'; pos++) {
985 if (*pos < '0' || *pos > '9')
986 continue;
987 pin[len++] = *pos;
988 if (len == 9) {
989 wpa_printf(MSG_DEBUG, "WPS: Too long PIN");
990 return -1;
991 }
992 }
993 if (len != 4 && len != 8) {
994 wpa_printf(MSG_DEBUG, "WPS: Invalid PIN length %d", (int) len);
995 return -1;
996 }
997 pin[len] = '\0';
998
999 if (len == 8) {
1000 unsigned int pin_val;
1001 pin_val = atoi(pin);
1002 if (!wps_pin_valid(pin_val)) {
1003 wpa_printf(MSG_DEBUG, "WPS: Invalid checksum digit");
1004 ret = os_snprintf(buf, buflen, "FAIL-CHECKSUM\n");
1005 if (os_snprintf_error(buflen, ret))
1006 return -1;
1007 return ret;
1008 }
1009 }
1010
1011 ret = os_snprintf(buf, buflen, "%s", pin);
1012 if (os_snprintf_error(buflen, ret))
1013 return -1;
1014
1015 return ret;
1016 }
1017
1018
1019 #ifdef CONFIG_WPS_NFC
1020
wpa_supplicant_ctrl_iface_wps_nfc(struct wpa_supplicant * wpa_s,char * cmd)1021 static int wpa_supplicant_ctrl_iface_wps_nfc(struct wpa_supplicant *wpa_s,
1022 char *cmd)
1023 {
1024 u8 bssid[ETH_ALEN], *_bssid = bssid;
1025
1026 if (cmd == NULL || cmd[0] == '\0')
1027 _bssid = NULL;
1028 else if (hwaddr_aton(cmd, bssid))
1029 return -1;
1030
1031 return wpas_wps_start_nfc(wpa_s, NULL, _bssid, NULL, 0, 0, NULL, NULL,
1032 0, 0);
1033 }
1034
1035
wpa_supplicant_ctrl_iface_wps_nfc_config_token(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)1036 static int wpa_supplicant_ctrl_iface_wps_nfc_config_token(
1037 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
1038 {
1039 int ndef;
1040 struct wpabuf *buf;
1041 int res;
1042 char *pos;
1043
1044 pos = os_strchr(cmd, ' ');
1045 if (pos)
1046 *pos++ = '\0';
1047 if (os_strcmp(cmd, "WPS") == 0)
1048 ndef = 0;
1049 else if (os_strcmp(cmd, "NDEF") == 0)
1050 ndef = 1;
1051 else
1052 return -1;
1053
1054 buf = wpas_wps_nfc_config_token(wpa_s, ndef, pos);
1055 if (buf == NULL)
1056 return -1;
1057
1058 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1059 wpabuf_len(buf));
1060 reply[res++] = '\n';
1061 reply[res] = '\0';
1062
1063 wpabuf_free(buf);
1064
1065 return res;
1066 }
1067
1068
wpa_supplicant_ctrl_iface_wps_nfc_token(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)1069 static int wpa_supplicant_ctrl_iface_wps_nfc_token(
1070 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
1071 {
1072 int ndef;
1073 struct wpabuf *buf;
1074 int res;
1075
1076 if (os_strcmp(cmd, "WPS") == 0)
1077 ndef = 0;
1078 else if (os_strcmp(cmd, "NDEF") == 0)
1079 ndef = 1;
1080 else
1081 return -1;
1082
1083 buf = wpas_wps_nfc_token(wpa_s, ndef);
1084 if (buf == NULL)
1085 return -1;
1086
1087 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1088 wpabuf_len(buf));
1089 reply[res++] = '\n';
1090 reply[res] = '\0';
1091
1092 wpabuf_free(buf);
1093
1094 return res;
1095 }
1096
1097
wpa_supplicant_ctrl_iface_wps_nfc_tag_read(struct wpa_supplicant * wpa_s,char * pos)1098 static int wpa_supplicant_ctrl_iface_wps_nfc_tag_read(
1099 struct wpa_supplicant *wpa_s, char *pos)
1100 {
1101 size_t len;
1102 struct wpabuf *buf;
1103 int ret;
1104 char *freq;
1105 int forced_freq = 0;
1106
1107 freq = strstr(pos, " freq=");
1108 if (freq) {
1109 *freq = '\0';
1110 freq += 6;
1111 forced_freq = atoi(freq);
1112 }
1113
1114 len = os_strlen(pos);
1115 if (len & 0x01)
1116 return -1;
1117 len /= 2;
1118
1119 buf = wpabuf_alloc(len);
1120 if (buf == NULL)
1121 return -1;
1122 if (hexstr2bin(pos, wpabuf_put(buf, len), len) < 0) {
1123 wpabuf_free(buf);
1124 return -1;
1125 }
1126
1127 ret = wpas_wps_nfc_tag_read(wpa_s, buf, forced_freq);
1128 wpabuf_free(buf);
1129
1130 return ret;
1131 }
1132
1133
wpas_ctrl_nfc_get_handover_req_wps(struct wpa_supplicant * wpa_s,char * reply,size_t max_len,int ndef)1134 static int wpas_ctrl_nfc_get_handover_req_wps(struct wpa_supplicant *wpa_s,
1135 char *reply, size_t max_len,
1136 int ndef)
1137 {
1138 struct wpabuf *buf;
1139 int res;
1140
1141 buf = wpas_wps_nfc_handover_req(wpa_s, ndef);
1142 if (buf == NULL)
1143 return -1;
1144
1145 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1146 wpabuf_len(buf));
1147 reply[res++] = '\n';
1148 reply[res] = '\0';
1149
1150 wpabuf_free(buf);
1151
1152 return res;
1153 }
1154
1155
1156 #ifdef CONFIG_P2P
wpas_ctrl_nfc_get_handover_req_p2p(struct wpa_supplicant * wpa_s,char * reply,size_t max_len,int ndef)1157 static int wpas_ctrl_nfc_get_handover_req_p2p(struct wpa_supplicant *wpa_s,
1158 char *reply, size_t max_len,
1159 int ndef)
1160 {
1161 struct wpabuf *buf;
1162 int res;
1163
1164 buf = wpas_p2p_nfc_handover_req(wpa_s, ndef);
1165 if (buf == NULL) {
1166 wpa_printf(MSG_DEBUG, "P2P: Could not generate NFC handover request");
1167 return -1;
1168 }
1169
1170 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1171 wpabuf_len(buf));
1172 reply[res++] = '\n';
1173 reply[res] = '\0';
1174
1175 wpabuf_free(buf);
1176
1177 return res;
1178 }
1179 #endif /* CONFIG_P2P */
1180
1181
wpas_ctrl_nfc_get_handover_req(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)1182 static int wpas_ctrl_nfc_get_handover_req(struct wpa_supplicant *wpa_s,
1183 char *cmd, char *reply,
1184 size_t max_len)
1185 {
1186 char *pos;
1187 int ndef;
1188
1189 pos = os_strchr(cmd, ' ');
1190 if (pos == NULL)
1191 return -1;
1192 *pos++ = '\0';
1193
1194 if (os_strcmp(cmd, "WPS") == 0)
1195 ndef = 0;
1196 else if (os_strcmp(cmd, "NDEF") == 0)
1197 ndef = 1;
1198 else
1199 return -1;
1200
1201 if (os_strcmp(pos, "WPS") == 0 || os_strcmp(pos, "WPS-CR") == 0) {
1202 if (!ndef)
1203 return -1;
1204 return wpas_ctrl_nfc_get_handover_req_wps(
1205 wpa_s, reply, max_len, ndef);
1206 }
1207
1208 #ifdef CONFIG_P2P
1209 if (os_strcmp(pos, "P2P-CR") == 0) {
1210 return wpas_ctrl_nfc_get_handover_req_p2p(
1211 wpa_s, reply, max_len, ndef);
1212 }
1213 #endif /* CONFIG_P2P */
1214
1215 return -1;
1216 }
1217
1218
wpas_ctrl_nfc_get_handover_sel_wps(struct wpa_supplicant * wpa_s,char * reply,size_t max_len,int ndef,int cr,char * uuid)1219 static int wpas_ctrl_nfc_get_handover_sel_wps(struct wpa_supplicant *wpa_s,
1220 char *reply, size_t max_len,
1221 int ndef, int cr, char *uuid)
1222 {
1223 struct wpabuf *buf;
1224 int res;
1225
1226 buf = wpas_wps_nfc_handover_sel(wpa_s, ndef, cr, uuid);
1227 if (buf == NULL)
1228 return -1;
1229
1230 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1231 wpabuf_len(buf));
1232 reply[res++] = '\n';
1233 reply[res] = '\0';
1234
1235 wpabuf_free(buf);
1236
1237 return res;
1238 }
1239
1240
1241 #ifdef CONFIG_P2P
wpas_ctrl_nfc_get_handover_sel_p2p(struct wpa_supplicant * wpa_s,char * reply,size_t max_len,int ndef,int tag)1242 static int wpas_ctrl_nfc_get_handover_sel_p2p(struct wpa_supplicant *wpa_s,
1243 char *reply, size_t max_len,
1244 int ndef, int tag)
1245 {
1246 struct wpabuf *buf;
1247 int res;
1248
1249 buf = wpas_p2p_nfc_handover_sel(wpa_s, ndef, tag);
1250 if (buf == NULL)
1251 return -1;
1252
1253 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1254 wpabuf_len(buf));
1255 reply[res++] = '\n';
1256 reply[res] = '\0';
1257
1258 wpabuf_free(buf);
1259
1260 return res;
1261 }
1262 #endif /* CONFIG_P2P */
1263
1264
wpas_ctrl_nfc_get_handover_sel(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)1265 static int wpas_ctrl_nfc_get_handover_sel(struct wpa_supplicant *wpa_s,
1266 char *cmd, char *reply,
1267 size_t max_len)
1268 {
1269 char *pos, *pos2;
1270 int ndef;
1271
1272 pos = os_strchr(cmd, ' ');
1273 if (pos == NULL)
1274 return -1;
1275 *pos++ = '\0';
1276
1277 if (os_strcmp(cmd, "WPS") == 0)
1278 ndef = 0;
1279 else if (os_strcmp(cmd, "NDEF") == 0)
1280 ndef = 1;
1281 else
1282 return -1;
1283
1284 pos2 = os_strchr(pos, ' ');
1285 if (pos2)
1286 *pos2++ = '\0';
1287 if (os_strcmp(pos, "WPS") == 0 || os_strcmp(pos, "WPS-CR") == 0) {
1288 if (!ndef)
1289 return -1;
1290 return wpas_ctrl_nfc_get_handover_sel_wps(
1291 wpa_s, reply, max_len, ndef,
1292 os_strcmp(pos, "WPS-CR") == 0, pos2);
1293 }
1294
1295 #ifdef CONFIG_P2P
1296 if (os_strcmp(pos, "P2P-CR") == 0) {
1297 return wpas_ctrl_nfc_get_handover_sel_p2p(
1298 wpa_s, reply, max_len, ndef, 0);
1299 }
1300
1301 if (os_strcmp(pos, "P2P-CR-TAG") == 0) {
1302 return wpas_ctrl_nfc_get_handover_sel_p2p(
1303 wpa_s, reply, max_len, ndef, 1);
1304 }
1305 #endif /* CONFIG_P2P */
1306
1307 return -1;
1308 }
1309
1310
wpas_ctrl_nfc_report_handover(struct wpa_supplicant * wpa_s,char * cmd)1311 static int wpas_ctrl_nfc_report_handover(struct wpa_supplicant *wpa_s,
1312 char *cmd)
1313 {
1314 size_t len;
1315 struct wpabuf *req, *sel;
1316 int ret;
1317 char *pos, *role, *type, *pos2;
1318 #ifdef CONFIG_P2P
1319 char *freq;
1320 int forced_freq = 0;
1321
1322 freq = strstr(cmd, " freq=");
1323 if (freq) {
1324 *freq = '\0';
1325 freq += 6;
1326 forced_freq = atoi(freq);
1327 }
1328 #endif /* CONFIG_P2P */
1329
1330 role = cmd;
1331 pos = os_strchr(role, ' ');
1332 if (pos == NULL) {
1333 wpa_printf(MSG_DEBUG, "NFC: Missing type in handover report");
1334 return -1;
1335 }
1336 *pos++ = '\0';
1337
1338 type = pos;
1339 pos = os_strchr(type, ' ');
1340 if (pos == NULL) {
1341 wpa_printf(MSG_DEBUG, "NFC: Missing request message in handover report");
1342 return -1;
1343 }
1344 *pos++ = '\0';
1345
1346 pos2 = os_strchr(pos, ' ');
1347 if (pos2 == NULL) {
1348 wpa_printf(MSG_DEBUG, "NFC: Missing select message in handover report");
1349 return -1;
1350 }
1351 *pos2++ = '\0';
1352
1353 len = os_strlen(pos);
1354 if (len & 0x01) {
1355 wpa_printf(MSG_DEBUG, "NFC: Invalid request message length in handover report");
1356 return -1;
1357 }
1358 len /= 2;
1359
1360 req = wpabuf_alloc(len);
1361 if (req == NULL) {
1362 wpa_printf(MSG_DEBUG, "NFC: Failed to allocate memory for request message");
1363 return -1;
1364 }
1365 if (hexstr2bin(pos, wpabuf_put(req, len), len) < 0) {
1366 wpa_printf(MSG_DEBUG, "NFC: Invalid request message hexdump in handover report");
1367 wpabuf_free(req);
1368 return -1;
1369 }
1370
1371 len = os_strlen(pos2);
1372 if (len & 0x01) {
1373 wpa_printf(MSG_DEBUG, "NFC: Invalid select message length in handover report");
1374 wpabuf_free(req);
1375 return -1;
1376 }
1377 len /= 2;
1378
1379 sel = wpabuf_alloc(len);
1380 if (sel == NULL) {
1381 wpa_printf(MSG_DEBUG, "NFC: Failed to allocate memory for select message");
1382 wpabuf_free(req);
1383 return -1;
1384 }
1385 if (hexstr2bin(pos2, wpabuf_put(sel, len), len) < 0) {
1386 wpa_printf(MSG_DEBUG, "NFC: Invalid select message hexdump in handover report");
1387 wpabuf_free(req);
1388 wpabuf_free(sel);
1389 return -1;
1390 }
1391
1392 wpa_printf(MSG_DEBUG, "NFC: Connection handover reported - role=%s type=%s req_len=%d sel_len=%d",
1393 role, type, (int) wpabuf_len(req), (int) wpabuf_len(sel));
1394
1395 if (os_strcmp(role, "INIT") == 0 && os_strcmp(type, "WPS") == 0) {
1396 ret = wpas_wps_nfc_report_handover(wpa_s, req, sel);
1397 #ifdef CONFIG_AP
1398 } else if (os_strcmp(role, "RESP") == 0 && os_strcmp(type, "WPS") == 0)
1399 {
1400 ret = wpas_ap_wps_nfc_report_handover(wpa_s, req, sel);
1401 if (ret < 0)
1402 ret = wpas_er_wps_nfc_report_handover(wpa_s, req, sel);
1403 #endif /* CONFIG_AP */
1404 #ifdef CONFIG_P2P
1405 } else if (os_strcmp(role, "INIT") == 0 && os_strcmp(type, "P2P") == 0)
1406 {
1407 ret = wpas_p2p_nfc_report_handover(wpa_s, 1, req, sel, 0);
1408 } else if (os_strcmp(role, "RESP") == 0 && os_strcmp(type, "P2P") == 0)
1409 {
1410 ret = wpas_p2p_nfc_report_handover(wpa_s, 0, req, sel,
1411 forced_freq);
1412 #endif /* CONFIG_P2P */
1413 } else {
1414 wpa_printf(MSG_DEBUG, "NFC: Unsupported connection handover "
1415 "reported: role=%s type=%s", role, type);
1416 ret = -1;
1417 }
1418 wpabuf_free(req);
1419 wpabuf_free(sel);
1420
1421 if (ret)
1422 wpa_printf(MSG_DEBUG, "NFC: Failed to process reported handover messages");
1423
1424 return ret;
1425 }
1426
1427 #endif /* CONFIG_WPS_NFC */
1428
1429
wpa_supplicant_ctrl_iface_wps_reg(struct wpa_supplicant * wpa_s,char * cmd)1430 static int wpa_supplicant_ctrl_iface_wps_reg(struct wpa_supplicant *wpa_s,
1431 char *cmd)
1432 {
1433 u8 bssid[ETH_ALEN];
1434 char *pin;
1435 char *new_ssid;
1436 char *new_auth;
1437 char *new_encr;
1438 char *new_key;
1439 struct wps_new_ap_settings ap;
1440
1441 pin = os_strchr(cmd, ' ');
1442 if (pin == NULL)
1443 return -1;
1444 *pin++ = '\0';
1445
1446 if (hwaddr_aton(cmd, bssid)) {
1447 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_REG: invalid BSSID '%s'",
1448 cmd);
1449 return -1;
1450 }
1451
1452 new_ssid = os_strchr(pin, ' ');
1453 if (new_ssid == NULL)
1454 return wpas_wps_start_reg(wpa_s, bssid, pin, NULL);
1455 *new_ssid++ = '\0';
1456
1457 new_auth = os_strchr(new_ssid, ' ');
1458 if (new_auth == NULL)
1459 return -1;
1460 *new_auth++ = '\0';
1461
1462 new_encr = os_strchr(new_auth, ' ');
1463 if (new_encr == NULL)
1464 return -1;
1465 *new_encr++ = '\0';
1466
1467 new_key = os_strchr(new_encr, ' ');
1468 if (new_key == NULL)
1469 return -1;
1470 *new_key++ = '\0';
1471
1472 os_memset(&ap, 0, sizeof(ap));
1473 ap.ssid_hex = new_ssid;
1474 ap.auth = new_auth;
1475 ap.encr = new_encr;
1476 ap.key_hex = new_key;
1477 return wpas_wps_start_reg(wpa_s, bssid, pin, &ap);
1478 }
1479
1480
1481 #ifdef CONFIG_AP
wpa_supplicant_ctrl_iface_wps_ap_pin(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)1482 static int wpa_supplicant_ctrl_iface_wps_ap_pin(struct wpa_supplicant *wpa_s,
1483 char *cmd, char *buf,
1484 size_t buflen)
1485 {
1486 int timeout = 300;
1487 char *pos;
1488 const char *pin_txt;
1489
1490 if (!wpa_s->ap_iface)
1491 return -1;
1492
1493 pos = os_strchr(cmd, ' ');
1494 if (pos)
1495 *pos++ = '\0';
1496
1497 if (os_strcmp(cmd, "disable") == 0) {
1498 wpas_wps_ap_pin_disable(wpa_s);
1499 return os_snprintf(buf, buflen, "OK\n");
1500 }
1501
1502 if (os_strcmp(cmd, "random") == 0) {
1503 if (pos)
1504 timeout = atoi(pos);
1505 pin_txt = wpas_wps_ap_pin_random(wpa_s, timeout);
1506 if (pin_txt == NULL)
1507 return -1;
1508 return os_snprintf(buf, buflen, "%s", pin_txt);
1509 }
1510
1511 if (os_strcmp(cmd, "get") == 0) {
1512 pin_txt = wpas_wps_ap_pin_get(wpa_s);
1513 if (pin_txt == NULL)
1514 return -1;
1515 return os_snprintf(buf, buflen, "%s", pin_txt);
1516 }
1517
1518 if (os_strcmp(cmd, "set") == 0) {
1519 char *pin;
1520 if (pos == NULL)
1521 return -1;
1522 pin = pos;
1523 pos = os_strchr(pos, ' ');
1524 if (pos) {
1525 *pos++ = '\0';
1526 timeout = atoi(pos);
1527 }
1528 if (os_strlen(pin) > buflen)
1529 return -1;
1530 if (wpas_wps_ap_pin_set(wpa_s, pin, timeout) < 0)
1531 return -1;
1532 return os_snprintf(buf, buflen, "%s", pin);
1533 }
1534
1535 return -1;
1536 }
1537 #endif /* CONFIG_AP */
1538
1539
1540 #ifdef CONFIG_WPS_ER
wpa_supplicant_ctrl_iface_wps_er_pin(struct wpa_supplicant * wpa_s,char * cmd)1541 static int wpa_supplicant_ctrl_iface_wps_er_pin(struct wpa_supplicant *wpa_s,
1542 char *cmd)
1543 {
1544 char *uuid = cmd, *pin, *pos;
1545 u8 addr_buf[ETH_ALEN], *addr = NULL;
1546 pin = os_strchr(uuid, ' ');
1547 if (pin == NULL)
1548 return -1;
1549 *pin++ = '\0';
1550 pos = os_strchr(pin, ' ');
1551 if (pos) {
1552 *pos++ = '\0';
1553 if (hwaddr_aton(pos, addr_buf) == 0)
1554 addr = addr_buf;
1555 }
1556 return wpas_wps_er_add_pin(wpa_s, addr, uuid, pin);
1557 }
1558
1559
wpa_supplicant_ctrl_iface_wps_er_learn(struct wpa_supplicant * wpa_s,char * cmd)1560 static int wpa_supplicant_ctrl_iface_wps_er_learn(struct wpa_supplicant *wpa_s,
1561 char *cmd)
1562 {
1563 char *uuid = cmd, *pin;
1564 pin = os_strchr(uuid, ' ');
1565 if (pin == NULL)
1566 return -1;
1567 *pin++ = '\0';
1568 return wpas_wps_er_learn(wpa_s, uuid, pin);
1569 }
1570
1571
wpa_supplicant_ctrl_iface_wps_er_set_config(struct wpa_supplicant * wpa_s,char * cmd)1572 static int wpa_supplicant_ctrl_iface_wps_er_set_config(
1573 struct wpa_supplicant *wpa_s, char *cmd)
1574 {
1575 char *uuid = cmd, *id;
1576 id = os_strchr(uuid, ' ');
1577 if (id == NULL)
1578 return -1;
1579 *id++ = '\0';
1580 return wpas_wps_er_set_config(wpa_s, uuid, atoi(id));
1581 }
1582
1583
wpa_supplicant_ctrl_iface_wps_er_config(struct wpa_supplicant * wpa_s,char * cmd)1584 static int wpa_supplicant_ctrl_iface_wps_er_config(
1585 struct wpa_supplicant *wpa_s, char *cmd)
1586 {
1587 char *pin;
1588 char *new_ssid;
1589 char *new_auth;
1590 char *new_encr;
1591 char *new_key;
1592 struct wps_new_ap_settings ap;
1593
1594 pin = os_strchr(cmd, ' ');
1595 if (pin == NULL)
1596 return -1;
1597 *pin++ = '\0';
1598
1599 new_ssid = os_strchr(pin, ' ');
1600 if (new_ssid == NULL)
1601 return -1;
1602 *new_ssid++ = '\0';
1603
1604 new_auth = os_strchr(new_ssid, ' ');
1605 if (new_auth == NULL)
1606 return -1;
1607 *new_auth++ = '\0';
1608
1609 new_encr = os_strchr(new_auth, ' ');
1610 if (new_encr == NULL)
1611 return -1;
1612 *new_encr++ = '\0';
1613
1614 new_key = os_strchr(new_encr, ' ');
1615 if (new_key == NULL)
1616 return -1;
1617 *new_key++ = '\0';
1618
1619 os_memset(&ap, 0, sizeof(ap));
1620 ap.ssid_hex = new_ssid;
1621 ap.auth = new_auth;
1622 ap.encr = new_encr;
1623 ap.key_hex = new_key;
1624 return wpas_wps_er_config(wpa_s, cmd, pin, &ap);
1625 }
1626
1627
1628 #ifdef CONFIG_WPS_NFC
wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)1629 static int wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(
1630 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
1631 {
1632 int ndef;
1633 struct wpabuf *buf;
1634 int res;
1635 char *uuid;
1636
1637 uuid = os_strchr(cmd, ' ');
1638 if (uuid == NULL)
1639 return -1;
1640 *uuid++ = '\0';
1641
1642 if (os_strcmp(cmd, "WPS") == 0)
1643 ndef = 0;
1644 else if (os_strcmp(cmd, "NDEF") == 0)
1645 ndef = 1;
1646 else
1647 return -1;
1648
1649 buf = wpas_wps_er_nfc_config_token(wpa_s, ndef, uuid);
1650 if (buf == NULL)
1651 return -1;
1652
1653 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1654 wpabuf_len(buf));
1655 reply[res++] = '\n';
1656 reply[res] = '\0';
1657
1658 wpabuf_free(buf);
1659
1660 return res;
1661 }
1662 #endif /* CONFIG_WPS_NFC */
1663 #endif /* CONFIG_WPS_ER */
1664
1665 #endif /* CONFIG_WPS */
1666
1667
1668 #ifdef CONFIG_IBSS_RSN
wpa_supplicant_ctrl_iface_ibss_rsn(struct wpa_supplicant * wpa_s,char * addr)1669 static int wpa_supplicant_ctrl_iface_ibss_rsn(
1670 struct wpa_supplicant *wpa_s, char *addr)
1671 {
1672 u8 peer[ETH_ALEN];
1673
1674 if (hwaddr_aton(addr, peer)) {
1675 wpa_printf(MSG_DEBUG, "CTRL_IFACE IBSS_RSN: invalid "
1676 "address '%s'", addr);
1677 return -1;
1678 }
1679
1680 wpa_printf(MSG_DEBUG, "CTRL_IFACE IBSS_RSN " MACSTR,
1681 MAC2STR(peer));
1682
1683 return ibss_rsn_start(wpa_s->ibss_rsn, peer);
1684 }
1685 #endif /* CONFIG_IBSS_RSN */
1686
1687
wpa_supplicant_ctrl_iface_ctrl_rsp(struct wpa_supplicant * wpa_s,char * rsp)1688 static int wpa_supplicant_ctrl_iface_ctrl_rsp(struct wpa_supplicant *wpa_s,
1689 char *rsp)
1690 {
1691 #ifdef IEEE8021X_EAPOL
1692 char *pos, *id_pos;
1693 int id;
1694 struct wpa_ssid *ssid;
1695
1696 pos = os_strchr(rsp, '-');
1697 if (pos == NULL)
1698 return -1;
1699 *pos++ = '\0';
1700 id_pos = pos;
1701 pos = os_strchr(pos, ':');
1702 if (pos == NULL)
1703 return -1;
1704 *pos++ = '\0';
1705 id = atoi(id_pos);
1706 wpa_printf(MSG_DEBUG, "CTRL_IFACE: field=%s id=%d", rsp, id);
1707 wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
1708 (u8 *) pos, os_strlen(pos));
1709
1710 ssid = wpa_config_get_network(wpa_s->conf, id);
1711 if (ssid == NULL) {
1712 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
1713 "to update", id);
1714 return -1;
1715 }
1716
1717 return wpa_supplicant_ctrl_iface_ctrl_rsp_handle(wpa_s, ssid, rsp,
1718 pos);
1719 #else /* IEEE8021X_EAPOL */
1720 wpa_printf(MSG_DEBUG, "CTRL_IFACE: 802.1X not included");
1721 return -1;
1722 #endif /* IEEE8021X_EAPOL */
1723 }
1724
1725
wpa_supplicant_ctrl_iface_status(struct wpa_supplicant * wpa_s,const char * params,char * buf,size_t buflen)1726 static int wpa_supplicant_ctrl_iface_status(struct wpa_supplicant *wpa_s,
1727 const char *params,
1728 char *buf, size_t buflen)
1729 {
1730 char *pos, *end, tmp[30];
1731 int res, verbose, wps, ret;
1732 #ifdef CONFIG_HS20
1733 const u8 *hs20;
1734 #endif /* CONFIG_HS20 */
1735 const u8 *sess_id;
1736 size_t sess_id_len;
1737
1738 if (os_strcmp(params, "-DRIVER") == 0)
1739 return wpa_drv_status(wpa_s, buf, buflen);
1740 verbose = os_strcmp(params, "-VERBOSE") == 0;
1741 wps = os_strcmp(params, "-WPS") == 0;
1742 pos = buf;
1743 end = buf + buflen;
1744 if (wpa_s->wpa_state >= WPA_ASSOCIATED) {
1745 struct wpa_ssid *ssid = wpa_s->current_ssid;
1746 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n",
1747 MAC2STR(wpa_s->bssid));
1748 if (os_snprintf_error(end - pos, ret))
1749 return pos - buf;
1750 pos += ret;
1751 ret = os_snprintf(pos, end - pos, "freq=%u\n",
1752 wpa_s->assoc_freq);
1753 if (os_snprintf_error(end - pos, ret))
1754 return pos - buf;
1755 pos += ret;
1756 if (ssid) {
1757 u8 *_ssid = ssid->ssid;
1758 size_t ssid_len = ssid->ssid_len;
1759 u8 ssid_buf[SSID_MAX_LEN];
1760 if (ssid_len == 0) {
1761 int _res = wpa_drv_get_ssid(wpa_s, ssid_buf);
1762 if (_res < 0)
1763 ssid_len = 0;
1764 else
1765 ssid_len = _res;
1766 _ssid = ssid_buf;
1767 }
1768 ret = os_snprintf(pos, end - pos, "ssid=%s\nid=%d\n",
1769 wpa_ssid_txt(_ssid, ssid_len),
1770 ssid->id);
1771 if (os_snprintf_error(end - pos, ret))
1772 return pos - buf;
1773 pos += ret;
1774
1775 if (wps && ssid->passphrase &&
1776 wpa_key_mgmt_wpa_psk(ssid->key_mgmt) &&
1777 (ssid->mode == WPAS_MODE_AP ||
1778 ssid->mode == WPAS_MODE_P2P_GO)) {
1779 ret = os_snprintf(pos, end - pos,
1780 "passphrase=%s\n",
1781 ssid->passphrase);
1782 if (os_snprintf_error(end - pos, ret))
1783 return pos - buf;
1784 pos += ret;
1785 }
1786 if (ssid->id_str) {
1787 ret = os_snprintf(pos, end - pos,
1788 "id_str=%s\n",
1789 ssid->id_str);
1790 if (os_snprintf_error(end - pos, ret))
1791 return pos - buf;
1792 pos += ret;
1793 }
1794
1795 switch (ssid->mode) {
1796 case WPAS_MODE_INFRA:
1797 ret = os_snprintf(pos, end - pos,
1798 "mode=station\n");
1799 break;
1800 case WPAS_MODE_IBSS:
1801 ret = os_snprintf(pos, end - pos,
1802 "mode=IBSS\n");
1803 break;
1804 case WPAS_MODE_AP:
1805 ret = os_snprintf(pos, end - pos,
1806 "mode=AP\n");
1807 break;
1808 case WPAS_MODE_P2P_GO:
1809 ret = os_snprintf(pos, end - pos,
1810 "mode=P2P GO\n");
1811 break;
1812 case WPAS_MODE_P2P_GROUP_FORMATION:
1813 ret = os_snprintf(pos, end - pos,
1814 "mode=P2P GO - group "
1815 "formation\n");
1816 break;
1817 default:
1818 ret = 0;
1819 break;
1820 }
1821 if (os_snprintf_error(end - pos, ret))
1822 return pos - buf;
1823 pos += ret;
1824 }
1825
1826 #ifdef CONFIG_AP
1827 if (wpa_s->ap_iface) {
1828 pos += ap_ctrl_iface_wpa_get_status(wpa_s, pos,
1829 end - pos,
1830 verbose);
1831 } else
1832 #endif /* CONFIG_AP */
1833 pos += wpa_sm_get_status(wpa_s->wpa, pos, end - pos, verbose);
1834 }
1835 #ifdef CONFIG_SAE
1836 if (wpa_s->wpa_state >= WPA_ASSOCIATED &&
1837 #ifdef CONFIG_AP
1838 !wpa_s->ap_iface &&
1839 #endif /* CONFIG_AP */
1840 wpa_s->sme.sae.state == SAE_ACCEPTED) {
1841 ret = os_snprintf(pos, end - pos, "sae_group=%d\n",
1842 wpa_s->sme.sae.group);
1843 if (os_snprintf_error(end - pos, ret))
1844 return pos - buf;
1845 pos += ret;
1846 }
1847 #endif /* CONFIG_SAE */
1848 ret = os_snprintf(pos, end - pos, "wpa_state=%s\n",
1849 wpa_supplicant_state_txt(wpa_s->wpa_state));
1850 if (os_snprintf_error(end - pos, ret))
1851 return pos - buf;
1852 pos += ret;
1853
1854 if (wpa_s->l2 &&
1855 l2_packet_get_ip_addr(wpa_s->l2, tmp, sizeof(tmp)) >= 0) {
1856 ret = os_snprintf(pos, end - pos, "ip_address=%s\n", tmp);
1857 if (os_snprintf_error(end - pos, ret))
1858 return pos - buf;
1859 pos += ret;
1860 }
1861
1862 #ifdef CONFIG_P2P
1863 if (wpa_s->global->p2p) {
1864 ret = os_snprintf(pos, end - pos, "p2p_device_address=" MACSTR
1865 "\n", MAC2STR(wpa_s->global->p2p_dev_addr));
1866 if (os_snprintf_error(end - pos, ret))
1867 return pos - buf;
1868 pos += ret;
1869 }
1870 #endif /* CONFIG_P2P */
1871
1872 ret = os_snprintf(pos, end - pos, "address=" MACSTR "\n",
1873 MAC2STR(wpa_s->own_addr));
1874 if (os_snprintf_error(end - pos, ret))
1875 return pos - buf;
1876 pos += ret;
1877
1878 #ifdef CONFIG_HS20
1879 if (wpa_s->current_bss &&
1880 (hs20 = wpa_bss_get_vendor_ie(wpa_s->current_bss,
1881 HS20_IE_VENDOR_TYPE)) &&
1882 wpa_s->wpa_proto == WPA_PROTO_RSN &&
1883 wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) {
1884 int release = 1;
1885 if (hs20[1] >= 5) {
1886 u8 rel_num = (hs20[6] & 0xf0) >> 4;
1887 release = rel_num + 1;
1888 }
1889 ret = os_snprintf(pos, end - pos, "hs20=%d\n", release);
1890 if (os_snprintf_error(end - pos, ret))
1891 return pos - buf;
1892 pos += ret;
1893 }
1894
1895 if (wpa_s->current_ssid) {
1896 struct wpa_cred *cred;
1897 char *type;
1898
1899 for (cred = wpa_s->conf->cred; cred; cred = cred->next) {
1900 size_t i;
1901
1902 if (wpa_s->current_ssid->parent_cred != cred)
1903 continue;
1904
1905 if (cred->provisioning_sp) {
1906 ret = os_snprintf(pos, end - pos,
1907 "provisioning_sp=%s\n",
1908 cred->provisioning_sp);
1909 if (os_snprintf_error(end - pos, ret))
1910 return pos - buf;
1911 pos += ret;
1912 }
1913
1914 if (!cred->domain)
1915 goto no_domain;
1916
1917 i = 0;
1918 if (wpa_s->current_bss && wpa_s->current_bss->anqp) {
1919 struct wpabuf *names =
1920 wpa_s->current_bss->anqp->domain_name;
1921 for (i = 0; names && i < cred->num_domain; i++)
1922 {
1923 if (domain_name_list_contains(
1924 names, cred->domain[i], 1))
1925 break;
1926 }
1927 if (i == cred->num_domain)
1928 i = 0; /* show first entry by default */
1929 }
1930 ret = os_snprintf(pos, end - pos, "home_sp=%s\n",
1931 cred->domain[i]);
1932 if (os_snprintf_error(end - pos, ret))
1933 return pos - buf;
1934 pos += ret;
1935
1936 no_domain:
1937 if (wpa_s->current_bss == NULL ||
1938 wpa_s->current_bss->anqp == NULL)
1939 res = -1;
1940 else
1941 res = interworking_home_sp_cred(
1942 wpa_s, cred,
1943 wpa_s->current_bss->anqp->domain_name);
1944 if (res > 0)
1945 type = "home";
1946 else if (res == 0)
1947 type = "roaming";
1948 else
1949 type = "unknown";
1950
1951 ret = os_snprintf(pos, end - pos, "sp_type=%s\n", type);
1952 if (os_snprintf_error(end - pos, ret))
1953 return pos - buf;
1954 pos += ret;
1955
1956 break;
1957 }
1958 }
1959 #endif /* CONFIG_HS20 */
1960
1961 if (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt) ||
1962 wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
1963 res = eapol_sm_get_status(wpa_s->eapol, pos, end - pos,
1964 verbose);
1965 if (res >= 0)
1966 pos += res;
1967 }
1968
1969 sess_id = eapol_sm_get_session_id(wpa_s->eapol, &sess_id_len);
1970 if (sess_id) {
1971 char *start = pos;
1972
1973 ret = os_snprintf(pos, end - pos, "eap_session_id=");
1974 if (os_snprintf_error(end - pos, ret))
1975 return start - buf;
1976 pos += ret;
1977 ret = wpa_snprintf_hex(pos, end - pos, sess_id, sess_id_len);
1978 if (ret <= 0)
1979 return start - buf;
1980 pos += ret;
1981 ret = os_snprintf(pos, end - pos, "\n");
1982 if (os_snprintf_error(end - pos, ret))
1983 return start - buf;
1984 pos += ret;
1985 }
1986
1987 res = rsn_preauth_get_status(wpa_s->wpa, pos, end - pos, verbose);
1988 if (res >= 0)
1989 pos += res;
1990
1991 #ifdef CONFIG_WPS
1992 {
1993 char uuid_str[100];
1994 uuid_bin2str(wpa_s->wps->uuid, uuid_str, sizeof(uuid_str));
1995 ret = os_snprintf(pos, end - pos, "uuid=%s\n", uuid_str);
1996 if (os_snprintf_error(end - pos, ret))
1997 return pos - buf;
1998 pos += ret;
1999 }
2000 #endif /* CONFIG_WPS */
2001
2002 #ifdef ANDROID
2003 /*
2004 * Allow using the STATUS command with default behavior, say for debug,
2005 * i.e., don't generate a "fake" CONNECTION and SUPPLICANT_STATE_CHANGE
2006 * events with STATUS-NO_EVENTS.
2007 */
2008 if (os_strcmp(params, "-NO_EVENTS")) {
2009 wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_STATE_CHANGE
2010 "id=%d state=%d BSSID=" MACSTR " SSID=%s",
2011 wpa_s->current_ssid ? wpa_s->current_ssid->id : -1,
2012 wpa_s->wpa_state,
2013 MAC2STR(wpa_s->bssid),
2014 wpa_s->current_ssid && wpa_s->current_ssid->ssid ?
2015 wpa_ssid_txt(wpa_s->current_ssid->ssid,
2016 wpa_s->current_ssid->ssid_len) : "");
2017 if (wpa_s->wpa_state == WPA_COMPLETED) {
2018 struct wpa_ssid *ssid = wpa_s->current_ssid;
2019 wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_CONNECTED
2020 "- connection to " MACSTR
2021 " completed %s [id=%d id_str=%s]",
2022 MAC2STR(wpa_s->bssid), "(auth)",
2023 ssid ? ssid->id : -1,
2024 ssid && ssid->id_str ? ssid->id_str : "");
2025 }
2026 }
2027 #endif /* ANDROID */
2028
2029 return pos - buf;
2030 }
2031
2032
wpa_supplicant_ctrl_iface_bssid(struct wpa_supplicant * wpa_s,char * cmd)2033 static int wpa_supplicant_ctrl_iface_bssid(struct wpa_supplicant *wpa_s,
2034 char *cmd)
2035 {
2036 char *pos;
2037 int id;
2038 struct wpa_ssid *ssid;
2039 u8 bssid[ETH_ALEN];
2040
2041 /* cmd: "<network id> <BSSID>" */
2042 pos = os_strchr(cmd, ' ');
2043 if (pos == NULL)
2044 return -1;
2045 *pos++ = '\0';
2046 id = atoi(cmd);
2047 wpa_printf(MSG_DEBUG, "CTRL_IFACE: id=%d bssid='%s'", id, pos);
2048 if (hwaddr_aton(pos, bssid)) {
2049 wpa_printf(MSG_DEBUG ,"CTRL_IFACE: invalid BSSID '%s'", pos);
2050 return -1;
2051 }
2052
2053 ssid = wpa_config_get_network(wpa_s->conf, id);
2054 if (ssid == NULL) {
2055 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
2056 "to update", id);
2057 return -1;
2058 }
2059
2060 os_memcpy(ssid->bssid, bssid, ETH_ALEN);
2061 ssid->bssid_set = !is_zero_ether_addr(bssid);
2062
2063 return 0;
2064 }
2065
2066
wpa_supplicant_ctrl_iface_blacklist(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)2067 static int wpa_supplicant_ctrl_iface_blacklist(struct wpa_supplicant *wpa_s,
2068 char *cmd, char *buf,
2069 size_t buflen)
2070 {
2071 u8 bssid[ETH_ALEN];
2072 struct wpa_blacklist *e;
2073 char *pos, *end;
2074 int ret;
2075
2076 /* cmd: "BLACKLIST [<BSSID>]" */
2077 if (*cmd == '\0') {
2078 pos = buf;
2079 end = buf + buflen;
2080 e = wpa_s->blacklist;
2081 while (e) {
2082 ret = os_snprintf(pos, end - pos, MACSTR "\n",
2083 MAC2STR(e->bssid));
2084 if (os_snprintf_error(end - pos, ret))
2085 return pos - buf;
2086 pos += ret;
2087 e = e->next;
2088 }
2089 return pos - buf;
2090 }
2091
2092 cmd++;
2093 if (os_strncmp(cmd, "clear", 5) == 0) {
2094 wpa_blacklist_clear(wpa_s);
2095 os_memcpy(buf, "OK\n", 3);
2096 return 3;
2097 }
2098
2099 wpa_printf(MSG_DEBUG, "CTRL_IFACE: BLACKLIST bssid='%s'", cmd);
2100 if (hwaddr_aton(cmd, bssid)) {
2101 wpa_printf(MSG_DEBUG, "CTRL_IFACE: invalid BSSID '%s'", cmd);
2102 return -1;
2103 }
2104
2105 /*
2106 * Add the BSSID twice, so its count will be 2, causing it to be
2107 * skipped when processing scan results.
2108 */
2109 ret = wpa_blacklist_add(wpa_s, bssid);
2110 if (ret < 0)
2111 return -1;
2112 ret = wpa_blacklist_add(wpa_s, bssid);
2113 if (ret < 0)
2114 return -1;
2115 os_memcpy(buf, "OK\n", 3);
2116 return 3;
2117 }
2118
2119
debug_level_str(int level)2120 static const char * debug_level_str(int level)
2121 {
2122 switch (level) {
2123 case MSG_EXCESSIVE:
2124 return "EXCESSIVE";
2125 case MSG_MSGDUMP:
2126 return "MSGDUMP";
2127 case MSG_DEBUG:
2128 return "DEBUG";
2129 case MSG_INFO:
2130 return "INFO";
2131 case MSG_WARNING:
2132 return "WARNING";
2133 case MSG_ERROR:
2134 return "ERROR";
2135 default:
2136 return "?";
2137 }
2138 }
2139
2140
str_to_debug_level(const char * s)2141 static int str_to_debug_level(const char *s)
2142 {
2143 if (os_strcasecmp(s, "EXCESSIVE") == 0)
2144 return MSG_EXCESSIVE;
2145 if (os_strcasecmp(s, "MSGDUMP") == 0)
2146 return MSG_MSGDUMP;
2147 if (os_strcasecmp(s, "DEBUG") == 0)
2148 return MSG_DEBUG;
2149 if (os_strcasecmp(s, "INFO") == 0)
2150 return MSG_INFO;
2151 if (os_strcasecmp(s, "WARNING") == 0)
2152 return MSG_WARNING;
2153 if (os_strcasecmp(s, "ERROR") == 0)
2154 return MSG_ERROR;
2155 return -1;
2156 }
2157
2158
wpa_supplicant_ctrl_iface_log_level(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)2159 static int wpa_supplicant_ctrl_iface_log_level(struct wpa_supplicant *wpa_s,
2160 char *cmd, char *buf,
2161 size_t buflen)
2162 {
2163 char *pos, *end, *stamp;
2164 int ret;
2165
2166 /* cmd: "LOG_LEVEL [<level>]" */
2167 if (*cmd == '\0') {
2168 pos = buf;
2169 end = buf + buflen;
2170 ret = os_snprintf(pos, end - pos, "Current level: %s\n"
2171 "Timestamp: %d\n",
2172 debug_level_str(wpa_debug_level),
2173 wpa_debug_timestamp);
2174 if (os_snprintf_error(end - pos, ret))
2175 ret = 0;
2176
2177 return ret;
2178 }
2179
2180 while (*cmd == ' ')
2181 cmd++;
2182
2183 stamp = os_strchr(cmd, ' ');
2184 if (stamp) {
2185 *stamp++ = '\0';
2186 while (*stamp == ' ') {
2187 stamp++;
2188 }
2189 }
2190
2191 if (cmd && os_strlen(cmd)) {
2192 int level = str_to_debug_level(cmd);
2193 if (level < 0)
2194 return -1;
2195 wpa_debug_level = level;
2196 }
2197
2198 if (stamp && os_strlen(stamp))
2199 wpa_debug_timestamp = atoi(stamp);
2200
2201 os_memcpy(buf, "OK\n", 3);
2202 return 3;
2203 }
2204
2205
wpa_supplicant_ctrl_iface_list_networks(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)2206 static int wpa_supplicant_ctrl_iface_list_networks(
2207 struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
2208 {
2209 char *pos, *end, *prev;
2210 struct wpa_ssid *ssid;
2211 int ret;
2212
2213 pos = buf;
2214 end = buf + buflen;
2215 ret = os_snprintf(pos, end - pos,
2216 "network id / ssid / bssid / flags\n");
2217 if (os_snprintf_error(end - pos, ret))
2218 return pos - buf;
2219 pos += ret;
2220
2221 ssid = wpa_s->conf->ssid;
2222
2223 /* skip over ssids until we find next one */
2224 if (cmd != NULL && os_strncmp(cmd, "LAST_ID=", 8) == 0) {
2225 int last_id = atoi(cmd + 8);
2226 if (last_id != -1) {
2227 while (ssid != NULL && ssid->id <= last_id) {
2228 ssid = ssid->next;
2229 }
2230 }
2231 }
2232
2233 while (ssid) {
2234 prev = pos;
2235 ret = os_snprintf(pos, end - pos, "%d\t%s",
2236 ssid->id,
2237 wpa_ssid_txt(ssid->ssid, ssid->ssid_len));
2238 if (os_snprintf_error(end - pos, ret))
2239 return prev - buf;
2240 pos += ret;
2241 if (ssid->bssid_set) {
2242 ret = os_snprintf(pos, end - pos, "\t" MACSTR,
2243 MAC2STR(ssid->bssid));
2244 } else {
2245 ret = os_snprintf(pos, end - pos, "\tany");
2246 }
2247 if (os_snprintf_error(end - pos, ret))
2248 return prev - buf;
2249 pos += ret;
2250 ret = os_snprintf(pos, end - pos, "\t%s%s%s%s",
2251 ssid == wpa_s->current_ssid ?
2252 "[CURRENT]" : "",
2253 ssid->disabled ? "[DISABLED]" : "",
2254 ssid->disabled_until.sec ?
2255 "[TEMP-DISABLED]" : "",
2256 ssid->disabled == 2 ? "[P2P-PERSISTENT]" :
2257 "");
2258 if (os_snprintf_error(end - pos, ret))
2259 return prev - buf;
2260 pos += ret;
2261 ret = os_snprintf(pos, end - pos, "\n");
2262 if (os_snprintf_error(end - pos, ret))
2263 return prev - buf;
2264 pos += ret;
2265
2266 ssid = ssid->next;
2267 }
2268
2269 return pos - buf;
2270 }
2271
2272
wpa_supplicant_cipher_txt(char * pos,char * end,int cipher)2273 static char * wpa_supplicant_cipher_txt(char *pos, char *end, int cipher)
2274 {
2275 int ret;
2276 ret = os_snprintf(pos, end - pos, "-");
2277 if (os_snprintf_error(end - pos, ret))
2278 return pos;
2279 pos += ret;
2280 ret = wpa_write_ciphers(pos, end, cipher, "+");
2281 if (ret < 0)
2282 return pos;
2283 pos += ret;
2284 return pos;
2285 }
2286
2287
wpa_supplicant_ie_txt(char * pos,char * end,const char * proto,const u8 * ie,size_t ie_len)2288 static char * wpa_supplicant_ie_txt(char *pos, char *end, const char *proto,
2289 const u8 *ie, size_t ie_len)
2290 {
2291 struct wpa_ie_data data;
2292 char *start;
2293 int ret;
2294
2295 ret = os_snprintf(pos, end - pos, "[%s-", proto);
2296 if (os_snprintf_error(end - pos, ret))
2297 return pos;
2298 pos += ret;
2299
2300 if (wpa_parse_wpa_ie(ie, ie_len, &data) < 0) {
2301 ret = os_snprintf(pos, end - pos, "?]");
2302 if (os_snprintf_error(end - pos, ret))
2303 return pos;
2304 pos += ret;
2305 return pos;
2306 }
2307
2308 start = pos;
2309 if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X) {
2310 ret = os_snprintf(pos, end - pos, "%sEAP",
2311 pos == start ? "" : "+");
2312 if (os_snprintf_error(end - pos, ret))
2313 return pos;
2314 pos += ret;
2315 }
2316 if (data.key_mgmt & WPA_KEY_MGMT_PSK) {
2317 ret = os_snprintf(pos, end - pos, "%sPSK",
2318 pos == start ? "" : "+");
2319 if (os_snprintf_error(end - pos, ret))
2320 return pos;
2321 pos += ret;
2322 }
2323 if (data.key_mgmt & WPA_KEY_MGMT_WPA_NONE) {
2324 ret = os_snprintf(pos, end - pos, "%sNone",
2325 pos == start ? "" : "+");
2326 if (os_snprintf_error(end - pos, ret))
2327 return pos;
2328 pos += ret;
2329 }
2330 if (data.key_mgmt & WPA_KEY_MGMT_SAE) {
2331 ret = os_snprintf(pos, end - pos, "%sSAE",
2332 pos == start ? "" : "+");
2333 if (os_snprintf_error(end - pos, ret))
2334 return pos;
2335 pos += ret;
2336 }
2337 #ifdef CONFIG_IEEE80211R
2338 if (data.key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X) {
2339 ret = os_snprintf(pos, end - pos, "%sFT/EAP",
2340 pos == start ? "" : "+");
2341 if (os_snprintf_error(end - pos, ret))
2342 return pos;
2343 pos += ret;
2344 }
2345 if (data.key_mgmt & WPA_KEY_MGMT_FT_PSK) {
2346 ret = os_snprintf(pos, end - pos, "%sFT/PSK",
2347 pos == start ? "" : "+");
2348 if (os_snprintf_error(end - pos, ret))
2349 return pos;
2350 pos += ret;
2351 }
2352 if (data.key_mgmt & WPA_KEY_MGMT_FT_SAE) {
2353 ret = os_snprintf(pos, end - pos, "%sFT/SAE",
2354 pos == start ? "" : "+");
2355 if (os_snprintf_error(end - pos, ret))
2356 return pos;
2357 pos += ret;
2358 }
2359 #endif /* CONFIG_IEEE80211R */
2360 #ifdef CONFIG_IEEE80211W
2361 if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SHA256) {
2362 ret = os_snprintf(pos, end - pos, "%sEAP-SHA256",
2363 pos == start ? "" : "+");
2364 if (os_snprintf_error(end - pos, ret))
2365 return pos;
2366 pos += ret;
2367 }
2368 if (data.key_mgmt & WPA_KEY_MGMT_PSK_SHA256) {
2369 ret = os_snprintf(pos, end - pos, "%sPSK-SHA256",
2370 pos == start ? "" : "+");
2371 if (os_snprintf_error(end - pos, ret))
2372 return pos;
2373 pos += ret;
2374 }
2375 #endif /* CONFIG_IEEE80211W */
2376
2377 #ifdef CONFIG_SUITEB
2378 if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B) {
2379 ret = os_snprintf(pos, end - pos, "%sEAP-SUITE-B",
2380 pos == start ? "" : "+");
2381 if (os_snprintf_error(end - pos, ret))
2382 return pos;
2383 pos += ret;
2384 }
2385 #endif /* CONFIG_SUITEB */
2386
2387 #ifdef CONFIG_SUITEB192
2388 if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B_192) {
2389 ret = os_snprintf(pos, end - pos, "%sEAP-SUITE-B-192",
2390 pos == start ? "" : "+");
2391 if (os_snprintf_error(end - pos, ret))
2392 return pos;
2393 pos += ret;
2394 }
2395 #endif /* CONFIG_SUITEB192 */
2396
2397 if (data.key_mgmt & WPA_KEY_MGMT_OSEN) {
2398 ret = os_snprintf(pos, end - pos, "%sOSEN",
2399 pos == start ? "" : "+");
2400 if (os_snprintf_error(end - pos, ret))
2401 return pos;
2402 pos += ret;
2403 }
2404
2405 pos = wpa_supplicant_cipher_txt(pos, end, data.pairwise_cipher);
2406
2407 if (data.capabilities & WPA_CAPABILITY_PREAUTH) {
2408 ret = os_snprintf(pos, end - pos, "-preauth");
2409 if (os_snprintf_error(end - pos, ret))
2410 return pos;
2411 pos += ret;
2412 }
2413
2414 ret = os_snprintf(pos, end - pos, "]");
2415 if (os_snprintf_error(end - pos, ret))
2416 return pos;
2417 pos += ret;
2418
2419 return pos;
2420 }
2421
2422
2423 #ifdef CONFIG_WPS
wpa_supplicant_wps_ie_txt_buf(struct wpa_supplicant * wpa_s,char * pos,char * end,struct wpabuf * wps_ie)2424 static char * wpa_supplicant_wps_ie_txt_buf(struct wpa_supplicant *wpa_s,
2425 char *pos, char *end,
2426 struct wpabuf *wps_ie)
2427 {
2428 int ret;
2429 const char *txt;
2430
2431 if (wps_ie == NULL)
2432 return pos;
2433 if (wps_is_selected_pbc_registrar(wps_ie))
2434 txt = "[WPS-PBC]";
2435 else if (wps_is_addr_authorized(wps_ie, wpa_s->own_addr, 0))
2436 txt = "[WPS-AUTH]";
2437 else if (wps_is_selected_pin_registrar(wps_ie))
2438 txt = "[WPS-PIN]";
2439 else
2440 txt = "[WPS]";
2441
2442 ret = os_snprintf(pos, end - pos, "%s", txt);
2443 if (!os_snprintf_error(end - pos, ret))
2444 pos += ret;
2445 wpabuf_free(wps_ie);
2446 return pos;
2447 }
2448 #endif /* CONFIG_WPS */
2449
2450
wpa_supplicant_wps_ie_txt(struct wpa_supplicant * wpa_s,char * pos,char * end,const struct wpa_bss * bss)2451 static char * wpa_supplicant_wps_ie_txt(struct wpa_supplicant *wpa_s,
2452 char *pos, char *end,
2453 const struct wpa_bss *bss)
2454 {
2455 #ifdef CONFIG_WPS
2456 struct wpabuf *wps_ie;
2457 wps_ie = wpa_bss_get_vendor_ie_multi(bss, WPS_IE_VENDOR_TYPE);
2458 return wpa_supplicant_wps_ie_txt_buf(wpa_s, pos, end, wps_ie);
2459 #else /* CONFIG_WPS */
2460 return pos;
2461 #endif /* CONFIG_WPS */
2462 }
2463
2464
2465 /* Format one result on one text line into a buffer. */
wpa_supplicant_ctrl_iface_scan_result(struct wpa_supplicant * wpa_s,const struct wpa_bss * bss,char * buf,size_t buflen)2466 static int wpa_supplicant_ctrl_iface_scan_result(
2467 struct wpa_supplicant *wpa_s,
2468 const struct wpa_bss *bss, char *buf, size_t buflen)
2469 {
2470 char *pos, *end;
2471 int ret;
2472 const u8 *ie, *ie2, *osen_ie, *p2p, *mesh;
2473
2474 mesh = wpa_bss_get_ie(bss, WLAN_EID_MESH_ID);
2475 p2p = wpa_bss_get_vendor_ie(bss, P2P_IE_VENDOR_TYPE);
2476 if (!p2p)
2477 p2p = wpa_bss_get_vendor_ie_beacon(bss, P2P_IE_VENDOR_TYPE);
2478 if (p2p && bss->ssid_len == P2P_WILDCARD_SSID_LEN &&
2479 os_memcmp(bss->ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN) ==
2480 0)
2481 return 0; /* Do not show P2P listen discovery results here */
2482
2483 pos = buf;
2484 end = buf + buflen;
2485
2486 ret = os_snprintf(pos, end - pos, MACSTR "\t%d\t%d\t",
2487 MAC2STR(bss->bssid), bss->freq, bss->level);
2488 if (os_snprintf_error(end - pos, ret))
2489 return -1;
2490 pos += ret;
2491 ie = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
2492 if (ie)
2493 pos = wpa_supplicant_ie_txt(pos, end, "WPA", ie, 2 + ie[1]);
2494 ie2 = wpa_bss_get_ie(bss, WLAN_EID_RSN);
2495 if (ie2) {
2496 pos = wpa_supplicant_ie_txt(pos, end, mesh ? "RSN" : "WPA2",
2497 ie2, 2 + ie2[1]);
2498 }
2499 osen_ie = wpa_bss_get_vendor_ie(bss, OSEN_IE_VENDOR_TYPE);
2500 if (osen_ie)
2501 pos = wpa_supplicant_ie_txt(pos, end, "OSEN",
2502 osen_ie, 2 + osen_ie[1]);
2503 pos = wpa_supplicant_wps_ie_txt(wpa_s, pos, end, bss);
2504 if (!ie && !ie2 && !osen_ie && (bss->caps & IEEE80211_CAP_PRIVACY)) {
2505 ret = os_snprintf(pos, end - pos, "[WEP]");
2506 if (os_snprintf_error(end - pos, ret))
2507 return -1;
2508 pos += ret;
2509 }
2510 if (mesh) {
2511 ret = os_snprintf(pos, end - pos, "[MESH]");
2512 if (os_snprintf_error(end - pos, ret))
2513 return -1;
2514 pos += ret;
2515 }
2516 if (bss_is_dmg(bss)) {
2517 const char *s;
2518 ret = os_snprintf(pos, end - pos, "[DMG]");
2519 if (os_snprintf_error(end - pos, ret))
2520 return -1;
2521 pos += ret;
2522 switch (bss->caps & IEEE80211_CAP_DMG_MASK) {
2523 case IEEE80211_CAP_DMG_IBSS:
2524 s = "[IBSS]";
2525 break;
2526 case IEEE80211_CAP_DMG_AP:
2527 s = "[ESS]";
2528 break;
2529 case IEEE80211_CAP_DMG_PBSS:
2530 s = "[PBSS]";
2531 break;
2532 default:
2533 s = "";
2534 break;
2535 }
2536 ret = os_snprintf(pos, end - pos, "%s", s);
2537 if (os_snprintf_error(end - pos, ret))
2538 return -1;
2539 pos += ret;
2540 } else {
2541 if (bss->caps & IEEE80211_CAP_IBSS) {
2542 ret = os_snprintf(pos, end - pos, "[IBSS]");
2543 if (os_snprintf_error(end - pos, ret))
2544 return -1;
2545 pos += ret;
2546 }
2547 if (bss->caps & IEEE80211_CAP_ESS) {
2548 ret = os_snprintf(pos, end - pos, "[ESS]");
2549 if (os_snprintf_error(end - pos, ret))
2550 return -1;
2551 pos += ret;
2552 }
2553 }
2554 if (p2p) {
2555 ret = os_snprintf(pos, end - pos, "[P2P]");
2556 if (os_snprintf_error(end - pos, ret))
2557 return -1;
2558 pos += ret;
2559 }
2560 #ifdef CONFIG_HS20
2561 if (wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE) && ie2) {
2562 ret = os_snprintf(pos, end - pos, "[HS20]");
2563 if (os_snprintf_error(end - pos, ret))
2564 return -1;
2565 pos += ret;
2566 }
2567 #endif /* CONFIG_HS20 */
2568
2569 ret = os_snprintf(pos, end - pos, "\t%s",
2570 wpa_ssid_txt(bss->ssid, bss->ssid_len));
2571 if (os_snprintf_error(end - pos, ret))
2572 return -1;
2573 pos += ret;
2574
2575 ret = os_snprintf(pos, end - pos, "\n");
2576 if (os_snprintf_error(end - pos, ret))
2577 return -1;
2578 pos += ret;
2579
2580 return pos - buf;
2581 }
2582
2583
wpa_supplicant_ctrl_iface_scan_results(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)2584 static int wpa_supplicant_ctrl_iface_scan_results(
2585 struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
2586 {
2587 char *pos, *end;
2588 struct wpa_bss *bss;
2589 int ret;
2590
2591 pos = buf;
2592 end = buf + buflen;
2593 ret = os_snprintf(pos, end - pos, "bssid / frequency / signal level / "
2594 "flags / ssid\n");
2595 if (os_snprintf_error(end - pos, ret))
2596 return pos - buf;
2597 pos += ret;
2598
2599 dl_list_for_each(bss, &wpa_s->bss_id, struct wpa_bss, list_id) {
2600 ret = wpa_supplicant_ctrl_iface_scan_result(wpa_s, bss, pos,
2601 end - pos);
2602 if (ret < 0 || ret >= end - pos)
2603 return pos - buf;
2604 pos += ret;
2605 }
2606
2607 return pos - buf;
2608 }
2609
2610
2611 #ifdef CONFIG_MESH
2612
wpa_supplicant_ctrl_iface_mesh_interface_add(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)2613 static int wpa_supplicant_ctrl_iface_mesh_interface_add(
2614 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
2615 {
2616 char *pos, ifname[IFNAMSIZ + 1];
2617
2618 ifname[0] = '\0';
2619
2620 pos = os_strstr(cmd, "ifname=");
2621 if (pos) {
2622 pos += 7;
2623 os_strlcpy(ifname, pos, sizeof(ifname));
2624 }
2625
2626 if (wpas_mesh_add_interface(wpa_s, ifname, sizeof(ifname)) < 0)
2627 return -1;
2628
2629 os_strlcpy(reply, ifname, max_len);
2630 return os_strlen(ifname);
2631 }
2632
2633
wpa_supplicant_ctrl_iface_mesh_group_add(struct wpa_supplicant * wpa_s,char * cmd)2634 static int wpa_supplicant_ctrl_iface_mesh_group_add(
2635 struct wpa_supplicant *wpa_s, char *cmd)
2636 {
2637 int id;
2638 struct wpa_ssid *ssid;
2639
2640 id = atoi(cmd);
2641 wpa_printf(MSG_DEBUG, "CTRL_IFACE: MESH_GROUP_ADD id=%d", id);
2642
2643 ssid = wpa_config_get_network(wpa_s->conf, id);
2644 if (ssid == NULL) {
2645 wpa_printf(MSG_DEBUG,
2646 "CTRL_IFACE: Could not find network id=%d", id);
2647 return -1;
2648 }
2649 if (ssid->mode != WPAS_MODE_MESH) {
2650 wpa_printf(MSG_DEBUG,
2651 "CTRL_IFACE: Cannot use MESH_GROUP_ADD on a non mesh network");
2652 return -1;
2653 }
2654 if (ssid->key_mgmt != WPA_KEY_MGMT_NONE &&
2655 ssid->key_mgmt != WPA_KEY_MGMT_SAE) {
2656 wpa_printf(MSG_ERROR,
2657 "CTRL_IFACE: key_mgmt for mesh network should be open or SAE");
2658 return -1;
2659 }
2660
2661 /*
2662 * TODO: If necessary write our own group_add function,
2663 * for now we can reuse select_network
2664 */
2665 wpa_supplicant_select_network(wpa_s, ssid);
2666
2667 return 0;
2668 }
2669
2670
wpa_supplicant_ctrl_iface_mesh_group_remove(struct wpa_supplicant * wpa_s,char * cmd)2671 static int wpa_supplicant_ctrl_iface_mesh_group_remove(
2672 struct wpa_supplicant *wpa_s, char *cmd)
2673 {
2674 struct wpa_supplicant *orig;
2675 struct wpa_global *global;
2676 int found = 0;
2677
2678 wpa_printf(MSG_DEBUG, "CTRL_IFACE: MESH_GROUP_REMOVE ifname=%s", cmd);
2679
2680 global = wpa_s->global;
2681 orig = wpa_s;
2682
2683 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
2684 if (os_strcmp(wpa_s->ifname, cmd) == 0) {
2685 found = 1;
2686 break;
2687 }
2688 }
2689 if (!found) {
2690 wpa_printf(MSG_ERROR,
2691 "CTRL_IFACE: MESH_GROUP_REMOVE ifname=%s not found",
2692 cmd);
2693 return -1;
2694 }
2695 if (wpa_s->mesh_if_created && wpa_s == orig) {
2696 wpa_printf(MSG_ERROR,
2697 "CTRL_IFACE: MESH_GROUP_REMOVE can't remove itself");
2698 return -1;
2699 }
2700
2701 wpa_s->reassociate = 0;
2702 wpa_s->disconnected = 1;
2703 wpa_supplicant_cancel_sched_scan(wpa_s);
2704 wpa_supplicant_cancel_scan(wpa_s);
2705
2706 /*
2707 * TODO: If necessary write our own group_remove function,
2708 * for now we can reuse deauthenticate
2709 */
2710 wpa_supplicant_deauthenticate(wpa_s, WLAN_REASON_DEAUTH_LEAVING);
2711
2712 if (wpa_s->mesh_if_created)
2713 wpa_supplicant_remove_iface(global, wpa_s, 0);
2714
2715 return 0;
2716 }
2717
2718 #endif /* CONFIG_MESH */
2719
2720
wpa_supplicant_ctrl_iface_select_network(struct wpa_supplicant * wpa_s,char * cmd)2721 static int wpa_supplicant_ctrl_iface_select_network(
2722 struct wpa_supplicant *wpa_s, char *cmd)
2723 {
2724 int id;
2725 struct wpa_ssid *ssid;
2726 char *pos;
2727
2728 /* cmd: "<network id>" or "any" */
2729 if (os_strncmp(cmd, "any", 3) == 0) {
2730 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SELECT_NETWORK any");
2731 ssid = NULL;
2732 } else {
2733 id = atoi(cmd);
2734 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SELECT_NETWORK id=%d", id);
2735
2736 ssid = wpa_config_get_network(wpa_s->conf, id);
2737 if (ssid == NULL) {
2738 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2739 "network id=%d", id);
2740 return -1;
2741 }
2742 if (ssid->disabled == 2) {
2743 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2744 "SELECT_NETWORK with persistent P2P group");
2745 return -1;
2746 }
2747 }
2748
2749 pos = os_strstr(cmd, " freq=");
2750 if (pos) {
2751 int *freqs = freq_range_to_channel_list(wpa_s, pos + 6);
2752 if (freqs) {
2753 wpa_s->scan_req = MANUAL_SCAN_REQ;
2754 os_free(wpa_s->manual_scan_freqs);
2755 wpa_s->manual_scan_freqs = freqs;
2756 }
2757 }
2758
2759 wpa_supplicant_select_network(wpa_s, ssid);
2760
2761 return 0;
2762 }
2763
2764
wpa_supplicant_ctrl_iface_enable_network(struct wpa_supplicant * wpa_s,char * cmd)2765 static int wpa_supplicant_ctrl_iface_enable_network(
2766 struct wpa_supplicant *wpa_s, char *cmd)
2767 {
2768 int id;
2769 struct wpa_ssid *ssid;
2770
2771 /* cmd: "<network id>" or "all" */
2772 if (os_strcmp(cmd, "all") == 0) {
2773 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ENABLE_NETWORK all");
2774 ssid = NULL;
2775 } else {
2776 id = atoi(cmd);
2777 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ENABLE_NETWORK id=%d", id);
2778
2779 ssid = wpa_config_get_network(wpa_s->conf, id);
2780 if (ssid == NULL) {
2781 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2782 "network id=%d", id);
2783 return -1;
2784 }
2785 if (ssid->disabled == 2) {
2786 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2787 "ENABLE_NETWORK with persistent P2P group");
2788 return -1;
2789 }
2790
2791 if (os_strstr(cmd, " no-connect")) {
2792 ssid->disabled = 0;
2793 return 0;
2794 }
2795 }
2796 wpa_supplicant_enable_network(wpa_s, ssid);
2797
2798 return 0;
2799 }
2800
2801
wpa_supplicant_ctrl_iface_disable_network(struct wpa_supplicant * wpa_s,char * cmd)2802 static int wpa_supplicant_ctrl_iface_disable_network(
2803 struct wpa_supplicant *wpa_s, char *cmd)
2804 {
2805 int id;
2806 struct wpa_ssid *ssid;
2807
2808 /* cmd: "<network id>" or "all" */
2809 if (os_strcmp(cmd, "all") == 0) {
2810 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DISABLE_NETWORK all");
2811 ssid = NULL;
2812 } else {
2813 id = atoi(cmd);
2814 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DISABLE_NETWORK id=%d", id);
2815
2816 ssid = wpa_config_get_network(wpa_s->conf, id);
2817 if (ssid == NULL) {
2818 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2819 "network id=%d", id);
2820 return -1;
2821 }
2822 if (ssid->disabled == 2) {
2823 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2824 "DISABLE_NETWORK with persistent P2P "
2825 "group");
2826 return -1;
2827 }
2828 }
2829 wpa_supplicant_disable_network(wpa_s, ssid);
2830
2831 return 0;
2832 }
2833
2834
wpa_supplicant_ctrl_iface_add_network(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)2835 static int wpa_supplicant_ctrl_iface_add_network(
2836 struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
2837 {
2838 struct wpa_ssid *ssid;
2839 int ret;
2840
2841 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ADD_NETWORK");
2842
2843 ssid = wpa_config_add_network(wpa_s->conf);
2844 if (ssid == NULL)
2845 return -1;
2846
2847 wpas_notify_network_added(wpa_s, ssid);
2848
2849 ssid->disabled = 1;
2850 wpa_config_set_network_defaults(ssid);
2851
2852 ret = os_snprintf(buf, buflen, "%d\n", ssid->id);
2853 if (os_snprintf_error(buflen, ret))
2854 return -1;
2855 return ret;
2856 }
2857
2858
wpa_supplicant_ctrl_iface_remove_network(struct wpa_supplicant * wpa_s,char * cmd)2859 static int wpa_supplicant_ctrl_iface_remove_network(
2860 struct wpa_supplicant *wpa_s, char *cmd)
2861 {
2862 int id;
2863 struct wpa_ssid *ssid;
2864 int was_disabled;
2865
2866 /* cmd: "<network id>" or "all" */
2867 if (os_strcmp(cmd, "all") == 0) {
2868 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_NETWORK all");
2869 if (wpa_s->sched_scanning)
2870 wpa_supplicant_cancel_sched_scan(wpa_s);
2871
2872 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2873 if (wpa_s->current_ssid) {
2874 #ifdef CONFIG_SME
2875 wpa_s->sme.prev_bssid_set = 0;
2876 #endif /* CONFIG_SME */
2877 wpa_sm_set_config(wpa_s->wpa, NULL);
2878 eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
2879 if (wpa_s->wpa_state >= WPA_AUTHENTICATING)
2880 wpa_s->own_disconnect_req = 1;
2881 wpa_supplicant_deauthenticate(
2882 wpa_s, WLAN_REASON_DEAUTH_LEAVING);
2883 }
2884 ssid = wpa_s->conf->ssid;
2885 while (ssid) {
2886 struct wpa_ssid *remove_ssid = ssid;
2887 id = ssid->id;
2888 ssid = ssid->next;
2889 if (wpa_s->last_ssid == remove_ssid)
2890 wpa_s->last_ssid = NULL;
2891 wpas_notify_network_removed(wpa_s, remove_ssid);
2892 wpa_config_remove_network(wpa_s->conf, id);
2893 }
2894 return 0;
2895 }
2896
2897 id = atoi(cmd);
2898 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_NETWORK id=%d", id);
2899
2900 ssid = wpa_config_get_network(wpa_s->conf, id);
2901 if (ssid)
2902 wpas_notify_network_removed(wpa_s, ssid);
2903 if (ssid == NULL) {
2904 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2905 "id=%d", id);
2906 return -1;
2907 }
2908
2909 if (wpa_s->last_ssid == ssid)
2910 wpa_s->last_ssid = NULL;
2911
2912 if (ssid == wpa_s->current_ssid || wpa_s->current_ssid == NULL) {
2913 #ifdef CONFIG_SME
2914 wpa_s->sme.prev_bssid_set = 0;
2915 #endif /* CONFIG_SME */
2916 /*
2917 * Invalidate the EAP session cache if the current or
2918 * previously used network is removed.
2919 */
2920 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2921 }
2922
2923 if (ssid == wpa_s->current_ssid) {
2924 wpa_sm_set_config(wpa_s->wpa, NULL);
2925 eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
2926
2927 if (wpa_s->wpa_state >= WPA_AUTHENTICATING)
2928 wpa_s->own_disconnect_req = 1;
2929 wpa_supplicant_deauthenticate(wpa_s,
2930 WLAN_REASON_DEAUTH_LEAVING);
2931 }
2932
2933 was_disabled = ssid->disabled;
2934
2935 if (wpa_config_remove_network(wpa_s->conf, id) < 0) {
2936 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Not able to remove the "
2937 "network id=%d", id);
2938 return -1;
2939 }
2940
2941 if (!was_disabled && wpa_s->sched_scanning) {
2942 wpa_printf(MSG_DEBUG, "Stop ongoing sched_scan to remove "
2943 "network from filters");
2944 wpa_supplicant_cancel_sched_scan(wpa_s);
2945 wpa_supplicant_req_scan(wpa_s, 0, 0);
2946 }
2947
2948 return 0;
2949 }
2950
2951
wpa_supplicant_ctrl_iface_update_network(struct wpa_supplicant * wpa_s,struct wpa_ssid * ssid,char * name,char * value)2952 static int wpa_supplicant_ctrl_iface_update_network(
2953 struct wpa_supplicant *wpa_s, struct wpa_ssid *ssid,
2954 char *name, char *value)
2955 {
2956 if (wpa_config_set(ssid, name, value, 0) < 0) {
2957 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to set network "
2958 "variable '%s'", name);
2959 return -1;
2960 }
2961
2962 if (os_strcmp(name, "bssid") != 0 &&
2963 os_strcmp(name, "priority") != 0)
2964 wpa_sm_pmksa_cache_flush(wpa_s->wpa, ssid);
2965
2966 if (wpa_s->current_ssid == ssid || wpa_s->current_ssid == NULL) {
2967 /*
2968 * Invalidate the EAP session cache if anything in the current
2969 * or previously used configuration changes.
2970 */
2971 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2972 }
2973
2974 if ((os_strcmp(name, "psk") == 0 &&
2975 value[0] == '"' && ssid->ssid_len) ||
2976 (os_strcmp(name, "ssid") == 0 && ssid->passphrase))
2977 wpa_config_update_psk(ssid);
2978 else if (os_strcmp(name, "priority") == 0)
2979 wpa_config_update_prio_list(wpa_s->conf);
2980
2981 return 0;
2982 }
2983
2984
wpa_supplicant_ctrl_iface_set_network(struct wpa_supplicant * wpa_s,char * cmd)2985 static int wpa_supplicant_ctrl_iface_set_network(
2986 struct wpa_supplicant *wpa_s, char *cmd)
2987 {
2988 int id, ret, prev_bssid_set, prev_disabled;
2989 struct wpa_ssid *ssid;
2990 char *name, *value;
2991 u8 prev_bssid[ETH_ALEN];
2992
2993 /* cmd: "<network id> <variable name> <value>" */
2994 name = os_strchr(cmd, ' ');
2995 if (name == NULL)
2996 return -1;
2997 *name++ = '\0';
2998
2999 value = os_strchr(name, ' ');
3000 if (value == NULL)
3001 return -1;
3002 *value++ = '\0';
3003
3004 id = atoi(cmd);
3005 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SET_NETWORK id=%d name='%s'",
3006 id, name);
3007 wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
3008 (u8 *) value, os_strlen(value));
3009
3010 ssid = wpa_config_get_network(wpa_s->conf, id);
3011 if (ssid == NULL) {
3012 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
3013 "id=%d", id);
3014 return -1;
3015 }
3016
3017 prev_bssid_set = ssid->bssid_set;
3018 prev_disabled = ssid->disabled;
3019 os_memcpy(prev_bssid, ssid->bssid, ETH_ALEN);
3020 ret = wpa_supplicant_ctrl_iface_update_network(wpa_s, ssid, name,
3021 value);
3022 if (ret == 0 &&
3023 (ssid->bssid_set != prev_bssid_set ||
3024 os_memcmp(ssid->bssid, prev_bssid, ETH_ALEN) != 0))
3025 wpas_notify_network_bssid_set_changed(wpa_s, ssid);
3026
3027 if (prev_disabled != ssid->disabled &&
3028 (prev_disabled == 2 || ssid->disabled == 2))
3029 wpas_notify_network_type_changed(wpa_s, ssid);
3030
3031 return ret;
3032 }
3033
3034
wpa_supplicant_ctrl_iface_get_network(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)3035 static int wpa_supplicant_ctrl_iface_get_network(
3036 struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
3037 {
3038 int id;
3039 size_t res;
3040 struct wpa_ssid *ssid;
3041 char *name, *value;
3042
3043 /* cmd: "<network id> <variable name>" */
3044 name = os_strchr(cmd, ' ');
3045 if (name == NULL || buflen == 0)
3046 return -1;
3047 *name++ = '\0';
3048
3049 id = atoi(cmd);
3050 wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_NETWORK id=%d name='%s'",
3051 id, name);
3052
3053 ssid = wpa_config_get_network(wpa_s->conf, id);
3054 if (ssid == NULL) {
3055 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
3056 "id=%d", id);
3057 return -1;
3058 }
3059
3060 value = wpa_config_get_no_key(ssid, name);
3061 if (value == NULL) {
3062 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to get network "
3063 "variable '%s'", name);
3064 return -1;
3065 }
3066
3067 res = os_strlcpy(buf, value, buflen);
3068 if (res >= buflen) {
3069 os_free(value);
3070 return -1;
3071 }
3072
3073 os_free(value);
3074
3075 return res;
3076 }
3077
3078
wpa_supplicant_ctrl_iface_dup_network(struct wpa_supplicant * wpa_s,char * cmd)3079 static int wpa_supplicant_ctrl_iface_dup_network(
3080 struct wpa_supplicant *wpa_s, char *cmd)
3081 {
3082 struct wpa_ssid *ssid_s, *ssid_d;
3083 char *name, *id, *value;
3084 int id_s, id_d, ret;
3085
3086 /* cmd: "<src network id> <dst network id> <variable name>" */
3087 id = os_strchr(cmd, ' ');
3088 if (id == NULL)
3089 return -1;
3090 *id++ = '\0';
3091
3092 name = os_strchr(id, ' ');
3093 if (name == NULL)
3094 return -1;
3095 *name++ = '\0';
3096
3097 id_s = atoi(cmd);
3098 id_d = atoi(id);
3099 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DUP_NETWORK id=%d -> %d name='%s'",
3100 id_s, id_d, name);
3101
3102 ssid_s = wpa_config_get_network(wpa_s->conf, id_s);
3103 if (ssid_s == NULL) {
3104 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
3105 "network id=%d", id_s);
3106 return -1;
3107 }
3108
3109 ssid_d = wpa_config_get_network(wpa_s->conf, id_d);
3110 if (ssid_d == NULL) {
3111 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
3112 "network id=%d", id_d);
3113 return -1;
3114 }
3115
3116 value = wpa_config_get(ssid_s, name);
3117 if (value == NULL) {
3118 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to get network "
3119 "variable '%s'", name);
3120 return -1;
3121 }
3122
3123 ret = wpa_supplicant_ctrl_iface_update_network(wpa_s, ssid_d, name,
3124 value);
3125
3126 os_free(value);
3127
3128 return ret;
3129 }
3130
3131
wpa_supplicant_ctrl_iface_list_creds(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)3132 static int wpa_supplicant_ctrl_iface_list_creds(struct wpa_supplicant *wpa_s,
3133 char *buf, size_t buflen)
3134 {
3135 char *pos, *end;
3136 struct wpa_cred *cred;
3137 int ret;
3138
3139 pos = buf;
3140 end = buf + buflen;
3141 ret = os_snprintf(pos, end - pos,
3142 "cred id / realm / username / domain / imsi\n");
3143 if (os_snprintf_error(end - pos, ret))
3144 return pos - buf;
3145 pos += ret;
3146
3147 cred = wpa_s->conf->cred;
3148 while (cred) {
3149 ret = os_snprintf(pos, end - pos, "%d\t%s\t%s\t%s\t%s\n",
3150 cred->id, cred->realm ? cred->realm : "",
3151 cred->username ? cred->username : "",
3152 cred->domain ? cred->domain[0] : "",
3153 cred->imsi ? cred->imsi : "");
3154 if (os_snprintf_error(end - pos, ret))
3155 return pos - buf;
3156 pos += ret;
3157
3158 cred = cred->next;
3159 }
3160
3161 return pos - buf;
3162 }
3163
3164
wpa_supplicant_ctrl_iface_add_cred(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)3165 static int wpa_supplicant_ctrl_iface_add_cred(struct wpa_supplicant *wpa_s,
3166 char *buf, size_t buflen)
3167 {
3168 struct wpa_cred *cred;
3169 int ret;
3170
3171 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ADD_CRED");
3172
3173 cred = wpa_config_add_cred(wpa_s->conf);
3174 if (cred == NULL)
3175 return -1;
3176
3177 wpa_msg(wpa_s, MSG_INFO, CRED_ADDED "%d", cred->id);
3178
3179 ret = os_snprintf(buf, buflen, "%d\n", cred->id);
3180 if (os_snprintf_error(buflen, ret))
3181 return -1;
3182 return ret;
3183 }
3184
3185
wpas_ctrl_remove_cred(struct wpa_supplicant * wpa_s,struct wpa_cred * cred)3186 static int wpas_ctrl_remove_cred(struct wpa_supplicant *wpa_s,
3187 struct wpa_cred *cred)
3188 {
3189 struct wpa_ssid *ssid;
3190 char str[20];
3191 int id;
3192
3193 if (cred == NULL) {
3194 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred");
3195 return -1;
3196 }
3197
3198 id = cred->id;
3199 if (wpa_config_remove_cred(wpa_s->conf, id) < 0) {
3200 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred");
3201 return -1;
3202 }
3203
3204 wpa_msg(wpa_s, MSG_INFO, CRED_REMOVED "%d", id);
3205
3206 /* Remove any network entry created based on the removed credential */
3207 ssid = wpa_s->conf->ssid;
3208 while (ssid) {
3209 if (ssid->parent_cred == cred) {
3210 int res;
3211
3212 wpa_printf(MSG_DEBUG, "Remove network id %d since it "
3213 "used the removed credential", ssid->id);
3214 res = os_snprintf(str, sizeof(str), "%d", ssid->id);
3215 if (os_snprintf_error(sizeof(str), res))
3216 str[sizeof(str) - 1] = '\0';
3217 ssid = ssid->next;
3218 wpa_supplicant_ctrl_iface_remove_network(wpa_s, str);
3219 } else
3220 ssid = ssid->next;
3221 }
3222
3223 return 0;
3224 }
3225
3226
wpa_supplicant_ctrl_iface_remove_cred(struct wpa_supplicant * wpa_s,char * cmd)3227 static int wpa_supplicant_ctrl_iface_remove_cred(struct wpa_supplicant *wpa_s,
3228 char *cmd)
3229 {
3230 int id;
3231 struct wpa_cred *cred, *prev;
3232
3233 /* cmd: "<cred id>", "all", "sp_fqdn=<FQDN>", or
3234 * "provisioning_sp=<FQDN> */
3235 if (os_strcmp(cmd, "all") == 0) {
3236 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED all");
3237 cred = wpa_s->conf->cred;
3238 while (cred) {
3239 prev = cred;
3240 cred = cred->next;
3241 wpas_ctrl_remove_cred(wpa_s, prev);
3242 }
3243 return 0;
3244 }
3245
3246 if (os_strncmp(cmd, "sp_fqdn=", 8) == 0) {
3247 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED SP FQDN '%s'",
3248 cmd + 8);
3249 cred = wpa_s->conf->cred;
3250 while (cred) {
3251 prev = cred;
3252 cred = cred->next;
3253 if (prev->domain) {
3254 size_t i;
3255 for (i = 0; i < prev->num_domain; i++) {
3256 if (os_strcmp(prev->domain[i], cmd + 8)
3257 != 0)
3258 continue;
3259 wpas_ctrl_remove_cred(wpa_s, prev);
3260 break;
3261 }
3262 }
3263 }
3264 return 0;
3265 }
3266
3267 if (os_strncmp(cmd, "provisioning_sp=", 16) == 0) {
3268 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED provisioning SP FQDN '%s'",
3269 cmd + 16);
3270 cred = wpa_s->conf->cred;
3271 while (cred) {
3272 prev = cred;
3273 cred = cred->next;
3274 if (prev->provisioning_sp &&
3275 os_strcmp(prev->provisioning_sp, cmd + 16) == 0)
3276 wpas_ctrl_remove_cred(wpa_s, prev);
3277 }
3278 return 0;
3279 }
3280
3281 id = atoi(cmd);
3282 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED id=%d", id);
3283
3284 cred = wpa_config_get_cred(wpa_s->conf, id);
3285 return wpas_ctrl_remove_cred(wpa_s, cred);
3286 }
3287
3288
wpa_supplicant_ctrl_iface_set_cred(struct wpa_supplicant * wpa_s,char * cmd)3289 static int wpa_supplicant_ctrl_iface_set_cred(struct wpa_supplicant *wpa_s,
3290 char *cmd)
3291 {
3292 int id;
3293 struct wpa_cred *cred;
3294 char *name, *value;
3295
3296 /* cmd: "<cred id> <variable name> <value>" */
3297 name = os_strchr(cmd, ' ');
3298 if (name == NULL)
3299 return -1;
3300 *name++ = '\0';
3301
3302 value = os_strchr(name, ' ');
3303 if (value == NULL)
3304 return -1;
3305 *value++ = '\0';
3306
3307 id = atoi(cmd);
3308 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SET_CRED id=%d name='%s'",
3309 id, name);
3310 wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
3311 (u8 *) value, os_strlen(value));
3312
3313 cred = wpa_config_get_cred(wpa_s->conf, id);
3314 if (cred == NULL) {
3315 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred id=%d",
3316 id);
3317 return -1;
3318 }
3319
3320 if (wpa_config_set_cred(cred, name, value, 0) < 0) {
3321 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to set cred "
3322 "variable '%s'", name);
3323 return -1;
3324 }
3325
3326 wpa_msg(wpa_s, MSG_INFO, CRED_MODIFIED "%d %s", cred->id, name);
3327
3328 return 0;
3329 }
3330
3331
wpa_supplicant_ctrl_iface_get_cred(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)3332 static int wpa_supplicant_ctrl_iface_get_cred(struct wpa_supplicant *wpa_s,
3333 char *cmd, char *buf,
3334 size_t buflen)
3335 {
3336 int id;
3337 size_t res;
3338 struct wpa_cred *cred;
3339 char *name, *value;
3340
3341 /* cmd: "<cred id> <variable name>" */
3342 name = os_strchr(cmd, ' ');
3343 if (name == NULL)
3344 return -1;
3345 *name++ = '\0';
3346
3347 id = atoi(cmd);
3348 wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_CRED id=%d name='%s'",
3349 id, name);
3350
3351 cred = wpa_config_get_cred(wpa_s->conf, id);
3352 if (cred == NULL) {
3353 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred id=%d",
3354 id);
3355 return -1;
3356 }
3357
3358 value = wpa_config_get_cred_no_key(cred, name);
3359 if (value == NULL) {
3360 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to get cred variable '%s'",
3361 name);
3362 return -1;
3363 }
3364
3365 res = os_strlcpy(buf, value, buflen);
3366 if (res >= buflen) {
3367 os_free(value);
3368 return -1;
3369 }
3370
3371 os_free(value);
3372
3373 return res;
3374 }
3375
3376
3377 #ifndef CONFIG_NO_CONFIG_WRITE
wpa_supplicant_ctrl_iface_save_config(struct wpa_supplicant * wpa_s)3378 static int wpa_supplicant_ctrl_iface_save_config(struct wpa_supplicant *wpa_s)
3379 {
3380 int ret;
3381
3382 if (!wpa_s->conf->update_config) {
3383 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Not allowed "
3384 "to update configuration (update_config=0)");
3385 return -1;
3386 }
3387
3388 ret = wpa_config_write(wpa_s->confname, wpa_s->conf);
3389 if (ret) {
3390 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Failed to "
3391 "update configuration");
3392 } else {
3393 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Configuration"
3394 " updated");
3395 }
3396
3397 return ret;
3398 }
3399 #endif /* CONFIG_NO_CONFIG_WRITE */
3400
3401
3402 struct cipher_info {
3403 unsigned int capa;
3404 const char *name;
3405 int group_only;
3406 };
3407
3408 static const struct cipher_info ciphers[] = {
3409 { WPA_DRIVER_CAPA_ENC_CCMP_256, "CCMP-256", 0 },
3410 { WPA_DRIVER_CAPA_ENC_GCMP_256, "GCMP-256", 0 },
3411 { WPA_DRIVER_CAPA_ENC_CCMP, "CCMP", 0 },
3412 { WPA_DRIVER_CAPA_ENC_GCMP, "GCMP", 0 },
3413 { WPA_DRIVER_CAPA_ENC_TKIP, "TKIP", 0 },
3414 { WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE, "NONE", 0 },
3415 { WPA_DRIVER_CAPA_ENC_WEP104, "WEP104", 1 },
3416 { WPA_DRIVER_CAPA_ENC_WEP40, "WEP40", 1 }
3417 };
3418
3419 static const struct cipher_info ciphers_group_mgmt[] = {
3420 { WPA_DRIVER_CAPA_ENC_BIP, "AES-128-CMAC", 1 },
3421 { WPA_DRIVER_CAPA_ENC_BIP_GMAC_128, "BIP-GMAC-128", 1 },
3422 { WPA_DRIVER_CAPA_ENC_BIP_GMAC_256, "BIP-GMAC-256", 1 },
3423 { WPA_DRIVER_CAPA_ENC_BIP_CMAC_256, "BIP-CMAC-256", 1 },
3424 };
3425
3426
ctrl_iface_get_capability_pairwise(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3427 static int ctrl_iface_get_capability_pairwise(int res, char *strict,
3428 struct wpa_driver_capa *capa,
3429 char *buf, size_t buflen)
3430 {
3431 int ret;
3432 char *pos, *end;
3433 size_t len;
3434 unsigned int i;
3435
3436 pos = buf;
3437 end = pos + buflen;
3438
3439 if (res < 0) {
3440 if (strict)
3441 return 0;
3442 len = os_strlcpy(buf, "CCMP TKIP NONE", buflen);
3443 if (len >= buflen)
3444 return -1;
3445 return len;
3446 }
3447
3448 for (i = 0; i < ARRAY_SIZE(ciphers); i++) {
3449 if (!ciphers[i].group_only && capa->enc & ciphers[i].capa) {
3450 ret = os_snprintf(pos, end - pos, "%s%s",
3451 pos == buf ? "" : " ",
3452 ciphers[i].name);
3453 if (os_snprintf_error(end - pos, ret))
3454 return pos - buf;
3455 pos += ret;
3456 }
3457 }
3458
3459 return pos - buf;
3460 }
3461
3462
ctrl_iface_get_capability_group(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3463 static int ctrl_iface_get_capability_group(int res, char *strict,
3464 struct wpa_driver_capa *capa,
3465 char *buf, size_t buflen)
3466 {
3467 int ret;
3468 char *pos, *end;
3469 size_t len;
3470 unsigned int i;
3471
3472 pos = buf;
3473 end = pos + buflen;
3474
3475 if (res < 0) {
3476 if (strict)
3477 return 0;
3478 len = os_strlcpy(buf, "CCMP TKIP WEP104 WEP40", buflen);
3479 if (len >= buflen)
3480 return -1;
3481 return len;
3482 }
3483
3484 for (i = 0; i < ARRAY_SIZE(ciphers); i++) {
3485 if (capa->enc & ciphers[i].capa) {
3486 ret = os_snprintf(pos, end - pos, "%s%s",
3487 pos == buf ? "" : " ",
3488 ciphers[i].name);
3489 if (os_snprintf_error(end - pos, ret))
3490 return pos - buf;
3491 pos += ret;
3492 }
3493 }
3494
3495 return pos - buf;
3496 }
3497
3498
ctrl_iface_get_capability_group_mgmt(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3499 static int ctrl_iface_get_capability_group_mgmt(int res, char *strict,
3500 struct wpa_driver_capa *capa,
3501 char *buf, size_t buflen)
3502 {
3503 int ret;
3504 char *pos, *end;
3505 unsigned int i;
3506
3507 pos = buf;
3508 end = pos + buflen;
3509
3510 if (res < 0)
3511 return 0;
3512
3513 for (i = 0; i < ARRAY_SIZE(ciphers_group_mgmt); i++) {
3514 if (capa->enc & ciphers_group_mgmt[i].capa) {
3515 ret = os_snprintf(pos, end - pos, "%s%s",
3516 pos == buf ? "" : " ",
3517 ciphers_group_mgmt[i].name);
3518 if (os_snprintf_error(end - pos, ret))
3519 return pos - buf;
3520 pos += ret;
3521 }
3522 }
3523
3524 return pos - buf;
3525 }
3526
3527
ctrl_iface_get_capability_key_mgmt(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3528 static int ctrl_iface_get_capability_key_mgmt(int res, char *strict,
3529 struct wpa_driver_capa *capa,
3530 char *buf, size_t buflen)
3531 {
3532 int ret;
3533 char *pos, *end;
3534 size_t len;
3535
3536 pos = buf;
3537 end = pos + buflen;
3538
3539 if (res < 0) {
3540 if (strict)
3541 return 0;
3542 len = os_strlcpy(buf, "WPA-PSK WPA-EAP IEEE8021X WPA-NONE "
3543 "NONE", buflen);
3544 if (len >= buflen)
3545 return -1;
3546 return len;
3547 }
3548
3549 ret = os_snprintf(pos, end - pos, "NONE IEEE8021X");
3550 if (os_snprintf_error(end - pos, ret))
3551 return pos - buf;
3552 pos += ret;
3553
3554 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA |
3555 WPA_DRIVER_CAPA_KEY_MGMT_WPA2)) {
3556 ret = os_snprintf(pos, end - pos, " WPA-EAP");
3557 if (os_snprintf_error(end - pos, ret))
3558 return pos - buf;
3559 pos += ret;
3560 }
3561
3562 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK |
3563 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK)) {
3564 ret = os_snprintf(pos, end - pos, " WPA-PSK");
3565 if (os_snprintf_error(end - pos, ret))
3566 return pos - buf;
3567 pos += ret;
3568 }
3569
3570 if (capa->key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE) {
3571 ret = os_snprintf(pos, end - pos, " WPA-NONE");
3572 if (os_snprintf_error(end - pos, ret))
3573 return pos - buf;
3574 pos += ret;
3575 }
3576
3577 #ifdef CONFIG_SUITEB
3578 if (capa->key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_SUITE_B) {
3579 ret = os_snprintf(pos, end - pos, " WPA-EAP-SUITE-B");
3580 if (os_snprintf_error(end - pos, ret))
3581 return pos - buf;
3582 pos += ret;
3583 }
3584 #endif /* CONFIG_SUITEB */
3585 #ifdef CONFIG_SUITEB192
3586 if (capa->key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_SUITE_B_192) {
3587 ret = os_snprintf(pos, end - pos, " WPA-EAP-SUITE-B-192");
3588 if (os_snprintf_error(end - pos, ret))
3589 return pos - buf;
3590 pos += ret;
3591 }
3592 #endif /* CONFIG_SUITEB192 */
3593
3594 return pos - buf;
3595 }
3596
3597
ctrl_iface_get_capability_proto(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3598 static int ctrl_iface_get_capability_proto(int res, char *strict,
3599 struct wpa_driver_capa *capa,
3600 char *buf, size_t buflen)
3601 {
3602 int ret;
3603 char *pos, *end;
3604 size_t len;
3605
3606 pos = buf;
3607 end = pos + buflen;
3608
3609 if (res < 0) {
3610 if (strict)
3611 return 0;
3612 len = os_strlcpy(buf, "RSN WPA", buflen);
3613 if (len >= buflen)
3614 return -1;
3615 return len;
3616 }
3617
3618 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
3619 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK)) {
3620 ret = os_snprintf(pos, end - pos, "%sRSN",
3621 pos == buf ? "" : " ");
3622 if (os_snprintf_error(end - pos, ret))
3623 return pos - buf;
3624 pos += ret;
3625 }
3626
3627 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA |
3628 WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK)) {
3629 ret = os_snprintf(pos, end - pos, "%sWPA",
3630 pos == buf ? "" : " ");
3631 if (os_snprintf_error(end - pos, ret))
3632 return pos - buf;
3633 pos += ret;
3634 }
3635
3636 return pos - buf;
3637 }
3638
3639
ctrl_iface_get_capability_auth_alg(struct wpa_supplicant * wpa_s,int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3640 static int ctrl_iface_get_capability_auth_alg(struct wpa_supplicant *wpa_s,
3641 int res, char *strict,
3642 struct wpa_driver_capa *capa,
3643 char *buf, size_t buflen)
3644 {
3645 int ret;
3646 char *pos, *end;
3647 size_t len;
3648
3649 pos = buf;
3650 end = pos + buflen;
3651
3652 if (res < 0) {
3653 if (strict)
3654 return 0;
3655 len = os_strlcpy(buf, "OPEN SHARED LEAP", buflen);
3656 if (len >= buflen)
3657 return -1;
3658 return len;
3659 }
3660
3661 if (capa->auth & (WPA_DRIVER_AUTH_OPEN)) {
3662 ret = os_snprintf(pos, end - pos, "%sOPEN",
3663 pos == buf ? "" : " ");
3664 if (os_snprintf_error(end - pos, ret))
3665 return pos - buf;
3666 pos += ret;
3667 }
3668
3669 if (capa->auth & (WPA_DRIVER_AUTH_SHARED)) {
3670 ret = os_snprintf(pos, end - pos, "%sSHARED",
3671 pos == buf ? "" : " ");
3672 if (os_snprintf_error(end - pos, ret))
3673 return pos - buf;
3674 pos += ret;
3675 }
3676
3677 if (capa->auth & (WPA_DRIVER_AUTH_LEAP)) {
3678 ret = os_snprintf(pos, end - pos, "%sLEAP",
3679 pos == buf ? "" : " ");
3680 if (os_snprintf_error(end - pos, ret))
3681 return pos - buf;
3682 pos += ret;
3683 }
3684
3685 #ifdef CONFIG_SAE
3686 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SAE) {
3687 ret = os_snprintf(pos, end - pos, "%sSAE",
3688 pos == buf ? "" : " ");
3689 if (os_snprintf_error(end - pos, ret))
3690 return pos - buf;
3691 pos += ret;
3692 }
3693 #endif /* CONFIG_SAE */
3694
3695 return pos - buf;
3696 }
3697
3698
ctrl_iface_get_capability_modes(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3699 static int ctrl_iface_get_capability_modes(int res, char *strict,
3700 struct wpa_driver_capa *capa,
3701 char *buf, size_t buflen)
3702 {
3703 int ret;
3704 char *pos, *end;
3705 size_t len;
3706
3707 pos = buf;
3708 end = pos + buflen;
3709
3710 if (res < 0) {
3711 if (strict)
3712 return 0;
3713 len = os_strlcpy(buf, "IBSS AP", buflen);
3714 if (len >= buflen)
3715 return -1;
3716 return len;
3717 }
3718
3719 if (capa->flags & WPA_DRIVER_FLAGS_IBSS) {
3720 ret = os_snprintf(pos, end - pos, "%sIBSS",
3721 pos == buf ? "" : " ");
3722 if (os_snprintf_error(end - pos, ret))
3723 return pos - buf;
3724 pos += ret;
3725 }
3726
3727 if (capa->flags & WPA_DRIVER_FLAGS_AP) {
3728 ret = os_snprintf(pos, end - pos, "%sAP",
3729 pos == buf ? "" : " ");
3730 if (os_snprintf_error(end - pos, ret))
3731 return pos - buf;
3732 pos += ret;
3733 }
3734
3735 #ifdef CONFIG_MESH
3736 if (capa->flags & WPA_DRIVER_FLAGS_MESH) {
3737 ret = os_snprintf(pos, end - pos, "%sMESH",
3738 pos == buf ? "" : " ");
3739 if (os_snprintf_error(end - pos, ret))
3740 return pos - buf;
3741 pos += ret;
3742 }
3743 #endif /* CONFIG_MESH */
3744
3745 return pos - buf;
3746 }
3747
3748
ctrl_iface_get_capability_channels(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)3749 static int ctrl_iface_get_capability_channels(struct wpa_supplicant *wpa_s,
3750 char *buf, size_t buflen)
3751 {
3752 struct hostapd_channel_data *chnl;
3753 int ret, i, j;
3754 char *pos, *end, *hmode;
3755
3756 pos = buf;
3757 end = pos + buflen;
3758
3759 for (j = 0; j < wpa_s->hw.num_modes; j++) {
3760 switch (wpa_s->hw.modes[j].mode) {
3761 case HOSTAPD_MODE_IEEE80211B:
3762 hmode = "B";
3763 break;
3764 case HOSTAPD_MODE_IEEE80211G:
3765 hmode = "G";
3766 break;
3767 case HOSTAPD_MODE_IEEE80211A:
3768 hmode = "A";
3769 break;
3770 case HOSTAPD_MODE_IEEE80211AD:
3771 hmode = "AD";
3772 break;
3773 default:
3774 continue;
3775 }
3776 ret = os_snprintf(pos, end - pos, "Mode[%s] Channels:", hmode);
3777 if (os_snprintf_error(end - pos, ret))
3778 return pos - buf;
3779 pos += ret;
3780 chnl = wpa_s->hw.modes[j].channels;
3781 for (i = 0; i < wpa_s->hw.modes[j].num_channels; i++) {
3782 if (chnl[i].flag & HOSTAPD_CHAN_DISABLED)
3783 continue;
3784 ret = os_snprintf(pos, end - pos, " %d", chnl[i].chan);
3785 if (os_snprintf_error(end - pos, ret))
3786 return pos - buf;
3787 pos += ret;
3788 }
3789 ret = os_snprintf(pos, end - pos, "\n");
3790 if (os_snprintf_error(end - pos, ret))
3791 return pos - buf;
3792 pos += ret;
3793 }
3794
3795 return pos - buf;
3796 }
3797
3798
ctrl_iface_get_capability_freq(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)3799 static int ctrl_iface_get_capability_freq(struct wpa_supplicant *wpa_s,
3800 char *buf, size_t buflen)
3801 {
3802 struct hostapd_channel_data *chnl;
3803 int ret, i, j;
3804 char *pos, *end, *hmode;
3805
3806 pos = buf;
3807 end = pos + buflen;
3808
3809 for (j = 0; j < wpa_s->hw.num_modes; j++) {
3810 switch (wpa_s->hw.modes[j].mode) {
3811 case HOSTAPD_MODE_IEEE80211B:
3812 hmode = "B";
3813 break;
3814 case HOSTAPD_MODE_IEEE80211G:
3815 hmode = "G";
3816 break;
3817 case HOSTAPD_MODE_IEEE80211A:
3818 hmode = "A";
3819 break;
3820 case HOSTAPD_MODE_IEEE80211AD:
3821 hmode = "AD";
3822 break;
3823 default:
3824 continue;
3825 }
3826 ret = os_snprintf(pos, end - pos, "Mode[%s] Channels:\n",
3827 hmode);
3828 if (os_snprintf_error(end - pos, ret))
3829 return pos - buf;
3830 pos += ret;
3831 chnl = wpa_s->hw.modes[j].channels;
3832 for (i = 0; i < wpa_s->hw.modes[j].num_channels; i++) {
3833 if (chnl[i].flag & HOSTAPD_CHAN_DISABLED)
3834 continue;
3835 ret = os_snprintf(pos, end - pos, " %d = %d MHz%s%s\n",
3836 chnl[i].chan, chnl[i].freq,
3837 chnl[i].flag & HOSTAPD_CHAN_NO_IR ?
3838 " (NO_IR)" : "",
3839 chnl[i].flag & HOSTAPD_CHAN_RADAR ?
3840 " (DFS)" : "");
3841
3842 if (os_snprintf_error(end - pos, ret))
3843 return pos - buf;
3844 pos += ret;
3845 }
3846 ret = os_snprintf(pos, end - pos, "\n");
3847 if (os_snprintf_error(end - pos, ret))
3848 return pos - buf;
3849 pos += ret;
3850 }
3851
3852 return pos - buf;
3853 }
3854
3855
wpa_supplicant_ctrl_iface_get_capability(struct wpa_supplicant * wpa_s,const char * _field,char * buf,size_t buflen)3856 static int wpa_supplicant_ctrl_iface_get_capability(
3857 struct wpa_supplicant *wpa_s, const char *_field, char *buf,
3858 size_t buflen)
3859 {
3860 struct wpa_driver_capa capa;
3861 int res;
3862 char *strict;
3863 char field[30];
3864 size_t len;
3865
3866 /* Determine whether or not strict checking was requested */
3867 len = os_strlcpy(field, _field, sizeof(field));
3868 if (len >= sizeof(field))
3869 return -1;
3870 strict = os_strchr(field, ' ');
3871 if (strict != NULL) {
3872 *strict++ = '\0';
3873 if (os_strcmp(strict, "strict") != 0)
3874 return -1;
3875 }
3876
3877 wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_CAPABILITY '%s' %s",
3878 field, strict ? strict : "");
3879
3880 if (os_strcmp(field, "eap") == 0) {
3881 return eap_get_names(buf, buflen);
3882 }
3883
3884 res = wpa_drv_get_capa(wpa_s, &capa);
3885
3886 if (os_strcmp(field, "pairwise") == 0)
3887 return ctrl_iface_get_capability_pairwise(res, strict, &capa,
3888 buf, buflen);
3889
3890 if (os_strcmp(field, "group") == 0)
3891 return ctrl_iface_get_capability_group(res, strict, &capa,
3892 buf, buflen);
3893
3894 if (os_strcmp(field, "group_mgmt") == 0)
3895 return ctrl_iface_get_capability_group_mgmt(res, strict, &capa,
3896 buf, buflen);
3897
3898 if (os_strcmp(field, "key_mgmt") == 0)
3899 return ctrl_iface_get_capability_key_mgmt(res, strict, &capa,
3900 buf, buflen);
3901
3902 if (os_strcmp(field, "proto") == 0)
3903 return ctrl_iface_get_capability_proto(res, strict, &capa,
3904 buf, buflen);
3905
3906 if (os_strcmp(field, "auth_alg") == 0)
3907 return ctrl_iface_get_capability_auth_alg(wpa_s, res, strict,
3908 &capa, buf, buflen);
3909
3910 if (os_strcmp(field, "modes") == 0)
3911 return ctrl_iface_get_capability_modes(res, strict, &capa,
3912 buf, buflen);
3913
3914 if (os_strcmp(field, "channels") == 0)
3915 return ctrl_iface_get_capability_channels(wpa_s, buf, buflen);
3916
3917 if (os_strcmp(field, "freq") == 0)
3918 return ctrl_iface_get_capability_freq(wpa_s, buf, buflen);
3919
3920 #ifdef CONFIG_TDLS
3921 if (os_strcmp(field, "tdls") == 0)
3922 return ctrl_iface_get_capability_tdls(wpa_s, buf, buflen);
3923 #endif /* CONFIG_TDLS */
3924
3925 #ifdef CONFIG_ERP
3926 if (os_strcmp(field, "erp") == 0) {
3927 res = os_snprintf(buf, buflen, "ERP");
3928 if (os_snprintf_error(buflen, res))
3929 return -1;
3930 return res;
3931 }
3932 #endif /* CONFIG_EPR */
3933
3934 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Unknown GET_CAPABILITY field '%s'",
3935 field);
3936
3937 return -1;
3938 }
3939
3940
3941 #ifdef CONFIG_INTERWORKING
anqp_add_hex(char * pos,char * end,const char * title,struct wpabuf * data)3942 static char * anqp_add_hex(char *pos, char *end, const char *title,
3943 struct wpabuf *data)
3944 {
3945 char *start = pos;
3946 size_t i;
3947 int ret;
3948 const u8 *d;
3949
3950 if (data == NULL)
3951 return start;
3952
3953 ret = os_snprintf(pos, end - pos, "%s=", title);
3954 if (os_snprintf_error(end - pos, ret))
3955 return start;
3956 pos += ret;
3957
3958 d = wpabuf_head_u8(data);
3959 for (i = 0; i < wpabuf_len(data); i++) {
3960 ret = os_snprintf(pos, end - pos, "%02x", *d++);
3961 if (os_snprintf_error(end - pos, ret))
3962 return start;
3963 pos += ret;
3964 }
3965
3966 ret = os_snprintf(pos, end - pos, "\n");
3967 if (os_snprintf_error(end - pos, ret))
3968 return start;
3969 pos += ret;
3970
3971 return pos;
3972 }
3973 #endif /* CONFIG_INTERWORKING */
3974
3975
print_bss_info(struct wpa_supplicant * wpa_s,struct wpa_bss * bss,unsigned long mask,char * buf,size_t buflen)3976 static int print_bss_info(struct wpa_supplicant *wpa_s, struct wpa_bss *bss,
3977 unsigned long mask, char *buf, size_t buflen)
3978 {
3979 size_t i;
3980 int ret;
3981 char *pos, *end;
3982 const u8 *ie, *ie2, *osen_ie;
3983
3984 pos = buf;
3985 end = buf + buflen;
3986
3987 if (mask & WPA_BSS_MASK_ID) {
3988 ret = os_snprintf(pos, end - pos, "id=%u\n", bss->id);
3989 if (os_snprintf_error(end - pos, ret))
3990 return 0;
3991 pos += ret;
3992 }
3993
3994 if (mask & WPA_BSS_MASK_BSSID) {
3995 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n",
3996 MAC2STR(bss->bssid));
3997 if (os_snprintf_error(end - pos, ret))
3998 return 0;
3999 pos += ret;
4000 }
4001
4002 if (mask & WPA_BSS_MASK_FREQ) {
4003 ret = os_snprintf(pos, end - pos, "freq=%d\n", bss->freq);
4004 if (os_snprintf_error(end - pos, ret))
4005 return 0;
4006 pos += ret;
4007 }
4008
4009 if (mask & WPA_BSS_MASK_BEACON_INT) {
4010 ret = os_snprintf(pos, end - pos, "beacon_int=%d\n",
4011 bss->beacon_int);
4012 if (os_snprintf_error(end - pos, ret))
4013 return 0;
4014 pos += ret;
4015 }
4016
4017 if (mask & WPA_BSS_MASK_CAPABILITIES) {
4018 ret = os_snprintf(pos, end - pos, "capabilities=0x%04x\n",
4019 bss->caps);
4020 if (os_snprintf_error(end - pos, ret))
4021 return 0;
4022 pos += ret;
4023 }
4024
4025 if (mask & WPA_BSS_MASK_QUAL) {
4026 ret = os_snprintf(pos, end - pos, "qual=%d\n", bss->qual);
4027 if (os_snprintf_error(end - pos, ret))
4028 return 0;
4029 pos += ret;
4030 }
4031
4032 if (mask & WPA_BSS_MASK_NOISE) {
4033 ret = os_snprintf(pos, end - pos, "noise=%d\n", bss->noise);
4034 if (os_snprintf_error(end - pos, ret))
4035 return 0;
4036 pos += ret;
4037 }
4038
4039 if (mask & WPA_BSS_MASK_LEVEL) {
4040 ret = os_snprintf(pos, end - pos, "level=%d\n", bss->level);
4041 if (os_snprintf_error(end - pos, ret))
4042 return 0;
4043 pos += ret;
4044 }
4045
4046 if (mask & WPA_BSS_MASK_TSF) {
4047 ret = os_snprintf(pos, end - pos, "tsf=%016llu\n",
4048 (unsigned long long) bss->tsf);
4049 if (os_snprintf_error(end - pos, ret))
4050 return 0;
4051 pos += ret;
4052 }
4053
4054 if (mask & WPA_BSS_MASK_AGE) {
4055 struct os_reltime now;
4056
4057 os_get_reltime(&now);
4058 ret = os_snprintf(pos, end - pos, "age=%d\n",
4059 (int) (now.sec - bss->last_update.sec));
4060 if (os_snprintf_error(end - pos, ret))
4061 return 0;
4062 pos += ret;
4063 }
4064
4065 if (mask & WPA_BSS_MASK_IE) {
4066 ret = os_snprintf(pos, end - pos, "ie=");
4067 if (os_snprintf_error(end - pos, ret))
4068 return 0;
4069 pos += ret;
4070
4071 ie = (const u8 *) (bss + 1);
4072 for (i = 0; i < bss->ie_len; i++) {
4073 ret = os_snprintf(pos, end - pos, "%02x", *ie++);
4074 if (os_snprintf_error(end - pos, ret))
4075 return 0;
4076 pos += ret;
4077 }
4078
4079 ret = os_snprintf(pos, end - pos, "\n");
4080 if (os_snprintf_error(end - pos, ret))
4081 return 0;
4082 pos += ret;
4083 }
4084
4085 if (mask & WPA_BSS_MASK_FLAGS) {
4086 ret = os_snprintf(pos, end - pos, "flags=");
4087 if (os_snprintf_error(end - pos, ret))
4088 return 0;
4089 pos += ret;
4090
4091 ie = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
4092 if (ie)
4093 pos = wpa_supplicant_ie_txt(pos, end, "WPA", ie,
4094 2 + ie[1]);
4095 ie2 = wpa_bss_get_ie(bss, WLAN_EID_RSN);
4096 if (ie2)
4097 pos = wpa_supplicant_ie_txt(pos, end, "WPA2", ie2,
4098 2 + ie2[1]);
4099 osen_ie = wpa_bss_get_vendor_ie(bss, OSEN_IE_VENDOR_TYPE);
4100 if (osen_ie)
4101 pos = wpa_supplicant_ie_txt(pos, end, "OSEN",
4102 osen_ie, 2 + osen_ie[1]);
4103 pos = wpa_supplicant_wps_ie_txt(wpa_s, pos, end, bss);
4104 if (!ie && !ie2 && !osen_ie &&
4105 (bss->caps & IEEE80211_CAP_PRIVACY)) {
4106 ret = os_snprintf(pos, end - pos, "[WEP]");
4107 if (os_snprintf_error(end - pos, ret))
4108 return 0;
4109 pos += ret;
4110 }
4111 if (bss_is_dmg(bss)) {
4112 const char *s;
4113 ret = os_snprintf(pos, end - pos, "[DMG]");
4114 if (os_snprintf_error(end - pos, ret))
4115 return 0;
4116 pos += ret;
4117 switch (bss->caps & IEEE80211_CAP_DMG_MASK) {
4118 case IEEE80211_CAP_DMG_IBSS:
4119 s = "[IBSS]";
4120 break;
4121 case IEEE80211_CAP_DMG_AP:
4122 s = "[ESS]";
4123 break;
4124 case IEEE80211_CAP_DMG_PBSS:
4125 s = "[PBSS]";
4126 break;
4127 default:
4128 s = "";
4129 break;
4130 }
4131 ret = os_snprintf(pos, end - pos, "%s", s);
4132 if (os_snprintf_error(end - pos, ret))
4133 return 0;
4134 pos += ret;
4135 } else {
4136 if (bss->caps & IEEE80211_CAP_IBSS) {
4137 ret = os_snprintf(pos, end - pos, "[IBSS]");
4138 if (os_snprintf_error(end - pos, ret))
4139 return 0;
4140 pos += ret;
4141 }
4142 if (bss->caps & IEEE80211_CAP_ESS) {
4143 ret = os_snprintf(pos, end - pos, "[ESS]");
4144 if (os_snprintf_error(end - pos, ret))
4145 return 0;
4146 pos += ret;
4147 }
4148 }
4149 if (wpa_bss_get_vendor_ie(bss, P2P_IE_VENDOR_TYPE) ||
4150 wpa_bss_get_vendor_ie_beacon(bss, P2P_IE_VENDOR_TYPE)) {
4151 ret = os_snprintf(pos, end - pos, "[P2P]");
4152 if (os_snprintf_error(end - pos, ret))
4153 return 0;
4154 pos += ret;
4155 }
4156 #ifdef CONFIG_HS20
4157 if (wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE)) {
4158 ret = os_snprintf(pos, end - pos, "[HS20]");
4159 if (os_snprintf_error(end - pos, ret))
4160 return 0;
4161 pos += ret;
4162 }
4163 #endif /* CONFIG_HS20 */
4164
4165 ret = os_snprintf(pos, end - pos, "\n");
4166 if (os_snprintf_error(end - pos, ret))
4167 return 0;
4168 pos += ret;
4169 }
4170
4171 if (mask & WPA_BSS_MASK_SSID) {
4172 ret = os_snprintf(pos, end - pos, "ssid=%s\n",
4173 wpa_ssid_txt(bss->ssid, bss->ssid_len));
4174 if (os_snprintf_error(end - pos, ret))
4175 return 0;
4176 pos += ret;
4177 }
4178
4179 #ifdef CONFIG_WPS
4180 if (mask & WPA_BSS_MASK_WPS_SCAN) {
4181 ie = (const u8 *) (bss + 1);
4182 ret = wpas_wps_scan_result_text(ie, bss->ie_len, pos, end);
4183 if (ret < 0 || ret >= end - pos)
4184 return 0;
4185 pos += ret;
4186 }
4187 #endif /* CONFIG_WPS */
4188
4189 #ifdef CONFIG_P2P
4190 if (mask & WPA_BSS_MASK_P2P_SCAN) {
4191 ie = (const u8 *) (bss + 1);
4192 ret = wpas_p2p_scan_result_text(ie, bss->ie_len, pos, end);
4193 if (ret < 0 || ret >= end - pos)
4194 return 0;
4195 pos += ret;
4196 }
4197 #endif /* CONFIG_P2P */
4198
4199 #ifdef CONFIG_WIFI_DISPLAY
4200 if (mask & WPA_BSS_MASK_WIFI_DISPLAY) {
4201 struct wpabuf *wfd;
4202 ie = (const u8 *) (bss + 1);
4203 wfd = ieee802_11_vendor_ie_concat(ie, bss->ie_len,
4204 WFD_IE_VENDOR_TYPE);
4205 if (wfd) {
4206 ret = os_snprintf(pos, end - pos, "wfd_subelems=");
4207 if (os_snprintf_error(end - pos, ret)) {
4208 wpabuf_free(wfd);
4209 return 0;
4210 }
4211 pos += ret;
4212
4213 pos += wpa_snprintf_hex(pos, end - pos,
4214 wpabuf_head(wfd),
4215 wpabuf_len(wfd));
4216 wpabuf_free(wfd);
4217
4218 ret = os_snprintf(pos, end - pos, "\n");
4219 if (os_snprintf_error(end - pos, ret))
4220 return 0;
4221 pos += ret;
4222 }
4223 }
4224 #endif /* CONFIG_WIFI_DISPLAY */
4225
4226 #ifdef CONFIG_INTERWORKING
4227 if ((mask & WPA_BSS_MASK_INTERNETW) && bss->anqp) {
4228 struct wpa_bss_anqp *anqp = bss->anqp;
4229 pos = anqp_add_hex(pos, end, "anqp_capability_list",
4230 anqp->capability_list);
4231 pos = anqp_add_hex(pos, end, "anqp_venue_name",
4232 anqp->venue_name);
4233 pos = anqp_add_hex(pos, end, "anqp_network_auth_type",
4234 anqp->network_auth_type);
4235 pos = anqp_add_hex(pos, end, "anqp_roaming_consortium",
4236 anqp->roaming_consortium);
4237 pos = anqp_add_hex(pos, end, "anqp_ip_addr_type_availability",
4238 anqp->ip_addr_type_availability);
4239 pos = anqp_add_hex(pos, end, "anqp_nai_realm",
4240 anqp->nai_realm);
4241 pos = anqp_add_hex(pos, end, "anqp_3gpp", anqp->anqp_3gpp);
4242 pos = anqp_add_hex(pos, end, "anqp_domain_name",
4243 anqp->domain_name);
4244 #ifdef CONFIG_HS20
4245 pos = anqp_add_hex(pos, end, "hs20_capability_list",
4246 anqp->hs20_capability_list);
4247 pos = anqp_add_hex(pos, end, "hs20_operator_friendly_name",
4248 anqp->hs20_operator_friendly_name);
4249 pos = anqp_add_hex(pos, end, "hs20_wan_metrics",
4250 anqp->hs20_wan_metrics);
4251 pos = anqp_add_hex(pos, end, "hs20_connection_capability",
4252 anqp->hs20_connection_capability);
4253 pos = anqp_add_hex(pos, end, "hs20_operating_class",
4254 anqp->hs20_operating_class);
4255 pos = anqp_add_hex(pos, end, "hs20_osu_providers_list",
4256 anqp->hs20_osu_providers_list);
4257 #endif /* CONFIG_HS20 */
4258 }
4259 #endif /* CONFIG_INTERWORKING */
4260
4261 #ifdef CONFIG_MESH
4262 if (mask & WPA_BSS_MASK_MESH_SCAN) {
4263 ie = (const u8 *) (bss + 1);
4264 ret = wpas_mesh_scan_result_text(ie, bss->ie_len, pos, end);
4265 if (ret < 0 || ret >= end - pos)
4266 return 0;
4267 pos += ret;
4268 }
4269 #endif /* CONFIG_MESH */
4270
4271 if (mask & WPA_BSS_MASK_SNR) {
4272 ret = os_snprintf(pos, end - pos, "snr=%d\n", bss->snr);
4273 if (os_snprintf_error(end - pos, ret))
4274 return 0;
4275 pos += ret;
4276 }
4277
4278 if (mask & WPA_BSS_MASK_EST_THROUGHPUT) {
4279 ret = os_snprintf(pos, end - pos, "est_throughput=%d\n",
4280 bss->est_throughput);
4281 if (os_snprintf_error(end - pos, ret))
4282 return 0;
4283 pos += ret;
4284 }
4285
4286 if (mask & WPA_BSS_MASK_DELIM) {
4287 ret = os_snprintf(pos, end - pos, "====\n");
4288 if (os_snprintf_error(end - pos, ret))
4289 return 0;
4290 pos += ret;
4291 }
4292
4293 return pos - buf;
4294 }
4295
4296
wpa_supplicant_ctrl_iface_bss(struct wpa_supplicant * wpa_s,const char * cmd,char * buf,size_t buflen)4297 static int wpa_supplicant_ctrl_iface_bss(struct wpa_supplicant *wpa_s,
4298 const char *cmd, char *buf,
4299 size_t buflen)
4300 {
4301 u8 bssid[ETH_ALEN];
4302 size_t i;
4303 struct wpa_bss *bss;
4304 struct wpa_bss *bsslast = NULL;
4305 struct dl_list *next;
4306 int ret = 0;
4307 int len;
4308 char *ctmp, *end = buf + buflen;
4309 unsigned long mask = WPA_BSS_MASK_ALL;
4310
4311 if (os_strncmp(cmd, "RANGE=", 6) == 0) {
4312 if (os_strncmp(cmd + 6, "ALL", 3) == 0) {
4313 bss = dl_list_first(&wpa_s->bss_id, struct wpa_bss,
4314 list_id);
4315 bsslast = dl_list_last(&wpa_s->bss_id, struct wpa_bss,
4316 list_id);
4317 } else { /* N1-N2 */
4318 unsigned int id1, id2;
4319
4320 if ((ctmp = os_strchr(cmd + 6, '-')) == NULL) {
4321 wpa_printf(MSG_INFO, "Wrong BSS range "
4322 "format");
4323 return 0;
4324 }
4325
4326 if (*(cmd + 6) == '-')
4327 id1 = 0;
4328 else
4329 id1 = atoi(cmd + 6);
4330 ctmp++;
4331 if (*ctmp >= '0' && *ctmp <= '9')
4332 id2 = atoi(ctmp);
4333 else
4334 id2 = (unsigned int) -1;
4335 bss = wpa_bss_get_id_range(wpa_s, id1, id2);
4336 if (id2 == (unsigned int) -1)
4337 bsslast = dl_list_last(&wpa_s->bss_id,
4338 struct wpa_bss,
4339 list_id);
4340 else {
4341 bsslast = wpa_bss_get_id(wpa_s, id2);
4342 if (bsslast == NULL && bss && id2 > id1) {
4343 struct wpa_bss *tmp = bss;
4344 for (;;) {
4345 next = tmp->list_id.next;
4346 if (next == &wpa_s->bss_id)
4347 break;
4348 tmp = dl_list_entry(
4349 next, struct wpa_bss,
4350 list_id);
4351 if (tmp->id > id2)
4352 break;
4353 bsslast = tmp;
4354 }
4355 }
4356 }
4357 }
4358 } else if (os_strncmp(cmd, "FIRST", 5) == 0)
4359 bss = dl_list_first(&wpa_s->bss_id, struct wpa_bss, list_id);
4360 else if (os_strncmp(cmd, "LAST", 4) == 0)
4361 bss = dl_list_last(&wpa_s->bss_id, struct wpa_bss, list_id);
4362 else if (os_strncmp(cmd, "ID-", 3) == 0) {
4363 i = atoi(cmd + 3);
4364 bss = wpa_bss_get_id(wpa_s, i);
4365 } else if (os_strncmp(cmd, "NEXT-", 5) == 0) {
4366 i = atoi(cmd + 5);
4367 bss = wpa_bss_get_id(wpa_s, i);
4368 if (bss) {
4369 next = bss->list_id.next;
4370 if (next == &wpa_s->bss_id)
4371 bss = NULL;
4372 else
4373 bss = dl_list_entry(next, struct wpa_bss,
4374 list_id);
4375 }
4376 #ifdef CONFIG_P2P
4377 } else if (os_strncmp(cmd, "p2p_dev_addr=", 13) == 0) {
4378 if (hwaddr_aton(cmd + 13, bssid) == 0)
4379 bss = wpa_bss_get_p2p_dev_addr(wpa_s, bssid);
4380 else
4381 bss = NULL;
4382 #endif /* CONFIG_P2P */
4383 } else if (hwaddr_aton(cmd, bssid) == 0)
4384 bss = wpa_bss_get_bssid(wpa_s, bssid);
4385 else {
4386 struct wpa_bss *tmp;
4387 i = atoi(cmd);
4388 bss = NULL;
4389 dl_list_for_each(tmp, &wpa_s->bss_id, struct wpa_bss, list_id)
4390 {
4391 if (i-- == 0) {
4392 bss = tmp;
4393 break;
4394 }
4395 }
4396 }
4397
4398 if ((ctmp = os_strstr(cmd, "MASK=")) != NULL) {
4399 mask = strtoul(ctmp + 5, NULL, 0x10);
4400 if (mask == 0)
4401 mask = WPA_BSS_MASK_ALL;
4402 }
4403
4404 if (bss == NULL)
4405 return 0;
4406
4407 if (bsslast == NULL)
4408 bsslast = bss;
4409 do {
4410 len = print_bss_info(wpa_s, bss, mask, buf, buflen);
4411 ret += len;
4412 buf += len;
4413 buflen -= len;
4414 if (bss == bsslast) {
4415 if ((mask & WPA_BSS_MASK_DELIM) && len &&
4416 (bss == dl_list_last(&wpa_s->bss_id,
4417 struct wpa_bss, list_id))) {
4418 int res;
4419
4420 res = os_snprintf(buf - 5, end - buf + 5,
4421 "####\n");
4422 if (os_snprintf_error(end - buf + 5, res)) {
4423 wpa_printf(MSG_DEBUG,
4424 "Could not add end delim");
4425 }
4426 }
4427 break;
4428 }
4429 next = bss->list_id.next;
4430 if (next == &wpa_s->bss_id)
4431 break;
4432 bss = dl_list_entry(next, struct wpa_bss, list_id);
4433 } while (bss && len);
4434
4435 return ret;
4436 }
4437
4438
wpa_supplicant_ctrl_iface_ap_scan(struct wpa_supplicant * wpa_s,char * cmd)4439 static int wpa_supplicant_ctrl_iface_ap_scan(
4440 struct wpa_supplicant *wpa_s, char *cmd)
4441 {
4442 int ap_scan = atoi(cmd);
4443 return wpa_supplicant_set_ap_scan(wpa_s, ap_scan);
4444 }
4445
4446
wpa_supplicant_ctrl_iface_scan_interval(struct wpa_supplicant * wpa_s,char * cmd)4447 static int wpa_supplicant_ctrl_iface_scan_interval(
4448 struct wpa_supplicant *wpa_s, char *cmd)
4449 {
4450 int scan_int = atoi(cmd);
4451 return wpa_supplicant_set_scan_interval(wpa_s, scan_int);
4452 }
4453
4454
wpa_supplicant_ctrl_iface_bss_expire_age(struct wpa_supplicant * wpa_s,char * cmd)4455 static int wpa_supplicant_ctrl_iface_bss_expire_age(
4456 struct wpa_supplicant *wpa_s, char *cmd)
4457 {
4458 int expire_age = atoi(cmd);
4459 return wpa_supplicant_set_bss_expiration_age(wpa_s, expire_age);
4460 }
4461
4462
wpa_supplicant_ctrl_iface_bss_expire_count(struct wpa_supplicant * wpa_s,char * cmd)4463 static int wpa_supplicant_ctrl_iface_bss_expire_count(
4464 struct wpa_supplicant *wpa_s, char *cmd)
4465 {
4466 int expire_count = atoi(cmd);
4467 return wpa_supplicant_set_bss_expiration_count(wpa_s, expire_count);
4468 }
4469
4470
wpa_supplicant_ctrl_iface_bss_flush(struct wpa_supplicant * wpa_s,char * cmd)4471 static void wpa_supplicant_ctrl_iface_bss_flush(
4472 struct wpa_supplicant *wpa_s, char *cmd)
4473 {
4474 int flush_age = atoi(cmd);
4475
4476 if (flush_age == 0)
4477 wpa_bss_flush(wpa_s);
4478 else
4479 wpa_bss_flush_by_age(wpa_s, flush_age);
4480 }
4481
4482
4483 #ifdef CONFIG_TESTING_OPTIONS
wpa_supplicant_ctrl_iface_drop_sa(struct wpa_supplicant * wpa_s)4484 static void wpa_supplicant_ctrl_iface_drop_sa(struct wpa_supplicant *wpa_s)
4485 {
4486 wpa_printf(MSG_DEBUG, "Dropping SA without deauthentication");
4487 /* MLME-DELETEKEYS.request */
4488 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 0, 0, NULL, 0, NULL, 0);
4489 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 1, 0, NULL, 0, NULL, 0);
4490 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 2, 0, NULL, 0, NULL, 0);
4491 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 3, 0, NULL, 0, NULL, 0);
4492 #ifdef CONFIG_IEEE80211W
4493 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 4, 0, NULL, 0, NULL, 0);
4494 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 5, 0, NULL, 0, NULL, 0);
4495 #endif /* CONFIG_IEEE80211W */
4496
4497 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, wpa_s->bssid, 0, 0, NULL, 0, NULL,
4498 0);
4499 /* MLME-SETPROTECTION.request(None) */
4500 wpa_drv_mlme_setprotection(wpa_s, wpa_s->bssid,
4501 MLME_SETPROTECTION_PROTECT_TYPE_NONE,
4502 MLME_SETPROTECTION_KEY_TYPE_PAIRWISE);
4503 wpa_sm_drop_sa(wpa_s->wpa);
4504 }
4505 #endif /* CONFIG_TESTING_OPTIONS */
4506
4507
wpa_supplicant_ctrl_iface_roam(struct wpa_supplicant * wpa_s,char * addr)4508 static int wpa_supplicant_ctrl_iface_roam(struct wpa_supplicant *wpa_s,
4509 char *addr)
4510 {
4511 #ifdef CONFIG_NO_SCAN_PROCESSING
4512 return -1;
4513 #else /* CONFIG_NO_SCAN_PROCESSING */
4514 u8 bssid[ETH_ALEN];
4515 struct wpa_bss *bss;
4516 struct wpa_ssid *ssid = wpa_s->current_ssid;
4517
4518 if (hwaddr_aton(addr, bssid)) {
4519 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: invalid "
4520 "address '%s'", addr);
4521 return -1;
4522 }
4523
4524 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM " MACSTR, MAC2STR(bssid));
4525
4526 if (!ssid) {
4527 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: No network "
4528 "configuration known for the target AP");
4529 return -1;
4530 }
4531
4532 bss = wpa_bss_get(wpa_s, bssid, ssid->ssid, ssid->ssid_len);
4533 if (!bss) {
4534 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: Target AP not found "
4535 "from BSS table");
4536 return -1;
4537 }
4538
4539 /*
4540 * TODO: Find best network configuration block from configuration to
4541 * allow roaming to other networks
4542 */
4543
4544 wpa_s->reassociate = 1;
4545 wpa_supplicant_connect(wpa_s, bss, ssid);
4546
4547 return 0;
4548 #endif /* CONFIG_NO_SCAN_PROCESSING */
4549 }
4550
4551
4552 #ifdef CONFIG_P2P
p2p_ctrl_find(struct wpa_supplicant * wpa_s,char * cmd)4553 static int p2p_ctrl_find(struct wpa_supplicant *wpa_s, char *cmd)
4554 {
4555 unsigned int timeout = atoi(cmd);
4556 enum p2p_discovery_type type = P2P_FIND_START_WITH_FULL;
4557 u8 dev_id[ETH_ALEN], *_dev_id = NULL;
4558 u8 dev_type[WPS_DEV_TYPE_LEN], *_dev_type = NULL;
4559 char *pos;
4560 unsigned int search_delay;
4561 const char *_seek[P2P_MAX_QUERY_HASH + 1], **seek = NULL;
4562 u8 seek_count = 0;
4563 int freq = 0;
4564
4565 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
4566 wpa_dbg(wpa_s, MSG_INFO,
4567 "Reject P2P_FIND since interface is disabled");
4568 return -1;
4569 }
4570 if (os_strstr(cmd, "type=social"))
4571 type = P2P_FIND_ONLY_SOCIAL;
4572 else if (os_strstr(cmd, "type=progressive"))
4573 type = P2P_FIND_PROGRESSIVE;
4574
4575 pos = os_strstr(cmd, "dev_id=");
4576 if (pos) {
4577 pos += 7;
4578 if (hwaddr_aton(pos, dev_id))
4579 return -1;
4580 _dev_id = dev_id;
4581 }
4582
4583 pos = os_strstr(cmd, "dev_type=");
4584 if (pos) {
4585 pos += 9;
4586 if (wps_dev_type_str2bin(pos, dev_type) < 0)
4587 return -1;
4588 _dev_type = dev_type;
4589 }
4590
4591 pos = os_strstr(cmd, "delay=");
4592 if (pos) {
4593 pos += 6;
4594 search_delay = atoi(pos);
4595 } else
4596 search_delay = wpas_p2p_search_delay(wpa_s);
4597
4598 pos = os_strstr(cmd, "freq=");
4599 if (pos) {
4600 pos += 5;
4601 freq = atoi(pos);
4602 if (freq <= 0)
4603 return -1;
4604 }
4605
4606 /* Must be searched for last, because it adds nul termination */
4607 pos = os_strstr(cmd, " seek=");
4608 if (pos)
4609 pos += 6;
4610 while (pos && seek_count < P2P_MAX_QUERY_HASH + 1) {
4611 char *term;
4612
4613 _seek[seek_count++] = pos;
4614 seek = _seek;
4615 term = os_strchr(pos, ' ');
4616 if (!term)
4617 break;
4618 *term = '\0';
4619 pos = os_strstr(term + 1, "seek=");
4620 if (pos)
4621 pos += 5;
4622 }
4623 if (seek_count > P2P_MAX_QUERY_HASH) {
4624 seek[0] = NULL;
4625 seek_count = 1;
4626 }
4627
4628 return wpas_p2p_find(wpa_s, timeout, type, _dev_type != NULL, _dev_type,
4629 _dev_id, search_delay, seek_count, seek, freq);
4630 }
4631
4632
p2p_parse_asp_provision_cmd(const char * cmd)4633 static struct p2ps_provision * p2p_parse_asp_provision_cmd(const char *cmd)
4634 {
4635 struct p2ps_provision *p2ps_prov;
4636 char *pos;
4637 size_t info_len = 0;
4638 char *info = NULL;
4639 u8 role = P2PS_SETUP_NONE;
4640 long long unsigned val;
4641
4642 pos = os_strstr(cmd, "info=");
4643 if (pos) {
4644 pos += 5;
4645 info_len = os_strlen(pos);
4646
4647 if (info_len) {
4648 info = os_malloc(info_len + 1);
4649 if (info) {
4650 info_len = utf8_unescape(pos, info_len,
4651 info, info_len + 1);
4652 } else
4653 info_len = 0;
4654 }
4655 }
4656
4657 p2ps_prov = os_zalloc(sizeof(struct p2ps_provision) + info_len + 1);
4658 if (p2ps_prov == NULL) {
4659 os_free(info);
4660 return NULL;
4661 }
4662
4663 if (info) {
4664 os_memcpy(p2ps_prov->info, info, info_len);
4665 p2ps_prov->info[info_len] = '\0';
4666 os_free(info);
4667 }
4668
4669 pos = os_strstr(cmd, "status=");
4670 if (pos)
4671 p2ps_prov->status = atoi(pos + 7);
4672 else
4673 p2ps_prov->status = -1;
4674
4675 pos = os_strstr(cmd, "adv_id=");
4676 if (!pos || sscanf(pos + 7, "%llx", &val) != 1 || val > 0xffffffffULL)
4677 goto invalid_args;
4678 p2ps_prov->adv_id = val;
4679
4680 pos = os_strstr(cmd, "method=");
4681 if (pos)
4682 p2ps_prov->method = strtol(pos + 7, NULL, 16);
4683 else
4684 p2ps_prov->method = 0;
4685
4686 pos = os_strstr(cmd, "session=");
4687 if (!pos || sscanf(pos + 8, "%llx", &val) != 1 || val > 0xffffffffULL)
4688 goto invalid_args;
4689 p2ps_prov->session_id = val;
4690
4691 pos = os_strstr(cmd, "adv_mac=");
4692 if (!pos || hwaddr_aton(pos + 8, p2ps_prov->adv_mac))
4693 goto invalid_args;
4694
4695 pos = os_strstr(cmd, "session_mac=");
4696 if (!pos || hwaddr_aton(pos + 12, p2ps_prov->session_mac))
4697 goto invalid_args;
4698
4699 /* force conncap with tstCap (no sanity checks) */
4700 pos = os_strstr(cmd, "tstCap=");
4701 if (pos) {
4702 role = strtol(pos + 7, NULL, 16);
4703 } else {
4704 pos = os_strstr(cmd, "role=");
4705 if (pos) {
4706 role = strtol(pos + 5, NULL, 16);
4707 if (role != P2PS_SETUP_CLIENT &&
4708 role != P2PS_SETUP_GROUP_OWNER)
4709 role = P2PS_SETUP_NONE;
4710 }
4711 }
4712 p2ps_prov->role = role;
4713
4714 return p2ps_prov;
4715
4716 invalid_args:
4717 os_free(p2ps_prov);
4718 return NULL;
4719 }
4720
4721
p2p_ctrl_asp_provision_resp(struct wpa_supplicant * wpa_s,char * cmd)4722 static int p2p_ctrl_asp_provision_resp(struct wpa_supplicant *wpa_s, char *cmd)
4723 {
4724 u8 addr[ETH_ALEN];
4725 struct p2ps_provision *p2ps_prov;
4726 char *pos;
4727
4728 /* <addr> id=<adv_id> [role=<conncap>] [info=<infodata>] */
4729
4730 wpa_printf(MSG_DEBUG, "%s: %s", __func__, cmd);
4731
4732 if (hwaddr_aton(cmd, addr))
4733 return -1;
4734
4735 pos = cmd + 17;
4736 if (*pos != ' ')
4737 return -1;
4738
4739 p2ps_prov = p2p_parse_asp_provision_cmd(pos);
4740 if (!p2ps_prov)
4741 return -1;
4742
4743 if (p2ps_prov->status < 0) {
4744 os_free(p2ps_prov);
4745 return -1;
4746 }
4747
4748 return wpas_p2p_prov_disc(wpa_s, addr, NULL, WPAS_P2P_PD_FOR_ASP,
4749 p2ps_prov);
4750 }
4751
4752
p2p_ctrl_asp_provision(struct wpa_supplicant * wpa_s,char * cmd)4753 static int p2p_ctrl_asp_provision(struct wpa_supplicant *wpa_s, char *cmd)
4754 {
4755 u8 addr[ETH_ALEN];
4756 struct p2ps_provision *p2ps_prov;
4757 char *pos;
4758
4759 /* <addr> id=<adv_id> adv_mac=<adv_mac> conncap=<conncap>
4760 * session=<ses_id> mac=<ses_mac> [info=<infodata>]
4761 */
4762
4763 wpa_printf(MSG_DEBUG, "%s: %s", __func__, cmd);
4764 if (hwaddr_aton(cmd, addr))
4765 return -1;
4766
4767 pos = cmd + 17;
4768 if (*pos != ' ')
4769 return -1;
4770
4771 p2ps_prov = p2p_parse_asp_provision_cmd(pos);
4772 if (!p2ps_prov)
4773 return -1;
4774
4775 return wpas_p2p_prov_disc(wpa_s, addr, NULL, WPAS_P2P_PD_FOR_ASP,
4776 p2ps_prov);
4777 }
4778
4779
p2p_ctrl_connect(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)4780 static int p2p_ctrl_connect(struct wpa_supplicant *wpa_s, char *cmd,
4781 char *buf, size_t buflen)
4782 {
4783 u8 addr[ETH_ALEN];
4784 char *pos, *pos2;
4785 char *pin = NULL;
4786 enum p2p_wps_method wps_method;
4787 int new_pin;
4788 int ret;
4789 int persistent_group, persistent_id = -1;
4790 int join;
4791 int auth;
4792 int automatic;
4793 int go_intent = -1;
4794 int freq = 0;
4795 int pd;
4796 int ht40, vht;
4797
4798 if (!wpa_s->global->p2p_init_wpa_s)
4799 return -1;
4800 if (wpa_s->global->p2p_init_wpa_s != wpa_s) {
4801 wpa_dbg(wpa_s, MSG_DEBUG, "Direct P2P_CONNECT command to %s",
4802 wpa_s->global->p2p_init_wpa_s->ifname);
4803 wpa_s = wpa_s->global->p2p_init_wpa_s;
4804 }
4805
4806 /* <addr> <"pbc" | "pin" | PIN> [label|display|keypad|p2ps]
4807 * [persistent|persistent=<network id>]
4808 * [join] [auth] [go_intent=<0..15>] [freq=<in MHz>] [provdisc]
4809 * [ht40] [vht] [auto] */
4810
4811 if (hwaddr_aton(cmd, addr))
4812 return -1;
4813
4814 pos = cmd + 17;
4815 if (*pos != ' ')
4816 return -1;
4817 pos++;
4818
4819 persistent_group = os_strstr(pos, " persistent") != NULL;
4820 pos2 = os_strstr(pos, " persistent=");
4821 if (pos2) {
4822 struct wpa_ssid *ssid;
4823 persistent_id = atoi(pos2 + 12);
4824 ssid = wpa_config_get_network(wpa_s->conf, persistent_id);
4825 if (ssid == NULL || ssid->disabled != 2 ||
4826 ssid->mode != WPAS_MODE_P2P_GO) {
4827 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
4828 "SSID id=%d for persistent P2P group (GO)",
4829 persistent_id);
4830 return -1;
4831 }
4832 }
4833 join = os_strstr(pos, " join") != NULL;
4834 auth = os_strstr(pos, " auth") != NULL;
4835 automatic = os_strstr(pos, " auto") != NULL;
4836 pd = os_strstr(pos, " provdisc") != NULL;
4837 vht = (os_strstr(cmd, " vht") != NULL) || wpa_s->conf->p2p_go_vht;
4838 ht40 = (os_strstr(cmd, " ht40") != NULL) || wpa_s->conf->p2p_go_ht40 ||
4839 vht;
4840
4841 pos2 = os_strstr(pos, " go_intent=");
4842 if (pos2) {
4843 pos2 += 11;
4844 go_intent = atoi(pos2);
4845 if (go_intent < 0 || go_intent > 15)
4846 return -1;
4847 }
4848
4849 pos2 = os_strstr(pos, " freq=");
4850 if (pos2) {
4851 pos2 += 6;
4852 freq = atoi(pos2);
4853 if (freq <= 0)
4854 return -1;
4855 }
4856
4857 if (os_strncmp(pos, "pin", 3) == 0) {
4858 /* Request random PIN (to be displayed) and enable the PIN */
4859 wps_method = WPS_PIN_DISPLAY;
4860 } else if (os_strncmp(pos, "pbc", 3) == 0) {
4861 wps_method = WPS_PBC;
4862 } else {
4863 pin = pos;
4864 pos = os_strchr(pin, ' ');
4865 wps_method = WPS_PIN_KEYPAD;
4866 if (pos) {
4867 *pos++ = '\0';
4868 if (os_strncmp(pos, "display", 7) == 0)
4869 wps_method = WPS_PIN_DISPLAY;
4870 else if (os_strncmp(pos, "p2ps", 4) == 0)
4871 wps_method = WPS_P2PS;
4872 }
4873 if (!wps_pin_str_valid(pin)) {
4874 os_memcpy(buf, "FAIL-INVALID-PIN\n", 17);
4875 return 17;
4876 }
4877 }
4878
4879 new_pin = wpas_p2p_connect(wpa_s, addr, pin, wps_method,
4880 persistent_group, automatic, join,
4881 auth, go_intent, freq, persistent_id, pd,
4882 ht40, vht);
4883 if (new_pin == -2) {
4884 os_memcpy(buf, "FAIL-CHANNEL-UNAVAILABLE\n", 25);
4885 return 25;
4886 }
4887 if (new_pin == -3) {
4888 os_memcpy(buf, "FAIL-CHANNEL-UNSUPPORTED\n", 25);
4889 return 25;
4890 }
4891 if (new_pin < 0)
4892 return -1;
4893 if (wps_method == WPS_PIN_DISPLAY && pin == NULL) {
4894 ret = os_snprintf(buf, buflen, "%08d", new_pin);
4895 if (os_snprintf_error(buflen, ret))
4896 return -1;
4897 return ret;
4898 }
4899
4900 os_memcpy(buf, "OK\n", 3);
4901 return 3;
4902 }
4903
4904
p2p_ctrl_listen(struct wpa_supplicant * wpa_s,char * cmd)4905 static int p2p_ctrl_listen(struct wpa_supplicant *wpa_s, char *cmd)
4906 {
4907 unsigned int timeout = atoi(cmd);
4908 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
4909 wpa_dbg(wpa_s, MSG_INFO,
4910 "Reject P2P_LISTEN since interface is disabled");
4911 return -1;
4912 }
4913 return wpas_p2p_listen(wpa_s, timeout);
4914 }
4915
4916
p2p_ctrl_prov_disc(struct wpa_supplicant * wpa_s,char * cmd)4917 static int p2p_ctrl_prov_disc(struct wpa_supplicant *wpa_s, char *cmd)
4918 {
4919 u8 addr[ETH_ALEN];
4920 char *pos;
4921 enum wpas_p2p_prov_disc_use use = WPAS_P2P_PD_FOR_GO_NEG;
4922
4923 /* <addr> <config method> [join|auto] */
4924
4925 if (hwaddr_aton(cmd, addr))
4926 return -1;
4927
4928 pos = cmd + 17;
4929 if (*pos != ' ')
4930 return -1;
4931 pos++;
4932
4933 if (os_strstr(pos, " join") != NULL)
4934 use = WPAS_P2P_PD_FOR_JOIN;
4935 else if (os_strstr(pos, " auto") != NULL)
4936 use = WPAS_P2P_PD_AUTO;
4937
4938 return wpas_p2p_prov_disc(wpa_s, addr, pos, use, NULL);
4939 }
4940
4941
p2p_get_passphrase(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)4942 static int p2p_get_passphrase(struct wpa_supplicant *wpa_s, char *buf,
4943 size_t buflen)
4944 {
4945 struct wpa_ssid *ssid = wpa_s->current_ssid;
4946
4947 if (ssid == NULL || ssid->mode != WPAS_MODE_P2P_GO ||
4948 ssid->passphrase == NULL)
4949 return -1;
4950
4951 os_strlcpy(buf, ssid->passphrase, buflen);
4952 return os_strlen(buf);
4953 }
4954
4955
p2p_ctrl_serv_disc_req(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)4956 static int p2p_ctrl_serv_disc_req(struct wpa_supplicant *wpa_s, char *cmd,
4957 char *buf, size_t buflen)
4958 {
4959 u64 ref;
4960 int res;
4961 u8 dst_buf[ETH_ALEN], *dst;
4962 struct wpabuf *tlvs;
4963 char *pos;
4964 size_t len;
4965
4966 if (hwaddr_aton(cmd, dst_buf))
4967 return -1;
4968 dst = dst_buf;
4969 if (dst[0] == 0 && dst[1] == 0 && dst[2] == 0 &&
4970 dst[3] == 0 && dst[4] == 0 && dst[5] == 0)
4971 dst = NULL;
4972 pos = cmd + 17;
4973 if (*pos != ' ')
4974 return -1;
4975 pos++;
4976
4977 if (os_strncmp(pos, "upnp ", 5) == 0) {
4978 u8 version;
4979 pos += 5;
4980 if (hexstr2bin(pos, &version, 1) < 0)
4981 return -1;
4982 pos += 2;
4983 if (*pos != ' ')
4984 return -1;
4985 pos++;
4986 ref = wpas_p2p_sd_request_upnp(wpa_s, dst, version, pos);
4987 #ifdef CONFIG_WIFI_DISPLAY
4988 } else if (os_strncmp(pos, "wifi-display ", 13) == 0) {
4989 ref = wpas_p2p_sd_request_wifi_display(wpa_s, dst, pos + 13);
4990 #endif /* CONFIG_WIFI_DISPLAY */
4991 } else if (os_strncmp(pos, "asp ", 4) == 0) {
4992 char *svc_str;
4993 char *svc_info = NULL;
4994 u32 id;
4995
4996 pos += 4;
4997 if (sscanf(pos, "%x", &id) != 1 || id > 0xff)
4998 return -1;
4999
5000 pos = os_strchr(pos, ' ');
5001 if (pos == NULL || pos[1] == '\0' || pos[1] == ' ')
5002 return -1;
5003
5004 svc_str = pos + 1;
5005
5006 pos = os_strchr(svc_str, ' ');
5007
5008 if (pos)
5009 *pos++ = '\0';
5010
5011 /* All remaining data is the svc_info string */
5012 if (pos && pos[0] && pos[0] != ' ') {
5013 len = os_strlen(pos);
5014
5015 /* Unescape in place */
5016 len = utf8_unescape(pos, len, pos, len);
5017 if (len > 0xff)
5018 return -1;
5019
5020 svc_info = pos;
5021 }
5022
5023 ref = wpas_p2p_sd_request_asp(wpa_s, dst, (u8) id,
5024 svc_str, svc_info);
5025 } else {
5026 len = os_strlen(pos);
5027 if (len & 1)
5028 return -1;
5029 len /= 2;
5030 tlvs = wpabuf_alloc(len);
5031 if (tlvs == NULL)
5032 return -1;
5033 if (hexstr2bin(pos, wpabuf_put(tlvs, len), len) < 0) {
5034 wpabuf_free(tlvs);
5035 return -1;
5036 }
5037
5038 ref = wpas_p2p_sd_request(wpa_s, dst, tlvs);
5039 wpabuf_free(tlvs);
5040 }
5041 if (ref == 0)
5042 return -1;
5043 res = os_snprintf(buf, buflen, "%llx", (long long unsigned) ref);
5044 if (os_snprintf_error(buflen, res))
5045 return -1;
5046 return res;
5047 }
5048
5049
p2p_ctrl_serv_disc_cancel_req(struct wpa_supplicant * wpa_s,char * cmd)5050 static int p2p_ctrl_serv_disc_cancel_req(struct wpa_supplicant *wpa_s,
5051 char *cmd)
5052 {
5053 long long unsigned val;
5054 u64 req;
5055 if (sscanf(cmd, "%llx", &val) != 1)
5056 return -1;
5057 req = val;
5058 return wpas_p2p_sd_cancel_request(wpa_s, req);
5059 }
5060
5061
p2p_ctrl_serv_disc_resp(struct wpa_supplicant * wpa_s,char * cmd)5062 static int p2p_ctrl_serv_disc_resp(struct wpa_supplicant *wpa_s, char *cmd)
5063 {
5064 int freq;
5065 u8 dst[ETH_ALEN];
5066 u8 dialog_token;
5067 struct wpabuf *resp_tlvs;
5068 char *pos, *pos2;
5069 size_t len;
5070
5071 pos = os_strchr(cmd, ' ');
5072 if (pos == NULL)
5073 return -1;
5074 *pos++ = '\0';
5075 freq = atoi(cmd);
5076 if (freq == 0)
5077 return -1;
5078
5079 if (hwaddr_aton(pos, dst))
5080 return -1;
5081 pos += 17;
5082 if (*pos != ' ')
5083 return -1;
5084 pos++;
5085
5086 pos2 = os_strchr(pos, ' ');
5087 if (pos2 == NULL)
5088 return -1;
5089 *pos2++ = '\0';
5090 dialog_token = atoi(pos);
5091
5092 len = os_strlen(pos2);
5093 if (len & 1)
5094 return -1;
5095 len /= 2;
5096 resp_tlvs = wpabuf_alloc(len);
5097 if (resp_tlvs == NULL)
5098 return -1;
5099 if (hexstr2bin(pos2, wpabuf_put(resp_tlvs, len), len) < 0) {
5100 wpabuf_free(resp_tlvs);
5101 return -1;
5102 }
5103
5104 wpas_p2p_sd_response(wpa_s, freq, dst, dialog_token, resp_tlvs);
5105 wpabuf_free(resp_tlvs);
5106 return 0;
5107 }
5108
5109
p2p_ctrl_serv_disc_external(struct wpa_supplicant * wpa_s,char * cmd)5110 static int p2p_ctrl_serv_disc_external(struct wpa_supplicant *wpa_s,
5111 char *cmd)
5112 {
5113 if (os_strcmp(cmd, "0") && os_strcmp(cmd, "1"))
5114 return -1;
5115 wpa_s->p2p_sd_over_ctrl_iface = atoi(cmd);
5116 return 0;
5117 }
5118
5119
p2p_ctrl_service_add_bonjour(struct wpa_supplicant * wpa_s,char * cmd)5120 static int p2p_ctrl_service_add_bonjour(struct wpa_supplicant *wpa_s,
5121 char *cmd)
5122 {
5123 char *pos;
5124 size_t len;
5125 struct wpabuf *query, *resp;
5126
5127 pos = os_strchr(cmd, ' ');
5128 if (pos == NULL)
5129 return -1;
5130 *pos++ = '\0';
5131
5132 len = os_strlen(cmd);
5133 if (len & 1)
5134 return -1;
5135 len /= 2;
5136 query = wpabuf_alloc(len);
5137 if (query == NULL)
5138 return -1;
5139 if (hexstr2bin(cmd, wpabuf_put(query, len), len) < 0) {
5140 wpabuf_free(query);
5141 return -1;
5142 }
5143
5144 len = os_strlen(pos);
5145 if (len & 1) {
5146 wpabuf_free(query);
5147 return -1;
5148 }
5149 len /= 2;
5150 resp = wpabuf_alloc(len);
5151 if (resp == NULL) {
5152 wpabuf_free(query);
5153 return -1;
5154 }
5155 if (hexstr2bin(pos, wpabuf_put(resp, len), len) < 0) {
5156 wpabuf_free(query);
5157 wpabuf_free(resp);
5158 return -1;
5159 }
5160
5161 if (wpas_p2p_service_add_bonjour(wpa_s, query, resp) < 0) {
5162 wpabuf_free(query);
5163 wpabuf_free(resp);
5164 return -1;
5165 }
5166 return 0;
5167 }
5168
5169
p2p_ctrl_service_add_upnp(struct wpa_supplicant * wpa_s,char * cmd)5170 static int p2p_ctrl_service_add_upnp(struct wpa_supplicant *wpa_s, char *cmd)
5171 {
5172 char *pos;
5173 u8 version;
5174
5175 pos = os_strchr(cmd, ' ');
5176 if (pos == NULL)
5177 return -1;
5178 *pos++ = '\0';
5179
5180 if (hexstr2bin(cmd, &version, 1) < 0)
5181 return -1;
5182
5183 return wpas_p2p_service_add_upnp(wpa_s, version, pos);
5184 }
5185
5186
p2p_ctrl_service_add_asp(struct wpa_supplicant * wpa_s,u8 replace,char * cmd)5187 static int p2p_ctrl_service_add_asp(struct wpa_supplicant *wpa_s,
5188 u8 replace, char *cmd)
5189 {
5190 char *pos;
5191 char *adv_str;
5192 u32 auto_accept, adv_id, svc_state, config_methods;
5193 char *svc_info = NULL;
5194
5195 pos = os_strchr(cmd, ' ');
5196 if (pos == NULL)
5197 return -1;
5198 *pos++ = '\0';
5199
5200 /* Auto-Accept value is mandatory, and must be one of the
5201 * single values (0, 1, 2, 4) */
5202 auto_accept = atoi(cmd);
5203 switch (auto_accept) {
5204 case P2PS_SETUP_NONE: /* No auto-accept */
5205 case P2PS_SETUP_NEW:
5206 case P2PS_SETUP_CLIENT:
5207 case P2PS_SETUP_GROUP_OWNER:
5208 break;
5209 default:
5210 return -1;
5211 }
5212
5213 /* Advertisement ID is mandatory */
5214 cmd = pos;
5215 pos = os_strchr(cmd, ' ');
5216 if (pos == NULL)
5217 return -1;
5218 *pos++ = '\0';
5219
5220 /* Handle Adv_ID == 0 (wildcard "org.wi-fi.wfds") internally. */
5221 if (sscanf(cmd, "%x", &adv_id) != 1 || adv_id == 0)
5222 return -1;
5223
5224 /* Only allow replacements if exist, and adds if not */
5225 if (wpas_p2p_service_p2ps_id_exists(wpa_s, adv_id)) {
5226 if (!replace)
5227 return -1;
5228 } else {
5229 if (replace)
5230 return -1;
5231 }
5232
5233 /* svc_state between 0 - 0xff is mandatory */
5234 if (sscanf(pos, "%x", &svc_state) != 1 || svc_state > 0xff)
5235 return -1;
5236
5237 pos = os_strchr(pos, ' ');
5238 if (pos == NULL)
5239 return -1;
5240
5241 /* config_methods is mandatory */
5242 pos++;
5243 if (sscanf(pos, "%x", &config_methods) != 1)
5244 return -1;
5245
5246 if (!(config_methods &
5247 (WPS_CONFIG_DISPLAY | WPS_CONFIG_KEYPAD | WPS_CONFIG_P2PS)))
5248 return -1;
5249
5250 pos = os_strchr(pos, ' ');
5251 if (pos == NULL)
5252 return -1;
5253
5254 pos++;
5255 adv_str = pos;
5256
5257 /* Advertisement string is mandatory */
5258 if (!pos[0] || pos[0] == ' ')
5259 return -1;
5260
5261 /* Terminate svc string */
5262 pos = os_strchr(pos, ' ');
5263 if (pos != NULL)
5264 *pos++ = '\0';
5265
5266 /* Service and Response Information are optional */
5267 if (pos && pos[0]) {
5268 size_t len;
5269
5270 /* Note the bare ' included, which cannot exist legally
5271 * in unescaped string. */
5272 svc_info = os_strstr(pos, "svc_info='");
5273
5274 if (svc_info) {
5275 svc_info += 9;
5276 len = os_strlen(svc_info);
5277 utf8_unescape(svc_info, len, svc_info, len);
5278 }
5279 }
5280
5281 return wpas_p2p_service_add_asp(wpa_s, auto_accept, adv_id, adv_str,
5282 (u8) svc_state, (u16) config_methods,
5283 svc_info);
5284 }
5285
5286
p2p_ctrl_service_add(struct wpa_supplicant * wpa_s,char * cmd)5287 static int p2p_ctrl_service_add(struct wpa_supplicant *wpa_s, char *cmd)
5288 {
5289 char *pos;
5290
5291 pos = os_strchr(cmd, ' ');
5292 if (pos == NULL)
5293 return -1;
5294 *pos++ = '\0';
5295
5296 if (os_strcmp(cmd, "bonjour") == 0)
5297 return p2p_ctrl_service_add_bonjour(wpa_s, pos);
5298 if (os_strcmp(cmd, "upnp") == 0)
5299 return p2p_ctrl_service_add_upnp(wpa_s, pos);
5300 if (os_strcmp(cmd, "asp") == 0)
5301 return p2p_ctrl_service_add_asp(wpa_s, 0, pos);
5302 wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
5303 return -1;
5304 }
5305
5306
p2p_ctrl_service_del_bonjour(struct wpa_supplicant * wpa_s,char * cmd)5307 static int p2p_ctrl_service_del_bonjour(struct wpa_supplicant *wpa_s,
5308 char *cmd)
5309 {
5310 size_t len;
5311 struct wpabuf *query;
5312 int ret;
5313
5314 len = os_strlen(cmd);
5315 if (len & 1)
5316 return -1;
5317 len /= 2;
5318 query = wpabuf_alloc(len);
5319 if (query == NULL)
5320 return -1;
5321 if (hexstr2bin(cmd, wpabuf_put(query, len), len) < 0) {
5322 wpabuf_free(query);
5323 return -1;
5324 }
5325
5326 ret = wpas_p2p_service_del_bonjour(wpa_s, query);
5327 wpabuf_free(query);
5328 return ret;
5329 }
5330
5331
p2p_ctrl_service_del_upnp(struct wpa_supplicant * wpa_s,char * cmd)5332 static int p2p_ctrl_service_del_upnp(struct wpa_supplicant *wpa_s, char *cmd)
5333 {
5334 char *pos;
5335 u8 version;
5336
5337 pos = os_strchr(cmd, ' ');
5338 if (pos == NULL)
5339 return -1;
5340 *pos++ = '\0';
5341
5342 if (hexstr2bin(cmd, &version, 1) < 0)
5343 return -1;
5344
5345 return wpas_p2p_service_del_upnp(wpa_s, version, pos);
5346 }
5347
5348
p2p_ctrl_service_del_asp(struct wpa_supplicant * wpa_s,char * cmd)5349 static int p2p_ctrl_service_del_asp(struct wpa_supplicant *wpa_s, char *cmd)
5350 {
5351 u32 adv_id;
5352
5353 if (os_strcmp(cmd, "all") == 0) {
5354 wpas_p2p_service_flush_asp(wpa_s);
5355 return 0;
5356 }
5357
5358 if (sscanf(cmd, "%x", &adv_id) != 1)
5359 return -1;
5360
5361 return wpas_p2p_service_del_asp(wpa_s, adv_id);
5362 }
5363
5364
p2p_ctrl_service_del(struct wpa_supplicant * wpa_s,char * cmd)5365 static int p2p_ctrl_service_del(struct wpa_supplicant *wpa_s, char *cmd)
5366 {
5367 char *pos;
5368
5369 pos = os_strchr(cmd, ' ');
5370 if (pos == NULL)
5371 return -1;
5372 *pos++ = '\0';
5373
5374 if (os_strcmp(cmd, "bonjour") == 0)
5375 return p2p_ctrl_service_del_bonjour(wpa_s, pos);
5376 if (os_strcmp(cmd, "upnp") == 0)
5377 return p2p_ctrl_service_del_upnp(wpa_s, pos);
5378 if (os_strcmp(cmd, "asp") == 0)
5379 return p2p_ctrl_service_del_asp(wpa_s, pos);
5380 wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
5381 return -1;
5382 }
5383
5384
p2p_ctrl_service_replace(struct wpa_supplicant * wpa_s,char * cmd)5385 static int p2p_ctrl_service_replace(struct wpa_supplicant *wpa_s, char *cmd)
5386 {
5387 char *pos;
5388
5389 pos = os_strchr(cmd, ' ');
5390 if (pos == NULL)
5391 return -1;
5392 *pos++ = '\0';
5393
5394 if (os_strcmp(cmd, "asp") == 0)
5395 return p2p_ctrl_service_add_asp(wpa_s, 1, pos);
5396
5397 wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
5398 return -1;
5399 }
5400
5401
p2p_ctrl_reject(struct wpa_supplicant * wpa_s,char * cmd)5402 static int p2p_ctrl_reject(struct wpa_supplicant *wpa_s, char *cmd)
5403 {
5404 u8 addr[ETH_ALEN];
5405
5406 /* <addr> */
5407
5408 if (hwaddr_aton(cmd, addr))
5409 return -1;
5410
5411 return wpas_p2p_reject(wpa_s, addr);
5412 }
5413
5414
p2p_ctrl_invite_persistent(struct wpa_supplicant * wpa_s,char * cmd)5415 static int p2p_ctrl_invite_persistent(struct wpa_supplicant *wpa_s, char *cmd)
5416 {
5417 char *pos;
5418 int id;
5419 struct wpa_ssid *ssid;
5420 u8 *_peer = NULL, peer[ETH_ALEN];
5421 int freq = 0, pref_freq = 0;
5422 int ht40, vht;
5423
5424 id = atoi(cmd);
5425 pos = os_strstr(cmd, " peer=");
5426 if (pos) {
5427 pos += 6;
5428 if (hwaddr_aton(pos, peer))
5429 return -1;
5430 _peer = peer;
5431 }
5432 ssid = wpa_config_get_network(wpa_s->conf, id);
5433 if (ssid == NULL || ssid->disabled != 2) {
5434 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
5435 "for persistent P2P group",
5436 id);
5437 return -1;
5438 }
5439
5440 pos = os_strstr(cmd, " freq=");
5441 if (pos) {
5442 pos += 6;
5443 freq = atoi(pos);
5444 if (freq <= 0)
5445 return -1;
5446 }
5447
5448 pos = os_strstr(cmd, " pref=");
5449 if (pos) {
5450 pos += 6;
5451 pref_freq = atoi(pos);
5452 if (pref_freq <= 0)
5453 return -1;
5454 }
5455
5456 vht = (os_strstr(cmd, " vht") != NULL) || wpa_s->conf->p2p_go_vht;
5457 ht40 = (os_strstr(cmd, " ht40") != NULL) || wpa_s->conf->p2p_go_ht40 ||
5458 vht;
5459
5460 return wpas_p2p_invite(wpa_s, _peer, ssid, NULL, freq, ht40, vht,
5461 pref_freq);
5462 }
5463
5464
p2p_ctrl_invite_group(struct wpa_supplicant * wpa_s,char * cmd)5465 static int p2p_ctrl_invite_group(struct wpa_supplicant *wpa_s, char *cmd)
5466 {
5467 char *pos;
5468 u8 peer[ETH_ALEN], go_dev_addr[ETH_ALEN], *go_dev = NULL;
5469
5470 pos = os_strstr(cmd, " peer=");
5471 if (!pos)
5472 return -1;
5473
5474 *pos = '\0';
5475 pos += 6;
5476 if (hwaddr_aton(pos, peer)) {
5477 wpa_printf(MSG_DEBUG, "P2P: Invalid MAC address '%s'", pos);
5478 return -1;
5479 }
5480
5481 pos = os_strstr(pos, " go_dev_addr=");
5482 if (pos) {
5483 pos += 13;
5484 if (hwaddr_aton(pos, go_dev_addr)) {
5485 wpa_printf(MSG_DEBUG, "P2P: Invalid MAC address '%s'",
5486 pos);
5487 return -1;
5488 }
5489 go_dev = go_dev_addr;
5490 }
5491
5492 return wpas_p2p_invite_group(wpa_s, cmd, peer, go_dev);
5493 }
5494
5495
p2p_ctrl_invite(struct wpa_supplicant * wpa_s,char * cmd)5496 static int p2p_ctrl_invite(struct wpa_supplicant *wpa_s, char *cmd)
5497 {
5498 if (os_strncmp(cmd, "persistent=", 11) == 0)
5499 return p2p_ctrl_invite_persistent(wpa_s, cmd + 11);
5500 if (os_strncmp(cmd, "group=", 6) == 0)
5501 return p2p_ctrl_invite_group(wpa_s, cmd + 6);
5502
5503 return -1;
5504 }
5505
5506
p2p_ctrl_group_add_persistent(struct wpa_supplicant * wpa_s,int id,int freq,int ht40,int vht)5507 static int p2p_ctrl_group_add_persistent(struct wpa_supplicant *wpa_s,
5508 int id, int freq, int ht40, int vht)
5509 {
5510 struct wpa_ssid *ssid;
5511
5512 ssid = wpa_config_get_network(wpa_s->conf, id);
5513 if (ssid == NULL || ssid->disabled != 2) {
5514 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
5515 "for persistent P2P group",
5516 id);
5517 return -1;
5518 }
5519
5520 return wpas_p2p_group_add_persistent(wpa_s, ssid, 0, freq, 0, ht40, vht,
5521 NULL, 0);
5522 }
5523
5524
p2p_ctrl_group_add(struct wpa_supplicant * wpa_s,char * cmd)5525 static int p2p_ctrl_group_add(struct wpa_supplicant *wpa_s, char *cmd)
5526 {
5527 int freq = 0, persistent = 0, group_id = -1;
5528 int vht = wpa_s->conf->p2p_go_vht;
5529 int ht40 = wpa_s->conf->p2p_go_ht40 || vht;
5530 char *token, *context = NULL;
5531
5532 while ((token = str_token(cmd, " ", &context))) {
5533 if (sscanf(token, "freq=%d", &freq) == 1 ||
5534 sscanf(token, "persistent=%d", &group_id) == 1) {
5535 continue;
5536 } else if (os_strcmp(token, "ht40") == 0) {
5537 ht40 = 1;
5538 } else if (os_strcmp(token, "vht") == 0) {
5539 vht = 1;
5540 ht40 = 1;
5541 } else if (os_strcmp(token, "persistent") == 0) {
5542 persistent = 1;
5543 } else {
5544 wpa_printf(MSG_DEBUG,
5545 "CTRL: Invalid P2P_GROUP_ADD parameter: '%s'",
5546 token);
5547 return -1;
5548 }
5549 }
5550
5551 if (group_id >= 0)
5552 return p2p_ctrl_group_add_persistent(wpa_s, group_id,
5553 freq, ht40, vht);
5554
5555 return wpas_p2p_group_add(wpa_s, persistent, freq, ht40, vht);
5556 }
5557
5558
p2p_ctrl_peer(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)5559 static int p2p_ctrl_peer(struct wpa_supplicant *wpa_s, char *cmd,
5560 char *buf, size_t buflen)
5561 {
5562 u8 addr[ETH_ALEN], *addr_ptr;
5563 int next, res;
5564 const struct p2p_peer_info *info;
5565 char *pos, *end;
5566 char devtype[WPS_DEV_TYPE_BUFSIZE];
5567 struct wpa_ssid *ssid;
5568 size_t i;
5569
5570 if (!wpa_s->global->p2p)
5571 return -1;
5572
5573 if (os_strcmp(cmd, "FIRST") == 0) {
5574 addr_ptr = NULL;
5575 next = 0;
5576 } else if (os_strncmp(cmd, "NEXT-", 5) == 0) {
5577 if (hwaddr_aton(cmd + 5, addr) < 0)
5578 return -1;
5579 addr_ptr = addr;
5580 next = 1;
5581 } else {
5582 if (hwaddr_aton(cmd, addr) < 0)
5583 return -1;
5584 addr_ptr = addr;
5585 next = 0;
5586 }
5587
5588 info = p2p_get_peer_info(wpa_s->global->p2p, addr_ptr, next);
5589 if (info == NULL)
5590 return -1;
5591
5592 pos = buf;
5593 end = buf + buflen;
5594
5595 res = os_snprintf(pos, end - pos, MACSTR "\n"
5596 "pri_dev_type=%s\n"
5597 "device_name=%s\n"
5598 "manufacturer=%s\n"
5599 "model_name=%s\n"
5600 "model_number=%s\n"
5601 "serial_number=%s\n"
5602 "config_methods=0x%x\n"
5603 "dev_capab=0x%x\n"
5604 "group_capab=0x%x\n"
5605 "level=%d\n",
5606 MAC2STR(info->p2p_device_addr),
5607 wps_dev_type_bin2str(info->pri_dev_type,
5608 devtype, sizeof(devtype)),
5609 info->device_name,
5610 info->manufacturer,
5611 info->model_name,
5612 info->model_number,
5613 info->serial_number,
5614 info->config_methods,
5615 info->dev_capab,
5616 info->group_capab,
5617 info->level);
5618 if (os_snprintf_error(end - pos, res))
5619 return pos - buf;
5620 pos += res;
5621
5622 for (i = 0; i < info->wps_sec_dev_type_list_len / WPS_DEV_TYPE_LEN; i++)
5623 {
5624 const u8 *t;
5625 t = &info->wps_sec_dev_type_list[i * WPS_DEV_TYPE_LEN];
5626 res = os_snprintf(pos, end - pos, "sec_dev_type=%s\n",
5627 wps_dev_type_bin2str(t, devtype,
5628 sizeof(devtype)));
5629 if (os_snprintf_error(end - pos, res))
5630 return pos - buf;
5631 pos += res;
5632 }
5633
5634 ssid = wpas_p2p_get_persistent(wpa_s, info->p2p_device_addr, NULL, 0);
5635 if (ssid) {
5636 res = os_snprintf(pos, end - pos, "persistent=%d\n", ssid->id);
5637 if (os_snprintf_error(end - pos, res))
5638 return pos - buf;
5639 pos += res;
5640 }
5641
5642 res = p2p_get_peer_info_txt(info, pos, end - pos);
5643 if (res < 0)
5644 return pos - buf;
5645 pos += res;
5646
5647 if (info->vendor_elems) {
5648 res = os_snprintf(pos, end - pos, "vendor_elems=");
5649 if (os_snprintf_error(end - pos, res))
5650 return pos - buf;
5651 pos += res;
5652
5653 pos += wpa_snprintf_hex(pos, end - pos,
5654 wpabuf_head(info->vendor_elems),
5655 wpabuf_len(info->vendor_elems));
5656
5657 res = os_snprintf(pos, end - pos, "\n");
5658 if (os_snprintf_error(end - pos, res))
5659 return pos - buf;
5660 pos += res;
5661 }
5662
5663 return pos - buf;
5664 }
5665
5666
p2p_ctrl_disallow_freq(struct wpa_supplicant * wpa_s,const char * param)5667 static int p2p_ctrl_disallow_freq(struct wpa_supplicant *wpa_s,
5668 const char *param)
5669 {
5670 unsigned int i;
5671
5672 if (wpa_s->global->p2p == NULL)
5673 return -1;
5674
5675 if (freq_range_list_parse(&wpa_s->global->p2p_disallow_freq, param) < 0)
5676 return -1;
5677
5678 for (i = 0; i < wpa_s->global->p2p_disallow_freq.num; i++) {
5679 struct wpa_freq_range *freq;
5680 freq = &wpa_s->global->p2p_disallow_freq.range[i];
5681 wpa_printf(MSG_DEBUG, "P2P: Disallowed frequency range %u-%u",
5682 freq->min, freq->max);
5683 }
5684
5685 wpas_p2p_update_channel_list(wpa_s);
5686 return 0;
5687 }
5688
5689
p2p_ctrl_set(struct wpa_supplicant * wpa_s,char * cmd)5690 static int p2p_ctrl_set(struct wpa_supplicant *wpa_s, char *cmd)
5691 {
5692 char *param;
5693
5694 if (wpa_s->global->p2p == NULL)
5695 return -1;
5696
5697 param = os_strchr(cmd, ' ');
5698 if (param == NULL)
5699 return -1;
5700 *param++ = '\0';
5701
5702 if (os_strcmp(cmd, "discoverability") == 0) {
5703 p2p_set_client_discoverability(wpa_s->global->p2p,
5704 atoi(param));
5705 return 0;
5706 }
5707
5708 if (os_strcmp(cmd, "managed") == 0) {
5709 p2p_set_managed_oper(wpa_s->global->p2p, atoi(param));
5710 return 0;
5711 }
5712
5713 if (os_strcmp(cmd, "listen_channel") == 0) {
5714 return p2p_set_listen_channel(wpa_s->global->p2p, 81,
5715 atoi(param), 1);
5716 }
5717
5718 if (os_strcmp(cmd, "ssid_postfix") == 0) {
5719 return p2p_set_ssid_postfix(wpa_s->global->p2p, (u8 *) param,
5720 os_strlen(param));
5721 }
5722
5723 if (os_strcmp(cmd, "noa") == 0) {
5724 char *pos;
5725 int count, start, duration;
5726 /* GO NoA parameters: count,start_offset(ms),duration(ms) */
5727 count = atoi(param);
5728 pos = os_strchr(param, ',');
5729 if (pos == NULL)
5730 return -1;
5731 pos++;
5732 start = atoi(pos);
5733 pos = os_strchr(pos, ',');
5734 if (pos == NULL)
5735 return -1;
5736 pos++;
5737 duration = atoi(pos);
5738 if (count < 0 || count > 255 || start < 0 || duration < 0)
5739 return -1;
5740 if (count == 0 && duration > 0)
5741 return -1;
5742 wpa_printf(MSG_DEBUG, "CTRL_IFACE: P2P_SET GO NoA: count=%d "
5743 "start=%d duration=%d", count, start, duration);
5744 return wpas_p2p_set_noa(wpa_s, count, start, duration);
5745 }
5746
5747 if (os_strcmp(cmd, "ps") == 0)
5748 return wpa_drv_set_p2p_powersave(wpa_s, atoi(param), -1, -1);
5749
5750 if (os_strcmp(cmd, "oppps") == 0)
5751 return wpa_drv_set_p2p_powersave(wpa_s, -1, atoi(param), -1);
5752
5753 if (os_strcmp(cmd, "ctwindow") == 0)
5754 return wpa_drv_set_p2p_powersave(wpa_s, -1, -1, atoi(param));
5755
5756 if (os_strcmp(cmd, "disabled") == 0) {
5757 wpa_s->global->p2p_disabled = atoi(param);
5758 wpa_printf(MSG_DEBUG, "P2P functionality %s",
5759 wpa_s->global->p2p_disabled ?
5760 "disabled" : "enabled");
5761 if (wpa_s->global->p2p_disabled) {
5762 wpas_p2p_stop_find(wpa_s);
5763 os_memset(wpa_s->p2p_auth_invite, 0, ETH_ALEN);
5764 p2p_flush(wpa_s->global->p2p);
5765 }
5766 return 0;
5767 }
5768
5769 if (os_strcmp(cmd, "conc_pref") == 0) {
5770 if (os_strcmp(param, "sta") == 0)
5771 wpa_s->global->conc_pref = WPA_CONC_PREF_STA;
5772 else if (os_strcmp(param, "p2p") == 0)
5773 wpa_s->global->conc_pref = WPA_CONC_PREF_P2P;
5774 else {
5775 wpa_printf(MSG_INFO, "Invalid conc_pref value");
5776 return -1;
5777 }
5778 wpa_printf(MSG_DEBUG, "Single channel concurrency preference: "
5779 "%s", param);
5780 return 0;
5781 }
5782
5783 if (os_strcmp(cmd, "force_long_sd") == 0) {
5784 wpa_s->force_long_sd = atoi(param);
5785 return 0;
5786 }
5787
5788 if (os_strcmp(cmd, "peer_filter") == 0) {
5789 u8 addr[ETH_ALEN];
5790 if (hwaddr_aton(param, addr))
5791 return -1;
5792 p2p_set_peer_filter(wpa_s->global->p2p, addr);
5793 return 0;
5794 }
5795
5796 if (os_strcmp(cmd, "cross_connect") == 0)
5797 return wpas_p2p_set_cross_connect(wpa_s, atoi(param));
5798
5799 if (os_strcmp(cmd, "go_apsd") == 0) {
5800 if (os_strcmp(param, "disable") == 0)
5801 wpa_s->set_ap_uapsd = 0;
5802 else {
5803 wpa_s->set_ap_uapsd = 1;
5804 wpa_s->ap_uapsd = atoi(param);
5805 }
5806 return 0;
5807 }
5808
5809 if (os_strcmp(cmd, "client_apsd") == 0) {
5810 if (os_strcmp(param, "disable") == 0)
5811 wpa_s->set_sta_uapsd = 0;
5812 else {
5813 int be, bk, vi, vo;
5814 char *pos;
5815 /* format: BE,BK,VI,VO;max SP Length */
5816 be = atoi(param);
5817 pos = os_strchr(param, ',');
5818 if (pos == NULL)
5819 return -1;
5820 pos++;
5821 bk = atoi(pos);
5822 pos = os_strchr(pos, ',');
5823 if (pos == NULL)
5824 return -1;
5825 pos++;
5826 vi = atoi(pos);
5827 pos = os_strchr(pos, ',');
5828 if (pos == NULL)
5829 return -1;
5830 pos++;
5831 vo = atoi(pos);
5832 /* ignore max SP Length for now */
5833
5834 wpa_s->set_sta_uapsd = 1;
5835 wpa_s->sta_uapsd = 0;
5836 if (be)
5837 wpa_s->sta_uapsd |= BIT(0);
5838 if (bk)
5839 wpa_s->sta_uapsd |= BIT(1);
5840 if (vi)
5841 wpa_s->sta_uapsd |= BIT(2);
5842 if (vo)
5843 wpa_s->sta_uapsd |= BIT(3);
5844 }
5845 return 0;
5846 }
5847
5848 if (os_strcmp(cmd, "disallow_freq") == 0)
5849 return p2p_ctrl_disallow_freq(wpa_s, param);
5850
5851 if (os_strcmp(cmd, "disc_int") == 0) {
5852 int min_disc_int, max_disc_int, max_disc_tu;
5853 char *pos;
5854
5855 pos = param;
5856
5857 min_disc_int = atoi(pos);
5858 pos = os_strchr(pos, ' ');
5859 if (pos == NULL)
5860 return -1;
5861 *pos++ = '\0';
5862
5863 max_disc_int = atoi(pos);
5864 pos = os_strchr(pos, ' ');
5865 if (pos == NULL)
5866 return -1;
5867 *pos++ = '\0';
5868
5869 max_disc_tu = atoi(pos);
5870
5871 return p2p_set_disc_int(wpa_s->global->p2p, min_disc_int,
5872 max_disc_int, max_disc_tu);
5873 }
5874
5875 if (os_strcmp(cmd, "per_sta_psk") == 0) {
5876 wpa_s->global->p2p_per_sta_psk = !!atoi(param);
5877 return 0;
5878 }
5879
5880 #ifdef CONFIG_WPS_NFC
5881 if (os_strcmp(cmd, "nfc_tag") == 0)
5882 return wpas_p2p_nfc_tag_enabled(wpa_s, !!atoi(param));
5883 #endif /* CONFIG_WPS_NFC */
5884
5885 if (os_strcmp(cmd, "disable_ip_addr_req") == 0) {
5886 wpa_s->p2p_disable_ip_addr_req = !!atoi(param);
5887 return 0;
5888 }
5889
5890 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Unknown P2P_SET field value '%s'",
5891 cmd);
5892
5893 return -1;
5894 }
5895
5896
p2p_ctrl_flush(struct wpa_supplicant * wpa_s)5897 static void p2p_ctrl_flush(struct wpa_supplicant *wpa_s)
5898 {
5899 os_memset(wpa_s->p2p_auth_invite, 0, ETH_ALEN);
5900 wpa_s->force_long_sd = 0;
5901 wpas_p2p_stop_find(wpa_s);
5902 if (wpa_s->global->p2p)
5903 p2p_flush(wpa_s->global->p2p);
5904 }
5905
5906
p2p_ctrl_presence_req(struct wpa_supplicant * wpa_s,char * cmd)5907 static int p2p_ctrl_presence_req(struct wpa_supplicant *wpa_s, char *cmd)
5908 {
5909 char *pos, *pos2;
5910 unsigned int dur1 = 0, int1 = 0, dur2 = 0, int2 = 0;
5911
5912 if (cmd[0]) {
5913 pos = os_strchr(cmd, ' ');
5914 if (pos == NULL)
5915 return -1;
5916 *pos++ = '\0';
5917 dur1 = atoi(cmd);
5918
5919 pos2 = os_strchr(pos, ' ');
5920 if (pos2)
5921 *pos2++ = '\0';
5922 int1 = atoi(pos);
5923 } else
5924 pos2 = NULL;
5925
5926 if (pos2) {
5927 pos = os_strchr(pos2, ' ');
5928 if (pos == NULL)
5929 return -1;
5930 *pos++ = '\0';
5931 dur2 = atoi(pos2);
5932 int2 = atoi(pos);
5933 }
5934
5935 return wpas_p2p_presence_req(wpa_s, dur1, int1, dur2, int2);
5936 }
5937
5938
p2p_ctrl_ext_listen(struct wpa_supplicant * wpa_s,char * cmd)5939 static int p2p_ctrl_ext_listen(struct wpa_supplicant *wpa_s, char *cmd)
5940 {
5941 char *pos;
5942 unsigned int period = 0, interval = 0;
5943
5944 if (cmd[0]) {
5945 pos = os_strchr(cmd, ' ');
5946 if (pos == NULL)
5947 return -1;
5948 *pos++ = '\0';
5949 period = atoi(cmd);
5950 interval = atoi(pos);
5951 }
5952
5953 return wpas_p2p_ext_listen(wpa_s, period, interval);
5954 }
5955
5956
p2p_ctrl_remove_client(struct wpa_supplicant * wpa_s,const char * cmd)5957 static int p2p_ctrl_remove_client(struct wpa_supplicant *wpa_s, const char *cmd)
5958 {
5959 const char *pos;
5960 u8 peer[ETH_ALEN];
5961 int iface_addr = 0;
5962
5963 pos = cmd;
5964 if (os_strncmp(pos, "iface=", 6) == 0) {
5965 iface_addr = 1;
5966 pos += 6;
5967 }
5968 if (hwaddr_aton(pos, peer))
5969 return -1;
5970
5971 wpas_p2p_remove_client(wpa_s, peer, iface_addr);
5972 return 0;
5973 }
5974
5975 #endif /* CONFIG_P2P */
5976
5977
freq_range_to_channel_list(struct wpa_supplicant * wpa_s,char * val)5978 static int * freq_range_to_channel_list(struct wpa_supplicant *wpa_s, char *val)
5979 {
5980 struct wpa_freq_range_list ranges;
5981 int *freqs = NULL;
5982 struct hostapd_hw_modes *mode;
5983 u16 i;
5984
5985 if (wpa_s->hw.modes == NULL)
5986 return NULL;
5987
5988 os_memset(&ranges, 0, sizeof(ranges));
5989 if (freq_range_list_parse(&ranges, val) < 0)
5990 return NULL;
5991
5992 for (i = 0; i < wpa_s->hw.num_modes; i++) {
5993 int j;
5994
5995 mode = &wpa_s->hw.modes[i];
5996 for (j = 0; j < mode->num_channels; j++) {
5997 unsigned int freq;
5998
5999 if (mode->channels[j].flag & HOSTAPD_CHAN_DISABLED)
6000 continue;
6001
6002 freq = mode->channels[j].freq;
6003 if (!freq_range_list_includes(&ranges, freq))
6004 continue;
6005
6006 int_array_add_unique(&freqs, freq);
6007 }
6008 }
6009
6010 os_free(ranges.range);
6011 return freqs;
6012 }
6013
6014
6015 #ifdef CONFIG_INTERWORKING
6016
ctrl_interworking_select(struct wpa_supplicant * wpa_s,char * param)6017 static int ctrl_interworking_select(struct wpa_supplicant *wpa_s, char *param)
6018 {
6019 int auto_sel = 0;
6020 int *freqs = NULL;
6021
6022 if (param) {
6023 char *pos;
6024
6025 auto_sel = os_strstr(param, "auto") != NULL;
6026
6027 pos = os_strstr(param, "freq=");
6028 if (pos) {
6029 freqs = freq_range_to_channel_list(wpa_s, pos + 5);
6030 if (freqs == NULL)
6031 return -1;
6032 }
6033
6034 }
6035
6036 return interworking_select(wpa_s, auto_sel, freqs);
6037 }
6038
6039
ctrl_interworking_connect(struct wpa_supplicant * wpa_s,char * dst,int only_add)6040 static int ctrl_interworking_connect(struct wpa_supplicant *wpa_s, char *dst,
6041 int only_add)
6042 {
6043 u8 bssid[ETH_ALEN];
6044 struct wpa_bss *bss;
6045
6046 if (hwaddr_aton(dst, bssid)) {
6047 wpa_printf(MSG_DEBUG, "Invalid BSSID '%s'", dst);
6048 return -1;
6049 }
6050
6051 bss = wpa_bss_get_bssid(wpa_s, bssid);
6052 if (bss == NULL) {
6053 wpa_printf(MSG_DEBUG, "Could not find BSS " MACSTR,
6054 MAC2STR(bssid));
6055 return -1;
6056 }
6057
6058 if (bss->ssid_len == 0) {
6059 int found = 0;
6060
6061 wpa_printf(MSG_DEBUG, "Selected BSS entry for " MACSTR
6062 " does not have SSID information", MAC2STR(bssid));
6063
6064 dl_list_for_each_reverse(bss, &wpa_s->bss, struct wpa_bss,
6065 list) {
6066 if (os_memcmp(bss->bssid, bssid, ETH_ALEN) == 0 &&
6067 bss->ssid_len > 0) {
6068 found = 1;
6069 break;
6070 }
6071 }
6072
6073 if (!found)
6074 return -1;
6075 wpa_printf(MSG_DEBUG,
6076 "Found another matching BSS entry with SSID");
6077 }
6078
6079 return interworking_connect(wpa_s, bss, only_add);
6080 }
6081
6082
get_anqp(struct wpa_supplicant * wpa_s,char * dst)6083 static int get_anqp(struct wpa_supplicant *wpa_s, char *dst)
6084 {
6085 u8 dst_addr[ETH_ALEN];
6086 int used;
6087 char *pos;
6088 #define MAX_ANQP_INFO_ID 100
6089 u16 id[MAX_ANQP_INFO_ID];
6090 size_t num_id = 0;
6091 u32 subtypes = 0;
6092
6093 used = hwaddr_aton2(dst, dst_addr);
6094 if (used < 0)
6095 return -1;
6096 pos = dst + used;
6097 if (*pos == ' ')
6098 pos++;
6099 while (num_id < MAX_ANQP_INFO_ID) {
6100 if (os_strncmp(pos, "hs20:", 5) == 0) {
6101 #ifdef CONFIG_HS20
6102 int num = atoi(pos + 5);
6103 if (num <= 0 || num > 31)
6104 return -1;
6105 subtypes |= BIT(num);
6106 #else /* CONFIG_HS20 */
6107 return -1;
6108 #endif /* CONFIG_HS20 */
6109 } else {
6110 id[num_id] = atoi(pos);
6111 if (id[num_id])
6112 num_id++;
6113 }
6114 pos = os_strchr(pos + 1, ',');
6115 if (pos == NULL)
6116 break;
6117 pos++;
6118 }
6119
6120 if (num_id == 0)
6121 return -1;
6122
6123 return anqp_send_req(wpa_s, dst_addr, id, num_id, subtypes);
6124 }
6125
6126
gas_request(struct wpa_supplicant * wpa_s,char * cmd)6127 static int gas_request(struct wpa_supplicant *wpa_s, char *cmd)
6128 {
6129 u8 dst_addr[ETH_ALEN];
6130 struct wpabuf *advproto, *query = NULL;
6131 int used, ret = -1;
6132 char *pos, *end;
6133 size_t len;
6134
6135 used = hwaddr_aton2(cmd, dst_addr);
6136 if (used < 0)
6137 return -1;
6138
6139 pos = cmd + used;
6140 while (*pos == ' ')
6141 pos++;
6142
6143 /* Advertisement Protocol ID */
6144 end = os_strchr(pos, ' ');
6145 if (end)
6146 len = end - pos;
6147 else
6148 len = os_strlen(pos);
6149 if (len & 0x01)
6150 return -1;
6151 len /= 2;
6152 if (len == 0)
6153 return -1;
6154 advproto = wpabuf_alloc(len);
6155 if (advproto == NULL)
6156 return -1;
6157 if (hexstr2bin(pos, wpabuf_put(advproto, len), len) < 0)
6158 goto fail;
6159
6160 if (end) {
6161 /* Optional Query Request */
6162 pos = end + 1;
6163 while (*pos == ' ')
6164 pos++;
6165
6166 len = os_strlen(pos);
6167 if (len) {
6168 if (len & 0x01)
6169 goto fail;
6170 len /= 2;
6171 if (len == 0)
6172 goto fail;
6173 query = wpabuf_alloc(len);
6174 if (query == NULL)
6175 goto fail;
6176 if (hexstr2bin(pos, wpabuf_put(query, len), len) < 0)
6177 goto fail;
6178 }
6179 }
6180
6181 ret = gas_send_request(wpa_s, dst_addr, advproto, query);
6182
6183 fail:
6184 wpabuf_free(advproto);
6185 wpabuf_free(query);
6186
6187 return ret;
6188 }
6189
6190
gas_response_get(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)6191 static int gas_response_get(struct wpa_supplicant *wpa_s, char *cmd, char *buf,
6192 size_t buflen)
6193 {
6194 u8 addr[ETH_ALEN];
6195 int dialog_token;
6196 int used;
6197 char *pos;
6198 size_t resp_len, start, requested_len;
6199 struct wpabuf *resp;
6200 int ret;
6201
6202 used = hwaddr_aton2(cmd, addr);
6203 if (used < 0)
6204 return -1;
6205
6206 pos = cmd + used;
6207 while (*pos == ' ')
6208 pos++;
6209 dialog_token = atoi(pos);
6210
6211 if (wpa_s->last_gas_resp &&
6212 os_memcmp(addr, wpa_s->last_gas_addr, ETH_ALEN) == 0 &&
6213 dialog_token == wpa_s->last_gas_dialog_token)
6214 resp = wpa_s->last_gas_resp;
6215 else if (wpa_s->prev_gas_resp &&
6216 os_memcmp(addr, wpa_s->prev_gas_addr, ETH_ALEN) == 0 &&
6217 dialog_token == wpa_s->prev_gas_dialog_token)
6218 resp = wpa_s->prev_gas_resp;
6219 else
6220 return -1;
6221
6222 resp_len = wpabuf_len(resp);
6223 start = 0;
6224 requested_len = resp_len;
6225
6226 pos = os_strchr(pos, ' ');
6227 if (pos) {
6228 start = atoi(pos);
6229 if (start > resp_len)
6230 return os_snprintf(buf, buflen, "FAIL-Invalid range");
6231 pos = os_strchr(pos, ',');
6232 if (pos == NULL)
6233 return -1;
6234 pos++;
6235 requested_len = atoi(pos);
6236 if (start + requested_len > resp_len)
6237 return os_snprintf(buf, buflen, "FAIL-Invalid range");
6238 }
6239
6240 if (requested_len * 2 + 1 > buflen)
6241 return os_snprintf(buf, buflen, "FAIL-Too long response");
6242
6243 ret = wpa_snprintf_hex(buf, buflen, wpabuf_head_u8(resp) + start,
6244 requested_len);
6245
6246 if (start + requested_len == resp_len) {
6247 /*
6248 * Free memory by dropping the response after it has been
6249 * fetched.
6250 */
6251 if (resp == wpa_s->prev_gas_resp) {
6252 wpabuf_free(wpa_s->prev_gas_resp);
6253 wpa_s->prev_gas_resp = NULL;
6254 } else {
6255 wpabuf_free(wpa_s->last_gas_resp);
6256 wpa_s->last_gas_resp = NULL;
6257 }
6258 }
6259
6260 return ret;
6261 }
6262 #endif /* CONFIG_INTERWORKING */
6263
6264
6265 #ifdef CONFIG_HS20
6266
get_hs20_anqp(struct wpa_supplicant * wpa_s,char * dst)6267 static int get_hs20_anqp(struct wpa_supplicant *wpa_s, char *dst)
6268 {
6269 u8 dst_addr[ETH_ALEN];
6270 int used;
6271 char *pos;
6272 u32 subtypes = 0;
6273
6274 used = hwaddr_aton2(dst, dst_addr);
6275 if (used < 0)
6276 return -1;
6277 pos = dst + used;
6278 if (*pos == ' ')
6279 pos++;
6280 for (;;) {
6281 int num = atoi(pos);
6282 if (num <= 0 || num > 31)
6283 return -1;
6284 subtypes |= BIT(num);
6285 pos = os_strchr(pos + 1, ',');
6286 if (pos == NULL)
6287 break;
6288 pos++;
6289 }
6290
6291 if (subtypes == 0)
6292 return -1;
6293
6294 return hs20_anqp_send_req(wpa_s, dst_addr, subtypes, NULL, 0);
6295 }
6296
6297
hs20_nai_home_realm_list(struct wpa_supplicant * wpa_s,const u8 * addr,const char * realm)6298 static int hs20_nai_home_realm_list(struct wpa_supplicant *wpa_s,
6299 const u8 *addr, const char *realm)
6300 {
6301 u8 *buf;
6302 size_t rlen, len;
6303 int ret;
6304
6305 rlen = os_strlen(realm);
6306 len = 3 + rlen;
6307 buf = os_malloc(len);
6308 if (buf == NULL)
6309 return -1;
6310 buf[0] = 1; /* NAI Home Realm Count */
6311 buf[1] = 0; /* Formatted in accordance with RFC 4282 */
6312 buf[2] = rlen;
6313 os_memcpy(buf + 3, realm, rlen);
6314
6315 ret = hs20_anqp_send_req(wpa_s, addr,
6316 BIT(HS20_STYPE_NAI_HOME_REALM_QUERY),
6317 buf, len);
6318
6319 os_free(buf);
6320
6321 return ret;
6322 }
6323
6324
hs20_get_nai_home_realm_list(struct wpa_supplicant * wpa_s,char * dst)6325 static int hs20_get_nai_home_realm_list(struct wpa_supplicant *wpa_s,
6326 char *dst)
6327 {
6328 struct wpa_cred *cred = wpa_s->conf->cred;
6329 u8 dst_addr[ETH_ALEN];
6330 int used;
6331 u8 *buf;
6332 size_t len;
6333 int ret;
6334
6335 used = hwaddr_aton2(dst, dst_addr);
6336 if (used < 0)
6337 return -1;
6338
6339 while (dst[used] == ' ')
6340 used++;
6341 if (os_strncmp(dst + used, "realm=", 6) == 0)
6342 return hs20_nai_home_realm_list(wpa_s, dst_addr,
6343 dst + used + 6);
6344
6345 len = os_strlen(dst + used);
6346
6347 if (len == 0 && cred && cred->realm)
6348 return hs20_nai_home_realm_list(wpa_s, dst_addr, cred->realm);
6349
6350 if (len & 1)
6351 return -1;
6352 len /= 2;
6353 buf = os_malloc(len);
6354 if (buf == NULL)
6355 return -1;
6356 if (hexstr2bin(dst + used, buf, len) < 0) {
6357 os_free(buf);
6358 return -1;
6359 }
6360
6361 ret = hs20_anqp_send_req(wpa_s, dst_addr,
6362 BIT(HS20_STYPE_NAI_HOME_REALM_QUERY),
6363 buf, len);
6364 os_free(buf);
6365
6366 return ret;
6367 }
6368
6369
hs20_icon_request(struct wpa_supplicant * wpa_s,char * cmd)6370 static int hs20_icon_request(struct wpa_supplicant *wpa_s, char *cmd)
6371 {
6372 u8 dst_addr[ETH_ALEN];
6373 int used;
6374 char *icon;
6375
6376 used = hwaddr_aton2(cmd, dst_addr);
6377 if (used < 0)
6378 return -1;
6379
6380 while (cmd[used] == ' ')
6381 used++;
6382 icon = &cmd[used];
6383
6384 wpa_s->fetch_osu_icon_in_progress = 0;
6385 return hs20_anqp_send_req(wpa_s, dst_addr, BIT(HS20_STYPE_ICON_REQUEST),
6386 (u8 *) icon, os_strlen(icon));
6387 }
6388
6389 #endif /* CONFIG_HS20 */
6390
6391
6392 #ifdef CONFIG_AUTOSCAN
6393
wpa_supplicant_ctrl_iface_autoscan(struct wpa_supplicant * wpa_s,char * cmd)6394 static int wpa_supplicant_ctrl_iface_autoscan(struct wpa_supplicant *wpa_s,
6395 char *cmd)
6396 {
6397 enum wpa_states state = wpa_s->wpa_state;
6398 char *new_params = NULL;
6399
6400 if (os_strlen(cmd) > 0) {
6401 new_params = os_strdup(cmd);
6402 if (new_params == NULL)
6403 return -1;
6404 }
6405
6406 os_free(wpa_s->conf->autoscan);
6407 wpa_s->conf->autoscan = new_params;
6408
6409 if (wpa_s->conf->autoscan == NULL)
6410 autoscan_deinit(wpa_s);
6411 else if (state == WPA_DISCONNECTED || state == WPA_INACTIVE)
6412 autoscan_init(wpa_s, 1);
6413 else if (state == WPA_SCANNING)
6414 wpa_supplicant_reinit_autoscan(wpa_s);
6415
6416 return 0;
6417 }
6418
6419 #endif /* CONFIG_AUTOSCAN */
6420
6421
6422 #ifdef CONFIG_WNM
6423
wpas_ctrl_iface_wnm_sleep(struct wpa_supplicant * wpa_s,char * cmd)6424 static int wpas_ctrl_iface_wnm_sleep(struct wpa_supplicant *wpa_s, char *cmd)
6425 {
6426 int enter;
6427 int intval = 0;
6428 char *pos;
6429 int ret;
6430 struct wpabuf *tfs_req = NULL;
6431
6432 if (os_strncmp(cmd, "enter", 5) == 0)
6433 enter = 1;
6434 else if (os_strncmp(cmd, "exit", 4) == 0)
6435 enter = 0;
6436 else
6437 return -1;
6438
6439 pos = os_strstr(cmd, " interval=");
6440 if (pos)
6441 intval = atoi(pos + 10);
6442
6443 pos = os_strstr(cmd, " tfs_req=");
6444 if (pos) {
6445 char *end;
6446 size_t len;
6447 pos += 9;
6448 end = os_strchr(pos, ' ');
6449 if (end)
6450 len = end - pos;
6451 else
6452 len = os_strlen(pos);
6453 if (len & 1)
6454 return -1;
6455 len /= 2;
6456 tfs_req = wpabuf_alloc(len);
6457 if (tfs_req == NULL)
6458 return -1;
6459 if (hexstr2bin(pos, wpabuf_put(tfs_req, len), len) < 0) {
6460 wpabuf_free(tfs_req);
6461 return -1;
6462 }
6463 }
6464
6465 ret = ieee802_11_send_wnmsleep_req(wpa_s, enter ? WNM_SLEEP_MODE_ENTER :
6466 WNM_SLEEP_MODE_EXIT, intval,
6467 tfs_req);
6468 wpabuf_free(tfs_req);
6469
6470 return ret;
6471 }
6472
6473
wpas_ctrl_iface_wnm_bss_query(struct wpa_supplicant * wpa_s,char * cmd)6474 static int wpas_ctrl_iface_wnm_bss_query(struct wpa_supplicant *wpa_s, char *cmd)
6475 {
6476 int query_reason;
6477
6478 query_reason = atoi(cmd);
6479
6480 wpa_printf(MSG_DEBUG, "CTRL_IFACE: WNM_BSS_QUERY query_reason=%d",
6481 query_reason);
6482
6483 return wnm_send_bss_transition_mgmt_query(wpa_s, query_reason);
6484 }
6485
6486 #endif /* CONFIG_WNM */
6487
6488
wpa_supplicant_signal_poll(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)6489 static int wpa_supplicant_signal_poll(struct wpa_supplicant *wpa_s, char *buf,
6490 size_t buflen)
6491 {
6492 struct wpa_signal_info si;
6493 int ret;
6494 char *pos, *end;
6495
6496 ret = wpa_drv_signal_poll(wpa_s, &si);
6497 if (ret)
6498 return -1;
6499
6500 pos = buf;
6501 end = buf + buflen;
6502
6503 ret = os_snprintf(pos, end - pos, "RSSI=%d\nLINKSPEED=%d\n"
6504 "NOISE=%d\nFREQUENCY=%u\n",
6505 si.current_signal, si.current_txrate / 1000,
6506 si.current_noise, si.frequency);
6507 if (os_snprintf_error(end - pos, ret))
6508 return -1;
6509 pos += ret;
6510
6511 if (si.chanwidth != CHAN_WIDTH_UNKNOWN) {
6512 ret = os_snprintf(pos, end - pos, "WIDTH=%s\n",
6513 channel_width_to_string(si.chanwidth));
6514 if (os_snprintf_error(end - pos, ret))
6515 return -1;
6516 pos += ret;
6517 }
6518
6519 if (si.center_frq1 > 0 && si.center_frq2 > 0) {
6520 ret = os_snprintf(pos, end - pos,
6521 "CENTER_FRQ1=%d\nCENTER_FRQ2=%d\n",
6522 si.center_frq1, si.center_frq2);
6523 if (os_snprintf_error(end - pos, ret))
6524 return -1;
6525 pos += ret;
6526 }
6527
6528 if (si.avg_signal) {
6529 ret = os_snprintf(pos, end - pos,
6530 "AVG_RSSI=%d\n", si.avg_signal);
6531 if (os_snprintf_error(end - pos, ret))
6532 return -1;
6533 pos += ret;
6534 }
6535
6536 if (si.avg_beacon_signal) {
6537 ret = os_snprintf(pos, end - pos,
6538 "AVG_BEACON_RSSI=%d\n", si.avg_beacon_signal);
6539 if (os_snprintf_error(end - pos, ret))
6540 return -1;
6541 pos += ret;
6542 }
6543
6544 return pos - buf;
6545 }
6546
6547
wpa_supplicant_pktcnt_poll(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)6548 static int wpa_supplicant_pktcnt_poll(struct wpa_supplicant *wpa_s, char *buf,
6549 size_t buflen)
6550 {
6551 struct hostap_sta_driver_data sta;
6552 int ret;
6553
6554 ret = wpa_drv_pktcnt_poll(wpa_s, &sta);
6555 if (ret)
6556 return -1;
6557
6558 ret = os_snprintf(buf, buflen, "TXGOOD=%lu\nTXBAD=%lu\nRXGOOD=%lu\n",
6559 sta.tx_packets, sta.tx_retry_failed, sta.rx_packets);
6560 if (os_snprintf_error(buflen, ret))
6561 return -1;
6562 return ret;
6563 }
6564
6565
6566 #ifdef ANDROID
wpa_supplicant_driver_cmd(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)6567 static int wpa_supplicant_driver_cmd(struct wpa_supplicant *wpa_s, char *cmd,
6568 char *buf, size_t buflen)
6569 {
6570 int ret;
6571
6572 ret = wpa_drv_driver_cmd(wpa_s, cmd, buf, buflen);
6573 if (ret == 0) {
6574 if (os_strncasecmp(cmd, "COUNTRY", 7) == 0) {
6575 struct p2p_data *p2p = wpa_s->global->p2p;
6576 if (p2p) {
6577 char country[3];
6578 country[0] = cmd[8];
6579 country[1] = cmd[9];
6580 country[2] = 0x04;
6581 p2p_set_country(p2p, country);
6582 }
6583 }
6584 ret = os_snprintf(buf, buflen, "%s\n", "OK");
6585 if (os_snprintf_error(buflen, ret))
6586 ret = -1;
6587 }
6588 return ret;
6589 }
6590 #endif /* ANDROID */
6591
6592
wpa_supplicant_vendor_cmd(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)6593 static int wpa_supplicant_vendor_cmd(struct wpa_supplicant *wpa_s, char *cmd,
6594 char *buf, size_t buflen)
6595 {
6596 int ret;
6597 char *pos;
6598 u8 *data = NULL;
6599 unsigned int vendor_id, subcmd;
6600 struct wpabuf *reply;
6601 size_t data_len = 0;
6602
6603 /* cmd: <vendor id> <subcommand id> [<hex formatted data>] */
6604 vendor_id = strtoul(cmd, &pos, 16);
6605 if (!isblank(*pos))
6606 return -EINVAL;
6607
6608 subcmd = strtoul(pos, &pos, 10);
6609
6610 if (*pos != '\0') {
6611 if (!isblank(*pos++))
6612 return -EINVAL;
6613 data_len = os_strlen(pos);
6614 }
6615
6616 if (data_len) {
6617 data_len /= 2;
6618 data = os_malloc(data_len);
6619 if (!data)
6620 return -1;
6621
6622 if (hexstr2bin(pos, data, data_len)) {
6623 wpa_printf(MSG_DEBUG,
6624 "Vendor command: wrong parameter format");
6625 os_free(data);
6626 return -EINVAL;
6627 }
6628 }
6629
6630 reply = wpabuf_alloc((buflen - 1) / 2);
6631 if (!reply) {
6632 os_free(data);
6633 return -1;
6634 }
6635
6636 ret = wpa_drv_vendor_cmd(wpa_s, vendor_id, subcmd, data, data_len,
6637 reply);
6638
6639 if (ret == 0)
6640 ret = wpa_snprintf_hex(buf, buflen, wpabuf_head_u8(reply),
6641 wpabuf_len(reply));
6642
6643 wpabuf_free(reply);
6644 os_free(data);
6645
6646 return ret;
6647 }
6648
6649
wpa_supplicant_ctrl_iface_flush(struct wpa_supplicant * wpa_s)6650 static void wpa_supplicant_ctrl_iface_flush(struct wpa_supplicant *wpa_s)
6651 {
6652 #ifdef CONFIG_P2P
6653 struct wpa_supplicant *p2p_wpa_s = wpa_s->global->p2p_init_wpa_s ?
6654 wpa_s->global->p2p_init_wpa_s : wpa_s;
6655 #endif /* CONFIG_P2P */
6656
6657 wpa_dbg(wpa_s, MSG_DEBUG, "Flush all wpa_supplicant state");
6658
6659 #ifdef CONFIG_P2P
6660 wpas_p2p_cancel(p2p_wpa_s);
6661 p2p_ctrl_flush(p2p_wpa_s);
6662 wpas_p2p_group_remove(p2p_wpa_s, "*");
6663 wpas_p2p_service_flush(p2p_wpa_s);
6664 p2p_wpa_s->global->p2p_disabled = 0;
6665 p2p_wpa_s->global->p2p_per_sta_psk = 0;
6666 p2p_wpa_s->conf->num_sec_device_types = 0;
6667 p2p_wpa_s->p2p_disable_ip_addr_req = 0;
6668 os_free(p2p_wpa_s->global->p2p_go_avoid_freq.range);
6669 p2p_wpa_s->global->p2p_go_avoid_freq.range = NULL;
6670 p2p_wpa_s->global->pending_p2ps_group = 0;
6671 #endif /* CONFIG_P2P */
6672
6673 #ifdef CONFIG_WPS_TESTING
6674 wps_version_number = 0x20;
6675 wps_testing_dummy_cred = 0;
6676 wps_corrupt_pkhash = 0;
6677 #endif /* CONFIG_WPS_TESTING */
6678 #ifdef CONFIG_WPS
6679 wpa_s->wps_fragment_size = 0;
6680 wpas_wps_cancel(wpa_s);
6681 wps_registrar_flush(wpa_s->wps->registrar);
6682 #endif /* CONFIG_WPS */
6683 wpa_s->after_wps = 0;
6684 wpa_s->known_wps_freq = 0;
6685
6686 #ifdef CONFIG_TDLS
6687 #ifdef CONFIG_TDLS_TESTING
6688 extern unsigned int tdls_testing;
6689 tdls_testing = 0;
6690 #endif /* CONFIG_TDLS_TESTING */
6691 wpa_drv_tdls_oper(wpa_s, TDLS_ENABLE, NULL);
6692 wpa_tdls_enable(wpa_s->wpa, 1);
6693 #endif /* CONFIG_TDLS */
6694
6695 eloop_cancel_timeout(wpa_supplicant_stop_countermeasures, wpa_s, NULL);
6696 wpa_supplicant_stop_countermeasures(wpa_s, NULL);
6697
6698 wpa_s->no_keep_alive = 0;
6699 wpa_s->own_disconnect_req = 0;
6700
6701 os_free(wpa_s->disallow_aps_bssid);
6702 wpa_s->disallow_aps_bssid = NULL;
6703 wpa_s->disallow_aps_bssid_count = 0;
6704 os_free(wpa_s->disallow_aps_ssid);
6705 wpa_s->disallow_aps_ssid = NULL;
6706 wpa_s->disallow_aps_ssid_count = 0;
6707
6708 wpa_s->set_sta_uapsd = 0;
6709 wpa_s->sta_uapsd = 0;
6710
6711 wpa_drv_radio_disable(wpa_s, 0);
6712 wpa_blacklist_clear(wpa_s);
6713 wpa_s->extra_blacklist_count = 0;
6714 wpa_supplicant_ctrl_iface_remove_network(wpa_s, "all");
6715 wpa_supplicant_ctrl_iface_remove_cred(wpa_s, "all");
6716 wpa_config_flush_blobs(wpa_s->conf);
6717 wpa_s->conf->auto_interworking = 0;
6718 wpa_s->conf->okc = 0;
6719
6720 wpa_sm_pmksa_cache_flush(wpa_s->wpa, NULL);
6721 rsn_preauth_deinit(wpa_s->wpa);
6722
6723 wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_LIFETIME, 43200);
6724 wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_REAUTH_THRESHOLD, 70);
6725 wpa_sm_set_param(wpa_s->wpa, RSNA_SA_TIMEOUT, 60);
6726 eapol_sm_notify_logoff(wpa_s->eapol, FALSE);
6727
6728 radio_remove_works(wpa_s, NULL, 1);
6729 wpa_s->ext_work_in_progress = 0;
6730
6731 wpa_s->next_ssid = NULL;
6732
6733 #ifdef CONFIG_INTERWORKING
6734 hs20_cancel_fetch_osu(wpa_s);
6735 #endif /* CONFIG_INTERWORKING */
6736
6737 wpa_s->ext_mgmt_frame_handling = 0;
6738 wpa_s->ext_eapol_frame_io = 0;
6739 #ifdef CONFIG_TESTING_OPTIONS
6740 wpa_s->extra_roc_dur = 0;
6741 wpa_s->test_failure = WPAS_TEST_FAILURE_NONE;
6742 #endif /* CONFIG_TESTING_OPTIONS */
6743
6744 wpa_s->disconnected = 0;
6745 os_free(wpa_s->next_scan_freqs);
6746 wpa_s->next_scan_freqs = NULL;
6747
6748 wpa_bss_flush(wpa_s);
6749 if (!dl_list_empty(&wpa_s->bss)) {
6750 wpa_printf(MSG_DEBUG,
6751 "BSS table not empty after flush: %u entries, current_bss=%p bssid="
6752 MACSTR " pending_bssid=" MACSTR,
6753 dl_list_len(&wpa_s->bss), wpa_s->current_bss,
6754 MAC2STR(wpa_s->bssid),
6755 MAC2STR(wpa_s->pending_bssid));
6756 }
6757
6758 eloop_cancel_timeout(wpas_network_reenabled, wpa_s, NULL);
6759 }
6760
6761
wpas_ctrl_radio_work_show(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)6762 static int wpas_ctrl_radio_work_show(struct wpa_supplicant *wpa_s,
6763 char *buf, size_t buflen)
6764 {
6765 struct wpa_radio_work *work;
6766 char *pos, *end;
6767 struct os_reltime now, diff;
6768
6769 pos = buf;
6770 end = buf + buflen;
6771
6772 os_get_reltime(&now);
6773
6774 dl_list_for_each(work, &wpa_s->radio->work, struct wpa_radio_work, list)
6775 {
6776 int ret;
6777
6778 os_reltime_sub(&now, &work->time, &diff);
6779 ret = os_snprintf(pos, end - pos, "%s@%s:%u:%u:%ld.%06ld\n",
6780 work->type, work->wpa_s->ifname, work->freq,
6781 work->started, diff.sec, diff.usec);
6782 if (os_snprintf_error(end - pos, ret))
6783 break;
6784 pos += ret;
6785 }
6786
6787 return pos - buf;
6788 }
6789
6790
wpas_ctrl_radio_work_timeout(void * eloop_ctx,void * timeout_ctx)6791 static void wpas_ctrl_radio_work_timeout(void *eloop_ctx, void *timeout_ctx)
6792 {
6793 struct wpa_radio_work *work = eloop_ctx;
6794 struct wpa_external_work *ework = work->ctx;
6795
6796 wpa_dbg(work->wpa_s, MSG_DEBUG,
6797 "Timing out external radio work %u (%s)",
6798 ework->id, work->type);
6799 wpa_msg(work->wpa_s, MSG_INFO, EXT_RADIO_WORK_TIMEOUT "%u", ework->id);
6800 work->wpa_s->ext_work_in_progress = 0;
6801 radio_work_done(work);
6802 os_free(ework);
6803 }
6804
6805
wpas_ctrl_radio_work_cb(struct wpa_radio_work * work,int deinit)6806 static void wpas_ctrl_radio_work_cb(struct wpa_radio_work *work, int deinit)
6807 {
6808 struct wpa_external_work *ework = work->ctx;
6809
6810 if (deinit) {
6811 if (work->started)
6812 eloop_cancel_timeout(wpas_ctrl_radio_work_timeout,
6813 work, NULL);
6814
6815 os_free(ework);
6816 return;
6817 }
6818
6819 wpa_dbg(work->wpa_s, MSG_DEBUG, "Starting external radio work %u (%s)",
6820 ework->id, ework->type);
6821 wpa_msg(work->wpa_s, MSG_INFO, EXT_RADIO_WORK_START "%u", ework->id);
6822 work->wpa_s->ext_work_in_progress = 1;
6823 if (!ework->timeout)
6824 ework->timeout = 10;
6825 eloop_register_timeout(ework->timeout, 0, wpas_ctrl_radio_work_timeout,
6826 work, NULL);
6827 }
6828
6829
wpas_ctrl_radio_work_add(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)6830 static int wpas_ctrl_radio_work_add(struct wpa_supplicant *wpa_s, char *cmd,
6831 char *buf, size_t buflen)
6832 {
6833 struct wpa_external_work *ework;
6834 char *pos, *pos2;
6835 size_t type_len;
6836 int ret;
6837 unsigned int freq = 0;
6838
6839 /* format: <name> [freq=<MHz>] [timeout=<seconds>] */
6840
6841 ework = os_zalloc(sizeof(*ework));
6842 if (ework == NULL)
6843 return -1;
6844
6845 pos = os_strchr(cmd, ' ');
6846 if (pos) {
6847 type_len = pos - cmd;
6848 pos++;
6849
6850 pos2 = os_strstr(pos, "freq=");
6851 if (pos2)
6852 freq = atoi(pos2 + 5);
6853
6854 pos2 = os_strstr(pos, "timeout=");
6855 if (pos2)
6856 ework->timeout = atoi(pos2 + 8);
6857 } else {
6858 type_len = os_strlen(cmd);
6859 }
6860 if (4 + type_len >= sizeof(ework->type))
6861 type_len = sizeof(ework->type) - 4 - 1;
6862 os_strlcpy(ework->type, "ext:", sizeof(ework->type));
6863 os_memcpy(ework->type + 4, cmd, type_len);
6864 ework->type[4 + type_len] = '\0';
6865
6866 wpa_s->ext_work_id++;
6867 if (wpa_s->ext_work_id == 0)
6868 wpa_s->ext_work_id++;
6869 ework->id = wpa_s->ext_work_id;
6870
6871 if (radio_add_work(wpa_s, freq, ework->type, 0, wpas_ctrl_radio_work_cb,
6872 ework) < 0) {
6873 os_free(ework);
6874 return -1;
6875 }
6876
6877 ret = os_snprintf(buf, buflen, "%u", ework->id);
6878 if (os_snprintf_error(buflen, ret))
6879 return -1;
6880 return ret;
6881 }
6882
6883
wpas_ctrl_radio_work_done(struct wpa_supplicant * wpa_s,char * cmd)6884 static int wpas_ctrl_radio_work_done(struct wpa_supplicant *wpa_s, char *cmd)
6885 {
6886 struct wpa_radio_work *work;
6887 unsigned int id = atoi(cmd);
6888
6889 dl_list_for_each(work, &wpa_s->radio->work, struct wpa_radio_work, list)
6890 {
6891 struct wpa_external_work *ework;
6892
6893 if (os_strncmp(work->type, "ext:", 4) != 0)
6894 continue;
6895 ework = work->ctx;
6896 if (id && ework->id != id)
6897 continue;
6898 wpa_dbg(wpa_s, MSG_DEBUG,
6899 "Completed external radio work %u (%s)",
6900 ework->id, ework->type);
6901 eloop_cancel_timeout(wpas_ctrl_radio_work_timeout, work, NULL);
6902 wpa_s->ext_work_in_progress = 0;
6903 radio_work_done(work);
6904 os_free(ework);
6905 return 3; /* "OK\n" */
6906 }
6907
6908 return -1;
6909 }
6910
6911
wpas_ctrl_radio_work(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)6912 static int wpas_ctrl_radio_work(struct wpa_supplicant *wpa_s, char *cmd,
6913 char *buf, size_t buflen)
6914 {
6915 if (os_strcmp(cmd, "show") == 0)
6916 return wpas_ctrl_radio_work_show(wpa_s, buf, buflen);
6917 if (os_strncmp(cmd, "add ", 4) == 0)
6918 return wpas_ctrl_radio_work_add(wpa_s, cmd + 4, buf, buflen);
6919 if (os_strncmp(cmd, "done ", 5) == 0)
6920 return wpas_ctrl_radio_work_done(wpa_s, cmd + 4);
6921 return -1;
6922 }
6923
6924
wpas_ctrl_radio_work_flush(struct wpa_supplicant * wpa_s)6925 void wpas_ctrl_radio_work_flush(struct wpa_supplicant *wpa_s)
6926 {
6927 struct wpa_radio_work *work, *tmp;
6928
6929 if (!wpa_s || !wpa_s->radio)
6930 return;
6931
6932 dl_list_for_each_safe(work, tmp, &wpa_s->radio->work,
6933 struct wpa_radio_work, list) {
6934 struct wpa_external_work *ework;
6935
6936 if (os_strncmp(work->type, "ext:", 4) != 0)
6937 continue;
6938 ework = work->ctx;
6939 wpa_dbg(wpa_s, MSG_DEBUG,
6940 "Flushing%s external radio work %u (%s)",
6941 work->started ? " started" : "", ework->id,
6942 ework->type);
6943 if (work->started)
6944 eloop_cancel_timeout(wpas_ctrl_radio_work_timeout,
6945 work, NULL);
6946 radio_work_done(work);
6947 os_free(ework);
6948 }
6949 }
6950
6951
wpas_ctrl_eapol_response(void * eloop_ctx,void * timeout_ctx)6952 static void wpas_ctrl_eapol_response(void *eloop_ctx, void *timeout_ctx)
6953 {
6954 struct wpa_supplicant *wpa_s = eloop_ctx;
6955 eapol_sm_notify_ctrl_response(wpa_s->eapol);
6956 }
6957
6958
scan_id_list_parse(struct wpa_supplicant * wpa_s,const char * value,unsigned int * scan_id_count,int scan_id[])6959 static int scan_id_list_parse(struct wpa_supplicant *wpa_s, const char *value,
6960 unsigned int *scan_id_count, int scan_id[])
6961 {
6962 const char *pos = value;
6963
6964 while (pos) {
6965 if (*pos == ' ' || *pos == '\0')
6966 break;
6967 if (*scan_id_count == MAX_SCAN_ID)
6968 return -1;
6969 scan_id[(*scan_id_count)++] = atoi(pos);
6970 pos = os_strchr(pos, ',');
6971 if (pos)
6972 pos++;
6973 }
6974
6975 return 0;
6976 }
6977
6978
wpas_ctrl_scan(struct wpa_supplicant * wpa_s,char * params,char * reply,int reply_size,int * reply_len)6979 static void wpas_ctrl_scan(struct wpa_supplicant *wpa_s, char *params,
6980 char *reply, int reply_size, int *reply_len)
6981 {
6982 char *pos;
6983 unsigned int manual_scan_passive = 0;
6984 unsigned int manual_scan_use_id = 0;
6985 unsigned int manual_scan_only_new = 0;
6986 unsigned int scan_only = 0;
6987 unsigned int scan_id_count = 0;
6988 int scan_id[MAX_SCAN_ID];
6989 void (*scan_res_handler)(struct wpa_supplicant *wpa_s,
6990 struct wpa_scan_results *scan_res);
6991 int *manual_scan_freqs = NULL;
6992 struct wpa_ssid_value *ssid = NULL, *ns;
6993 unsigned int ssid_count = 0;
6994
6995 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
6996 *reply_len = -1;
6997 return;
6998 }
6999
7000 if (radio_work_pending(wpa_s, "scan")) {
7001 wpa_printf(MSG_DEBUG,
7002 "Pending scan scheduled - reject new request");
7003 *reply_len = os_snprintf(reply, reply_size, "FAIL-BUSY\n");
7004 return;
7005 }
7006
7007 #ifdef CONFIG_INTERWORKING
7008 if (wpa_s->fetch_anqp_in_progress || wpa_s->network_select) {
7009 wpa_printf(MSG_DEBUG,
7010 "Interworking select in progress - reject new scan");
7011 *reply_len = os_snprintf(reply, reply_size, "FAIL-BUSY\n");
7012 return;
7013 }
7014 #endif /* CONFIG_INTERWORKING */
7015
7016 if (params) {
7017 if (os_strncasecmp(params, "TYPE=ONLY", 9) == 0)
7018 scan_only = 1;
7019
7020 pos = os_strstr(params, "freq=");
7021 if (pos) {
7022 manual_scan_freqs = freq_range_to_channel_list(wpa_s,
7023 pos + 5);
7024 if (manual_scan_freqs == NULL) {
7025 *reply_len = -1;
7026 goto done;
7027 }
7028 }
7029
7030 pos = os_strstr(params, "passive=");
7031 if (pos)
7032 manual_scan_passive = !!atoi(pos + 8);
7033
7034 pos = os_strstr(params, "use_id=");
7035 if (pos)
7036 manual_scan_use_id = atoi(pos + 7);
7037
7038 pos = os_strstr(params, "only_new=1");
7039 if (pos)
7040 manual_scan_only_new = 1;
7041
7042 pos = os_strstr(params, "scan_id=");
7043 if (pos && scan_id_list_parse(wpa_s, pos + 8, &scan_id_count,
7044 scan_id) < 0) {
7045 *reply_len = -1;
7046 goto done;
7047 }
7048
7049 pos = params;
7050 while (pos && *pos != '\0') {
7051 if (os_strncmp(pos, "ssid ", 5) == 0) {
7052 char *end;
7053
7054 pos += 5;
7055 end = pos;
7056 while (*end) {
7057 if (*end == '\0' || *end == ' ')
7058 break;
7059 end++;
7060 }
7061
7062 ns = os_realloc_array(
7063 ssid, ssid_count + 1,
7064 sizeof(struct wpa_ssid_value));
7065 if (ns == NULL) {
7066 *reply_len = -1;
7067 goto done;
7068 }
7069 ssid = ns;
7070
7071 if ((end - pos) & 0x01 ||
7072 end - pos > 2 * SSID_MAX_LEN ||
7073 hexstr2bin(pos, ssid[ssid_count].ssid,
7074 (end - pos) / 2) < 0) {
7075 wpa_printf(MSG_DEBUG,
7076 "Invalid SSID value '%s'",
7077 pos);
7078 *reply_len = -1;
7079 goto done;
7080 }
7081 ssid[ssid_count].ssid_len = (end - pos) / 2;
7082 wpa_hexdump_ascii(MSG_DEBUG, "scan SSID",
7083 ssid[ssid_count].ssid,
7084 ssid[ssid_count].ssid_len);
7085 ssid_count++;
7086 pos = end;
7087 }
7088
7089 pos = os_strchr(pos, ' ');
7090 if (pos)
7091 pos++;
7092 }
7093 }
7094
7095 wpa_s->num_ssids_from_scan_req = ssid_count;
7096 os_free(wpa_s->ssids_from_scan_req);
7097 if (ssid_count) {
7098 wpa_s->ssids_from_scan_req = ssid;
7099 ssid = NULL;
7100 } else {
7101 wpa_s->ssids_from_scan_req = NULL;
7102 }
7103
7104 if (scan_only)
7105 scan_res_handler = scan_only_handler;
7106 else if (wpa_s->scan_res_handler == scan_only_handler)
7107 scan_res_handler = NULL;
7108 else
7109 scan_res_handler = wpa_s->scan_res_handler;
7110
7111 if (!wpa_s->sched_scanning && !wpa_s->scanning &&
7112 ((wpa_s->wpa_state <= WPA_SCANNING) ||
7113 (wpa_s->wpa_state == WPA_COMPLETED))) {
7114 wpa_s->manual_scan_passive = manual_scan_passive;
7115 wpa_s->manual_scan_use_id = manual_scan_use_id;
7116 wpa_s->manual_scan_only_new = manual_scan_only_new;
7117 wpa_s->scan_id_count = scan_id_count;
7118 os_memcpy(wpa_s->scan_id, scan_id, scan_id_count * sizeof(int));
7119 wpa_s->scan_res_handler = scan_res_handler;
7120 os_free(wpa_s->manual_scan_freqs);
7121 wpa_s->manual_scan_freqs = manual_scan_freqs;
7122 manual_scan_freqs = NULL;
7123
7124 wpa_s->normal_scans = 0;
7125 wpa_s->scan_req = MANUAL_SCAN_REQ;
7126 wpa_s->after_wps = 0;
7127 wpa_s->known_wps_freq = 0;
7128 wpa_supplicant_req_scan(wpa_s, 0, 0);
7129 if (wpa_s->manual_scan_use_id) {
7130 wpa_s->manual_scan_id++;
7131 wpa_dbg(wpa_s, MSG_DEBUG, "Assigned scan id %u",
7132 wpa_s->manual_scan_id);
7133 *reply_len = os_snprintf(reply, reply_size, "%u\n",
7134 wpa_s->manual_scan_id);
7135 }
7136 } else if (wpa_s->sched_scanning) {
7137 wpa_s->manual_scan_passive = manual_scan_passive;
7138 wpa_s->manual_scan_use_id = manual_scan_use_id;
7139 wpa_s->manual_scan_only_new = manual_scan_only_new;
7140 wpa_s->scan_id_count = scan_id_count;
7141 os_memcpy(wpa_s->scan_id, scan_id, scan_id_count * sizeof(int));
7142 wpa_s->scan_res_handler = scan_res_handler;
7143 os_free(wpa_s->manual_scan_freqs);
7144 wpa_s->manual_scan_freqs = manual_scan_freqs;
7145 manual_scan_freqs = NULL;
7146
7147 wpa_printf(MSG_DEBUG, "Stop ongoing sched_scan to allow requested full scan to proceed");
7148 wpa_supplicant_cancel_sched_scan(wpa_s);
7149 wpa_s->scan_req = MANUAL_SCAN_REQ;
7150 wpa_supplicant_req_scan(wpa_s, 0, 0);
7151 if (wpa_s->manual_scan_use_id) {
7152 wpa_s->manual_scan_id++;
7153 *reply_len = os_snprintf(reply, reply_size, "%u\n",
7154 wpa_s->manual_scan_id);
7155 wpa_dbg(wpa_s, MSG_DEBUG, "Assigned scan id %u",
7156 wpa_s->manual_scan_id);
7157 }
7158 } else {
7159 wpa_printf(MSG_DEBUG, "Ongoing scan action - reject new request");
7160 *reply_len = os_snprintf(reply, reply_size, "FAIL-BUSY\n");
7161 }
7162
7163 done:
7164 os_free(manual_scan_freqs);
7165 os_free(ssid);
7166 }
7167
7168
7169 #ifdef CONFIG_TESTING_OPTIONS
7170
wpas_ctrl_iface_mgmt_tx_cb(struct wpa_supplicant * wpa_s,unsigned int freq,const u8 * dst,const u8 * src,const u8 * bssid,const u8 * data,size_t data_len,enum offchannel_send_action_result result)7171 static void wpas_ctrl_iface_mgmt_tx_cb(struct wpa_supplicant *wpa_s,
7172 unsigned int freq, const u8 *dst,
7173 const u8 *src, const u8 *bssid,
7174 const u8 *data, size_t data_len,
7175 enum offchannel_send_action_result
7176 result)
7177 {
7178 wpa_msg(wpa_s, MSG_INFO, "MGMT-TX-STATUS freq=%u dst=" MACSTR
7179 " src=" MACSTR " bssid=" MACSTR " result=%s",
7180 freq, MAC2STR(dst), MAC2STR(src), MAC2STR(bssid),
7181 result == OFFCHANNEL_SEND_ACTION_SUCCESS ?
7182 "SUCCESS" : (result == OFFCHANNEL_SEND_ACTION_NO_ACK ?
7183 "NO_ACK" : "FAILED"));
7184 }
7185
7186
wpas_ctrl_iface_mgmt_tx(struct wpa_supplicant * wpa_s,char * cmd)7187 static int wpas_ctrl_iface_mgmt_tx(struct wpa_supplicant *wpa_s, char *cmd)
7188 {
7189 char *pos, *param;
7190 size_t len;
7191 u8 *buf, da[ETH_ALEN], bssid[ETH_ALEN];
7192 int res, used;
7193 int freq = 0, no_cck = 0, wait_time = 0;
7194
7195 /* <DA> <BSSID> [freq=<MHz>] [wait_time=<ms>] [no_cck=1]
7196 * <action=Action frame payload> */
7197
7198 wpa_printf(MSG_DEBUG, "External MGMT TX: %s", cmd);
7199
7200 pos = cmd;
7201 used = hwaddr_aton2(pos, da);
7202 if (used < 0)
7203 return -1;
7204 pos += used;
7205 while (*pos == ' ')
7206 pos++;
7207 used = hwaddr_aton2(pos, bssid);
7208 if (used < 0)
7209 return -1;
7210 pos += used;
7211
7212 param = os_strstr(pos, " freq=");
7213 if (param) {
7214 param += 6;
7215 freq = atoi(param);
7216 }
7217
7218 param = os_strstr(pos, " no_cck=");
7219 if (param) {
7220 param += 8;
7221 no_cck = atoi(param);
7222 }
7223
7224 param = os_strstr(pos, " wait_time=");
7225 if (param) {
7226 param += 11;
7227 wait_time = atoi(param);
7228 }
7229
7230 param = os_strstr(pos, " action=");
7231 if (param == NULL)
7232 return -1;
7233 param += 8;
7234
7235 len = os_strlen(param);
7236 if (len & 1)
7237 return -1;
7238 len /= 2;
7239
7240 buf = os_malloc(len);
7241 if (buf == NULL)
7242 return -1;
7243
7244 if (hexstr2bin(param, buf, len) < 0) {
7245 os_free(buf);
7246 return -1;
7247 }
7248
7249 res = offchannel_send_action(wpa_s, freq, da, wpa_s->own_addr, bssid,
7250 buf, len, wait_time,
7251 wpas_ctrl_iface_mgmt_tx_cb, no_cck);
7252 os_free(buf);
7253 return res;
7254 }
7255
7256
wpas_ctrl_iface_mgmt_tx_done(struct wpa_supplicant * wpa_s)7257 static void wpas_ctrl_iface_mgmt_tx_done(struct wpa_supplicant *wpa_s)
7258 {
7259 wpa_printf(MSG_DEBUG, "External MGMT TX - done waiting");
7260 offchannel_send_action_done(wpa_s);
7261 }
7262
7263
wpas_ctrl_iface_driver_event(struct wpa_supplicant * wpa_s,char * cmd)7264 static int wpas_ctrl_iface_driver_event(struct wpa_supplicant *wpa_s, char *cmd)
7265 {
7266 char *pos, *param;
7267 union wpa_event_data event;
7268 enum wpa_event_type ev;
7269
7270 /* <event name> [parameters..] */
7271
7272 wpa_dbg(wpa_s, MSG_DEBUG, "Testing - external driver event: %s", cmd);
7273
7274 pos = cmd;
7275 param = os_strchr(pos, ' ');
7276 if (param)
7277 *param++ = '\0';
7278
7279 os_memset(&event, 0, sizeof(event));
7280
7281 if (os_strcmp(cmd, "INTERFACE_ENABLED") == 0) {
7282 ev = EVENT_INTERFACE_ENABLED;
7283 } else if (os_strcmp(cmd, "INTERFACE_DISABLED") == 0) {
7284 ev = EVENT_INTERFACE_DISABLED;
7285 } else if (os_strcmp(cmd, "AVOID_FREQUENCIES") == 0) {
7286 ev = EVENT_AVOID_FREQUENCIES;
7287 if (param == NULL)
7288 param = "";
7289 if (freq_range_list_parse(&event.freq_range, param) < 0)
7290 return -1;
7291 wpa_supplicant_event(wpa_s, ev, &event);
7292 os_free(event.freq_range.range);
7293 return 0;
7294 } else {
7295 wpa_dbg(wpa_s, MSG_DEBUG, "Testing - unknown driver event: %s",
7296 cmd);
7297 return -1;
7298 }
7299
7300 wpa_supplicant_event(wpa_s, ev, &event);
7301
7302 return 0;
7303 }
7304
7305
wpas_ctrl_iface_eapol_rx(struct wpa_supplicant * wpa_s,char * cmd)7306 static int wpas_ctrl_iface_eapol_rx(struct wpa_supplicant *wpa_s, char *cmd)
7307 {
7308 char *pos;
7309 u8 src[ETH_ALEN], *buf;
7310 int used;
7311 size_t len;
7312
7313 wpa_printf(MSG_DEBUG, "External EAPOL RX: %s", cmd);
7314
7315 pos = cmd;
7316 used = hwaddr_aton2(pos, src);
7317 if (used < 0)
7318 return -1;
7319 pos += used;
7320 while (*pos == ' ')
7321 pos++;
7322
7323 len = os_strlen(pos);
7324 if (len & 1)
7325 return -1;
7326 len /= 2;
7327
7328 buf = os_malloc(len);
7329 if (buf == NULL)
7330 return -1;
7331
7332 if (hexstr2bin(pos, buf, len) < 0) {
7333 os_free(buf);
7334 return -1;
7335 }
7336
7337 wpa_supplicant_rx_eapol(wpa_s, src, buf, len);
7338 os_free(buf);
7339
7340 return 0;
7341 }
7342
7343
ipv4_hdr_checksum(const void * buf,size_t len)7344 static u16 ipv4_hdr_checksum(const void *buf, size_t len)
7345 {
7346 size_t i;
7347 u32 sum = 0;
7348 const u16 *pos = buf;
7349
7350 for (i = 0; i < len / 2; i++)
7351 sum += *pos++;
7352
7353 while (sum >> 16)
7354 sum = (sum & 0xffff) + (sum >> 16);
7355
7356 return sum ^ 0xffff;
7357 }
7358
7359
7360 #define HWSIM_PACKETLEN 1500
7361 #define HWSIM_IP_LEN (HWSIM_PACKETLEN - sizeof(struct ether_header))
7362
wpas_data_test_rx(void * ctx,const u8 * src_addr,const u8 * buf,size_t len)7363 void wpas_data_test_rx(void *ctx, const u8 *src_addr, const u8 *buf, size_t len)
7364 {
7365 struct wpa_supplicant *wpa_s = ctx;
7366 const struct ether_header *eth;
7367 const struct iphdr *ip;
7368 const u8 *pos;
7369 unsigned int i;
7370
7371 if (len != HWSIM_PACKETLEN)
7372 return;
7373
7374 eth = (const struct ether_header *) buf;
7375 ip = (const struct iphdr *) (eth + 1);
7376 pos = (const u8 *) (ip + 1);
7377
7378 if (ip->ihl != 5 || ip->version != 4 ||
7379 ntohs(ip->tot_len) != HWSIM_IP_LEN)
7380 return;
7381
7382 for (i = 0; i < HWSIM_IP_LEN - sizeof(*ip); i++) {
7383 if (*pos != (u8) i)
7384 return;
7385 pos++;
7386 }
7387
7388 wpa_msg(wpa_s, MSG_INFO, "DATA-TEST-RX " MACSTR " " MACSTR,
7389 MAC2STR(eth->ether_dhost), MAC2STR(eth->ether_shost));
7390 }
7391
7392
wpas_ctrl_iface_data_test_config(struct wpa_supplicant * wpa_s,char * cmd)7393 static int wpas_ctrl_iface_data_test_config(struct wpa_supplicant *wpa_s,
7394 char *cmd)
7395 {
7396 int enabled = atoi(cmd);
7397
7398 if (!enabled) {
7399 if (wpa_s->l2_test) {
7400 l2_packet_deinit(wpa_s->l2_test);
7401 wpa_s->l2_test = NULL;
7402 wpa_dbg(wpa_s, MSG_DEBUG, "test data: Disabled");
7403 }
7404 return 0;
7405 }
7406
7407 if (wpa_s->l2_test)
7408 return 0;
7409
7410 wpa_s->l2_test = l2_packet_init(wpa_s->ifname, wpa_s->own_addr,
7411 ETHERTYPE_IP, wpas_data_test_rx,
7412 wpa_s, 1);
7413 if (wpa_s->l2_test == NULL)
7414 return -1;
7415
7416 wpa_dbg(wpa_s, MSG_DEBUG, "test data: Enabled");
7417
7418 return 0;
7419 }
7420
7421
wpas_ctrl_iface_data_test_tx(struct wpa_supplicant * wpa_s,char * cmd)7422 static int wpas_ctrl_iface_data_test_tx(struct wpa_supplicant *wpa_s, char *cmd)
7423 {
7424 u8 dst[ETH_ALEN], src[ETH_ALEN];
7425 char *pos;
7426 int used;
7427 long int val;
7428 u8 tos;
7429 u8 buf[HWSIM_PACKETLEN];
7430 struct ether_header *eth;
7431 struct iphdr *ip;
7432 u8 *dpos;
7433 unsigned int i;
7434
7435 if (wpa_s->l2_test == NULL)
7436 return -1;
7437
7438 /* format: <dst> <src> <tos> */
7439
7440 pos = cmd;
7441 used = hwaddr_aton2(pos, dst);
7442 if (used < 0)
7443 return -1;
7444 pos += used;
7445 while (*pos == ' ')
7446 pos++;
7447 used = hwaddr_aton2(pos, src);
7448 if (used < 0)
7449 return -1;
7450 pos += used;
7451
7452 val = strtol(pos, NULL, 0);
7453 if (val < 0 || val > 0xff)
7454 return -1;
7455 tos = val;
7456
7457 eth = (struct ether_header *) buf;
7458 os_memcpy(eth->ether_dhost, dst, ETH_ALEN);
7459 os_memcpy(eth->ether_shost, src, ETH_ALEN);
7460 eth->ether_type = htons(ETHERTYPE_IP);
7461 ip = (struct iphdr *) (eth + 1);
7462 os_memset(ip, 0, sizeof(*ip));
7463 ip->ihl = 5;
7464 ip->version = 4;
7465 ip->ttl = 64;
7466 ip->tos = tos;
7467 ip->tot_len = htons(HWSIM_IP_LEN);
7468 ip->protocol = 1;
7469 ip->saddr = htonl(192 << 24 | 168 << 16 | 1 << 8 | 1);
7470 ip->daddr = htonl(192 << 24 | 168 << 16 | 1 << 8 | 2);
7471 ip->check = ipv4_hdr_checksum(ip, sizeof(*ip));
7472 dpos = (u8 *) (ip + 1);
7473 for (i = 0; i < HWSIM_IP_LEN - sizeof(*ip); i++)
7474 *dpos++ = i;
7475
7476 if (l2_packet_send(wpa_s->l2_test, dst, ETHERTYPE_IP, buf,
7477 HWSIM_PACKETLEN) < 0)
7478 return -1;
7479
7480 wpa_dbg(wpa_s, MSG_DEBUG, "test data: TX dst=" MACSTR " src=" MACSTR
7481 " tos=0x%x", MAC2STR(dst), MAC2STR(src), tos);
7482
7483 return 0;
7484 }
7485
7486
wpas_ctrl_iface_data_test_frame(struct wpa_supplicant * wpa_s,char * cmd)7487 static int wpas_ctrl_iface_data_test_frame(struct wpa_supplicant *wpa_s,
7488 char *cmd)
7489 {
7490 u8 *buf;
7491 struct ether_header *eth;
7492 struct l2_packet_data *l2 = NULL;
7493 size_t len;
7494 u16 ethertype;
7495 int res = -1;
7496
7497 len = os_strlen(cmd);
7498 if (len & 1 || len < ETH_HLEN * 2)
7499 return -1;
7500 len /= 2;
7501
7502 buf = os_malloc(len);
7503 if (buf == NULL)
7504 return -1;
7505
7506 if (hexstr2bin(cmd, buf, len) < 0)
7507 goto done;
7508
7509 eth = (struct ether_header *) buf;
7510 ethertype = ntohs(eth->ether_type);
7511
7512 l2 = l2_packet_init(wpa_s->ifname, wpa_s->own_addr, ethertype,
7513 wpas_data_test_rx, wpa_s, 1);
7514 if (l2 == NULL)
7515 goto done;
7516
7517 res = l2_packet_send(l2, eth->ether_dhost, ethertype, buf, len);
7518 wpa_dbg(wpa_s, MSG_DEBUG, "test data: TX frame res=%d", res);
7519 done:
7520 if (l2)
7521 l2_packet_deinit(l2);
7522 os_free(buf);
7523
7524 return res < 0 ? -1 : 0;
7525 }
7526
7527
wpas_ctrl_test_alloc_fail(struct wpa_supplicant * wpa_s,char * cmd)7528 static int wpas_ctrl_test_alloc_fail(struct wpa_supplicant *wpa_s, char *cmd)
7529 {
7530 #ifdef WPA_TRACE_BFD
7531 extern char wpa_trace_fail_func[256];
7532 extern unsigned int wpa_trace_fail_after;
7533 char *pos;
7534
7535 wpa_trace_fail_after = atoi(cmd);
7536 pos = os_strchr(cmd, ':');
7537 if (pos) {
7538 pos++;
7539 os_strlcpy(wpa_trace_fail_func, pos,
7540 sizeof(wpa_trace_fail_func));
7541 } else {
7542 wpa_trace_fail_after = 0;
7543 }
7544 return 0;
7545 #else /* WPA_TRACE_BFD */
7546 return -1;
7547 #endif /* WPA_TRACE_BFD */
7548 }
7549
7550
wpas_ctrl_get_alloc_fail(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)7551 static int wpas_ctrl_get_alloc_fail(struct wpa_supplicant *wpa_s,
7552 char *buf, size_t buflen)
7553 {
7554 #ifdef WPA_TRACE_BFD
7555 extern char wpa_trace_fail_func[256];
7556 extern unsigned int wpa_trace_fail_after;
7557
7558 return os_snprintf(buf, buflen, "%u:%s", wpa_trace_fail_after,
7559 wpa_trace_fail_func);
7560 #else /* WPA_TRACE_BFD */
7561 return -1;
7562 #endif /* WPA_TRACE_BFD */
7563 }
7564
7565 #endif /* CONFIG_TESTING_OPTIONS */
7566
7567
wpas_ctrl_vendor_elem_update(struct wpa_supplicant * wpa_s)7568 static void wpas_ctrl_vendor_elem_update(struct wpa_supplicant *wpa_s)
7569 {
7570 unsigned int i;
7571 char buf[30];
7572
7573 wpa_printf(MSG_DEBUG, "Update vendor elements");
7574
7575 for (i = 0; i < NUM_VENDOR_ELEM_FRAMES; i++) {
7576 if (wpa_s->vendor_elem[i]) {
7577 int res;
7578
7579 res = os_snprintf(buf, sizeof(buf), "frame[%u]", i);
7580 if (!os_snprintf_error(sizeof(buf), res)) {
7581 wpa_hexdump_buf(MSG_DEBUG, buf,
7582 wpa_s->vendor_elem[i]);
7583 }
7584 }
7585 }
7586
7587 #ifdef CONFIG_P2P
7588 if (wpa_s->parent == wpa_s &&
7589 wpa_s->global->p2p &&
7590 !wpa_s->global->p2p_disabled)
7591 p2p_set_vendor_elems(wpa_s->global->p2p, wpa_s->vendor_elem);
7592 #endif /* CONFIG_P2P */
7593 }
7594
7595
7596 static struct wpa_supplicant *
wpas_ctrl_vendor_elem_iface(struct wpa_supplicant * wpa_s,enum wpa_vendor_elem_frame frame)7597 wpas_ctrl_vendor_elem_iface(struct wpa_supplicant *wpa_s,
7598 enum wpa_vendor_elem_frame frame)
7599 {
7600 switch (frame) {
7601 #ifdef CONFIG_P2P
7602 case VENDOR_ELEM_PROBE_REQ_P2P:
7603 case VENDOR_ELEM_PROBE_RESP_P2P:
7604 case VENDOR_ELEM_PROBE_RESP_P2P_GO:
7605 case VENDOR_ELEM_BEACON_P2P_GO:
7606 case VENDOR_ELEM_P2P_PD_REQ:
7607 case VENDOR_ELEM_P2P_PD_RESP:
7608 case VENDOR_ELEM_P2P_GO_NEG_REQ:
7609 case VENDOR_ELEM_P2P_GO_NEG_RESP:
7610 case VENDOR_ELEM_P2P_GO_NEG_CONF:
7611 case VENDOR_ELEM_P2P_INV_REQ:
7612 case VENDOR_ELEM_P2P_INV_RESP:
7613 case VENDOR_ELEM_P2P_ASSOC_REQ:
7614 return wpa_s->parent;
7615 #endif /* CONFIG_P2P */
7616 default:
7617 return wpa_s;
7618 }
7619 }
7620
7621
wpas_ctrl_vendor_elem_add(struct wpa_supplicant * wpa_s,char * cmd)7622 static int wpas_ctrl_vendor_elem_add(struct wpa_supplicant *wpa_s, char *cmd)
7623 {
7624 char *pos = cmd;
7625 int frame;
7626 size_t len;
7627 struct wpabuf *buf;
7628 struct ieee802_11_elems elems;
7629
7630 frame = atoi(pos);
7631 if (frame < 0 || frame >= NUM_VENDOR_ELEM_FRAMES)
7632 return -1;
7633 wpa_s = wpas_ctrl_vendor_elem_iface(wpa_s, frame);
7634
7635 pos = os_strchr(pos, ' ');
7636 if (pos == NULL)
7637 return -1;
7638 pos++;
7639
7640 len = os_strlen(pos);
7641 if (len == 0)
7642 return 0;
7643 if (len & 1)
7644 return -1;
7645 len /= 2;
7646
7647 buf = wpabuf_alloc(len);
7648 if (buf == NULL)
7649 return -1;
7650
7651 if (hexstr2bin(pos, wpabuf_put(buf, len), len) < 0) {
7652 wpabuf_free(buf);
7653 return -1;
7654 }
7655
7656 if (ieee802_11_parse_elems(wpabuf_head_u8(buf), len, &elems, 0) ==
7657 ParseFailed) {
7658 wpabuf_free(buf);
7659 return -1;
7660 }
7661
7662 if (wpa_s->vendor_elem[frame] == NULL) {
7663 wpa_s->vendor_elem[frame] = buf;
7664 wpas_ctrl_vendor_elem_update(wpa_s);
7665 return 0;
7666 }
7667
7668 if (wpabuf_resize(&wpa_s->vendor_elem[frame], len) < 0) {
7669 wpabuf_free(buf);
7670 return -1;
7671 }
7672
7673 wpabuf_put_buf(wpa_s->vendor_elem[frame], buf);
7674 wpabuf_free(buf);
7675 wpas_ctrl_vendor_elem_update(wpa_s);
7676
7677 return 0;
7678 }
7679
7680
wpas_ctrl_vendor_elem_get(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)7681 static int wpas_ctrl_vendor_elem_get(struct wpa_supplicant *wpa_s, char *cmd,
7682 char *buf, size_t buflen)
7683 {
7684 int frame = atoi(cmd);
7685
7686 if (frame < 0 || frame >= NUM_VENDOR_ELEM_FRAMES)
7687 return -1;
7688 wpa_s = wpas_ctrl_vendor_elem_iface(wpa_s, frame);
7689
7690 if (wpa_s->vendor_elem[frame] == NULL)
7691 return 0;
7692
7693 return wpa_snprintf_hex(buf, buflen,
7694 wpabuf_head_u8(wpa_s->vendor_elem[frame]),
7695 wpabuf_len(wpa_s->vendor_elem[frame]));
7696 }
7697
7698
wpas_ctrl_vendor_elem_remove(struct wpa_supplicant * wpa_s,char * cmd)7699 static int wpas_ctrl_vendor_elem_remove(struct wpa_supplicant *wpa_s, char *cmd)
7700 {
7701 char *pos = cmd;
7702 int frame;
7703 size_t len;
7704 u8 *buf;
7705 struct ieee802_11_elems elems;
7706 u8 *ie, *end;
7707
7708 frame = atoi(pos);
7709 if (frame < 0 || frame >= NUM_VENDOR_ELEM_FRAMES)
7710 return -1;
7711 wpa_s = wpas_ctrl_vendor_elem_iface(wpa_s, frame);
7712
7713 pos = os_strchr(pos, ' ');
7714 if (pos == NULL)
7715 return -1;
7716 pos++;
7717
7718 if (*pos == '*') {
7719 wpabuf_free(wpa_s->vendor_elem[frame]);
7720 wpa_s->vendor_elem[frame] = NULL;
7721 wpas_ctrl_vendor_elem_update(wpa_s);
7722 return 0;
7723 }
7724
7725 if (wpa_s->vendor_elem[frame] == NULL)
7726 return -1;
7727
7728 len = os_strlen(pos);
7729 if (len == 0)
7730 return 0;
7731 if (len & 1)
7732 return -1;
7733 len /= 2;
7734
7735 buf = os_malloc(len);
7736 if (buf == NULL)
7737 return -1;
7738
7739 if (hexstr2bin(pos, buf, len) < 0) {
7740 os_free(buf);
7741 return -1;
7742 }
7743
7744 if (ieee802_11_parse_elems(buf, len, &elems, 0) == ParseFailed) {
7745 os_free(buf);
7746 return -1;
7747 }
7748
7749 ie = wpabuf_mhead_u8(wpa_s->vendor_elem[frame]);
7750 end = ie + wpabuf_len(wpa_s->vendor_elem[frame]);
7751
7752 for (; ie + 1 < end; ie += 2 + ie[1]) {
7753 if (ie + len > end)
7754 break;
7755 if (os_memcmp(ie, buf, len) != 0)
7756 continue;
7757
7758 if (wpabuf_len(wpa_s->vendor_elem[frame]) == len) {
7759 wpabuf_free(wpa_s->vendor_elem[frame]);
7760 wpa_s->vendor_elem[frame] = NULL;
7761 } else {
7762 os_memmove(ie, ie + len,
7763 end - (ie + len));
7764 wpa_s->vendor_elem[frame]->used -= len;
7765 }
7766 os_free(buf);
7767 wpas_ctrl_vendor_elem_update(wpa_s);
7768 return 0;
7769 }
7770
7771 os_free(buf);
7772
7773 return -1;
7774 }
7775
7776
wpas_ctrl_neighbor_rep_cb(void * ctx,struct wpabuf * neighbor_rep)7777 static void wpas_ctrl_neighbor_rep_cb(void *ctx, struct wpabuf *neighbor_rep)
7778 {
7779 struct wpa_supplicant *wpa_s = ctx;
7780
7781 if (neighbor_rep) {
7782 wpa_msg_ctrl(wpa_s, MSG_INFO, RRM_EVENT_NEIGHBOR_REP_RXED
7783 "length=%u",
7784 (unsigned int) wpabuf_len(neighbor_rep));
7785 wpabuf_free(neighbor_rep);
7786 } else {
7787 wpa_msg_ctrl(wpa_s, MSG_INFO, RRM_EVENT_NEIGHBOR_REP_FAILED);
7788 }
7789 }
7790
7791
wpas_ctrl_iface_send_neigbor_rep(struct wpa_supplicant * wpa_s,char * cmd)7792 static int wpas_ctrl_iface_send_neigbor_rep(struct wpa_supplicant *wpa_s,
7793 char *cmd)
7794 {
7795 struct wpa_ssid ssid;
7796 struct wpa_ssid *ssid_p = NULL;
7797 int ret = 0;
7798
7799 if (os_strncmp(cmd, " ssid=", 6) == 0) {
7800 ssid.ssid_len = os_strlen(cmd + 6);
7801 if (ssid.ssid_len > SSID_MAX_LEN)
7802 return -1;
7803 ssid.ssid = (u8 *) (cmd + 6);
7804 ssid_p = &ssid;
7805 }
7806
7807 ret = wpas_rrm_send_neighbor_rep_request(wpa_s, ssid_p,
7808 wpas_ctrl_neighbor_rep_cb,
7809 wpa_s);
7810
7811 return ret;
7812 }
7813
7814
wpas_ctrl_iface_erp_flush(struct wpa_supplicant * wpa_s)7815 static int wpas_ctrl_iface_erp_flush(struct wpa_supplicant *wpa_s)
7816 {
7817 eapol_sm_erp_flush(wpa_s->eapol);
7818 return 0;
7819 }
7820
7821
wpas_ctrl_iface_mac_rand_scan(struct wpa_supplicant * wpa_s,char * cmd)7822 static int wpas_ctrl_iface_mac_rand_scan(struct wpa_supplicant *wpa_s,
7823 char *cmd)
7824 {
7825 char *token, *context = NULL;
7826 unsigned int enable = ~0, type = 0;
7827 u8 _addr[ETH_ALEN], _mask[ETH_ALEN];
7828 u8 *addr = NULL, *mask = NULL;
7829
7830 while ((token = str_token(cmd, " ", &context))) {
7831 if (os_strcasecmp(token, "scan") == 0) {
7832 type |= MAC_ADDR_RAND_SCAN;
7833 } else if (os_strcasecmp(token, "sched") == 0) {
7834 type |= MAC_ADDR_RAND_SCHED_SCAN;
7835 } else if (os_strcasecmp(token, "pno") == 0) {
7836 type |= MAC_ADDR_RAND_PNO;
7837 } else if (os_strcasecmp(token, "all") == 0) {
7838 type = wpa_s->mac_addr_rand_supported;
7839 } else if (os_strncasecmp(token, "enable=", 7) == 0) {
7840 enable = atoi(token + 7);
7841 } else if (os_strncasecmp(token, "addr=", 5) == 0) {
7842 addr = _addr;
7843 if (hwaddr_aton(token + 5, addr)) {
7844 wpa_printf(MSG_INFO,
7845 "CTRL: Invalid MAC address: %s",
7846 token);
7847 return -1;
7848 }
7849 } else if (os_strncasecmp(token, "mask=", 5) == 0) {
7850 mask = _mask;
7851 if (hwaddr_aton(token + 5, mask)) {
7852 wpa_printf(MSG_INFO,
7853 "CTRL: Invalid MAC address mask: %s",
7854 token);
7855 return -1;
7856 }
7857 } else {
7858 wpa_printf(MSG_INFO,
7859 "CTRL: Invalid MAC_RAND_SCAN parameter: %s",
7860 token);
7861 return -1;
7862 }
7863 }
7864
7865 if (!type) {
7866 wpa_printf(MSG_INFO, "CTRL: MAC_RAND_SCAN no type specified");
7867 return -1;
7868 }
7869
7870 if ((wpa_s->mac_addr_rand_supported & type) != type) {
7871 wpa_printf(MSG_INFO,
7872 "CTRL: MAC_RAND_SCAN types=%u != supported=%u",
7873 type, wpa_s->mac_addr_rand_supported);
7874 return -1;
7875 }
7876
7877 if (enable > 1) {
7878 wpa_printf(MSG_INFO,
7879 "CTRL: MAC_RAND_SCAN enable=<0/1> not specified");
7880 return -1;
7881 }
7882
7883 if (!enable) {
7884 wpas_mac_addr_rand_scan_clear(wpa_s, type);
7885 if (wpa_s->pno) {
7886 if (type & MAC_ADDR_RAND_PNO) {
7887 wpas_stop_pno(wpa_s);
7888 wpas_start_pno(wpa_s);
7889 }
7890 } else if (wpa_s->sched_scanning &&
7891 (type & MAC_ADDR_RAND_SCHED_SCAN)) {
7892 /* simulate timeout to restart the sched scan */
7893 wpa_s->sched_scan_timed_out = 1;
7894 wpa_s->prev_sched_ssid = NULL;
7895 wpa_supplicant_cancel_sched_scan(wpa_s);
7896 }
7897 return 0;
7898 }
7899
7900 if ((addr && !mask) || (!addr && mask)) {
7901 wpa_printf(MSG_INFO,
7902 "CTRL: MAC_RAND_SCAN invalid addr/mask combination");
7903 return -1;
7904 }
7905
7906 if (addr && mask && (!(mask[0] & 0x01) || (addr[0] & 0x01))) {
7907 wpa_printf(MSG_INFO,
7908 "CTRL: MAC_RAND_SCAN cannot allow multicast address");
7909 return -1;
7910 }
7911
7912 if (type & MAC_ADDR_RAND_SCAN) {
7913 wpas_mac_addr_rand_scan_set(wpa_s, MAC_ADDR_RAND_SCAN,
7914 addr, mask);
7915 }
7916
7917 if (type & MAC_ADDR_RAND_SCHED_SCAN) {
7918 wpas_mac_addr_rand_scan_set(wpa_s, MAC_ADDR_RAND_SCHED_SCAN,
7919 addr, mask);
7920
7921 if (wpa_s->sched_scanning && !wpa_s->pno) {
7922 /* simulate timeout to restart the sched scan */
7923 wpa_s->sched_scan_timed_out = 1;
7924 wpa_s->prev_sched_ssid = NULL;
7925 wpa_supplicant_cancel_sched_scan(wpa_s);
7926 }
7927 }
7928
7929 if (type & MAC_ADDR_RAND_PNO) {
7930 wpas_mac_addr_rand_scan_set(wpa_s, MAC_ADDR_RAND_PNO,
7931 addr, mask);
7932 if (wpa_s->pno) {
7933 wpas_stop_pno(wpa_s);
7934 wpas_start_pno(wpa_s);
7935 }
7936 }
7937
7938 return 0;
7939 }
7940
7941
wpa_supplicant_ctrl_iface_process(struct wpa_supplicant * wpa_s,char * buf,size_t * resp_len)7942 char * wpa_supplicant_ctrl_iface_process(struct wpa_supplicant *wpa_s,
7943 char *buf, size_t *resp_len)
7944 {
7945 char *reply;
7946 const int reply_size = 4096;
7947 int reply_len;
7948
7949 if (os_strncmp(buf, WPA_CTRL_RSP, os_strlen(WPA_CTRL_RSP)) == 0 ||
7950 os_strncmp(buf, "SET_NETWORK ", 12) == 0) {
7951 if (wpa_debug_show_keys)
7952 wpa_dbg(wpa_s, MSG_DEBUG,
7953 "Control interface command '%s'", buf);
7954 else
7955 wpa_dbg(wpa_s, MSG_DEBUG,
7956 "Control interface command '%s [REMOVED]'",
7957 os_strncmp(buf, WPA_CTRL_RSP,
7958 os_strlen(WPA_CTRL_RSP)) == 0 ?
7959 WPA_CTRL_RSP : "SET_NETWORK");
7960 } else if (os_strncmp(buf, "WPS_NFC_TAG_READ", 16) == 0 ||
7961 os_strncmp(buf, "NFC_REPORT_HANDOVER", 19) == 0) {
7962 wpa_hexdump_ascii_key(MSG_DEBUG, "RX ctrl_iface",
7963 (const u8 *) buf, os_strlen(buf));
7964 } else {
7965 int level = MSG_DEBUG;
7966 if (os_strcmp(buf, "PING") == 0)
7967 level = MSG_EXCESSIVE;
7968 wpa_dbg(wpa_s, level, "Control interface command '%s'", buf);
7969 }
7970
7971 reply = os_malloc(reply_size);
7972 if (reply == NULL) {
7973 *resp_len = 1;
7974 return NULL;
7975 }
7976
7977 os_memcpy(reply, "OK\n", 3);
7978 reply_len = 3;
7979
7980 if (os_strcmp(buf, "PING") == 0) {
7981 os_memcpy(reply, "PONG\n", 5);
7982 reply_len = 5;
7983 } else if (os_strcmp(buf, "IFNAME") == 0) {
7984 reply_len = os_strlen(wpa_s->ifname);
7985 os_memcpy(reply, wpa_s->ifname, reply_len);
7986 } else if (os_strncmp(buf, "RELOG", 5) == 0) {
7987 if (wpa_debug_reopen_file() < 0)
7988 reply_len = -1;
7989 } else if (os_strncmp(buf, "NOTE ", 5) == 0) {
7990 wpa_printf(MSG_INFO, "NOTE: %s", buf + 5);
7991 } else if (os_strcmp(buf, "MIB") == 0) {
7992 reply_len = wpa_sm_get_mib(wpa_s->wpa, reply, reply_size);
7993 if (reply_len >= 0) {
7994 reply_len += eapol_sm_get_mib(wpa_s->eapol,
7995 reply + reply_len,
7996 reply_size - reply_len);
7997 }
7998 } else if (os_strncmp(buf, "STATUS", 6) == 0) {
7999 reply_len = wpa_supplicant_ctrl_iface_status(
8000 wpa_s, buf + 6, reply, reply_size);
8001 } else if (os_strcmp(buf, "PMKSA") == 0) {
8002 reply_len = wpa_sm_pmksa_cache_list(wpa_s->wpa, reply,
8003 reply_size);
8004 } else if (os_strcmp(buf, "PMKSA_FLUSH") == 0) {
8005 wpa_sm_pmksa_cache_flush(wpa_s->wpa, NULL);
8006 } else if (os_strncmp(buf, "SET ", 4) == 0) {
8007 if (wpa_supplicant_ctrl_iface_set(wpa_s, buf + 4))
8008 reply_len = -1;
8009 } else if (os_strncmp(buf, "DUMP", 4) == 0) {
8010 reply_len = wpa_config_dump_values(wpa_s->conf,
8011 reply, reply_size);
8012 } else if (os_strncmp(buf, "GET ", 4) == 0) {
8013 reply_len = wpa_supplicant_ctrl_iface_get(wpa_s, buf + 4,
8014 reply, reply_size);
8015 } else if (os_strcmp(buf, "LOGON") == 0) {
8016 eapol_sm_notify_logoff(wpa_s->eapol, FALSE);
8017 } else if (os_strcmp(buf, "LOGOFF") == 0) {
8018 eapol_sm_notify_logoff(wpa_s->eapol, TRUE);
8019 } else if (os_strcmp(buf, "REASSOCIATE") == 0) {
8020 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
8021 reply_len = -1;
8022 else
8023 wpas_request_connection(wpa_s);
8024 } else if (os_strcmp(buf, "REATTACH") == 0) {
8025 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED ||
8026 !wpa_s->current_ssid)
8027 reply_len = -1;
8028 else {
8029 wpa_s->reattach = 1;
8030 wpas_request_connection(wpa_s);
8031 }
8032 } else if (os_strcmp(buf, "RECONNECT") == 0) {
8033 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
8034 reply_len = -1;
8035 else if (wpa_s->disconnected)
8036 wpas_request_connection(wpa_s);
8037 #ifdef IEEE8021X_EAPOL
8038 } else if (os_strncmp(buf, "PREAUTH ", 8) == 0) {
8039 if (wpa_supplicant_ctrl_iface_preauth(wpa_s, buf + 8))
8040 reply_len = -1;
8041 #endif /* IEEE8021X_EAPOL */
8042 #ifdef CONFIG_PEERKEY
8043 } else if (os_strncmp(buf, "STKSTART ", 9) == 0) {
8044 if (wpa_supplicant_ctrl_iface_stkstart(wpa_s, buf + 9))
8045 reply_len = -1;
8046 #endif /* CONFIG_PEERKEY */
8047 #ifdef CONFIG_IEEE80211R
8048 } else if (os_strncmp(buf, "FT_DS ", 6) == 0) {
8049 if (wpa_supplicant_ctrl_iface_ft_ds(wpa_s, buf + 6))
8050 reply_len = -1;
8051 #endif /* CONFIG_IEEE80211R */
8052 #ifdef CONFIG_WPS
8053 } else if (os_strcmp(buf, "WPS_PBC") == 0) {
8054 int res = wpa_supplicant_ctrl_iface_wps_pbc(wpa_s, NULL);
8055 if (res == -2) {
8056 os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
8057 reply_len = 17;
8058 } else if (res)
8059 reply_len = -1;
8060 } else if (os_strncmp(buf, "WPS_PBC ", 8) == 0) {
8061 int res = wpa_supplicant_ctrl_iface_wps_pbc(wpa_s, buf + 8);
8062 if (res == -2) {
8063 os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
8064 reply_len = 17;
8065 } else if (res)
8066 reply_len = -1;
8067 } else if (os_strncmp(buf, "WPS_PIN ", 8) == 0) {
8068 reply_len = wpa_supplicant_ctrl_iface_wps_pin(wpa_s, buf + 8,
8069 reply,
8070 reply_size);
8071 } else if (os_strncmp(buf, "WPS_CHECK_PIN ", 14) == 0) {
8072 reply_len = wpa_supplicant_ctrl_iface_wps_check_pin(
8073 wpa_s, buf + 14, reply, reply_size);
8074 } else if (os_strcmp(buf, "WPS_CANCEL") == 0) {
8075 if (wpas_wps_cancel(wpa_s))
8076 reply_len = -1;
8077 #ifdef CONFIG_WPS_NFC
8078 } else if (os_strcmp(buf, "WPS_NFC") == 0) {
8079 if (wpa_supplicant_ctrl_iface_wps_nfc(wpa_s, NULL))
8080 reply_len = -1;
8081 } else if (os_strncmp(buf, "WPS_NFC ", 8) == 0) {
8082 if (wpa_supplicant_ctrl_iface_wps_nfc(wpa_s, buf + 8))
8083 reply_len = -1;
8084 } else if (os_strncmp(buf, "WPS_NFC_CONFIG_TOKEN ", 21) == 0) {
8085 reply_len = wpa_supplicant_ctrl_iface_wps_nfc_config_token(
8086 wpa_s, buf + 21, reply, reply_size);
8087 } else if (os_strncmp(buf, "WPS_NFC_TOKEN ", 14) == 0) {
8088 reply_len = wpa_supplicant_ctrl_iface_wps_nfc_token(
8089 wpa_s, buf + 14, reply, reply_size);
8090 } else if (os_strncmp(buf, "WPS_NFC_TAG_READ ", 17) == 0) {
8091 if (wpa_supplicant_ctrl_iface_wps_nfc_tag_read(wpa_s,
8092 buf + 17))
8093 reply_len = -1;
8094 } else if (os_strncmp(buf, "NFC_GET_HANDOVER_REQ ", 21) == 0) {
8095 reply_len = wpas_ctrl_nfc_get_handover_req(
8096 wpa_s, buf + 21, reply, reply_size);
8097 } else if (os_strncmp(buf, "NFC_GET_HANDOVER_SEL ", 21) == 0) {
8098 reply_len = wpas_ctrl_nfc_get_handover_sel(
8099 wpa_s, buf + 21, reply, reply_size);
8100 } else if (os_strncmp(buf, "NFC_REPORT_HANDOVER ", 20) == 0) {
8101 if (wpas_ctrl_nfc_report_handover(wpa_s, buf + 20))
8102 reply_len = -1;
8103 #endif /* CONFIG_WPS_NFC */
8104 } else if (os_strncmp(buf, "WPS_REG ", 8) == 0) {
8105 if (wpa_supplicant_ctrl_iface_wps_reg(wpa_s, buf + 8))
8106 reply_len = -1;
8107 #ifdef CONFIG_AP
8108 } else if (os_strncmp(buf, "WPS_AP_PIN ", 11) == 0) {
8109 reply_len = wpa_supplicant_ctrl_iface_wps_ap_pin(
8110 wpa_s, buf + 11, reply, reply_size);
8111 #endif /* CONFIG_AP */
8112 #ifdef CONFIG_WPS_ER
8113 } else if (os_strcmp(buf, "WPS_ER_START") == 0) {
8114 if (wpas_wps_er_start(wpa_s, NULL))
8115 reply_len = -1;
8116 } else if (os_strncmp(buf, "WPS_ER_START ", 13) == 0) {
8117 if (wpas_wps_er_start(wpa_s, buf + 13))
8118 reply_len = -1;
8119 } else if (os_strcmp(buf, "WPS_ER_STOP") == 0) {
8120 wpas_wps_er_stop(wpa_s);
8121 } else if (os_strncmp(buf, "WPS_ER_PIN ", 11) == 0) {
8122 if (wpa_supplicant_ctrl_iface_wps_er_pin(wpa_s, buf + 11))
8123 reply_len = -1;
8124 } else if (os_strncmp(buf, "WPS_ER_PBC ", 11) == 0) {
8125 int ret = wpas_wps_er_pbc(wpa_s, buf + 11);
8126 if (ret == -2) {
8127 os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
8128 reply_len = 17;
8129 } else if (ret == -3) {
8130 os_memcpy(reply, "FAIL-UNKNOWN-UUID\n", 18);
8131 reply_len = 18;
8132 } else if (ret == -4) {
8133 os_memcpy(reply, "FAIL-NO-AP-SETTINGS\n", 20);
8134 reply_len = 20;
8135 } else if (ret)
8136 reply_len = -1;
8137 } else if (os_strncmp(buf, "WPS_ER_LEARN ", 13) == 0) {
8138 if (wpa_supplicant_ctrl_iface_wps_er_learn(wpa_s, buf + 13))
8139 reply_len = -1;
8140 } else if (os_strncmp(buf, "WPS_ER_SET_CONFIG ", 18) == 0) {
8141 if (wpa_supplicant_ctrl_iface_wps_er_set_config(wpa_s,
8142 buf + 18))
8143 reply_len = -1;
8144 } else if (os_strncmp(buf, "WPS_ER_CONFIG ", 14) == 0) {
8145 if (wpa_supplicant_ctrl_iface_wps_er_config(wpa_s, buf + 14))
8146 reply_len = -1;
8147 #ifdef CONFIG_WPS_NFC
8148 } else if (os_strncmp(buf, "WPS_ER_NFC_CONFIG_TOKEN ", 24) == 0) {
8149 reply_len = wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(
8150 wpa_s, buf + 24, reply, reply_size);
8151 #endif /* CONFIG_WPS_NFC */
8152 #endif /* CONFIG_WPS_ER */
8153 #endif /* CONFIG_WPS */
8154 #ifdef CONFIG_IBSS_RSN
8155 } else if (os_strncmp(buf, "IBSS_RSN ", 9) == 0) {
8156 if (wpa_supplicant_ctrl_iface_ibss_rsn(wpa_s, buf + 9))
8157 reply_len = -1;
8158 #endif /* CONFIG_IBSS_RSN */
8159 #ifdef CONFIG_MESH
8160 } else if (os_strncmp(buf, "MESH_INTERFACE_ADD ", 19) == 0) {
8161 reply_len = wpa_supplicant_ctrl_iface_mesh_interface_add(
8162 wpa_s, buf + 19, reply, reply_size);
8163 } else if (os_strcmp(buf, "MESH_INTERFACE_ADD") == 0) {
8164 reply_len = wpa_supplicant_ctrl_iface_mesh_interface_add(
8165 wpa_s, "", reply, reply_size);
8166 } else if (os_strncmp(buf, "MESH_GROUP_ADD ", 15) == 0) {
8167 if (wpa_supplicant_ctrl_iface_mesh_group_add(wpa_s, buf + 15))
8168 reply_len = -1;
8169 } else if (os_strncmp(buf, "MESH_GROUP_REMOVE ", 18) == 0) {
8170 if (wpa_supplicant_ctrl_iface_mesh_group_remove(wpa_s,
8171 buf + 18))
8172 reply_len = -1;
8173 #endif /* CONFIG_MESH */
8174 #ifdef CONFIG_P2P
8175 } else if (os_strncmp(buf, "P2P_FIND ", 9) == 0) {
8176 if (p2p_ctrl_find(wpa_s, buf + 8))
8177 reply_len = -1;
8178 } else if (os_strcmp(buf, "P2P_FIND") == 0) {
8179 if (p2p_ctrl_find(wpa_s, ""))
8180 reply_len = -1;
8181 } else if (os_strcmp(buf, "P2P_STOP_FIND") == 0) {
8182 wpas_p2p_stop_find(wpa_s);
8183 } else if (os_strncmp(buf, "P2P_ASP_PROVISION ", 18) == 0) {
8184 if (p2p_ctrl_asp_provision(wpa_s, buf + 18))
8185 reply_len = -1;
8186 } else if (os_strncmp(buf, "P2P_ASP_PROVISION_RESP ", 23) == 0) {
8187 if (p2p_ctrl_asp_provision_resp(wpa_s, buf + 23))
8188 reply_len = -1;
8189 } else if (os_strncmp(buf, "P2P_CONNECT ", 12) == 0) {
8190 reply_len = p2p_ctrl_connect(wpa_s, buf + 12, reply,
8191 reply_size);
8192 } else if (os_strncmp(buf, "P2P_LISTEN ", 11) == 0) {
8193 if (p2p_ctrl_listen(wpa_s, buf + 11))
8194 reply_len = -1;
8195 } else if (os_strcmp(buf, "P2P_LISTEN") == 0) {
8196 if (p2p_ctrl_listen(wpa_s, ""))
8197 reply_len = -1;
8198 } else if (os_strncmp(buf, "P2P_GROUP_REMOVE ", 17) == 0) {
8199 if (wpas_p2p_group_remove(wpa_s, buf + 17))
8200 reply_len = -1;
8201 } else if (os_strcmp(buf, "P2P_GROUP_ADD") == 0) {
8202 if (p2p_ctrl_group_add(wpa_s, ""))
8203 reply_len = -1;
8204 } else if (os_strncmp(buf, "P2P_GROUP_ADD ", 14) == 0) {
8205 if (p2p_ctrl_group_add(wpa_s, buf + 14))
8206 reply_len = -1;
8207 } else if (os_strncmp(buf, "P2P_PROV_DISC ", 14) == 0) {
8208 if (p2p_ctrl_prov_disc(wpa_s, buf + 14))
8209 reply_len = -1;
8210 } else if (os_strcmp(buf, "P2P_GET_PASSPHRASE") == 0) {
8211 reply_len = p2p_get_passphrase(wpa_s, reply, reply_size);
8212 } else if (os_strncmp(buf, "P2P_SERV_DISC_REQ ", 18) == 0) {
8213 reply_len = p2p_ctrl_serv_disc_req(wpa_s, buf + 18, reply,
8214 reply_size);
8215 } else if (os_strncmp(buf, "P2P_SERV_DISC_CANCEL_REQ ", 25) == 0) {
8216 if (p2p_ctrl_serv_disc_cancel_req(wpa_s, buf + 25) < 0)
8217 reply_len = -1;
8218 } else if (os_strncmp(buf, "P2P_SERV_DISC_RESP ", 19) == 0) {
8219 if (p2p_ctrl_serv_disc_resp(wpa_s, buf + 19) < 0)
8220 reply_len = -1;
8221 } else if (os_strcmp(buf, "P2P_SERVICE_UPDATE") == 0) {
8222 wpas_p2p_sd_service_update(wpa_s);
8223 } else if (os_strncmp(buf, "P2P_SERV_DISC_EXTERNAL ", 23) == 0) {
8224 if (p2p_ctrl_serv_disc_external(wpa_s, buf + 23) < 0)
8225 reply_len = -1;
8226 } else if (os_strcmp(buf, "P2P_SERVICE_FLUSH") == 0) {
8227 wpas_p2p_service_flush(wpa_s);
8228 } else if (os_strncmp(buf, "P2P_SERVICE_ADD ", 16) == 0) {
8229 if (p2p_ctrl_service_add(wpa_s, buf + 16) < 0)
8230 reply_len = -1;
8231 } else if (os_strncmp(buf, "P2P_SERVICE_DEL ", 16) == 0) {
8232 if (p2p_ctrl_service_del(wpa_s, buf + 16) < 0)
8233 reply_len = -1;
8234 } else if (os_strncmp(buf, "P2P_SERVICE_REP ", 16) == 0) {
8235 if (p2p_ctrl_service_replace(wpa_s, buf + 16) < 0)
8236 reply_len = -1;
8237 } else if (os_strncmp(buf, "P2P_REJECT ", 11) == 0) {
8238 if (p2p_ctrl_reject(wpa_s, buf + 11) < 0)
8239 reply_len = -1;
8240 } else if (os_strncmp(buf, "P2P_INVITE ", 11) == 0) {
8241 if (p2p_ctrl_invite(wpa_s, buf + 11) < 0)
8242 reply_len = -1;
8243 } else if (os_strncmp(buf, "P2P_PEER ", 9) == 0) {
8244 reply_len = p2p_ctrl_peer(wpa_s, buf + 9, reply,
8245 reply_size);
8246 } else if (os_strncmp(buf, "P2P_SET ", 8) == 0) {
8247 if (p2p_ctrl_set(wpa_s, buf + 8) < 0)
8248 reply_len = -1;
8249 } else if (os_strcmp(buf, "P2P_FLUSH") == 0) {
8250 p2p_ctrl_flush(wpa_s);
8251 } else if (os_strncmp(buf, "P2P_UNAUTHORIZE ", 16) == 0) {
8252 if (wpas_p2p_unauthorize(wpa_s, buf + 16) < 0)
8253 reply_len = -1;
8254 } else if (os_strcmp(buf, "P2P_CANCEL") == 0) {
8255 if (wpas_p2p_cancel(wpa_s))
8256 reply_len = -1;
8257 } else if (os_strncmp(buf, "P2P_PRESENCE_REQ ", 17) == 0) {
8258 if (p2p_ctrl_presence_req(wpa_s, buf + 17) < 0)
8259 reply_len = -1;
8260 } else if (os_strcmp(buf, "P2P_PRESENCE_REQ") == 0) {
8261 if (p2p_ctrl_presence_req(wpa_s, "") < 0)
8262 reply_len = -1;
8263 } else if (os_strncmp(buf, "P2P_EXT_LISTEN ", 15) == 0) {
8264 if (p2p_ctrl_ext_listen(wpa_s, buf + 15) < 0)
8265 reply_len = -1;
8266 } else if (os_strcmp(buf, "P2P_EXT_LISTEN") == 0) {
8267 if (p2p_ctrl_ext_listen(wpa_s, "") < 0)
8268 reply_len = -1;
8269 } else if (os_strncmp(buf, "P2P_REMOVE_CLIENT ", 18) == 0) {
8270 if (p2p_ctrl_remove_client(wpa_s, buf + 18) < 0)
8271 reply_len = -1;
8272 #endif /* CONFIG_P2P */
8273 #ifdef CONFIG_WIFI_DISPLAY
8274 } else if (os_strncmp(buf, "WFD_SUBELEM_SET ", 16) == 0) {
8275 if (wifi_display_subelem_set(wpa_s->global, buf + 16) < 0)
8276 reply_len = -1;
8277 } else if (os_strncmp(buf, "WFD_SUBELEM_GET ", 16) == 0) {
8278 reply_len = wifi_display_subelem_get(wpa_s->global, buf + 16,
8279 reply, reply_size);
8280 #endif /* CONFIG_WIFI_DISPLAY */
8281 #ifdef CONFIG_INTERWORKING
8282 } else if (os_strcmp(buf, "FETCH_ANQP") == 0) {
8283 if (interworking_fetch_anqp(wpa_s) < 0)
8284 reply_len = -1;
8285 } else if (os_strcmp(buf, "STOP_FETCH_ANQP") == 0) {
8286 interworking_stop_fetch_anqp(wpa_s);
8287 } else if (os_strcmp(buf, "INTERWORKING_SELECT") == 0) {
8288 if (ctrl_interworking_select(wpa_s, NULL) < 0)
8289 reply_len = -1;
8290 } else if (os_strncmp(buf, "INTERWORKING_SELECT ", 20) == 0) {
8291 if (ctrl_interworking_select(wpa_s, buf + 20) < 0)
8292 reply_len = -1;
8293 } else if (os_strncmp(buf, "INTERWORKING_CONNECT ", 21) == 0) {
8294 if (ctrl_interworking_connect(wpa_s, buf + 21, 0) < 0)
8295 reply_len = -1;
8296 } else if (os_strncmp(buf, "INTERWORKING_ADD_NETWORK ", 25) == 0) {
8297 int id;
8298
8299 id = ctrl_interworking_connect(wpa_s, buf + 25, 1);
8300 if (id < 0)
8301 reply_len = -1;
8302 else {
8303 reply_len = os_snprintf(reply, reply_size, "%d\n", id);
8304 if (os_snprintf_error(reply_size, reply_len))
8305 reply_len = -1;
8306 }
8307 } else if (os_strncmp(buf, "ANQP_GET ", 9) == 0) {
8308 if (get_anqp(wpa_s, buf + 9) < 0)
8309 reply_len = -1;
8310 } else if (os_strncmp(buf, "GAS_REQUEST ", 12) == 0) {
8311 if (gas_request(wpa_s, buf + 12) < 0)
8312 reply_len = -1;
8313 } else if (os_strncmp(buf, "GAS_RESPONSE_GET ", 17) == 0) {
8314 reply_len = gas_response_get(wpa_s, buf + 17, reply,
8315 reply_size);
8316 #endif /* CONFIG_INTERWORKING */
8317 #ifdef CONFIG_HS20
8318 } else if (os_strncmp(buf, "HS20_ANQP_GET ", 14) == 0) {
8319 if (get_hs20_anqp(wpa_s, buf + 14) < 0)
8320 reply_len = -1;
8321 } else if (os_strncmp(buf, "HS20_GET_NAI_HOME_REALM_LIST ", 29) == 0) {
8322 if (hs20_get_nai_home_realm_list(wpa_s, buf + 29) < 0)
8323 reply_len = -1;
8324 } else if (os_strncmp(buf, "HS20_ICON_REQUEST ", 18) == 0) {
8325 if (hs20_icon_request(wpa_s, buf + 18) < 0)
8326 reply_len = -1;
8327 } else if (os_strcmp(buf, "FETCH_OSU") == 0) {
8328 if (hs20_fetch_osu(wpa_s) < 0)
8329 reply_len = -1;
8330 } else if (os_strcmp(buf, "CANCEL_FETCH_OSU") == 0) {
8331 hs20_cancel_fetch_osu(wpa_s);
8332 #endif /* CONFIG_HS20 */
8333 } else if (os_strncmp(buf, WPA_CTRL_RSP, os_strlen(WPA_CTRL_RSP)) == 0)
8334 {
8335 if (wpa_supplicant_ctrl_iface_ctrl_rsp(
8336 wpa_s, buf + os_strlen(WPA_CTRL_RSP)))
8337 reply_len = -1;
8338 else {
8339 /*
8340 * Notify response from timeout to allow the control
8341 * interface response to be sent first.
8342 */
8343 eloop_register_timeout(0, 0, wpas_ctrl_eapol_response,
8344 wpa_s, NULL);
8345 }
8346 } else if (os_strcmp(buf, "RECONFIGURE") == 0) {
8347 if (wpa_supplicant_reload_configuration(wpa_s))
8348 reply_len = -1;
8349 } else if (os_strcmp(buf, "TERMINATE") == 0) {
8350 wpa_supplicant_terminate_proc(wpa_s->global);
8351 } else if (os_strncmp(buf, "BSSID ", 6) == 0) {
8352 if (wpa_supplicant_ctrl_iface_bssid(wpa_s, buf + 6))
8353 reply_len = -1;
8354 } else if (os_strncmp(buf, "BLACKLIST", 9) == 0) {
8355 reply_len = wpa_supplicant_ctrl_iface_blacklist(
8356 wpa_s, buf + 9, reply, reply_size);
8357 } else if (os_strncmp(buf, "LOG_LEVEL", 9) == 0) {
8358 reply_len = wpa_supplicant_ctrl_iface_log_level(
8359 wpa_s, buf + 9, reply, reply_size);
8360 } else if (os_strncmp(buf, "LIST_NETWORKS ", 14) == 0) {
8361 reply_len = wpa_supplicant_ctrl_iface_list_networks(
8362 wpa_s, buf + 14, reply, reply_size);
8363 } else if (os_strcmp(buf, "LIST_NETWORKS") == 0) {
8364 reply_len = wpa_supplicant_ctrl_iface_list_networks(
8365 wpa_s, NULL, reply, reply_size);
8366 } else if (os_strcmp(buf, "DISCONNECT") == 0) {
8367 #ifdef CONFIG_SME
8368 wpa_s->sme.prev_bssid_set = 0;
8369 #endif /* CONFIG_SME */
8370 wpa_s->reassociate = 0;
8371 wpa_s->disconnected = 1;
8372 wpa_supplicant_cancel_sched_scan(wpa_s);
8373 wpa_supplicant_cancel_scan(wpa_s);
8374 wpa_supplicant_deauthenticate(wpa_s,
8375 WLAN_REASON_DEAUTH_LEAVING);
8376 eloop_cancel_timeout(wpas_network_reenabled, wpa_s, NULL);
8377 } else if (os_strcmp(buf, "SCAN") == 0) {
8378 wpas_ctrl_scan(wpa_s, NULL, reply, reply_size, &reply_len);
8379 } else if (os_strncmp(buf, "SCAN ", 5) == 0) {
8380 wpas_ctrl_scan(wpa_s, buf + 5, reply, reply_size, &reply_len);
8381 } else if (os_strcmp(buf, "SCAN_RESULTS") == 0) {
8382 reply_len = wpa_supplicant_ctrl_iface_scan_results(
8383 wpa_s, reply, reply_size);
8384 } else if (os_strncmp(buf, "SELECT_NETWORK ", 15) == 0) {
8385 if (wpa_supplicant_ctrl_iface_select_network(wpa_s, buf + 15))
8386 reply_len = -1;
8387 } else if (os_strncmp(buf, "ENABLE_NETWORK ", 15) == 0) {
8388 if (wpa_supplicant_ctrl_iface_enable_network(wpa_s, buf + 15))
8389 reply_len = -1;
8390 } else if (os_strncmp(buf, "DISABLE_NETWORK ", 16) == 0) {
8391 if (wpa_supplicant_ctrl_iface_disable_network(wpa_s, buf + 16))
8392 reply_len = -1;
8393 } else if (os_strcmp(buf, "ADD_NETWORK") == 0) {
8394 reply_len = wpa_supplicant_ctrl_iface_add_network(
8395 wpa_s, reply, reply_size);
8396 } else if (os_strncmp(buf, "REMOVE_NETWORK ", 15) == 0) {
8397 if (wpa_supplicant_ctrl_iface_remove_network(wpa_s, buf + 15))
8398 reply_len = -1;
8399 } else if (os_strncmp(buf, "SET_NETWORK ", 12) == 0) {
8400 if (wpa_supplicant_ctrl_iface_set_network(wpa_s, buf + 12))
8401 reply_len = -1;
8402 } else if (os_strncmp(buf, "GET_NETWORK ", 12) == 0) {
8403 reply_len = wpa_supplicant_ctrl_iface_get_network(
8404 wpa_s, buf + 12, reply, reply_size);
8405 } else if (os_strncmp(buf, "DUP_NETWORK ", 12) == 0) {
8406 if (wpa_supplicant_ctrl_iface_dup_network(wpa_s, buf + 12))
8407 reply_len = -1;
8408 } else if (os_strcmp(buf, "LIST_CREDS") == 0) {
8409 reply_len = wpa_supplicant_ctrl_iface_list_creds(
8410 wpa_s, reply, reply_size);
8411 } else if (os_strcmp(buf, "ADD_CRED") == 0) {
8412 reply_len = wpa_supplicant_ctrl_iface_add_cred(
8413 wpa_s, reply, reply_size);
8414 } else if (os_strncmp(buf, "REMOVE_CRED ", 12) == 0) {
8415 if (wpa_supplicant_ctrl_iface_remove_cred(wpa_s, buf + 12))
8416 reply_len = -1;
8417 } else if (os_strncmp(buf, "SET_CRED ", 9) == 0) {
8418 if (wpa_supplicant_ctrl_iface_set_cred(wpa_s, buf + 9))
8419 reply_len = -1;
8420 } else if (os_strncmp(buf, "GET_CRED ", 9) == 0) {
8421 reply_len = wpa_supplicant_ctrl_iface_get_cred(wpa_s, buf + 9,
8422 reply,
8423 reply_size);
8424 #ifndef CONFIG_NO_CONFIG_WRITE
8425 } else if (os_strcmp(buf, "SAVE_CONFIG") == 0) {
8426 if (wpa_supplicant_ctrl_iface_save_config(wpa_s))
8427 reply_len = -1;
8428 #endif /* CONFIG_NO_CONFIG_WRITE */
8429 } else if (os_strncmp(buf, "GET_CAPABILITY ", 15) == 0) {
8430 reply_len = wpa_supplicant_ctrl_iface_get_capability(
8431 wpa_s, buf + 15, reply, reply_size);
8432 } else if (os_strncmp(buf, "AP_SCAN ", 8) == 0) {
8433 if (wpa_supplicant_ctrl_iface_ap_scan(wpa_s, buf + 8))
8434 reply_len = -1;
8435 } else if (os_strncmp(buf, "SCAN_INTERVAL ", 14) == 0) {
8436 if (wpa_supplicant_ctrl_iface_scan_interval(wpa_s, buf + 14))
8437 reply_len = -1;
8438 } else if (os_strcmp(buf, "INTERFACE_LIST") == 0) {
8439 reply_len = wpa_supplicant_global_iface_list(
8440 wpa_s->global, reply, reply_size);
8441 } else if (os_strcmp(buf, "INTERFACES") == 0) {
8442 reply_len = wpa_supplicant_global_iface_interfaces(
8443 wpa_s->global, reply, reply_size);
8444 } else if (os_strncmp(buf, "BSS ", 4) == 0) {
8445 reply_len = wpa_supplicant_ctrl_iface_bss(
8446 wpa_s, buf + 4, reply, reply_size);
8447 #ifdef CONFIG_AP
8448 } else if (os_strcmp(buf, "STA-FIRST") == 0) {
8449 reply_len = ap_ctrl_iface_sta_first(wpa_s, reply, reply_size);
8450 } else if (os_strncmp(buf, "STA ", 4) == 0) {
8451 reply_len = ap_ctrl_iface_sta(wpa_s, buf + 4, reply,
8452 reply_size);
8453 } else if (os_strncmp(buf, "STA-NEXT ", 9) == 0) {
8454 reply_len = ap_ctrl_iface_sta_next(wpa_s, buf + 9, reply,
8455 reply_size);
8456 } else if (os_strncmp(buf, "DEAUTHENTICATE ", 15) == 0) {
8457 if (ap_ctrl_iface_sta_deauthenticate(wpa_s, buf + 15))
8458 reply_len = -1;
8459 } else if (os_strncmp(buf, "DISASSOCIATE ", 13) == 0) {
8460 if (ap_ctrl_iface_sta_disassociate(wpa_s, buf + 13))
8461 reply_len = -1;
8462 } else if (os_strncmp(buf, "CHAN_SWITCH ", 12) == 0) {
8463 if (ap_ctrl_iface_chanswitch(wpa_s, buf + 12))
8464 reply_len = -1;
8465 } else if (os_strcmp(buf, "STOP_AP") == 0) {
8466 if (wpas_ap_stop_ap(wpa_s))
8467 reply_len = -1;
8468 #endif /* CONFIG_AP */
8469 } else if (os_strcmp(buf, "SUSPEND") == 0) {
8470 wpas_notify_suspend(wpa_s->global);
8471 } else if (os_strcmp(buf, "RESUME") == 0) {
8472 wpas_notify_resume(wpa_s->global);
8473 #ifdef CONFIG_TESTING_OPTIONS
8474 } else if (os_strcmp(buf, "DROP_SA") == 0) {
8475 wpa_supplicant_ctrl_iface_drop_sa(wpa_s);
8476 #endif /* CONFIG_TESTING_OPTIONS */
8477 } else if (os_strncmp(buf, "ROAM ", 5) == 0) {
8478 if (wpa_supplicant_ctrl_iface_roam(wpa_s, buf + 5))
8479 reply_len = -1;
8480 } else if (os_strncmp(buf, "STA_AUTOCONNECT ", 16) == 0) {
8481 wpa_s->auto_reconnect_disabled = atoi(buf + 16) == 0;
8482 } else if (os_strncmp(buf, "BSS_EXPIRE_AGE ", 15) == 0) {
8483 if (wpa_supplicant_ctrl_iface_bss_expire_age(wpa_s, buf + 15))
8484 reply_len = -1;
8485 } else if (os_strncmp(buf, "BSS_EXPIRE_COUNT ", 17) == 0) {
8486 if (wpa_supplicant_ctrl_iface_bss_expire_count(wpa_s,
8487 buf + 17))
8488 reply_len = -1;
8489 } else if (os_strncmp(buf, "BSS_FLUSH ", 10) == 0) {
8490 wpa_supplicant_ctrl_iface_bss_flush(wpa_s, buf + 10);
8491 #ifdef CONFIG_TDLS
8492 } else if (os_strncmp(buf, "TDLS_DISCOVER ", 14) == 0) {
8493 if (wpa_supplicant_ctrl_iface_tdls_discover(wpa_s, buf + 14))
8494 reply_len = -1;
8495 } else if (os_strncmp(buf, "TDLS_SETUP ", 11) == 0) {
8496 if (wpa_supplicant_ctrl_iface_tdls_setup(wpa_s, buf + 11))
8497 reply_len = -1;
8498 } else if (os_strncmp(buf, "TDLS_TEARDOWN ", 14) == 0) {
8499 if (wpa_supplicant_ctrl_iface_tdls_teardown(wpa_s, buf + 14))
8500 reply_len = -1;
8501 } else if (os_strncmp(buf, "TDLS_CHAN_SWITCH ", 17) == 0) {
8502 if (wpa_supplicant_ctrl_iface_tdls_chan_switch(wpa_s,
8503 buf + 17))
8504 reply_len = -1;
8505 } else if (os_strncmp(buf, "TDLS_CANCEL_CHAN_SWITCH ", 24) == 0) {
8506 if (wpa_supplicant_ctrl_iface_tdls_cancel_chan_switch(wpa_s,
8507 buf + 24))
8508 reply_len = -1;
8509 } else if (os_strncmp(buf, "TDLS_LINK_STATUS ", 17) == 0) {
8510 reply_len = wpa_supplicant_ctrl_iface_tdls_link_status(
8511 wpa_s, buf + 17, reply, reply_size);
8512 #endif /* CONFIG_TDLS */
8513 } else if (os_strcmp(buf, "WMM_AC_STATUS") == 0) {
8514 reply_len = wpas_wmm_ac_status(wpa_s, reply, reply_size);
8515 } else if (os_strncmp(buf, "WMM_AC_ADDTS ", 13) == 0) {
8516 if (wmm_ac_ctrl_addts(wpa_s, buf + 13))
8517 reply_len = -1;
8518 } else if (os_strncmp(buf, "WMM_AC_DELTS ", 13) == 0) {
8519 if (wmm_ac_ctrl_delts(wpa_s, buf + 13))
8520 reply_len = -1;
8521 } else if (os_strncmp(buf, "SIGNAL_POLL", 11) == 0) {
8522 reply_len = wpa_supplicant_signal_poll(wpa_s, reply,
8523 reply_size);
8524 } else if (os_strncmp(buf, "PKTCNT_POLL", 11) == 0) {
8525 reply_len = wpa_supplicant_pktcnt_poll(wpa_s, reply,
8526 reply_size);
8527 #ifdef CONFIG_AUTOSCAN
8528 } else if (os_strncmp(buf, "AUTOSCAN ", 9) == 0) {
8529 if (wpa_supplicant_ctrl_iface_autoscan(wpa_s, buf + 9))
8530 reply_len = -1;
8531 #endif /* CONFIG_AUTOSCAN */
8532 #ifdef ANDROID
8533 } else if (os_strncmp(buf, "DRIVER ", 7) == 0) {
8534 reply_len = wpa_supplicant_driver_cmd(wpa_s, buf + 7, reply,
8535 reply_size);
8536 #endif /* ANDROID */
8537 } else if (os_strncmp(buf, "VENDOR ", 7) == 0) {
8538 reply_len = wpa_supplicant_vendor_cmd(wpa_s, buf + 7, reply,
8539 reply_size);
8540 } else if (os_strcmp(buf, "REAUTHENTICATE") == 0) {
8541 pmksa_cache_clear_current(wpa_s->wpa);
8542 eapol_sm_request_reauth(wpa_s->eapol);
8543 #ifdef CONFIG_WNM
8544 } else if (os_strncmp(buf, "WNM_SLEEP ", 10) == 0) {
8545 if (wpas_ctrl_iface_wnm_sleep(wpa_s, buf + 10))
8546 reply_len = -1;
8547 } else if (os_strncmp(buf, "WNM_BSS_QUERY ", 14) == 0) {
8548 if (wpas_ctrl_iface_wnm_bss_query(wpa_s, buf + 14))
8549 reply_len = -1;
8550 #endif /* CONFIG_WNM */
8551 } else if (os_strcmp(buf, "FLUSH") == 0) {
8552 wpa_supplicant_ctrl_iface_flush(wpa_s);
8553 } else if (os_strncmp(buf, "RADIO_WORK ", 11) == 0) {
8554 reply_len = wpas_ctrl_radio_work(wpa_s, buf + 11, reply,
8555 reply_size);
8556 #ifdef CONFIG_TESTING_OPTIONS
8557 } else if (os_strncmp(buf, "MGMT_TX ", 8) == 0) {
8558 if (wpas_ctrl_iface_mgmt_tx(wpa_s, buf + 8) < 0)
8559 reply_len = -1;
8560 } else if (os_strcmp(buf, "MGMT_TX_DONE") == 0) {
8561 wpas_ctrl_iface_mgmt_tx_done(wpa_s);
8562 } else if (os_strncmp(buf, "DRIVER_EVENT ", 13) == 0) {
8563 if (wpas_ctrl_iface_driver_event(wpa_s, buf + 13) < 0)
8564 reply_len = -1;
8565 } else if (os_strncmp(buf, "EAPOL_RX ", 9) == 0) {
8566 if (wpas_ctrl_iface_eapol_rx(wpa_s, buf + 9) < 0)
8567 reply_len = -1;
8568 } else if (os_strncmp(buf, "DATA_TEST_CONFIG ", 17) == 0) {
8569 if (wpas_ctrl_iface_data_test_config(wpa_s, buf + 17) < 0)
8570 reply_len = -1;
8571 } else if (os_strncmp(buf, "DATA_TEST_TX ", 13) == 0) {
8572 if (wpas_ctrl_iface_data_test_tx(wpa_s, buf + 13) < 0)
8573 reply_len = -1;
8574 } else if (os_strncmp(buf, "DATA_TEST_FRAME ", 16) == 0) {
8575 if (wpas_ctrl_iface_data_test_frame(wpa_s, buf + 16) < 0)
8576 reply_len = -1;
8577 } else if (os_strncmp(buf, "TEST_ALLOC_FAIL ", 16) == 0) {
8578 if (wpas_ctrl_test_alloc_fail(wpa_s, buf + 16) < 0)
8579 reply_len = -1;
8580 } else if (os_strcmp(buf, "GET_ALLOC_FAIL") == 0) {
8581 reply_len = wpas_ctrl_get_alloc_fail(wpa_s, reply, reply_size);
8582 #endif /* CONFIG_TESTING_OPTIONS */
8583 } else if (os_strncmp(buf, "VENDOR_ELEM_ADD ", 16) == 0) {
8584 if (wpas_ctrl_vendor_elem_add(wpa_s, buf + 16) < 0)
8585 reply_len = -1;
8586 } else if (os_strncmp(buf, "VENDOR_ELEM_GET ", 16) == 0) {
8587 reply_len = wpas_ctrl_vendor_elem_get(wpa_s, buf + 16, reply,
8588 reply_size);
8589 } else if (os_strncmp(buf, "VENDOR_ELEM_REMOVE ", 19) == 0) {
8590 if (wpas_ctrl_vendor_elem_remove(wpa_s, buf + 19) < 0)
8591 reply_len = -1;
8592 } else if (os_strncmp(buf, "NEIGHBOR_REP_REQUEST", 20) == 0) {
8593 if (wpas_ctrl_iface_send_neigbor_rep(wpa_s, buf + 20))
8594 reply_len = -1;
8595 } else if (os_strcmp(buf, "ERP_FLUSH") == 0) {
8596 wpas_ctrl_iface_erp_flush(wpa_s);
8597 } else if (os_strncmp(buf, "MAC_RAND_SCAN ", 14) == 0) {
8598 if (wpas_ctrl_iface_mac_rand_scan(wpa_s, buf + 14))
8599 reply_len = -1;
8600 } else {
8601 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
8602 reply_len = 16;
8603 }
8604
8605 if (reply_len < 0) {
8606 os_memcpy(reply, "FAIL\n", 5);
8607 reply_len = 5;
8608 }
8609
8610 *resp_len = reply_len;
8611 return reply;
8612 }
8613
8614
wpa_supplicant_global_iface_add(struct wpa_global * global,char * cmd)8615 static int wpa_supplicant_global_iface_add(struct wpa_global *global,
8616 char *cmd)
8617 {
8618 struct wpa_interface iface;
8619 char *pos, *extra;
8620 struct wpa_supplicant *wpa_s;
8621 unsigned int create_iface = 0;
8622 u8 mac_addr[ETH_ALEN];
8623
8624 /*
8625 * <ifname>TAB<confname>TAB<driver>TAB<ctrl_interface>TAB<driver_param>
8626 * TAB<bridge_ifname>[TAB<create>]
8627 */
8628 wpa_printf(MSG_DEBUG, "CTRL_IFACE GLOBAL INTERFACE_ADD '%s'", cmd);
8629
8630 os_memset(&iface, 0, sizeof(iface));
8631
8632 do {
8633 iface.ifname = pos = cmd;
8634 pos = os_strchr(pos, '\t');
8635 if (pos)
8636 *pos++ = '\0';
8637 if (iface.ifname[0] == '\0')
8638 return -1;
8639 if (pos == NULL)
8640 break;
8641
8642 iface.confname = pos;
8643 pos = os_strchr(pos, '\t');
8644 if (pos)
8645 *pos++ = '\0';
8646 if (iface.confname[0] == '\0')
8647 iface.confname = NULL;
8648 if (pos == NULL)
8649 break;
8650
8651 iface.driver = pos;
8652 pos = os_strchr(pos, '\t');
8653 if (pos)
8654 *pos++ = '\0';
8655 if (iface.driver[0] == '\0')
8656 iface.driver = NULL;
8657 if (pos == NULL)
8658 break;
8659
8660 iface.ctrl_interface = pos;
8661 pos = os_strchr(pos, '\t');
8662 if (pos)
8663 *pos++ = '\0';
8664 if (iface.ctrl_interface[0] == '\0')
8665 iface.ctrl_interface = NULL;
8666 if (pos == NULL)
8667 break;
8668
8669 iface.driver_param = pos;
8670 pos = os_strchr(pos, '\t');
8671 if (pos)
8672 *pos++ = '\0';
8673 if (iface.driver_param[0] == '\0')
8674 iface.driver_param = NULL;
8675 if (pos == NULL)
8676 break;
8677
8678 iface.bridge_ifname = pos;
8679 pos = os_strchr(pos, '\t');
8680 if (pos)
8681 *pos++ = '\0';
8682 if (iface.bridge_ifname[0] == '\0')
8683 iface.bridge_ifname = NULL;
8684 if (pos == NULL)
8685 break;
8686
8687 extra = pos;
8688 pos = os_strchr(pos, '\t');
8689 if (pos)
8690 *pos++ = '\0';
8691 if (!extra[0])
8692 break;
8693
8694 if (os_strcmp(extra, "create") == 0)
8695 create_iface = 1;
8696 else {
8697 wpa_printf(MSG_DEBUG,
8698 "INTERFACE_ADD unsupported extra parameter: '%s'",
8699 extra);
8700 return -1;
8701 }
8702 } while (0);
8703
8704 if (create_iface) {
8705 wpa_printf(MSG_DEBUG, "CTRL_IFACE creating interface '%s'",
8706 iface.ifname);
8707 if (!global->ifaces)
8708 return -1;
8709 if (wpa_drv_if_add(global->ifaces, WPA_IF_STATION, iface.ifname,
8710 NULL, NULL, NULL, mac_addr, NULL) < 0) {
8711 wpa_printf(MSG_ERROR,
8712 "CTRL_IFACE interface creation failed");
8713 return -1;
8714 }
8715
8716 wpa_printf(MSG_DEBUG,
8717 "CTRL_IFACE interface '%s' created with MAC addr: "
8718 MACSTR, iface.ifname, MAC2STR(mac_addr));
8719 }
8720
8721 if (wpa_supplicant_get_iface(global, iface.ifname))
8722 goto fail;
8723
8724 wpa_s = wpa_supplicant_add_iface(global, &iface, NULL);
8725 if (!wpa_s)
8726 goto fail;
8727 wpa_s->added_vif = create_iface;
8728 return 0;
8729
8730 fail:
8731 if (create_iface)
8732 wpa_drv_if_remove(global->ifaces, WPA_IF_STATION, iface.ifname);
8733 return -1;
8734 }
8735
8736
wpa_supplicant_global_iface_remove(struct wpa_global * global,char * cmd)8737 static int wpa_supplicant_global_iface_remove(struct wpa_global *global,
8738 char *cmd)
8739 {
8740 struct wpa_supplicant *wpa_s;
8741 int ret;
8742 unsigned int delete_iface;
8743
8744 wpa_printf(MSG_DEBUG, "CTRL_IFACE GLOBAL INTERFACE_REMOVE '%s'", cmd);
8745
8746 wpa_s = wpa_supplicant_get_iface(global, cmd);
8747 if (wpa_s == NULL)
8748 return -1;
8749 delete_iface = wpa_s->added_vif;
8750 ret = wpa_supplicant_remove_iface(global, wpa_s, 0);
8751 if (!ret && delete_iface) {
8752 wpa_printf(MSG_DEBUG, "CTRL_IFACE deleting the interface '%s'",
8753 cmd);
8754 ret = wpa_drv_if_remove(global->ifaces, WPA_IF_STATION, cmd);
8755 }
8756 return ret;
8757 }
8758
8759
wpa_free_iface_info(struct wpa_interface_info * iface)8760 static void wpa_free_iface_info(struct wpa_interface_info *iface)
8761 {
8762 struct wpa_interface_info *prev;
8763
8764 while (iface) {
8765 prev = iface;
8766 iface = iface->next;
8767
8768 os_free(prev->ifname);
8769 os_free(prev->desc);
8770 os_free(prev);
8771 }
8772 }
8773
8774
wpa_supplicant_global_iface_list(struct wpa_global * global,char * buf,int len)8775 static int wpa_supplicant_global_iface_list(struct wpa_global *global,
8776 char *buf, int len)
8777 {
8778 int i, res;
8779 struct wpa_interface_info *iface = NULL, *last = NULL, *tmp;
8780 char *pos, *end;
8781
8782 for (i = 0; wpa_drivers[i]; i++) {
8783 const struct wpa_driver_ops *drv = wpa_drivers[i];
8784 if (drv->get_interfaces == NULL)
8785 continue;
8786 tmp = drv->get_interfaces(global->drv_priv[i]);
8787 if (tmp == NULL)
8788 continue;
8789
8790 if (last == NULL)
8791 iface = last = tmp;
8792 else
8793 last->next = tmp;
8794 while (last->next)
8795 last = last->next;
8796 }
8797
8798 pos = buf;
8799 end = buf + len;
8800 for (tmp = iface; tmp; tmp = tmp->next) {
8801 res = os_snprintf(pos, end - pos, "%s\t%s\t%s\n",
8802 tmp->drv_name, tmp->ifname,
8803 tmp->desc ? tmp->desc : "");
8804 if (os_snprintf_error(end - pos, res)) {
8805 *pos = '\0';
8806 break;
8807 }
8808 pos += res;
8809 }
8810
8811 wpa_free_iface_info(iface);
8812
8813 return pos - buf;
8814 }
8815
8816
wpa_supplicant_global_iface_interfaces(struct wpa_global * global,char * buf,int len)8817 static int wpa_supplicant_global_iface_interfaces(struct wpa_global *global,
8818 char *buf, int len)
8819 {
8820 int res;
8821 char *pos, *end;
8822 struct wpa_supplicant *wpa_s;
8823
8824 wpa_s = global->ifaces;
8825 pos = buf;
8826 end = buf + len;
8827
8828 while (wpa_s) {
8829 res = os_snprintf(pos, end - pos, "%s\n", wpa_s->ifname);
8830 if (os_snprintf_error(end - pos, res)) {
8831 *pos = '\0';
8832 break;
8833 }
8834 pos += res;
8835 wpa_s = wpa_s->next;
8836 }
8837 return pos - buf;
8838 }
8839
8840
wpas_global_ctrl_iface_ifname(struct wpa_global * global,const char * ifname,char * cmd,size_t * resp_len)8841 static char * wpas_global_ctrl_iface_ifname(struct wpa_global *global,
8842 const char *ifname,
8843 char *cmd, size_t *resp_len)
8844 {
8845 struct wpa_supplicant *wpa_s;
8846
8847 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
8848 if (os_strcmp(ifname, wpa_s->ifname) == 0)
8849 break;
8850 }
8851
8852 if (wpa_s == NULL) {
8853 char *resp = os_strdup("FAIL-NO-IFNAME-MATCH\n");
8854 if (resp)
8855 *resp_len = os_strlen(resp);
8856 else
8857 *resp_len = 1;
8858 return resp;
8859 }
8860
8861 return wpa_supplicant_ctrl_iface_process(wpa_s, cmd, resp_len);
8862 }
8863
8864
wpas_global_ctrl_iface_redir_p2p(struct wpa_global * global,char * buf,size_t * resp_len)8865 static char * wpas_global_ctrl_iface_redir_p2p(struct wpa_global *global,
8866 char *buf, size_t *resp_len)
8867 {
8868 #ifdef CONFIG_P2P
8869 static const char * cmd[] = {
8870 "LIST_NETWORKS",
8871 "P2P_FIND",
8872 "P2P_STOP_FIND",
8873 "P2P_LISTEN",
8874 "P2P_GROUP_ADD",
8875 "P2P_GET_PASSPHRASE",
8876 "P2P_SERVICE_UPDATE",
8877 "P2P_SERVICE_FLUSH",
8878 "P2P_FLUSH",
8879 "P2P_CANCEL",
8880 "P2P_PRESENCE_REQ",
8881 "P2P_EXT_LISTEN",
8882 NULL
8883 };
8884 static const char * prefix[] = {
8885 #ifdef ANDROID
8886 "DRIVER ",
8887 #endif /* ANDROID */
8888 "GET_NETWORK ",
8889 "REMOVE_NETWORK ",
8890 "P2P_FIND ",
8891 "P2P_CONNECT ",
8892 "P2P_LISTEN ",
8893 "P2P_GROUP_REMOVE ",
8894 "P2P_GROUP_ADD ",
8895 "P2P_PROV_DISC ",
8896 "P2P_SERV_DISC_REQ ",
8897 "P2P_SERV_DISC_CANCEL_REQ ",
8898 "P2P_SERV_DISC_RESP ",
8899 "P2P_SERV_DISC_EXTERNAL ",
8900 "P2P_SERVICE_ADD ",
8901 "P2P_SERVICE_DEL ",
8902 "P2P_SERVICE_REP ",
8903 "P2P_REJECT ",
8904 "P2P_INVITE ",
8905 "P2P_PEER ",
8906 "P2P_SET ",
8907 "P2P_UNAUTHORIZE ",
8908 "P2P_PRESENCE_REQ ",
8909 "P2P_EXT_LISTEN ",
8910 "P2P_REMOVE_CLIENT ",
8911 "WPS_NFC_TOKEN ",
8912 "WPS_NFC_TAG_READ ",
8913 "NFC_GET_HANDOVER_SEL ",
8914 "NFC_GET_HANDOVER_REQ ",
8915 "NFC_REPORT_HANDOVER ",
8916 "P2P_ASP_PROVISION ",
8917 "P2P_ASP_PROVISION_RESP ",
8918 NULL
8919 };
8920 int found = 0;
8921 int i;
8922
8923 if (global->p2p_init_wpa_s == NULL)
8924 return NULL;
8925
8926 for (i = 0; !found && cmd[i]; i++) {
8927 if (os_strcmp(buf, cmd[i]) == 0)
8928 found = 1;
8929 }
8930
8931 for (i = 0; !found && prefix[i]; i++) {
8932 if (os_strncmp(buf, prefix[i], os_strlen(prefix[i])) == 0)
8933 found = 1;
8934 }
8935
8936 if (found)
8937 return wpa_supplicant_ctrl_iface_process(global->p2p_init_wpa_s,
8938 buf, resp_len);
8939 #endif /* CONFIG_P2P */
8940 return NULL;
8941 }
8942
8943
wpas_global_ctrl_iface_redir_wfd(struct wpa_global * global,char * buf,size_t * resp_len)8944 static char * wpas_global_ctrl_iface_redir_wfd(struct wpa_global *global,
8945 char *buf, size_t *resp_len)
8946 {
8947 #ifdef CONFIG_WIFI_DISPLAY
8948 if (global->p2p_init_wpa_s == NULL)
8949 return NULL;
8950 if (os_strncmp(buf, "WFD_SUBELEM_SET ", 16) == 0 ||
8951 os_strncmp(buf, "WFD_SUBELEM_GET ", 16) == 0)
8952 return wpa_supplicant_ctrl_iface_process(global->p2p_init_wpa_s,
8953 buf, resp_len);
8954 #endif /* CONFIG_WIFI_DISPLAY */
8955 return NULL;
8956 }
8957
8958
wpas_global_ctrl_iface_redir(struct wpa_global * global,char * buf,size_t * resp_len)8959 static char * wpas_global_ctrl_iface_redir(struct wpa_global *global,
8960 char *buf, size_t *resp_len)
8961 {
8962 char *ret;
8963
8964 ret = wpas_global_ctrl_iface_redir_p2p(global, buf, resp_len);
8965 if (ret)
8966 return ret;
8967
8968 ret = wpas_global_ctrl_iface_redir_wfd(global, buf, resp_len);
8969 if (ret)
8970 return ret;
8971
8972 return NULL;
8973 }
8974
8975
wpas_global_ctrl_iface_set(struct wpa_global * global,char * cmd)8976 static int wpas_global_ctrl_iface_set(struct wpa_global *global, char *cmd)
8977 {
8978 char *value;
8979
8980 value = os_strchr(cmd, ' ');
8981 if (value == NULL)
8982 return -1;
8983 *value++ = '\0';
8984
8985 wpa_printf(MSG_DEBUG, "GLOBAL_CTRL_IFACE SET '%s'='%s'", cmd, value);
8986
8987 #ifdef CONFIG_WIFI_DISPLAY
8988 if (os_strcasecmp(cmd, "wifi_display") == 0) {
8989 wifi_display_enable(global, !!atoi(value));
8990 return 0;
8991 }
8992 #endif /* CONFIG_WIFI_DISPLAY */
8993
8994 /* Restore cmd to its original value to allow redirection */
8995 value[-1] = ' ';
8996
8997 return -1;
8998 }
8999
9000
9001 #ifndef CONFIG_NO_CONFIG_WRITE
wpas_global_ctrl_iface_save_config(struct wpa_global * global)9002 static int wpas_global_ctrl_iface_save_config(struct wpa_global *global)
9003 {
9004 int ret = 0, saved = 0;
9005 struct wpa_supplicant *wpa_s;
9006
9007 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
9008 if (!wpa_s->conf->update_config) {
9009 wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Not allowed to update configuration (update_config=0)");
9010 continue;
9011 }
9012
9013 if (wpa_config_write(wpa_s->confname, wpa_s->conf)) {
9014 wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Failed to update configuration");
9015 ret = 1;
9016 } else {
9017 wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Configuration updated");
9018 saved++;
9019 }
9020 }
9021
9022 if (!saved && !ret) {
9023 wpa_dbg(wpa_s, MSG_DEBUG,
9024 "CTRL_IFACE: SAVE_CONFIG - No configuration files could be updated");
9025 ret = 1;
9026 }
9027
9028 return ret;
9029 }
9030 #endif /* CONFIG_NO_CONFIG_WRITE */
9031
9032
wpas_global_ctrl_iface_status(struct wpa_global * global,char * buf,size_t buflen)9033 static int wpas_global_ctrl_iface_status(struct wpa_global *global,
9034 char *buf, size_t buflen)
9035 {
9036 char *pos, *end;
9037 int ret;
9038 struct wpa_supplicant *wpa_s;
9039
9040 pos = buf;
9041 end = buf + buflen;
9042
9043 #ifdef CONFIG_P2P
9044 if (global->p2p && !global->p2p_disabled) {
9045 ret = os_snprintf(pos, end - pos, "p2p_device_address=" MACSTR
9046 "\n"
9047 "p2p_state=%s\n",
9048 MAC2STR(global->p2p_dev_addr),
9049 p2p_get_state_txt(global->p2p));
9050 if (os_snprintf_error(end - pos, ret))
9051 return pos - buf;
9052 pos += ret;
9053 } else if (global->p2p) {
9054 ret = os_snprintf(pos, end - pos, "p2p_state=DISABLED\n");
9055 if (os_snprintf_error(end - pos, ret))
9056 return pos - buf;
9057 pos += ret;
9058 }
9059 #endif /* CONFIG_P2P */
9060
9061 #ifdef CONFIG_WIFI_DISPLAY
9062 ret = os_snprintf(pos, end - pos, "wifi_display=%d\n",
9063 !!global->wifi_display);
9064 if (os_snprintf_error(end - pos, ret))
9065 return pos - buf;
9066 pos += ret;
9067 #endif /* CONFIG_WIFI_DISPLAY */
9068
9069 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
9070 ret = os_snprintf(pos, end - pos, "ifname=%s\n"
9071 "address=" MACSTR "\n",
9072 wpa_s->ifname, MAC2STR(wpa_s->own_addr));
9073 if (os_snprintf_error(end - pos, ret))
9074 return pos - buf;
9075 pos += ret;
9076 }
9077
9078 return pos - buf;
9079 }
9080
9081
wpa_supplicant_global_ctrl_iface_process(struct wpa_global * global,char * buf,size_t * resp_len)9082 char * wpa_supplicant_global_ctrl_iface_process(struct wpa_global *global,
9083 char *buf, size_t *resp_len)
9084 {
9085 char *reply;
9086 const int reply_size = 2048;
9087 int reply_len;
9088 int level = MSG_DEBUG;
9089
9090 if (os_strncmp(buf, "IFNAME=", 7) == 0) {
9091 char *pos = os_strchr(buf + 7, ' ');
9092 if (pos) {
9093 *pos++ = '\0';
9094 return wpas_global_ctrl_iface_ifname(global,
9095 buf + 7, pos,
9096 resp_len);
9097 }
9098 }
9099
9100 reply = wpas_global_ctrl_iface_redir(global, buf, resp_len);
9101 if (reply)
9102 return reply;
9103
9104 if (os_strcmp(buf, "PING") == 0)
9105 level = MSG_EXCESSIVE;
9106 wpa_hexdump_ascii(level, "RX global ctrl_iface",
9107 (const u8 *) buf, os_strlen(buf));
9108
9109 reply = os_malloc(reply_size);
9110 if (reply == NULL) {
9111 *resp_len = 1;
9112 return NULL;
9113 }
9114
9115 os_memcpy(reply, "OK\n", 3);
9116 reply_len = 3;
9117
9118 if (os_strcmp(buf, "PING") == 0) {
9119 os_memcpy(reply, "PONG\n", 5);
9120 reply_len = 5;
9121 } else if (os_strncmp(buf, "INTERFACE_ADD ", 14) == 0) {
9122 if (wpa_supplicant_global_iface_add(global, buf + 14))
9123 reply_len = -1;
9124 } else if (os_strncmp(buf, "INTERFACE_REMOVE ", 17) == 0) {
9125 if (wpa_supplicant_global_iface_remove(global, buf + 17))
9126 reply_len = -1;
9127 } else if (os_strcmp(buf, "INTERFACE_LIST") == 0) {
9128 reply_len = wpa_supplicant_global_iface_list(
9129 global, reply, reply_size);
9130 } else if (os_strcmp(buf, "INTERFACES") == 0) {
9131 reply_len = wpa_supplicant_global_iface_interfaces(
9132 global, reply, reply_size);
9133 } else if (os_strcmp(buf, "TERMINATE") == 0) {
9134 wpa_supplicant_terminate_proc(global);
9135 } else if (os_strcmp(buf, "SUSPEND") == 0) {
9136 wpas_notify_suspend(global);
9137 } else if (os_strcmp(buf, "RESUME") == 0) {
9138 wpas_notify_resume(global);
9139 } else if (os_strncmp(buf, "SET ", 4) == 0) {
9140 if (wpas_global_ctrl_iface_set(global, buf + 4)) {
9141 #ifdef CONFIG_P2P
9142 if (global->p2p_init_wpa_s) {
9143 os_free(reply);
9144 /* Check if P2P redirection would work for this
9145 * command. */
9146 return wpa_supplicant_ctrl_iface_process(
9147 global->p2p_init_wpa_s,
9148 buf, resp_len);
9149 }
9150 #endif /* CONFIG_P2P */
9151 reply_len = -1;
9152 }
9153 #ifndef CONFIG_NO_CONFIG_WRITE
9154 } else if (os_strcmp(buf, "SAVE_CONFIG") == 0) {
9155 if (wpas_global_ctrl_iface_save_config(global))
9156 reply_len = -1;
9157 #endif /* CONFIG_NO_CONFIG_WRITE */
9158 } else if (os_strcmp(buf, "STATUS") == 0) {
9159 reply_len = wpas_global_ctrl_iface_status(global, reply,
9160 reply_size);
9161 #ifdef CONFIG_MODULE_TESTS
9162 } else if (os_strcmp(buf, "MODULE_TESTS") == 0) {
9163 int wpas_module_tests(void);
9164 if (wpas_module_tests() < 0)
9165 reply_len = -1;
9166 #endif /* CONFIG_MODULE_TESTS */
9167 } else if (os_strncmp(buf, "RELOG", 5) == 0) {
9168 if (wpa_debug_reopen_file() < 0)
9169 reply_len = -1;
9170 } else {
9171 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
9172 reply_len = 16;
9173 }
9174
9175 if (reply_len < 0) {
9176 os_memcpy(reply, "FAIL\n", 5);
9177 reply_len = 5;
9178 }
9179
9180 *resp_len = reply_len;
9181 return reply;
9182 }
9183