1 /*
2 * WPA Supplicant / Control interface (shared code for all backends)
3 * Copyright (c) 2004-2015, Jouni Malinen <j@w1.fi>
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9 #include "utils/includes.h"
10 #ifdef CONFIG_TESTING_OPTIONS
11 #include <net/ethernet.h>
12 #include <netinet/ip.h>
13 #endif /* CONFIG_TESTING_OPTIONS */
14
15 #include "utils/common.h"
16 #include "utils/eloop.h"
17 #include "utils/uuid.h"
18 #include "common/version.h"
19 #include "common/ieee802_11_defs.h"
20 #include "common/ieee802_11_common.h"
21 #include "common/wpa_ctrl.h"
22 #include "crypto/tls.h"
23 #include "ap/hostapd.h"
24 #include "eap_peer/eap.h"
25 #include "eapol_supp/eapol_supp_sm.h"
26 #include "rsn_supp/wpa.h"
27 #include "rsn_supp/preauth.h"
28 #include "rsn_supp/pmksa_cache.h"
29 #include "l2_packet/l2_packet.h"
30 #include "wps/wps.h"
31 #include "fst/fst.h"
32 #include "fst/fst_ctrl_iface.h"
33 #include "config.h"
34 #include "wpa_supplicant_i.h"
35 #include "driver_i.h"
36 #include "wps_supplicant.h"
37 #include "ibss_rsn.h"
38 #include "ap.h"
39 #include "p2p_supplicant.h"
40 #include "p2p/p2p.h"
41 #include "hs20_supplicant.h"
42 #include "wifi_display.h"
43 #include "notify.h"
44 #include "bss.h"
45 #include "scan.h"
46 #include "ctrl_iface.h"
47 #include "interworking.h"
48 #include "blacklist.h"
49 #include "autoscan.h"
50 #include "wnm_sta.h"
51 #include "offchannel.h"
52 #include "drivers/driver.h"
53 #include "mesh.h"
54
55 static int wpa_supplicant_global_iface_list(struct wpa_global *global,
56 char *buf, int len);
57 static int wpa_supplicant_global_iface_interfaces(struct wpa_global *global,
58 const char *input,
59 char *buf, int len);
60 static int * freq_range_to_channel_list(struct wpa_supplicant *wpa_s,
61 char *val);
62
set_bssid_filter(struct wpa_supplicant * wpa_s,char * val)63 static int set_bssid_filter(struct wpa_supplicant *wpa_s, char *val)
64 {
65 char *pos;
66 u8 addr[ETH_ALEN], *filter = NULL, *n;
67 size_t count = 0;
68
69 pos = val;
70 while (pos) {
71 if (*pos == '\0')
72 break;
73 if (hwaddr_aton(pos, addr)) {
74 os_free(filter);
75 return -1;
76 }
77 n = os_realloc_array(filter, count + 1, ETH_ALEN);
78 if (n == NULL) {
79 os_free(filter);
80 return -1;
81 }
82 filter = n;
83 os_memcpy(filter + count * ETH_ALEN, addr, ETH_ALEN);
84 count++;
85
86 pos = os_strchr(pos, ' ');
87 if (pos)
88 pos++;
89 }
90
91 wpa_hexdump(MSG_DEBUG, "bssid_filter", filter, count * ETH_ALEN);
92 os_free(wpa_s->bssid_filter);
93 wpa_s->bssid_filter = filter;
94 wpa_s->bssid_filter_count = count;
95
96 return 0;
97 }
98
99
set_disallow_aps(struct wpa_supplicant * wpa_s,char * val)100 static int set_disallow_aps(struct wpa_supplicant *wpa_s, char *val)
101 {
102 char *pos;
103 u8 addr[ETH_ALEN], *bssid = NULL, *n;
104 struct wpa_ssid_value *ssid = NULL, *ns;
105 size_t count = 0, ssid_count = 0;
106 struct wpa_ssid *c;
107
108 /*
109 * disallow_list ::= <ssid_spec> | <bssid_spec> | <disallow_list> | ""
110 * SSID_SPEC ::= ssid <SSID_HEX>
111 * BSSID_SPEC ::= bssid <BSSID_HEX>
112 */
113
114 pos = val;
115 while (pos) {
116 if (*pos == '\0')
117 break;
118 if (os_strncmp(pos, "bssid ", 6) == 0) {
119 int res;
120 pos += 6;
121 res = hwaddr_aton2(pos, addr);
122 if (res < 0) {
123 os_free(ssid);
124 os_free(bssid);
125 wpa_printf(MSG_DEBUG, "Invalid disallow_aps "
126 "BSSID value '%s'", pos);
127 return -1;
128 }
129 pos += res;
130 n = os_realloc_array(bssid, count + 1, ETH_ALEN);
131 if (n == NULL) {
132 os_free(ssid);
133 os_free(bssid);
134 return -1;
135 }
136 bssid = n;
137 os_memcpy(bssid + count * ETH_ALEN, addr, ETH_ALEN);
138 count++;
139 } else if (os_strncmp(pos, "ssid ", 5) == 0) {
140 char *end;
141 pos += 5;
142
143 end = pos;
144 while (*end) {
145 if (*end == '\0' || *end == ' ')
146 break;
147 end++;
148 }
149
150 ns = os_realloc_array(ssid, ssid_count + 1,
151 sizeof(struct wpa_ssid_value));
152 if (ns == NULL) {
153 os_free(ssid);
154 os_free(bssid);
155 return -1;
156 }
157 ssid = ns;
158
159 if ((end - pos) & 0x01 ||
160 end - pos > 2 * SSID_MAX_LEN ||
161 hexstr2bin(pos, ssid[ssid_count].ssid,
162 (end - pos) / 2) < 0) {
163 os_free(ssid);
164 os_free(bssid);
165 wpa_printf(MSG_DEBUG, "Invalid disallow_aps "
166 "SSID value '%s'", pos);
167 return -1;
168 }
169 ssid[ssid_count].ssid_len = (end - pos) / 2;
170 wpa_hexdump_ascii(MSG_DEBUG, "disallow_aps SSID",
171 ssid[ssid_count].ssid,
172 ssid[ssid_count].ssid_len);
173 ssid_count++;
174 pos = end;
175 } else {
176 wpa_printf(MSG_DEBUG, "Unexpected disallow_aps value "
177 "'%s'", pos);
178 os_free(ssid);
179 os_free(bssid);
180 return -1;
181 }
182
183 pos = os_strchr(pos, ' ');
184 if (pos)
185 pos++;
186 }
187
188 wpa_hexdump(MSG_DEBUG, "disallow_aps_bssid", bssid, count * ETH_ALEN);
189 os_free(wpa_s->disallow_aps_bssid);
190 wpa_s->disallow_aps_bssid = bssid;
191 wpa_s->disallow_aps_bssid_count = count;
192
193 wpa_printf(MSG_DEBUG, "disallow_aps_ssid_count %d", (int) ssid_count);
194 os_free(wpa_s->disallow_aps_ssid);
195 wpa_s->disallow_aps_ssid = ssid;
196 wpa_s->disallow_aps_ssid_count = ssid_count;
197
198 if (!wpa_s->current_ssid || wpa_s->wpa_state < WPA_AUTHENTICATING)
199 return 0;
200
201 c = wpa_s->current_ssid;
202 if (c->mode != WPAS_MODE_INFRA && c->mode != WPAS_MODE_IBSS)
203 return 0;
204
205 if (!disallowed_bssid(wpa_s, wpa_s->bssid) &&
206 !disallowed_ssid(wpa_s, c->ssid, c->ssid_len))
207 return 0;
208
209 wpa_printf(MSG_DEBUG, "Disconnect and try to find another network "
210 "because current AP was marked disallowed");
211
212 #ifdef CONFIG_SME
213 wpa_s->sme.prev_bssid_set = 0;
214 #endif /* CONFIG_SME */
215 wpa_s->reassociate = 1;
216 wpa_s->own_disconnect_req = 1;
217 wpa_supplicant_deauthenticate(wpa_s, WLAN_REASON_DEAUTH_LEAVING);
218 wpa_supplicant_req_scan(wpa_s, 0, 0);
219
220 return 0;
221 }
222
223
224 #ifndef CONFIG_NO_CONFIG_BLOBS
wpas_ctrl_set_blob(struct wpa_supplicant * wpa_s,char * pos)225 static int wpas_ctrl_set_blob(struct wpa_supplicant *wpa_s, char *pos)
226 {
227 char *name = pos;
228 struct wpa_config_blob *blob;
229 size_t len;
230
231 pos = os_strchr(pos, ' ');
232 if (pos == NULL)
233 return -1;
234 *pos++ = '\0';
235 len = os_strlen(pos);
236 if (len & 1)
237 return -1;
238
239 wpa_printf(MSG_DEBUG, "CTRL: Set blob '%s'", name);
240 blob = os_zalloc(sizeof(*blob));
241 if (blob == NULL)
242 return -1;
243 blob->name = os_strdup(name);
244 blob->data = os_malloc(len / 2);
245 if (blob->name == NULL || blob->data == NULL) {
246 wpa_config_free_blob(blob);
247 return -1;
248 }
249
250 if (hexstr2bin(pos, blob->data, len / 2) < 0) {
251 wpa_printf(MSG_DEBUG, "CTRL: Invalid blob hex data");
252 wpa_config_free_blob(blob);
253 return -1;
254 }
255 blob->len = len / 2;
256
257 wpa_config_set_blob(wpa_s->conf, blob);
258
259 return 0;
260 }
261 #endif /* CONFIG_NO_CONFIG_BLOBS */
262
263
wpas_ctrl_pno(struct wpa_supplicant * wpa_s,char * cmd)264 static int wpas_ctrl_pno(struct wpa_supplicant *wpa_s, char *cmd)
265 {
266 char *params;
267 char *pos;
268 int *freqs = NULL;
269 int ret;
270
271 if (atoi(cmd)) {
272 params = os_strchr(cmd, ' ');
273 os_free(wpa_s->manual_sched_scan_freqs);
274 if (params) {
275 params++;
276 pos = os_strstr(params, "freq=");
277 if (pos)
278 freqs = freq_range_to_channel_list(wpa_s,
279 pos + 5);
280 }
281 wpa_s->manual_sched_scan_freqs = freqs;
282 ret = wpas_start_pno(wpa_s);
283 } else {
284 ret = wpas_stop_pno(wpa_s);
285 }
286 return ret;
287 }
288
289
wpas_ctrl_set_band(struct wpa_supplicant * wpa_s,char * band)290 static int wpas_ctrl_set_band(struct wpa_supplicant *wpa_s, char *band)
291 {
292 union wpa_event_data event;
293
294 if (os_strcmp(band, "AUTO") == 0)
295 wpa_s->setband = WPA_SETBAND_AUTO;
296 else if (os_strcmp(band, "5G") == 0)
297 wpa_s->setband = WPA_SETBAND_5G;
298 else if (os_strcmp(band, "2G") == 0)
299 wpa_s->setband = WPA_SETBAND_2G;
300 else
301 return -1;
302
303 if (wpa_drv_setband(wpa_s, wpa_s->setband) == 0) {
304 os_memset(&event, 0, sizeof(event));
305 event.channel_list_changed.initiator = REGDOM_SET_BY_USER;
306 event.channel_list_changed.type = REGDOM_TYPE_UNKNOWN;
307 wpa_supplicant_event(wpa_s, EVENT_CHANNEL_LIST_CHANGED, &event);
308 }
309
310 return 0;
311 }
312
313
wpa_supplicant_ctrl_iface_set(struct wpa_supplicant * wpa_s,char * cmd)314 static int wpa_supplicant_ctrl_iface_set(struct wpa_supplicant *wpa_s,
315 char *cmd)
316 {
317 char *value;
318 int ret = 0;
319
320 value = os_strchr(cmd, ' ');
321 if (value == NULL)
322 return -1;
323 *value++ = '\0';
324
325 wpa_printf(MSG_DEBUG, "CTRL_IFACE SET '%s'='%s'", cmd, value);
326 if (os_strcasecmp(cmd, "EAPOL::heldPeriod") == 0) {
327 eapol_sm_configure(wpa_s->eapol,
328 atoi(value), -1, -1, -1);
329 } else if (os_strcasecmp(cmd, "EAPOL::authPeriod") == 0) {
330 eapol_sm_configure(wpa_s->eapol,
331 -1, atoi(value), -1, -1);
332 } else if (os_strcasecmp(cmd, "EAPOL::startPeriod") == 0) {
333 eapol_sm_configure(wpa_s->eapol,
334 -1, -1, atoi(value), -1);
335 } else if (os_strcasecmp(cmd, "EAPOL::maxStart") == 0) {
336 eapol_sm_configure(wpa_s->eapol,
337 -1, -1, -1, atoi(value));
338 } else if (os_strcasecmp(cmd, "dot11RSNAConfigPMKLifetime") == 0) {
339 if (wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_LIFETIME,
340 atoi(value)))
341 ret = -1;
342 } else if (os_strcasecmp(cmd, "dot11RSNAConfigPMKReauthThreshold") ==
343 0) {
344 if (wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_REAUTH_THRESHOLD,
345 atoi(value)))
346 ret = -1;
347 } else if (os_strcasecmp(cmd, "dot11RSNAConfigSATimeout") == 0) {
348 if (wpa_sm_set_param(wpa_s->wpa, RSNA_SA_TIMEOUT, atoi(value)))
349 ret = -1;
350 } else if (os_strcasecmp(cmd, "wps_fragment_size") == 0) {
351 wpa_s->wps_fragment_size = atoi(value);
352 #ifdef CONFIG_WPS_TESTING
353 } else if (os_strcasecmp(cmd, "wps_version_number") == 0) {
354 long int val;
355 val = strtol(value, NULL, 0);
356 if (val < 0 || val > 0xff) {
357 ret = -1;
358 wpa_printf(MSG_DEBUG, "WPS: Invalid "
359 "wps_version_number %ld", val);
360 } else {
361 wps_version_number = val;
362 wpa_printf(MSG_DEBUG, "WPS: Testing - force WPS "
363 "version %u.%u",
364 (wps_version_number & 0xf0) >> 4,
365 wps_version_number & 0x0f);
366 }
367 } else if (os_strcasecmp(cmd, "wps_testing_dummy_cred") == 0) {
368 wps_testing_dummy_cred = atoi(value);
369 wpa_printf(MSG_DEBUG, "WPS: Testing - dummy_cred=%d",
370 wps_testing_dummy_cred);
371 } else if (os_strcasecmp(cmd, "wps_corrupt_pkhash") == 0) {
372 wps_corrupt_pkhash = atoi(value);
373 wpa_printf(MSG_DEBUG, "WPS: Testing - wps_corrupt_pkhash=%d",
374 wps_corrupt_pkhash);
375 } else if (os_strcasecmp(cmd, "wps_force_auth_types") == 0) {
376 if (value[0] == '\0') {
377 wps_force_auth_types_in_use = 0;
378 } else {
379 wps_force_auth_types = strtol(value, NULL, 0);
380 wps_force_auth_types_in_use = 1;
381 }
382 } else if (os_strcasecmp(cmd, "wps_force_encr_types") == 0) {
383 if (value[0] == '\0') {
384 wps_force_encr_types_in_use = 0;
385 } else {
386 wps_force_encr_types = strtol(value, NULL, 0);
387 wps_force_encr_types_in_use = 1;
388 }
389 #endif /* CONFIG_WPS_TESTING */
390 } else if (os_strcasecmp(cmd, "ampdu") == 0) {
391 if (wpa_drv_ampdu(wpa_s, atoi(value)) < 0)
392 ret = -1;
393 #ifdef CONFIG_TDLS
394 #ifdef CONFIG_TDLS_TESTING
395 } else if (os_strcasecmp(cmd, "tdls_testing") == 0) {
396 extern unsigned int tdls_testing;
397 tdls_testing = strtol(value, NULL, 0);
398 wpa_printf(MSG_DEBUG, "TDLS: tdls_testing=0x%x", tdls_testing);
399 #endif /* CONFIG_TDLS_TESTING */
400 } else if (os_strcasecmp(cmd, "tdls_disabled") == 0) {
401 int disabled = atoi(value);
402 wpa_printf(MSG_DEBUG, "TDLS: tdls_disabled=%d", disabled);
403 if (disabled) {
404 if (wpa_drv_tdls_oper(wpa_s, TDLS_DISABLE, NULL) < 0)
405 ret = -1;
406 } else if (wpa_drv_tdls_oper(wpa_s, TDLS_ENABLE, NULL) < 0)
407 ret = -1;
408 wpa_tdls_enable(wpa_s->wpa, !disabled);
409 #endif /* CONFIG_TDLS */
410 } else if (os_strcasecmp(cmd, "pno") == 0) {
411 ret = wpas_ctrl_pno(wpa_s, value);
412 } else if (os_strcasecmp(cmd, "radio_disabled") == 0) {
413 int disabled = atoi(value);
414 if (wpa_drv_radio_disable(wpa_s, disabled) < 0)
415 ret = -1;
416 else if (disabled)
417 wpa_supplicant_set_state(wpa_s, WPA_INACTIVE);
418 } else if (os_strcasecmp(cmd, "uapsd") == 0) {
419 if (os_strcmp(value, "disable") == 0)
420 wpa_s->set_sta_uapsd = 0;
421 else {
422 int be, bk, vi, vo;
423 char *pos;
424 /* format: BE,BK,VI,VO;max SP Length */
425 be = atoi(value);
426 pos = os_strchr(value, ',');
427 if (pos == NULL)
428 return -1;
429 pos++;
430 bk = atoi(pos);
431 pos = os_strchr(pos, ',');
432 if (pos == NULL)
433 return -1;
434 pos++;
435 vi = atoi(pos);
436 pos = os_strchr(pos, ',');
437 if (pos == NULL)
438 return -1;
439 pos++;
440 vo = atoi(pos);
441 /* ignore max SP Length for now */
442
443 wpa_s->set_sta_uapsd = 1;
444 wpa_s->sta_uapsd = 0;
445 if (be)
446 wpa_s->sta_uapsd |= BIT(0);
447 if (bk)
448 wpa_s->sta_uapsd |= BIT(1);
449 if (vi)
450 wpa_s->sta_uapsd |= BIT(2);
451 if (vo)
452 wpa_s->sta_uapsd |= BIT(3);
453 }
454 } else if (os_strcasecmp(cmd, "ps") == 0) {
455 ret = wpa_drv_set_p2p_powersave(wpa_s, atoi(value), -1, -1);
456 #ifdef CONFIG_WIFI_DISPLAY
457 } else if (os_strcasecmp(cmd, "wifi_display") == 0) {
458 int enabled = !!atoi(value);
459 if (enabled && !wpa_s->global->p2p)
460 ret = -1;
461 else
462 wifi_display_enable(wpa_s->global, enabled);
463 #endif /* CONFIG_WIFI_DISPLAY */
464 } else if (os_strcasecmp(cmd, "bssid_filter") == 0) {
465 ret = set_bssid_filter(wpa_s, value);
466 } else if (os_strcasecmp(cmd, "disallow_aps") == 0) {
467 ret = set_disallow_aps(wpa_s, value);
468 } else if (os_strcasecmp(cmd, "no_keep_alive") == 0) {
469 wpa_s->no_keep_alive = !!atoi(value);
470 #ifdef CONFIG_TESTING_OPTIONS
471 } else if (os_strcasecmp(cmd, "ext_mgmt_frame_handling") == 0) {
472 wpa_s->ext_mgmt_frame_handling = !!atoi(value);
473 } else if (os_strcasecmp(cmd, "ext_eapol_frame_io") == 0) {
474 wpa_s->ext_eapol_frame_io = !!atoi(value);
475 #ifdef CONFIG_AP
476 if (wpa_s->ap_iface) {
477 wpa_s->ap_iface->bss[0]->ext_eapol_frame_io =
478 wpa_s->ext_eapol_frame_io;
479 }
480 #endif /* CONFIG_AP */
481 } else if (os_strcasecmp(cmd, "extra_roc_dur") == 0) {
482 wpa_s->extra_roc_dur = atoi(value);
483 } else if (os_strcasecmp(cmd, "test_failure") == 0) {
484 wpa_s->test_failure = atoi(value);
485 } else if (os_strcasecmp(cmd, "p2p_go_csa_on_inv") == 0) {
486 wpa_s->p2p_go_csa_on_inv = !!atoi(value);
487 #endif /* CONFIG_TESTING_OPTIONS */
488 #ifndef CONFIG_NO_CONFIG_BLOBS
489 } else if (os_strcmp(cmd, "blob") == 0) {
490 ret = wpas_ctrl_set_blob(wpa_s, value);
491 #endif /* CONFIG_NO_CONFIG_BLOBS */
492 } else if (os_strcasecmp(cmd, "setband") == 0) {
493 ret = wpas_ctrl_set_band(wpa_s, value);
494 #ifdef CONFIG_MBO
495 } else if (os_strcasecmp(cmd, "non_pref_chan") == 0) {
496 ret = wpas_mbo_update_non_pref_chan(wpa_s, value);
497 } else if (os_strcasecmp(cmd, "mbo_cell_capa") == 0) {
498 wpas_mbo_update_cell_capa(wpa_s, atoi(value));
499 #endif /* CONFIG_MBO */
500 } else {
501 value[-1] = '=';
502 ret = wpa_config_process_global(wpa_s->conf, cmd, -1);
503 if (ret == 0)
504 wpa_supplicant_update_config(wpa_s);
505 }
506
507 return ret;
508 }
509
510
wpa_supplicant_ctrl_iface_get(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)511 static int wpa_supplicant_ctrl_iface_get(struct wpa_supplicant *wpa_s,
512 char *cmd, char *buf, size_t buflen)
513 {
514 int res = -1;
515
516 wpa_printf(MSG_DEBUG, "CTRL_IFACE GET '%s'", cmd);
517
518 if (os_strcmp(cmd, "version") == 0) {
519 res = os_snprintf(buf, buflen, "%s", VERSION_STR);
520 } else if (os_strcasecmp(cmd, "country") == 0) {
521 if (wpa_s->conf->country[0] && wpa_s->conf->country[1])
522 res = os_snprintf(buf, buflen, "%c%c",
523 wpa_s->conf->country[0],
524 wpa_s->conf->country[1]);
525 #ifdef CONFIG_WIFI_DISPLAY
526 } else if (os_strcasecmp(cmd, "wifi_display") == 0) {
527 int enabled;
528 if (wpa_s->global->p2p == NULL ||
529 wpa_s->global->p2p_disabled)
530 enabled = 0;
531 else
532 enabled = wpa_s->global->wifi_display;
533 res = os_snprintf(buf, buflen, "%d", enabled);
534 #endif /* CONFIG_WIFI_DISPLAY */
535 #ifdef CONFIG_TESTING_GET_GTK
536 } else if (os_strcmp(cmd, "gtk") == 0) {
537 if (wpa_s->last_gtk_len == 0)
538 return -1;
539 res = wpa_snprintf_hex(buf, buflen, wpa_s->last_gtk,
540 wpa_s->last_gtk_len);
541 return res;
542 #endif /* CONFIG_TESTING_GET_GTK */
543 } else if (os_strcmp(cmd, "tls_library") == 0) {
544 res = tls_get_library_version(buf, buflen);
545 } else {
546 res = wpa_config_get_value(cmd, wpa_s->conf, buf, buflen);
547 }
548
549 if (os_snprintf_error(buflen, res))
550 return -1;
551 return res;
552 }
553
554
555 #ifdef IEEE8021X_EAPOL
wpa_supplicant_ctrl_iface_preauth(struct wpa_supplicant * wpa_s,char * addr)556 static int wpa_supplicant_ctrl_iface_preauth(struct wpa_supplicant *wpa_s,
557 char *addr)
558 {
559 u8 bssid[ETH_ALEN];
560 struct wpa_ssid *ssid = wpa_s->current_ssid;
561
562 if (hwaddr_aton(addr, bssid)) {
563 wpa_printf(MSG_DEBUG, "CTRL_IFACE PREAUTH: invalid address "
564 "'%s'", addr);
565 return -1;
566 }
567
568 wpa_printf(MSG_DEBUG, "CTRL_IFACE PREAUTH " MACSTR, MAC2STR(bssid));
569 rsn_preauth_deinit(wpa_s->wpa);
570 if (rsn_preauth_init(wpa_s->wpa, bssid, ssid ? &ssid->eap : NULL))
571 return -1;
572
573 return 0;
574 }
575 #endif /* IEEE8021X_EAPOL */
576
577
578 #ifdef CONFIG_PEERKEY
579 /* MLME-STKSTART.request(peer) */
wpa_supplicant_ctrl_iface_stkstart(struct wpa_supplicant * wpa_s,char * addr)580 static int wpa_supplicant_ctrl_iface_stkstart(
581 struct wpa_supplicant *wpa_s, char *addr)
582 {
583 u8 peer[ETH_ALEN];
584
585 if (hwaddr_aton(addr, peer)) {
586 wpa_printf(MSG_DEBUG, "CTRL_IFACE STKSTART: invalid "
587 "address '%s'", addr);
588 return -1;
589 }
590
591 wpa_printf(MSG_DEBUG, "CTRL_IFACE STKSTART " MACSTR,
592 MAC2STR(peer));
593
594 return wpa_sm_stkstart(wpa_s->wpa, peer);
595 }
596 #endif /* CONFIG_PEERKEY */
597
598
599 #ifdef CONFIG_TDLS
600
wpa_supplicant_ctrl_iface_tdls_discover(struct wpa_supplicant * wpa_s,char * addr)601 static int wpa_supplicant_ctrl_iface_tdls_discover(
602 struct wpa_supplicant *wpa_s, char *addr)
603 {
604 u8 peer[ETH_ALEN];
605 int ret;
606
607 if (hwaddr_aton(addr, peer)) {
608 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_DISCOVER: invalid "
609 "address '%s'", addr);
610 return -1;
611 }
612
613 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_DISCOVER " MACSTR,
614 MAC2STR(peer));
615
616 if (wpa_tdls_is_external_setup(wpa_s->wpa))
617 ret = wpa_tdls_send_discovery_request(wpa_s->wpa, peer);
618 else
619 ret = wpa_drv_tdls_oper(wpa_s, TDLS_DISCOVERY_REQ, peer);
620
621 return ret;
622 }
623
624
wpa_supplicant_ctrl_iface_tdls_setup(struct wpa_supplicant * wpa_s,char * addr)625 static int wpa_supplicant_ctrl_iface_tdls_setup(
626 struct wpa_supplicant *wpa_s, char *addr)
627 {
628 u8 peer[ETH_ALEN];
629 int ret;
630
631 if (hwaddr_aton(addr, peer)) {
632 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_SETUP: invalid "
633 "address '%s'", addr);
634 return -1;
635 }
636
637 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_SETUP " MACSTR,
638 MAC2STR(peer));
639
640 if ((wpa_s->conf->tdls_external_control) &&
641 wpa_tdls_is_external_setup(wpa_s->wpa))
642 return wpa_drv_tdls_oper(wpa_s, TDLS_SETUP, peer);
643
644 wpa_tdls_remove(wpa_s->wpa, peer);
645
646 if (wpa_tdls_is_external_setup(wpa_s->wpa))
647 ret = wpa_tdls_start(wpa_s->wpa, peer);
648 else
649 ret = wpa_drv_tdls_oper(wpa_s, TDLS_SETUP, peer);
650
651 return ret;
652 }
653
654
wpa_supplicant_ctrl_iface_tdls_teardown(struct wpa_supplicant * wpa_s,char * addr)655 static int wpa_supplicant_ctrl_iface_tdls_teardown(
656 struct wpa_supplicant *wpa_s, char *addr)
657 {
658 u8 peer[ETH_ALEN];
659 int ret;
660
661 if (os_strcmp(addr, "*") == 0) {
662 /* remove everyone */
663 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN *");
664 wpa_tdls_teardown_peers(wpa_s->wpa);
665 return 0;
666 }
667
668 if (hwaddr_aton(addr, peer)) {
669 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN: invalid "
670 "address '%s'", addr);
671 return -1;
672 }
673
674 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_TEARDOWN " MACSTR,
675 MAC2STR(peer));
676
677 if ((wpa_s->conf->tdls_external_control) &&
678 wpa_tdls_is_external_setup(wpa_s->wpa))
679 return wpa_drv_tdls_oper(wpa_s, TDLS_TEARDOWN, peer);
680
681 if (wpa_tdls_is_external_setup(wpa_s->wpa))
682 ret = wpa_tdls_teardown_link(
683 wpa_s->wpa, peer,
684 WLAN_REASON_TDLS_TEARDOWN_UNSPECIFIED);
685 else
686 ret = wpa_drv_tdls_oper(wpa_s, TDLS_TEARDOWN, peer);
687
688 return ret;
689 }
690
691
ctrl_iface_get_capability_tdls(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)692 static int ctrl_iface_get_capability_tdls(
693 struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
694 {
695 int ret;
696
697 ret = os_snprintf(buf, buflen, "%s\n",
698 wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_SUPPORT ?
699 (wpa_s->drv_flags &
700 WPA_DRIVER_FLAGS_TDLS_EXTERNAL_SETUP ?
701 "EXTERNAL" : "INTERNAL") : "UNSUPPORTED");
702 if (os_snprintf_error(buflen, ret))
703 return -1;
704 return ret;
705 }
706
707
wpa_supplicant_ctrl_iface_tdls_chan_switch(struct wpa_supplicant * wpa_s,char * cmd)708 static int wpa_supplicant_ctrl_iface_tdls_chan_switch(
709 struct wpa_supplicant *wpa_s, char *cmd)
710 {
711 u8 peer[ETH_ALEN];
712 struct hostapd_freq_params freq_params;
713 u8 oper_class;
714 char *pos, *end;
715
716 if (!wpa_tdls_is_external_setup(wpa_s->wpa)) {
717 wpa_printf(MSG_INFO,
718 "tdls_chanswitch: Only supported with external setup");
719 return -1;
720 }
721
722 os_memset(&freq_params, 0, sizeof(freq_params));
723
724 pos = os_strchr(cmd, ' ');
725 if (pos == NULL)
726 return -1;
727 *pos++ = '\0';
728
729 oper_class = strtol(pos, &end, 10);
730 if (pos == end) {
731 wpa_printf(MSG_INFO,
732 "tdls_chanswitch: Invalid op class provided");
733 return -1;
734 }
735
736 pos = end;
737 freq_params.freq = atoi(pos);
738 if (freq_params.freq == 0) {
739 wpa_printf(MSG_INFO, "tdls_chanswitch: Invalid freq provided");
740 return -1;
741 }
742
743 #define SET_FREQ_SETTING(str) \
744 do { \
745 const char *pos2 = os_strstr(pos, " " #str "="); \
746 if (pos2) { \
747 pos2 += sizeof(" " #str "=") - 1; \
748 freq_params.str = atoi(pos2); \
749 } \
750 } while (0)
751
752 SET_FREQ_SETTING(center_freq1);
753 SET_FREQ_SETTING(center_freq2);
754 SET_FREQ_SETTING(bandwidth);
755 SET_FREQ_SETTING(sec_channel_offset);
756 #undef SET_FREQ_SETTING
757
758 freq_params.ht_enabled = !!os_strstr(pos, " ht");
759 freq_params.vht_enabled = !!os_strstr(pos, " vht");
760
761 if (hwaddr_aton(cmd, peer)) {
762 wpa_printf(MSG_DEBUG,
763 "CTRL_IFACE TDLS_CHAN_SWITCH: Invalid address '%s'",
764 cmd);
765 return -1;
766 }
767
768 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_CHAN_SWITCH " MACSTR
769 " OP CLASS %d FREQ %d CENTER1 %d CENTER2 %d BW %d SEC_OFFSET %d%s%s",
770 MAC2STR(peer), oper_class, freq_params.freq,
771 freq_params.center_freq1, freq_params.center_freq2,
772 freq_params.bandwidth, freq_params.sec_channel_offset,
773 freq_params.ht_enabled ? " HT" : "",
774 freq_params.vht_enabled ? " VHT" : "");
775
776 return wpa_tdls_enable_chan_switch(wpa_s->wpa, peer, oper_class,
777 &freq_params);
778 }
779
780
wpa_supplicant_ctrl_iface_tdls_cancel_chan_switch(struct wpa_supplicant * wpa_s,char * cmd)781 static int wpa_supplicant_ctrl_iface_tdls_cancel_chan_switch(
782 struct wpa_supplicant *wpa_s, char *cmd)
783 {
784 u8 peer[ETH_ALEN];
785
786 if (!wpa_tdls_is_external_setup(wpa_s->wpa)) {
787 wpa_printf(MSG_INFO,
788 "tdls_chanswitch: Only supported with external setup");
789 return -1;
790 }
791
792 if (hwaddr_aton(cmd, peer)) {
793 wpa_printf(MSG_DEBUG,
794 "CTRL_IFACE TDLS_CANCEL_CHAN_SWITCH: Invalid address '%s'",
795 cmd);
796 return -1;
797 }
798
799 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_CANCEL_CHAN_SWITCH " MACSTR,
800 MAC2STR(peer));
801
802 return wpa_tdls_disable_chan_switch(wpa_s->wpa, peer);
803 }
804
805
wpa_supplicant_ctrl_iface_tdls_link_status(struct wpa_supplicant * wpa_s,const char * addr,char * buf,size_t buflen)806 static int wpa_supplicant_ctrl_iface_tdls_link_status(
807 struct wpa_supplicant *wpa_s, const char *addr,
808 char *buf, size_t buflen)
809 {
810 u8 peer[ETH_ALEN];
811 const char *tdls_status;
812 int ret;
813
814 if (hwaddr_aton(addr, peer)) {
815 wpa_printf(MSG_DEBUG,
816 "CTRL_IFACE TDLS_LINK_STATUS: Invalid address '%s'",
817 addr);
818 return -1;
819 }
820 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_LINK_STATUS " MACSTR,
821 MAC2STR(peer));
822
823 tdls_status = wpa_tdls_get_link_status(wpa_s->wpa, peer);
824 wpa_printf(MSG_DEBUG, "CTRL_IFACE TDLS_LINK_STATUS: %s", tdls_status);
825 ret = os_snprintf(buf, buflen, "TDLS link status: %s\n", tdls_status);
826 if (os_snprintf_error(buflen, ret))
827 return -1;
828
829 return ret;
830 }
831
832 #endif /* CONFIG_TDLS */
833
834
wmm_ac_ctrl_addts(struct wpa_supplicant * wpa_s,char * cmd)835 static int wmm_ac_ctrl_addts(struct wpa_supplicant *wpa_s, char *cmd)
836 {
837 char *token, *context = NULL;
838 struct wmm_ac_ts_setup_params params = {
839 .tsid = 0xff,
840 .direction = 0xff,
841 };
842
843 while ((token = str_token(cmd, " ", &context))) {
844 if (sscanf(token, "tsid=%i", ¶ms.tsid) == 1 ||
845 sscanf(token, "up=%i", ¶ms.user_priority) == 1 ||
846 sscanf(token, "nominal_msdu_size=%i",
847 ¶ms.nominal_msdu_size) == 1 ||
848 sscanf(token, "mean_data_rate=%i",
849 ¶ms.mean_data_rate) == 1 ||
850 sscanf(token, "min_phy_rate=%i",
851 ¶ms.minimum_phy_rate) == 1 ||
852 sscanf(token, "sba=%i",
853 ¶ms.surplus_bandwidth_allowance) == 1)
854 continue;
855
856 if (os_strcasecmp(token, "downlink") == 0) {
857 params.direction = WMM_TSPEC_DIRECTION_DOWNLINK;
858 } else if (os_strcasecmp(token, "uplink") == 0) {
859 params.direction = WMM_TSPEC_DIRECTION_UPLINK;
860 } else if (os_strcasecmp(token, "bidi") == 0) {
861 params.direction = WMM_TSPEC_DIRECTION_BI_DIRECTIONAL;
862 } else if (os_strcasecmp(token, "fixed_nominal_msdu") == 0) {
863 params.fixed_nominal_msdu = 1;
864 } else {
865 wpa_printf(MSG_DEBUG,
866 "CTRL: Invalid WMM_AC_ADDTS parameter: '%s'",
867 token);
868 return -1;
869 }
870
871 }
872
873 return wpas_wmm_ac_addts(wpa_s, ¶ms);
874 }
875
876
wmm_ac_ctrl_delts(struct wpa_supplicant * wpa_s,char * cmd)877 static int wmm_ac_ctrl_delts(struct wpa_supplicant *wpa_s, char *cmd)
878 {
879 u8 tsid = atoi(cmd);
880
881 return wpas_wmm_ac_delts(wpa_s, tsid);
882 }
883
884
885 #ifdef CONFIG_IEEE80211R
wpa_supplicant_ctrl_iface_ft_ds(struct wpa_supplicant * wpa_s,char * addr)886 static int wpa_supplicant_ctrl_iface_ft_ds(
887 struct wpa_supplicant *wpa_s, char *addr)
888 {
889 u8 target_ap[ETH_ALEN];
890 struct wpa_bss *bss;
891 const u8 *mdie;
892
893 if (hwaddr_aton(addr, target_ap)) {
894 wpa_printf(MSG_DEBUG, "CTRL_IFACE FT_DS: invalid "
895 "address '%s'", addr);
896 return -1;
897 }
898
899 wpa_printf(MSG_DEBUG, "CTRL_IFACE FT_DS " MACSTR, MAC2STR(target_ap));
900
901 bss = wpa_bss_get_bssid(wpa_s, target_ap);
902 if (bss)
903 mdie = wpa_bss_get_ie(bss, WLAN_EID_MOBILITY_DOMAIN);
904 else
905 mdie = NULL;
906
907 return wpa_ft_start_over_ds(wpa_s->wpa, target_ap, mdie);
908 }
909 #endif /* CONFIG_IEEE80211R */
910
911
912 #ifdef CONFIG_WPS
wpa_supplicant_ctrl_iface_wps_pbc(struct wpa_supplicant * wpa_s,char * cmd)913 static int wpa_supplicant_ctrl_iface_wps_pbc(struct wpa_supplicant *wpa_s,
914 char *cmd)
915 {
916 u8 bssid[ETH_ALEN], *_bssid = bssid;
917 #ifdef CONFIG_P2P
918 u8 p2p_dev_addr[ETH_ALEN];
919 #endif /* CONFIG_P2P */
920 #ifdef CONFIG_AP
921 u8 *_p2p_dev_addr = NULL;
922 #endif /* CONFIG_AP */
923
924 if (cmd == NULL || os_strcmp(cmd, "any") == 0) {
925 _bssid = NULL;
926 #ifdef CONFIG_P2P
927 } else if (os_strncmp(cmd, "p2p_dev_addr=", 13) == 0) {
928 if (hwaddr_aton(cmd + 13, p2p_dev_addr)) {
929 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PBC: invalid "
930 "P2P Device Address '%s'",
931 cmd + 13);
932 return -1;
933 }
934 _p2p_dev_addr = p2p_dev_addr;
935 #endif /* CONFIG_P2P */
936 } else if (hwaddr_aton(cmd, bssid)) {
937 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PBC: invalid BSSID '%s'",
938 cmd);
939 return -1;
940 }
941
942 #ifdef CONFIG_AP
943 if (wpa_s->ap_iface)
944 return wpa_supplicant_ap_wps_pbc(wpa_s, _bssid, _p2p_dev_addr);
945 #endif /* CONFIG_AP */
946
947 return wpas_wps_start_pbc(wpa_s, _bssid, 0);
948 }
949
950
wpa_supplicant_ctrl_iface_wps_pin(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)951 static int wpa_supplicant_ctrl_iface_wps_pin(struct wpa_supplicant *wpa_s,
952 char *cmd, char *buf,
953 size_t buflen)
954 {
955 u8 bssid[ETH_ALEN], *_bssid = bssid;
956 char *pin;
957 int ret;
958
959 pin = os_strchr(cmd, ' ');
960 if (pin)
961 *pin++ = '\0';
962
963 if (os_strcmp(cmd, "any") == 0)
964 _bssid = NULL;
965 else if (os_strcmp(cmd, "get") == 0) {
966 if (wps_generate_pin((unsigned int *) &ret) < 0)
967 return -1;
968 goto done;
969 } else if (hwaddr_aton(cmd, bssid)) {
970 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_PIN: invalid BSSID '%s'",
971 cmd);
972 return -1;
973 }
974
975 #ifdef CONFIG_AP
976 if (wpa_s->ap_iface) {
977 int timeout = 0;
978 char *pos;
979
980 if (pin) {
981 pos = os_strchr(pin, ' ');
982 if (pos) {
983 *pos++ = '\0';
984 timeout = atoi(pos);
985 }
986 }
987
988 return wpa_supplicant_ap_wps_pin(wpa_s, _bssid, pin,
989 buf, buflen, timeout);
990 }
991 #endif /* CONFIG_AP */
992
993 if (pin) {
994 ret = wpas_wps_start_pin(wpa_s, _bssid, pin, 0,
995 DEV_PW_DEFAULT);
996 if (ret < 0)
997 return -1;
998 ret = os_snprintf(buf, buflen, "%s", pin);
999 if (os_snprintf_error(buflen, ret))
1000 return -1;
1001 return ret;
1002 }
1003
1004 ret = wpas_wps_start_pin(wpa_s, _bssid, NULL, 0, DEV_PW_DEFAULT);
1005 if (ret < 0)
1006 return -1;
1007
1008 done:
1009 /* Return the generated PIN */
1010 ret = os_snprintf(buf, buflen, "%08d", ret);
1011 if (os_snprintf_error(buflen, ret))
1012 return -1;
1013 return ret;
1014 }
1015
1016
wpa_supplicant_ctrl_iface_wps_check_pin(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)1017 static int wpa_supplicant_ctrl_iface_wps_check_pin(
1018 struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
1019 {
1020 char pin[9];
1021 size_t len;
1022 char *pos;
1023 int ret;
1024
1025 wpa_hexdump_ascii_key(MSG_DEBUG, "WPS_CHECK_PIN",
1026 (u8 *) cmd, os_strlen(cmd));
1027 for (pos = cmd, len = 0; *pos != '\0'; pos++) {
1028 if (*pos < '0' || *pos > '9')
1029 continue;
1030 pin[len++] = *pos;
1031 if (len == 9) {
1032 wpa_printf(MSG_DEBUG, "WPS: Too long PIN");
1033 return -1;
1034 }
1035 }
1036 if (len != 4 && len != 8) {
1037 wpa_printf(MSG_DEBUG, "WPS: Invalid PIN length %d", (int) len);
1038 return -1;
1039 }
1040 pin[len] = '\0';
1041
1042 if (len == 8) {
1043 unsigned int pin_val;
1044 pin_val = atoi(pin);
1045 if (!wps_pin_valid(pin_val)) {
1046 wpa_printf(MSG_DEBUG, "WPS: Invalid checksum digit");
1047 ret = os_snprintf(buf, buflen, "FAIL-CHECKSUM\n");
1048 if (os_snprintf_error(buflen, ret))
1049 return -1;
1050 return ret;
1051 }
1052 }
1053
1054 ret = os_snprintf(buf, buflen, "%s", pin);
1055 if (os_snprintf_error(buflen, ret))
1056 return -1;
1057
1058 return ret;
1059 }
1060
1061
1062 #ifdef CONFIG_WPS_NFC
1063
wpa_supplicant_ctrl_iface_wps_nfc(struct wpa_supplicant * wpa_s,char * cmd)1064 static int wpa_supplicant_ctrl_iface_wps_nfc(struct wpa_supplicant *wpa_s,
1065 char *cmd)
1066 {
1067 u8 bssid[ETH_ALEN], *_bssid = bssid;
1068
1069 if (cmd == NULL || cmd[0] == '\0')
1070 _bssid = NULL;
1071 else if (hwaddr_aton(cmd, bssid))
1072 return -1;
1073
1074 return wpas_wps_start_nfc(wpa_s, NULL, _bssid, NULL, 0, 0, NULL, NULL,
1075 0, 0);
1076 }
1077
1078
wpa_supplicant_ctrl_iface_wps_nfc_config_token(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)1079 static int wpa_supplicant_ctrl_iface_wps_nfc_config_token(
1080 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
1081 {
1082 int ndef;
1083 struct wpabuf *buf;
1084 int res;
1085 char *pos;
1086
1087 pos = os_strchr(cmd, ' ');
1088 if (pos)
1089 *pos++ = '\0';
1090 if (os_strcmp(cmd, "WPS") == 0)
1091 ndef = 0;
1092 else if (os_strcmp(cmd, "NDEF") == 0)
1093 ndef = 1;
1094 else
1095 return -1;
1096
1097 buf = wpas_wps_nfc_config_token(wpa_s, ndef, pos);
1098 if (buf == NULL)
1099 return -1;
1100
1101 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1102 wpabuf_len(buf));
1103 reply[res++] = '\n';
1104 reply[res] = '\0';
1105
1106 wpabuf_free(buf);
1107
1108 return res;
1109 }
1110
1111
wpa_supplicant_ctrl_iface_wps_nfc_token(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)1112 static int wpa_supplicant_ctrl_iface_wps_nfc_token(
1113 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
1114 {
1115 int ndef;
1116 struct wpabuf *buf;
1117 int res;
1118
1119 if (os_strcmp(cmd, "WPS") == 0)
1120 ndef = 0;
1121 else if (os_strcmp(cmd, "NDEF") == 0)
1122 ndef = 1;
1123 else
1124 return -1;
1125
1126 buf = wpas_wps_nfc_token(wpa_s, ndef);
1127 if (buf == NULL)
1128 return -1;
1129
1130 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1131 wpabuf_len(buf));
1132 reply[res++] = '\n';
1133 reply[res] = '\0';
1134
1135 wpabuf_free(buf);
1136
1137 return res;
1138 }
1139
1140
wpa_supplicant_ctrl_iface_wps_nfc_tag_read(struct wpa_supplicant * wpa_s,char * pos)1141 static int wpa_supplicant_ctrl_iface_wps_nfc_tag_read(
1142 struct wpa_supplicant *wpa_s, char *pos)
1143 {
1144 size_t len;
1145 struct wpabuf *buf;
1146 int ret;
1147 char *freq;
1148 int forced_freq = 0;
1149
1150 freq = strstr(pos, " freq=");
1151 if (freq) {
1152 *freq = '\0';
1153 freq += 6;
1154 forced_freq = atoi(freq);
1155 }
1156
1157 len = os_strlen(pos);
1158 if (len & 0x01)
1159 return -1;
1160 len /= 2;
1161
1162 buf = wpabuf_alloc(len);
1163 if (buf == NULL)
1164 return -1;
1165 if (hexstr2bin(pos, wpabuf_put(buf, len), len) < 0) {
1166 wpabuf_free(buf);
1167 return -1;
1168 }
1169
1170 ret = wpas_wps_nfc_tag_read(wpa_s, buf, forced_freq);
1171 wpabuf_free(buf);
1172
1173 return ret;
1174 }
1175
1176
wpas_ctrl_nfc_get_handover_req_wps(struct wpa_supplicant * wpa_s,char * reply,size_t max_len,int ndef)1177 static int wpas_ctrl_nfc_get_handover_req_wps(struct wpa_supplicant *wpa_s,
1178 char *reply, size_t max_len,
1179 int ndef)
1180 {
1181 struct wpabuf *buf;
1182 int res;
1183
1184 buf = wpas_wps_nfc_handover_req(wpa_s, ndef);
1185 if (buf == NULL)
1186 return -1;
1187
1188 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1189 wpabuf_len(buf));
1190 reply[res++] = '\n';
1191 reply[res] = '\0';
1192
1193 wpabuf_free(buf);
1194
1195 return res;
1196 }
1197
1198
1199 #ifdef CONFIG_P2P
wpas_ctrl_nfc_get_handover_req_p2p(struct wpa_supplicant * wpa_s,char * reply,size_t max_len,int ndef)1200 static int wpas_ctrl_nfc_get_handover_req_p2p(struct wpa_supplicant *wpa_s,
1201 char *reply, size_t max_len,
1202 int ndef)
1203 {
1204 struct wpabuf *buf;
1205 int res;
1206
1207 buf = wpas_p2p_nfc_handover_req(wpa_s, ndef);
1208 if (buf == NULL) {
1209 wpa_printf(MSG_DEBUG, "P2P: Could not generate NFC handover request");
1210 return -1;
1211 }
1212
1213 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1214 wpabuf_len(buf));
1215 reply[res++] = '\n';
1216 reply[res] = '\0';
1217
1218 wpabuf_free(buf);
1219
1220 return res;
1221 }
1222 #endif /* CONFIG_P2P */
1223
1224
wpas_ctrl_nfc_get_handover_req(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)1225 static int wpas_ctrl_nfc_get_handover_req(struct wpa_supplicant *wpa_s,
1226 char *cmd, char *reply,
1227 size_t max_len)
1228 {
1229 char *pos;
1230 int ndef;
1231
1232 pos = os_strchr(cmd, ' ');
1233 if (pos == NULL)
1234 return -1;
1235 *pos++ = '\0';
1236
1237 if (os_strcmp(cmd, "WPS") == 0)
1238 ndef = 0;
1239 else if (os_strcmp(cmd, "NDEF") == 0)
1240 ndef = 1;
1241 else
1242 return -1;
1243
1244 if (os_strcmp(pos, "WPS") == 0 || os_strcmp(pos, "WPS-CR") == 0) {
1245 if (!ndef)
1246 return -1;
1247 return wpas_ctrl_nfc_get_handover_req_wps(
1248 wpa_s, reply, max_len, ndef);
1249 }
1250
1251 #ifdef CONFIG_P2P
1252 if (os_strcmp(pos, "P2P-CR") == 0) {
1253 return wpas_ctrl_nfc_get_handover_req_p2p(
1254 wpa_s, reply, max_len, ndef);
1255 }
1256 #endif /* CONFIG_P2P */
1257
1258 return -1;
1259 }
1260
1261
wpas_ctrl_nfc_get_handover_sel_wps(struct wpa_supplicant * wpa_s,char * reply,size_t max_len,int ndef,int cr,char * uuid)1262 static int wpas_ctrl_nfc_get_handover_sel_wps(struct wpa_supplicant *wpa_s,
1263 char *reply, size_t max_len,
1264 int ndef, int cr, char *uuid)
1265 {
1266 struct wpabuf *buf;
1267 int res;
1268
1269 buf = wpas_wps_nfc_handover_sel(wpa_s, ndef, cr, uuid);
1270 if (buf == NULL)
1271 return -1;
1272
1273 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1274 wpabuf_len(buf));
1275 reply[res++] = '\n';
1276 reply[res] = '\0';
1277
1278 wpabuf_free(buf);
1279
1280 return res;
1281 }
1282
1283
1284 #ifdef CONFIG_P2P
wpas_ctrl_nfc_get_handover_sel_p2p(struct wpa_supplicant * wpa_s,char * reply,size_t max_len,int ndef,int tag)1285 static int wpas_ctrl_nfc_get_handover_sel_p2p(struct wpa_supplicant *wpa_s,
1286 char *reply, size_t max_len,
1287 int ndef, int tag)
1288 {
1289 struct wpabuf *buf;
1290 int res;
1291
1292 buf = wpas_p2p_nfc_handover_sel(wpa_s, ndef, tag);
1293 if (buf == NULL)
1294 return -1;
1295
1296 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1297 wpabuf_len(buf));
1298 reply[res++] = '\n';
1299 reply[res] = '\0';
1300
1301 wpabuf_free(buf);
1302
1303 return res;
1304 }
1305 #endif /* CONFIG_P2P */
1306
1307
wpas_ctrl_nfc_get_handover_sel(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)1308 static int wpas_ctrl_nfc_get_handover_sel(struct wpa_supplicant *wpa_s,
1309 char *cmd, char *reply,
1310 size_t max_len)
1311 {
1312 char *pos, *pos2;
1313 int ndef;
1314
1315 pos = os_strchr(cmd, ' ');
1316 if (pos == NULL)
1317 return -1;
1318 *pos++ = '\0';
1319
1320 if (os_strcmp(cmd, "WPS") == 0)
1321 ndef = 0;
1322 else if (os_strcmp(cmd, "NDEF") == 0)
1323 ndef = 1;
1324 else
1325 return -1;
1326
1327 pos2 = os_strchr(pos, ' ');
1328 if (pos2)
1329 *pos2++ = '\0';
1330 if (os_strcmp(pos, "WPS") == 0 || os_strcmp(pos, "WPS-CR") == 0) {
1331 if (!ndef)
1332 return -1;
1333 return wpas_ctrl_nfc_get_handover_sel_wps(
1334 wpa_s, reply, max_len, ndef,
1335 os_strcmp(pos, "WPS-CR") == 0, pos2);
1336 }
1337
1338 #ifdef CONFIG_P2P
1339 if (os_strcmp(pos, "P2P-CR") == 0) {
1340 return wpas_ctrl_nfc_get_handover_sel_p2p(
1341 wpa_s, reply, max_len, ndef, 0);
1342 }
1343
1344 if (os_strcmp(pos, "P2P-CR-TAG") == 0) {
1345 return wpas_ctrl_nfc_get_handover_sel_p2p(
1346 wpa_s, reply, max_len, ndef, 1);
1347 }
1348 #endif /* CONFIG_P2P */
1349
1350 return -1;
1351 }
1352
1353
wpas_ctrl_nfc_report_handover(struct wpa_supplicant * wpa_s,char * cmd)1354 static int wpas_ctrl_nfc_report_handover(struct wpa_supplicant *wpa_s,
1355 char *cmd)
1356 {
1357 size_t len;
1358 struct wpabuf *req, *sel;
1359 int ret;
1360 char *pos, *role, *type, *pos2;
1361 #ifdef CONFIG_P2P
1362 char *freq;
1363 int forced_freq = 0;
1364
1365 freq = strstr(cmd, " freq=");
1366 if (freq) {
1367 *freq = '\0';
1368 freq += 6;
1369 forced_freq = atoi(freq);
1370 }
1371 #endif /* CONFIG_P2P */
1372
1373 role = cmd;
1374 pos = os_strchr(role, ' ');
1375 if (pos == NULL) {
1376 wpa_printf(MSG_DEBUG, "NFC: Missing type in handover report");
1377 return -1;
1378 }
1379 *pos++ = '\0';
1380
1381 type = pos;
1382 pos = os_strchr(type, ' ');
1383 if (pos == NULL) {
1384 wpa_printf(MSG_DEBUG, "NFC: Missing request message in handover report");
1385 return -1;
1386 }
1387 *pos++ = '\0';
1388
1389 pos2 = os_strchr(pos, ' ');
1390 if (pos2 == NULL) {
1391 wpa_printf(MSG_DEBUG, "NFC: Missing select message in handover report");
1392 return -1;
1393 }
1394 *pos2++ = '\0';
1395
1396 len = os_strlen(pos);
1397 if (len & 0x01) {
1398 wpa_printf(MSG_DEBUG, "NFC: Invalid request message length in handover report");
1399 return -1;
1400 }
1401 len /= 2;
1402
1403 req = wpabuf_alloc(len);
1404 if (req == NULL) {
1405 wpa_printf(MSG_DEBUG, "NFC: Failed to allocate memory for request message");
1406 return -1;
1407 }
1408 if (hexstr2bin(pos, wpabuf_put(req, len), len) < 0) {
1409 wpa_printf(MSG_DEBUG, "NFC: Invalid request message hexdump in handover report");
1410 wpabuf_free(req);
1411 return -1;
1412 }
1413
1414 len = os_strlen(pos2);
1415 if (len & 0x01) {
1416 wpa_printf(MSG_DEBUG, "NFC: Invalid select message length in handover report");
1417 wpabuf_free(req);
1418 return -1;
1419 }
1420 len /= 2;
1421
1422 sel = wpabuf_alloc(len);
1423 if (sel == NULL) {
1424 wpa_printf(MSG_DEBUG, "NFC: Failed to allocate memory for select message");
1425 wpabuf_free(req);
1426 return -1;
1427 }
1428 if (hexstr2bin(pos2, wpabuf_put(sel, len), len) < 0) {
1429 wpa_printf(MSG_DEBUG, "NFC: Invalid select message hexdump in handover report");
1430 wpabuf_free(req);
1431 wpabuf_free(sel);
1432 return -1;
1433 }
1434
1435 wpa_printf(MSG_DEBUG, "NFC: Connection handover reported - role=%s type=%s req_len=%d sel_len=%d",
1436 role, type, (int) wpabuf_len(req), (int) wpabuf_len(sel));
1437
1438 if (os_strcmp(role, "INIT") == 0 && os_strcmp(type, "WPS") == 0) {
1439 ret = wpas_wps_nfc_report_handover(wpa_s, req, sel);
1440 #ifdef CONFIG_AP
1441 } else if (os_strcmp(role, "RESP") == 0 && os_strcmp(type, "WPS") == 0)
1442 {
1443 ret = wpas_ap_wps_nfc_report_handover(wpa_s, req, sel);
1444 if (ret < 0)
1445 ret = wpas_er_wps_nfc_report_handover(wpa_s, req, sel);
1446 #endif /* CONFIG_AP */
1447 #ifdef CONFIG_P2P
1448 } else if (os_strcmp(role, "INIT") == 0 && os_strcmp(type, "P2P") == 0)
1449 {
1450 ret = wpas_p2p_nfc_report_handover(wpa_s, 1, req, sel, 0);
1451 } else if (os_strcmp(role, "RESP") == 0 && os_strcmp(type, "P2P") == 0)
1452 {
1453 ret = wpas_p2p_nfc_report_handover(wpa_s, 0, req, sel,
1454 forced_freq);
1455 #endif /* CONFIG_P2P */
1456 } else {
1457 wpa_printf(MSG_DEBUG, "NFC: Unsupported connection handover "
1458 "reported: role=%s type=%s", role, type);
1459 ret = -1;
1460 }
1461 wpabuf_free(req);
1462 wpabuf_free(sel);
1463
1464 if (ret)
1465 wpa_printf(MSG_DEBUG, "NFC: Failed to process reported handover messages");
1466
1467 return ret;
1468 }
1469
1470 #endif /* CONFIG_WPS_NFC */
1471
1472
wpa_supplicant_ctrl_iface_wps_reg(struct wpa_supplicant * wpa_s,char * cmd)1473 static int wpa_supplicant_ctrl_iface_wps_reg(struct wpa_supplicant *wpa_s,
1474 char *cmd)
1475 {
1476 u8 bssid[ETH_ALEN];
1477 char *pin;
1478 char *new_ssid;
1479 char *new_auth;
1480 char *new_encr;
1481 char *new_key;
1482 struct wps_new_ap_settings ap;
1483
1484 pin = os_strchr(cmd, ' ');
1485 if (pin == NULL)
1486 return -1;
1487 *pin++ = '\0';
1488
1489 if (hwaddr_aton(cmd, bssid)) {
1490 wpa_printf(MSG_DEBUG, "CTRL_IFACE WPS_REG: invalid BSSID '%s'",
1491 cmd);
1492 return -1;
1493 }
1494
1495 new_ssid = os_strchr(pin, ' ');
1496 if (new_ssid == NULL)
1497 return wpas_wps_start_reg(wpa_s, bssid, pin, NULL);
1498 *new_ssid++ = '\0';
1499
1500 new_auth = os_strchr(new_ssid, ' ');
1501 if (new_auth == NULL)
1502 return -1;
1503 *new_auth++ = '\0';
1504
1505 new_encr = os_strchr(new_auth, ' ');
1506 if (new_encr == NULL)
1507 return -1;
1508 *new_encr++ = '\0';
1509
1510 new_key = os_strchr(new_encr, ' ');
1511 if (new_key == NULL)
1512 return -1;
1513 *new_key++ = '\0';
1514
1515 os_memset(&ap, 0, sizeof(ap));
1516 ap.ssid_hex = new_ssid;
1517 ap.auth = new_auth;
1518 ap.encr = new_encr;
1519 ap.key_hex = new_key;
1520 return wpas_wps_start_reg(wpa_s, bssid, pin, &ap);
1521 }
1522
1523
1524 #ifdef CONFIG_AP
wpa_supplicant_ctrl_iface_wps_ap_pin(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)1525 static int wpa_supplicant_ctrl_iface_wps_ap_pin(struct wpa_supplicant *wpa_s,
1526 char *cmd, char *buf,
1527 size_t buflen)
1528 {
1529 int timeout = 300;
1530 char *pos;
1531 const char *pin_txt;
1532
1533 if (!wpa_s->ap_iface)
1534 return -1;
1535
1536 pos = os_strchr(cmd, ' ');
1537 if (pos)
1538 *pos++ = '\0';
1539
1540 if (os_strcmp(cmd, "disable") == 0) {
1541 wpas_wps_ap_pin_disable(wpa_s);
1542 return os_snprintf(buf, buflen, "OK\n");
1543 }
1544
1545 if (os_strcmp(cmd, "random") == 0) {
1546 if (pos)
1547 timeout = atoi(pos);
1548 pin_txt = wpas_wps_ap_pin_random(wpa_s, timeout);
1549 if (pin_txt == NULL)
1550 return -1;
1551 return os_snprintf(buf, buflen, "%s", pin_txt);
1552 }
1553
1554 if (os_strcmp(cmd, "get") == 0) {
1555 pin_txt = wpas_wps_ap_pin_get(wpa_s);
1556 if (pin_txt == NULL)
1557 return -1;
1558 return os_snprintf(buf, buflen, "%s", pin_txt);
1559 }
1560
1561 if (os_strcmp(cmd, "set") == 0) {
1562 char *pin;
1563 if (pos == NULL)
1564 return -1;
1565 pin = pos;
1566 pos = os_strchr(pos, ' ');
1567 if (pos) {
1568 *pos++ = '\0';
1569 timeout = atoi(pos);
1570 }
1571 if (os_strlen(pin) > buflen)
1572 return -1;
1573 if (wpas_wps_ap_pin_set(wpa_s, pin, timeout) < 0)
1574 return -1;
1575 return os_snprintf(buf, buflen, "%s", pin);
1576 }
1577
1578 return -1;
1579 }
1580 #endif /* CONFIG_AP */
1581
1582
1583 #ifdef CONFIG_WPS_ER
wpa_supplicant_ctrl_iface_wps_er_pin(struct wpa_supplicant * wpa_s,char * cmd)1584 static int wpa_supplicant_ctrl_iface_wps_er_pin(struct wpa_supplicant *wpa_s,
1585 char *cmd)
1586 {
1587 char *uuid = cmd, *pin, *pos;
1588 u8 addr_buf[ETH_ALEN], *addr = NULL;
1589 pin = os_strchr(uuid, ' ');
1590 if (pin == NULL)
1591 return -1;
1592 *pin++ = '\0';
1593 pos = os_strchr(pin, ' ');
1594 if (pos) {
1595 *pos++ = '\0';
1596 if (hwaddr_aton(pos, addr_buf) == 0)
1597 addr = addr_buf;
1598 }
1599 return wpas_wps_er_add_pin(wpa_s, addr, uuid, pin);
1600 }
1601
1602
wpa_supplicant_ctrl_iface_wps_er_learn(struct wpa_supplicant * wpa_s,char * cmd)1603 static int wpa_supplicant_ctrl_iface_wps_er_learn(struct wpa_supplicant *wpa_s,
1604 char *cmd)
1605 {
1606 char *uuid = cmd, *pin;
1607 pin = os_strchr(uuid, ' ');
1608 if (pin == NULL)
1609 return -1;
1610 *pin++ = '\0';
1611 return wpas_wps_er_learn(wpa_s, uuid, pin);
1612 }
1613
1614
wpa_supplicant_ctrl_iface_wps_er_set_config(struct wpa_supplicant * wpa_s,char * cmd)1615 static int wpa_supplicant_ctrl_iface_wps_er_set_config(
1616 struct wpa_supplicant *wpa_s, char *cmd)
1617 {
1618 char *uuid = cmd, *id;
1619 id = os_strchr(uuid, ' ');
1620 if (id == NULL)
1621 return -1;
1622 *id++ = '\0';
1623 return wpas_wps_er_set_config(wpa_s, uuid, atoi(id));
1624 }
1625
1626
wpa_supplicant_ctrl_iface_wps_er_config(struct wpa_supplicant * wpa_s,char * cmd)1627 static int wpa_supplicant_ctrl_iface_wps_er_config(
1628 struct wpa_supplicant *wpa_s, char *cmd)
1629 {
1630 char *pin;
1631 char *new_ssid;
1632 char *new_auth;
1633 char *new_encr;
1634 char *new_key;
1635 struct wps_new_ap_settings ap;
1636
1637 pin = os_strchr(cmd, ' ');
1638 if (pin == NULL)
1639 return -1;
1640 *pin++ = '\0';
1641
1642 new_ssid = os_strchr(pin, ' ');
1643 if (new_ssid == NULL)
1644 return -1;
1645 *new_ssid++ = '\0';
1646
1647 new_auth = os_strchr(new_ssid, ' ');
1648 if (new_auth == NULL)
1649 return -1;
1650 *new_auth++ = '\0';
1651
1652 new_encr = os_strchr(new_auth, ' ');
1653 if (new_encr == NULL)
1654 return -1;
1655 *new_encr++ = '\0';
1656
1657 new_key = os_strchr(new_encr, ' ');
1658 if (new_key == NULL)
1659 return -1;
1660 *new_key++ = '\0';
1661
1662 os_memset(&ap, 0, sizeof(ap));
1663 ap.ssid_hex = new_ssid;
1664 ap.auth = new_auth;
1665 ap.encr = new_encr;
1666 ap.key_hex = new_key;
1667 return wpas_wps_er_config(wpa_s, cmd, pin, &ap);
1668 }
1669
1670
1671 #ifdef CONFIG_WPS_NFC
wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)1672 static int wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(
1673 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
1674 {
1675 int ndef;
1676 struct wpabuf *buf;
1677 int res;
1678 char *uuid;
1679
1680 uuid = os_strchr(cmd, ' ');
1681 if (uuid == NULL)
1682 return -1;
1683 *uuid++ = '\0';
1684
1685 if (os_strcmp(cmd, "WPS") == 0)
1686 ndef = 0;
1687 else if (os_strcmp(cmd, "NDEF") == 0)
1688 ndef = 1;
1689 else
1690 return -1;
1691
1692 buf = wpas_wps_er_nfc_config_token(wpa_s, ndef, uuid);
1693 if (buf == NULL)
1694 return -1;
1695
1696 res = wpa_snprintf_hex_uppercase(reply, max_len, wpabuf_head(buf),
1697 wpabuf_len(buf));
1698 reply[res++] = '\n';
1699 reply[res] = '\0';
1700
1701 wpabuf_free(buf);
1702
1703 return res;
1704 }
1705 #endif /* CONFIG_WPS_NFC */
1706 #endif /* CONFIG_WPS_ER */
1707
1708 #endif /* CONFIG_WPS */
1709
1710
1711 #ifdef CONFIG_IBSS_RSN
wpa_supplicant_ctrl_iface_ibss_rsn(struct wpa_supplicant * wpa_s,char * addr)1712 static int wpa_supplicant_ctrl_iface_ibss_rsn(
1713 struct wpa_supplicant *wpa_s, char *addr)
1714 {
1715 u8 peer[ETH_ALEN];
1716
1717 if (hwaddr_aton(addr, peer)) {
1718 wpa_printf(MSG_DEBUG, "CTRL_IFACE IBSS_RSN: invalid "
1719 "address '%s'", addr);
1720 return -1;
1721 }
1722
1723 wpa_printf(MSG_DEBUG, "CTRL_IFACE IBSS_RSN " MACSTR,
1724 MAC2STR(peer));
1725
1726 return ibss_rsn_start(wpa_s->ibss_rsn, peer);
1727 }
1728 #endif /* CONFIG_IBSS_RSN */
1729
1730
wpa_supplicant_ctrl_iface_ctrl_rsp(struct wpa_supplicant * wpa_s,char * rsp)1731 static int wpa_supplicant_ctrl_iface_ctrl_rsp(struct wpa_supplicant *wpa_s,
1732 char *rsp)
1733 {
1734 #ifdef IEEE8021X_EAPOL
1735 char *pos, *id_pos;
1736 int id;
1737 struct wpa_ssid *ssid;
1738
1739 pos = os_strchr(rsp, '-');
1740 if (pos == NULL)
1741 return -1;
1742 *pos++ = '\0';
1743 id_pos = pos;
1744 pos = os_strchr(pos, ':');
1745 if (pos == NULL)
1746 return -1;
1747 *pos++ = '\0';
1748 id = atoi(id_pos);
1749 wpa_printf(MSG_DEBUG, "CTRL_IFACE: field=%s id=%d", rsp, id);
1750 wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
1751 (u8 *) pos, os_strlen(pos));
1752
1753 ssid = wpa_config_get_network(wpa_s->conf, id);
1754 if (ssid == NULL) {
1755 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
1756 "to update", id);
1757 return -1;
1758 }
1759
1760 return wpa_supplicant_ctrl_iface_ctrl_rsp_handle(wpa_s, ssid, rsp,
1761 pos);
1762 #else /* IEEE8021X_EAPOL */
1763 wpa_printf(MSG_DEBUG, "CTRL_IFACE: 802.1X not included");
1764 return -1;
1765 #endif /* IEEE8021X_EAPOL */
1766 }
1767
1768
wpa_supplicant_ctrl_iface_status(struct wpa_supplicant * wpa_s,const char * params,char * buf,size_t buflen)1769 static int wpa_supplicant_ctrl_iface_status(struct wpa_supplicant *wpa_s,
1770 const char *params,
1771 char *buf, size_t buflen)
1772 {
1773 char *pos, *end, tmp[30];
1774 int res, verbose, wps, ret;
1775 #ifdef CONFIG_HS20
1776 const u8 *hs20;
1777 #endif /* CONFIG_HS20 */
1778 const u8 *sess_id;
1779 size_t sess_id_len;
1780
1781 if (os_strcmp(params, "-DRIVER") == 0)
1782 return wpa_drv_status(wpa_s, buf, buflen);
1783 verbose = os_strcmp(params, "-VERBOSE") == 0;
1784 wps = os_strcmp(params, "-WPS") == 0;
1785 pos = buf;
1786 end = buf + buflen;
1787 if (wpa_s->wpa_state >= WPA_ASSOCIATED) {
1788 struct wpa_ssid *ssid = wpa_s->current_ssid;
1789 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n",
1790 MAC2STR(wpa_s->bssid));
1791 if (os_snprintf_error(end - pos, ret))
1792 return pos - buf;
1793 pos += ret;
1794 ret = os_snprintf(pos, end - pos, "freq=%u\n",
1795 wpa_s->assoc_freq);
1796 if (os_snprintf_error(end - pos, ret))
1797 return pos - buf;
1798 pos += ret;
1799 if (ssid) {
1800 u8 *_ssid = ssid->ssid;
1801 size_t ssid_len = ssid->ssid_len;
1802 u8 ssid_buf[SSID_MAX_LEN];
1803 if (ssid_len == 0) {
1804 int _res = wpa_drv_get_ssid(wpa_s, ssid_buf);
1805 if (_res < 0)
1806 ssid_len = 0;
1807 else
1808 ssid_len = _res;
1809 _ssid = ssid_buf;
1810 }
1811 ret = os_snprintf(pos, end - pos, "ssid=%s\nid=%d\n",
1812 wpa_ssid_txt(_ssid, ssid_len),
1813 ssid->id);
1814 if (os_snprintf_error(end - pos, ret))
1815 return pos - buf;
1816 pos += ret;
1817
1818 if (wps && ssid->passphrase &&
1819 wpa_key_mgmt_wpa_psk(ssid->key_mgmt) &&
1820 (ssid->mode == WPAS_MODE_AP ||
1821 ssid->mode == WPAS_MODE_P2P_GO)) {
1822 ret = os_snprintf(pos, end - pos,
1823 "passphrase=%s\n",
1824 ssid->passphrase);
1825 if (os_snprintf_error(end - pos, ret))
1826 return pos - buf;
1827 pos += ret;
1828 }
1829 if (ssid->id_str) {
1830 ret = os_snprintf(pos, end - pos,
1831 "id_str=%s\n",
1832 ssid->id_str);
1833 if (os_snprintf_error(end - pos, ret))
1834 return pos - buf;
1835 pos += ret;
1836 }
1837
1838 switch (ssid->mode) {
1839 case WPAS_MODE_INFRA:
1840 ret = os_snprintf(pos, end - pos,
1841 "mode=station\n");
1842 break;
1843 case WPAS_MODE_IBSS:
1844 ret = os_snprintf(pos, end - pos,
1845 "mode=IBSS\n");
1846 break;
1847 case WPAS_MODE_AP:
1848 ret = os_snprintf(pos, end - pos,
1849 "mode=AP\n");
1850 break;
1851 case WPAS_MODE_P2P_GO:
1852 ret = os_snprintf(pos, end - pos,
1853 "mode=P2P GO\n");
1854 break;
1855 case WPAS_MODE_P2P_GROUP_FORMATION:
1856 ret = os_snprintf(pos, end - pos,
1857 "mode=P2P GO - group "
1858 "formation\n");
1859 break;
1860 default:
1861 ret = 0;
1862 break;
1863 }
1864 if (os_snprintf_error(end - pos, ret))
1865 return pos - buf;
1866 pos += ret;
1867 }
1868
1869 #ifdef CONFIG_AP
1870 if (wpa_s->ap_iface) {
1871 pos += ap_ctrl_iface_wpa_get_status(wpa_s, pos,
1872 end - pos,
1873 verbose);
1874 } else
1875 #endif /* CONFIG_AP */
1876 pos += wpa_sm_get_status(wpa_s->wpa, pos, end - pos, verbose);
1877 }
1878 #ifdef CONFIG_SAE
1879 if (wpa_s->wpa_state >= WPA_ASSOCIATED &&
1880 #ifdef CONFIG_AP
1881 !wpa_s->ap_iface &&
1882 #endif /* CONFIG_AP */
1883 wpa_s->sme.sae.state == SAE_ACCEPTED) {
1884 ret = os_snprintf(pos, end - pos, "sae_group=%d\n",
1885 wpa_s->sme.sae.group);
1886 if (os_snprintf_error(end - pos, ret))
1887 return pos - buf;
1888 pos += ret;
1889 }
1890 #endif /* CONFIG_SAE */
1891 ret = os_snprintf(pos, end - pos, "wpa_state=%s\n",
1892 wpa_supplicant_state_txt(wpa_s->wpa_state));
1893 if (os_snprintf_error(end - pos, ret))
1894 return pos - buf;
1895 pos += ret;
1896
1897 if (wpa_s->l2 &&
1898 l2_packet_get_ip_addr(wpa_s->l2, tmp, sizeof(tmp)) >= 0) {
1899 ret = os_snprintf(pos, end - pos, "ip_address=%s\n", tmp);
1900 if (os_snprintf_error(end - pos, ret))
1901 return pos - buf;
1902 pos += ret;
1903 }
1904
1905 #ifdef CONFIG_P2P
1906 if (wpa_s->global->p2p) {
1907 ret = os_snprintf(pos, end - pos, "p2p_device_address=" MACSTR
1908 "\n", MAC2STR(wpa_s->global->p2p_dev_addr));
1909 if (os_snprintf_error(end - pos, ret))
1910 return pos - buf;
1911 pos += ret;
1912 }
1913 #endif /* CONFIG_P2P */
1914
1915 ret = os_snprintf(pos, end - pos, "address=" MACSTR "\n",
1916 MAC2STR(wpa_s->own_addr));
1917 if (os_snprintf_error(end - pos, ret))
1918 return pos - buf;
1919 pos += ret;
1920
1921 #ifdef CONFIG_HS20
1922 if (wpa_s->current_bss &&
1923 (hs20 = wpa_bss_get_vendor_ie(wpa_s->current_bss,
1924 HS20_IE_VENDOR_TYPE)) &&
1925 wpa_s->wpa_proto == WPA_PROTO_RSN &&
1926 wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) {
1927 int release = 1;
1928 if (hs20[1] >= 5) {
1929 u8 rel_num = (hs20[6] & 0xf0) >> 4;
1930 release = rel_num + 1;
1931 }
1932 ret = os_snprintf(pos, end - pos, "hs20=%d\n", release);
1933 if (os_snprintf_error(end - pos, ret))
1934 return pos - buf;
1935 pos += ret;
1936 }
1937
1938 if (wpa_s->current_ssid) {
1939 struct wpa_cred *cred;
1940 char *type;
1941
1942 for (cred = wpa_s->conf->cred; cred; cred = cred->next) {
1943 size_t i;
1944
1945 if (wpa_s->current_ssid->parent_cred != cred)
1946 continue;
1947
1948 if (cred->provisioning_sp) {
1949 ret = os_snprintf(pos, end - pos,
1950 "provisioning_sp=%s\n",
1951 cred->provisioning_sp);
1952 if (os_snprintf_error(end - pos, ret))
1953 return pos - buf;
1954 pos += ret;
1955 }
1956
1957 if (!cred->domain)
1958 goto no_domain;
1959
1960 i = 0;
1961 if (wpa_s->current_bss && wpa_s->current_bss->anqp) {
1962 struct wpabuf *names =
1963 wpa_s->current_bss->anqp->domain_name;
1964 for (i = 0; names && i < cred->num_domain; i++)
1965 {
1966 if (domain_name_list_contains(
1967 names, cred->domain[i], 1))
1968 break;
1969 }
1970 if (i == cred->num_domain)
1971 i = 0; /* show first entry by default */
1972 }
1973 ret = os_snprintf(pos, end - pos, "home_sp=%s\n",
1974 cred->domain[i]);
1975 if (os_snprintf_error(end - pos, ret))
1976 return pos - buf;
1977 pos += ret;
1978
1979 no_domain:
1980 if (wpa_s->current_bss == NULL ||
1981 wpa_s->current_bss->anqp == NULL)
1982 res = -1;
1983 else
1984 res = interworking_home_sp_cred(
1985 wpa_s, cred,
1986 wpa_s->current_bss->anqp->domain_name);
1987 if (res > 0)
1988 type = "home";
1989 else if (res == 0)
1990 type = "roaming";
1991 else
1992 type = "unknown";
1993
1994 ret = os_snprintf(pos, end - pos, "sp_type=%s\n", type);
1995 if (os_snprintf_error(end - pos, ret))
1996 return pos - buf;
1997 pos += ret;
1998
1999 break;
2000 }
2001 }
2002 #endif /* CONFIG_HS20 */
2003
2004 if (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt) ||
2005 wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
2006 res = eapol_sm_get_status(wpa_s->eapol, pos, end - pos,
2007 verbose);
2008 if (res >= 0)
2009 pos += res;
2010 }
2011
2012 sess_id = eapol_sm_get_session_id(wpa_s->eapol, &sess_id_len);
2013 if (sess_id) {
2014 char *start = pos;
2015
2016 ret = os_snprintf(pos, end - pos, "eap_session_id=");
2017 if (os_snprintf_error(end - pos, ret))
2018 return start - buf;
2019 pos += ret;
2020 ret = wpa_snprintf_hex(pos, end - pos, sess_id, sess_id_len);
2021 if (ret <= 0)
2022 return start - buf;
2023 pos += ret;
2024 ret = os_snprintf(pos, end - pos, "\n");
2025 if (os_snprintf_error(end - pos, ret))
2026 return start - buf;
2027 pos += ret;
2028 }
2029
2030 res = rsn_preauth_get_status(wpa_s->wpa, pos, end - pos, verbose);
2031 if (res >= 0)
2032 pos += res;
2033
2034 #ifdef CONFIG_WPS
2035 {
2036 char uuid_str[100];
2037 uuid_bin2str(wpa_s->wps->uuid, uuid_str, sizeof(uuid_str));
2038 ret = os_snprintf(pos, end - pos, "uuid=%s\n", uuid_str);
2039 if (os_snprintf_error(end - pos, ret))
2040 return pos - buf;
2041 pos += ret;
2042 }
2043 #endif /* CONFIG_WPS */
2044
2045 #ifdef ANDROID
2046 /*
2047 * Allow using the STATUS command with default behavior, say for debug,
2048 * i.e., don't generate a "fake" CONNECTION and SUPPLICANT_STATE_CHANGE
2049 * events with STATUS-NO_EVENTS.
2050 */
2051 if (os_strcmp(params, "-NO_EVENTS")) {
2052 wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_STATE_CHANGE
2053 "id=%d state=%d BSSID=" MACSTR " SSID=%s",
2054 wpa_s->current_ssid ? wpa_s->current_ssid->id : -1,
2055 wpa_s->wpa_state,
2056 MAC2STR(wpa_s->bssid),
2057 wpa_s->current_ssid && wpa_s->current_ssid->ssid ?
2058 wpa_ssid_txt(wpa_s->current_ssid->ssid,
2059 wpa_s->current_ssid->ssid_len) : "");
2060 if (wpa_s->wpa_state == WPA_COMPLETED) {
2061 struct wpa_ssid *ssid = wpa_s->current_ssid;
2062 wpa_msg_ctrl(wpa_s, MSG_INFO, WPA_EVENT_CONNECTED
2063 "- connection to " MACSTR
2064 " completed %s [id=%d id_str=%s]",
2065 MAC2STR(wpa_s->bssid), "(auth)",
2066 ssid ? ssid->id : -1,
2067 ssid && ssid->id_str ? ssid->id_str : "");
2068 }
2069 }
2070 #endif /* ANDROID */
2071
2072 return pos - buf;
2073 }
2074
2075
wpa_supplicant_ctrl_iface_bssid(struct wpa_supplicant * wpa_s,char * cmd)2076 static int wpa_supplicant_ctrl_iface_bssid(struct wpa_supplicant *wpa_s,
2077 char *cmd)
2078 {
2079 char *pos;
2080 int id;
2081 struct wpa_ssid *ssid;
2082 u8 bssid[ETH_ALEN];
2083
2084 /* cmd: "<network id> <BSSID>" */
2085 pos = os_strchr(cmd, ' ');
2086 if (pos == NULL)
2087 return -1;
2088 *pos++ = '\0';
2089 id = atoi(cmd);
2090 wpa_printf(MSG_DEBUG, "CTRL_IFACE: id=%d bssid='%s'", id, pos);
2091 if (hwaddr_aton(pos, bssid)) {
2092 wpa_printf(MSG_DEBUG ,"CTRL_IFACE: invalid BSSID '%s'", pos);
2093 return -1;
2094 }
2095
2096 ssid = wpa_config_get_network(wpa_s->conf, id);
2097 if (ssid == NULL) {
2098 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
2099 "to update", id);
2100 return -1;
2101 }
2102
2103 os_memcpy(ssid->bssid, bssid, ETH_ALEN);
2104 ssid->bssid_set = !is_zero_ether_addr(bssid);
2105
2106 return 0;
2107 }
2108
2109
wpa_supplicant_ctrl_iface_blacklist(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)2110 static int wpa_supplicant_ctrl_iface_blacklist(struct wpa_supplicant *wpa_s,
2111 char *cmd, char *buf,
2112 size_t buflen)
2113 {
2114 u8 bssid[ETH_ALEN];
2115 struct wpa_blacklist *e;
2116 char *pos, *end;
2117 int ret;
2118
2119 /* cmd: "BLACKLIST [<BSSID>]" */
2120 if (*cmd == '\0') {
2121 pos = buf;
2122 end = buf + buflen;
2123 e = wpa_s->blacklist;
2124 while (e) {
2125 ret = os_snprintf(pos, end - pos, MACSTR "\n",
2126 MAC2STR(e->bssid));
2127 if (os_snprintf_error(end - pos, ret))
2128 return pos - buf;
2129 pos += ret;
2130 e = e->next;
2131 }
2132 return pos - buf;
2133 }
2134
2135 cmd++;
2136 if (os_strncmp(cmd, "clear", 5) == 0) {
2137 wpa_blacklist_clear(wpa_s);
2138 os_memcpy(buf, "OK\n", 3);
2139 return 3;
2140 }
2141
2142 wpa_printf(MSG_DEBUG, "CTRL_IFACE: BLACKLIST bssid='%s'", cmd);
2143 if (hwaddr_aton(cmd, bssid)) {
2144 wpa_printf(MSG_DEBUG, "CTRL_IFACE: invalid BSSID '%s'", cmd);
2145 return -1;
2146 }
2147
2148 /*
2149 * Add the BSSID twice, so its count will be 2, causing it to be
2150 * skipped when processing scan results.
2151 */
2152 ret = wpa_blacklist_add(wpa_s, bssid);
2153 if (ret < 0)
2154 return -1;
2155 ret = wpa_blacklist_add(wpa_s, bssid);
2156 if (ret < 0)
2157 return -1;
2158 os_memcpy(buf, "OK\n", 3);
2159 return 3;
2160 }
2161
2162
wpa_supplicant_ctrl_iface_log_level(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)2163 static int wpa_supplicant_ctrl_iface_log_level(struct wpa_supplicant *wpa_s,
2164 char *cmd, char *buf,
2165 size_t buflen)
2166 {
2167 char *pos, *end, *stamp;
2168 int ret;
2169
2170 /* cmd: "LOG_LEVEL [<level>]" */
2171 if (*cmd == '\0') {
2172 pos = buf;
2173 end = buf + buflen;
2174 ret = os_snprintf(pos, end - pos, "Current level: %s\n"
2175 "Timestamp: %d\n",
2176 debug_level_str(wpa_debug_level),
2177 wpa_debug_timestamp);
2178 if (os_snprintf_error(end - pos, ret))
2179 ret = 0;
2180
2181 return ret;
2182 }
2183
2184 while (*cmd == ' ')
2185 cmd++;
2186
2187 stamp = os_strchr(cmd, ' ');
2188 if (stamp) {
2189 *stamp++ = '\0';
2190 while (*stamp == ' ') {
2191 stamp++;
2192 }
2193 }
2194
2195 if (os_strlen(cmd)) {
2196 int level = str_to_debug_level(cmd);
2197 if (level < 0)
2198 return -1;
2199 wpa_debug_level = level;
2200 }
2201
2202 if (stamp && os_strlen(stamp))
2203 wpa_debug_timestamp = atoi(stamp);
2204
2205 os_memcpy(buf, "OK\n", 3);
2206 return 3;
2207 }
2208
2209
wpa_supplicant_ctrl_iface_list_networks(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)2210 static int wpa_supplicant_ctrl_iface_list_networks(
2211 struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
2212 {
2213 char *pos, *end, *prev;
2214 struct wpa_ssid *ssid;
2215 int ret;
2216
2217 pos = buf;
2218 end = buf + buflen;
2219 ret = os_snprintf(pos, end - pos,
2220 "network id / ssid / bssid / flags\n");
2221 if (os_snprintf_error(end - pos, ret))
2222 return pos - buf;
2223 pos += ret;
2224
2225 ssid = wpa_s->conf->ssid;
2226
2227 /* skip over ssids until we find next one */
2228 if (cmd != NULL && os_strncmp(cmd, "LAST_ID=", 8) == 0) {
2229 int last_id = atoi(cmd + 8);
2230 if (last_id != -1) {
2231 while (ssid != NULL && ssid->id <= last_id) {
2232 ssid = ssid->next;
2233 }
2234 }
2235 }
2236
2237 while (ssid) {
2238 prev = pos;
2239 ret = os_snprintf(pos, end - pos, "%d\t%s",
2240 ssid->id,
2241 wpa_ssid_txt(ssid->ssid, ssid->ssid_len));
2242 if (os_snprintf_error(end - pos, ret))
2243 return prev - buf;
2244 pos += ret;
2245 if (ssid->bssid_set) {
2246 ret = os_snprintf(pos, end - pos, "\t" MACSTR,
2247 MAC2STR(ssid->bssid));
2248 } else {
2249 ret = os_snprintf(pos, end - pos, "\tany");
2250 }
2251 if (os_snprintf_error(end - pos, ret))
2252 return prev - buf;
2253 pos += ret;
2254 ret = os_snprintf(pos, end - pos, "\t%s%s%s%s",
2255 ssid == wpa_s->current_ssid ?
2256 "[CURRENT]" : "",
2257 ssid->disabled ? "[DISABLED]" : "",
2258 ssid->disabled_until.sec ?
2259 "[TEMP-DISABLED]" : "",
2260 ssid->disabled == 2 ? "[P2P-PERSISTENT]" :
2261 "");
2262 if (os_snprintf_error(end - pos, ret))
2263 return prev - buf;
2264 pos += ret;
2265 ret = os_snprintf(pos, end - pos, "\n");
2266 if (os_snprintf_error(end - pos, ret))
2267 return prev - buf;
2268 pos += ret;
2269
2270 ssid = ssid->next;
2271 }
2272
2273 return pos - buf;
2274 }
2275
2276
wpa_supplicant_cipher_txt(char * pos,char * end,int cipher)2277 static char * wpa_supplicant_cipher_txt(char *pos, char *end, int cipher)
2278 {
2279 int ret;
2280 ret = os_snprintf(pos, end - pos, "-");
2281 if (os_snprintf_error(end - pos, ret))
2282 return pos;
2283 pos += ret;
2284 ret = wpa_write_ciphers(pos, end, cipher, "+");
2285 if (ret < 0)
2286 return pos;
2287 pos += ret;
2288 return pos;
2289 }
2290
2291
wpa_supplicant_ie_txt(char * pos,char * end,const char * proto,const u8 * ie,size_t ie_len)2292 static char * wpa_supplicant_ie_txt(char *pos, char *end, const char *proto,
2293 const u8 *ie, size_t ie_len)
2294 {
2295 struct wpa_ie_data data;
2296 char *start;
2297 int ret;
2298
2299 ret = os_snprintf(pos, end - pos, "[%s-", proto);
2300 if (os_snprintf_error(end - pos, ret))
2301 return pos;
2302 pos += ret;
2303
2304 if (wpa_parse_wpa_ie(ie, ie_len, &data) < 0) {
2305 ret = os_snprintf(pos, end - pos, "?]");
2306 if (os_snprintf_error(end - pos, ret))
2307 return pos;
2308 pos += ret;
2309 return pos;
2310 }
2311
2312 start = pos;
2313 if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X) {
2314 ret = os_snprintf(pos, end - pos, "%sEAP",
2315 pos == start ? "" : "+");
2316 if (os_snprintf_error(end - pos, ret))
2317 return pos;
2318 pos += ret;
2319 }
2320 if (data.key_mgmt & WPA_KEY_MGMT_PSK) {
2321 ret = os_snprintf(pos, end - pos, "%sPSK",
2322 pos == start ? "" : "+");
2323 if (os_snprintf_error(end - pos, ret))
2324 return pos;
2325 pos += ret;
2326 }
2327 if (data.key_mgmt & WPA_KEY_MGMT_WPA_NONE) {
2328 ret = os_snprintf(pos, end - pos, "%sNone",
2329 pos == start ? "" : "+");
2330 if (os_snprintf_error(end - pos, ret))
2331 return pos;
2332 pos += ret;
2333 }
2334 if (data.key_mgmt & WPA_KEY_MGMT_SAE) {
2335 ret = os_snprintf(pos, end - pos, "%sSAE",
2336 pos == start ? "" : "+");
2337 if (os_snprintf_error(end - pos, ret))
2338 return pos;
2339 pos += ret;
2340 }
2341 #ifdef CONFIG_IEEE80211R
2342 if (data.key_mgmt & WPA_KEY_MGMT_FT_IEEE8021X) {
2343 ret = os_snprintf(pos, end - pos, "%sFT/EAP",
2344 pos == start ? "" : "+");
2345 if (os_snprintf_error(end - pos, ret))
2346 return pos;
2347 pos += ret;
2348 }
2349 if (data.key_mgmt & WPA_KEY_MGMT_FT_PSK) {
2350 ret = os_snprintf(pos, end - pos, "%sFT/PSK",
2351 pos == start ? "" : "+");
2352 if (os_snprintf_error(end - pos, ret))
2353 return pos;
2354 pos += ret;
2355 }
2356 if (data.key_mgmt & WPA_KEY_MGMT_FT_SAE) {
2357 ret = os_snprintf(pos, end - pos, "%sFT/SAE",
2358 pos == start ? "" : "+");
2359 if (os_snprintf_error(end - pos, ret))
2360 return pos;
2361 pos += ret;
2362 }
2363 #endif /* CONFIG_IEEE80211R */
2364 #ifdef CONFIG_IEEE80211W
2365 if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SHA256) {
2366 ret = os_snprintf(pos, end - pos, "%sEAP-SHA256",
2367 pos == start ? "" : "+");
2368 if (os_snprintf_error(end - pos, ret))
2369 return pos;
2370 pos += ret;
2371 }
2372 if (data.key_mgmt & WPA_KEY_MGMT_PSK_SHA256) {
2373 ret = os_snprintf(pos, end - pos, "%sPSK-SHA256",
2374 pos == start ? "" : "+");
2375 if (os_snprintf_error(end - pos, ret))
2376 return pos;
2377 pos += ret;
2378 }
2379 #endif /* CONFIG_IEEE80211W */
2380
2381 #ifdef CONFIG_SUITEB
2382 if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B) {
2383 ret = os_snprintf(pos, end - pos, "%sEAP-SUITE-B",
2384 pos == start ? "" : "+");
2385 if (os_snprintf_error(end - pos, ret))
2386 return pos;
2387 pos += ret;
2388 }
2389 #endif /* CONFIG_SUITEB */
2390
2391 #ifdef CONFIG_SUITEB192
2392 if (data.key_mgmt & WPA_KEY_MGMT_IEEE8021X_SUITE_B_192) {
2393 ret = os_snprintf(pos, end - pos, "%sEAP-SUITE-B-192",
2394 pos == start ? "" : "+");
2395 if (os_snprintf_error(end - pos, ret))
2396 return pos;
2397 pos += ret;
2398 }
2399 #endif /* CONFIG_SUITEB192 */
2400
2401 if (data.key_mgmt & WPA_KEY_MGMT_OSEN) {
2402 ret = os_snprintf(pos, end - pos, "%sOSEN",
2403 pos == start ? "" : "+");
2404 if (os_snprintf_error(end - pos, ret))
2405 return pos;
2406 pos += ret;
2407 }
2408
2409 pos = wpa_supplicant_cipher_txt(pos, end, data.pairwise_cipher);
2410
2411 if (data.capabilities & WPA_CAPABILITY_PREAUTH) {
2412 ret = os_snprintf(pos, end - pos, "-preauth");
2413 if (os_snprintf_error(end - pos, ret))
2414 return pos;
2415 pos += ret;
2416 }
2417
2418 ret = os_snprintf(pos, end - pos, "]");
2419 if (os_snprintf_error(end - pos, ret))
2420 return pos;
2421 pos += ret;
2422
2423 return pos;
2424 }
2425
2426
2427 #ifdef CONFIG_WPS
wpa_supplicant_wps_ie_txt_buf(struct wpa_supplicant * wpa_s,char * pos,char * end,struct wpabuf * wps_ie)2428 static char * wpa_supplicant_wps_ie_txt_buf(struct wpa_supplicant *wpa_s,
2429 char *pos, char *end,
2430 struct wpabuf *wps_ie)
2431 {
2432 int ret;
2433 const char *txt;
2434
2435 if (wps_ie == NULL)
2436 return pos;
2437 if (wps_is_selected_pbc_registrar(wps_ie))
2438 txt = "[WPS-PBC]";
2439 else if (wps_is_addr_authorized(wps_ie, wpa_s->own_addr, 0))
2440 txt = "[WPS-AUTH]";
2441 else if (wps_is_selected_pin_registrar(wps_ie))
2442 txt = "[WPS-PIN]";
2443 else
2444 txt = "[WPS]";
2445
2446 ret = os_snprintf(pos, end - pos, "%s", txt);
2447 if (!os_snprintf_error(end - pos, ret))
2448 pos += ret;
2449 wpabuf_free(wps_ie);
2450 return pos;
2451 }
2452 #endif /* CONFIG_WPS */
2453
2454
wpa_supplicant_wps_ie_txt(struct wpa_supplicant * wpa_s,char * pos,char * end,const struct wpa_bss * bss)2455 static char * wpa_supplicant_wps_ie_txt(struct wpa_supplicant *wpa_s,
2456 char *pos, char *end,
2457 const struct wpa_bss *bss)
2458 {
2459 #ifdef CONFIG_WPS
2460 struct wpabuf *wps_ie;
2461 wps_ie = wpa_bss_get_vendor_ie_multi(bss, WPS_IE_VENDOR_TYPE);
2462 return wpa_supplicant_wps_ie_txt_buf(wpa_s, pos, end, wps_ie);
2463 #else /* CONFIG_WPS */
2464 return pos;
2465 #endif /* CONFIG_WPS */
2466 }
2467
2468
2469 /* Format one result on one text line into a buffer. */
wpa_supplicant_ctrl_iface_scan_result(struct wpa_supplicant * wpa_s,const struct wpa_bss * bss,char * buf,size_t buflen)2470 static int wpa_supplicant_ctrl_iface_scan_result(
2471 struct wpa_supplicant *wpa_s,
2472 const struct wpa_bss *bss, char *buf, size_t buflen)
2473 {
2474 char *pos, *end;
2475 int ret;
2476 const u8 *ie, *ie2, *osen_ie, *p2p, *mesh;
2477
2478 mesh = wpa_bss_get_ie(bss, WLAN_EID_MESH_ID);
2479 p2p = wpa_bss_get_vendor_ie(bss, P2P_IE_VENDOR_TYPE);
2480 if (!p2p)
2481 p2p = wpa_bss_get_vendor_ie_beacon(bss, P2P_IE_VENDOR_TYPE);
2482 if (p2p && bss->ssid_len == P2P_WILDCARD_SSID_LEN &&
2483 os_memcmp(bss->ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN) ==
2484 0)
2485 return 0; /* Do not show P2P listen discovery results here */
2486
2487 pos = buf;
2488 end = buf + buflen;
2489
2490 ret = os_snprintf(pos, end - pos, MACSTR "\t%d\t%d\t",
2491 MAC2STR(bss->bssid), bss->freq, bss->level);
2492 if (os_snprintf_error(end - pos, ret))
2493 return -1;
2494 pos += ret;
2495 ie = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
2496 if (ie)
2497 pos = wpa_supplicant_ie_txt(pos, end, "WPA", ie, 2 + ie[1]);
2498 ie2 = wpa_bss_get_ie(bss, WLAN_EID_RSN);
2499 if (ie2) {
2500 pos = wpa_supplicant_ie_txt(pos, end, mesh ? "RSN" : "WPA2",
2501 ie2, 2 + ie2[1]);
2502 }
2503 osen_ie = wpa_bss_get_vendor_ie(bss, OSEN_IE_VENDOR_TYPE);
2504 if (osen_ie)
2505 pos = wpa_supplicant_ie_txt(pos, end, "OSEN",
2506 osen_ie, 2 + osen_ie[1]);
2507 pos = wpa_supplicant_wps_ie_txt(wpa_s, pos, end, bss);
2508 if (!ie && !ie2 && !osen_ie && (bss->caps & IEEE80211_CAP_PRIVACY)) {
2509 ret = os_snprintf(pos, end - pos, "[WEP]");
2510 if (os_snprintf_error(end - pos, ret))
2511 return -1;
2512 pos += ret;
2513 }
2514 if (mesh) {
2515 ret = os_snprintf(pos, end - pos, "[MESH]");
2516 if (os_snprintf_error(end - pos, ret))
2517 return -1;
2518 pos += ret;
2519 }
2520 if (bss_is_dmg(bss)) {
2521 const char *s;
2522 ret = os_snprintf(pos, end - pos, "[DMG]");
2523 if (os_snprintf_error(end - pos, ret))
2524 return -1;
2525 pos += ret;
2526 switch (bss->caps & IEEE80211_CAP_DMG_MASK) {
2527 case IEEE80211_CAP_DMG_IBSS:
2528 s = "[IBSS]";
2529 break;
2530 case IEEE80211_CAP_DMG_AP:
2531 s = "[ESS]";
2532 break;
2533 case IEEE80211_CAP_DMG_PBSS:
2534 s = "[PBSS]";
2535 break;
2536 default:
2537 s = "";
2538 break;
2539 }
2540 ret = os_snprintf(pos, end - pos, "%s", s);
2541 if (os_snprintf_error(end - pos, ret))
2542 return -1;
2543 pos += ret;
2544 } else {
2545 if (bss->caps & IEEE80211_CAP_IBSS) {
2546 ret = os_snprintf(pos, end - pos, "[IBSS]");
2547 if (os_snprintf_error(end - pos, ret))
2548 return -1;
2549 pos += ret;
2550 }
2551 if (bss->caps & IEEE80211_CAP_ESS) {
2552 ret = os_snprintf(pos, end - pos, "[ESS]");
2553 if (os_snprintf_error(end - pos, ret))
2554 return -1;
2555 pos += ret;
2556 }
2557 }
2558 if (p2p) {
2559 ret = os_snprintf(pos, end - pos, "[P2P]");
2560 if (os_snprintf_error(end - pos, ret))
2561 return -1;
2562 pos += ret;
2563 }
2564 #ifdef CONFIG_HS20
2565 if (wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE) && ie2) {
2566 ret = os_snprintf(pos, end - pos, "[HS20]");
2567 if (os_snprintf_error(end - pos, ret))
2568 return -1;
2569 pos += ret;
2570 }
2571 #endif /* CONFIG_HS20 */
2572 #ifdef CONFIG_FST
2573 if (wpa_bss_get_ie(bss, WLAN_EID_MULTI_BAND)) {
2574 ret = os_snprintf(pos, end - pos, "[FST]");
2575 if (os_snprintf_error(end - pos, ret))
2576 return -1;
2577 pos += ret;
2578 }
2579 #endif /* CONFIG_FST */
2580
2581 ret = os_snprintf(pos, end - pos, "\t%s",
2582 wpa_ssid_txt(bss->ssid, bss->ssid_len));
2583 if (os_snprintf_error(end - pos, ret))
2584 return -1;
2585 pos += ret;
2586
2587 ret = os_snprintf(pos, end - pos, "\n");
2588 if (os_snprintf_error(end - pos, ret))
2589 return -1;
2590 pos += ret;
2591
2592 return pos - buf;
2593 }
2594
2595
wpa_supplicant_ctrl_iface_scan_results(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)2596 static int wpa_supplicant_ctrl_iface_scan_results(
2597 struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
2598 {
2599 char *pos, *end;
2600 struct wpa_bss *bss;
2601 int ret;
2602
2603 pos = buf;
2604 end = buf + buflen;
2605 ret = os_snprintf(pos, end - pos, "bssid / frequency / signal level / "
2606 "flags / ssid\n");
2607 if (os_snprintf_error(end - pos, ret))
2608 return pos - buf;
2609 pos += ret;
2610
2611 dl_list_for_each(bss, &wpa_s->bss_id, struct wpa_bss, list_id) {
2612 ret = wpa_supplicant_ctrl_iface_scan_result(wpa_s, bss, pos,
2613 end - pos);
2614 if (ret < 0 || ret >= end - pos)
2615 return pos - buf;
2616 pos += ret;
2617 }
2618
2619 return pos - buf;
2620 }
2621
2622
2623 #ifdef CONFIG_MESH
2624
wpa_supplicant_ctrl_iface_mesh_interface_add(struct wpa_supplicant * wpa_s,char * cmd,char * reply,size_t max_len)2625 static int wpa_supplicant_ctrl_iface_mesh_interface_add(
2626 struct wpa_supplicant *wpa_s, char *cmd, char *reply, size_t max_len)
2627 {
2628 char *pos, ifname[IFNAMSIZ + 1];
2629
2630 ifname[0] = '\0';
2631
2632 pos = os_strstr(cmd, "ifname=");
2633 if (pos) {
2634 pos += 7;
2635 os_strlcpy(ifname, pos, sizeof(ifname));
2636 }
2637
2638 if (wpas_mesh_add_interface(wpa_s, ifname, sizeof(ifname)) < 0)
2639 return -1;
2640
2641 os_strlcpy(reply, ifname, max_len);
2642 return os_strlen(ifname);
2643 }
2644
2645
wpa_supplicant_ctrl_iface_mesh_group_add(struct wpa_supplicant * wpa_s,char * cmd)2646 static int wpa_supplicant_ctrl_iface_mesh_group_add(
2647 struct wpa_supplicant *wpa_s, char *cmd)
2648 {
2649 int id;
2650 struct wpa_ssid *ssid;
2651
2652 id = atoi(cmd);
2653 wpa_printf(MSG_DEBUG, "CTRL_IFACE: MESH_GROUP_ADD id=%d", id);
2654
2655 ssid = wpa_config_get_network(wpa_s->conf, id);
2656 if (ssid == NULL) {
2657 wpa_printf(MSG_DEBUG,
2658 "CTRL_IFACE: Could not find network id=%d", id);
2659 return -1;
2660 }
2661 if (ssid->mode != WPAS_MODE_MESH) {
2662 wpa_printf(MSG_DEBUG,
2663 "CTRL_IFACE: Cannot use MESH_GROUP_ADD on a non mesh network");
2664 return -1;
2665 }
2666 if (ssid->key_mgmt != WPA_KEY_MGMT_NONE &&
2667 ssid->key_mgmt != WPA_KEY_MGMT_SAE) {
2668 wpa_printf(MSG_ERROR,
2669 "CTRL_IFACE: key_mgmt for mesh network should be open or SAE");
2670 return -1;
2671 }
2672
2673 /*
2674 * TODO: If necessary write our own group_add function,
2675 * for now we can reuse select_network
2676 */
2677 wpa_supplicant_select_network(wpa_s, ssid);
2678
2679 return 0;
2680 }
2681
2682
wpa_supplicant_ctrl_iface_mesh_group_remove(struct wpa_supplicant * wpa_s,char * cmd)2683 static int wpa_supplicant_ctrl_iface_mesh_group_remove(
2684 struct wpa_supplicant *wpa_s, char *cmd)
2685 {
2686 struct wpa_supplicant *orig;
2687 struct wpa_global *global;
2688 int found = 0;
2689
2690 wpa_printf(MSG_DEBUG, "CTRL_IFACE: MESH_GROUP_REMOVE ifname=%s", cmd);
2691
2692 global = wpa_s->global;
2693 orig = wpa_s;
2694
2695 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
2696 if (os_strcmp(wpa_s->ifname, cmd) == 0) {
2697 found = 1;
2698 break;
2699 }
2700 }
2701 if (!found) {
2702 wpa_printf(MSG_ERROR,
2703 "CTRL_IFACE: MESH_GROUP_REMOVE ifname=%s not found",
2704 cmd);
2705 return -1;
2706 }
2707 if (wpa_s->mesh_if_created && wpa_s == orig) {
2708 wpa_printf(MSG_ERROR,
2709 "CTRL_IFACE: MESH_GROUP_REMOVE can't remove itself");
2710 return -1;
2711 }
2712
2713 wpa_s->reassociate = 0;
2714 wpa_s->disconnected = 1;
2715 wpa_supplicant_cancel_sched_scan(wpa_s);
2716 wpa_supplicant_cancel_scan(wpa_s);
2717
2718 /*
2719 * TODO: If necessary write our own group_remove function,
2720 * for now we can reuse deauthenticate
2721 */
2722 wpa_supplicant_deauthenticate(wpa_s, WLAN_REASON_DEAUTH_LEAVING);
2723
2724 if (wpa_s->mesh_if_created)
2725 wpa_supplicant_remove_iface(global, wpa_s, 0);
2726
2727 return 0;
2728 }
2729
2730
wpa_supplicant_ctrl_iface_mesh_peer_remove(struct wpa_supplicant * wpa_s,char * cmd)2731 static int wpa_supplicant_ctrl_iface_mesh_peer_remove(
2732 struct wpa_supplicant *wpa_s, char *cmd)
2733 {
2734 u8 addr[ETH_ALEN];
2735
2736 if (hwaddr_aton(cmd, addr) < 0)
2737 return -1;
2738
2739 return wpas_mesh_peer_remove(wpa_s, addr);
2740 }
2741
2742
wpa_supplicant_ctrl_iface_mesh_peer_add(struct wpa_supplicant * wpa_s,char * cmd)2743 static int wpa_supplicant_ctrl_iface_mesh_peer_add(
2744 struct wpa_supplicant *wpa_s, char *cmd)
2745 {
2746 u8 addr[ETH_ALEN];
2747 int duration;
2748 char *pos;
2749
2750 pos = os_strstr(cmd, " duration=");
2751 if (pos) {
2752 *pos = '\0';
2753 duration = atoi(pos + 10);
2754 } else {
2755 duration = -1;
2756 }
2757
2758 if (hwaddr_aton(cmd, addr))
2759 return -1;
2760
2761 return wpas_mesh_peer_add(wpa_s, addr, duration);
2762 }
2763
2764 #endif /* CONFIG_MESH */
2765
2766
wpa_supplicant_ctrl_iface_select_network(struct wpa_supplicant * wpa_s,char * cmd)2767 static int wpa_supplicant_ctrl_iface_select_network(
2768 struct wpa_supplicant *wpa_s, char *cmd)
2769 {
2770 int id;
2771 struct wpa_ssid *ssid;
2772 char *pos;
2773
2774 /* cmd: "<network id>" or "any" */
2775 if (os_strncmp(cmd, "any", 3) == 0) {
2776 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SELECT_NETWORK any");
2777 ssid = NULL;
2778 } else {
2779 id = atoi(cmd);
2780 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SELECT_NETWORK id=%d", id);
2781
2782 ssid = wpa_config_get_network(wpa_s->conf, id);
2783 if (ssid == NULL) {
2784 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2785 "network id=%d", id);
2786 return -1;
2787 }
2788 if (ssid->disabled == 2) {
2789 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2790 "SELECT_NETWORK with persistent P2P group");
2791 return -1;
2792 }
2793 }
2794
2795 pos = os_strstr(cmd, " freq=");
2796 if (pos) {
2797 int *freqs = freq_range_to_channel_list(wpa_s, pos + 6);
2798 if (freqs) {
2799 wpa_s->scan_req = MANUAL_SCAN_REQ;
2800 os_free(wpa_s->manual_scan_freqs);
2801 wpa_s->manual_scan_freqs = freqs;
2802 }
2803 }
2804
2805 wpa_s->scan_min_time.sec = 0;
2806 wpa_s->scan_min_time.usec = 0;
2807 wpa_supplicant_select_network(wpa_s, ssid);
2808
2809 return 0;
2810 }
2811
2812
wpa_supplicant_ctrl_iface_enable_network(struct wpa_supplicant * wpa_s,char * cmd)2813 static int wpa_supplicant_ctrl_iface_enable_network(
2814 struct wpa_supplicant *wpa_s, char *cmd)
2815 {
2816 int id;
2817 struct wpa_ssid *ssid;
2818
2819 /* cmd: "<network id>" or "all" */
2820 if (os_strcmp(cmd, "all") == 0) {
2821 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ENABLE_NETWORK all");
2822 ssid = NULL;
2823 } else {
2824 id = atoi(cmd);
2825 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ENABLE_NETWORK id=%d", id);
2826
2827 ssid = wpa_config_get_network(wpa_s->conf, id);
2828 if (ssid == NULL) {
2829 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2830 "network id=%d", id);
2831 return -1;
2832 }
2833 if (ssid->disabled == 2) {
2834 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2835 "ENABLE_NETWORK with persistent P2P group");
2836 return -1;
2837 }
2838
2839 if (os_strstr(cmd, " no-connect")) {
2840 ssid->disabled = 0;
2841 return 0;
2842 }
2843 }
2844 wpa_s->scan_min_time.sec = 0;
2845 wpa_s->scan_min_time.usec = 0;
2846 wpa_supplicant_enable_network(wpa_s, ssid);
2847
2848 return 0;
2849 }
2850
2851
wpa_supplicant_ctrl_iface_disable_network(struct wpa_supplicant * wpa_s,char * cmd)2852 static int wpa_supplicant_ctrl_iface_disable_network(
2853 struct wpa_supplicant *wpa_s, char *cmd)
2854 {
2855 int id;
2856 struct wpa_ssid *ssid;
2857
2858 /* cmd: "<network id>" or "all" */
2859 if (os_strcmp(cmd, "all") == 0) {
2860 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DISABLE_NETWORK all");
2861 ssid = NULL;
2862 } else {
2863 id = atoi(cmd);
2864 wpa_printf(MSG_DEBUG, "CTRL_IFACE: DISABLE_NETWORK id=%d", id);
2865
2866 ssid = wpa_config_get_network(wpa_s->conf, id);
2867 if (ssid == NULL) {
2868 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
2869 "network id=%d", id);
2870 return -1;
2871 }
2872 if (ssid->disabled == 2) {
2873 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Cannot use "
2874 "DISABLE_NETWORK with persistent P2P "
2875 "group");
2876 return -1;
2877 }
2878 }
2879 wpa_supplicant_disable_network(wpa_s, ssid);
2880
2881 return 0;
2882 }
2883
2884
wpa_supplicant_ctrl_iface_add_network(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)2885 static int wpa_supplicant_ctrl_iface_add_network(
2886 struct wpa_supplicant *wpa_s, char *buf, size_t buflen)
2887 {
2888 struct wpa_ssid *ssid;
2889 int ret;
2890
2891 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ADD_NETWORK");
2892
2893 ssid = wpa_config_add_network(wpa_s->conf);
2894 if (ssid == NULL)
2895 return -1;
2896
2897 wpas_notify_network_added(wpa_s, ssid);
2898
2899 ssid->disabled = 1;
2900 wpa_config_set_network_defaults(ssid);
2901
2902 ret = os_snprintf(buf, buflen, "%d\n", ssid->id);
2903 if (os_snprintf_error(buflen, ret))
2904 return -1;
2905 return ret;
2906 }
2907
2908
wpa_supplicant_ctrl_iface_remove_network(struct wpa_supplicant * wpa_s,char * cmd)2909 static int wpa_supplicant_ctrl_iface_remove_network(
2910 struct wpa_supplicant *wpa_s, char *cmd)
2911 {
2912 int id;
2913 struct wpa_ssid *ssid;
2914 int was_disabled;
2915
2916 /* cmd: "<network id>" or "all" */
2917 if (os_strcmp(cmd, "all") == 0) {
2918 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_NETWORK all");
2919 if (wpa_s->sched_scanning)
2920 wpa_supplicant_cancel_sched_scan(wpa_s);
2921
2922 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2923 if (wpa_s->current_ssid) {
2924 #ifdef CONFIG_SME
2925 wpa_s->sme.prev_bssid_set = 0;
2926 #endif /* CONFIG_SME */
2927 wpa_sm_set_config(wpa_s->wpa, NULL);
2928 eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
2929 if (wpa_s->wpa_state >= WPA_AUTHENTICATING)
2930 wpa_s->own_disconnect_req = 1;
2931 wpa_supplicant_deauthenticate(
2932 wpa_s, WLAN_REASON_DEAUTH_LEAVING);
2933 }
2934 ssid = wpa_s->conf->ssid;
2935 while (ssid) {
2936 struct wpa_ssid *remove_ssid = ssid;
2937 id = ssid->id;
2938 ssid = ssid->next;
2939 if (wpa_s->last_ssid == remove_ssid)
2940 wpa_s->last_ssid = NULL;
2941 wpas_notify_network_removed(wpa_s, remove_ssid);
2942 wpa_config_remove_network(wpa_s->conf, id);
2943 }
2944 return 0;
2945 }
2946
2947 id = atoi(cmd);
2948 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_NETWORK id=%d", id);
2949
2950 ssid = wpa_config_get_network(wpa_s->conf, id);
2951 if (ssid)
2952 wpas_notify_network_removed(wpa_s, ssid);
2953 if (ssid == NULL) {
2954 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
2955 "id=%d", id);
2956 return -1;
2957 }
2958
2959 if (wpa_s->last_ssid == ssid)
2960 wpa_s->last_ssid = NULL;
2961
2962 if (ssid == wpa_s->current_ssid || wpa_s->current_ssid == NULL) {
2963 #ifdef CONFIG_SME
2964 wpa_s->sme.prev_bssid_set = 0;
2965 #endif /* CONFIG_SME */
2966 /*
2967 * Invalidate the EAP session cache if the current or
2968 * previously used network is removed.
2969 */
2970 eapol_sm_invalidate_cached_session(wpa_s->eapol);
2971 }
2972
2973 if (ssid == wpa_s->current_ssid) {
2974 wpa_sm_set_config(wpa_s->wpa, NULL);
2975 eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
2976
2977 if (wpa_s->wpa_state >= WPA_AUTHENTICATING)
2978 wpa_s->own_disconnect_req = 1;
2979 wpa_supplicant_deauthenticate(wpa_s,
2980 WLAN_REASON_DEAUTH_LEAVING);
2981 }
2982
2983 was_disabled = ssid->disabled;
2984
2985 if (wpa_config_remove_network(wpa_s->conf, id) < 0) {
2986 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Not able to remove the "
2987 "network id=%d", id);
2988 return -1;
2989 }
2990
2991 if (!was_disabled && wpa_s->sched_scanning) {
2992 wpa_printf(MSG_DEBUG, "Stop ongoing sched_scan to remove "
2993 "network from filters");
2994 wpa_supplicant_cancel_sched_scan(wpa_s);
2995 wpa_supplicant_req_scan(wpa_s, 0, 0);
2996 }
2997
2998 return 0;
2999 }
3000
3001
wpa_supplicant_ctrl_iface_update_network(struct wpa_supplicant * wpa_s,struct wpa_ssid * ssid,char * name,char * value)3002 static int wpa_supplicant_ctrl_iface_update_network(
3003 struct wpa_supplicant *wpa_s, struct wpa_ssid *ssid,
3004 char *name, char *value)
3005 {
3006 int ret;
3007
3008 ret = wpa_config_set(ssid, name, value, 0);
3009 if (ret < 0) {
3010 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to set network "
3011 "variable '%s'", name);
3012 return -1;
3013 }
3014 if (ret == 1)
3015 return 0; /* No change to the previously configured value */
3016
3017 if (os_strcmp(name, "bssid") != 0 &&
3018 os_strcmp(name, "priority") != 0) {
3019 wpa_sm_pmksa_cache_flush(wpa_s->wpa, ssid);
3020
3021 if (wpa_s->current_ssid == ssid ||
3022 wpa_s->current_ssid == NULL) {
3023 /*
3024 * Invalidate the EAP session cache if anything in the
3025 * current or previously used configuration changes.
3026 */
3027 eapol_sm_invalidate_cached_session(wpa_s->eapol);
3028 }
3029 }
3030
3031 if ((os_strcmp(name, "psk") == 0 &&
3032 value[0] == '"' && ssid->ssid_len) ||
3033 (os_strcmp(name, "ssid") == 0 && ssid->passphrase))
3034 wpa_config_update_psk(ssid);
3035 else if (os_strcmp(name, "priority") == 0)
3036 wpa_config_update_prio_list(wpa_s->conf);
3037
3038 return 0;
3039 }
3040
3041
wpa_supplicant_ctrl_iface_set_network(struct wpa_supplicant * wpa_s,char * cmd)3042 static int wpa_supplicant_ctrl_iface_set_network(
3043 struct wpa_supplicant *wpa_s, char *cmd)
3044 {
3045 int id, ret, prev_bssid_set, prev_disabled;
3046 struct wpa_ssid *ssid;
3047 char *name, *value;
3048 u8 prev_bssid[ETH_ALEN];
3049
3050 /* cmd: "<network id> <variable name> <value>" */
3051 name = os_strchr(cmd, ' ');
3052 if (name == NULL)
3053 return -1;
3054 *name++ = '\0';
3055
3056 value = os_strchr(name, ' ');
3057 if (value == NULL)
3058 return -1;
3059 *value++ = '\0';
3060
3061 id = atoi(cmd);
3062 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SET_NETWORK id=%d name='%s'",
3063 id, name);
3064 wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
3065 (u8 *) value, os_strlen(value));
3066
3067 ssid = wpa_config_get_network(wpa_s->conf, id);
3068 if (ssid == NULL) {
3069 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find network "
3070 "id=%d", id);
3071 return -1;
3072 }
3073
3074 prev_bssid_set = ssid->bssid_set;
3075 prev_disabled = ssid->disabled;
3076 os_memcpy(prev_bssid, ssid->bssid, ETH_ALEN);
3077 ret = wpa_supplicant_ctrl_iface_update_network(wpa_s, ssid, name,
3078 value);
3079 if (ret == 0 &&
3080 (ssid->bssid_set != prev_bssid_set ||
3081 os_memcmp(ssid->bssid, prev_bssid, ETH_ALEN) != 0))
3082 wpas_notify_network_bssid_set_changed(wpa_s, ssid);
3083
3084 if (prev_disabled != ssid->disabled &&
3085 (prev_disabled == 2 || ssid->disabled == 2))
3086 wpas_notify_network_type_changed(wpa_s, ssid);
3087
3088 return ret;
3089 }
3090
3091
wpa_supplicant_ctrl_iface_get_network(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)3092 static int wpa_supplicant_ctrl_iface_get_network(
3093 struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
3094 {
3095 int id;
3096 size_t res;
3097 struct wpa_ssid *ssid;
3098 char *name, *value;
3099
3100 /* cmd: "<network id> <variable name>" */
3101 name = os_strchr(cmd, ' ');
3102 if (name == NULL || buflen == 0)
3103 return -1;
3104 *name++ = '\0';
3105
3106 id = atoi(cmd);
3107 wpa_printf(MSG_EXCESSIVE, "CTRL_IFACE: GET_NETWORK id=%d name='%s'",
3108 id, name);
3109
3110 ssid = wpa_config_get_network(wpa_s->conf, id);
3111 if (ssid == NULL) {
3112 wpa_printf(MSG_EXCESSIVE, "CTRL_IFACE: Could not find network "
3113 "id=%d", id);
3114 return -1;
3115 }
3116
3117 value = wpa_config_get_no_key(ssid, name);
3118 if (value == NULL) {
3119 wpa_printf(MSG_EXCESSIVE, "CTRL_IFACE: Failed to get network "
3120 "variable '%s'", name);
3121 return -1;
3122 }
3123
3124 res = os_strlcpy(buf, value, buflen);
3125 if (res >= buflen) {
3126 os_free(value);
3127 return -1;
3128 }
3129
3130 os_free(value);
3131
3132 return res;
3133 }
3134
3135
wpa_supplicant_ctrl_iface_dup_network(struct wpa_supplicant * wpa_s,char * cmd,struct wpa_supplicant * dst_wpa_s)3136 static int wpa_supplicant_ctrl_iface_dup_network(
3137 struct wpa_supplicant *wpa_s, char *cmd,
3138 struct wpa_supplicant *dst_wpa_s)
3139 {
3140 struct wpa_ssid *ssid_s, *ssid_d;
3141 char *name, *id, *value;
3142 int id_s, id_d, ret;
3143
3144 /* cmd: "<src network id> <dst network id> <variable name>" */
3145 id = os_strchr(cmd, ' ');
3146 if (id == NULL)
3147 return -1;
3148 *id++ = '\0';
3149
3150 name = os_strchr(id, ' ');
3151 if (name == NULL)
3152 return -1;
3153 *name++ = '\0';
3154
3155 id_s = atoi(cmd);
3156 id_d = atoi(id);
3157
3158 wpa_printf(MSG_DEBUG,
3159 "CTRL_IFACE: DUP_NETWORK ifname=%s->%s id=%d->%d name='%s'",
3160 wpa_s->ifname, dst_wpa_s->ifname, id_s, id_d, name);
3161
3162 ssid_s = wpa_config_get_network(wpa_s->conf, id_s);
3163 if (ssid_s == NULL) {
3164 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
3165 "network id=%d", id_s);
3166 return -1;
3167 }
3168
3169 ssid_d = wpa_config_get_network(dst_wpa_s->conf, id_d);
3170 if (ssid_d == NULL) {
3171 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
3172 "network id=%d", id_d);
3173 return -1;
3174 }
3175
3176 value = wpa_config_get(ssid_s, name);
3177 if (value == NULL) {
3178 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to get network "
3179 "variable '%s'", name);
3180 return -1;
3181 }
3182
3183 ret = wpa_supplicant_ctrl_iface_update_network(dst_wpa_s, ssid_d, name,
3184 value);
3185
3186 os_free(value);
3187
3188 return ret;
3189 }
3190
3191
wpa_supplicant_ctrl_iface_list_creds(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)3192 static int wpa_supplicant_ctrl_iface_list_creds(struct wpa_supplicant *wpa_s,
3193 char *buf, size_t buflen)
3194 {
3195 char *pos, *end;
3196 struct wpa_cred *cred;
3197 int ret;
3198
3199 pos = buf;
3200 end = buf + buflen;
3201 ret = os_snprintf(pos, end - pos,
3202 "cred id / realm / username / domain / imsi\n");
3203 if (os_snprintf_error(end - pos, ret))
3204 return pos - buf;
3205 pos += ret;
3206
3207 cred = wpa_s->conf->cred;
3208 while (cred) {
3209 ret = os_snprintf(pos, end - pos, "%d\t%s\t%s\t%s\t%s\n",
3210 cred->id, cred->realm ? cred->realm : "",
3211 cred->username ? cred->username : "",
3212 cred->domain ? cred->domain[0] : "",
3213 cred->imsi ? cred->imsi : "");
3214 if (os_snprintf_error(end - pos, ret))
3215 return pos - buf;
3216 pos += ret;
3217
3218 cred = cred->next;
3219 }
3220
3221 return pos - buf;
3222 }
3223
3224
wpa_supplicant_ctrl_iface_add_cred(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)3225 static int wpa_supplicant_ctrl_iface_add_cred(struct wpa_supplicant *wpa_s,
3226 char *buf, size_t buflen)
3227 {
3228 struct wpa_cred *cred;
3229 int ret;
3230
3231 wpa_printf(MSG_DEBUG, "CTRL_IFACE: ADD_CRED");
3232
3233 cred = wpa_config_add_cred(wpa_s->conf);
3234 if (cred == NULL)
3235 return -1;
3236
3237 wpa_msg(wpa_s, MSG_INFO, CRED_ADDED "%d", cred->id);
3238
3239 ret = os_snprintf(buf, buflen, "%d\n", cred->id);
3240 if (os_snprintf_error(buflen, ret))
3241 return -1;
3242 return ret;
3243 }
3244
3245
wpas_ctrl_remove_cred(struct wpa_supplicant * wpa_s,struct wpa_cred * cred)3246 static int wpas_ctrl_remove_cred(struct wpa_supplicant *wpa_s,
3247 struct wpa_cred *cred)
3248 {
3249 struct wpa_ssid *ssid;
3250 char str[20];
3251 int id;
3252
3253 if (cred == NULL) {
3254 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred");
3255 return -1;
3256 }
3257
3258 id = cred->id;
3259 if (wpa_config_remove_cred(wpa_s->conf, id) < 0) {
3260 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred");
3261 return -1;
3262 }
3263
3264 wpa_msg(wpa_s, MSG_INFO, CRED_REMOVED "%d", id);
3265
3266 /* Remove any network entry created based on the removed credential */
3267 ssid = wpa_s->conf->ssid;
3268 while (ssid) {
3269 if (ssid->parent_cred == cred) {
3270 int res;
3271
3272 wpa_printf(MSG_DEBUG, "Remove network id %d since it "
3273 "used the removed credential", ssid->id);
3274 res = os_snprintf(str, sizeof(str), "%d", ssid->id);
3275 if (os_snprintf_error(sizeof(str), res))
3276 str[sizeof(str) - 1] = '\0';
3277 ssid = ssid->next;
3278 wpa_supplicant_ctrl_iface_remove_network(wpa_s, str);
3279 } else
3280 ssid = ssid->next;
3281 }
3282
3283 return 0;
3284 }
3285
3286
wpa_supplicant_ctrl_iface_remove_cred(struct wpa_supplicant * wpa_s,char * cmd)3287 static int wpa_supplicant_ctrl_iface_remove_cred(struct wpa_supplicant *wpa_s,
3288 char *cmd)
3289 {
3290 int id;
3291 struct wpa_cred *cred, *prev;
3292
3293 /* cmd: "<cred id>", "all", "sp_fqdn=<FQDN>", or
3294 * "provisioning_sp=<FQDN> */
3295 if (os_strcmp(cmd, "all") == 0) {
3296 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED all");
3297 cred = wpa_s->conf->cred;
3298 while (cred) {
3299 prev = cred;
3300 cred = cred->next;
3301 wpas_ctrl_remove_cred(wpa_s, prev);
3302 }
3303 return 0;
3304 }
3305
3306 if (os_strncmp(cmd, "sp_fqdn=", 8) == 0) {
3307 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED SP FQDN '%s'",
3308 cmd + 8);
3309 cred = wpa_s->conf->cred;
3310 while (cred) {
3311 prev = cred;
3312 cred = cred->next;
3313 if (prev->domain) {
3314 size_t i;
3315 for (i = 0; i < prev->num_domain; i++) {
3316 if (os_strcmp(prev->domain[i], cmd + 8)
3317 != 0)
3318 continue;
3319 wpas_ctrl_remove_cred(wpa_s, prev);
3320 break;
3321 }
3322 }
3323 }
3324 return 0;
3325 }
3326
3327 if (os_strncmp(cmd, "provisioning_sp=", 16) == 0) {
3328 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED provisioning SP FQDN '%s'",
3329 cmd + 16);
3330 cred = wpa_s->conf->cred;
3331 while (cred) {
3332 prev = cred;
3333 cred = cred->next;
3334 if (prev->provisioning_sp &&
3335 os_strcmp(prev->provisioning_sp, cmd + 16) == 0)
3336 wpas_ctrl_remove_cred(wpa_s, prev);
3337 }
3338 return 0;
3339 }
3340
3341 id = atoi(cmd);
3342 wpa_printf(MSG_DEBUG, "CTRL_IFACE: REMOVE_CRED id=%d", id);
3343
3344 cred = wpa_config_get_cred(wpa_s->conf, id);
3345 return wpas_ctrl_remove_cred(wpa_s, cred);
3346 }
3347
3348
wpa_supplicant_ctrl_iface_set_cred(struct wpa_supplicant * wpa_s,char * cmd)3349 static int wpa_supplicant_ctrl_iface_set_cred(struct wpa_supplicant *wpa_s,
3350 char *cmd)
3351 {
3352 int id;
3353 struct wpa_cred *cred;
3354 char *name, *value;
3355
3356 /* cmd: "<cred id> <variable name> <value>" */
3357 name = os_strchr(cmd, ' ');
3358 if (name == NULL)
3359 return -1;
3360 *name++ = '\0';
3361
3362 value = os_strchr(name, ' ');
3363 if (value == NULL)
3364 return -1;
3365 *value++ = '\0';
3366
3367 id = atoi(cmd);
3368 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SET_CRED id=%d name='%s'",
3369 id, name);
3370 wpa_hexdump_ascii_key(MSG_DEBUG, "CTRL_IFACE: value",
3371 (u8 *) value, os_strlen(value));
3372
3373 cred = wpa_config_get_cred(wpa_s->conf, id);
3374 if (cred == NULL) {
3375 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred id=%d",
3376 id);
3377 return -1;
3378 }
3379
3380 if (wpa_config_set_cred(cred, name, value, 0) < 0) {
3381 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to set cred "
3382 "variable '%s'", name);
3383 return -1;
3384 }
3385
3386 wpa_msg(wpa_s, MSG_INFO, CRED_MODIFIED "%d %s", cred->id, name);
3387
3388 return 0;
3389 }
3390
3391
wpa_supplicant_ctrl_iface_get_cred(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)3392 static int wpa_supplicant_ctrl_iface_get_cred(struct wpa_supplicant *wpa_s,
3393 char *cmd, char *buf,
3394 size_t buflen)
3395 {
3396 int id;
3397 size_t res;
3398 struct wpa_cred *cred;
3399 char *name, *value;
3400
3401 /* cmd: "<cred id> <variable name>" */
3402 name = os_strchr(cmd, ' ');
3403 if (name == NULL)
3404 return -1;
3405 *name++ = '\0';
3406
3407 id = atoi(cmd);
3408 wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_CRED id=%d name='%s'",
3409 id, name);
3410
3411 cred = wpa_config_get_cred(wpa_s->conf, id);
3412 if (cred == NULL) {
3413 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find cred id=%d",
3414 id);
3415 return -1;
3416 }
3417
3418 value = wpa_config_get_cred_no_key(cred, name);
3419 if (value == NULL) {
3420 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Failed to get cred variable '%s'",
3421 name);
3422 return -1;
3423 }
3424
3425 res = os_strlcpy(buf, value, buflen);
3426 if (res >= buflen) {
3427 os_free(value);
3428 return -1;
3429 }
3430
3431 os_free(value);
3432
3433 return res;
3434 }
3435
3436
3437 #ifndef CONFIG_NO_CONFIG_WRITE
wpa_supplicant_ctrl_iface_save_config(struct wpa_supplicant * wpa_s)3438 static int wpa_supplicant_ctrl_iface_save_config(struct wpa_supplicant *wpa_s)
3439 {
3440 int ret;
3441
3442 if (!wpa_s->conf->update_config) {
3443 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Not allowed "
3444 "to update configuration (update_config=0)");
3445 return -1;
3446 }
3447
3448 ret = wpa_config_write(wpa_s->confname, wpa_s->conf);
3449 if (ret) {
3450 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Failed to "
3451 "update configuration");
3452 } else {
3453 wpa_printf(MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Configuration"
3454 " updated");
3455 }
3456
3457 return ret;
3458 }
3459 #endif /* CONFIG_NO_CONFIG_WRITE */
3460
3461
3462 struct cipher_info {
3463 unsigned int capa;
3464 const char *name;
3465 int group_only;
3466 };
3467
3468 static const struct cipher_info ciphers[] = {
3469 { WPA_DRIVER_CAPA_ENC_CCMP_256, "CCMP-256", 0 },
3470 { WPA_DRIVER_CAPA_ENC_GCMP_256, "GCMP-256", 0 },
3471 { WPA_DRIVER_CAPA_ENC_CCMP, "CCMP", 0 },
3472 { WPA_DRIVER_CAPA_ENC_GCMP, "GCMP", 0 },
3473 { WPA_DRIVER_CAPA_ENC_TKIP, "TKIP", 0 },
3474 { WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE, "NONE", 0 },
3475 { WPA_DRIVER_CAPA_ENC_WEP104, "WEP104", 1 },
3476 { WPA_DRIVER_CAPA_ENC_WEP40, "WEP40", 1 }
3477 };
3478
3479 static const struct cipher_info ciphers_group_mgmt[] = {
3480 { WPA_DRIVER_CAPA_ENC_BIP, "AES-128-CMAC", 1 },
3481 { WPA_DRIVER_CAPA_ENC_BIP_GMAC_128, "BIP-GMAC-128", 1 },
3482 { WPA_DRIVER_CAPA_ENC_BIP_GMAC_256, "BIP-GMAC-256", 1 },
3483 { WPA_DRIVER_CAPA_ENC_BIP_CMAC_256, "BIP-CMAC-256", 1 },
3484 };
3485
3486
ctrl_iface_get_capability_pairwise(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3487 static int ctrl_iface_get_capability_pairwise(int res, char *strict,
3488 struct wpa_driver_capa *capa,
3489 char *buf, size_t buflen)
3490 {
3491 int ret;
3492 char *pos, *end;
3493 size_t len;
3494 unsigned int i;
3495
3496 pos = buf;
3497 end = pos + buflen;
3498
3499 if (res < 0) {
3500 if (strict)
3501 return 0;
3502 len = os_strlcpy(buf, "CCMP TKIP NONE", buflen);
3503 if (len >= buflen)
3504 return -1;
3505 return len;
3506 }
3507
3508 for (i = 0; i < ARRAY_SIZE(ciphers); i++) {
3509 if (!ciphers[i].group_only && capa->enc & ciphers[i].capa) {
3510 ret = os_snprintf(pos, end - pos, "%s%s",
3511 pos == buf ? "" : " ",
3512 ciphers[i].name);
3513 if (os_snprintf_error(end - pos, ret))
3514 return pos - buf;
3515 pos += ret;
3516 }
3517 }
3518
3519 return pos - buf;
3520 }
3521
3522
ctrl_iface_get_capability_group(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3523 static int ctrl_iface_get_capability_group(int res, char *strict,
3524 struct wpa_driver_capa *capa,
3525 char *buf, size_t buflen)
3526 {
3527 int ret;
3528 char *pos, *end;
3529 size_t len;
3530 unsigned int i;
3531
3532 pos = buf;
3533 end = pos + buflen;
3534
3535 if (res < 0) {
3536 if (strict)
3537 return 0;
3538 len = os_strlcpy(buf, "CCMP TKIP WEP104 WEP40", buflen);
3539 if (len >= buflen)
3540 return -1;
3541 return len;
3542 }
3543
3544 for (i = 0; i < ARRAY_SIZE(ciphers); i++) {
3545 if (capa->enc & ciphers[i].capa) {
3546 ret = os_snprintf(pos, end - pos, "%s%s",
3547 pos == buf ? "" : " ",
3548 ciphers[i].name);
3549 if (os_snprintf_error(end - pos, ret))
3550 return pos - buf;
3551 pos += ret;
3552 }
3553 }
3554
3555 return pos - buf;
3556 }
3557
3558
ctrl_iface_get_capability_group_mgmt(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3559 static int ctrl_iface_get_capability_group_mgmt(int res, char *strict,
3560 struct wpa_driver_capa *capa,
3561 char *buf, size_t buflen)
3562 {
3563 int ret;
3564 char *pos, *end;
3565 unsigned int i;
3566
3567 pos = buf;
3568 end = pos + buflen;
3569
3570 if (res < 0)
3571 return 0;
3572
3573 for (i = 0; i < ARRAY_SIZE(ciphers_group_mgmt); i++) {
3574 if (capa->enc & ciphers_group_mgmt[i].capa) {
3575 ret = os_snprintf(pos, end - pos, "%s%s",
3576 pos == buf ? "" : " ",
3577 ciphers_group_mgmt[i].name);
3578 if (os_snprintf_error(end - pos, ret))
3579 return pos - buf;
3580 pos += ret;
3581 }
3582 }
3583
3584 return pos - buf;
3585 }
3586
3587
ctrl_iface_get_capability_key_mgmt(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3588 static int ctrl_iface_get_capability_key_mgmt(int res, char *strict,
3589 struct wpa_driver_capa *capa,
3590 char *buf, size_t buflen)
3591 {
3592 int ret;
3593 char *pos, *end;
3594 size_t len;
3595
3596 pos = buf;
3597 end = pos + buflen;
3598
3599 if (res < 0) {
3600 if (strict)
3601 return 0;
3602 len = os_strlcpy(buf, "WPA-PSK WPA-EAP IEEE8021X WPA-NONE "
3603 "NONE", buflen);
3604 if (len >= buflen)
3605 return -1;
3606 return len;
3607 }
3608
3609 ret = os_snprintf(pos, end - pos, "NONE IEEE8021X");
3610 if (os_snprintf_error(end - pos, ret))
3611 return pos - buf;
3612 pos += ret;
3613
3614 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA |
3615 WPA_DRIVER_CAPA_KEY_MGMT_WPA2)) {
3616 ret = os_snprintf(pos, end - pos, " WPA-EAP");
3617 if (os_snprintf_error(end - pos, ret))
3618 return pos - buf;
3619 pos += ret;
3620 }
3621
3622 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK |
3623 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK)) {
3624 ret = os_snprintf(pos, end - pos, " WPA-PSK");
3625 if (os_snprintf_error(end - pos, ret))
3626 return pos - buf;
3627 pos += ret;
3628 }
3629
3630 if (capa->key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE) {
3631 ret = os_snprintf(pos, end - pos, " WPA-NONE");
3632 if (os_snprintf_error(end - pos, ret))
3633 return pos - buf;
3634 pos += ret;
3635 }
3636
3637 #ifdef CONFIG_SUITEB
3638 if (capa->key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_SUITE_B) {
3639 ret = os_snprintf(pos, end - pos, " WPA-EAP-SUITE-B");
3640 if (os_snprintf_error(end - pos, ret))
3641 return pos - buf;
3642 pos += ret;
3643 }
3644 #endif /* CONFIG_SUITEB */
3645 #ifdef CONFIG_SUITEB192
3646 if (capa->key_mgmt & WPA_DRIVER_CAPA_KEY_MGMT_SUITE_B_192) {
3647 ret = os_snprintf(pos, end - pos, " WPA-EAP-SUITE-B-192");
3648 if (os_snprintf_error(end - pos, ret))
3649 return pos - buf;
3650 pos += ret;
3651 }
3652 #endif /* CONFIG_SUITEB192 */
3653
3654 return pos - buf;
3655 }
3656
3657
ctrl_iface_get_capability_proto(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3658 static int ctrl_iface_get_capability_proto(int res, char *strict,
3659 struct wpa_driver_capa *capa,
3660 char *buf, size_t buflen)
3661 {
3662 int ret;
3663 char *pos, *end;
3664 size_t len;
3665
3666 pos = buf;
3667 end = pos + buflen;
3668
3669 if (res < 0) {
3670 if (strict)
3671 return 0;
3672 len = os_strlcpy(buf, "RSN WPA", buflen);
3673 if (len >= buflen)
3674 return -1;
3675 return len;
3676 }
3677
3678 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
3679 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK)) {
3680 ret = os_snprintf(pos, end - pos, "%sRSN",
3681 pos == buf ? "" : " ");
3682 if (os_snprintf_error(end - pos, ret))
3683 return pos - buf;
3684 pos += ret;
3685 }
3686
3687 if (capa->key_mgmt & (WPA_DRIVER_CAPA_KEY_MGMT_WPA |
3688 WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK)) {
3689 ret = os_snprintf(pos, end - pos, "%sWPA",
3690 pos == buf ? "" : " ");
3691 if (os_snprintf_error(end - pos, ret))
3692 return pos - buf;
3693 pos += ret;
3694 }
3695
3696 return pos - buf;
3697 }
3698
3699
ctrl_iface_get_capability_auth_alg(struct wpa_supplicant * wpa_s,int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3700 static int ctrl_iface_get_capability_auth_alg(struct wpa_supplicant *wpa_s,
3701 int res, char *strict,
3702 struct wpa_driver_capa *capa,
3703 char *buf, size_t buflen)
3704 {
3705 int ret;
3706 char *pos, *end;
3707 size_t len;
3708
3709 pos = buf;
3710 end = pos + buflen;
3711
3712 if (res < 0) {
3713 if (strict)
3714 return 0;
3715 len = os_strlcpy(buf, "OPEN SHARED LEAP", buflen);
3716 if (len >= buflen)
3717 return -1;
3718 return len;
3719 }
3720
3721 if (capa->auth & (WPA_DRIVER_AUTH_OPEN)) {
3722 ret = os_snprintf(pos, end - pos, "%sOPEN",
3723 pos == buf ? "" : " ");
3724 if (os_snprintf_error(end - pos, ret))
3725 return pos - buf;
3726 pos += ret;
3727 }
3728
3729 if (capa->auth & (WPA_DRIVER_AUTH_SHARED)) {
3730 ret = os_snprintf(pos, end - pos, "%sSHARED",
3731 pos == buf ? "" : " ");
3732 if (os_snprintf_error(end - pos, ret))
3733 return pos - buf;
3734 pos += ret;
3735 }
3736
3737 if (capa->auth & (WPA_DRIVER_AUTH_LEAP)) {
3738 ret = os_snprintf(pos, end - pos, "%sLEAP",
3739 pos == buf ? "" : " ");
3740 if (os_snprintf_error(end - pos, ret))
3741 return pos - buf;
3742 pos += ret;
3743 }
3744
3745 #ifdef CONFIG_SAE
3746 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SAE) {
3747 ret = os_snprintf(pos, end - pos, "%sSAE",
3748 pos == buf ? "" : " ");
3749 if (os_snprintf_error(end - pos, ret))
3750 return pos - buf;
3751 pos += ret;
3752 }
3753 #endif /* CONFIG_SAE */
3754
3755 return pos - buf;
3756 }
3757
3758
ctrl_iface_get_capability_modes(int res,char * strict,struct wpa_driver_capa * capa,char * buf,size_t buflen)3759 static int ctrl_iface_get_capability_modes(int res, char *strict,
3760 struct wpa_driver_capa *capa,
3761 char *buf, size_t buflen)
3762 {
3763 int ret;
3764 char *pos, *end;
3765 size_t len;
3766
3767 pos = buf;
3768 end = pos + buflen;
3769
3770 if (res < 0) {
3771 if (strict)
3772 return 0;
3773 len = os_strlcpy(buf, "IBSS AP", buflen);
3774 if (len >= buflen)
3775 return -1;
3776 return len;
3777 }
3778
3779 if (capa->flags & WPA_DRIVER_FLAGS_IBSS) {
3780 ret = os_snprintf(pos, end - pos, "%sIBSS",
3781 pos == buf ? "" : " ");
3782 if (os_snprintf_error(end - pos, ret))
3783 return pos - buf;
3784 pos += ret;
3785 }
3786
3787 if (capa->flags & WPA_DRIVER_FLAGS_AP) {
3788 ret = os_snprintf(pos, end - pos, "%sAP",
3789 pos == buf ? "" : " ");
3790 if (os_snprintf_error(end - pos, ret))
3791 return pos - buf;
3792 pos += ret;
3793 }
3794
3795 #ifdef CONFIG_MESH
3796 if (capa->flags & WPA_DRIVER_FLAGS_MESH) {
3797 ret = os_snprintf(pos, end - pos, "%sMESH",
3798 pos == buf ? "" : " ");
3799 if (os_snprintf_error(end - pos, ret))
3800 return pos - buf;
3801 pos += ret;
3802 }
3803 #endif /* CONFIG_MESH */
3804
3805 return pos - buf;
3806 }
3807
3808
ctrl_iface_get_capability_channels(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)3809 static int ctrl_iface_get_capability_channels(struct wpa_supplicant *wpa_s,
3810 char *buf, size_t buflen)
3811 {
3812 struct hostapd_channel_data *chnl;
3813 int ret, i, j;
3814 char *pos, *end, *hmode;
3815
3816 pos = buf;
3817 end = pos + buflen;
3818
3819 for (j = 0; j < wpa_s->hw.num_modes; j++) {
3820 switch (wpa_s->hw.modes[j].mode) {
3821 case HOSTAPD_MODE_IEEE80211B:
3822 hmode = "B";
3823 break;
3824 case HOSTAPD_MODE_IEEE80211G:
3825 hmode = "G";
3826 break;
3827 case HOSTAPD_MODE_IEEE80211A:
3828 hmode = "A";
3829 break;
3830 case HOSTAPD_MODE_IEEE80211AD:
3831 hmode = "AD";
3832 break;
3833 default:
3834 continue;
3835 }
3836 ret = os_snprintf(pos, end - pos, "Mode[%s] Channels:", hmode);
3837 if (os_snprintf_error(end - pos, ret))
3838 return pos - buf;
3839 pos += ret;
3840 chnl = wpa_s->hw.modes[j].channels;
3841 for (i = 0; i < wpa_s->hw.modes[j].num_channels; i++) {
3842 if (chnl[i].flag & HOSTAPD_CHAN_DISABLED)
3843 continue;
3844 ret = os_snprintf(pos, end - pos, " %d", chnl[i].chan);
3845 if (os_snprintf_error(end - pos, ret))
3846 return pos - buf;
3847 pos += ret;
3848 }
3849 ret = os_snprintf(pos, end - pos, "\n");
3850 if (os_snprintf_error(end - pos, ret))
3851 return pos - buf;
3852 pos += ret;
3853 }
3854
3855 return pos - buf;
3856 }
3857
3858
ctrl_iface_get_capability_freq(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)3859 static int ctrl_iface_get_capability_freq(struct wpa_supplicant *wpa_s,
3860 char *buf, size_t buflen)
3861 {
3862 struct hostapd_channel_data *chnl;
3863 int ret, i, j;
3864 char *pos, *end, *hmode;
3865
3866 pos = buf;
3867 end = pos + buflen;
3868
3869 for (j = 0; j < wpa_s->hw.num_modes; j++) {
3870 switch (wpa_s->hw.modes[j].mode) {
3871 case HOSTAPD_MODE_IEEE80211B:
3872 hmode = "B";
3873 break;
3874 case HOSTAPD_MODE_IEEE80211G:
3875 hmode = "G";
3876 break;
3877 case HOSTAPD_MODE_IEEE80211A:
3878 hmode = "A";
3879 break;
3880 case HOSTAPD_MODE_IEEE80211AD:
3881 hmode = "AD";
3882 break;
3883 default:
3884 continue;
3885 }
3886 ret = os_snprintf(pos, end - pos, "Mode[%s] Channels:\n",
3887 hmode);
3888 if (os_snprintf_error(end - pos, ret))
3889 return pos - buf;
3890 pos += ret;
3891 chnl = wpa_s->hw.modes[j].channels;
3892 for (i = 0; i < wpa_s->hw.modes[j].num_channels; i++) {
3893 if (chnl[i].flag & HOSTAPD_CHAN_DISABLED)
3894 continue;
3895 ret = os_snprintf(pos, end - pos, " %d = %d MHz%s%s\n",
3896 chnl[i].chan, chnl[i].freq,
3897 chnl[i].flag & HOSTAPD_CHAN_NO_IR ?
3898 " (NO_IR)" : "",
3899 chnl[i].flag & HOSTAPD_CHAN_RADAR ?
3900 " (DFS)" : "");
3901
3902 if (os_snprintf_error(end - pos, ret))
3903 return pos - buf;
3904 pos += ret;
3905 }
3906 ret = os_snprintf(pos, end - pos, "\n");
3907 if (os_snprintf_error(end - pos, ret))
3908 return pos - buf;
3909 pos += ret;
3910 }
3911
3912 return pos - buf;
3913 }
3914
3915
wpa_supplicant_ctrl_iface_get_capability(struct wpa_supplicant * wpa_s,const char * _field,char * buf,size_t buflen)3916 static int wpa_supplicant_ctrl_iface_get_capability(
3917 struct wpa_supplicant *wpa_s, const char *_field, char *buf,
3918 size_t buflen)
3919 {
3920 struct wpa_driver_capa capa;
3921 int res;
3922 char *strict;
3923 char field[30];
3924 size_t len;
3925
3926 /* Determine whether or not strict checking was requested */
3927 len = os_strlcpy(field, _field, sizeof(field));
3928 if (len >= sizeof(field))
3929 return -1;
3930 strict = os_strchr(field, ' ');
3931 if (strict != NULL) {
3932 *strict++ = '\0';
3933 if (os_strcmp(strict, "strict") != 0)
3934 return -1;
3935 }
3936
3937 wpa_printf(MSG_DEBUG, "CTRL_IFACE: GET_CAPABILITY '%s' %s",
3938 field, strict ? strict : "");
3939
3940 if (os_strcmp(field, "eap") == 0) {
3941 return eap_get_names(buf, buflen);
3942 }
3943
3944 res = wpa_drv_get_capa(wpa_s, &capa);
3945
3946 if (os_strcmp(field, "pairwise") == 0)
3947 return ctrl_iface_get_capability_pairwise(res, strict, &capa,
3948 buf, buflen);
3949
3950 if (os_strcmp(field, "group") == 0)
3951 return ctrl_iface_get_capability_group(res, strict, &capa,
3952 buf, buflen);
3953
3954 if (os_strcmp(field, "group_mgmt") == 0)
3955 return ctrl_iface_get_capability_group_mgmt(res, strict, &capa,
3956 buf, buflen);
3957
3958 if (os_strcmp(field, "key_mgmt") == 0)
3959 return ctrl_iface_get_capability_key_mgmt(res, strict, &capa,
3960 buf, buflen);
3961
3962 if (os_strcmp(field, "proto") == 0)
3963 return ctrl_iface_get_capability_proto(res, strict, &capa,
3964 buf, buflen);
3965
3966 if (os_strcmp(field, "auth_alg") == 0)
3967 return ctrl_iface_get_capability_auth_alg(wpa_s, res, strict,
3968 &capa, buf, buflen);
3969
3970 if (os_strcmp(field, "modes") == 0)
3971 return ctrl_iface_get_capability_modes(res, strict, &capa,
3972 buf, buflen);
3973
3974 if (os_strcmp(field, "channels") == 0)
3975 return ctrl_iface_get_capability_channels(wpa_s, buf, buflen);
3976
3977 if (os_strcmp(field, "freq") == 0)
3978 return ctrl_iface_get_capability_freq(wpa_s, buf, buflen);
3979
3980 #ifdef CONFIG_TDLS
3981 if (os_strcmp(field, "tdls") == 0)
3982 return ctrl_iface_get_capability_tdls(wpa_s, buf, buflen);
3983 #endif /* CONFIG_TDLS */
3984
3985 #ifdef CONFIG_ERP
3986 if (os_strcmp(field, "erp") == 0) {
3987 res = os_snprintf(buf, buflen, "ERP");
3988 if (os_snprintf_error(buflen, res))
3989 return -1;
3990 return res;
3991 }
3992 #endif /* CONFIG_EPR */
3993
3994 #ifdef CONFIG_FIPS
3995 if (os_strcmp(field, "fips") == 0) {
3996 res = os_snprintf(buf, buflen, "FIPS");
3997 if (os_snprintf_error(buflen, res))
3998 return -1;
3999 return res;
4000 }
4001 #endif /* CONFIG_FIPS */
4002
4003 #ifdef CONFIG_ACS
4004 if (os_strcmp(field, "acs") == 0) {
4005 res = os_snprintf(buf, buflen, "ACS");
4006 if (os_snprintf_error(buflen, res))
4007 return -1;
4008 return res;
4009 }
4010 #endif /* CONFIG_ACS */
4011
4012 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Unknown GET_CAPABILITY field '%s'",
4013 field);
4014
4015 return -1;
4016 }
4017
4018
4019 #ifdef CONFIG_INTERWORKING
anqp_add_hex(char * pos,char * end,const char * title,struct wpabuf * data)4020 static char * anqp_add_hex(char *pos, char *end, const char *title,
4021 struct wpabuf *data)
4022 {
4023 char *start = pos;
4024 size_t i;
4025 int ret;
4026 const u8 *d;
4027
4028 if (data == NULL)
4029 return start;
4030
4031 ret = os_snprintf(pos, end - pos, "%s=", title);
4032 if (os_snprintf_error(end - pos, ret))
4033 return start;
4034 pos += ret;
4035
4036 d = wpabuf_head_u8(data);
4037 for (i = 0; i < wpabuf_len(data); i++) {
4038 ret = os_snprintf(pos, end - pos, "%02x", *d++);
4039 if (os_snprintf_error(end - pos, ret))
4040 return start;
4041 pos += ret;
4042 }
4043
4044 ret = os_snprintf(pos, end - pos, "\n");
4045 if (os_snprintf_error(end - pos, ret))
4046 return start;
4047 pos += ret;
4048
4049 return pos;
4050 }
4051 #endif /* CONFIG_INTERWORKING */
4052
4053
print_bss_info(struct wpa_supplicant * wpa_s,struct wpa_bss * bss,unsigned long mask,char * buf,size_t buflen)4054 static int print_bss_info(struct wpa_supplicant *wpa_s, struct wpa_bss *bss,
4055 unsigned long mask, char *buf, size_t buflen)
4056 {
4057 size_t i;
4058 int ret;
4059 char *pos, *end;
4060 const u8 *ie, *ie2, *osen_ie;
4061
4062 pos = buf;
4063 end = buf + buflen;
4064
4065 if (mask & WPA_BSS_MASK_ID) {
4066 ret = os_snprintf(pos, end - pos, "id=%u\n", bss->id);
4067 if (os_snprintf_error(end - pos, ret))
4068 return 0;
4069 pos += ret;
4070 }
4071
4072 if (mask & WPA_BSS_MASK_BSSID) {
4073 ret = os_snprintf(pos, end - pos, "bssid=" MACSTR "\n",
4074 MAC2STR(bss->bssid));
4075 if (os_snprintf_error(end - pos, ret))
4076 return 0;
4077 pos += ret;
4078 }
4079
4080 if (mask & WPA_BSS_MASK_FREQ) {
4081 ret = os_snprintf(pos, end - pos, "freq=%d\n", bss->freq);
4082 if (os_snprintf_error(end - pos, ret))
4083 return 0;
4084 pos += ret;
4085 }
4086
4087 if (mask & WPA_BSS_MASK_BEACON_INT) {
4088 ret = os_snprintf(pos, end - pos, "beacon_int=%d\n",
4089 bss->beacon_int);
4090 if (os_snprintf_error(end - pos, ret))
4091 return 0;
4092 pos += ret;
4093 }
4094
4095 if (mask & WPA_BSS_MASK_CAPABILITIES) {
4096 ret = os_snprintf(pos, end - pos, "capabilities=0x%04x\n",
4097 bss->caps);
4098 if (os_snprintf_error(end - pos, ret))
4099 return 0;
4100 pos += ret;
4101 }
4102
4103 if (mask & WPA_BSS_MASK_QUAL) {
4104 ret = os_snprintf(pos, end - pos, "qual=%d\n", bss->qual);
4105 if (os_snprintf_error(end - pos, ret))
4106 return 0;
4107 pos += ret;
4108 }
4109
4110 if (mask & WPA_BSS_MASK_NOISE) {
4111 ret = os_snprintf(pos, end - pos, "noise=%d\n", bss->noise);
4112 if (os_snprintf_error(end - pos, ret))
4113 return 0;
4114 pos += ret;
4115 }
4116
4117 if (mask & WPA_BSS_MASK_LEVEL) {
4118 ret = os_snprintf(pos, end - pos, "level=%d\n", bss->level);
4119 if (os_snprintf_error(end - pos, ret))
4120 return 0;
4121 pos += ret;
4122 }
4123
4124 if (mask & WPA_BSS_MASK_TSF) {
4125 ret = os_snprintf(pos, end - pos, "tsf=%016llu\n",
4126 (unsigned long long) bss->tsf);
4127 if (os_snprintf_error(end - pos, ret))
4128 return 0;
4129 pos += ret;
4130 }
4131
4132 if (mask & WPA_BSS_MASK_AGE) {
4133 struct os_reltime now;
4134
4135 os_get_reltime(&now);
4136 ret = os_snprintf(pos, end - pos, "age=%d\n",
4137 (int) (now.sec - bss->last_update.sec));
4138 if (os_snprintf_error(end - pos, ret))
4139 return 0;
4140 pos += ret;
4141 }
4142
4143 if (mask & WPA_BSS_MASK_IE) {
4144 ret = os_snprintf(pos, end - pos, "ie=");
4145 if (os_snprintf_error(end - pos, ret))
4146 return 0;
4147 pos += ret;
4148
4149 ie = (const u8 *) (bss + 1);
4150 for (i = 0; i < bss->ie_len; i++) {
4151 ret = os_snprintf(pos, end - pos, "%02x", *ie++);
4152 if (os_snprintf_error(end - pos, ret))
4153 return 0;
4154 pos += ret;
4155 }
4156
4157 ret = os_snprintf(pos, end - pos, "\n");
4158 if (os_snprintf_error(end - pos, ret))
4159 return 0;
4160 pos += ret;
4161 }
4162
4163 if (mask & WPA_BSS_MASK_FLAGS) {
4164 ret = os_snprintf(pos, end - pos, "flags=");
4165 if (os_snprintf_error(end - pos, ret))
4166 return 0;
4167 pos += ret;
4168
4169 ie = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
4170 if (ie)
4171 pos = wpa_supplicant_ie_txt(pos, end, "WPA", ie,
4172 2 + ie[1]);
4173 ie2 = wpa_bss_get_ie(bss, WLAN_EID_RSN);
4174 if (ie2)
4175 pos = wpa_supplicant_ie_txt(pos, end, "WPA2", ie2,
4176 2 + ie2[1]);
4177 osen_ie = wpa_bss_get_vendor_ie(bss, OSEN_IE_VENDOR_TYPE);
4178 if (osen_ie)
4179 pos = wpa_supplicant_ie_txt(pos, end, "OSEN",
4180 osen_ie, 2 + osen_ie[1]);
4181 pos = wpa_supplicant_wps_ie_txt(wpa_s, pos, end, bss);
4182 if (!ie && !ie2 && !osen_ie &&
4183 (bss->caps & IEEE80211_CAP_PRIVACY)) {
4184 ret = os_snprintf(pos, end - pos, "[WEP]");
4185 if (os_snprintf_error(end - pos, ret))
4186 return 0;
4187 pos += ret;
4188 }
4189 if (bss_is_dmg(bss)) {
4190 const char *s;
4191 ret = os_snprintf(pos, end - pos, "[DMG]");
4192 if (os_snprintf_error(end - pos, ret))
4193 return 0;
4194 pos += ret;
4195 switch (bss->caps & IEEE80211_CAP_DMG_MASK) {
4196 case IEEE80211_CAP_DMG_IBSS:
4197 s = "[IBSS]";
4198 break;
4199 case IEEE80211_CAP_DMG_AP:
4200 s = "[ESS]";
4201 break;
4202 case IEEE80211_CAP_DMG_PBSS:
4203 s = "[PBSS]";
4204 break;
4205 default:
4206 s = "";
4207 break;
4208 }
4209 ret = os_snprintf(pos, end - pos, "%s", s);
4210 if (os_snprintf_error(end - pos, ret))
4211 return 0;
4212 pos += ret;
4213 } else {
4214 if (bss->caps & IEEE80211_CAP_IBSS) {
4215 ret = os_snprintf(pos, end - pos, "[IBSS]");
4216 if (os_snprintf_error(end - pos, ret))
4217 return 0;
4218 pos += ret;
4219 }
4220 if (bss->caps & IEEE80211_CAP_ESS) {
4221 ret = os_snprintf(pos, end - pos, "[ESS]");
4222 if (os_snprintf_error(end - pos, ret))
4223 return 0;
4224 pos += ret;
4225 }
4226 }
4227 if (wpa_bss_get_vendor_ie(bss, P2P_IE_VENDOR_TYPE) ||
4228 wpa_bss_get_vendor_ie_beacon(bss, P2P_IE_VENDOR_TYPE)) {
4229 ret = os_snprintf(pos, end - pos, "[P2P]");
4230 if (os_snprintf_error(end - pos, ret))
4231 return 0;
4232 pos += ret;
4233 }
4234 #ifdef CONFIG_HS20
4235 if (wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE)) {
4236 ret = os_snprintf(pos, end - pos, "[HS20]");
4237 if (os_snprintf_error(end - pos, ret))
4238 return 0;
4239 pos += ret;
4240 }
4241 #endif /* CONFIG_HS20 */
4242
4243 ret = os_snprintf(pos, end - pos, "\n");
4244 if (os_snprintf_error(end - pos, ret))
4245 return 0;
4246 pos += ret;
4247 }
4248
4249 if (mask & WPA_BSS_MASK_SSID) {
4250 ret = os_snprintf(pos, end - pos, "ssid=%s\n",
4251 wpa_ssid_txt(bss->ssid, bss->ssid_len));
4252 if (os_snprintf_error(end - pos, ret))
4253 return 0;
4254 pos += ret;
4255 }
4256
4257 #ifdef CONFIG_WPS
4258 if (mask & WPA_BSS_MASK_WPS_SCAN) {
4259 ie = (const u8 *) (bss + 1);
4260 ret = wpas_wps_scan_result_text(ie, bss->ie_len, pos, end);
4261 if (ret >= end - pos)
4262 return 0;
4263 if (ret > 0)
4264 pos += ret;
4265 }
4266 #endif /* CONFIG_WPS */
4267
4268 #ifdef CONFIG_P2P
4269 if (mask & WPA_BSS_MASK_P2P_SCAN) {
4270 ie = (const u8 *) (bss + 1);
4271 ret = wpas_p2p_scan_result_text(ie, bss->ie_len, pos, end);
4272 if (ret < 0 || ret >= end - pos)
4273 return 0;
4274 pos += ret;
4275 }
4276 #endif /* CONFIG_P2P */
4277
4278 #ifdef CONFIG_WIFI_DISPLAY
4279 if (mask & WPA_BSS_MASK_WIFI_DISPLAY) {
4280 struct wpabuf *wfd;
4281 ie = (const u8 *) (bss + 1);
4282 wfd = ieee802_11_vendor_ie_concat(ie, bss->ie_len,
4283 WFD_IE_VENDOR_TYPE);
4284 if (wfd) {
4285 ret = os_snprintf(pos, end - pos, "wfd_subelems=");
4286 if (os_snprintf_error(end - pos, ret)) {
4287 wpabuf_free(wfd);
4288 return 0;
4289 }
4290 pos += ret;
4291
4292 pos += wpa_snprintf_hex(pos, end - pos,
4293 wpabuf_head(wfd),
4294 wpabuf_len(wfd));
4295 wpabuf_free(wfd);
4296
4297 ret = os_snprintf(pos, end - pos, "\n");
4298 if (os_snprintf_error(end - pos, ret))
4299 return 0;
4300 pos += ret;
4301 }
4302 }
4303 #endif /* CONFIG_WIFI_DISPLAY */
4304
4305 #ifdef CONFIG_INTERWORKING
4306 if ((mask & WPA_BSS_MASK_INTERNETW) && bss->anqp) {
4307 struct wpa_bss_anqp *anqp = bss->anqp;
4308 struct wpa_bss_anqp_elem *elem;
4309
4310 pos = anqp_add_hex(pos, end, "anqp_capability_list",
4311 anqp->capability_list);
4312 pos = anqp_add_hex(pos, end, "anqp_venue_name",
4313 anqp->venue_name);
4314 pos = anqp_add_hex(pos, end, "anqp_network_auth_type",
4315 anqp->network_auth_type);
4316 pos = anqp_add_hex(pos, end, "anqp_roaming_consortium",
4317 anqp->roaming_consortium);
4318 pos = anqp_add_hex(pos, end, "anqp_ip_addr_type_availability",
4319 anqp->ip_addr_type_availability);
4320 pos = anqp_add_hex(pos, end, "anqp_nai_realm",
4321 anqp->nai_realm);
4322 pos = anqp_add_hex(pos, end, "anqp_3gpp", anqp->anqp_3gpp);
4323 pos = anqp_add_hex(pos, end, "anqp_domain_name",
4324 anqp->domain_name);
4325 #ifdef CONFIG_HS20
4326 pos = anqp_add_hex(pos, end, "hs20_capability_list",
4327 anqp->hs20_capability_list);
4328 pos = anqp_add_hex(pos, end, "hs20_operator_friendly_name",
4329 anqp->hs20_operator_friendly_name);
4330 pos = anqp_add_hex(pos, end, "hs20_wan_metrics",
4331 anqp->hs20_wan_metrics);
4332 pos = anqp_add_hex(pos, end, "hs20_connection_capability",
4333 anqp->hs20_connection_capability);
4334 pos = anqp_add_hex(pos, end, "hs20_operating_class",
4335 anqp->hs20_operating_class);
4336 pos = anqp_add_hex(pos, end, "hs20_osu_providers_list",
4337 anqp->hs20_osu_providers_list);
4338 #endif /* CONFIG_HS20 */
4339
4340 dl_list_for_each(elem, &anqp->anqp_elems,
4341 struct wpa_bss_anqp_elem, list) {
4342 char title[20];
4343
4344 os_snprintf(title, sizeof(title), "anqp[%u]",
4345 elem->infoid);
4346 pos = anqp_add_hex(pos, end, title, elem->payload);
4347 }
4348 }
4349 #endif /* CONFIG_INTERWORKING */
4350
4351 #ifdef CONFIG_MESH
4352 if (mask & WPA_BSS_MASK_MESH_SCAN) {
4353 ie = (const u8 *) (bss + 1);
4354 ret = wpas_mesh_scan_result_text(ie, bss->ie_len, pos, end);
4355 if (ret < 0 || ret >= end - pos)
4356 return 0;
4357 pos += ret;
4358 }
4359 #endif /* CONFIG_MESH */
4360
4361 if (mask & WPA_BSS_MASK_SNR) {
4362 ret = os_snprintf(pos, end - pos, "snr=%d\n", bss->snr);
4363 if (os_snprintf_error(end - pos, ret))
4364 return 0;
4365 pos += ret;
4366 }
4367
4368 if (mask & WPA_BSS_MASK_EST_THROUGHPUT) {
4369 ret = os_snprintf(pos, end - pos, "est_throughput=%d\n",
4370 bss->est_throughput);
4371 if (os_snprintf_error(end - pos, ret))
4372 return 0;
4373 pos += ret;
4374 }
4375
4376 #ifdef CONFIG_FST
4377 if (mask & WPA_BSS_MASK_FST) {
4378 ret = fst_ctrl_iface_mb_info(bss->bssid, pos, end - pos);
4379 if (ret < 0 || ret >= end - pos)
4380 return 0;
4381 pos += ret;
4382 }
4383 #endif /* CONFIG_FST */
4384
4385 if (mask & WPA_BSS_MASK_DELIM) {
4386 ret = os_snprintf(pos, end - pos, "====\n");
4387 if (os_snprintf_error(end - pos, ret))
4388 return 0;
4389 pos += ret;
4390 }
4391
4392 return pos - buf;
4393 }
4394
4395
wpa_supplicant_ctrl_iface_bss(struct wpa_supplicant * wpa_s,const char * cmd,char * buf,size_t buflen)4396 static int wpa_supplicant_ctrl_iface_bss(struct wpa_supplicant *wpa_s,
4397 const char *cmd, char *buf,
4398 size_t buflen)
4399 {
4400 u8 bssid[ETH_ALEN];
4401 size_t i;
4402 struct wpa_bss *bss;
4403 struct wpa_bss *bsslast = NULL;
4404 struct dl_list *next;
4405 int ret = 0;
4406 int len;
4407 char *ctmp, *end = buf + buflen;
4408 unsigned long mask = WPA_BSS_MASK_ALL;
4409
4410 if (os_strncmp(cmd, "RANGE=", 6) == 0) {
4411 if (os_strncmp(cmd + 6, "ALL", 3) == 0) {
4412 bss = dl_list_first(&wpa_s->bss_id, struct wpa_bss,
4413 list_id);
4414 bsslast = dl_list_last(&wpa_s->bss_id, struct wpa_bss,
4415 list_id);
4416 } else { /* N1-N2 */
4417 unsigned int id1, id2;
4418
4419 if ((ctmp = os_strchr(cmd + 6, '-')) == NULL) {
4420 wpa_printf(MSG_INFO, "Wrong BSS range "
4421 "format");
4422 return 0;
4423 }
4424
4425 if (*(cmd + 6) == '-')
4426 id1 = 0;
4427 else
4428 id1 = atoi(cmd + 6);
4429 ctmp++;
4430 if (*ctmp >= '0' && *ctmp <= '9')
4431 id2 = atoi(ctmp);
4432 else
4433 id2 = (unsigned int) -1;
4434 bss = wpa_bss_get_id_range(wpa_s, id1, id2);
4435 if (id2 == (unsigned int) -1)
4436 bsslast = dl_list_last(&wpa_s->bss_id,
4437 struct wpa_bss,
4438 list_id);
4439 else {
4440 bsslast = wpa_bss_get_id(wpa_s, id2);
4441 if (bsslast == NULL && bss && id2 > id1) {
4442 struct wpa_bss *tmp = bss;
4443 for (;;) {
4444 next = tmp->list_id.next;
4445 if (next == &wpa_s->bss_id)
4446 break;
4447 tmp = dl_list_entry(
4448 next, struct wpa_bss,
4449 list_id);
4450 if (tmp->id > id2)
4451 break;
4452 bsslast = tmp;
4453 }
4454 }
4455 }
4456 }
4457 } else if (os_strncmp(cmd, "FIRST", 5) == 0)
4458 bss = dl_list_first(&wpa_s->bss_id, struct wpa_bss, list_id);
4459 else if (os_strncmp(cmd, "LAST", 4) == 0)
4460 bss = dl_list_last(&wpa_s->bss_id, struct wpa_bss, list_id);
4461 else if (os_strncmp(cmd, "ID-", 3) == 0) {
4462 i = atoi(cmd + 3);
4463 bss = wpa_bss_get_id(wpa_s, i);
4464 } else if (os_strncmp(cmd, "NEXT-", 5) == 0) {
4465 i = atoi(cmd + 5);
4466 bss = wpa_bss_get_id(wpa_s, i);
4467 if (bss) {
4468 next = bss->list_id.next;
4469 if (next == &wpa_s->bss_id)
4470 bss = NULL;
4471 else
4472 bss = dl_list_entry(next, struct wpa_bss,
4473 list_id);
4474 }
4475 #ifdef CONFIG_P2P
4476 } else if (os_strncmp(cmd, "p2p_dev_addr=", 13) == 0) {
4477 if (hwaddr_aton(cmd + 13, bssid) == 0)
4478 bss = wpa_bss_get_p2p_dev_addr(wpa_s, bssid);
4479 else
4480 bss = NULL;
4481 #endif /* CONFIG_P2P */
4482 } else if (hwaddr_aton(cmd, bssid) == 0)
4483 bss = wpa_bss_get_bssid(wpa_s, bssid);
4484 else {
4485 struct wpa_bss *tmp;
4486 i = atoi(cmd);
4487 bss = NULL;
4488 dl_list_for_each(tmp, &wpa_s->bss_id, struct wpa_bss, list_id)
4489 {
4490 if (i-- == 0) {
4491 bss = tmp;
4492 break;
4493 }
4494 }
4495 }
4496
4497 if ((ctmp = os_strstr(cmd, "MASK=")) != NULL) {
4498 mask = strtoul(ctmp + 5, NULL, 0x10);
4499 if (mask == 0)
4500 mask = WPA_BSS_MASK_ALL;
4501 }
4502
4503 if (bss == NULL)
4504 return 0;
4505
4506 if (bsslast == NULL)
4507 bsslast = bss;
4508 do {
4509 len = print_bss_info(wpa_s, bss, mask, buf, buflen);
4510 ret += len;
4511 buf += len;
4512 buflen -= len;
4513 if (bss == bsslast) {
4514 if ((mask & WPA_BSS_MASK_DELIM) && len &&
4515 (bss == dl_list_last(&wpa_s->bss_id,
4516 struct wpa_bss, list_id))) {
4517 int res;
4518
4519 res = os_snprintf(buf - 5, end - buf + 5,
4520 "####\n");
4521 if (os_snprintf_error(end - buf + 5, res)) {
4522 wpa_printf(MSG_DEBUG,
4523 "Could not add end delim");
4524 }
4525 }
4526 break;
4527 }
4528 next = bss->list_id.next;
4529 if (next == &wpa_s->bss_id)
4530 break;
4531 bss = dl_list_entry(next, struct wpa_bss, list_id);
4532 } while (bss && len);
4533
4534 return ret;
4535 }
4536
4537
wpa_supplicant_ctrl_iface_ap_scan(struct wpa_supplicant * wpa_s,char * cmd)4538 static int wpa_supplicant_ctrl_iface_ap_scan(
4539 struct wpa_supplicant *wpa_s, char *cmd)
4540 {
4541 int ap_scan = atoi(cmd);
4542 return wpa_supplicant_set_ap_scan(wpa_s, ap_scan);
4543 }
4544
4545
wpa_supplicant_ctrl_iface_scan_interval(struct wpa_supplicant * wpa_s,char * cmd)4546 static int wpa_supplicant_ctrl_iface_scan_interval(
4547 struct wpa_supplicant *wpa_s, char *cmd)
4548 {
4549 int scan_int = atoi(cmd);
4550 return wpa_supplicant_set_scan_interval(wpa_s, scan_int);
4551 }
4552
4553
wpa_supplicant_ctrl_iface_bss_expire_age(struct wpa_supplicant * wpa_s,char * cmd)4554 static int wpa_supplicant_ctrl_iface_bss_expire_age(
4555 struct wpa_supplicant *wpa_s, char *cmd)
4556 {
4557 int expire_age = atoi(cmd);
4558 return wpa_supplicant_set_bss_expiration_age(wpa_s, expire_age);
4559 }
4560
4561
wpa_supplicant_ctrl_iface_bss_expire_count(struct wpa_supplicant * wpa_s,char * cmd)4562 static int wpa_supplicant_ctrl_iface_bss_expire_count(
4563 struct wpa_supplicant *wpa_s, char *cmd)
4564 {
4565 int expire_count = atoi(cmd);
4566 return wpa_supplicant_set_bss_expiration_count(wpa_s, expire_count);
4567 }
4568
4569
wpa_supplicant_ctrl_iface_bss_flush(struct wpa_supplicant * wpa_s,char * cmd)4570 static void wpa_supplicant_ctrl_iface_bss_flush(
4571 struct wpa_supplicant *wpa_s, char *cmd)
4572 {
4573 int flush_age = atoi(cmd);
4574
4575 if (flush_age == 0)
4576 wpa_bss_flush(wpa_s);
4577 else
4578 wpa_bss_flush_by_age(wpa_s, flush_age);
4579 }
4580
4581
4582 #ifdef CONFIG_TESTING_OPTIONS
wpa_supplicant_ctrl_iface_drop_sa(struct wpa_supplicant * wpa_s)4583 static void wpa_supplicant_ctrl_iface_drop_sa(struct wpa_supplicant *wpa_s)
4584 {
4585 wpa_printf(MSG_DEBUG, "Dropping SA without deauthentication");
4586 /* MLME-DELETEKEYS.request */
4587 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 0, 0, NULL, 0, NULL, 0);
4588 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 1, 0, NULL, 0, NULL, 0);
4589 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 2, 0, NULL, 0, NULL, 0);
4590 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 3, 0, NULL, 0, NULL, 0);
4591 #ifdef CONFIG_IEEE80211W
4592 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 4, 0, NULL, 0, NULL, 0);
4593 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, NULL, 5, 0, NULL, 0, NULL, 0);
4594 #endif /* CONFIG_IEEE80211W */
4595
4596 wpa_drv_set_key(wpa_s, WPA_ALG_NONE, wpa_s->bssid, 0, 0, NULL, 0, NULL,
4597 0);
4598 /* MLME-SETPROTECTION.request(None) */
4599 wpa_drv_mlme_setprotection(wpa_s, wpa_s->bssid,
4600 MLME_SETPROTECTION_PROTECT_TYPE_NONE,
4601 MLME_SETPROTECTION_KEY_TYPE_PAIRWISE);
4602 wpa_sm_drop_sa(wpa_s->wpa);
4603 }
4604 #endif /* CONFIG_TESTING_OPTIONS */
4605
4606
wpa_supplicant_ctrl_iface_roam(struct wpa_supplicant * wpa_s,char * addr)4607 static int wpa_supplicant_ctrl_iface_roam(struct wpa_supplicant *wpa_s,
4608 char *addr)
4609 {
4610 #ifdef CONFIG_NO_SCAN_PROCESSING
4611 return -1;
4612 #else /* CONFIG_NO_SCAN_PROCESSING */
4613 u8 bssid[ETH_ALEN];
4614 struct wpa_bss *bss;
4615 struct wpa_ssid *ssid = wpa_s->current_ssid;
4616
4617 if (hwaddr_aton(addr, bssid)) {
4618 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: invalid "
4619 "address '%s'", addr);
4620 return -1;
4621 }
4622
4623 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM " MACSTR, MAC2STR(bssid));
4624
4625 if (!ssid) {
4626 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: No network "
4627 "configuration known for the target AP");
4628 return -1;
4629 }
4630
4631 bss = wpa_bss_get(wpa_s, bssid, ssid->ssid, ssid->ssid_len);
4632 if (!bss) {
4633 wpa_printf(MSG_DEBUG, "CTRL_IFACE ROAM: Target AP not found "
4634 "from BSS table");
4635 return -1;
4636 }
4637
4638 /*
4639 * TODO: Find best network configuration block from configuration to
4640 * allow roaming to other networks
4641 */
4642
4643 wpa_s->reassociate = 1;
4644 wpa_supplicant_connect(wpa_s, bss, ssid);
4645
4646 return 0;
4647 #endif /* CONFIG_NO_SCAN_PROCESSING */
4648 }
4649
4650
4651 #ifdef CONFIG_P2P
p2p_ctrl_find(struct wpa_supplicant * wpa_s,char * cmd)4652 static int p2p_ctrl_find(struct wpa_supplicant *wpa_s, char *cmd)
4653 {
4654 unsigned int timeout = atoi(cmd);
4655 enum p2p_discovery_type type = P2P_FIND_START_WITH_FULL;
4656 u8 dev_id[ETH_ALEN], *_dev_id = NULL;
4657 u8 dev_type[WPS_DEV_TYPE_LEN], *_dev_type = NULL;
4658 char *pos;
4659 unsigned int search_delay;
4660 const char *_seek[P2P_MAX_QUERY_HASH + 1], **seek = NULL;
4661 u8 seek_count = 0;
4662 int freq = 0;
4663
4664 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
4665 wpa_dbg(wpa_s, MSG_INFO,
4666 "Reject P2P_FIND since interface is disabled");
4667 return -1;
4668 }
4669 if (os_strstr(cmd, "type=social"))
4670 type = P2P_FIND_ONLY_SOCIAL;
4671 else if (os_strstr(cmd, "type=progressive"))
4672 type = P2P_FIND_PROGRESSIVE;
4673
4674 pos = os_strstr(cmd, "dev_id=");
4675 if (pos) {
4676 pos += 7;
4677 if (hwaddr_aton(pos, dev_id))
4678 return -1;
4679 _dev_id = dev_id;
4680 }
4681
4682 pos = os_strstr(cmd, "dev_type=");
4683 if (pos) {
4684 pos += 9;
4685 if (wps_dev_type_str2bin(pos, dev_type) < 0)
4686 return -1;
4687 _dev_type = dev_type;
4688 }
4689
4690 pos = os_strstr(cmd, "delay=");
4691 if (pos) {
4692 pos += 6;
4693 search_delay = atoi(pos);
4694 } else
4695 search_delay = wpas_p2p_search_delay(wpa_s);
4696
4697 pos = os_strstr(cmd, "freq=");
4698 if (pos) {
4699 pos += 5;
4700 freq = atoi(pos);
4701 if (freq <= 0)
4702 return -1;
4703 }
4704
4705 /* Must be searched for last, because it adds nul termination */
4706 pos = os_strstr(cmd, " seek=");
4707 if (pos)
4708 pos += 6;
4709 while (pos && seek_count < P2P_MAX_QUERY_HASH + 1) {
4710 char *term;
4711
4712 _seek[seek_count++] = pos;
4713 seek = _seek;
4714 term = os_strchr(pos, ' ');
4715 if (!term)
4716 break;
4717 *term = '\0';
4718 pos = os_strstr(term + 1, "seek=");
4719 if (pos)
4720 pos += 5;
4721 }
4722 if (seek_count > P2P_MAX_QUERY_HASH) {
4723 seek[0] = NULL;
4724 seek_count = 1;
4725 }
4726
4727 return wpas_p2p_find(wpa_s, timeout, type, _dev_type != NULL, _dev_type,
4728 _dev_id, search_delay, seek_count, seek, freq);
4729 }
4730
4731
p2ps_ctrl_parse_cpt_priority(const char * pos,u8 * cpt)4732 static int p2ps_ctrl_parse_cpt_priority(const char *pos, u8 *cpt)
4733 {
4734 const char *last = NULL;
4735 const char *token;
4736 long int token_len;
4737 unsigned int i;
4738
4739 /* Expected predefined CPT names delimited by ':' */
4740 for (i = 0; (token = cstr_token(pos, ": \t", &last)); i++) {
4741 if (i >= P2PS_FEATURE_CAPAB_CPT_MAX) {
4742 wpa_printf(MSG_ERROR,
4743 "P2PS: CPT name list is too long, expected up to %d names",
4744 P2PS_FEATURE_CAPAB_CPT_MAX);
4745 cpt[0] = 0;
4746 return -1;
4747 }
4748
4749 token_len = last - token;
4750
4751 if (token_len == 3 &&
4752 os_memcmp(token, "UDP", token_len) == 0) {
4753 cpt[i] = P2PS_FEATURE_CAPAB_UDP_TRANSPORT;
4754 } else if (token_len == 3 &&
4755 os_memcmp(token, "MAC", token_len) == 0) {
4756 cpt[i] = P2PS_FEATURE_CAPAB_MAC_TRANSPORT;
4757 } else {
4758 wpa_printf(MSG_ERROR,
4759 "P2PS: Unsupported CPT name '%s'", token);
4760 cpt[0] = 0;
4761 return -1;
4762 }
4763
4764 if (isblank((unsigned char) *last)) {
4765 i++;
4766 break;
4767 }
4768 }
4769 cpt[i] = 0;
4770 return 0;
4771 }
4772
4773
p2p_parse_asp_provision_cmd(const char * cmd)4774 static struct p2ps_provision * p2p_parse_asp_provision_cmd(const char *cmd)
4775 {
4776 struct p2ps_provision *p2ps_prov;
4777 char *pos;
4778 size_t info_len = 0;
4779 char *info = NULL;
4780 u8 role = P2PS_SETUP_NONE;
4781 long long unsigned val;
4782 int i;
4783
4784 pos = os_strstr(cmd, "info=");
4785 if (pos) {
4786 pos += 5;
4787 info_len = os_strlen(pos);
4788
4789 if (info_len) {
4790 info = os_malloc(info_len + 1);
4791 if (info) {
4792 info_len = utf8_unescape(pos, info_len,
4793 info, info_len + 1);
4794 } else
4795 info_len = 0;
4796 }
4797 }
4798
4799 p2ps_prov = os_zalloc(sizeof(struct p2ps_provision) + info_len + 1);
4800 if (p2ps_prov == NULL) {
4801 os_free(info);
4802 return NULL;
4803 }
4804
4805 if (info) {
4806 os_memcpy(p2ps_prov->info, info, info_len);
4807 p2ps_prov->info[info_len] = '\0';
4808 os_free(info);
4809 }
4810
4811 pos = os_strstr(cmd, "status=");
4812 if (pos)
4813 p2ps_prov->status = atoi(pos + 7);
4814 else
4815 p2ps_prov->status = -1;
4816
4817 pos = os_strstr(cmd, "adv_id=");
4818 if (!pos || sscanf(pos + 7, "%llx", &val) != 1 || val > 0xffffffffULL)
4819 goto invalid_args;
4820 p2ps_prov->adv_id = val;
4821
4822 pos = os_strstr(cmd, "method=");
4823 if (pos)
4824 p2ps_prov->method = strtol(pos + 7, NULL, 16);
4825 else
4826 p2ps_prov->method = 0;
4827
4828 pos = os_strstr(cmd, "session=");
4829 if (!pos || sscanf(pos + 8, "%llx", &val) != 1 || val > 0xffffffffULL)
4830 goto invalid_args;
4831 p2ps_prov->session_id = val;
4832
4833 pos = os_strstr(cmd, "adv_mac=");
4834 if (!pos || hwaddr_aton(pos + 8, p2ps_prov->adv_mac))
4835 goto invalid_args;
4836
4837 pos = os_strstr(cmd, "session_mac=");
4838 if (!pos || hwaddr_aton(pos + 12, p2ps_prov->session_mac))
4839 goto invalid_args;
4840
4841 pos = os_strstr(cmd, "cpt=");
4842 if (pos) {
4843 if (p2ps_ctrl_parse_cpt_priority(pos + 4,
4844 p2ps_prov->cpt_priority))
4845 goto invalid_args;
4846 } else {
4847 p2ps_prov->cpt_priority[0] = P2PS_FEATURE_CAPAB_UDP_TRANSPORT;
4848 }
4849
4850 for (i = 0; p2ps_prov->cpt_priority[i]; i++)
4851 p2ps_prov->cpt_mask |= p2ps_prov->cpt_priority[i];
4852
4853 /* force conncap with tstCap (no sanity checks) */
4854 pos = os_strstr(cmd, "tstCap=");
4855 if (pos) {
4856 role = strtol(pos + 7, NULL, 16);
4857 } else {
4858 pos = os_strstr(cmd, "role=");
4859 if (pos) {
4860 role = strtol(pos + 5, NULL, 16);
4861 if (role != P2PS_SETUP_CLIENT &&
4862 role != P2PS_SETUP_GROUP_OWNER)
4863 role = P2PS_SETUP_NONE;
4864 }
4865 }
4866 p2ps_prov->role = role;
4867
4868 return p2ps_prov;
4869
4870 invalid_args:
4871 os_free(p2ps_prov);
4872 return NULL;
4873 }
4874
4875
p2p_ctrl_asp_provision_resp(struct wpa_supplicant * wpa_s,char * cmd)4876 static int p2p_ctrl_asp_provision_resp(struct wpa_supplicant *wpa_s, char *cmd)
4877 {
4878 u8 addr[ETH_ALEN];
4879 struct p2ps_provision *p2ps_prov;
4880 char *pos;
4881
4882 /* <addr> id=<adv_id> [role=<conncap>] [info=<infodata>] */
4883
4884 wpa_printf(MSG_DEBUG, "%s: %s", __func__, cmd);
4885
4886 if (hwaddr_aton(cmd, addr))
4887 return -1;
4888
4889 pos = cmd + 17;
4890 if (*pos != ' ')
4891 return -1;
4892
4893 p2ps_prov = p2p_parse_asp_provision_cmd(pos);
4894 if (!p2ps_prov)
4895 return -1;
4896
4897 if (p2ps_prov->status < 0) {
4898 os_free(p2ps_prov);
4899 return -1;
4900 }
4901
4902 return wpas_p2p_prov_disc(wpa_s, addr, NULL, WPAS_P2P_PD_FOR_ASP,
4903 p2ps_prov);
4904 }
4905
4906
p2p_ctrl_asp_provision(struct wpa_supplicant * wpa_s,char * cmd)4907 static int p2p_ctrl_asp_provision(struct wpa_supplicant *wpa_s, char *cmd)
4908 {
4909 u8 addr[ETH_ALEN];
4910 struct p2ps_provision *p2ps_prov;
4911 char *pos;
4912
4913 /* <addr> id=<adv_id> adv_mac=<adv_mac> conncap=<conncap>
4914 * session=<ses_id> mac=<ses_mac> [info=<infodata>]
4915 */
4916
4917 wpa_printf(MSG_DEBUG, "%s: %s", __func__, cmd);
4918 if (hwaddr_aton(cmd, addr))
4919 return -1;
4920
4921 pos = cmd + 17;
4922 if (*pos != ' ')
4923 return -1;
4924
4925 p2ps_prov = p2p_parse_asp_provision_cmd(pos);
4926 if (!p2ps_prov)
4927 return -1;
4928
4929 p2ps_prov->pd_seeker = 1;
4930
4931 return wpas_p2p_prov_disc(wpa_s, addr, NULL, WPAS_P2P_PD_FOR_ASP,
4932 p2ps_prov);
4933 }
4934
4935
parse_freq(int chwidth,int freq2)4936 static int parse_freq(int chwidth, int freq2)
4937 {
4938 if (freq2 < 0)
4939 return -1;
4940 if (freq2)
4941 return VHT_CHANWIDTH_80P80MHZ;
4942
4943 switch (chwidth) {
4944 case 0:
4945 case 20:
4946 case 40:
4947 return VHT_CHANWIDTH_USE_HT;
4948 case 80:
4949 return VHT_CHANWIDTH_80MHZ;
4950 case 160:
4951 return VHT_CHANWIDTH_160MHZ;
4952 default:
4953 wpa_printf(MSG_DEBUG, "Unknown max oper bandwidth: %d",
4954 chwidth);
4955 return -1;
4956 }
4957 }
4958
4959
p2p_ctrl_connect(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)4960 static int p2p_ctrl_connect(struct wpa_supplicant *wpa_s, char *cmd,
4961 char *buf, size_t buflen)
4962 {
4963 u8 addr[ETH_ALEN];
4964 char *pos, *pos2;
4965 char *pin = NULL;
4966 enum p2p_wps_method wps_method;
4967 int new_pin;
4968 int ret;
4969 int persistent_group, persistent_id = -1;
4970 int join;
4971 int auth;
4972 int automatic;
4973 int go_intent = -1;
4974 int freq = 0;
4975 int pd;
4976 int ht40, vht, max_oper_chwidth, chwidth = 0, freq2 = 0;
4977 u8 _group_ssid[SSID_MAX_LEN], *group_ssid = NULL;
4978 size_t group_ssid_len = 0;
4979
4980 if (!wpa_s->global->p2p_init_wpa_s)
4981 return -1;
4982 if (wpa_s->global->p2p_init_wpa_s != wpa_s) {
4983 wpa_dbg(wpa_s, MSG_DEBUG, "Direct P2P_CONNECT command to %s",
4984 wpa_s->global->p2p_init_wpa_s->ifname);
4985 wpa_s = wpa_s->global->p2p_init_wpa_s;
4986 }
4987
4988 /* <addr> <"pbc" | "pin" | PIN> [label|display|keypad|p2ps]
4989 * [persistent|persistent=<network id>]
4990 * [join] [auth] [go_intent=<0..15>] [freq=<in MHz>] [provdisc]
4991 * [ht40] [vht] [auto] [ssid=<hexdump>] */
4992
4993 if (hwaddr_aton(cmd, addr))
4994 return -1;
4995
4996 pos = cmd + 17;
4997 if (*pos != ' ')
4998 return -1;
4999 pos++;
5000
5001 persistent_group = os_strstr(pos, " persistent") != NULL;
5002 pos2 = os_strstr(pos, " persistent=");
5003 if (pos2) {
5004 struct wpa_ssid *ssid;
5005 persistent_id = atoi(pos2 + 12);
5006 ssid = wpa_config_get_network(wpa_s->conf, persistent_id);
5007 if (ssid == NULL || ssid->disabled != 2 ||
5008 ssid->mode != WPAS_MODE_P2P_GO) {
5009 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find "
5010 "SSID id=%d for persistent P2P group (GO)",
5011 persistent_id);
5012 return -1;
5013 }
5014 }
5015 join = os_strstr(pos, " join") != NULL;
5016 auth = os_strstr(pos, " auth") != NULL;
5017 automatic = os_strstr(pos, " auto") != NULL;
5018 pd = os_strstr(pos, " provdisc") != NULL;
5019 vht = (os_strstr(cmd, " vht") != NULL) || wpa_s->conf->p2p_go_vht;
5020 ht40 = (os_strstr(cmd, " ht40") != NULL) || wpa_s->conf->p2p_go_ht40 ||
5021 vht;
5022
5023 pos2 = os_strstr(pos, " go_intent=");
5024 if (pos2) {
5025 pos2 += 11;
5026 go_intent = atoi(pos2);
5027 if (go_intent < 0 || go_intent > 15)
5028 return -1;
5029 }
5030
5031 pos2 = os_strstr(pos, " freq=");
5032 if (pos2) {
5033 pos2 += 6;
5034 freq = atoi(pos2);
5035 if (freq <= 0)
5036 return -1;
5037 }
5038
5039 pos2 = os_strstr(pos, " freq2=");
5040 if (pos2)
5041 freq2 = atoi(pos2 + 7);
5042
5043 pos2 = os_strstr(pos, " max_oper_chwidth=");
5044 if (pos2)
5045 chwidth = atoi(pos2 + 18);
5046
5047 max_oper_chwidth = parse_freq(chwidth, freq2);
5048 if (max_oper_chwidth < 0)
5049 return -1;
5050
5051 pos2 = os_strstr(pos, " ssid=");
5052 if (pos2) {
5053 char *end;
5054
5055 pos2 += 6;
5056 end = os_strchr(pos2, ' ');
5057 if (!end)
5058 group_ssid_len = os_strlen(pos2) / 2;
5059 else
5060 group_ssid_len = (end - pos2) / 2;
5061 if (group_ssid_len == 0 || group_ssid_len > SSID_MAX_LEN ||
5062 hexstr2bin(pos2, _group_ssid, group_ssid_len) < 0)
5063 return -1;
5064 group_ssid = _group_ssid;
5065 }
5066
5067 if (os_strncmp(pos, "pin", 3) == 0) {
5068 /* Request random PIN (to be displayed) and enable the PIN */
5069 wps_method = WPS_PIN_DISPLAY;
5070 } else if (os_strncmp(pos, "pbc", 3) == 0) {
5071 wps_method = WPS_PBC;
5072 } else {
5073 pin = pos;
5074 pos = os_strchr(pin, ' ');
5075 wps_method = WPS_PIN_KEYPAD;
5076 if (pos) {
5077 *pos++ = '\0';
5078 if (os_strncmp(pos, "display", 7) == 0)
5079 wps_method = WPS_PIN_DISPLAY;
5080 else if (os_strncmp(pos, "p2ps", 4) == 0)
5081 wps_method = WPS_P2PS;
5082 }
5083 if (!wps_pin_str_valid(pin)) {
5084 os_memcpy(buf, "FAIL-INVALID-PIN\n", 17);
5085 return 17;
5086 }
5087 }
5088
5089 new_pin = wpas_p2p_connect(wpa_s, addr, pin, wps_method,
5090 persistent_group, automatic, join,
5091 auth, go_intent, freq, freq2, persistent_id,
5092 pd, ht40, vht, max_oper_chwidth,
5093 group_ssid, group_ssid_len);
5094 if (new_pin == -2) {
5095 os_memcpy(buf, "FAIL-CHANNEL-UNAVAILABLE\n", 25);
5096 return 25;
5097 }
5098 if (new_pin == -3) {
5099 os_memcpy(buf, "FAIL-CHANNEL-UNSUPPORTED\n", 25);
5100 return 25;
5101 }
5102 if (new_pin < 0)
5103 return -1;
5104 if (wps_method == WPS_PIN_DISPLAY && pin == NULL) {
5105 ret = os_snprintf(buf, buflen, "%08d", new_pin);
5106 if (os_snprintf_error(buflen, ret))
5107 return -1;
5108 return ret;
5109 }
5110
5111 os_memcpy(buf, "OK\n", 3);
5112 return 3;
5113 }
5114
5115
p2p_ctrl_listen(struct wpa_supplicant * wpa_s,char * cmd)5116 static int p2p_ctrl_listen(struct wpa_supplicant *wpa_s, char *cmd)
5117 {
5118 unsigned int timeout = atoi(cmd);
5119 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
5120 wpa_dbg(wpa_s, MSG_INFO,
5121 "Reject P2P_LISTEN since interface is disabled");
5122 return -1;
5123 }
5124 return wpas_p2p_listen(wpa_s, timeout);
5125 }
5126
5127
p2p_ctrl_prov_disc(struct wpa_supplicant * wpa_s,char * cmd)5128 static int p2p_ctrl_prov_disc(struct wpa_supplicant *wpa_s, char *cmd)
5129 {
5130 u8 addr[ETH_ALEN];
5131 char *pos;
5132 enum wpas_p2p_prov_disc_use use = WPAS_P2P_PD_FOR_GO_NEG;
5133
5134 /* <addr> <config method> [join|auto] */
5135
5136 if (hwaddr_aton(cmd, addr))
5137 return -1;
5138
5139 pos = cmd + 17;
5140 if (*pos != ' ')
5141 return -1;
5142 pos++;
5143
5144 if (os_strstr(pos, " join") != NULL)
5145 use = WPAS_P2P_PD_FOR_JOIN;
5146 else if (os_strstr(pos, " auto") != NULL)
5147 use = WPAS_P2P_PD_AUTO;
5148
5149 return wpas_p2p_prov_disc(wpa_s, addr, pos, use, NULL);
5150 }
5151
5152
p2p_get_passphrase(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)5153 static int p2p_get_passphrase(struct wpa_supplicant *wpa_s, char *buf,
5154 size_t buflen)
5155 {
5156 struct wpa_ssid *ssid = wpa_s->current_ssid;
5157
5158 if (ssid == NULL || ssid->mode != WPAS_MODE_P2P_GO ||
5159 ssid->passphrase == NULL)
5160 return -1;
5161
5162 os_strlcpy(buf, ssid->passphrase, buflen);
5163 return os_strlen(buf);
5164 }
5165
5166
p2p_ctrl_serv_disc_req(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)5167 static int p2p_ctrl_serv_disc_req(struct wpa_supplicant *wpa_s, char *cmd,
5168 char *buf, size_t buflen)
5169 {
5170 u64 ref;
5171 int res;
5172 u8 dst_buf[ETH_ALEN], *dst;
5173 struct wpabuf *tlvs;
5174 char *pos;
5175 size_t len;
5176
5177 if (hwaddr_aton(cmd, dst_buf))
5178 return -1;
5179 dst = dst_buf;
5180 if (dst[0] == 0 && dst[1] == 0 && dst[2] == 0 &&
5181 dst[3] == 0 && dst[4] == 0 && dst[5] == 0)
5182 dst = NULL;
5183 pos = cmd + 17;
5184 if (*pos != ' ')
5185 return -1;
5186 pos++;
5187
5188 if (os_strncmp(pos, "upnp ", 5) == 0) {
5189 u8 version;
5190 pos += 5;
5191 if (hexstr2bin(pos, &version, 1) < 0)
5192 return -1;
5193 pos += 2;
5194 if (*pos != ' ')
5195 return -1;
5196 pos++;
5197 ref = wpas_p2p_sd_request_upnp(wpa_s, dst, version, pos);
5198 #ifdef CONFIG_WIFI_DISPLAY
5199 } else if (os_strncmp(pos, "wifi-display ", 13) == 0) {
5200 ref = wpas_p2p_sd_request_wifi_display(wpa_s, dst, pos + 13);
5201 #endif /* CONFIG_WIFI_DISPLAY */
5202 } else if (os_strncmp(pos, "asp ", 4) == 0) {
5203 char *svc_str;
5204 char *svc_info = NULL;
5205 u32 id;
5206
5207 pos += 4;
5208 if (sscanf(pos, "%x", &id) != 1 || id > 0xff)
5209 return -1;
5210
5211 pos = os_strchr(pos, ' ');
5212 if (pos == NULL || pos[1] == '\0' || pos[1] == ' ')
5213 return -1;
5214
5215 svc_str = pos + 1;
5216
5217 pos = os_strchr(svc_str, ' ');
5218
5219 if (pos)
5220 *pos++ = '\0';
5221
5222 /* All remaining data is the svc_info string */
5223 if (pos && pos[0] && pos[0] != ' ') {
5224 len = os_strlen(pos);
5225
5226 /* Unescape in place */
5227 len = utf8_unescape(pos, len, pos, len);
5228 if (len > 0xff)
5229 return -1;
5230
5231 svc_info = pos;
5232 }
5233
5234 ref = wpas_p2p_sd_request_asp(wpa_s, dst, (u8) id,
5235 svc_str, svc_info);
5236 } else {
5237 len = os_strlen(pos);
5238 if (len & 1)
5239 return -1;
5240 len /= 2;
5241 tlvs = wpabuf_alloc(len);
5242 if (tlvs == NULL)
5243 return -1;
5244 if (hexstr2bin(pos, wpabuf_put(tlvs, len), len) < 0) {
5245 wpabuf_free(tlvs);
5246 return -1;
5247 }
5248
5249 ref = wpas_p2p_sd_request(wpa_s, dst, tlvs);
5250 wpabuf_free(tlvs);
5251 }
5252 if (ref == 0)
5253 return -1;
5254 res = os_snprintf(buf, buflen, "%llx", (long long unsigned) ref);
5255 if (os_snprintf_error(buflen, res))
5256 return -1;
5257 return res;
5258 }
5259
5260
p2p_ctrl_serv_disc_cancel_req(struct wpa_supplicant * wpa_s,char * cmd)5261 static int p2p_ctrl_serv_disc_cancel_req(struct wpa_supplicant *wpa_s,
5262 char *cmd)
5263 {
5264 long long unsigned val;
5265 u64 req;
5266 if (sscanf(cmd, "%llx", &val) != 1)
5267 return -1;
5268 req = val;
5269 return wpas_p2p_sd_cancel_request(wpa_s, req);
5270 }
5271
5272
p2p_ctrl_serv_disc_resp(struct wpa_supplicant * wpa_s,char * cmd)5273 static int p2p_ctrl_serv_disc_resp(struct wpa_supplicant *wpa_s, char *cmd)
5274 {
5275 int freq;
5276 u8 dst[ETH_ALEN];
5277 u8 dialog_token;
5278 struct wpabuf *resp_tlvs;
5279 char *pos, *pos2;
5280 size_t len;
5281
5282 pos = os_strchr(cmd, ' ');
5283 if (pos == NULL)
5284 return -1;
5285 *pos++ = '\0';
5286 freq = atoi(cmd);
5287 if (freq == 0)
5288 return -1;
5289
5290 if (hwaddr_aton(pos, dst))
5291 return -1;
5292 pos += 17;
5293 if (*pos != ' ')
5294 return -1;
5295 pos++;
5296
5297 pos2 = os_strchr(pos, ' ');
5298 if (pos2 == NULL)
5299 return -1;
5300 *pos2++ = '\0';
5301 dialog_token = atoi(pos);
5302
5303 len = os_strlen(pos2);
5304 if (len & 1)
5305 return -1;
5306 len /= 2;
5307 resp_tlvs = wpabuf_alloc(len);
5308 if (resp_tlvs == NULL)
5309 return -1;
5310 if (hexstr2bin(pos2, wpabuf_put(resp_tlvs, len), len) < 0) {
5311 wpabuf_free(resp_tlvs);
5312 return -1;
5313 }
5314
5315 wpas_p2p_sd_response(wpa_s, freq, dst, dialog_token, resp_tlvs);
5316 wpabuf_free(resp_tlvs);
5317 return 0;
5318 }
5319
5320
p2p_ctrl_serv_disc_external(struct wpa_supplicant * wpa_s,char * cmd)5321 static int p2p_ctrl_serv_disc_external(struct wpa_supplicant *wpa_s,
5322 char *cmd)
5323 {
5324 if (os_strcmp(cmd, "0") && os_strcmp(cmd, "1"))
5325 return -1;
5326 wpa_s->p2p_sd_over_ctrl_iface = atoi(cmd);
5327 return 0;
5328 }
5329
5330
p2p_ctrl_service_add_bonjour(struct wpa_supplicant * wpa_s,char * cmd)5331 static int p2p_ctrl_service_add_bonjour(struct wpa_supplicant *wpa_s,
5332 char *cmd)
5333 {
5334 char *pos;
5335 size_t len;
5336 struct wpabuf *query, *resp;
5337
5338 pos = os_strchr(cmd, ' ');
5339 if (pos == NULL)
5340 return -1;
5341 *pos++ = '\0';
5342
5343 len = os_strlen(cmd);
5344 if (len & 1)
5345 return -1;
5346 len /= 2;
5347 query = wpabuf_alloc(len);
5348 if (query == NULL)
5349 return -1;
5350 if (hexstr2bin(cmd, wpabuf_put(query, len), len) < 0) {
5351 wpabuf_free(query);
5352 return -1;
5353 }
5354
5355 len = os_strlen(pos);
5356 if (len & 1) {
5357 wpabuf_free(query);
5358 return -1;
5359 }
5360 len /= 2;
5361 resp = wpabuf_alloc(len);
5362 if (resp == NULL) {
5363 wpabuf_free(query);
5364 return -1;
5365 }
5366 if (hexstr2bin(pos, wpabuf_put(resp, len), len) < 0) {
5367 wpabuf_free(query);
5368 wpabuf_free(resp);
5369 return -1;
5370 }
5371
5372 if (wpas_p2p_service_add_bonjour(wpa_s, query, resp) < 0) {
5373 wpabuf_free(query);
5374 wpabuf_free(resp);
5375 return -1;
5376 }
5377 return 0;
5378 }
5379
5380
p2p_ctrl_service_add_upnp(struct wpa_supplicant * wpa_s,char * cmd)5381 static int p2p_ctrl_service_add_upnp(struct wpa_supplicant *wpa_s, char *cmd)
5382 {
5383 char *pos;
5384 u8 version;
5385
5386 pos = os_strchr(cmd, ' ');
5387 if (pos == NULL)
5388 return -1;
5389 *pos++ = '\0';
5390
5391 if (hexstr2bin(cmd, &version, 1) < 0)
5392 return -1;
5393
5394 return wpas_p2p_service_add_upnp(wpa_s, version, pos);
5395 }
5396
5397
p2p_ctrl_service_add_asp(struct wpa_supplicant * wpa_s,u8 replace,char * cmd)5398 static int p2p_ctrl_service_add_asp(struct wpa_supplicant *wpa_s,
5399 u8 replace, char *cmd)
5400 {
5401 char *pos;
5402 char *adv_str;
5403 u32 auto_accept, adv_id, svc_state, config_methods;
5404 char *svc_info = NULL;
5405 char *cpt_prio_str;
5406 u8 cpt_prio[P2PS_FEATURE_CAPAB_CPT_MAX + 1];
5407
5408 pos = os_strchr(cmd, ' ');
5409 if (pos == NULL)
5410 return -1;
5411 *pos++ = '\0';
5412
5413 /* Auto-Accept value is mandatory, and must be one of the
5414 * single values (0, 1, 2, 4) */
5415 auto_accept = atoi(cmd);
5416 switch (auto_accept) {
5417 case P2PS_SETUP_NONE: /* No auto-accept */
5418 case P2PS_SETUP_NEW:
5419 case P2PS_SETUP_CLIENT:
5420 case P2PS_SETUP_GROUP_OWNER:
5421 break;
5422 default:
5423 return -1;
5424 }
5425
5426 /* Advertisement ID is mandatory */
5427 cmd = pos;
5428 pos = os_strchr(cmd, ' ');
5429 if (pos == NULL)
5430 return -1;
5431 *pos++ = '\0';
5432
5433 /* Handle Adv_ID == 0 (wildcard "org.wi-fi.wfds") internally. */
5434 if (sscanf(cmd, "%x", &adv_id) != 1 || adv_id == 0)
5435 return -1;
5436
5437 /* Only allow replacements if exist, and adds if not */
5438 if (wpas_p2p_service_p2ps_id_exists(wpa_s, adv_id)) {
5439 if (!replace)
5440 return -1;
5441 } else {
5442 if (replace)
5443 return -1;
5444 }
5445
5446 /* svc_state between 0 - 0xff is mandatory */
5447 if (sscanf(pos, "%x", &svc_state) != 1 || svc_state > 0xff)
5448 return -1;
5449
5450 pos = os_strchr(pos, ' ');
5451 if (pos == NULL)
5452 return -1;
5453
5454 /* config_methods is mandatory */
5455 pos++;
5456 if (sscanf(pos, "%x", &config_methods) != 1)
5457 return -1;
5458
5459 if (!(config_methods &
5460 (WPS_CONFIG_DISPLAY | WPS_CONFIG_KEYPAD | WPS_CONFIG_P2PS)))
5461 return -1;
5462
5463 pos = os_strchr(pos, ' ');
5464 if (pos == NULL)
5465 return -1;
5466
5467 pos++;
5468 adv_str = pos;
5469
5470 /* Advertisement string is mandatory */
5471 if (!pos[0] || pos[0] == ' ')
5472 return -1;
5473
5474 /* Terminate svc string */
5475 pos = os_strchr(pos, ' ');
5476 if (pos != NULL)
5477 *pos++ = '\0';
5478
5479 cpt_prio_str = (pos && pos[0]) ? os_strstr(pos, "cpt=") : NULL;
5480 if (cpt_prio_str) {
5481 pos = os_strchr(pos, ' ');
5482 if (pos != NULL)
5483 *pos++ = '\0';
5484
5485 if (p2ps_ctrl_parse_cpt_priority(cpt_prio_str + 4, cpt_prio))
5486 return -1;
5487 } else {
5488 cpt_prio[0] = P2PS_FEATURE_CAPAB_UDP_TRANSPORT;
5489 cpt_prio[1] = 0;
5490 }
5491
5492 /* Service and Response Information are optional */
5493 if (pos && pos[0]) {
5494 size_t len;
5495
5496 /* Note the bare ' included, which cannot exist legally
5497 * in unescaped string. */
5498 svc_info = os_strstr(pos, "svc_info='");
5499
5500 if (svc_info) {
5501 svc_info += 9;
5502 len = os_strlen(svc_info);
5503 utf8_unescape(svc_info, len, svc_info, len);
5504 }
5505 }
5506
5507 return wpas_p2p_service_add_asp(wpa_s, auto_accept, adv_id, adv_str,
5508 (u8) svc_state, (u16) config_methods,
5509 svc_info, cpt_prio);
5510 }
5511
5512
p2p_ctrl_service_add(struct wpa_supplicant * wpa_s,char * cmd)5513 static int p2p_ctrl_service_add(struct wpa_supplicant *wpa_s, char *cmd)
5514 {
5515 char *pos;
5516
5517 pos = os_strchr(cmd, ' ');
5518 if (pos == NULL)
5519 return -1;
5520 *pos++ = '\0';
5521
5522 if (os_strcmp(cmd, "bonjour") == 0)
5523 return p2p_ctrl_service_add_bonjour(wpa_s, pos);
5524 if (os_strcmp(cmd, "upnp") == 0)
5525 return p2p_ctrl_service_add_upnp(wpa_s, pos);
5526 if (os_strcmp(cmd, "asp") == 0)
5527 return p2p_ctrl_service_add_asp(wpa_s, 0, pos);
5528 wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
5529 return -1;
5530 }
5531
5532
p2p_ctrl_service_del_bonjour(struct wpa_supplicant * wpa_s,char * cmd)5533 static int p2p_ctrl_service_del_bonjour(struct wpa_supplicant *wpa_s,
5534 char *cmd)
5535 {
5536 size_t len;
5537 struct wpabuf *query;
5538 int ret;
5539
5540 len = os_strlen(cmd);
5541 if (len & 1)
5542 return -1;
5543 len /= 2;
5544 query = wpabuf_alloc(len);
5545 if (query == NULL)
5546 return -1;
5547 if (hexstr2bin(cmd, wpabuf_put(query, len), len) < 0) {
5548 wpabuf_free(query);
5549 return -1;
5550 }
5551
5552 ret = wpas_p2p_service_del_bonjour(wpa_s, query);
5553 wpabuf_free(query);
5554 return ret;
5555 }
5556
5557
p2p_ctrl_service_del_upnp(struct wpa_supplicant * wpa_s,char * cmd)5558 static int p2p_ctrl_service_del_upnp(struct wpa_supplicant *wpa_s, char *cmd)
5559 {
5560 char *pos;
5561 u8 version;
5562
5563 pos = os_strchr(cmd, ' ');
5564 if (pos == NULL)
5565 return -1;
5566 *pos++ = '\0';
5567
5568 if (hexstr2bin(cmd, &version, 1) < 0)
5569 return -1;
5570
5571 return wpas_p2p_service_del_upnp(wpa_s, version, pos);
5572 }
5573
5574
p2p_ctrl_service_del_asp(struct wpa_supplicant * wpa_s,char * cmd)5575 static int p2p_ctrl_service_del_asp(struct wpa_supplicant *wpa_s, char *cmd)
5576 {
5577 u32 adv_id;
5578
5579 if (os_strcmp(cmd, "all") == 0) {
5580 wpas_p2p_service_flush_asp(wpa_s);
5581 return 0;
5582 }
5583
5584 if (sscanf(cmd, "%x", &adv_id) != 1)
5585 return -1;
5586
5587 return wpas_p2p_service_del_asp(wpa_s, adv_id);
5588 }
5589
5590
p2p_ctrl_service_del(struct wpa_supplicant * wpa_s,char * cmd)5591 static int p2p_ctrl_service_del(struct wpa_supplicant *wpa_s, char *cmd)
5592 {
5593 char *pos;
5594
5595 pos = os_strchr(cmd, ' ');
5596 if (pos == NULL)
5597 return -1;
5598 *pos++ = '\0';
5599
5600 if (os_strcmp(cmd, "bonjour") == 0)
5601 return p2p_ctrl_service_del_bonjour(wpa_s, pos);
5602 if (os_strcmp(cmd, "upnp") == 0)
5603 return p2p_ctrl_service_del_upnp(wpa_s, pos);
5604 if (os_strcmp(cmd, "asp") == 0)
5605 return p2p_ctrl_service_del_asp(wpa_s, pos);
5606 wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
5607 return -1;
5608 }
5609
5610
p2p_ctrl_service_replace(struct wpa_supplicant * wpa_s,char * cmd)5611 static int p2p_ctrl_service_replace(struct wpa_supplicant *wpa_s, char *cmd)
5612 {
5613 char *pos;
5614
5615 pos = os_strchr(cmd, ' ');
5616 if (pos == NULL)
5617 return -1;
5618 *pos++ = '\0';
5619
5620 if (os_strcmp(cmd, "asp") == 0)
5621 return p2p_ctrl_service_add_asp(wpa_s, 1, pos);
5622
5623 wpa_printf(MSG_DEBUG, "Unknown service '%s'", cmd);
5624 return -1;
5625 }
5626
5627
p2p_ctrl_reject(struct wpa_supplicant * wpa_s,char * cmd)5628 static int p2p_ctrl_reject(struct wpa_supplicant *wpa_s, char *cmd)
5629 {
5630 u8 addr[ETH_ALEN];
5631
5632 /* <addr> */
5633
5634 if (hwaddr_aton(cmd, addr))
5635 return -1;
5636
5637 return wpas_p2p_reject(wpa_s, addr);
5638 }
5639
5640
p2p_ctrl_invite_persistent(struct wpa_supplicant * wpa_s,char * cmd)5641 static int p2p_ctrl_invite_persistent(struct wpa_supplicant *wpa_s, char *cmd)
5642 {
5643 char *pos;
5644 int id;
5645 struct wpa_ssid *ssid;
5646 u8 *_peer = NULL, peer[ETH_ALEN];
5647 int freq = 0, pref_freq = 0;
5648 int ht40, vht, max_oper_chwidth, chwidth = 0, freq2 = 0;
5649
5650 id = atoi(cmd);
5651 pos = os_strstr(cmd, " peer=");
5652 if (pos) {
5653 pos += 6;
5654 if (hwaddr_aton(pos, peer))
5655 return -1;
5656 _peer = peer;
5657 }
5658 ssid = wpa_config_get_network(wpa_s->conf, id);
5659 if (ssid == NULL || ssid->disabled != 2) {
5660 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
5661 "for persistent P2P group",
5662 id);
5663 return -1;
5664 }
5665
5666 pos = os_strstr(cmd, " freq=");
5667 if (pos) {
5668 pos += 6;
5669 freq = atoi(pos);
5670 if (freq <= 0)
5671 return -1;
5672 }
5673
5674 pos = os_strstr(cmd, " pref=");
5675 if (pos) {
5676 pos += 6;
5677 pref_freq = atoi(pos);
5678 if (pref_freq <= 0)
5679 return -1;
5680 }
5681
5682 vht = (os_strstr(cmd, " vht") != NULL) || wpa_s->conf->p2p_go_vht;
5683 ht40 = (os_strstr(cmd, " ht40") != NULL) || wpa_s->conf->p2p_go_ht40 ||
5684 vht;
5685
5686 pos = os_strstr(cmd, "freq2=");
5687 if (pos)
5688 freq2 = atoi(pos + 6);
5689
5690 pos = os_strstr(cmd, " max_oper_chwidth=");
5691 if (pos)
5692 chwidth = atoi(pos + 18);
5693
5694 max_oper_chwidth = parse_freq(chwidth, freq2);
5695 if (max_oper_chwidth < 0)
5696 return -1;
5697
5698 return wpas_p2p_invite(wpa_s, _peer, ssid, NULL, freq, freq2, ht40, vht,
5699 max_oper_chwidth, pref_freq);
5700 }
5701
5702
p2p_ctrl_invite_group(struct wpa_supplicant * wpa_s,char * cmd)5703 static int p2p_ctrl_invite_group(struct wpa_supplicant *wpa_s, char *cmd)
5704 {
5705 char *pos;
5706 u8 peer[ETH_ALEN], go_dev_addr[ETH_ALEN], *go_dev = NULL;
5707
5708 pos = os_strstr(cmd, " peer=");
5709 if (!pos)
5710 return -1;
5711
5712 *pos = '\0';
5713 pos += 6;
5714 if (hwaddr_aton(pos, peer)) {
5715 wpa_printf(MSG_DEBUG, "P2P: Invalid MAC address '%s'", pos);
5716 return -1;
5717 }
5718
5719 pos = os_strstr(pos, " go_dev_addr=");
5720 if (pos) {
5721 pos += 13;
5722 if (hwaddr_aton(pos, go_dev_addr)) {
5723 wpa_printf(MSG_DEBUG, "P2P: Invalid MAC address '%s'",
5724 pos);
5725 return -1;
5726 }
5727 go_dev = go_dev_addr;
5728 }
5729
5730 return wpas_p2p_invite_group(wpa_s, cmd, peer, go_dev);
5731 }
5732
5733
p2p_ctrl_invite(struct wpa_supplicant * wpa_s,char * cmd)5734 static int p2p_ctrl_invite(struct wpa_supplicant *wpa_s, char *cmd)
5735 {
5736 if (os_strncmp(cmd, "persistent=", 11) == 0)
5737 return p2p_ctrl_invite_persistent(wpa_s, cmd + 11);
5738 if (os_strncmp(cmd, "group=", 6) == 0)
5739 return p2p_ctrl_invite_group(wpa_s, cmd + 6);
5740
5741 return -1;
5742 }
5743
5744
p2p_ctrl_group_add_persistent(struct wpa_supplicant * wpa_s,int id,int freq,int vht_center_freq2,int ht40,int vht,int vht_chwidth)5745 static int p2p_ctrl_group_add_persistent(struct wpa_supplicant *wpa_s,
5746 int id, int freq, int vht_center_freq2,
5747 int ht40, int vht, int vht_chwidth)
5748 {
5749 struct wpa_ssid *ssid;
5750
5751 ssid = wpa_config_get_network(wpa_s->conf, id);
5752 if (ssid == NULL || ssid->disabled != 2) {
5753 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Could not find SSID id=%d "
5754 "for persistent P2P group",
5755 id);
5756 return -1;
5757 }
5758
5759 return wpas_p2p_group_add_persistent(wpa_s, ssid, 0, freq,
5760 vht_center_freq2, 0, ht40, vht,
5761 vht_chwidth, NULL, 0, 0);
5762 }
5763
5764
p2p_ctrl_group_add(struct wpa_supplicant * wpa_s,char * cmd)5765 static int p2p_ctrl_group_add(struct wpa_supplicant *wpa_s, char *cmd)
5766 {
5767 int freq = 0, persistent = 0, group_id = -1;
5768 int vht = wpa_s->conf->p2p_go_vht;
5769 int ht40 = wpa_s->conf->p2p_go_ht40 || vht;
5770 int max_oper_chwidth, chwidth = 0, freq2 = 0;
5771 char *token, *context = NULL;
5772
5773 while ((token = str_token(cmd, " ", &context))) {
5774 if (sscanf(token, "freq=%d", &freq) == 1 ||
5775 sscanf(token, "freq2=%d", &freq2) == 1 ||
5776 sscanf(token, "persistent=%d", &group_id) == 1 ||
5777 sscanf(token, "max_oper_chwidth=%d", &chwidth) == 1) {
5778 continue;
5779 } else if (os_strcmp(token, "ht40") == 0) {
5780 ht40 = 1;
5781 } else if (os_strcmp(token, "vht") == 0) {
5782 vht = 1;
5783 ht40 = 1;
5784 } else if (os_strcmp(token, "persistent") == 0) {
5785 persistent = 1;
5786 } else {
5787 wpa_printf(MSG_DEBUG,
5788 "CTRL: Invalid P2P_GROUP_ADD parameter: '%s'",
5789 token);
5790 return -1;
5791 }
5792 }
5793
5794 max_oper_chwidth = parse_freq(chwidth, freq2);
5795 if (max_oper_chwidth < 0)
5796 return -1;
5797
5798 if (group_id >= 0)
5799 return p2p_ctrl_group_add_persistent(wpa_s, group_id,
5800 freq, freq2, ht40, vht,
5801 max_oper_chwidth);
5802
5803 return wpas_p2p_group_add(wpa_s, persistent, freq, freq2, ht40, vht,
5804 max_oper_chwidth);
5805 }
5806
5807
p2p_ctrl_peer(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)5808 static int p2p_ctrl_peer(struct wpa_supplicant *wpa_s, char *cmd,
5809 char *buf, size_t buflen)
5810 {
5811 u8 addr[ETH_ALEN], *addr_ptr;
5812 int next, res;
5813 const struct p2p_peer_info *info;
5814 char *pos, *end;
5815 char devtype[WPS_DEV_TYPE_BUFSIZE];
5816 struct wpa_ssid *ssid;
5817 size_t i;
5818
5819 if (!wpa_s->global->p2p)
5820 return -1;
5821
5822 if (os_strcmp(cmd, "FIRST") == 0) {
5823 addr_ptr = NULL;
5824 next = 0;
5825 } else if (os_strncmp(cmd, "NEXT-", 5) == 0) {
5826 if (hwaddr_aton(cmd + 5, addr) < 0)
5827 return -1;
5828 addr_ptr = addr;
5829 next = 1;
5830 } else {
5831 if (hwaddr_aton(cmd, addr) < 0)
5832 return -1;
5833 addr_ptr = addr;
5834 next = 0;
5835 }
5836
5837 info = p2p_get_peer_info(wpa_s->global->p2p, addr_ptr, next);
5838 if (info == NULL)
5839 return -1;
5840
5841 pos = buf;
5842 end = buf + buflen;
5843
5844 res = os_snprintf(pos, end - pos, MACSTR "\n"
5845 "pri_dev_type=%s\n"
5846 "device_name=%s\n"
5847 "manufacturer=%s\n"
5848 "model_name=%s\n"
5849 "model_number=%s\n"
5850 "serial_number=%s\n"
5851 "config_methods=0x%x\n"
5852 "dev_capab=0x%x\n"
5853 "group_capab=0x%x\n"
5854 "level=%d\n",
5855 MAC2STR(info->p2p_device_addr),
5856 wps_dev_type_bin2str(info->pri_dev_type,
5857 devtype, sizeof(devtype)),
5858 info->device_name,
5859 info->manufacturer,
5860 info->model_name,
5861 info->model_number,
5862 info->serial_number,
5863 info->config_methods,
5864 info->dev_capab,
5865 info->group_capab,
5866 info->level);
5867 if (os_snprintf_error(end - pos, res))
5868 return pos - buf;
5869 pos += res;
5870
5871 for (i = 0; i < info->wps_sec_dev_type_list_len / WPS_DEV_TYPE_LEN; i++)
5872 {
5873 const u8 *t;
5874 t = &info->wps_sec_dev_type_list[i * WPS_DEV_TYPE_LEN];
5875 res = os_snprintf(pos, end - pos, "sec_dev_type=%s\n",
5876 wps_dev_type_bin2str(t, devtype,
5877 sizeof(devtype)));
5878 if (os_snprintf_error(end - pos, res))
5879 return pos - buf;
5880 pos += res;
5881 }
5882
5883 ssid = wpas_p2p_get_persistent(wpa_s, info->p2p_device_addr, NULL, 0);
5884 if (ssid) {
5885 res = os_snprintf(pos, end - pos, "persistent=%d\n", ssid->id);
5886 if (os_snprintf_error(end - pos, res))
5887 return pos - buf;
5888 pos += res;
5889 }
5890
5891 res = p2p_get_peer_info_txt(info, pos, end - pos);
5892 if (res < 0)
5893 return pos - buf;
5894 pos += res;
5895
5896 if (info->vendor_elems) {
5897 res = os_snprintf(pos, end - pos, "vendor_elems=");
5898 if (os_snprintf_error(end - pos, res))
5899 return pos - buf;
5900 pos += res;
5901
5902 pos += wpa_snprintf_hex(pos, end - pos,
5903 wpabuf_head(info->vendor_elems),
5904 wpabuf_len(info->vendor_elems));
5905
5906 res = os_snprintf(pos, end - pos, "\n");
5907 if (os_snprintf_error(end - pos, res))
5908 return pos - buf;
5909 pos += res;
5910 }
5911
5912 return pos - buf;
5913 }
5914
5915
p2p_ctrl_disallow_freq(struct wpa_supplicant * wpa_s,const char * param)5916 static int p2p_ctrl_disallow_freq(struct wpa_supplicant *wpa_s,
5917 const char *param)
5918 {
5919 unsigned int i;
5920
5921 if (wpa_s->global->p2p == NULL)
5922 return -1;
5923
5924 if (freq_range_list_parse(&wpa_s->global->p2p_disallow_freq, param) < 0)
5925 return -1;
5926
5927 for (i = 0; i < wpa_s->global->p2p_disallow_freq.num; i++) {
5928 struct wpa_freq_range *freq;
5929 freq = &wpa_s->global->p2p_disallow_freq.range[i];
5930 wpa_printf(MSG_DEBUG, "P2P: Disallowed frequency range %u-%u",
5931 freq->min, freq->max);
5932 }
5933
5934 wpas_p2p_update_channel_list(wpa_s, WPAS_P2P_CHANNEL_UPDATE_DISALLOW);
5935 return 0;
5936 }
5937
5938
p2p_ctrl_set(struct wpa_supplicant * wpa_s,char * cmd)5939 static int p2p_ctrl_set(struct wpa_supplicant *wpa_s, char *cmd)
5940 {
5941 char *param;
5942
5943 if (wpa_s->global->p2p == NULL)
5944 return -1;
5945
5946 param = os_strchr(cmd, ' ');
5947 if (param == NULL)
5948 return -1;
5949 *param++ = '\0';
5950
5951 if (os_strcmp(cmd, "discoverability") == 0) {
5952 p2p_set_client_discoverability(wpa_s->global->p2p,
5953 atoi(param));
5954 return 0;
5955 }
5956
5957 if (os_strcmp(cmd, "managed") == 0) {
5958 p2p_set_managed_oper(wpa_s->global->p2p, atoi(param));
5959 return 0;
5960 }
5961
5962 if (os_strcmp(cmd, "listen_channel") == 0) {
5963 char *pos;
5964 u8 channel, op_class;
5965
5966 channel = atoi(param);
5967 pos = os_strchr(param, ' ');
5968 op_class = pos ? atoi(pos) : 81;
5969
5970 return p2p_set_listen_channel(wpa_s->global->p2p, op_class,
5971 channel, 1);
5972 }
5973
5974 if (os_strcmp(cmd, "ssid_postfix") == 0) {
5975 return p2p_set_ssid_postfix(wpa_s->global->p2p, (u8 *) param,
5976 os_strlen(param));
5977 }
5978
5979 if (os_strcmp(cmd, "noa") == 0) {
5980 char *pos;
5981 int count, start, duration;
5982 /* GO NoA parameters: count,start_offset(ms),duration(ms) */
5983 count = atoi(param);
5984 pos = os_strchr(param, ',');
5985 if (pos == NULL)
5986 return -1;
5987 pos++;
5988 start = atoi(pos);
5989 pos = os_strchr(pos, ',');
5990 if (pos == NULL)
5991 return -1;
5992 pos++;
5993 duration = atoi(pos);
5994 if (count < 0 || count > 255 || start < 0 || duration < 0)
5995 return -1;
5996 if (count == 0 && duration > 0)
5997 return -1;
5998 wpa_printf(MSG_DEBUG, "CTRL_IFACE: P2P_SET GO NoA: count=%d "
5999 "start=%d duration=%d", count, start, duration);
6000 return wpas_p2p_set_noa(wpa_s, count, start, duration);
6001 }
6002
6003 if (os_strcmp(cmd, "ps") == 0)
6004 return wpa_drv_set_p2p_powersave(wpa_s, atoi(param), -1, -1);
6005
6006 if (os_strcmp(cmd, "oppps") == 0)
6007 return wpa_drv_set_p2p_powersave(wpa_s, -1, atoi(param), -1);
6008
6009 if (os_strcmp(cmd, "ctwindow") == 0)
6010 return wpa_drv_set_p2p_powersave(wpa_s, -1, -1, atoi(param));
6011
6012 if (os_strcmp(cmd, "disabled") == 0) {
6013 wpa_s->global->p2p_disabled = atoi(param);
6014 wpa_printf(MSG_DEBUG, "P2P functionality %s",
6015 wpa_s->global->p2p_disabled ?
6016 "disabled" : "enabled");
6017 if (wpa_s->global->p2p_disabled) {
6018 wpas_p2p_stop_find(wpa_s);
6019 os_memset(wpa_s->p2p_auth_invite, 0, ETH_ALEN);
6020 p2p_flush(wpa_s->global->p2p);
6021 }
6022 return 0;
6023 }
6024
6025 if (os_strcmp(cmd, "conc_pref") == 0) {
6026 if (os_strcmp(param, "sta") == 0)
6027 wpa_s->global->conc_pref = WPA_CONC_PREF_STA;
6028 else if (os_strcmp(param, "p2p") == 0)
6029 wpa_s->global->conc_pref = WPA_CONC_PREF_P2P;
6030 else {
6031 wpa_printf(MSG_INFO, "Invalid conc_pref value");
6032 return -1;
6033 }
6034 wpa_printf(MSG_DEBUG, "Single channel concurrency preference: "
6035 "%s", param);
6036 return 0;
6037 }
6038
6039 if (os_strcmp(cmd, "force_long_sd") == 0) {
6040 wpa_s->force_long_sd = atoi(param);
6041 return 0;
6042 }
6043
6044 if (os_strcmp(cmd, "peer_filter") == 0) {
6045 u8 addr[ETH_ALEN];
6046 if (hwaddr_aton(param, addr))
6047 return -1;
6048 p2p_set_peer_filter(wpa_s->global->p2p, addr);
6049 return 0;
6050 }
6051
6052 if (os_strcmp(cmd, "cross_connect") == 0)
6053 return wpas_p2p_set_cross_connect(wpa_s, atoi(param));
6054
6055 if (os_strcmp(cmd, "go_apsd") == 0) {
6056 if (os_strcmp(param, "disable") == 0)
6057 wpa_s->set_ap_uapsd = 0;
6058 else {
6059 wpa_s->set_ap_uapsd = 1;
6060 wpa_s->ap_uapsd = atoi(param);
6061 }
6062 return 0;
6063 }
6064
6065 if (os_strcmp(cmd, "client_apsd") == 0) {
6066 if (os_strcmp(param, "disable") == 0)
6067 wpa_s->set_sta_uapsd = 0;
6068 else {
6069 int be, bk, vi, vo;
6070 char *pos;
6071 /* format: BE,BK,VI,VO;max SP Length */
6072 be = atoi(param);
6073 pos = os_strchr(param, ',');
6074 if (pos == NULL)
6075 return -1;
6076 pos++;
6077 bk = atoi(pos);
6078 pos = os_strchr(pos, ',');
6079 if (pos == NULL)
6080 return -1;
6081 pos++;
6082 vi = atoi(pos);
6083 pos = os_strchr(pos, ',');
6084 if (pos == NULL)
6085 return -1;
6086 pos++;
6087 vo = atoi(pos);
6088 /* ignore max SP Length for now */
6089
6090 wpa_s->set_sta_uapsd = 1;
6091 wpa_s->sta_uapsd = 0;
6092 if (be)
6093 wpa_s->sta_uapsd |= BIT(0);
6094 if (bk)
6095 wpa_s->sta_uapsd |= BIT(1);
6096 if (vi)
6097 wpa_s->sta_uapsd |= BIT(2);
6098 if (vo)
6099 wpa_s->sta_uapsd |= BIT(3);
6100 }
6101 return 0;
6102 }
6103
6104 if (os_strcmp(cmd, "disallow_freq") == 0)
6105 return p2p_ctrl_disallow_freq(wpa_s, param);
6106
6107 if (os_strcmp(cmd, "disc_int") == 0) {
6108 int min_disc_int, max_disc_int, max_disc_tu;
6109 char *pos;
6110
6111 pos = param;
6112
6113 min_disc_int = atoi(pos);
6114 pos = os_strchr(pos, ' ');
6115 if (pos == NULL)
6116 return -1;
6117 *pos++ = '\0';
6118
6119 max_disc_int = atoi(pos);
6120 pos = os_strchr(pos, ' ');
6121 if (pos == NULL)
6122 return -1;
6123 *pos++ = '\0';
6124
6125 max_disc_tu = atoi(pos);
6126
6127 return p2p_set_disc_int(wpa_s->global->p2p, min_disc_int,
6128 max_disc_int, max_disc_tu);
6129 }
6130
6131 if (os_strcmp(cmd, "per_sta_psk") == 0) {
6132 wpa_s->global->p2p_per_sta_psk = !!atoi(param);
6133 return 0;
6134 }
6135
6136 #ifdef CONFIG_WPS_NFC
6137 if (os_strcmp(cmd, "nfc_tag") == 0)
6138 return wpas_p2p_nfc_tag_enabled(wpa_s, !!atoi(param));
6139 #endif /* CONFIG_WPS_NFC */
6140
6141 if (os_strcmp(cmd, "disable_ip_addr_req") == 0) {
6142 wpa_s->p2p_disable_ip_addr_req = !!atoi(param);
6143 return 0;
6144 }
6145
6146 wpa_printf(MSG_DEBUG, "CTRL_IFACE: Unknown P2P_SET field value '%s'",
6147 cmd);
6148
6149 return -1;
6150 }
6151
6152
p2p_ctrl_flush(struct wpa_supplicant * wpa_s)6153 static void p2p_ctrl_flush(struct wpa_supplicant *wpa_s)
6154 {
6155 os_memset(wpa_s->p2p_auth_invite, 0, ETH_ALEN);
6156 wpa_s->force_long_sd = 0;
6157 wpas_p2p_stop_find(wpa_s);
6158 wpa_s->parent->p2ps_method_config_any = 0;
6159 if (wpa_s->global->p2p)
6160 p2p_flush(wpa_s->global->p2p);
6161 }
6162
6163
p2p_ctrl_presence_req(struct wpa_supplicant * wpa_s,char * cmd)6164 static int p2p_ctrl_presence_req(struct wpa_supplicant *wpa_s, char *cmd)
6165 {
6166 char *pos, *pos2;
6167 unsigned int dur1 = 0, int1 = 0, dur2 = 0, int2 = 0;
6168
6169 if (cmd[0]) {
6170 pos = os_strchr(cmd, ' ');
6171 if (pos == NULL)
6172 return -1;
6173 *pos++ = '\0';
6174 dur1 = atoi(cmd);
6175
6176 pos2 = os_strchr(pos, ' ');
6177 if (pos2)
6178 *pos2++ = '\0';
6179 int1 = atoi(pos);
6180 } else
6181 pos2 = NULL;
6182
6183 if (pos2) {
6184 pos = os_strchr(pos2, ' ');
6185 if (pos == NULL)
6186 return -1;
6187 *pos++ = '\0';
6188 dur2 = atoi(pos2);
6189 int2 = atoi(pos);
6190 }
6191
6192 return wpas_p2p_presence_req(wpa_s, dur1, int1, dur2, int2);
6193 }
6194
6195
p2p_ctrl_ext_listen(struct wpa_supplicant * wpa_s,char * cmd)6196 static int p2p_ctrl_ext_listen(struct wpa_supplicant *wpa_s, char *cmd)
6197 {
6198 char *pos;
6199 unsigned int period = 0, interval = 0;
6200
6201 if (cmd[0]) {
6202 pos = os_strchr(cmd, ' ');
6203 if (pos == NULL)
6204 return -1;
6205 *pos++ = '\0';
6206 period = atoi(cmd);
6207 interval = atoi(pos);
6208 }
6209
6210 return wpas_p2p_ext_listen(wpa_s, period, interval);
6211 }
6212
6213
p2p_ctrl_remove_client(struct wpa_supplicant * wpa_s,const char * cmd)6214 static int p2p_ctrl_remove_client(struct wpa_supplicant *wpa_s, const char *cmd)
6215 {
6216 const char *pos;
6217 u8 peer[ETH_ALEN];
6218 int iface_addr = 0;
6219
6220 pos = cmd;
6221 if (os_strncmp(pos, "iface=", 6) == 0) {
6222 iface_addr = 1;
6223 pos += 6;
6224 }
6225 if (hwaddr_aton(pos, peer))
6226 return -1;
6227
6228 wpas_p2p_remove_client(wpa_s, peer, iface_addr);
6229 return 0;
6230 }
6231
6232 #endif /* CONFIG_P2P */
6233
6234
freq_range_to_channel_list(struct wpa_supplicant * wpa_s,char * val)6235 static int * freq_range_to_channel_list(struct wpa_supplicant *wpa_s, char *val)
6236 {
6237 struct wpa_freq_range_list ranges;
6238 int *freqs = NULL;
6239 struct hostapd_hw_modes *mode;
6240 u16 i;
6241
6242 if (wpa_s->hw.modes == NULL)
6243 return NULL;
6244
6245 os_memset(&ranges, 0, sizeof(ranges));
6246 if (freq_range_list_parse(&ranges, val) < 0)
6247 return NULL;
6248
6249 for (i = 0; i < wpa_s->hw.num_modes; i++) {
6250 int j;
6251
6252 mode = &wpa_s->hw.modes[i];
6253 for (j = 0; j < mode->num_channels; j++) {
6254 unsigned int freq;
6255
6256 if (mode->channels[j].flag & HOSTAPD_CHAN_DISABLED)
6257 continue;
6258
6259 freq = mode->channels[j].freq;
6260 if (!freq_range_list_includes(&ranges, freq))
6261 continue;
6262
6263 int_array_add_unique(&freqs, freq);
6264 }
6265 }
6266
6267 os_free(ranges.range);
6268 return freqs;
6269 }
6270
6271
6272 #ifdef CONFIG_INTERWORKING
6273
ctrl_interworking_select(struct wpa_supplicant * wpa_s,char * param)6274 static int ctrl_interworking_select(struct wpa_supplicant *wpa_s, char *param)
6275 {
6276 int auto_sel = 0;
6277 int *freqs = NULL;
6278
6279 if (param) {
6280 char *pos;
6281
6282 auto_sel = os_strstr(param, "auto") != NULL;
6283
6284 pos = os_strstr(param, "freq=");
6285 if (pos) {
6286 freqs = freq_range_to_channel_list(wpa_s, pos + 5);
6287 if (freqs == NULL)
6288 return -1;
6289 }
6290
6291 }
6292
6293 return interworking_select(wpa_s, auto_sel, freqs);
6294 }
6295
6296
ctrl_interworking_connect(struct wpa_supplicant * wpa_s,char * dst,int only_add)6297 static int ctrl_interworking_connect(struct wpa_supplicant *wpa_s, char *dst,
6298 int only_add)
6299 {
6300 u8 bssid[ETH_ALEN];
6301 struct wpa_bss *bss;
6302
6303 if (hwaddr_aton(dst, bssid)) {
6304 wpa_printf(MSG_DEBUG, "Invalid BSSID '%s'", dst);
6305 return -1;
6306 }
6307
6308 bss = wpa_bss_get_bssid(wpa_s, bssid);
6309 if (bss == NULL) {
6310 wpa_printf(MSG_DEBUG, "Could not find BSS " MACSTR,
6311 MAC2STR(bssid));
6312 return -1;
6313 }
6314
6315 if (bss->ssid_len == 0) {
6316 int found = 0;
6317
6318 wpa_printf(MSG_DEBUG, "Selected BSS entry for " MACSTR
6319 " does not have SSID information", MAC2STR(bssid));
6320
6321 dl_list_for_each_reverse(bss, &wpa_s->bss, struct wpa_bss,
6322 list) {
6323 if (os_memcmp(bss->bssid, bssid, ETH_ALEN) == 0 &&
6324 bss->ssid_len > 0) {
6325 found = 1;
6326 break;
6327 }
6328 }
6329
6330 if (!found)
6331 return -1;
6332 wpa_printf(MSG_DEBUG,
6333 "Found another matching BSS entry with SSID");
6334 }
6335
6336 return interworking_connect(wpa_s, bss, only_add);
6337 }
6338
6339
get_anqp(struct wpa_supplicant * wpa_s,char * dst)6340 static int get_anqp(struct wpa_supplicant *wpa_s, char *dst)
6341 {
6342 u8 dst_addr[ETH_ALEN];
6343 int used;
6344 char *pos;
6345 #define MAX_ANQP_INFO_ID 100
6346 u16 id[MAX_ANQP_INFO_ID];
6347 size_t num_id = 0;
6348 u32 subtypes = 0;
6349
6350 used = hwaddr_aton2(dst, dst_addr);
6351 if (used < 0)
6352 return -1;
6353 pos = dst + used;
6354 if (*pos == ' ')
6355 pos++;
6356 while (num_id < MAX_ANQP_INFO_ID) {
6357 if (os_strncmp(pos, "hs20:", 5) == 0) {
6358 #ifdef CONFIG_HS20
6359 int num = atoi(pos + 5);
6360 if (num <= 0 || num > 31)
6361 return -1;
6362 subtypes |= BIT(num);
6363 #else /* CONFIG_HS20 */
6364 return -1;
6365 #endif /* CONFIG_HS20 */
6366 } else {
6367 id[num_id] = atoi(pos);
6368 if (id[num_id])
6369 num_id++;
6370 }
6371 pos = os_strchr(pos + 1, ',');
6372 if (pos == NULL)
6373 break;
6374 pos++;
6375 }
6376
6377 if (num_id == 0)
6378 return -1;
6379
6380 return anqp_send_req(wpa_s, dst_addr, id, num_id, subtypes);
6381 }
6382
6383
gas_request(struct wpa_supplicant * wpa_s,char * cmd)6384 static int gas_request(struct wpa_supplicant *wpa_s, char *cmd)
6385 {
6386 u8 dst_addr[ETH_ALEN];
6387 struct wpabuf *advproto, *query = NULL;
6388 int used, ret = -1;
6389 char *pos, *end;
6390 size_t len;
6391
6392 used = hwaddr_aton2(cmd, dst_addr);
6393 if (used < 0)
6394 return -1;
6395
6396 pos = cmd + used;
6397 while (*pos == ' ')
6398 pos++;
6399
6400 /* Advertisement Protocol ID */
6401 end = os_strchr(pos, ' ');
6402 if (end)
6403 len = end - pos;
6404 else
6405 len = os_strlen(pos);
6406 if (len & 0x01)
6407 return -1;
6408 len /= 2;
6409 if (len == 0)
6410 return -1;
6411 advproto = wpabuf_alloc(len);
6412 if (advproto == NULL)
6413 return -1;
6414 if (hexstr2bin(pos, wpabuf_put(advproto, len), len) < 0)
6415 goto fail;
6416
6417 if (end) {
6418 /* Optional Query Request */
6419 pos = end + 1;
6420 while (*pos == ' ')
6421 pos++;
6422
6423 len = os_strlen(pos);
6424 if (len) {
6425 if (len & 0x01)
6426 goto fail;
6427 len /= 2;
6428 if (len == 0)
6429 goto fail;
6430 query = wpabuf_alloc(len);
6431 if (query == NULL)
6432 goto fail;
6433 if (hexstr2bin(pos, wpabuf_put(query, len), len) < 0)
6434 goto fail;
6435 }
6436 }
6437
6438 ret = gas_send_request(wpa_s, dst_addr, advproto, query);
6439
6440 fail:
6441 wpabuf_free(advproto);
6442 wpabuf_free(query);
6443
6444 return ret;
6445 }
6446
6447
gas_response_get(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)6448 static int gas_response_get(struct wpa_supplicant *wpa_s, char *cmd, char *buf,
6449 size_t buflen)
6450 {
6451 u8 addr[ETH_ALEN];
6452 int dialog_token;
6453 int used;
6454 char *pos;
6455 size_t resp_len, start, requested_len;
6456 struct wpabuf *resp;
6457 int ret;
6458
6459 used = hwaddr_aton2(cmd, addr);
6460 if (used < 0)
6461 return -1;
6462
6463 pos = cmd + used;
6464 while (*pos == ' ')
6465 pos++;
6466 dialog_token = atoi(pos);
6467
6468 if (wpa_s->last_gas_resp &&
6469 os_memcmp(addr, wpa_s->last_gas_addr, ETH_ALEN) == 0 &&
6470 dialog_token == wpa_s->last_gas_dialog_token)
6471 resp = wpa_s->last_gas_resp;
6472 else if (wpa_s->prev_gas_resp &&
6473 os_memcmp(addr, wpa_s->prev_gas_addr, ETH_ALEN) == 0 &&
6474 dialog_token == wpa_s->prev_gas_dialog_token)
6475 resp = wpa_s->prev_gas_resp;
6476 else
6477 return -1;
6478
6479 resp_len = wpabuf_len(resp);
6480 start = 0;
6481 requested_len = resp_len;
6482
6483 pos = os_strchr(pos, ' ');
6484 if (pos) {
6485 start = atoi(pos);
6486 if (start > resp_len)
6487 return os_snprintf(buf, buflen, "FAIL-Invalid range");
6488 pos = os_strchr(pos, ',');
6489 if (pos == NULL)
6490 return -1;
6491 pos++;
6492 requested_len = atoi(pos);
6493 if (start + requested_len > resp_len)
6494 return os_snprintf(buf, buflen, "FAIL-Invalid range");
6495 }
6496
6497 if (requested_len * 2 + 1 > buflen)
6498 return os_snprintf(buf, buflen, "FAIL-Too long response");
6499
6500 ret = wpa_snprintf_hex(buf, buflen, wpabuf_head_u8(resp) + start,
6501 requested_len);
6502
6503 if (start + requested_len == resp_len) {
6504 /*
6505 * Free memory by dropping the response after it has been
6506 * fetched.
6507 */
6508 if (resp == wpa_s->prev_gas_resp) {
6509 wpabuf_free(wpa_s->prev_gas_resp);
6510 wpa_s->prev_gas_resp = NULL;
6511 } else {
6512 wpabuf_free(wpa_s->last_gas_resp);
6513 wpa_s->last_gas_resp = NULL;
6514 }
6515 }
6516
6517 return ret;
6518 }
6519 #endif /* CONFIG_INTERWORKING */
6520
6521
6522 #ifdef CONFIG_HS20
6523
get_hs20_anqp(struct wpa_supplicant * wpa_s,char * dst)6524 static int get_hs20_anqp(struct wpa_supplicant *wpa_s, char *dst)
6525 {
6526 u8 dst_addr[ETH_ALEN];
6527 int used;
6528 char *pos;
6529 u32 subtypes = 0;
6530
6531 used = hwaddr_aton2(dst, dst_addr);
6532 if (used < 0)
6533 return -1;
6534 pos = dst + used;
6535 if (*pos == ' ')
6536 pos++;
6537 for (;;) {
6538 int num = atoi(pos);
6539 if (num <= 0 || num > 31)
6540 return -1;
6541 subtypes |= BIT(num);
6542 pos = os_strchr(pos + 1, ',');
6543 if (pos == NULL)
6544 break;
6545 pos++;
6546 }
6547
6548 if (subtypes == 0)
6549 return -1;
6550
6551 return hs20_anqp_send_req(wpa_s, dst_addr, subtypes, NULL, 0, 0);
6552 }
6553
6554
hs20_nai_home_realm_list(struct wpa_supplicant * wpa_s,const u8 * addr,const char * realm)6555 static int hs20_nai_home_realm_list(struct wpa_supplicant *wpa_s,
6556 const u8 *addr, const char *realm)
6557 {
6558 u8 *buf;
6559 size_t rlen, len;
6560 int ret;
6561
6562 rlen = os_strlen(realm);
6563 len = 3 + rlen;
6564 buf = os_malloc(len);
6565 if (buf == NULL)
6566 return -1;
6567 buf[0] = 1; /* NAI Home Realm Count */
6568 buf[1] = 0; /* Formatted in accordance with RFC 4282 */
6569 buf[2] = rlen;
6570 os_memcpy(buf + 3, realm, rlen);
6571
6572 ret = hs20_anqp_send_req(wpa_s, addr,
6573 BIT(HS20_STYPE_NAI_HOME_REALM_QUERY),
6574 buf, len, 0);
6575
6576 os_free(buf);
6577
6578 return ret;
6579 }
6580
6581
hs20_get_nai_home_realm_list(struct wpa_supplicant * wpa_s,char * dst)6582 static int hs20_get_nai_home_realm_list(struct wpa_supplicant *wpa_s,
6583 char *dst)
6584 {
6585 struct wpa_cred *cred = wpa_s->conf->cred;
6586 u8 dst_addr[ETH_ALEN];
6587 int used;
6588 u8 *buf;
6589 size_t len;
6590 int ret;
6591
6592 used = hwaddr_aton2(dst, dst_addr);
6593 if (used < 0)
6594 return -1;
6595
6596 while (dst[used] == ' ')
6597 used++;
6598 if (os_strncmp(dst + used, "realm=", 6) == 0)
6599 return hs20_nai_home_realm_list(wpa_s, dst_addr,
6600 dst + used + 6);
6601
6602 len = os_strlen(dst + used);
6603
6604 if (len == 0 && cred && cred->realm)
6605 return hs20_nai_home_realm_list(wpa_s, dst_addr, cred->realm);
6606
6607 if (len & 1)
6608 return -1;
6609 len /= 2;
6610 buf = os_malloc(len);
6611 if (buf == NULL)
6612 return -1;
6613 if (hexstr2bin(dst + used, buf, len) < 0) {
6614 os_free(buf);
6615 return -1;
6616 }
6617
6618 ret = hs20_anqp_send_req(wpa_s, dst_addr,
6619 BIT(HS20_STYPE_NAI_HOME_REALM_QUERY),
6620 buf, len, 0);
6621 os_free(buf);
6622
6623 return ret;
6624 }
6625
6626
get_hs20_icon(struct wpa_supplicant * wpa_s,char * cmd,char * reply,int buflen)6627 static int get_hs20_icon(struct wpa_supplicant *wpa_s, char *cmd, char *reply,
6628 int buflen)
6629 {
6630 u8 dst_addr[ETH_ALEN];
6631 int used;
6632 char *ctx = NULL, *icon, *poffset, *psize;
6633
6634 used = hwaddr_aton2(cmd, dst_addr);
6635 if (used < 0)
6636 return -1;
6637 cmd += used;
6638
6639 icon = str_token(cmd, " ", &ctx);
6640 poffset = str_token(cmd, " ", &ctx);
6641 psize = str_token(cmd, " ", &ctx);
6642 if (!icon || !poffset || !psize)
6643 return -1;
6644
6645 wpa_s->fetch_osu_icon_in_progress = 0;
6646 return hs20_get_icon(wpa_s, dst_addr, icon, atoi(poffset), atoi(psize),
6647 reply, buflen);
6648 }
6649
6650
del_hs20_icon(struct wpa_supplicant * wpa_s,char * cmd)6651 static int del_hs20_icon(struct wpa_supplicant *wpa_s, char *cmd)
6652 {
6653 u8 dst_addr[ETH_ALEN];
6654 int used;
6655 char *icon;
6656
6657 if (!cmd[0])
6658 return hs20_del_icon(wpa_s, NULL, NULL);
6659
6660 used = hwaddr_aton2(cmd, dst_addr);
6661 if (used < 0)
6662 return -1;
6663
6664 while (cmd[used] == ' ')
6665 used++;
6666 icon = cmd[used] ? &cmd[used] : NULL;
6667
6668 return hs20_del_icon(wpa_s, dst_addr, icon);
6669 }
6670
6671
hs20_icon_request(struct wpa_supplicant * wpa_s,char * cmd,int inmem)6672 static int hs20_icon_request(struct wpa_supplicant *wpa_s, char *cmd, int inmem)
6673 {
6674 u8 dst_addr[ETH_ALEN];
6675 int used;
6676 char *icon;
6677
6678 used = hwaddr_aton2(cmd, dst_addr);
6679 if (used < 0)
6680 return -1;
6681
6682 while (cmd[used] == ' ')
6683 used++;
6684 icon = &cmd[used];
6685
6686 wpa_s->fetch_osu_icon_in_progress = 0;
6687 return hs20_anqp_send_req(wpa_s, dst_addr, BIT(HS20_STYPE_ICON_REQUEST),
6688 (u8 *) icon, os_strlen(icon), inmem);
6689 }
6690
6691 #endif /* CONFIG_HS20 */
6692
6693
6694 #ifdef CONFIG_AUTOSCAN
6695
wpa_supplicant_ctrl_iface_autoscan(struct wpa_supplicant * wpa_s,char * cmd)6696 static int wpa_supplicant_ctrl_iface_autoscan(struct wpa_supplicant *wpa_s,
6697 char *cmd)
6698 {
6699 enum wpa_states state = wpa_s->wpa_state;
6700 char *new_params = NULL;
6701
6702 if (os_strlen(cmd) > 0) {
6703 new_params = os_strdup(cmd);
6704 if (new_params == NULL)
6705 return -1;
6706 }
6707
6708 os_free(wpa_s->conf->autoscan);
6709 wpa_s->conf->autoscan = new_params;
6710
6711 if (wpa_s->conf->autoscan == NULL)
6712 autoscan_deinit(wpa_s);
6713 else if (state == WPA_DISCONNECTED || state == WPA_INACTIVE)
6714 autoscan_init(wpa_s, 1);
6715 else if (state == WPA_SCANNING)
6716 wpa_supplicant_reinit_autoscan(wpa_s);
6717
6718 return 0;
6719 }
6720
6721 #endif /* CONFIG_AUTOSCAN */
6722
6723
6724 #ifdef CONFIG_WNM
6725
wpas_ctrl_iface_wnm_sleep(struct wpa_supplicant * wpa_s,char * cmd)6726 static int wpas_ctrl_iface_wnm_sleep(struct wpa_supplicant *wpa_s, char *cmd)
6727 {
6728 int enter;
6729 int intval = 0;
6730 char *pos;
6731 int ret;
6732 struct wpabuf *tfs_req = NULL;
6733
6734 if (os_strncmp(cmd, "enter", 5) == 0)
6735 enter = 1;
6736 else if (os_strncmp(cmd, "exit", 4) == 0)
6737 enter = 0;
6738 else
6739 return -1;
6740
6741 pos = os_strstr(cmd, " interval=");
6742 if (pos)
6743 intval = atoi(pos + 10);
6744
6745 pos = os_strstr(cmd, " tfs_req=");
6746 if (pos) {
6747 char *end;
6748 size_t len;
6749 pos += 9;
6750 end = os_strchr(pos, ' ');
6751 if (end)
6752 len = end - pos;
6753 else
6754 len = os_strlen(pos);
6755 if (len & 1)
6756 return -1;
6757 len /= 2;
6758 tfs_req = wpabuf_alloc(len);
6759 if (tfs_req == NULL)
6760 return -1;
6761 if (hexstr2bin(pos, wpabuf_put(tfs_req, len), len) < 0) {
6762 wpabuf_free(tfs_req);
6763 return -1;
6764 }
6765 }
6766
6767 ret = ieee802_11_send_wnmsleep_req(wpa_s, enter ? WNM_SLEEP_MODE_ENTER :
6768 WNM_SLEEP_MODE_EXIT, intval,
6769 tfs_req);
6770 wpabuf_free(tfs_req);
6771
6772 return ret;
6773 }
6774
6775
wpas_ctrl_iface_wnm_bss_query(struct wpa_supplicant * wpa_s,char * cmd)6776 static int wpas_ctrl_iface_wnm_bss_query(struct wpa_supplicant *wpa_s, char *cmd)
6777 {
6778 int query_reason, list = 0;
6779
6780 query_reason = atoi(cmd);
6781
6782 cmd = os_strchr(cmd, ' ');
6783 if (cmd) {
6784 cmd++;
6785 if (os_strncmp(cmd, "list", 4) == 0) {
6786 list = 1;
6787 } else {
6788 wpa_printf(MSG_DEBUG, "WNM Query: Invalid option %s",
6789 cmd);
6790 return -1;
6791 }
6792 }
6793
6794 wpa_printf(MSG_DEBUG,
6795 "CTRL_IFACE: WNM_BSS_QUERY query_reason=%d%s",
6796 query_reason, list ? " candidate list" : "");
6797
6798 return wnm_send_bss_transition_mgmt_query(wpa_s, query_reason, list);
6799 }
6800
6801 #endif /* CONFIG_WNM */
6802
6803
wpa_supplicant_signal_poll(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)6804 static int wpa_supplicant_signal_poll(struct wpa_supplicant *wpa_s, char *buf,
6805 size_t buflen)
6806 {
6807 struct wpa_signal_info si;
6808 int ret;
6809 char *pos, *end;
6810
6811 ret = wpa_drv_signal_poll(wpa_s, &si);
6812 if (ret)
6813 return -1;
6814
6815 pos = buf;
6816 end = buf + buflen;
6817
6818 ret = os_snprintf(pos, end - pos, "RSSI=%d\nLINKSPEED=%d\n"
6819 "NOISE=%d\nFREQUENCY=%u\n",
6820 si.current_signal, si.current_txrate / 1000,
6821 si.current_noise, si.frequency);
6822 if (os_snprintf_error(end - pos, ret))
6823 return -1;
6824 pos += ret;
6825
6826 if (si.chanwidth != CHAN_WIDTH_UNKNOWN) {
6827 ret = os_snprintf(pos, end - pos, "WIDTH=%s\n",
6828 channel_width_to_string(si.chanwidth));
6829 if (os_snprintf_error(end - pos, ret))
6830 return -1;
6831 pos += ret;
6832 }
6833
6834 if (si.center_frq1 > 0 && si.center_frq2 > 0) {
6835 ret = os_snprintf(pos, end - pos,
6836 "CENTER_FRQ1=%d\nCENTER_FRQ2=%d\n",
6837 si.center_frq1, si.center_frq2);
6838 if (os_snprintf_error(end - pos, ret))
6839 return -1;
6840 pos += ret;
6841 }
6842
6843 if (si.avg_signal) {
6844 ret = os_snprintf(pos, end - pos,
6845 "AVG_RSSI=%d\n", si.avg_signal);
6846 if (os_snprintf_error(end - pos, ret))
6847 return -1;
6848 pos += ret;
6849 }
6850
6851 if (si.avg_beacon_signal) {
6852 ret = os_snprintf(pos, end - pos,
6853 "AVG_BEACON_RSSI=%d\n", si.avg_beacon_signal);
6854 if (os_snprintf_error(end - pos, ret))
6855 return -1;
6856 pos += ret;
6857 }
6858
6859 return pos - buf;
6860 }
6861
6862
wpas_ctrl_iface_signal_monitor(struct wpa_supplicant * wpa_s,const char * cmd)6863 static int wpas_ctrl_iface_signal_monitor(struct wpa_supplicant *wpa_s,
6864 const char *cmd)
6865 {
6866 const char *pos;
6867 int threshold = 0;
6868 int hysteresis = 0;
6869
6870 if (wpa_s->bgscan && wpa_s->bgscan_priv) {
6871 wpa_printf(MSG_DEBUG,
6872 "Reject SIGNAL_MONITOR command - bgscan is active");
6873 return -1;
6874 }
6875 pos = os_strstr(cmd, "THRESHOLD=");
6876 if (pos)
6877 threshold = atoi(pos + 10);
6878 pos = os_strstr(cmd, "HYSTERESIS=");
6879 if (pos)
6880 hysteresis = atoi(pos + 11);
6881 return wpa_drv_signal_monitor(wpa_s, threshold, hysteresis);
6882 }
6883
6884
wpas_ctrl_iface_get_pref_freq_list(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)6885 static int wpas_ctrl_iface_get_pref_freq_list(
6886 struct wpa_supplicant *wpa_s, char *cmd, char *buf, size_t buflen)
6887 {
6888 unsigned int freq_list[100], num = 100, i;
6889 int ret;
6890 enum wpa_driver_if_type iface_type;
6891 char *pos, *end;
6892
6893 pos = buf;
6894 end = buf + buflen;
6895
6896 /* buf: "<interface_type>" */
6897 if (os_strcmp(cmd, "STATION") == 0)
6898 iface_type = WPA_IF_STATION;
6899 else if (os_strcmp(cmd, "AP") == 0)
6900 iface_type = WPA_IF_AP_BSS;
6901 else if (os_strcmp(cmd, "P2P_GO") == 0)
6902 iface_type = WPA_IF_P2P_GO;
6903 else if (os_strcmp(cmd, "P2P_CLIENT") == 0)
6904 iface_type = WPA_IF_P2P_CLIENT;
6905 else if (os_strcmp(cmd, "IBSS") == 0)
6906 iface_type = WPA_IF_IBSS;
6907 else if (os_strcmp(cmd, "TDLS") == 0)
6908 iface_type = WPA_IF_TDLS;
6909 else
6910 return -1;
6911
6912 wpa_printf(MSG_DEBUG,
6913 "CTRL_IFACE: GET_PREF_FREQ_LIST iface_type=%d (%s)",
6914 iface_type, buf);
6915
6916 ret = wpa_drv_get_pref_freq_list(wpa_s, iface_type, &num, freq_list);
6917 if (ret)
6918 return -1;
6919
6920 for (i = 0; i < num; i++) {
6921 ret = os_snprintf(pos, end - pos, "%s%u",
6922 i > 0 ? "," : "", freq_list[i]);
6923 if (os_snprintf_error(end - pos, ret))
6924 return -1;
6925 pos += ret;
6926 }
6927
6928 return pos - buf;
6929 }
6930
6931
wpa_supplicant_pktcnt_poll(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)6932 static int wpa_supplicant_pktcnt_poll(struct wpa_supplicant *wpa_s, char *buf,
6933 size_t buflen)
6934 {
6935 struct hostap_sta_driver_data sta;
6936 int ret;
6937
6938 ret = wpa_drv_pktcnt_poll(wpa_s, &sta);
6939 if (ret)
6940 return -1;
6941
6942 ret = os_snprintf(buf, buflen, "TXGOOD=%lu\nTXBAD=%lu\nRXGOOD=%lu\n",
6943 sta.tx_packets, sta.tx_retry_failed, sta.rx_packets);
6944 if (os_snprintf_error(buflen, ret))
6945 return -1;
6946 return ret;
6947 }
6948
6949
6950 #ifdef ANDROID
wpa_supplicant_driver_cmd(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)6951 static int wpa_supplicant_driver_cmd(struct wpa_supplicant *wpa_s, char *cmd,
6952 char *buf, size_t buflen)
6953 {
6954 int ret;
6955
6956 ret = wpa_drv_driver_cmd(wpa_s, cmd, buf, buflen);
6957 if (ret == 0) {
6958 if (os_strncasecmp(cmd, "COUNTRY", 7) == 0) {
6959 struct p2p_data *p2p = wpa_s->global->p2p;
6960 if (p2p) {
6961 char country[3];
6962 country[0] = cmd[8];
6963 country[1] = cmd[9];
6964 country[2] = 0x04;
6965 p2p_set_country(p2p, country);
6966 }
6967 }
6968 ret = os_snprintf(buf, buflen, "%s\n", "OK");
6969 if (os_snprintf_error(buflen, ret))
6970 ret = -1;
6971 }
6972 return ret;
6973 }
6974 #endif /* ANDROID */
6975
6976
wpa_supplicant_vendor_cmd(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)6977 static int wpa_supplicant_vendor_cmd(struct wpa_supplicant *wpa_s, char *cmd,
6978 char *buf, size_t buflen)
6979 {
6980 int ret;
6981 char *pos;
6982 u8 *data = NULL;
6983 unsigned int vendor_id, subcmd;
6984 struct wpabuf *reply;
6985 size_t data_len = 0;
6986
6987 /* cmd: <vendor id> <subcommand id> [<hex formatted data>] */
6988 vendor_id = strtoul(cmd, &pos, 16);
6989 if (!isblank((unsigned char) *pos))
6990 return -EINVAL;
6991
6992 subcmd = strtoul(pos, &pos, 10);
6993
6994 if (*pos != '\0') {
6995 if (!isblank((unsigned char) *pos++))
6996 return -EINVAL;
6997 data_len = os_strlen(pos);
6998 }
6999
7000 if (data_len) {
7001 data_len /= 2;
7002 data = os_malloc(data_len);
7003 if (!data)
7004 return -1;
7005
7006 if (hexstr2bin(pos, data, data_len)) {
7007 wpa_printf(MSG_DEBUG,
7008 "Vendor command: wrong parameter format");
7009 os_free(data);
7010 return -EINVAL;
7011 }
7012 }
7013
7014 reply = wpabuf_alloc((buflen - 1) / 2);
7015 if (!reply) {
7016 os_free(data);
7017 return -1;
7018 }
7019
7020 ret = wpa_drv_vendor_cmd(wpa_s, vendor_id, subcmd, data, data_len,
7021 reply);
7022
7023 if (ret == 0)
7024 ret = wpa_snprintf_hex(buf, buflen, wpabuf_head_u8(reply),
7025 wpabuf_len(reply));
7026
7027 wpabuf_free(reply);
7028 os_free(data);
7029
7030 return ret;
7031 }
7032
7033
wpa_supplicant_ctrl_iface_flush(struct wpa_supplicant * wpa_s)7034 static void wpa_supplicant_ctrl_iface_flush(struct wpa_supplicant *wpa_s)
7035 {
7036 #ifdef CONFIG_P2P
7037 struct wpa_supplicant *p2p_wpa_s = wpa_s->global->p2p_init_wpa_s ?
7038 wpa_s->global->p2p_init_wpa_s : wpa_s;
7039 #endif /* CONFIG_P2P */
7040
7041 wpa_dbg(wpa_s, MSG_DEBUG, "Flush all wpa_supplicant state");
7042
7043 wpas_abort_ongoing_scan(wpa_s);
7044
7045 if (wpa_s->wpa_state >= WPA_AUTHENTICATING) {
7046 /*
7047 * Avoid possible auto connect re-connection on getting
7048 * disconnected due to state flush.
7049 */
7050 wpa_supplicant_set_state(wpa_s, WPA_DISCONNECTED);
7051 }
7052
7053 #ifdef CONFIG_P2P
7054 wpas_p2p_group_remove(p2p_wpa_s, "*");
7055 wpas_p2p_cancel(p2p_wpa_s);
7056 p2p_ctrl_flush(p2p_wpa_s);
7057 wpas_p2p_service_flush(p2p_wpa_s);
7058 p2p_wpa_s->global->p2p_disabled = 0;
7059 p2p_wpa_s->global->p2p_per_sta_psk = 0;
7060 p2p_wpa_s->conf->num_sec_device_types = 0;
7061 p2p_wpa_s->p2p_disable_ip_addr_req = 0;
7062 os_free(p2p_wpa_s->global->p2p_go_avoid_freq.range);
7063 p2p_wpa_s->global->p2p_go_avoid_freq.range = NULL;
7064 p2p_wpa_s->global->p2p_go_avoid_freq.num = 0;
7065 p2p_wpa_s->global->pending_p2ps_group = 0;
7066 p2p_wpa_s->global->pending_p2ps_group_freq = 0;
7067 #endif /* CONFIG_P2P */
7068
7069 #ifdef CONFIG_WPS_TESTING
7070 wps_version_number = 0x20;
7071 wps_testing_dummy_cred = 0;
7072 wps_corrupt_pkhash = 0;
7073 wps_force_auth_types_in_use = 0;
7074 wps_force_encr_types_in_use = 0;
7075 #endif /* CONFIG_WPS_TESTING */
7076 #ifdef CONFIG_WPS
7077 wpa_s->wps_fragment_size = 0;
7078 wpas_wps_cancel(wpa_s);
7079 wps_registrar_flush(wpa_s->wps->registrar);
7080 #endif /* CONFIG_WPS */
7081 wpa_s->after_wps = 0;
7082 wpa_s->known_wps_freq = 0;
7083
7084 #ifdef CONFIG_TDLS
7085 #ifdef CONFIG_TDLS_TESTING
7086 extern unsigned int tdls_testing;
7087 tdls_testing = 0;
7088 #endif /* CONFIG_TDLS_TESTING */
7089 wpa_drv_tdls_oper(wpa_s, TDLS_ENABLE, NULL);
7090 wpa_tdls_enable(wpa_s->wpa, 1);
7091 #endif /* CONFIG_TDLS */
7092
7093 eloop_cancel_timeout(wpa_supplicant_stop_countermeasures, wpa_s, NULL);
7094 wpa_supplicant_stop_countermeasures(wpa_s, NULL);
7095
7096 wpa_s->no_keep_alive = 0;
7097 wpa_s->own_disconnect_req = 0;
7098
7099 os_free(wpa_s->disallow_aps_bssid);
7100 wpa_s->disallow_aps_bssid = NULL;
7101 wpa_s->disallow_aps_bssid_count = 0;
7102 os_free(wpa_s->disallow_aps_ssid);
7103 wpa_s->disallow_aps_ssid = NULL;
7104 wpa_s->disallow_aps_ssid_count = 0;
7105
7106 wpa_s->set_sta_uapsd = 0;
7107 wpa_s->sta_uapsd = 0;
7108
7109 wpa_drv_radio_disable(wpa_s, 0);
7110 wpa_blacklist_clear(wpa_s);
7111 wpa_s->extra_blacklist_count = 0;
7112 wpa_supplicant_ctrl_iface_remove_network(wpa_s, "all");
7113 wpa_supplicant_ctrl_iface_remove_cred(wpa_s, "all");
7114 wpa_config_flush_blobs(wpa_s->conf);
7115 wpa_s->conf->auto_interworking = 0;
7116 wpa_s->conf->okc = 0;
7117
7118 wpa_sm_pmksa_cache_flush(wpa_s->wpa, NULL);
7119 rsn_preauth_deinit(wpa_s->wpa);
7120
7121 wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_LIFETIME, 43200);
7122 wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_REAUTH_THRESHOLD, 70);
7123 wpa_sm_set_param(wpa_s->wpa, RSNA_SA_TIMEOUT, 60);
7124 eapol_sm_notify_logoff(wpa_s->eapol, FALSE);
7125
7126 radio_remove_works(wpa_s, NULL, 1);
7127 wpa_s->ext_work_in_progress = 0;
7128
7129 wpa_s->next_ssid = NULL;
7130
7131 #ifdef CONFIG_INTERWORKING
7132 #ifdef CONFIG_HS20
7133 hs20_cancel_fetch_osu(wpa_s);
7134 hs20_del_icon(wpa_s, NULL, NULL);
7135 #endif /* CONFIG_HS20 */
7136 #endif /* CONFIG_INTERWORKING */
7137
7138 wpa_s->ext_mgmt_frame_handling = 0;
7139 wpa_s->ext_eapol_frame_io = 0;
7140 #ifdef CONFIG_TESTING_OPTIONS
7141 wpa_s->extra_roc_dur = 0;
7142 wpa_s->test_failure = WPAS_TEST_FAILURE_NONE;
7143 wpa_s->p2p_go_csa_on_inv = 0;
7144 wpa_sm_set_test_assoc_ie(wpa_s->wpa, NULL);
7145 #endif /* CONFIG_TESTING_OPTIONS */
7146
7147 wpa_s->disconnected = 0;
7148 os_free(wpa_s->next_scan_freqs);
7149 wpa_s->next_scan_freqs = NULL;
7150
7151 wpa_bss_flush(wpa_s);
7152 if (!dl_list_empty(&wpa_s->bss)) {
7153 wpa_printf(MSG_DEBUG,
7154 "BSS table not empty after flush: %u entries, current_bss=%p bssid="
7155 MACSTR " pending_bssid=" MACSTR,
7156 dl_list_len(&wpa_s->bss), wpa_s->current_bss,
7157 MAC2STR(wpa_s->bssid),
7158 MAC2STR(wpa_s->pending_bssid));
7159 }
7160
7161 eloop_cancel_timeout(wpas_network_reenabled, wpa_s, NULL);
7162 wpa_s->wnmsleep_used = 0;
7163 }
7164
7165
wpas_ctrl_radio_work_show(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)7166 static int wpas_ctrl_radio_work_show(struct wpa_supplicant *wpa_s,
7167 char *buf, size_t buflen)
7168 {
7169 struct wpa_radio_work *work;
7170 char *pos, *end;
7171 struct os_reltime now, diff;
7172
7173 pos = buf;
7174 end = buf + buflen;
7175
7176 os_get_reltime(&now);
7177
7178 dl_list_for_each(work, &wpa_s->radio->work, struct wpa_radio_work, list)
7179 {
7180 int ret;
7181
7182 os_reltime_sub(&now, &work->time, &diff);
7183 ret = os_snprintf(pos, end - pos, "%s@%s:%u:%u:%ld.%06ld\n",
7184 work->type, work->wpa_s->ifname, work->freq,
7185 work->started, diff.sec, diff.usec);
7186 if (os_snprintf_error(end - pos, ret))
7187 break;
7188 pos += ret;
7189 }
7190
7191 return pos - buf;
7192 }
7193
7194
wpas_ctrl_radio_work_timeout(void * eloop_ctx,void * timeout_ctx)7195 static void wpas_ctrl_radio_work_timeout(void *eloop_ctx, void *timeout_ctx)
7196 {
7197 struct wpa_radio_work *work = eloop_ctx;
7198 struct wpa_external_work *ework = work->ctx;
7199
7200 wpa_dbg(work->wpa_s, MSG_DEBUG,
7201 "Timing out external radio work %u (%s)",
7202 ework->id, work->type);
7203 wpa_msg(work->wpa_s, MSG_INFO, EXT_RADIO_WORK_TIMEOUT "%u", ework->id);
7204 work->wpa_s->ext_work_in_progress = 0;
7205 radio_work_done(work);
7206 os_free(ework);
7207 }
7208
7209
wpas_ctrl_radio_work_cb(struct wpa_radio_work * work,int deinit)7210 static void wpas_ctrl_radio_work_cb(struct wpa_radio_work *work, int deinit)
7211 {
7212 struct wpa_external_work *ework = work->ctx;
7213
7214 if (deinit) {
7215 if (work->started)
7216 eloop_cancel_timeout(wpas_ctrl_radio_work_timeout,
7217 work, NULL);
7218
7219 os_free(ework);
7220 return;
7221 }
7222
7223 wpa_dbg(work->wpa_s, MSG_DEBUG, "Starting external radio work %u (%s)",
7224 ework->id, ework->type);
7225 wpa_msg(work->wpa_s, MSG_INFO, EXT_RADIO_WORK_START "%u", ework->id);
7226 work->wpa_s->ext_work_in_progress = 1;
7227 if (!ework->timeout)
7228 ework->timeout = 10;
7229 eloop_register_timeout(ework->timeout, 0, wpas_ctrl_radio_work_timeout,
7230 work, NULL);
7231 }
7232
7233
wpas_ctrl_radio_work_add(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)7234 static int wpas_ctrl_radio_work_add(struct wpa_supplicant *wpa_s, char *cmd,
7235 char *buf, size_t buflen)
7236 {
7237 struct wpa_external_work *ework;
7238 char *pos, *pos2;
7239 size_t type_len;
7240 int ret;
7241 unsigned int freq = 0;
7242
7243 /* format: <name> [freq=<MHz>] [timeout=<seconds>] */
7244
7245 ework = os_zalloc(sizeof(*ework));
7246 if (ework == NULL)
7247 return -1;
7248
7249 pos = os_strchr(cmd, ' ');
7250 if (pos) {
7251 type_len = pos - cmd;
7252 pos++;
7253
7254 pos2 = os_strstr(pos, "freq=");
7255 if (pos2)
7256 freq = atoi(pos2 + 5);
7257
7258 pos2 = os_strstr(pos, "timeout=");
7259 if (pos2)
7260 ework->timeout = atoi(pos2 + 8);
7261 } else {
7262 type_len = os_strlen(cmd);
7263 }
7264 if (4 + type_len >= sizeof(ework->type))
7265 type_len = sizeof(ework->type) - 4 - 1;
7266 os_strlcpy(ework->type, "ext:", sizeof(ework->type));
7267 os_memcpy(ework->type + 4, cmd, type_len);
7268 ework->type[4 + type_len] = '\0';
7269
7270 wpa_s->ext_work_id++;
7271 if (wpa_s->ext_work_id == 0)
7272 wpa_s->ext_work_id++;
7273 ework->id = wpa_s->ext_work_id;
7274
7275 if (radio_add_work(wpa_s, freq, ework->type, 0, wpas_ctrl_radio_work_cb,
7276 ework) < 0) {
7277 os_free(ework);
7278 return -1;
7279 }
7280
7281 ret = os_snprintf(buf, buflen, "%u", ework->id);
7282 if (os_snprintf_error(buflen, ret))
7283 return -1;
7284 return ret;
7285 }
7286
7287
wpas_ctrl_radio_work_done(struct wpa_supplicant * wpa_s,char * cmd)7288 static int wpas_ctrl_radio_work_done(struct wpa_supplicant *wpa_s, char *cmd)
7289 {
7290 struct wpa_radio_work *work;
7291 unsigned int id = atoi(cmd);
7292
7293 dl_list_for_each(work, &wpa_s->radio->work, struct wpa_radio_work, list)
7294 {
7295 struct wpa_external_work *ework;
7296
7297 if (os_strncmp(work->type, "ext:", 4) != 0)
7298 continue;
7299 ework = work->ctx;
7300 if (id && ework->id != id)
7301 continue;
7302 wpa_dbg(wpa_s, MSG_DEBUG,
7303 "Completed external radio work %u (%s)",
7304 ework->id, ework->type);
7305 eloop_cancel_timeout(wpas_ctrl_radio_work_timeout, work, NULL);
7306 wpa_s->ext_work_in_progress = 0;
7307 radio_work_done(work);
7308 os_free(ework);
7309 return 3; /* "OK\n" */
7310 }
7311
7312 return -1;
7313 }
7314
7315
wpas_ctrl_radio_work(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)7316 static int wpas_ctrl_radio_work(struct wpa_supplicant *wpa_s, char *cmd,
7317 char *buf, size_t buflen)
7318 {
7319 if (os_strcmp(cmd, "show") == 0)
7320 return wpas_ctrl_radio_work_show(wpa_s, buf, buflen);
7321 if (os_strncmp(cmd, "add ", 4) == 0)
7322 return wpas_ctrl_radio_work_add(wpa_s, cmd + 4, buf, buflen);
7323 if (os_strncmp(cmd, "done ", 5) == 0)
7324 return wpas_ctrl_radio_work_done(wpa_s, cmd + 4);
7325 return -1;
7326 }
7327
7328
wpas_ctrl_radio_work_flush(struct wpa_supplicant * wpa_s)7329 void wpas_ctrl_radio_work_flush(struct wpa_supplicant *wpa_s)
7330 {
7331 struct wpa_radio_work *work, *tmp;
7332
7333 if (!wpa_s || !wpa_s->radio)
7334 return;
7335
7336 dl_list_for_each_safe(work, tmp, &wpa_s->radio->work,
7337 struct wpa_radio_work, list) {
7338 struct wpa_external_work *ework;
7339
7340 if (os_strncmp(work->type, "ext:", 4) != 0)
7341 continue;
7342 ework = work->ctx;
7343 wpa_dbg(wpa_s, MSG_DEBUG,
7344 "Flushing%s external radio work %u (%s)",
7345 work->started ? " started" : "", ework->id,
7346 ework->type);
7347 if (work->started)
7348 eloop_cancel_timeout(wpas_ctrl_radio_work_timeout,
7349 work, NULL);
7350 radio_work_done(work);
7351 os_free(ework);
7352 }
7353 }
7354
7355
wpas_ctrl_eapol_response(void * eloop_ctx,void * timeout_ctx)7356 static void wpas_ctrl_eapol_response(void *eloop_ctx, void *timeout_ctx)
7357 {
7358 struct wpa_supplicant *wpa_s = eloop_ctx;
7359 eapol_sm_notify_ctrl_response(wpa_s->eapol);
7360 }
7361
7362
scan_id_list_parse(struct wpa_supplicant * wpa_s,const char * value,unsigned int * scan_id_count,int scan_id[])7363 static int scan_id_list_parse(struct wpa_supplicant *wpa_s, const char *value,
7364 unsigned int *scan_id_count, int scan_id[])
7365 {
7366 const char *pos = value;
7367
7368 while (pos) {
7369 if (*pos == ' ' || *pos == '\0')
7370 break;
7371 if (*scan_id_count == MAX_SCAN_ID)
7372 return -1;
7373 scan_id[(*scan_id_count)++] = atoi(pos);
7374 pos = os_strchr(pos, ',');
7375 if (pos)
7376 pos++;
7377 }
7378
7379 return 0;
7380 }
7381
7382
wpas_ctrl_scan(struct wpa_supplicant * wpa_s,char * params,char * reply,int reply_size,int * reply_len)7383 static void wpas_ctrl_scan(struct wpa_supplicant *wpa_s, char *params,
7384 char *reply, int reply_size, int *reply_len)
7385 {
7386 char *pos;
7387 unsigned int manual_scan_passive = 0;
7388 unsigned int manual_scan_use_id = 0;
7389 unsigned int manual_scan_only_new = 0;
7390 unsigned int scan_only = 0;
7391 unsigned int scan_id_count = 0;
7392 int scan_id[MAX_SCAN_ID];
7393 void (*scan_res_handler)(struct wpa_supplicant *wpa_s,
7394 struct wpa_scan_results *scan_res);
7395 int *manual_scan_freqs = NULL;
7396 struct wpa_ssid_value *ssid = NULL, *ns;
7397 unsigned int ssid_count = 0;
7398
7399 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED) {
7400 *reply_len = -1;
7401 return;
7402 }
7403
7404 if (radio_work_pending(wpa_s, "scan")) {
7405 wpa_printf(MSG_DEBUG,
7406 "Pending scan scheduled - reject new request");
7407 *reply_len = os_snprintf(reply, reply_size, "FAIL-BUSY\n");
7408 return;
7409 }
7410
7411 #ifdef CONFIG_INTERWORKING
7412 if (wpa_s->fetch_anqp_in_progress || wpa_s->network_select) {
7413 wpa_printf(MSG_DEBUG,
7414 "Interworking select in progress - reject new scan");
7415 *reply_len = os_snprintf(reply, reply_size, "FAIL-BUSY\n");
7416 return;
7417 }
7418 #endif /* CONFIG_INTERWORKING */
7419
7420 if (params) {
7421 if (os_strncasecmp(params, "TYPE=ONLY", 9) == 0)
7422 scan_only = 1;
7423
7424 pos = os_strstr(params, "freq=");
7425 if (pos) {
7426 manual_scan_freqs = freq_range_to_channel_list(wpa_s,
7427 pos + 5);
7428 if (manual_scan_freqs == NULL) {
7429 *reply_len = -1;
7430 goto done;
7431 }
7432 }
7433
7434 pos = os_strstr(params, "passive=");
7435 if (pos)
7436 manual_scan_passive = !!atoi(pos + 8);
7437
7438 pos = os_strstr(params, "use_id=");
7439 if (pos)
7440 manual_scan_use_id = atoi(pos + 7);
7441
7442 pos = os_strstr(params, "only_new=1");
7443 if (pos)
7444 manual_scan_only_new = 1;
7445
7446 pos = os_strstr(params, "scan_id=");
7447 if (pos && scan_id_list_parse(wpa_s, pos + 8, &scan_id_count,
7448 scan_id) < 0) {
7449 *reply_len = -1;
7450 goto done;
7451 }
7452
7453 pos = params;
7454 while (pos && *pos != '\0') {
7455 if (os_strncmp(pos, "ssid ", 5) == 0) {
7456 char *end;
7457
7458 pos += 5;
7459 end = pos;
7460 while (*end) {
7461 if (*end == '\0' || *end == ' ')
7462 break;
7463 end++;
7464 }
7465
7466 ns = os_realloc_array(
7467 ssid, ssid_count + 1,
7468 sizeof(struct wpa_ssid_value));
7469 if (ns == NULL) {
7470 *reply_len = -1;
7471 goto done;
7472 }
7473 ssid = ns;
7474
7475 if ((end - pos) & 0x01 ||
7476 end - pos > 2 * SSID_MAX_LEN ||
7477 hexstr2bin(pos, ssid[ssid_count].ssid,
7478 (end - pos) / 2) < 0) {
7479 wpa_printf(MSG_DEBUG,
7480 "Invalid SSID value '%s'",
7481 pos);
7482 *reply_len = -1;
7483 goto done;
7484 }
7485 ssid[ssid_count].ssid_len = (end - pos) / 2;
7486 wpa_hexdump_ascii(MSG_DEBUG, "scan SSID",
7487 ssid[ssid_count].ssid,
7488 ssid[ssid_count].ssid_len);
7489 ssid_count++;
7490 pos = end;
7491 }
7492
7493 pos = os_strchr(pos, ' ');
7494 if (pos)
7495 pos++;
7496 }
7497 }
7498
7499 wpa_s->num_ssids_from_scan_req = ssid_count;
7500 os_free(wpa_s->ssids_from_scan_req);
7501 if (ssid_count) {
7502 wpa_s->ssids_from_scan_req = ssid;
7503 ssid = NULL;
7504 } else {
7505 wpa_s->ssids_from_scan_req = NULL;
7506 }
7507
7508 if (scan_only)
7509 scan_res_handler = scan_only_handler;
7510 else if (wpa_s->scan_res_handler == scan_only_handler)
7511 scan_res_handler = NULL;
7512 else
7513 scan_res_handler = wpa_s->scan_res_handler;
7514
7515 if (!wpa_s->sched_scanning && !wpa_s->scanning &&
7516 ((wpa_s->wpa_state <= WPA_SCANNING) ||
7517 (wpa_s->wpa_state == WPA_COMPLETED))) {
7518 wpa_s->manual_scan_passive = manual_scan_passive;
7519 wpa_s->manual_scan_use_id = manual_scan_use_id;
7520 wpa_s->manual_scan_only_new = manual_scan_only_new;
7521 wpa_s->scan_id_count = scan_id_count;
7522 os_memcpy(wpa_s->scan_id, scan_id, scan_id_count * sizeof(int));
7523 wpa_s->scan_res_handler = scan_res_handler;
7524 os_free(wpa_s->manual_scan_freqs);
7525 wpa_s->manual_scan_freqs = manual_scan_freqs;
7526 manual_scan_freqs = NULL;
7527
7528 wpa_s->normal_scans = 0;
7529 wpa_s->scan_req = MANUAL_SCAN_REQ;
7530 wpa_s->after_wps = 0;
7531 wpa_s->known_wps_freq = 0;
7532 wpa_supplicant_req_scan(wpa_s, 0, 0);
7533 if (wpa_s->manual_scan_use_id) {
7534 wpa_s->manual_scan_id++;
7535 wpa_dbg(wpa_s, MSG_DEBUG, "Assigned scan id %u",
7536 wpa_s->manual_scan_id);
7537 *reply_len = os_snprintf(reply, reply_size, "%u\n",
7538 wpa_s->manual_scan_id);
7539 }
7540 } else if (wpa_s->sched_scanning) {
7541 wpa_s->manual_scan_passive = manual_scan_passive;
7542 wpa_s->manual_scan_use_id = manual_scan_use_id;
7543 wpa_s->manual_scan_only_new = manual_scan_only_new;
7544 wpa_s->scan_id_count = scan_id_count;
7545 os_memcpy(wpa_s->scan_id, scan_id, scan_id_count * sizeof(int));
7546 wpa_s->scan_res_handler = scan_res_handler;
7547 os_free(wpa_s->manual_scan_freqs);
7548 wpa_s->manual_scan_freqs = manual_scan_freqs;
7549 manual_scan_freqs = NULL;
7550
7551 wpa_printf(MSG_DEBUG, "Stop ongoing sched_scan to allow requested full scan to proceed");
7552 wpa_supplicant_cancel_sched_scan(wpa_s);
7553 wpa_s->scan_req = MANUAL_SCAN_REQ;
7554 wpa_supplicant_req_scan(wpa_s, 0, 0);
7555 if (wpa_s->manual_scan_use_id) {
7556 wpa_s->manual_scan_id++;
7557 *reply_len = os_snprintf(reply, reply_size, "%u\n",
7558 wpa_s->manual_scan_id);
7559 wpa_dbg(wpa_s, MSG_DEBUG, "Assigned scan id %u",
7560 wpa_s->manual_scan_id);
7561 }
7562 } else {
7563 wpa_printf(MSG_DEBUG, "Ongoing scan action - reject new request");
7564 *reply_len = os_snprintf(reply, reply_size, "FAIL-BUSY\n");
7565 }
7566
7567 done:
7568 os_free(manual_scan_freqs);
7569 os_free(ssid);
7570 }
7571
7572
7573 #ifdef CONFIG_TESTING_OPTIONS
7574
wpas_ctrl_iface_mgmt_tx_cb(struct wpa_supplicant * wpa_s,unsigned int freq,const u8 * dst,const u8 * src,const u8 * bssid,const u8 * data,size_t data_len,enum offchannel_send_action_result result)7575 static void wpas_ctrl_iface_mgmt_tx_cb(struct wpa_supplicant *wpa_s,
7576 unsigned int freq, const u8 *dst,
7577 const u8 *src, const u8 *bssid,
7578 const u8 *data, size_t data_len,
7579 enum offchannel_send_action_result
7580 result)
7581 {
7582 wpa_msg(wpa_s, MSG_INFO, "MGMT-TX-STATUS freq=%u dst=" MACSTR
7583 " src=" MACSTR " bssid=" MACSTR " result=%s",
7584 freq, MAC2STR(dst), MAC2STR(src), MAC2STR(bssid),
7585 result == OFFCHANNEL_SEND_ACTION_SUCCESS ?
7586 "SUCCESS" : (result == OFFCHANNEL_SEND_ACTION_NO_ACK ?
7587 "NO_ACK" : "FAILED"));
7588 }
7589
7590
wpas_ctrl_iface_mgmt_tx(struct wpa_supplicant * wpa_s,char * cmd)7591 static int wpas_ctrl_iface_mgmt_tx(struct wpa_supplicant *wpa_s, char *cmd)
7592 {
7593 char *pos, *param;
7594 size_t len;
7595 u8 *buf, da[ETH_ALEN], bssid[ETH_ALEN];
7596 int res, used;
7597 int freq = 0, no_cck = 0, wait_time = 0;
7598
7599 /* <DA> <BSSID> [freq=<MHz>] [wait_time=<ms>] [no_cck=1]
7600 * <action=Action frame payload> */
7601
7602 wpa_printf(MSG_DEBUG, "External MGMT TX: %s", cmd);
7603
7604 pos = cmd;
7605 used = hwaddr_aton2(pos, da);
7606 if (used < 0)
7607 return -1;
7608 pos += used;
7609 while (*pos == ' ')
7610 pos++;
7611 used = hwaddr_aton2(pos, bssid);
7612 if (used < 0)
7613 return -1;
7614 pos += used;
7615
7616 param = os_strstr(pos, " freq=");
7617 if (param) {
7618 param += 6;
7619 freq = atoi(param);
7620 }
7621
7622 param = os_strstr(pos, " no_cck=");
7623 if (param) {
7624 param += 8;
7625 no_cck = atoi(param);
7626 }
7627
7628 param = os_strstr(pos, " wait_time=");
7629 if (param) {
7630 param += 11;
7631 wait_time = atoi(param);
7632 }
7633
7634 param = os_strstr(pos, " action=");
7635 if (param == NULL)
7636 return -1;
7637 param += 8;
7638
7639 len = os_strlen(param);
7640 if (len & 1)
7641 return -1;
7642 len /= 2;
7643
7644 buf = os_malloc(len);
7645 if (buf == NULL)
7646 return -1;
7647
7648 if (hexstr2bin(param, buf, len) < 0) {
7649 os_free(buf);
7650 return -1;
7651 }
7652
7653 res = offchannel_send_action(wpa_s, freq, da, wpa_s->own_addr, bssid,
7654 buf, len, wait_time,
7655 wpas_ctrl_iface_mgmt_tx_cb, no_cck);
7656 os_free(buf);
7657 return res;
7658 }
7659
7660
wpas_ctrl_iface_mgmt_tx_done(struct wpa_supplicant * wpa_s)7661 static void wpas_ctrl_iface_mgmt_tx_done(struct wpa_supplicant *wpa_s)
7662 {
7663 wpa_printf(MSG_DEBUG, "External MGMT TX - done waiting");
7664 offchannel_send_action_done(wpa_s);
7665 }
7666
7667
wpas_ctrl_iface_driver_event(struct wpa_supplicant * wpa_s,char * cmd)7668 static int wpas_ctrl_iface_driver_event(struct wpa_supplicant *wpa_s, char *cmd)
7669 {
7670 char *pos, *param;
7671 union wpa_event_data event;
7672 enum wpa_event_type ev;
7673
7674 /* <event name> [parameters..] */
7675
7676 wpa_dbg(wpa_s, MSG_DEBUG, "Testing - external driver event: %s", cmd);
7677
7678 pos = cmd;
7679 param = os_strchr(pos, ' ');
7680 if (param)
7681 *param++ = '\0';
7682
7683 os_memset(&event, 0, sizeof(event));
7684
7685 if (os_strcmp(cmd, "INTERFACE_ENABLED") == 0) {
7686 ev = EVENT_INTERFACE_ENABLED;
7687 } else if (os_strcmp(cmd, "INTERFACE_DISABLED") == 0) {
7688 ev = EVENT_INTERFACE_DISABLED;
7689 } else if (os_strcmp(cmd, "AVOID_FREQUENCIES") == 0) {
7690 ev = EVENT_AVOID_FREQUENCIES;
7691 if (param == NULL)
7692 param = "";
7693 if (freq_range_list_parse(&event.freq_range, param) < 0)
7694 return -1;
7695 wpa_supplicant_event(wpa_s, ev, &event);
7696 os_free(event.freq_range.range);
7697 return 0;
7698 } else {
7699 wpa_dbg(wpa_s, MSG_DEBUG, "Testing - unknown driver event: %s",
7700 cmd);
7701 return -1;
7702 }
7703
7704 wpa_supplicant_event(wpa_s, ev, &event);
7705
7706 return 0;
7707 }
7708
7709
wpas_ctrl_iface_eapol_rx(struct wpa_supplicant * wpa_s,char * cmd)7710 static int wpas_ctrl_iface_eapol_rx(struct wpa_supplicant *wpa_s, char *cmd)
7711 {
7712 char *pos;
7713 u8 src[ETH_ALEN], *buf;
7714 int used;
7715 size_t len;
7716
7717 wpa_printf(MSG_DEBUG, "External EAPOL RX: %s", cmd);
7718
7719 pos = cmd;
7720 used = hwaddr_aton2(pos, src);
7721 if (used < 0)
7722 return -1;
7723 pos += used;
7724 while (*pos == ' ')
7725 pos++;
7726
7727 len = os_strlen(pos);
7728 if (len & 1)
7729 return -1;
7730 len /= 2;
7731
7732 buf = os_malloc(len);
7733 if (buf == NULL)
7734 return -1;
7735
7736 if (hexstr2bin(pos, buf, len) < 0) {
7737 os_free(buf);
7738 return -1;
7739 }
7740
7741 wpa_supplicant_rx_eapol(wpa_s, src, buf, len);
7742 os_free(buf);
7743
7744 return 0;
7745 }
7746
7747
ipv4_hdr_checksum(const void * buf,size_t len)7748 static u16 ipv4_hdr_checksum(const void *buf, size_t len)
7749 {
7750 size_t i;
7751 u32 sum = 0;
7752 const u16 *pos = buf;
7753
7754 for (i = 0; i < len / 2; i++)
7755 sum += *pos++;
7756
7757 while (sum >> 16)
7758 sum = (sum & 0xffff) + (sum >> 16);
7759
7760 return sum ^ 0xffff;
7761 }
7762
7763
7764 #define HWSIM_PACKETLEN 1500
7765 #define HWSIM_IP_LEN (HWSIM_PACKETLEN - sizeof(struct ether_header))
7766
wpas_data_test_rx(void * ctx,const u8 * src_addr,const u8 * buf,size_t len)7767 void wpas_data_test_rx(void *ctx, const u8 *src_addr, const u8 *buf, size_t len)
7768 {
7769 struct wpa_supplicant *wpa_s = ctx;
7770 const struct ether_header *eth;
7771 struct iphdr ip;
7772 const u8 *pos;
7773 unsigned int i;
7774
7775 if (len != HWSIM_PACKETLEN)
7776 return;
7777
7778 eth = (const struct ether_header *) buf;
7779 os_memcpy(&ip, eth + 1, sizeof(ip));
7780 pos = &buf[sizeof(*eth) + sizeof(ip)];
7781
7782 if (ip.ihl != 5 || ip.version != 4 ||
7783 ntohs(ip.tot_len) != HWSIM_IP_LEN)
7784 return;
7785
7786 for (i = 0; i < HWSIM_IP_LEN - sizeof(ip); i++) {
7787 if (*pos != (u8) i)
7788 return;
7789 pos++;
7790 }
7791
7792 wpa_msg(wpa_s, MSG_INFO, "DATA-TEST-RX " MACSTR " " MACSTR,
7793 MAC2STR(eth->ether_dhost), MAC2STR(eth->ether_shost));
7794 }
7795
7796
wpas_ctrl_iface_data_test_config(struct wpa_supplicant * wpa_s,char * cmd)7797 static int wpas_ctrl_iface_data_test_config(struct wpa_supplicant *wpa_s,
7798 char *cmd)
7799 {
7800 int enabled = atoi(cmd);
7801 char *pos;
7802 const char *ifname;
7803
7804 if (!enabled) {
7805 if (wpa_s->l2_test) {
7806 l2_packet_deinit(wpa_s->l2_test);
7807 wpa_s->l2_test = NULL;
7808 wpa_dbg(wpa_s, MSG_DEBUG, "test data: Disabled");
7809 }
7810 return 0;
7811 }
7812
7813 if (wpa_s->l2_test)
7814 return 0;
7815
7816 pos = os_strstr(cmd, " ifname=");
7817 if (pos)
7818 ifname = pos + 8;
7819 else
7820 ifname = wpa_s->ifname;
7821
7822 wpa_s->l2_test = l2_packet_init(ifname, wpa_s->own_addr,
7823 ETHERTYPE_IP, wpas_data_test_rx,
7824 wpa_s, 1);
7825 if (wpa_s->l2_test == NULL)
7826 return -1;
7827
7828 wpa_dbg(wpa_s, MSG_DEBUG, "test data: Enabled");
7829
7830 return 0;
7831 }
7832
7833
wpas_ctrl_iface_data_test_tx(struct wpa_supplicant * wpa_s,char * cmd)7834 static int wpas_ctrl_iface_data_test_tx(struct wpa_supplicant *wpa_s, char *cmd)
7835 {
7836 u8 dst[ETH_ALEN], src[ETH_ALEN];
7837 char *pos;
7838 int used;
7839 long int val;
7840 u8 tos;
7841 u8 buf[2 + HWSIM_PACKETLEN];
7842 struct ether_header *eth;
7843 struct iphdr *ip;
7844 u8 *dpos;
7845 unsigned int i;
7846
7847 if (wpa_s->l2_test == NULL)
7848 return -1;
7849
7850 /* format: <dst> <src> <tos> */
7851
7852 pos = cmd;
7853 used = hwaddr_aton2(pos, dst);
7854 if (used < 0)
7855 return -1;
7856 pos += used;
7857 while (*pos == ' ')
7858 pos++;
7859 used = hwaddr_aton2(pos, src);
7860 if (used < 0)
7861 return -1;
7862 pos += used;
7863
7864 val = strtol(pos, NULL, 0);
7865 if (val < 0 || val > 0xff)
7866 return -1;
7867 tos = val;
7868
7869 eth = (struct ether_header *) &buf[2];
7870 os_memcpy(eth->ether_dhost, dst, ETH_ALEN);
7871 os_memcpy(eth->ether_shost, src, ETH_ALEN);
7872 eth->ether_type = htons(ETHERTYPE_IP);
7873 ip = (struct iphdr *) (eth + 1);
7874 os_memset(ip, 0, sizeof(*ip));
7875 ip->ihl = 5;
7876 ip->version = 4;
7877 ip->ttl = 64;
7878 ip->tos = tos;
7879 ip->tot_len = htons(HWSIM_IP_LEN);
7880 ip->protocol = 1;
7881 ip->saddr = htonl(192U << 24 | 168 << 16 | 1 << 8 | 1);
7882 ip->daddr = htonl(192U << 24 | 168 << 16 | 1 << 8 | 2);
7883 ip->check = ipv4_hdr_checksum(ip, sizeof(*ip));
7884 dpos = (u8 *) (ip + 1);
7885 for (i = 0; i < HWSIM_IP_LEN - sizeof(*ip); i++)
7886 *dpos++ = i;
7887
7888 if (l2_packet_send(wpa_s->l2_test, dst, ETHERTYPE_IP, &buf[2],
7889 HWSIM_PACKETLEN) < 0)
7890 return -1;
7891
7892 wpa_dbg(wpa_s, MSG_DEBUG, "test data: TX dst=" MACSTR " src=" MACSTR
7893 " tos=0x%x", MAC2STR(dst), MAC2STR(src), tos);
7894
7895 return 0;
7896 }
7897
7898
wpas_ctrl_iface_data_test_frame(struct wpa_supplicant * wpa_s,char * cmd)7899 static int wpas_ctrl_iface_data_test_frame(struct wpa_supplicant *wpa_s,
7900 char *cmd)
7901 {
7902 u8 *buf;
7903 struct ether_header *eth;
7904 struct l2_packet_data *l2 = NULL;
7905 size_t len;
7906 u16 ethertype;
7907 int res = -1;
7908
7909 len = os_strlen(cmd);
7910 if (len & 1 || len < ETH_HLEN * 2)
7911 return -1;
7912 len /= 2;
7913
7914 buf = os_malloc(len);
7915 if (buf == NULL)
7916 return -1;
7917
7918 if (hexstr2bin(cmd, buf, len) < 0)
7919 goto done;
7920
7921 eth = (struct ether_header *) buf;
7922 ethertype = ntohs(eth->ether_type);
7923
7924 l2 = l2_packet_init(wpa_s->ifname, wpa_s->own_addr, ethertype,
7925 wpas_data_test_rx, wpa_s, 1);
7926 if (l2 == NULL)
7927 goto done;
7928
7929 res = l2_packet_send(l2, eth->ether_dhost, ethertype, buf, len);
7930 wpa_dbg(wpa_s, MSG_DEBUG, "test data: TX frame res=%d", res);
7931 done:
7932 if (l2)
7933 l2_packet_deinit(l2);
7934 os_free(buf);
7935
7936 return res < 0 ? -1 : 0;
7937 }
7938
7939
wpas_ctrl_test_alloc_fail(struct wpa_supplicant * wpa_s,char * cmd)7940 static int wpas_ctrl_test_alloc_fail(struct wpa_supplicant *wpa_s, char *cmd)
7941 {
7942 #ifdef WPA_TRACE_BFD
7943 extern char wpa_trace_fail_func[256];
7944 extern unsigned int wpa_trace_fail_after;
7945 char *pos;
7946
7947 wpa_trace_fail_after = atoi(cmd);
7948 pos = os_strchr(cmd, ':');
7949 if (pos) {
7950 pos++;
7951 os_strlcpy(wpa_trace_fail_func, pos,
7952 sizeof(wpa_trace_fail_func));
7953 } else {
7954 wpa_trace_fail_after = 0;
7955 }
7956 return 0;
7957 #else /* WPA_TRACE_BFD */
7958 return -1;
7959 #endif /* WPA_TRACE_BFD */
7960 }
7961
7962
wpas_ctrl_get_alloc_fail(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)7963 static int wpas_ctrl_get_alloc_fail(struct wpa_supplicant *wpa_s,
7964 char *buf, size_t buflen)
7965 {
7966 #ifdef WPA_TRACE_BFD
7967 extern char wpa_trace_fail_func[256];
7968 extern unsigned int wpa_trace_fail_after;
7969
7970 return os_snprintf(buf, buflen, "%u:%s", wpa_trace_fail_after,
7971 wpa_trace_fail_func);
7972 #else /* WPA_TRACE_BFD */
7973 return -1;
7974 #endif /* WPA_TRACE_BFD */
7975 }
7976
7977
wpas_ctrl_test_fail(struct wpa_supplicant * wpa_s,char * cmd)7978 static int wpas_ctrl_test_fail(struct wpa_supplicant *wpa_s, char *cmd)
7979 {
7980 #ifdef WPA_TRACE_BFD
7981 extern char wpa_trace_test_fail_func[256];
7982 extern unsigned int wpa_trace_test_fail_after;
7983 char *pos;
7984
7985 wpa_trace_test_fail_after = atoi(cmd);
7986 pos = os_strchr(cmd, ':');
7987 if (pos) {
7988 pos++;
7989 os_strlcpy(wpa_trace_test_fail_func, pos,
7990 sizeof(wpa_trace_test_fail_func));
7991 } else {
7992 wpa_trace_test_fail_after = 0;
7993 }
7994 return 0;
7995 #else /* WPA_TRACE_BFD */
7996 return -1;
7997 #endif /* WPA_TRACE_BFD */
7998 }
7999
8000
wpas_ctrl_get_fail(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)8001 static int wpas_ctrl_get_fail(struct wpa_supplicant *wpa_s,
8002 char *buf, size_t buflen)
8003 {
8004 #ifdef WPA_TRACE_BFD
8005 extern char wpa_trace_test_fail_func[256];
8006 extern unsigned int wpa_trace_test_fail_after;
8007
8008 return os_snprintf(buf, buflen, "%u:%s", wpa_trace_test_fail_after,
8009 wpa_trace_test_fail_func);
8010 #else /* WPA_TRACE_BFD */
8011 return -1;
8012 #endif /* WPA_TRACE_BFD */
8013 }
8014
8015
wpas_ctrl_event_test_cb(void * eloop_ctx,void * timeout_ctx)8016 static void wpas_ctrl_event_test_cb(void *eloop_ctx, void *timeout_ctx)
8017 {
8018 struct wpa_supplicant *wpa_s = eloop_ctx;
8019 int i, count = (intptr_t) timeout_ctx;
8020
8021 wpa_printf(MSG_DEBUG, "TEST: Send %d control interface event messages",
8022 count);
8023 for (i = 0; i < count; i++) {
8024 wpa_msg_ctrl(wpa_s, MSG_INFO, "TEST-EVENT-MESSAGE %d/%d",
8025 i + 1, count);
8026 }
8027 }
8028
8029
wpas_ctrl_event_test(struct wpa_supplicant * wpa_s,const char * cmd)8030 static int wpas_ctrl_event_test(struct wpa_supplicant *wpa_s, const char *cmd)
8031 {
8032 int count;
8033
8034 count = atoi(cmd);
8035 if (count <= 0)
8036 return -1;
8037
8038 return eloop_register_timeout(0, 0, wpas_ctrl_event_test_cb, wpa_s,
8039 (void *) (intptr_t) count);
8040 }
8041
8042
wpas_ctrl_test_assoc_ie(struct wpa_supplicant * wpa_s,const char * cmd)8043 static int wpas_ctrl_test_assoc_ie(struct wpa_supplicant *wpa_s,
8044 const char *cmd)
8045 {
8046 struct wpabuf *buf;
8047 size_t len;
8048
8049 len = os_strlen(cmd);
8050 if (len & 1)
8051 return -1;
8052 len /= 2;
8053
8054 if (len == 0) {
8055 buf = NULL;
8056 } else {
8057 buf = wpabuf_alloc(len);
8058 if (buf == NULL)
8059 return -1;
8060
8061 if (hexstr2bin(cmd, wpabuf_put(buf, len), len) < 0) {
8062 wpabuf_free(buf);
8063 return -1;
8064 }
8065 }
8066
8067 wpa_sm_set_test_assoc_ie(wpa_s->wpa, buf);
8068 return 0;
8069 }
8070
8071 #endif /* CONFIG_TESTING_OPTIONS */
8072
8073
wpas_ctrl_vendor_elem_add(struct wpa_supplicant * wpa_s,char * cmd)8074 static int wpas_ctrl_vendor_elem_add(struct wpa_supplicant *wpa_s, char *cmd)
8075 {
8076 char *pos = cmd;
8077 int frame;
8078 size_t len;
8079 struct wpabuf *buf;
8080 struct ieee802_11_elems elems;
8081
8082 frame = atoi(pos);
8083 if (frame < 0 || frame >= NUM_VENDOR_ELEM_FRAMES)
8084 return -1;
8085 wpa_s = wpas_vendor_elem(wpa_s, frame);
8086
8087 pos = os_strchr(pos, ' ');
8088 if (pos == NULL)
8089 return -1;
8090 pos++;
8091
8092 len = os_strlen(pos);
8093 if (len == 0)
8094 return 0;
8095 if (len & 1)
8096 return -1;
8097 len /= 2;
8098
8099 buf = wpabuf_alloc(len);
8100 if (buf == NULL)
8101 return -1;
8102
8103 if (hexstr2bin(pos, wpabuf_put(buf, len), len) < 0) {
8104 wpabuf_free(buf);
8105 return -1;
8106 }
8107
8108 if (ieee802_11_parse_elems(wpabuf_head_u8(buf), len, &elems, 0) ==
8109 ParseFailed) {
8110 wpabuf_free(buf);
8111 return -1;
8112 }
8113
8114 if (wpa_s->vendor_elem[frame] == NULL) {
8115 wpa_s->vendor_elem[frame] = buf;
8116 wpas_vendor_elem_update(wpa_s);
8117 return 0;
8118 }
8119
8120 if (wpabuf_resize(&wpa_s->vendor_elem[frame], len) < 0) {
8121 wpabuf_free(buf);
8122 return -1;
8123 }
8124
8125 wpabuf_put_buf(wpa_s->vendor_elem[frame], buf);
8126 wpabuf_free(buf);
8127 wpas_vendor_elem_update(wpa_s);
8128
8129 return 0;
8130 }
8131
8132
wpas_ctrl_vendor_elem_get(struct wpa_supplicant * wpa_s,char * cmd,char * buf,size_t buflen)8133 static int wpas_ctrl_vendor_elem_get(struct wpa_supplicant *wpa_s, char *cmd,
8134 char *buf, size_t buflen)
8135 {
8136 int frame = atoi(cmd);
8137
8138 if (frame < 0 || frame >= NUM_VENDOR_ELEM_FRAMES)
8139 return -1;
8140 wpa_s = wpas_vendor_elem(wpa_s, frame);
8141
8142 if (wpa_s->vendor_elem[frame] == NULL)
8143 return 0;
8144
8145 return wpa_snprintf_hex(buf, buflen,
8146 wpabuf_head_u8(wpa_s->vendor_elem[frame]),
8147 wpabuf_len(wpa_s->vendor_elem[frame]));
8148 }
8149
8150
wpas_ctrl_vendor_elem_remove(struct wpa_supplicant * wpa_s,char * cmd)8151 static int wpas_ctrl_vendor_elem_remove(struct wpa_supplicant *wpa_s, char *cmd)
8152 {
8153 char *pos = cmd;
8154 int frame;
8155 size_t len;
8156 u8 *buf;
8157 struct ieee802_11_elems elems;
8158 int res;
8159
8160 frame = atoi(pos);
8161 if (frame < 0 || frame >= NUM_VENDOR_ELEM_FRAMES)
8162 return -1;
8163 wpa_s = wpas_vendor_elem(wpa_s, frame);
8164
8165 pos = os_strchr(pos, ' ');
8166 if (pos == NULL)
8167 return -1;
8168 pos++;
8169
8170 if (*pos == '*') {
8171 wpabuf_free(wpa_s->vendor_elem[frame]);
8172 wpa_s->vendor_elem[frame] = NULL;
8173 wpas_vendor_elem_update(wpa_s);
8174 return 0;
8175 }
8176
8177 if (wpa_s->vendor_elem[frame] == NULL)
8178 return -1;
8179
8180 len = os_strlen(pos);
8181 if (len == 0)
8182 return 0;
8183 if (len & 1)
8184 return -1;
8185 len /= 2;
8186
8187 buf = os_malloc(len);
8188 if (buf == NULL)
8189 return -1;
8190
8191 if (hexstr2bin(pos, buf, len) < 0) {
8192 os_free(buf);
8193 return -1;
8194 }
8195
8196 if (ieee802_11_parse_elems(buf, len, &elems, 0) == ParseFailed) {
8197 os_free(buf);
8198 return -1;
8199 }
8200
8201 res = wpas_vendor_elem_remove(wpa_s, frame, buf, len);
8202 os_free(buf);
8203 return res;
8204 }
8205
8206
wpas_ctrl_neighbor_rep_cb(void * ctx,struct wpabuf * neighbor_rep)8207 static void wpas_ctrl_neighbor_rep_cb(void *ctx, struct wpabuf *neighbor_rep)
8208 {
8209 struct wpa_supplicant *wpa_s = ctx;
8210
8211 if (neighbor_rep) {
8212 wpa_msg_ctrl(wpa_s, MSG_INFO, RRM_EVENT_NEIGHBOR_REP_RXED
8213 "length=%u",
8214 (unsigned int) wpabuf_len(neighbor_rep));
8215 wpabuf_free(neighbor_rep);
8216 } else {
8217 wpa_msg_ctrl(wpa_s, MSG_INFO, RRM_EVENT_NEIGHBOR_REP_FAILED);
8218 }
8219 }
8220
8221
wpas_ctrl_iface_send_neigbor_rep(struct wpa_supplicant * wpa_s,char * cmd)8222 static int wpas_ctrl_iface_send_neigbor_rep(struct wpa_supplicant *wpa_s,
8223 char *cmd)
8224 {
8225 struct wpa_ssid ssid;
8226 struct wpa_ssid *ssid_p = NULL;
8227 int ret = 0;
8228
8229 if (os_strncmp(cmd, " ssid=", 6) == 0) {
8230 ssid.ssid_len = os_strlen(cmd + 6);
8231 if (ssid.ssid_len > SSID_MAX_LEN)
8232 return -1;
8233 ssid.ssid = (u8 *) (cmd + 6);
8234 ssid_p = &ssid;
8235 }
8236
8237 ret = wpas_rrm_send_neighbor_rep_request(wpa_s, ssid_p,
8238 wpas_ctrl_neighbor_rep_cb,
8239 wpa_s);
8240
8241 return ret;
8242 }
8243
8244
wpas_ctrl_iface_erp_flush(struct wpa_supplicant * wpa_s)8245 static int wpas_ctrl_iface_erp_flush(struct wpa_supplicant *wpa_s)
8246 {
8247 eapol_sm_erp_flush(wpa_s->eapol);
8248 return 0;
8249 }
8250
8251
wpas_ctrl_iface_mac_rand_scan(struct wpa_supplicant * wpa_s,char * cmd)8252 static int wpas_ctrl_iface_mac_rand_scan(struct wpa_supplicant *wpa_s,
8253 char *cmd)
8254 {
8255 char *token, *context = NULL;
8256 unsigned int enable = ~0, type = 0;
8257 u8 _addr[ETH_ALEN], _mask[ETH_ALEN];
8258 u8 *addr = NULL, *mask = NULL;
8259
8260 while ((token = str_token(cmd, " ", &context))) {
8261 if (os_strcasecmp(token, "scan") == 0) {
8262 type |= MAC_ADDR_RAND_SCAN;
8263 } else if (os_strcasecmp(token, "sched") == 0) {
8264 type |= MAC_ADDR_RAND_SCHED_SCAN;
8265 } else if (os_strcasecmp(token, "pno") == 0) {
8266 type |= MAC_ADDR_RAND_PNO;
8267 } else if (os_strcasecmp(token, "all") == 0) {
8268 type = wpa_s->mac_addr_rand_supported;
8269 } else if (os_strncasecmp(token, "enable=", 7) == 0) {
8270 enable = atoi(token + 7);
8271 } else if (os_strncasecmp(token, "addr=", 5) == 0) {
8272 addr = _addr;
8273 if (hwaddr_aton(token + 5, addr)) {
8274 wpa_printf(MSG_INFO,
8275 "CTRL: Invalid MAC address: %s",
8276 token);
8277 return -1;
8278 }
8279 } else if (os_strncasecmp(token, "mask=", 5) == 0) {
8280 mask = _mask;
8281 if (hwaddr_aton(token + 5, mask)) {
8282 wpa_printf(MSG_INFO,
8283 "CTRL: Invalid MAC address mask: %s",
8284 token);
8285 return -1;
8286 }
8287 } else {
8288 wpa_printf(MSG_INFO,
8289 "CTRL: Invalid MAC_RAND_SCAN parameter: %s",
8290 token);
8291 return -1;
8292 }
8293 }
8294
8295 if (!type) {
8296 wpa_printf(MSG_INFO, "CTRL: MAC_RAND_SCAN no type specified");
8297 return -1;
8298 }
8299
8300 if ((wpa_s->mac_addr_rand_supported & type) != type) {
8301 wpa_printf(MSG_INFO,
8302 "CTRL: MAC_RAND_SCAN types=%u != supported=%u",
8303 type, wpa_s->mac_addr_rand_supported);
8304 return -1;
8305 }
8306
8307 if (enable > 1) {
8308 wpa_printf(MSG_INFO,
8309 "CTRL: MAC_RAND_SCAN enable=<0/1> not specified");
8310 return -1;
8311 }
8312
8313 if (!enable) {
8314 wpas_mac_addr_rand_scan_clear(wpa_s, type);
8315 if (wpa_s->pno) {
8316 if (type & MAC_ADDR_RAND_PNO) {
8317 wpas_stop_pno(wpa_s);
8318 wpas_start_pno(wpa_s);
8319 }
8320 } else if (wpa_s->sched_scanning &&
8321 (type & MAC_ADDR_RAND_SCHED_SCAN)) {
8322 /* simulate timeout to restart the sched scan */
8323 wpa_s->sched_scan_timed_out = 1;
8324 wpa_s->prev_sched_ssid = NULL;
8325 wpa_supplicant_cancel_sched_scan(wpa_s);
8326 }
8327 return 0;
8328 }
8329
8330 if ((addr && !mask) || (!addr && mask)) {
8331 wpa_printf(MSG_INFO,
8332 "CTRL: MAC_RAND_SCAN invalid addr/mask combination");
8333 return -1;
8334 }
8335
8336 if (addr && mask && (!(mask[0] & 0x01) || (addr[0] & 0x01))) {
8337 wpa_printf(MSG_INFO,
8338 "CTRL: MAC_RAND_SCAN cannot allow multicast address");
8339 return -1;
8340 }
8341
8342 if (type & MAC_ADDR_RAND_SCAN) {
8343 wpas_mac_addr_rand_scan_set(wpa_s, MAC_ADDR_RAND_SCAN,
8344 addr, mask);
8345 }
8346
8347 if (type & MAC_ADDR_RAND_SCHED_SCAN) {
8348 wpas_mac_addr_rand_scan_set(wpa_s, MAC_ADDR_RAND_SCHED_SCAN,
8349 addr, mask);
8350
8351 if (wpa_s->sched_scanning && !wpa_s->pno) {
8352 /* simulate timeout to restart the sched scan */
8353 wpa_s->sched_scan_timed_out = 1;
8354 wpa_s->prev_sched_ssid = NULL;
8355 wpa_supplicant_cancel_sched_scan(wpa_s);
8356 }
8357 }
8358
8359 if (type & MAC_ADDR_RAND_PNO) {
8360 wpas_mac_addr_rand_scan_set(wpa_s, MAC_ADDR_RAND_PNO,
8361 addr, mask);
8362 if (wpa_s->pno) {
8363 wpas_stop_pno(wpa_s);
8364 wpas_start_pno(wpa_s);
8365 }
8366 }
8367
8368 return 0;
8369 }
8370
8371
wpas_ctrl_iface_pmksa(struct wpa_supplicant * wpa_s,char * buf,size_t buflen)8372 static int wpas_ctrl_iface_pmksa(struct wpa_supplicant *wpa_s,
8373 char *buf, size_t buflen)
8374 {
8375 size_t reply_len;
8376
8377 reply_len = wpa_sm_pmksa_cache_list(wpa_s->wpa, buf, buflen);
8378 #ifdef CONFIG_AP
8379 reply_len += wpas_ap_pmksa_cache_list(wpa_s, &buf[reply_len],
8380 buflen - reply_len);
8381 #endif /* CONFIG_AP */
8382 return reply_len;
8383 }
8384
8385
wpas_ctrl_iface_pmksa_flush(struct wpa_supplicant * wpa_s)8386 static void wpas_ctrl_iface_pmksa_flush(struct wpa_supplicant *wpa_s)
8387 {
8388 wpa_sm_pmksa_cache_flush(wpa_s->wpa, NULL);
8389 #ifdef CONFIG_AP
8390 wpas_ap_pmksa_cache_flush(wpa_s);
8391 #endif /* CONFIG_AP */
8392 }
8393
8394
wpas_ctrl_cmd_debug_level(const char * cmd)8395 static int wpas_ctrl_cmd_debug_level(const char *cmd)
8396 {
8397 if (os_strcmp(cmd, "PING") == 0 ||
8398 os_strncmp(cmd, "BSS ", 4) == 0 ||
8399 os_strncmp(cmd, "GET_NETWORK ", 12) == 0 ||
8400 os_strncmp(cmd, "STATUS", 6) == 0 ||
8401 os_strncmp(cmd, "STA ", 4) == 0 ||
8402 os_strncmp(cmd, "STA-", 4) == 0)
8403 return MSG_EXCESSIVE;
8404 return MSG_DEBUG;
8405 }
8406
8407
wpa_supplicant_ctrl_iface_process(struct wpa_supplicant * wpa_s,char * buf,size_t * resp_len)8408 char * wpa_supplicant_ctrl_iface_process(struct wpa_supplicant *wpa_s,
8409 char *buf, size_t *resp_len)
8410 {
8411 char *reply;
8412 const int reply_size = 4096;
8413 int reply_len;
8414
8415 if (os_strncmp(buf, WPA_CTRL_RSP, os_strlen(WPA_CTRL_RSP)) == 0 ||
8416 os_strncmp(buf, "SET_NETWORK ", 12) == 0) {
8417 if (wpa_debug_show_keys)
8418 wpa_dbg(wpa_s, MSG_DEBUG,
8419 "Control interface command '%s'", buf);
8420 else
8421 wpa_dbg(wpa_s, MSG_DEBUG,
8422 "Control interface command '%s [REMOVED]'",
8423 os_strncmp(buf, WPA_CTRL_RSP,
8424 os_strlen(WPA_CTRL_RSP)) == 0 ?
8425 WPA_CTRL_RSP : "SET_NETWORK");
8426 } else if (os_strncmp(buf, "WPS_NFC_TAG_READ", 16) == 0 ||
8427 os_strncmp(buf, "NFC_REPORT_HANDOVER", 19) == 0) {
8428 wpa_hexdump_ascii_key(MSG_DEBUG, "RX ctrl_iface",
8429 (const u8 *) buf, os_strlen(buf));
8430 } else {
8431 int level = wpas_ctrl_cmd_debug_level(buf);
8432 wpa_dbg(wpa_s, level, "Control interface command '%s'", buf);
8433 }
8434
8435 reply = os_malloc(reply_size);
8436 if (reply == NULL) {
8437 *resp_len = 1;
8438 return NULL;
8439 }
8440
8441 os_memcpy(reply, "OK\n", 3);
8442 reply_len = 3;
8443
8444 if (os_strcmp(buf, "PING") == 0) {
8445 os_memcpy(reply, "PONG\n", 5);
8446 reply_len = 5;
8447 } else if (os_strcmp(buf, "IFNAME") == 0) {
8448 reply_len = os_strlen(wpa_s->ifname);
8449 os_memcpy(reply, wpa_s->ifname, reply_len);
8450 } else if (os_strncmp(buf, "RELOG", 5) == 0) {
8451 if (wpa_debug_reopen_file() < 0)
8452 reply_len = -1;
8453 } else if (os_strncmp(buf, "NOTE ", 5) == 0) {
8454 wpa_printf(MSG_INFO, "NOTE: %s", buf + 5);
8455 } else if (os_strcmp(buf, "MIB") == 0) {
8456 reply_len = wpa_sm_get_mib(wpa_s->wpa, reply, reply_size);
8457 if (reply_len >= 0) {
8458 reply_len += eapol_sm_get_mib(wpa_s->eapol,
8459 reply + reply_len,
8460 reply_size - reply_len);
8461 }
8462 } else if (os_strncmp(buf, "STATUS", 6) == 0) {
8463 reply_len = wpa_supplicant_ctrl_iface_status(
8464 wpa_s, buf + 6, reply, reply_size);
8465 } else if (os_strcmp(buf, "PMKSA") == 0) {
8466 reply_len = wpas_ctrl_iface_pmksa(wpa_s, reply, reply_size);
8467 } else if (os_strcmp(buf, "PMKSA_FLUSH") == 0) {
8468 wpas_ctrl_iface_pmksa_flush(wpa_s);
8469 } else if (os_strncmp(buf, "SET ", 4) == 0) {
8470 if (wpa_supplicant_ctrl_iface_set(wpa_s, buf + 4))
8471 reply_len = -1;
8472 } else if (os_strncmp(buf, "DUMP", 4) == 0) {
8473 reply_len = wpa_config_dump_values(wpa_s->conf,
8474 reply, reply_size);
8475 } else if (os_strncmp(buf, "GET ", 4) == 0) {
8476 reply_len = wpa_supplicant_ctrl_iface_get(wpa_s, buf + 4,
8477 reply, reply_size);
8478 } else if (os_strcmp(buf, "LOGON") == 0) {
8479 eapol_sm_notify_logoff(wpa_s->eapol, FALSE);
8480 } else if (os_strcmp(buf, "LOGOFF") == 0) {
8481 eapol_sm_notify_logoff(wpa_s->eapol, TRUE);
8482 } else if (os_strcmp(buf, "REASSOCIATE") == 0) {
8483 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
8484 reply_len = -1;
8485 else
8486 wpas_request_connection(wpa_s);
8487 } else if (os_strcmp(buf, "REATTACH") == 0) {
8488 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED ||
8489 !wpa_s->current_ssid)
8490 reply_len = -1;
8491 else {
8492 wpa_s->reattach = 1;
8493 wpas_request_connection(wpa_s);
8494 }
8495 } else if (os_strcmp(buf, "RECONNECT") == 0) {
8496 if (wpa_s->wpa_state == WPA_INTERFACE_DISABLED)
8497 reply_len = -1;
8498 else if (wpa_s->disconnected)
8499 wpas_request_connection(wpa_s);
8500 #ifdef IEEE8021X_EAPOL
8501 } else if (os_strncmp(buf, "PREAUTH ", 8) == 0) {
8502 if (wpa_supplicant_ctrl_iface_preauth(wpa_s, buf + 8))
8503 reply_len = -1;
8504 #endif /* IEEE8021X_EAPOL */
8505 #ifdef CONFIG_PEERKEY
8506 } else if (os_strncmp(buf, "STKSTART ", 9) == 0) {
8507 if (wpa_supplicant_ctrl_iface_stkstart(wpa_s, buf + 9))
8508 reply_len = -1;
8509 #endif /* CONFIG_PEERKEY */
8510 #ifdef CONFIG_IEEE80211R
8511 } else if (os_strncmp(buf, "FT_DS ", 6) == 0) {
8512 if (wpa_supplicant_ctrl_iface_ft_ds(wpa_s, buf + 6))
8513 reply_len = -1;
8514 #endif /* CONFIG_IEEE80211R */
8515 #ifdef CONFIG_WPS
8516 } else if (os_strcmp(buf, "WPS_PBC") == 0) {
8517 int res = wpa_supplicant_ctrl_iface_wps_pbc(wpa_s, NULL);
8518 if (res == -2) {
8519 os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
8520 reply_len = 17;
8521 } else if (res)
8522 reply_len = -1;
8523 } else if (os_strncmp(buf, "WPS_PBC ", 8) == 0) {
8524 int res = wpa_supplicant_ctrl_iface_wps_pbc(wpa_s, buf + 8);
8525 if (res == -2) {
8526 os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
8527 reply_len = 17;
8528 } else if (res)
8529 reply_len = -1;
8530 } else if (os_strncmp(buf, "WPS_PIN ", 8) == 0) {
8531 reply_len = wpa_supplicant_ctrl_iface_wps_pin(wpa_s, buf + 8,
8532 reply,
8533 reply_size);
8534 } else if (os_strncmp(buf, "WPS_CHECK_PIN ", 14) == 0) {
8535 reply_len = wpa_supplicant_ctrl_iface_wps_check_pin(
8536 wpa_s, buf + 14, reply, reply_size);
8537 } else if (os_strcmp(buf, "WPS_CANCEL") == 0) {
8538 if (wpas_wps_cancel(wpa_s))
8539 reply_len = -1;
8540 #ifdef CONFIG_WPS_NFC
8541 } else if (os_strcmp(buf, "WPS_NFC") == 0) {
8542 if (wpa_supplicant_ctrl_iface_wps_nfc(wpa_s, NULL))
8543 reply_len = -1;
8544 } else if (os_strncmp(buf, "WPS_NFC ", 8) == 0) {
8545 if (wpa_supplicant_ctrl_iface_wps_nfc(wpa_s, buf + 8))
8546 reply_len = -1;
8547 } else if (os_strncmp(buf, "WPS_NFC_CONFIG_TOKEN ", 21) == 0) {
8548 reply_len = wpa_supplicant_ctrl_iface_wps_nfc_config_token(
8549 wpa_s, buf + 21, reply, reply_size);
8550 } else if (os_strncmp(buf, "WPS_NFC_TOKEN ", 14) == 0) {
8551 reply_len = wpa_supplicant_ctrl_iface_wps_nfc_token(
8552 wpa_s, buf + 14, reply, reply_size);
8553 } else if (os_strncmp(buf, "WPS_NFC_TAG_READ ", 17) == 0) {
8554 if (wpa_supplicant_ctrl_iface_wps_nfc_tag_read(wpa_s,
8555 buf + 17))
8556 reply_len = -1;
8557 } else if (os_strncmp(buf, "NFC_GET_HANDOVER_REQ ", 21) == 0) {
8558 reply_len = wpas_ctrl_nfc_get_handover_req(
8559 wpa_s, buf + 21, reply, reply_size);
8560 } else if (os_strncmp(buf, "NFC_GET_HANDOVER_SEL ", 21) == 0) {
8561 reply_len = wpas_ctrl_nfc_get_handover_sel(
8562 wpa_s, buf + 21, reply, reply_size);
8563 } else if (os_strncmp(buf, "NFC_REPORT_HANDOVER ", 20) == 0) {
8564 if (wpas_ctrl_nfc_report_handover(wpa_s, buf + 20))
8565 reply_len = -1;
8566 #endif /* CONFIG_WPS_NFC */
8567 } else if (os_strncmp(buf, "WPS_REG ", 8) == 0) {
8568 if (wpa_supplicant_ctrl_iface_wps_reg(wpa_s, buf + 8))
8569 reply_len = -1;
8570 #ifdef CONFIG_AP
8571 } else if (os_strncmp(buf, "WPS_AP_PIN ", 11) == 0) {
8572 reply_len = wpa_supplicant_ctrl_iface_wps_ap_pin(
8573 wpa_s, buf + 11, reply, reply_size);
8574 #endif /* CONFIG_AP */
8575 #ifdef CONFIG_WPS_ER
8576 } else if (os_strcmp(buf, "WPS_ER_START") == 0) {
8577 if (wpas_wps_er_start(wpa_s, NULL))
8578 reply_len = -1;
8579 } else if (os_strncmp(buf, "WPS_ER_START ", 13) == 0) {
8580 if (wpas_wps_er_start(wpa_s, buf + 13))
8581 reply_len = -1;
8582 } else if (os_strcmp(buf, "WPS_ER_STOP") == 0) {
8583 wpas_wps_er_stop(wpa_s);
8584 } else if (os_strncmp(buf, "WPS_ER_PIN ", 11) == 0) {
8585 if (wpa_supplicant_ctrl_iface_wps_er_pin(wpa_s, buf + 11))
8586 reply_len = -1;
8587 } else if (os_strncmp(buf, "WPS_ER_PBC ", 11) == 0) {
8588 int ret = wpas_wps_er_pbc(wpa_s, buf + 11);
8589 if (ret == -2) {
8590 os_memcpy(reply, "FAIL-PBC-OVERLAP\n", 17);
8591 reply_len = 17;
8592 } else if (ret == -3) {
8593 os_memcpy(reply, "FAIL-UNKNOWN-UUID\n", 18);
8594 reply_len = 18;
8595 } else if (ret == -4) {
8596 os_memcpy(reply, "FAIL-NO-AP-SETTINGS\n", 20);
8597 reply_len = 20;
8598 } else if (ret)
8599 reply_len = -1;
8600 } else if (os_strncmp(buf, "WPS_ER_LEARN ", 13) == 0) {
8601 if (wpa_supplicant_ctrl_iface_wps_er_learn(wpa_s, buf + 13))
8602 reply_len = -1;
8603 } else if (os_strncmp(buf, "WPS_ER_SET_CONFIG ", 18) == 0) {
8604 if (wpa_supplicant_ctrl_iface_wps_er_set_config(wpa_s,
8605 buf + 18))
8606 reply_len = -1;
8607 } else if (os_strncmp(buf, "WPS_ER_CONFIG ", 14) == 0) {
8608 if (wpa_supplicant_ctrl_iface_wps_er_config(wpa_s, buf + 14))
8609 reply_len = -1;
8610 #ifdef CONFIG_WPS_NFC
8611 } else if (os_strncmp(buf, "WPS_ER_NFC_CONFIG_TOKEN ", 24) == 0) {
8612 reply_len = wpa_supplicant_ctrl_iface_wps_er_nfc_config_token(
8613 wpa_s, buf + 24, reply, reply_size);
8614 #endif /* CONFIG_WPS_NFC */
8615 #endif /* CONFIG_WPS_ER */
8616 #endif /* CONFIG_WPS */
8617 #ifdef CONFIG_IBSS_RSN
8618 } else if (os_strncmp(buf, "IBSS_RSN ", 9) == 0) {
8619 if (wpa_supplicant_ctrl_iface_ibss_rsn(wpa_s, buf + 9))
8620 reply_len = -1;
8621 #endif /* CONFIG_IBSS_RSN */
8622 #ifdef CONFIG_MESH
8623 } else if (os_strncmp(buf, "MESH_INTERFACE_ADD ", 19) == 0) {
8624 reply_len = wpa_supplicant_ctrl_iface_mesh_interface_add(
8625 wpa_s, buf + 19, reply, reply_size);
8626 } else if (os_strcmp(buf, "MESH_INTERFACE_ADD") == 0) {
8627 reply_len = wpa_supplicant_ctrl_iface_mesh_interface_add(
8628 wpa_s, "", reply, reply_size);
8629 } else if (os_strncmp(buf, "MESH_GROUP_ADD ", 15) == 0) {
8630 if (wpa_supplicant_ctrl_iface_mesh_group_add(wpa_s, buf + 15))
8631 reply_len = -1;
8632 } else if (os_strncmp(buf, "MESH_GROUP_REMOVE ", 18) == 0) {
8633 if (wpa_supplicant_ctrl_iface_mesh_group_remove(wpa_s,
8634 buf + 18))
8635 reply_len = -1;
8636 } else if (os_strncmp(buf, "MESH_PEER_REMOVE ", 17) == 0) {
8637 if (wpa_supplicant_ctrl_iface_mesh_peer_remove(wpa_s, buf + 17))
8638 reply_len = -1;
8639 } else if (os_strncmp(buf, "MESH_PEER_ADD ", 14) == 0) {
8640 if (wpa_supplicant_ctrl_iface_mesh_peer_add(wpa_s, buf + 14))
8641 reply_len = -1;
8642 #endif /* CONFIG_MESH */
8643 #ifdef CONFIG_P2P
8644 } else if (os_strncmp(buf, "P2P_FIND ", 9) == 0) {
8645 if (p2p_ctrl_find(wpa_s, buf + 8))
8646 reply_len = -1;
8647 } else if (os_strcmp(buf, "P2P_FIND") == 0) {
8648 if (p2p_ctrl_find(wpa_s, ""))
8649 reply_len = -1;
8650 } else if (os_strcmp(buf, "P2P_STOP_FIND") == 0) {
8651 wpas_p2p_stop_find(wpa_s);
8652 } else if (os_strncmp(buf, "P2P_ASP_PROVISION ", 18) == 0) {
8653 if (p2p_ctrl_asp_provision(wpa_s, buf + 18))
8654 reply_len = -1;
8655 } else if (os_strncmp(buf, "P2P_ASP_PROVISION_RESP ", 23) == 0) {
8656 if (p2p_ctrl_asp_provision_resp(wpa_s, buf + 23))
8657 reply_len = -1;
8658 } else if (os_strncmp(buf, "P2P_CONNECT ", 12) == 0) {
8659 reply_len = p2p_ctrl_connect(wpa_s, buf + 12, reply,
8660 reply_size);
8661 } else if (os_strncmp(buf, "P2P_LISTEN ", 11) == 0) {
8662 if (p2p_ctrl_listen(wpa_s, buf + 11))
8663 reply_len = -1;
8664 } else if (os_strcmp(buf, "P2P_LISTEN") == 0) {
8665 if (p2p_ctrl_listen(wpa_s, ""))
8666 reply_len = -1;
8667 } else if (os_strncmp(buf, "P2P_GROUP_REMOVE ", 17) == 0) {
8668 if (wpas_p2p_group_remove(wpa_s, buf + 17))
8669 reply_len = -1;
8670 } else if (os_strcmp(buf, "P2P_GROUP_ADD") == 0) {
8671 if (p2p_ctrl_group_add(wpa_s, ""))
8672 reply_len = -1;
8673 } else if (os_strncmp(buf, "P2P_GROUP_ADD ", 14) == 0) {
8674 if (p2p_ctrl_group_add(wpa_s, buf + 14))
8675 reply_len = -1;
8676 } else if (os_strncmp(buf, "P2P_PROV_DISC ", 14) == 0) {
8677 if (p2p_ctrl_prov_disc(wpa_s, buf + 14))
8678 reply_len = -1;
8679 } else if (os_strcmp(buf, "P2P_GET_PASSPHRASE") == 0) {
8680 reply_len = p2p_get_passphrase(wpa_s, reply, reply_size);
8681 } else if (os_strncmp(buf, "P2P_SERV_DISC_REQ ", 18) == 0) {
8682 reply_len = p2p_ctrl_serv_disc_req(wpa_s, buf + 18, reply,
8683 reply_size);
8684 } else if (os_strncmp(buf, "P2P_SERV_DISC_CANCEL_REQ ", 25) == 0) {
8685 if (p2p_ctrl_serv_disc_cancel_req(wpa_s, buf + 25) < 0)
8686 reply_len = -1;
8687 } else if (os_strncmp(buf, "P2P_SERV_DISC_RESP ", 19) == 0) {
8688 if (p2p_ctrl_serv_disc_resp(wpa_s, buf + 19) < 0)
8689 reply_len = -1;
8690 } else if (os_strcmp(buf, "P2P_SERVICE_UPDATE") == 0) {
8691 wpas_p2p_sd_service_update(wpa_s);
8692 } else if (os_strncmp(buf, "P2P_SERV_DISC_EXTERNAL ", 23) == 0) {
8693 if (p2p_ctrl_serv_disc_external(wpa_s, buf + 23) < 0)
8694 reply_len = -1;
8695 } else if (os_strcmp(buf, "P2P_SERVICE_FLUSH") == 0) {
8696 wpas_p2p_service_flush(wpa_s);
8697 } else if (os_strncmp(buf, "P2P_SERVICE_ADD ", 16) == 0) {
8698 if (p2p_ctrl_service_add(wpa_s, buf + 16) < 0)
8699 reply_len = -1;
8700 } else if (os_strncmp(buf, "P2P_SERVICE_DEL ", 16) == 0) {
8701 if (p2p_ctrl_service_del(wpa_s, buf + 16) < 0)
8702 reply_len = -1;
8703 } else if (os_strncmp(buf, "P2P_SERVICE_REP ", 16) == 0) {
8704 if (p2p_ctrl_service_replace(wpa_s, buf + 16) < 0)
8705 reply_len = -1;
8706 } else if (os_strncmp(buf, "P2P_REJECT ", 11) == 0) {
8707 if (p2p_ctrl_reject(wpa_s, buf + 11) < 0)
8708 reply_len = -1;
8709 } else if (os_strncmp(buf, "P2P_INVITE ", 11) == 0) {
8710 if (p2p_ctrl_invite(wpa_s, buf + 11) < 0)
8711 reply_len = -1;
8712 } else if (os_strncmp(buf, "P2P_PEER ", 9) == 0) {
8713 reply_len = p2p_ctrl_peer(wpa_s, buf + 9, reply,
8714 reply_size);
8715 } else if (os_strncmp(buf, "P2P_SET ", 8) == 0) {
8716 if (p2p_ctrl_set(wpa_s, buf + 8) < 0)
8717 reply_len = -1;
8718 } else if (os_strcmp(buf, "P2P_FLUSH") == 0) {
8719 p2p_ctrl_flush(wpa_s);
8720 } else if (os_strncmp(buf, "P2P_UNAUTHORIZE ", 16) == 0) {
8721 if (wpas_p2p_unauthorize(wpa_s, buf + 16) < 0)
8722 reply_len = -1;
8723 } else if (os_strcmp(buf, "P2P_CANCEL") == 0) {
8724 if (wpas_p2p_cancel(wpa_s))
8725 reply_len = -1;
8726 } else if (os_strncmp(buf, "P2P_PRESENCE_REQ ", 17) == 0) {
8727 if (p2p_ctrl_presence_req(wpa_s, buf + 17) < 0)
8728 reply_len = -1;
8729 } else if (os_strcmp(buf, "P2P_PRESENCE_REQ") == 0) {
8730 if (p2p_ctrl_presence_req(wpa_s, "") < 0)
8731 reply_len = -1;
8732 } else if (os_strncmp(buf, "P2P_EXT_LISTEN ", 15) == 0) {
8733 if (p2p_ctrl_ext_listen(wpa_s, buf + 15) < 0)
8734 reply_len = -1;
8735 } else if (os_strcmp(buf, "P2P_EXT_LISTEN") == 0) {
8736 if (p2p_ctrl_ext_listen(wpa_s, "") < 0)
8737 reply_len = -1;
8738 } else if (os_strncmp(buf, "P2P_REMOVE_CLIENT ", 18) == 0) {
8739 if (p2p_ctrl_remove_client(wpa_s, buf + 18) < 0)
8740 reply_len = -1;
8741 #endif /* CONFIG_P2P */
8742 #ifdef CONFIG_WIFI_DISPLAY
8743 } else if (os_strncmp(buf, "WFD_SUBELEM_SET ", 16) == 0) {
8744 if (wifi_display_subelem_set(wpa_s->global, buf + 16) < 0)
8745 reply_len = -1;
8746 } else if (os_strncmp(buf, "WFD_SUBELEM_GET ", 16) == 0) {
8747 reply_len = wifi_display_subelem_get(wpa_s->global, buf + 16,
8748 reply, reply_size);
8749 #endif /* CONFIG_WIFI_DISPLAY */
8750 #ifdef CONFIG_INTERWORKING
8751 } else if (os_strcmp(buf, "FETCH_ANQP") == 0) {
8752 if (interworking_fetch_anqp(wpa_s) < 0)
8753 reply_len = -1;
8754 } else if (os_strcmp(buf, "STOP_FETCH_ANQP") == 0) {
8755 interworking_stop_fetch_anqp(wpa_s);
8756 } else if (os_strcmp(buf, "INTERWORKING_SELECT") == 0) {
8757 if (ctrl_interworking_select(wpa_s, NULL) < 0)
8758 reply_len = -1;
8759 } else if (os_strncmp(buf, "INTERWORKING_SELECT ", 20) == 0) {
8760 if (ctrl_interworking_select(wpa_s, buf + 20) < 0)
8761 reply_len = -1;
8762 } else if (os_strncmp(buf, "INTERWORKING_CONNECT ", 21) == 0) {
8763 if (ctrl_interworking_connect(wpa_s, buf + 21, 0) < 0)
8764 reply_len = -1;
8765 } else if (os_strncmp(buf, "INTERWORKING_ADD_NETWORK ", 25) == 0) {
8766 int id;
8767
8768 id = ctrl_interworking_connect(wpa_s, buf + 25, 1);
8769 if (id < 0)
8770 reply_len = -1;
8771 else {
8772 reply_len = os_snprintf(reply, reply_size, "%d\n", id);
8773 if (os_snprintf_error(reply_size, reply_len))
8774 reply_len = -1;
8775 }
8776 } else if (os_strncmp(buf, "ANQP_GET ", 9) == 0) {
8777 if (get_anqp(wpa_s, buf + 9) < 0)
8778 reply_len = -1;
8779 } else if (os_strncmp(buf, "GAS_REQUEST ", 12) == 0) {
8780 if (gas_request(wpa_s, buf + 12) < 0)
8781 reply_len = -1;
8782 } else if (os_strncmp(buf, "GAS_RESPONSE_GET ", 17) == 0) {
8783 reply_len = gas_response_get(wpa_s, buf + 17, reply,
8784 reply_size);
8785 #endif /* CONFIG_INTERWORKING */
8786 #ifdef CONFIG_HS20
8787 } else if (os_strncmp(buf, "HS20_ANQP_GET ", 14) == 0) {
8788 if (get_hs20_anqp(wpa_s, buf + 14) < 0)
8789 reply_len = -1;
8790 } else if (os_strncmp(buf, "HS20_GET_NAI_HOME_REALM_LIST ", 29) == 0) {
8791 if (hs20_get_nai_home_realm_list(wpa_s, buf + 29) < 0)
8792 reply_len = -1;
8793 } else if (os_strncmp(buf, "HS20_ICON_REQUEST ", 18) == 0) {
8794 if (hs20_icon_request(wpa_s, buf + 18, 0) < 0)
8795 reply_len = -1;
8796 } else if (os_strncmp(buf, "REQ_HS20_ICON ", 14) == 0) {
8797 if (hs20_icon_request(wpa_s, buf + 14, 1) < 0)
8798 reply_len = -1;
8799 } else if (os_strncmp(buf, "GET_HS20_ICON ", 14) == 0) {
8800 reply_len = get_hs20_icon(wpa_s, buf + 14, reply, reply_size);
8801 } else if (os_strncmp(buf, "DEL_HS20_ICON ", 14) == 0) {
8802 if (del_hs20_icon(wpa_s, buf + 14) < 0)
8803 reply_len = -1;
8804 } else if (os_strcmp(buf, "FETCH_OSU") == 0) {
8805 if (hs20_fetch_osu(wpa_s) < 0)
8806 reply_len = -1;
8807 } else if (os_strcmp(buf, "CANCEL_FETCH_OSU") == 0) {
8808 hs20_cancel_fetch_osu(wpa_s);
8809 #endif /* CONFIG_HS20 */
8810 } else if (os_strncmp(buf, WPA_CTRL_RSP, os_strlen(WPA_CTRL_RSP)) == 0)
8811 {
8812 if (wpa_supplicant_ctrl_iface_ctrl_rsp(
8813 wpa_s, buf + os_strlen(WPA_CTRL_RSP)))
8814 reply_len = -1;
8815 else {
8816 /*
8817 * Notify response from timeout to allow the control
8818 * interface response to be sent first.
8819 */
8820 eloop_register_timeout(0, 0, wpas_ctrl_eapol_response,
8821 wpa_s, NULL);
8822 }
8823 } else if (os_strcmp(buf, "RECONFIGURE") == 0) {
8824 if (wpa_supplicant_reload_configuration(wpa_s))
8825 reply_len = -1;
8826 } else if (os_strcmp(buf, "TERMINATE") == 0) {
8827 wpa_supplicant_terminate_proc(wpa_s->global);
8828 } else if (os_strncmp(buf, "BSSID ", 6) == 0) {
8829 if (wpa_supplicant_ctrl_iface_bssid(wpa_s, buf + 6))
8830 reply_len = -1;
8831 } else if (os_strncmp(buf, "BLACKLIST", 9) == 0) {
8832 reply_len = wpa_supplicant_ctrl_iface_blacklist(
8833 wpa_s, buf + 9, reply, reply_size);
8834 } else if (os_strncmp(buf, "LOG_LEVEL", 9) == 0) {
8835 reply_len = wpa_supplicant_ctrl_iface_log_level(
8836 wpa_s, buf + 9, reply, reply_size);
8837 } else if (os_strncmp(buf, "LIST_NETWORKS ", 14) == 0) {
8838 reply_len = wpa_supplicant_ctrl_iface_list_networks(
8839 wpa_s, buf + 14, reply, reply_size);
8840 } else if (os_strcmp(buf, "LIST_NETWORKS") == 0) {
8841 reply_len = wpa_supplicant_ctrl_iface_list_networks(
8842 wpa_s, NULL, reply, reply_size);
8843 } else if (os_strcmp(buf, "DISCONNECT") == 0) {
8844 #ifdef CONFIG_SME
8845 wpa_s->sme.prev_bssid_set = 0;
8846 #endif /* CONFIG_SME */
8847 wpa_s->reassociate = 0;
8848 wpa_s->disconnected = 1;
8849 wpa_supplicant_cancel_sched_scan(wpa_s);
8850 wpa_supplicant_cancel_scan(wpa_s);
8851 wpa_supplicant_deauthenticate(wpa_s,
8852 WLAN_REASON_DEAUTH_LEAVING);
8853 eloop_cancel_timeout(wpas_network_reenabled, wpa_s, NULL);
8854 } else if (os_strcmp(buf, "SCAN") == 0) {
8855 wpas_ctrl_scan(wpa_s, NULL, reply, reply_size, &reply_len);
8856 } else if (os_strncmp(buf, "SCAN ", 5) == 0) {
8857 wpas_ctrl_scan(wpa_s, buf + 5, reply, reply_size, &reply_len);
8858 } else if (os_strcmp(buf, "SCAN_RESULTS") == 0) {
8859 reply_len = wpa_supplicant_ctrl_iface_scan_results(
8860 wpa_s, reply, reply_size);
8861 } else if (os_strcmp(buf, "ABORT_SCAN") == 0) {
8862 if (wpas_abort_ongoing_scan(wpa_s) < 0)
8863 reply_len = -1;
8864 } else if (os_strncmp(buf, "SELECT_NETWORK ", 15) == 0) {
8865 if (wpa_supplicant_ctrl_iface_select_network(wpa_s, buf + 15))
8866 reply_len = -1;
8867 } else if (os_strncmp(buf, "ENABLE_NETWORK ", 15) == 0) {
8868 if (wpa_supplicant_ctrl_iface_enable_network(wpa_s, buf + 15))
8869 reply_len = -1;
8870 } else if (os_strncmp(buf, "DISABLE_NETWORK ", 16) == 0) {
8871 if (wpa_supplicant_ctrl_iface_disable_network(wpa_s, buf + 16))
8872 reply_len = -1;
8873 } else if (os_strcmp(buf, "ADD_NETWORK") == 0) {
8874 reply_len = wpa_supplicant_ctrl_iface_add_network(
8875 wpa_s, reply, reply_size);
8876 } else if (os_strncmp(buf, "REMOVE_NETWORK ", 15) == 0) {
8877 if (wpa_supplicant_ctrl_iface_remove_network(wpa_s, buf + 15))
8878 reply_len = -1;
8879 } else if (os_strncmp(buf, "SET_NETWORK ", 12) == 0) {
8880 if (wpa_supplicant_ctrl_iface_set_network(wpa_s, buf + 12))
8881 reply_len = -1;
8882 } else if (os_strncmp(buf, "GET_NETWORK ", 12) == 0) {
8883 reply_len = wpa_supplicant_ctrl_iface_get_network(
8884 wpa_s, buf + 12, reply, reply_size);
8885 } else if (os_strncmp(buf, "DUP_NETWORK ", 12) == 0) {
8886 if (wpa_supplicant_ctrl_iface_dup_network(wpa_s, buf + 12,
8887 wpa_s))
8888 reply_len = -1;
8889 } else if (os_strcmp(buf, "LIST_CREDS") == 0) {
8890 reply_len = wpa_supplicant_ctrl_iface_list_creds(
8891 wpa_s, reply, reply_size);
8892 } else if (os_strcmp(buf, "ADD_CRED") == 0) {
8893 reply_len = wpa_supplicant_ctrl_iface_add_cred(
8894 wpa_s, reply, reply_size);
8895 } else if (os_strncmp(buf, "REMOVE_CRED ", 12) == 0) {
8896 if (wpa_supplicant_ctrl_iface_remove_cred(wpa_s, buf + 12))
8897 reply_len = -1;
8898 } else if (os_strncmp(buf, "SET_CRED ", 9) == 0) {
8899 if (wpa_supplicant_ctrl_iface_set_cred(wpa_s, buf + 9))
8900 reply_len = -1;
8901 } else if (os_strncmp(buf, "GET_CRED ", 9) == 0) {
8902 reply_len = wpa_supplicant_ctrl_iface_get_cred(wpa_s, buf + 9,
8903 reply,
8904 reply_size);
8905 #ifndef CONFIG_NO_CONFIG_WRITE
8906 } else if (os_strcmp(buf, "SAVE_CONFIG") == 0) {
8907 if (wpa_supplicant_ctrl_iface_save_config(wpa_s))
8908 reply_len = -1;
8909 #endif /* CONFIG_NO_CONFIG_WRITE */
8910 } else if (os_strncmp(buf, "GET_CAPABILITY ", 15) == 0) {
8911 reply_len = wpa_supplicant_ctrl_iface_get_capability(
8912 wpa_s, buf + 15, reply, reply_size);
8913 } else if (os_strncmp(buf, "AP_SCAN ", 8) == 0) {
8914 if (wpa_supplicant_ctrl_iface_ap_scan(wpa_s, buf + 8))
8915 reply_len = -1;
8916 } else if (os_strncmp(buf, "SCAN_INTERVAL ", 14) == 0) {
8917 if (wpa_supplicant_ctrl_iface_scan_interval(wpa_s, buf + 14))
8918 reply_len = -1;
8919 } else if (os_strcmp(buf, "INTERFACE_LIST") == 0) {
8920 reply_len = wpa_supplicant_global_iface_list(
8921 wpa_s->global, reply, reply_size);
8922 } else if (os_strncmp(buf, "INTERFACES", 10) == 0) {
8923 reply_len = wpa_supplicant_global_iface_interfaces(
8924 wpa_s->global, buf + 10, reply, reply_size);
8925 } else if (os_strncmp(buf, "BSS ", 4) == 0) {
8926 reply_len = wpa_supplicant_ctrl_iface_bss(
8927 wpa_s, buf + 4, reply, reply_size);
8928 #ifdef CONFIG_AP
8929 } else if (os_strcmp(buf, "STA-FIRST") == 0) {
8930 reply_len = ap_ctrl_iface_sta_first(wpa_s, reply, reply_size);
8931 } else if (os_strncmp(buf, "STA ", 4) == 0) {
8932 reply_len = ap_ctrl_iface_sta(wpa_s, buf + 4, reply,
8933 reply_size);
8934 } else if (os_strncmp(buf, "STA-NEXT ", 9) == 0) {
8935 reply_len = ap_ctrl_iface_sta_next(wpa_s, buf + 9, reply,
8936 reply_size);
8937 } else if (os_strncmp(buf, "DEAUTHENTICATE ", 15) == 0) {
8938 if (ap_ctrl_iface_sta_deauthenticate(wpa_s, buf + 15))
8939 reply_len = -1;
8940 } else if (os_strncmp(buf, "DISASSOCIATE ", 13) == 0) {
8941 if (ap_ctrl_iface_sta_disassociate(wpa_s, buf + 13))
8942 reply_len = -1;
8943 } else if (os_strncmp(buf, "CHAN_SWITCH ", 12) == 0) {
8944 if (ap_ctrl_iface_chanswitch(wpa_s, buf + 12))
8945 reply_len = -1;
8946 } else if (os_strcmp(buf, "STOP_AP") == 0) {
8947 if (wpas_ap_stop_ap(wpa_s))
8948 reply_len = -1;
8949 #endif /* CONFIG_AP */
8950 } else if (os_strcmp(buf, "SUSPEND") == 0) {
8951 wpas_notify_suspend(wpa_s->global);
8952 } else if (os_strcmp(buf, "RESUME") == 0) {
8953 wpas_notify_resume(wpa_s->global);
8954 #ifdef CONFIG_TESTING_OPTIONS
8955 } else if (os_strcmp(buf, "DROP_SA") == 0) {
8956 wpa_supplicant_ctrl_iface_drop_sa(wpa_s);
8957 #endif /* CONFIG_TESTING_OPTIONS */
8958 } else if (os_strncmp(buf, "ROAM ", 5) == 0) {
8959 if (wpa_supplicant_ctrl_iface_roam(wpa_s, buf + 5))
8960 reply_len = -1;
8961 } else if (os_strncmp(buf, "STA_AUTOCONNECT ", 16) == 0) {
8962 wpa_s->auto_reconnect_disabled = atoi(buf + 16) == 0;
8963 } else if (os_strncmp(buf, "BSS_EXPIRE_AGE ", 15) == 0) {
8964 if (wpa_supplicant_ctrl_iface_bss_expire_age(wpa_s, buf + 15))
8965 reply_len = -1;
8966 } else if (os_strncmp(buf, "BSS_EXPIRE_COUNT ", 17) == 0) {
8967 if (wpa_supplicant_ctrl_iface_bss_expire_count(wpa_s,
8968 buf + 17))
8969 reply_len = -1;
8970 } else if (os_strncmp(buf, "BSS_FLUSH ", 10) == 0) {
8971 wpa_supplicant_ctrl_iface_bss_flush(wpa_s, buf + 10);
8972 #ifdef CONFIG_TDLS
8973 } else if (os_strncmp(buf, "TDLS_DISCOVER ", 14) == 0) {
8974 if (wpa_supplicant_ctrl_iface_tdls_discover(wpa_s, buf + 14))
8975 reply_len = -1;
8976 } else if (os_strncmp(buf, "TDLS_SETUP ", 11) == 0) {
8977 if (wpa_supplicant_ctrl_iface_tdls_setup(wpa_s, buf + 11))
8978 reply_len = -1;
8979 } else if (os_strncmp(buf, "TDLS_TEARDOWN ", 14) == 0) {
8980 if (wpa_supplicant_ctrl_iface_tdls_teardown(wpa_s, buf + 14))
8981 reply_len = -1;
8982 } else if (os_strncmp(buf, "TDLS_CHAN_SWITCH ", 17) == 0) {
8983 if (wpa_supplicant_ctrl_iface_tdls_chan_switch(wpa_s,
8984 buf + 17))
8985 reply_len = -1;
8986 } else if (os_strncmp(buf, "TDLS_CANCEL_CHAN_SWITCH ", 24) == 0) {
8987 if (wpa_supplicant_ctrl_iface_tdls_cancel_chan_switch(wpa_s,
8988 buf + 24))
8989 reply_len = -1;
8990 } else if (os_strncmp(buf, "TDLS_LINK_STATUS ", 17) == 0) {
8991 reply_len = wpa_supplicant_ctrl_iface_tdls_link_status(
8992 wpa_s, buf + 17, reply, reply_size);
8993 #endif /* CONFIG_TDLS */
8994 } else if (os_strcmp(buf, "WMM_AC_STATUS") == 0) {
8995 reply_len = wpas_wmm_ac_status(wpa_s, reply, reply_size);
8996 } else if (os_strncmp(buf, "WMM_AC_ADDTS ", 13) == 0) {
8997 if (wmm_ac_ctrl_addts(wpa_s, buf + 13))
8998 reply_len = -1;
8999 } else if (os_strncmp(buf, "WMM_AC_DELTS ", 13) == 0) {
9000 if (wmm_ac_ctrl_delts(wpa_s, buf + 13))
9001 reply_len = -1;
9002 } else if (os_strncmp(buf, "SIGNAL_POLL", 11) == 0) {
9003 reply_len = wpa_supplicant_signal_poll(wpa_s, reply,
9004 reply_size);
9005 } else if (os_strncmp(buf, "SIGNAL_MONITOR", 14) == 0) {
9006 if (wpas_ctrl_iface_signal_monitor(wpa_s, buf + 14))
9007 reply_len = -1;
9008 } else if (os_strncmp(buf, "PKTCNT_POLL", 11) == 0) {
9009 reply_len = wpa_supplicant_pktcnt_poll(wpa_s, reply,
9010 reply_size);
9011 #ifdef CONFIG_AUTOSCAN
9012 } else if (os_strncmp(buf, "AUTOSCAN ", 9) == 0) {
9013 if (wpa_supplicant_ctrl_iface_autoscan(wpa_s, buf + 9))
9014 reply_len = -1;
9015 #endif /* CONFIG_AUTOSCAN */
9016 #ifdef ANDROID
9017 } else if (os_strncmp(buf, "DRIVER ", 7) == 0) {
9018 reply_len = wpa_supplicant_driver_cmd(wpa_s, buf + 7, reply,
9019 reply_size);
9020 #endif /* ANDROID */
9021 } else if (os_strncmp(buf, "VENDOR ", 7) == 0) {
9022 reply_len = wpa_supplicant_vendor_cmd(wpa_s, buf + 7, reply,
9023 reply_size);
9024 } else if (os_strcmp(buf, "REAUTHENTICATE") == 0) {
9025 pmksa_cache_clear_current(wpa_s->wpa);
9026 eapol_sm_request_reauth(wpa_s->eapol);
9027 #ifdef CONFIG_WNM
9028 } else if (os_strncmp(buf, "WNM_SLEEP ", 10) == 0) {
9029 if (wpas_ctrl_iface_wnm_sleep(wpa_s, buf + 10))
9030 reply_len = -1;
9031 } else if (os_strncmp(buf, "WNM_BSS_QUERY ", 14) == 0) {
9032 if (wpas_ctrl_iface_wnm_bss_query(wpa_s, buf + 14))
9033 reply_len = -1;
9034 #endif /* CONFIG_WNM */
9035 } else if (os_strcmp(buf, "FLUSH") == 0) {
9036 wpa_supplicant_ctrl_iface_flush(wpa_s);
9037 } else if (os_strncmp(buf, "RADIO_WORK ", 11) == 0) {
9038 reply_len = wpas_ctrl_radio_work(wpa_s, buf + 11, reply,
9039 reply_size);
9040 #ifdef CONFIG_TESTING_OPTIONS
9041 } else if (os_strncmp(buf, "MGMT_TX ", 8) == 0) {
9042 if (wpas_ctrl_iface_mgmt_tx(wpa_s, buf + 8) < 0)
9043 reply_len = -1;
9044 } else if (os_strcmp(buf, "MGMT_TX_DONE") == 0) {
9045 wpas_ctrl_iface_mgmt_tx_done(wpa_s);
9046 } else if (os_strncmp(buf, "DRIVER_EVENT ", 13) == 0) {
9047 if (wpas_ctrl_iface_driver_event(wpa_s, buf + 13) < 0)
9048 reply_len = -1;
9049 } else if (os_strncmp(buf, "EAPOL_RX ", 9) == 0) {
9050 if (wpas_ctrl_iface_eapol_rx(wpa_s, buf + 9) < 0)
9051 reply_len = -1;
9052 } else if (os_strncmp(buf, "DATA_TEST_CONFIG ", 17) == 0) {
9053 if (wpas_ctrl_iface_data_test_config(wpa_s, buf + 17) < 0)
9054 reply_len = -1;
9055 } else if (os_strncmp(buf, "DATA_TEST_TX ", 13) == 0) {
9056 if (wpas_ctrl_iface_data_test_tx(wpa_s, buf + 13) < 0)
9057 reply_len = -1;
9058 } else if (os_strncmp(buf, "DATA_TEST_FRAME ", 16) == 0) {
9059 if (wpas_ctrl_iface_data_test_frame(wpa_s, buf + 16) < 0)
9060 reply_len = -1;
9061 } else if (os_strncmp(buf, "TEST_ALLOC_FAIL ", 16) == 0) {
9062 if (wpas_ctrl_test_alloc_fail(wpa_s, buf + 16) < 0)
9063 reply_len = -1;
9064 } else if (os_strcmp(buf, "GET_ALLOC_FAIL") == 0) {
9065 reply_len = wpas_ctrl_get_alloc_fail(wpa_s, reply, reply_size);
9066 } else if (os_strncmp(buf, "TEST_FAIL ", 10) == 0) {
9067 if (wpas_ctrl_test_fail(wpa_s, buf + 10) < 0)
9068 reply_len = -1;
9069 } else if (os_strcmp(buf, "GET_FAIL") == 0) {
9070 reply_len = wpas_ctrl_get_fail(wpa_s, reply, reply_size);
9071 } else if (os_strncmp(buf, "EVENT_TEST ", 11) == 0) {
9072 if (wpas_ctrl_event_test(wpa_s, buf + 11) < 0)
9073 reply_len = -1;
9074 } else if (os_strncmp(buf, "TEST_ASSOC_IE ", 14) == 0) {
9075 if (wpas_ctrl_test_assoc_ie(wpa_s, buf + 14) < 0)
9076 reply_len = -1;
9077 #endif /* CONFIG_TESTING_OPTIONS */
9078 } else if (os_strncmp(buf, "VENDOR_ELEM_ADD ", 16) == 0) {
9079 if (wpas_ctrl_vendor_elem_add(wpa_s, buf + 16) < 0)
9080 reply_len = -1;
9081 } else if (os_strncmp(buf, "VENDOR_ELEM_GET ", 16) == 0) {
9082 reply_len = wpas_ctrl_vendor_elem_get(wpa_s, buf + 16, reply,
9083 reply_size);
9084 } else if (os_strncmp(buf, "VENDOR_ELEM_REMOVE ", 19) == 0) {
9085 if (wpas_ctrl_vendor_elem_remove(wpa_s, buf + 19) < 0)
9086 reply_len = -1;
9087 } else if (os_strncmp(buf, "NEIGHBOR_REP_REQUEST", 20) == 0) {
9088 if (wpas_ctrl_iface_send_neigbor_rep(wpa_s, buf + 20))
9089 reply_len = -1;
9090 } else if (os_strcmp(buf, "ERP_FLUSH") == 0) {
9091 wpas_ctrl_iface_erp_flush(wpa_s);
9092 } else if (os_strncmp(buf, "MAC_RAND_SCAN ", 14) == 0) {
9093 if (wpas_ctrl_iface_mac_rand_scan(wpa_s, buf + 14))
9094 reply_len = -1;
9095 } else if (os_strncmp(buf, "GET_PREF_FREQ_LIST ", 19) == 0) {
9096 reply_len = wpas_ctrl_iface_get_pref_freq_list(
9097 wpa_s, buf + 19, reply, reply_size);
9098 } else {
9099 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
9100 reply_len = 16;
9101 }
9102
9103 if (reply_len < 0) {
9104 os_memcpy(reply, "FAIL\n", 5);
9105 reply_len = 5;
9106 }
9107
9108 *resp_len = reply_len;
9109 return reply;
9110 }
9111
9112
wpa_supplicant_global_iface_add(struct wpa_global * global,char * cmd)9113 static int wpa_supplicant_global_iface_add(struct wpa_global *global,
9114 char *cmd)
9115 {
9116 struct wpa_interface iface;
9117 char *pos, *extra;
9118 struct wpa_supplicant *wpa_s;
9119 unsigned int create_iface = 0;
9120 u8 mac_addr[ETH_ALEN];
9121 enum wpa_driver_if_type type = WPA_IF_STATION;
9122
9123 /*
9124 * <ifname>TAB<confname>TAB<driver>TAB<ctrl_interface>TAB<driver_param>
9125 * TAB<bridge_ifname>[TAB<create>[TAB<interface_type>]]
9126 */
9127 wpa_printf(MSG_DEBUG, "CTRL_IFACE GLOBAL INTERFACE_ADD '%s'", cmd);
9128
9129 os_memset(&iface, 0, sizeof(iface));
9130
9131 do {
9132 iface.ifname = pos = cmd;
9133 pos = os_strchr(pos, '\t');
9134 if (pos)
9135 *pos++ = '\0';
9136 if (iface.ifname[0] == '\0')
9137 return -1;
9138 if (pos == NULL)
9139 break;
9140
9141 iface.confname = pos;
9142 pos = os_strchr(pos, '\t');
9143 if (pos)
9144 *pos++ = '\0';
9145 if (iface.confname[0] == '\0')
9146 iface.confname = NULL;
9147 if (pos == NULL)
9148 break;
9149
9150 iface.driver = pos;
9151 pos = os_strchr(pos, '\t');
9152 if (pos)
9153 *pos++ = '\0';
9154 if (iface.driver[0] == '\0')
9155 iface.driver = NULL;
9156 if (pos == NULL)
9157 break;
9158
9159 iface.ctrl_interface = pos;
9160 pos = os_strchr(pos, '\t');
9161 if (pos)
9162 *pos++ = '\0';
9163 if (iface.ctrl_interface[0] == '\0')
9164 iface.ctrl_interface = NULL;
9165 if (pos == NULL)
9166 break;
9167
9168 iface.driver_param = pos;
9169 pos = os_strchr(pos, '\t');
9170 if (pos)
9171 *pos++ = '\0';
9172 if (iface.driver_param[0] == '\0')
9173 iface.driver_param = NULL;
9174 if (pos == NULL)
9175 break;
9176
9177 iface.bridge_ifname = pos;
9178 pos = os_strchr(pos, '\t');
9179 if (pos)
9180 *pos++ = '\0';
9181 if (iface.bridge_ifname[0] == '\0')
9182 iface.bridge_ifname = NULL;
9183 if (pos == NULL)
9184 break;
9185
9186 extra = pos;
9187 pos = os_strchr(pos, '\t');
9188 if (pos)
9189 *pos++ = '\0';
9190 if (!extra[0])
9191 break;
9192
9193 if (os_strcmp(extra, "create") == 0) {
9194 create_iface = 1;
9195 if (!pos)
9196 break;
9197
9198 if (os_strcmp(pos, "sta") == 0) {
9199 type = WPA_IF_STATION;
9200 } else if (os_strcmp(pos, "ap") == 0) {
9201 type = WPA_IF_AP_BSS;
9202 } else {
9203 wpa_printf(MSG_DEBUG,
9204 "INTERFACE_ADD unsupported interface type: '%s'",
9205 pos);
9206 return -1;
9207 }
9208 } else {
9209 wpa_printf(MSG_DEBUG,
9210 "INTERFACE_ADD unsupported extra parameter: '%s'",
9211 extra);
9212 return -1;
9213 }
9214 } while (0);
9215
9216 if (create_iface) {
9217 wpa_printf(MSG_DEBUG, "CTRL_IFACE creating interface '%s'",
9218 iface.ifname);
9219 if (!global->ifaces)
9220 return -1;
9221 if (wpa_drv_if_add(global->ifaces, type, iface.ifname,
9222 NULL, NULL, NULL, mac_addr, NULL) < 0) {
9223 wpa_printf(MSG_ERROR,
9224 "CTRL_IFACE interface creation failed");
9225 return -1;
9226 }
9227
9228 wpa_printf(MSG_DEBUG,
9229 "CTRL_IFACE interface '%s' created with MAC addr: "
9230 MACSTR, iface.ifname, MAC2STR(mac_addr));
9231 }
9232
9233 if (wpa_supplicant_get_iface(global, iface.ifname))
9234 goto fail;
9235
9236 wpa_s = wpa_supplicant_add_iface(global, &iface, NULL);
9237 if (!wpa_s)
9238 goto fail;
9239 wpa_s->added_vif = create_iface;
9240 return 0;
9241
9242 fail:
9243 if (create_iface)
9244 wpa_drv_if_remove(global->ifaces, WPA_IF_STATION, iface.ifname);
9245 return -1;
9246 }
9247
9248
wpa_supplicant_global_iface_remove(struct wpa_global * global,char * cmd)9249 static int wpa_supplicant_global_iface_remove(struct wpa_global *global,
9250 char *cmd)
9251 {
9252 struct wpa_supplicant *wpa_s;
9253 int ret;
9254 unsigned int delete_iface;
9255
9256 wpa_printf(MSG_DEBUG, "CTRL_IFACE GLOBAL INTERFACE_REMOVE '%s'", cmd);
9257
9258 wpa_s = wpa_supplicant_get_iface(global, cmd);
9259 if (wpa_s == NULL)
9260 return -1;
9261 delete_iface = wpa_s->added_vif;
9262 ret = wpa_supplicant_remove_iface(global, wpa_s, 0);
9263 if (!ret && delete_iface) {
9264 wpa_printf(MSG_DEBUG, "CTRL_IFACE deleting the interface '%s'",
9265 cmd);
9266 ret = wpa_drv_if_remove(global->ifaces, WPA_IF_STATION, cmd);
9267 }
9268 return ret;
9269 }
9270
9271
wpa_free_iface_info(struct wpa_interface_info * iface)9272 static void wpa_free_iface_info(struct wpa_interface_info *iface)
9273 {
9274 struct wpa_interface_info *prev;
9275
9276 while (iface) {
9277 prev = iface;
9278 iface = iface->next;
9279
9280 os_free(prev->ifname);
9281 os_free(prev->desc);
9282 os_free(prev);
9283 }
9284 }
9285
9286
wpa_supplicant_global_iface_list(struct wpa_global * global,char * buf,int len)9287 static int wpa_supplicant_global_iface_list(struct wpa_global *global,
9288 char *buf, int len)
9289 {
9290 int i, res;
9291 struct wpa_interface_info *iface = NULL, *last = NULL, *tmp;
9292 char *pos, *end;
9293
9294 for (i = 0; wpa_drivers[i]; i++) {
9295 const struct wpa_driver_ops *drv = wpa_drivers[i];
9296 if (drv->get_interfaces == NULL)
9297 continue;
9298 tmp = drv->get_interfaces(global->drv_priv[i]);
9299 if (tmp == NULL)
9300 continue;
9301
9302 if (last == NULL)
9303 iface = last = tmp;
9304 else
9305 last->next = tmp;
9306 while (last->next)
9307 last = last->next;
9308 }
9309
9310 pos = buf;
9311 end = buf + len;
9312 for (tmp = iface; tmp; tmp = tmp->next) {
9313 res = os_snprintf(pos, end - pos, "%s\t%s\t%s\n",
9314 tmp->drv_name, tmp->ifname,
9315 tmp->desc ? tmp->desc : "");
9316 if (os_snprintf_error(end - pos, res)) {
9317 *pos = '\0';
9318 break;
9319 }
9320 pos += res;
9321 }
9322
9323 wpa_free_iface_info(iface);
9324
9325 return pos - buf;
9326 }
9327
9328
wpa_supplicant_global_iface_interfaces(struct wpa_global * global,const char * input,char * buf,int len)9329 static int wpa_supplicant_global_iface_interfaces(struct wpa_global *global,
9330 const char *input,
9331 char *buf, int len)
9332 {
9333 int res;
9334 char *pos, *end;
9335 struct wpa_supplicant *wpa_s;
9336 int show_ctrl = 0;
9337
9338 if (input)
9339 show_ctrl = !!os_strstr(input, "ctrl");
9340
9341 wpa_s = global->ifaces;
9342 pos = buf;
9343 end = buf + len;
9344
9345 while (wpa_s) {
9346 if (show_ctrl)
9347 res = os_snprintf(pos, end - pos, "%s ctrl_iface=%s\n",
9348 wpa_s->ifname,
9349 wpa_s->conf->ctrl_interface ?
9350 wpa_s->conf->ctrl_interface : "N/A");
9351 else
9352 res = os_snprintf(pos, end - pos, "%s\n",
9353 wpa_s->ifname);
9354
9355 if (os_snprintf_error(end - pos, res)) {
9356 *pos = '\0';
9357 break;
9358 }
9359 pos += res;
9360 wpa_s = wpa_s->next;
9361 }
9362 return pos - buf;
9363 }
9364
9365
wpas_global_ctrl_iface_ifname(struct wpa_global * global,const char * ifname,char * cmd,size_t * resp_len)9366 static char * wpas_global_ctrl_iface_ifname(struct wpa_global *global,
9367 const char *ifname,
9368 char *cmd, size_t *resp_len)
9369 {
9370 struct wpa_supplicant *wpa_s;
9371
9372 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
9373 if (os_strcmp(ifname, wpa_s->ifname) == 0)
9374 break;
9375 }
9376
9377 if (wpa_s == NULL) {
9378 char *resp = os_strdup("FAIL-NO-IFNAME-MATCH\n");
9379 if (resp)
9380 *resp_len = os_strlen(resp);
9381 else
9382 *resp_len = 1;
9383 return resp;
9384 }
9385
9386 return wpa_supplicant_ctrl_iface_process(wpa_s, cmd, resp_len);
9387 }
9388
9389
wpas_global_ctrl_iface_redir_p2p(struct wpa_global * global,char * buf,size_t * resp_len)9390 static char * wpas_global_ctrl_iface_redir_p2p(struct wpa_global *global,
9391 char *buf, size_t *resp_len)
9392 {
9393 #ifdef CONFIG_P2P
9394 static const char * cmd[] = {
9395 "LIST_NETWORKS",
9396 "P2P_FIND",
9397 "P2P_STOP_FIND",
9398 "P2P_LISTEN",
9399 "P2P_GROUP_ADD",
9400 "P2P_GET_PASSPHRASE",
9401 "P2P_SERVICE_UPDATE",
9402 "P2P_SERVICE_FLUSH",
9403 "P2P_FLUSH",
9404 "P2P_CANCEL",
9405 "P2P_PRESENCE_REQ",
9406 "P2P_EXT_LISTEN",
9407 NULL
9408 };
9409 static const char * prefix[] = {
9410 #ifdef ANDROID
9411 "DRIVER ",
9412 #endif /* ANDROID */
9413 "GET_NETWORK ",
9414 "REMOVE_NETWORK ",
9415 "P2P_FIND ",
9416 "P2P_CONNECT ",
9417 "P2P_LISTEN ",
9418 "P2P_GROUP_REMOVE ",
9419 "P2P_GROUP_ADD ",
9420 "P2P_PROV_DISC ",
9421 "P2P_SERV_DISC_REQ ",
9422 "P2P_SERV_DISC_CANCEL_REQ ",
9423 "P2P_SERV_DISC_RESP ",
9424 "P2P_SERV_DISC_EXTERNAL ",
9425 "P2P_SERVICE_ADD ",
9426 "P2P_SERVICE_DEL ",
9427 "P2P_SERVICE_REP ",
9428 "P2P_REJECT ",
9429 "P2P_INVITE ",
9430 "P2P_PEER ",
9431 "P2P_SET ",
9432 "P2P_UNAUTHORIZE ",
9433 "P2P_PRESENCE_REQ ",
9434 "P2P_EXT_LISTEN ",
9435 "P2P_REMOVE_CLIENT ",
9436 "WPS_NFC_TOKEN ",
9437 "WPS_NFC_TAG_READ ",
9438 "NFC_GET_HANDOVER_SEL ",
9439 "NFC_GET_HANDOVER_REQ ",
9440 "NFC_REPORT_HANDOVER ",
9441 "P2P_ASP_PROVISION ",
9442 "P2P_ASP_PROVISION_RESP ",
9443 NULL
9444 };
9445 int found = 0;
9446 int i;
9447
9448 if (global->p2p_init_wpa_s == NULL)
9449 return NULL;
9450
9451 for (i = 0; !found && cmd[i]; i++) {
9452 if (os_strcmp(buf, cmd[i]) == 0)
9453 found = 1;
9454 }
9455
9456 for (i = 0; !found && prefix[i]; i++) {
9457 if (os_strncmp(buf, prefix[i], os_strlen(prefix[i])) == 0)
9458 found = 1;
9459 }
9460
9461 if (found)
9462 return wpa_supplicant_ctrl_iface_process(global->p2p_init_wpa_s,
9463 buf, resp_len);
9464 #endif /* CONFIG_P2P */
9465 return NULL;
9466 }
9467
9468
wpas_global_ctrl_iface_redir_wfd(struct wpa_global * global,char * buf,size_t * resp_len)9469 static char * wpas_global_ctrl_iface_redir_wfd(struct wpa_global *global,
9470 char *buf, size_t *resp_len)
9471 {
9472 #ifdef CONFIG_WIFI_DISPLAY
9473 if (global->p2p_init_wpa_s == NULL)
9474 return NULL;
9475 if (os_strncmp(buf, "WFD_SUBELEM_SET ", 16) == 0 ||
9476 os_strncmp(buf, "WFD_SUBELEM_GET ", 16) == 0)
9477 return wpa_supplicant_ctrl_iface_process(global->p2p_init_wpa_s,
9478 buf, resp_len);
9479 #endif /* CONFIG_WIFI_DISPLAY */
9480 return NULL;
9481 }
9482
9483
wpas_global_ctrl_iface_redir(struct wpa_global * global,char * buf,size_t * resp_len)9484 static char * wpas_global_ctrl_iface_redir(struct wpa_global *global,
9485 char *buf, size_t *resp_len)
9486 {
9487 char *ret;
9488
9489 ret = wpas_global_ctrl_iface_redir_p2p(global, buf, resp_len);
9490 if (ret)
9491 return ret;
9492
9493 ret = wpas_global_ctrl_iface_redir_wfd(global, buf, resp_len);
9494 if (ret)
9495 return ret;
9496
9497 return NULL;
9498 }
9499
9500
wpas_global_ctrl_iface_set(struct wpa_global * global,char * cmd)9501 static int wpas_global_ctrl_iface_set(struct wpa_global *global, char *cmd)
9502 {
9503 char *value;
9504
9505 value = os_strchr(cmd, ' ');
9506 if (value == NULL)
9507 return -1;
9508 *value++ = '\0';
9509
9510 wpa_printf(MSG_DEBUG, "GLOBAL_CTRL_IFACE SET '%s'='%s'", cmd, value);
9511
9512 #ifdef CONFIG_WIFI_DISPLAY
9513 if (os_strcasecmp(cmd, "wifi_display") == 0) {
9514 wifi_display_enable(global, !!atoi(value));
9515 return 0;
9516 }
9517 #endif /* CONFIG_WIFI_DISPLAY */
9518
9519 /* Restore cmd to its original value to allow redirection */
9520 value[-1] = ' ';
9521
9522 return -1;
9523 }
9524
9525
wpas_global_ctrl_iface_dup_network(struct wpa_global * global,char * cmd)9526 static int wpas_global_ctrl_iface_dup_network(struct wpa_global *global,
9527 char *cmd)
9528 {
9529 struct wpa_supplicant *wpa_s[2]; /* src, dst */
9530 char *p;
9531 unsigned int i;
9532
9533 /* cmd: "<src ifname> <dst ifname> <src network id> <dst network id>
9534 * <variable name> */
9535
9536 for (i = 0; i < ARRAY_SIZE(wpa_s) ; i++) {
9537 p = os_strchr(cmd, ' ');
9538 if (p == NULL)
9539 return -1;
9540 *p = '\0';
9541
9542 wpa_s[i] = global->ifaces;
9543 for (; wpa_s[i]; wpa_s[i] = wpa_s[i]->next) {
9544 if (os_strcmp(cmd, wpa_s[i]->ifname) == 0)
9545 break;
9546 }
9547
9548 if (!wpa_s[i]) {
9549 wpa_printf(MSG_DEBUG,
9550 "CTRL_IFACE: Could not find iface=%s", cmd);
9551 return -1;
9552 }
9553
9554 cmd = p + 1;
9555 }
9556
9557 return wpa_supplicant_ctrl_iface_dup_network(wpa_s[0], cmd, wpa_s[1]);
9558 }
9559
9560
9561 #ifndef CONFIG_NO_CONFIG_WRITE
wpas_global_ctrl_iface_save_config(struct wpa_global * global)9562 static int wpas_global_ctrl_iface_save_config(struct wpa_global *global)
9563 {
9564 int ret = 0, saved = 0;
9565 struct wpa_supplicant *wpa_s;
9566
9567 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
9568 if (!wpa_s->conf->update_config) {
9569 wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Not allowed to update configuration (update_config=0)");
9570 continue;
9571 }
9572
9573 if (wpa_config_write(wpa_s->confname, wpa_s->conf)) {
9574 wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Failed to update configuration");
9575 ret = 1;
9576 } else {
9577 wpa_dbg(wpa_s, MSG_DEBUG, "CTRL_IFACE: SAVE_CONFIG - Configuration updated");
9578 saved++;
9579 }
9580 }
9581
9582 if (!saved && !ret) {
9583 wpa_dbg(wpa_s, MSG_DEBUG,
9584 "CTRL_IFACE: SAVE_CONFIG - No configuration files could be updated");
9585 ret = 1;
9586 }
9587
9588 return ret;
9589 }
9590 #endif /* CONFIG_NO_CONFIG_WRITE */
9591
9592
wpas_global_ctrl_iface_status(struct wpa_global * global,char * buf,size_t buflen)9593 static int wpas_global_ctrl_iface_status(struct wpa_global *global,
9594 char *buf, size_t buflen)
9595 {
9596 char *pos, *end;
9597 int ret;
9598 struct wpa_supplicant *wpa_s;
9599
9600 pos = buf;
9601 end = buf + buflen;
9602
9603 #ifdef CONFIG_P2P
9604 if (global->p2p && !global->p2p_disabled) {
9605 ret = os_snprintf(pos, end - pos, "p2p_device_address=" MACSTR
9606 "\n"
9607 "p2p_state=%s\n",
9608 MAC2STR(global->p2p_dev_addr),
9609 p2p_get_state_txt(global->p2p));
9610 if (os_snprintf_error(end - pos, ret))
9611 return pos - buf;
9612 pos += ret;
9613 } else if (global->p2p) {
9614 ret = os_snprintf(pos, end - pos, "p2p_state=DISABLED\n");
9615 if (os_snprintf_error(end - pos, ret))
9616 return pos - buf;
9617 pos += ret;
9618 }
9619 #endif /* CONFIG_P2P */
9620
9621 #ifdef CONFIG_WIFI_DISPLAY
9622 ret = os_snprintf(pos, end - pos, "wifi_display=%d\n",
9623 !!global->wifi_display);
9624 if (os_snprintf_error(end - pos, ret))
9625 return pos - buf;
9626 pos += ret;
9627 #endif /* CONFIG_WIFI_DISPLAY */
9628
9629 for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
9630 ret = os_snprintf(pos, end - pos, "ifname=%s\n"
9631 "address=" MACSTR "\n",
9632 wpa_s->ifname, MAC2STR(wpa_s->own_addr));
9633 if (os_snprintf_error(end - pos, ret))
9634 return pos - buf;
9635 pos += ret;
9636 }
9637
9638 return pos - buf;
9639 }
9640
9641
9642 #ifdef CONFIG_FST
9643
wpas_global_ctrl_iface_fst_attach(struct wpa_global * global,char * cmd,char * buf,size_t reply_size)9644 static int wpas_global_ctrl_iface_fst_attach(struct wpa_global *global,
9645 char *cmd, char *buf,
9646 size_t reply_size)
9647 {
9648 char ifname[IFNAMSIZ + 1];
9649 struct fst_iface_cfg cfg;
9650 struct wpa_supplicant *wpa_s;
9651 struct fst_wpa_obj iface_obj;
9652
9653 if (!fst_parse_attach_command(cmd, ifname, sizeof(ifname), &cfg)) {
9654 wpa_s = wpa_supplicant_get_iface(global, ifname);
9655 if (wpa_s) {
9656 if (wpa_s->fst) {
9657 wpa_printf(MSG_INFO, "FST: Already attached");
9658 return -1;
9659 }
9660 fst_wpa_supplicant_fill_iface_obj(wpa_s, &iface_obj);
9661 wpa_s->fst = fst_attach(ifname, wpa_s->own_addr,
9662 &iface_obj, &cfg);
9663 if (wpa_s->fst)
9664 return os_snprintf(buf, reply_size, "OK\n");
9665 }
9666 }
9667
9668 return -1;
9669 }
9670
9671
wpas_global_ctrl_iface_fst_detach(struct wpa_global * global,char * cmd,char * buf,size_t reply_size)9672 static int wpas_global_ctrl_iface_fst_detach(struct wpa_global *global,
9673 char *cmd, char *buf,
9674 size_t reply_size)
9675 {
9676 char ifname[IFNAMSIZ + 1];
9677 struct wpa_supplicant *wpa_s;
9678
9679 if (!fst_parse_detach_command(cmd, ifname, sizeof(ifname))) {
9680 wpa_s = wpa_supplicant_get_iface(global, ifname);
9681 if (wpa_s) {
9682 if (!fst_iface_detach(ifname)) {
9683 wpa_s->fst = NULL;
9684 return os_snprintf(buf, reply_size, "OK\n");
9685 }
9686 }
9687 }
9688
9689 return -1;
9690 }
9691
9692 #endif /* CONFIG_FST */
9693
9694
wpa_supplicant_global_ctrl_iface_process(struct wpa_global * global,char * buf,size_t * resp_len)9695 char * wpa_supplicant_global_ctrl_iface_process(struct wpa_global *global,
9696 char *buf, size_t *resp_len)
9697 {
9698 char *reply;
9699 const int reply_size = 2048;
9700 int reply_len;
9701 int level = MSG_DEBUG;
9702
9703 if (os_strncmp(buf, "IFNAME=", 7) == 0) {
9704 char *pos = os_strchr(buf + 7, ' ');
9705 if (pos) {
9706 *pos++ = '\0';
9707 return wpas_global_ctrl_iface_ifname(global,
9708 buf + 7, pos,
9709 resp_len);
9710 }
9711 }
9712
9713 reply = wpas_global_ctrl_iface_redir(global, buf, resp_len);
9714 if (reply)
9715 return reply;
9716
9717 if (os_strcmp(buf, "PING") == 0)
9718 level = MSG_EXCESSIVE;
9719 wpa_hexdump_ascii(level, "RX global ctrl_iface",
9720 (const u8 *) buf, os_strlen(buf));
9721
9722 reply = os_malloc(reply_size);
9723 if (reply == NULL) {
9724 *resp_len = 1;
9725 return NULL;
9726 }
9727
9728 os_memcpy(reply, "OK\n", 3);
9729 reply_len = 3;
9730
9731 if (os_strcmp(buf, "PING") == 0) {
9732 os_memcpy(reply, "PONG\n", 5);
9733 reply_len = 5;
9734 } else if (os_strncmp(buf, "INTERFACE_ADD ", 14) == 0) {
9735 if (wpa_supplicant_global_iface_add(global, buf + 14))
9736 reply_len = -1;
9737 } else if (os_strncmp(buf, "INTERFACE_REMOVE ", 17) == 0) {
9738 if (wpa_supplicant_global_iface_remove(global, buf + 17))
9739 reply_len = -1;
9740 } else if (os_strcmp(buf, "INTERFACE_LIST") == 0) {
9741 reply_len = wpa_supplicant_global_iface_list(
9742 global, reply, reply_size);
9743 } else if (os_strncmp(buf, "INTERFACES", 10) == 0) {
9744 reply_len = wpa_supplicant_global_iface_interfaces(
9745 global, buf + 10, reply, reply_size);
9746 #ifdef CONFIG_FST
9747 } else if (os_strncmp(buf, "FST-ATTACH ", 11) == 0) {
9748 reply_len = wpas_global_ctrl_iface_fst_attach(global, buf + 11,
9749 reply,
9750 reply_size);
9751 } else if (os_strncmp(buf, "FST-DETACH ", 11) == 0) {
9752 reply_len = wpas_global_ctrl_iface_fst_detach(global, buf + 11,
9753 reply,
9754 reply_size);
9755 } else if (os_strncmp(buf, "FST-MANAGER ", 12) == 0) {
9756 reply_len = fst_ctrl_iface_receive(buf + 12, reply, reply_size);
9757 #endif /* CONFIG_FST */
9758 } else if (os_strcmp(buf, "TERMINATE") == 0) {
9759 wpa_supplicant_terminate_proc(global);
9760 } else if (os_strcmp(buf, "SUSPEND") == 0) {
9761 wpas_notify_suspend(global);
9762 } else if (os_strcmp(buf, "RESUME") == 0) {
9763 wpas_notify_resume(global);
9764 } else if (os_strncmp(buf, "SET ", 4) == 0) {
9765 if (wpas_global_ctrl_iface_set(global, buf + 4)) {
9766 #ifdef CONFIG_P2P
9767 if (global->p2p_init_wpa_s) {
9768 os_free(reply);
9769 /* Check if P2P redirection would work for this
9770 * command. */
9771 return wpa_supplicant_ctrl_iface_process(
9772 global->p2p_init_wpa_s,
9773 buf, resp_len);
9774 }
9775 #endif /* CONFIG_P2P */
9776 reply_len = -1;
9777 }
9778 } else if (os_strncmp(buf, "DUP_NETWORK ", 12) == 0) {
9779 if (wpas_global_ctrl_iface_dup_network(global, buf + 12))
9780 reply_len = -1;
9781 #ifndef CONFIG_NO_CONFIG_WRITE
9782 } else if (os_strcmp(buf, "SAVE_CONFIG") == 0) {
9783 if (wpas_global_ctrl_iface_save_config(global))
9784 reply_len = -1;
9785 #endif /* CONFIG_NO_CONFIG_WRITE */
9786 } else if (os_strcmp(buf, "STATUS") == 0) {
9787 reply_len = wpas_global_ctrl_iface_status(global, reply,
9788 reply_size);
9789 #ifdef CONFIG_MODULE_TESTS
9790 } else if (os_strcmp(buf, "MODULE_TESTS") == 0) {
9791 int wpas_module_tests(void);
9792 if (wpas_module_tests() < 0)
9793 reply_len = -1;
9794 #endif /* CONFIG_MODULE_TESTS */
9795 } else if (os_strncmp(buf, "RELOG", 5) == 0) {
9796 if (wpa_debug_reopen_file() < 0)
9797 reply_len = -1;
9798 } else {
9799 os_memcpy(reply, "UNKNOWN COMMAND\n", 16);
9800 reply_len = 16;
9801 }
9802
9803 if (reply_len < 0) {
9804 os_memcpy(reply, "FAIL\n", 5);
9805 reply_len = 5;
9806 }
9807
9808 *resp_len = reply_len;
9809 return reply;
9810 }
9811