2 * hostapd / Callback functions for driver wrappers
3 * Copyright (c) 2002-2009, Jouni Malinen <j@w1.fi>
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
9 #include "utils/includes.h"
11 #include "utils/common.h"
12 #include "radius/radius.h"
13 #include "drivers/driver.h"
14 #include "common/ieee802_11_defs.h"
15 #include "common/ieee802_11_common.h"
16 #include "crypto/random.h"
20 #include "ieee802_11.h"
22 #include "accounting.h"
23 #include "tkip_countermeasures.h"
24 #include "ieee802_1x.h"
26 #include "wps_hostapd.h"
27 #include "ap_drv_ops.h"
28 #include "ap_config.h"
29 #include "hw_features.h"
32 int hostapd_notif_assoc(struct hostapd_data *hapd, const u8 *addr,
33 const u8 *req_ies, size_t req_ies_len, int reassoc)
37 struct ieee802_11_elems elems;
40 u16 reason = WLAN_REASON_UNSPECIFIED;
44 * This could potentially happen with unexpected event from the
45 * driver wrapper. This was seen at least in one case where the
46 * driver ended up being set to station mode while hostapd was
47 * running, so better make sure we stop processing such an
50 wpa_printf(MSG_DEBUG, "hostapd_notif_assoc: Skip event with "
54 random_add_randomness(addr, ETH_ALEN);
56 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
57 HOSTAPD_LEVEL_INFO, "associated");
59 ieee802_11_parse_elems(req_ies, req_ies_len, &elems, 0);
61 ie = elems.wps_ie - 2;
62 ielen = elems.wps_ie_len + 2;
63 wpa_printf(MSG_DEBUG, "STA included WPS IE in (Re)AssocReq");
64 } else if (elems.rsn_ie) {
65 ie = elems.rsn_ie - 2;
66 ielen = elems.rsn_ie_len + 2;
67 wpa_printf(MSG_DEBUG, "STA included RSN IE in (Re)AssocReq");
68 } else if (elems.wpa_ie) {
69 ie = elems.wpa_ie - 2;
70 ielen = elems.wpa_ie_len + 2;
71 wpa_printf(MSG_DEBUG, "STA included WPA IE in (Re)AssocReq");
75 wpa_printf(MSG_DEBUG, "STA did not include WPS/RSN/WPA IE in "
79 sta = ap_get_sta(hapd, addr);
81 accounting_sta_stop(hapd, sta);
84 * Make sure that the previously registered inactivity timer
85 * will not remove the STA immediately.
87 sta->timeout_next = STA_NULLFUNC;
89 sta = ap_sta_add(hapd, addr);
91 hostapd_drv_sta_disassoc(hapd, addr,
92 WLAN_REASON_DISASSOC_AP_BUSY);
96 sta->flags &= ~(WLAN_STA_WPS | WLAN_STA_MAYBE_WPS | WLAN_STA_WPS2);
100 wpabuf_free(sta->p2p_ie);
101 sta->p2p_ie = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
104 #endif /* CONFIG_P2P */
106 if (hapd->conf->wpa) {
107 if (ie == NULL || ielen == 0) {
109 if (hapd->conf->wps_state) {
110 wpa_printf(MSG_DEBUG, "STA did not include "
111 "WPA/RSN IE in (Re)Association "
112 "Request - possible WPS use");
113 sta->flags |= WLAN_STA_MAYBE_WPS;
116 #endif /* CONFIG_WPS */
118 wpa_printf(MSG_DEBUG, "No WPA/RSN IE from STA");
122 if (hapd->conf->wps_state && ie[0] == 0xdd && ie[1] >= 4 &&
123 os_memcmp(ie + 2, "\x00\x50\xf2\x04", 4) == 0) {
125 sta->flags |= WLAN_STA_WPS;
126 wps = ieee802_11_vendor_ie_concat(ie, ielen,
129 if (wps_is_20(wps)) {
130 wpa_printf(MSG_DEBUG, "WPS: STA "
132 sta->flags |= WLAN_STA_WPS2;
138 #endif /* CONFIG_WPS */
140 if (sta->wpa_sm == NULL)
141 sta->wpa_sm = wpa_auth_sta_init(hapd->wpa_auth,
143 if (sta->wpa_sm == NULL) {
144 wpa_printf(MSG_ERROR, "Failed to initialize WPA state "
148 res = wpa_validate_wpa_ie(hapd->wpa_auth, sta->wpa_sm,
150 if (res != WPA_IE_OK) {
151 wpa_printf(MSG_DEBUG, "WPA/RSN information element "
152 "rejected? (res %u)", res);
153 wpa_hexdump(MSG_DEBUG, "IE", ie, ielen);
154 if (res == WPA_INVALID_GROUP)
155 reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
156 else if (res == WPA_INVALID_PAIRWISE)
157 reason = WLAN_REASON_PAIRWISE_CIPHER_NOT_VALID;
158 else if (res == WPA_INVALID_AKMP)
159 reason = WLAN_REASON_AKMP_NOT_VALID;
160 #ifdef CONFIG_IEEE80211W
161 else if (res == WPA_MGMT_FRAME_PROTECTION_VIOLATION)
162 reason = WLAN_REASON_INVALID_IE;
163 else if (res == WPA_INVALID_MGMT_GROUP_CIPHER)
164 reason = WLAN_REASON_GROUP_CIPHER_NOT_VALID;
165 #endif /* CONFIG_IEEE80211W */
167 reason = WLAN_REASON_INVALID_IE;
170 } else if (hapd->conf->wps_state) {
174 wps = ieee802_11_vendor_ie_concat(req_ies, req_ies_len,
178 #ifdef CONFIG_WPS_STRICT
179 if (wps && wps_validate_assoc_req(wps) < 0) {
180 reason = WLAN_REASON_INVALID_IE;
184 #endif /* CONFIG_WPS_STRICT */
186 sta->flags |= WLAN_STA_WPS;
187 if (wps_is_20(wps)) {
188 wpa_printf(MSG_DEBUG, "WPS: STA supports "
190 sta->flags |= WLAN_STA_WPS2;
193 sta->flags |= WLAN_STA_MAYBE_WPS;
195 #endif /* CONFIG_WPS */
199 #endif /* CONFIG_WPS */
201 new_assoc = (sta->flags & WLAN_STA_ASSOC) == 0;
202 sta->flags |= WLAN_STA_AUTH | WLAN_STA_ASSOC;
203 wpa_auth_sm_event(sta->wpa_sm, WPA_ASSOC);
205 hostapd_new_assoc_sta(hapd, sta, !new_assoc);
207 ieee802_1x_notify_port_enabled(sta->eapol_sm, 1);
211 p2p_group_notif_assoc(hapd->p2p_group, sta->addr,
212 req_ies, req_ies_len);
214 #endif /* CONFIG_P2P */
219 hostapd_drv_sta_disassoc(hapd, sta->addr, reason);
220 ap_free_sta(hapd, sta);
225 void hostapd_notif_disassoc(struct hostapd_data *hapd, const u8 *addr)
227 struct sta_info *sta;
231 * This could potentially happen with unexpected event from the
232 * driver wrapper. This was seen at least in one case where the
233 * driver ended up reporting a station mode event while hostapd
234 * was running, so better make sure we stop processing such an
237 wpa_printf(MSG_DEBUG, "hostapd_notif_disassoc: Skip event "
242 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
243 HOSTAPD_LEVEL_INFO, "disassociated");
245 sta = ap_get_sta(hapd, addr);
247 wpa_printf(MSG_DEBUG, "Disassociation notification for "
248 "unknown STA " MACSTR, MAC2STR(addr));
252 ap_sta_set_authorized(hapd, sta, 0);
253 sta->flags &= ~(WLAN_STA_AUTH | WLAN_STA_ASSOC);
254 wpa_auth_sm_event(sta->wpa_sm, WPA_DISASSOC);
255 sta->acct_terminate_cause = RADIUS_ACCT_TERMINATE_CAUSE_USER_REQUEST;
256 ieee802_1x_notify_port_enabled(sta->eapol_sm, 0);
257 ap_free_sta(hapd, sta);
261 void hostapd_event_sta_low_ack(struct hostapd_data *hapd, const u8 *addr)
263 struct sta_info *sta = ap_get_sta(hapd, addr);
265 if (!sta || !hapd->conf->disassoc_low_ack)
268 hostapd_logger(hapd, addr, HOSTAPD_MODULE_IEEE80211,
269 HOSTAPD_LEVEL_INFO, "disconnected due to excessive "
271 hostapd_drv_sta_disassoc(hapd, addr, WLAN_REASON_DISASSOC_LOW_ACK);
273 ap_sta_disassociate(hapd, sta, WLAN_REASON_DISASSOC_LOW_ACK);
277 void hostapd_event_ch_switch(struct hostapd_data *hapd, int freq, int ht,
282 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
283 HOSTAPD_LEVEL_INFO, "driver had channel switch: "
284 "freq=%d, ht=%d, offset=%d", freq, ht, offset);
286 hapd->iface->freq = freq;
288 channel = hostapd_hw_get_channel(hapd, freq);
290 hostapd_logger(hapd, NULL, HOSTAPD_MODULE_IEEE80211,
291 HOSTAPD_LEVEL_WARNING, "driver switched to "
296 hapd->iconf->channel = channel;
297 hapd->iconf->ieee80211n = ht;
298 hapd->iconf->secondary_channel = offset;
302 int hostapd_probe_req_rx(struct hostapd_data *hapd, const u8 *sa, const u8 *da,
303 const u8 *bssid, const u8 *ie, size_t ie_len,
309 if (sa == NULL || ie == NULL)
312 random_add_randomness(sa, ETH_ALEN);
313 for (i = 0; hapd->probereq_cb && i < hapd->num_probereq_cb; i++) {
314 if (hapd->probereq_cb[i].cb(hapd->probereq_cb[i].ctx,
315 sa, da, bssid, ie, ie_len,
329 #define HAPD_BROADCAST ((struct hostapd_data *) -1)
331 static struct hostapd_data * get_hapd_bssid(struct hostapd_iface *iface,
338 if (bssid[0] == 0xff && bssid[1] == 0xff && bssid[2] == 0xff &&
339 bssid[3] == 0xff && bssid[4] == 0xff && bssid[5] == 0xff)
340 return HAPD_BROADCAST;
342 for (i = 0; i < iface->num_bss; i++) {
343 if (os_memcmp(bssid, iface->bss[i]->own_addr, ETH_ALEN) == 0)
344 return iface->bss[i];
351 static void hostapd_rx_from_unknown_sta(struct hostapd_data *hapd,
352 const u8 *bssid, const u8 *addr,
355 hapd = get_hapd_bssid(hapd->iface, bssid);
356 if (hapd == NULL || hapd == HAPD_BROADCAST)
359 ieee802_11_rx_from_unknown(hapd, addr, wds);
363 static void hostapd_mgmt_rx(struct hostapd_data *hapd, struct rx_mgmt *rx_mgmt)
365 struct hostapd_iface *iface = hapd->iface;
366 const struct ieee80211_hdr *hdr;
368 struct hostapd_frame_info fi;
370 hdr = (const struct ieee80211_hdr *) rx_mgmt->frame;
371 bssid = get_hdr_bssid(hdr, rx_mgmt->frame_len);
375 hapd = get_hapd_bssid(iface, bssid);
378 fc = le_to_host16(hdr->frame_control);
381 * Drop frames to unknown BSSIDs except for Beacon frames which
382 * could be used to update neighbor information.
384 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
385 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
386 hapd = iface->bss[0];
391 os_memset(&fi, 0, sizeof(fi));
392 fi.datarate = rx_mgmt->datarate;
393 fi.ssi_signal = rx_mgmt->ssi_signal;
395 if (hapd == HAPD_BROADCAST) {
397 for (i = 0; i < iface->num_bss; i++)
398 ieee802_11_mgmt(iface->bss[i], rx_mgmt->frame,
399 rx_mgmt->frame_len, &fi);
401 ieee802_11_mgmt(hapd, rx_mgmt->frame, rx_mgmt->frame_len, &fi);
403 random_add_randomness(&fi, sizeof(fi));
407 static void hostapd_rx_action(struct hostapd_data *hapd,
408 struct rx_action *rx_action)
410 struct rx_mgmt rx_mgmt;
412 struct ieee80211_hdr *hdr;
414 wpa_printf(MSG_DEBUG, "EVENT_RX_ACTION DA=" MACSTR " SA=" MACSTR
415 " BSSID=" MACSTR " category=%u",
416 MAC2STR(rx_action->da), MAC2STR(rx_action->sa),
417 MAC2STR(rx_action->bssid), rx_action->category);
418 wpa_hexdump(MSG_MSGDUMP, "Received action frame contents",
419 rx_action->data, rx_action->len);
421 buf = os_zalloc(24 + 1 + rx_action->len);
424 hdr = (struct ieee80211_hdr *) buf;
425 hdr->frame_control = IEEE80211_FC(WLAN_FC_TYPE_MGMT,
426 WLAN_FC_STYPE_ACTION);
427 if (rx_action->category == WLAN_ACTION_SA_QUERY) {
429 * Assume frame was protected; it would have been dropped if
432 hdr->frame_control |= host_to_le16(WLAN_FC_ISWEP);
434 os_memcpy(hdr->addr1, rx_action->da, ETH_ALEN);
435 os_memcpy(hdr->addr2, rx_action->sa, ETH_ALEN);
436 os_memcpy(hdr->addr3, rx_action->bssid, ETH_ALEN);
437 buf[24] = rx_action->category;
438 os_memcpy(buf + 24 + 1, rx_action->data, rx_action->len);
439 os_memset(&rx_mgmt, 0, sizeof(rx_mgmt));
441 rx_mgmt.frame_len = 24 + 1 + rx_action->len;
442 hostapd_mgmt_rx(hapd, &rx_mgmt);
447 static void hostapd_mgmt_tx_cb(struct hostapd_data *hapd, const u8 *buf,
448 size_t len, u16 stype, int ok)
450 struct ieee80211_hdr *hdr;
451 hdr = (struct ieee80211_hdr *) buf;
452 hapd = get_hapd_bssid(hapd->iface, get_hdr_bssid(hdr, len));
453 if (hapd == NULL || hapd == HAPD_BROADCAST)
455 ieee802_11_mgmt_cb(hapd, buf, len, stype, ok);
458 #endif /* NEED_AP_MLME */
461 static int hostapd_event_new_sta(struct hostapd_data *hapd, const u8 *addr)
463 struct sta_info *sta = ap_get_sta(hapd, addr);
467 wpa_printf(MSG_DEBUG, "Data frame from unknown STA " MACSTR
468 " - adding a new STA", MAC2STR(addr));
469 sta = ap_sta_add(hapd, addr);
471 hostapd_new_assoc_sta(hapd, sta, 0);
473 wpa_printf(MSG_DEBUG, "Failed to add STA entry for " MACSTR,
482 static void hostapd_event_eapol_rx(struct hostapd_data *hapd, const u8 *src,
483 const u8 *data, size_t data_len)
485 struct hostapd_iface *iface = hapd->iface;
488 for (j = 0; j < iface->num_bss; j++) {
489 if (ap_get_sta(iface->bss[j], src)) {
490 hapd = iface->bss[j];
495 ieee802_1x_receive(hapd, src, data, data_len);
499 void wpa_supplicant_event(void *ctx, enum wpa_event_type event,
500 union wpa_event_data *data)
502 struct hostapd_data *hapd = ctx;
503 #ifndef CONFIG_NO_STDOUT_DEBUG
504 int level = MSG_DEBUG;
506 if (event == EVENT_RX_MGMT && data && data->rx_mgmt.frame &&
507 data->rx_mgmt.frame_len >= 24) {
508 const struct ieee80211_hdr *hdr;
510 hdr = (const struct ieee80211_hdr *) data->rx_mgmt.frame;
511 fc = le_to_host16(hdr->frame_control);
512 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
513 WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_BEACON)
514 level = MSG_EXCESSIVE;
517 wpa_dbg(hapd->msg_ctx, level, "Event %s (%d) received",
518 event_to_string(event), event);
519 #endif /* CONFIG_NO_STDOUT_DEBUG */
522 case EVENT_MICHAEL_MIC_FAILURE:
523 michael_mic_failure(hapd, data->michael_mic_failure.src, 1);
525 case EVENT_SCAN_RESULTS:
526 if (hapd->iface->scan_cb)
527 hapd->iface->scan_cb(hapd->iface);
529 #ifdef CONFIG_IEEE80211R
530 case EVENT_FT_RRB_RX:
531 wpa_ft_rrb_rx(hapd->wpa_auth, data->ft_rrb_rx.src,
532 data->ft_rrb_rx.data, data->ft_rrb_rx.data_len);
534 #endif /* CONFIG_IEEE80211R */
535 case EVENT_WPS_BUTTON_PUSHED:
536 hostapd_wps_button_pushed(hapd, NULL);
539 case EVENT_TX_STATUS:
540 switch (data->tx_status.type) {
541 case WLAN_FC_TYPE_MGMT:
542 hostapd_mgmt_tx_cb(hapd, data->tx_status.data,
543 data->tx_status.data_len,
544 data->tx_status.stype,
545 data->tx_status.ack);
547 case WLAN_FC_TYPE_DATA:
548 hostapd_tx_status(hapd, data->tx_status.dst,
549 data->tx_status.data,
550 data->tx_status.data_len,
551 data->tx_status.ack);
555 case EVENT_EAPOL_TX_STATUS:
556 hostapd_eapol_tx_status(hapd, data->eapol_tx_status.dst,
557 data->eapol_tx_status.data,
558 data->eapol_tx_status.data_len,
559 data->eapol_tx_status.ack);
561 case EVENT_DRIVER_CLIENT_POLL_OK:
562 hostapd_client_poll_ok(hapd, data->client_poll.addr);
564 case EVENT_RX_FROM_UNKNOWN:
565 hostapd_rx_from_unknown_sta(hapd, data->rx_from_unknown.bssid,
566 data->rx_from_unknown.addr,
567 data->rx_from_unknown.wds);
570 hostapd_mgmt_rx(hapd, &data->rx_mgmt);
572 #endif /* NEED_AP_MLME */
573 case EVENT_RX_PROBE_REQ:
574 if (data->rx_probe_req.sa == NULL ||
575 data->rx_probe_req.ie == NULL)
577 hostapd_probe_req_rx(hapd, data->rx_probe_req.sa,
578 data->rx_probe_req.da,
579 data->rx_probe_req.bssid,
580 data->rx_probe_req.ie,
581 data->rx_probe_req.ie_len,
582 data->rx_probe_req.ssi_signal);
585 hostapd_event_new_sta(hapd, data->new_sta.addr);
588 hostapd_event_eapol_rx(hapd, data->eapol_rx.src,
590 data->eapol_rx.data_len);
593 hostapd_notif_assoc(hapd, data->assoc_info.addr,
594 data->assoc_info.req_ies,
595 data->assoc_info.req_ies_len,
596 data->assoc_info.reassoc);
600 hostapd_notif_disassoc(hapd, data->disassoc_info.addr);
604 hostapd_notif_disassoc(hapd, data->deauth_info.addr);
606 case EVENT_STATION_LOW_ACK:
609 hostapd_event_sta_low_ack(hapd, data->low_ack.addr);
612 case EVENT_RX_ACTION:
613 if (data->rx_action.da == NULL || data->rx_action.sa == NULL ||
614 data->rx_action.bssid == NULL)
616 hostapd_rx_action(hapd, &data->rx_action);
618 #endif /* NEED_AP_MLME */
619 case EVENT_CH_SWITCH:
622 hostapd_event_ch_switch(hapd, data->ch_switch.freq,
623 data->ch_switch.ht_enabled,
624 data->ch_switch.ch_offset);
627 wpa_printf(MSG_DEBUG, "Unknown event %d", event);