src/drivers/driver_test.c

   1 /*
   2  * Testing driver interface for a simulated network driver
   3  * Copyright (c) 2004-2010, Jouni Malinen <j@w1.fi>
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License version 2 as
   7  * published by the Free Software Foundation.
   8  *
   9  * Alternatively, this software may be distributed under the terms of BSD
  10  * license.
  11  *
  12  * See README and COPYING for more details.
  13  */
  14
  15 /* Make sure we get winsock2.h for Windows build to get sockaddr_storage */
  16 #include "build_config.h"
  17 #ifdef CONFIG_NATIVE_WINDOWS
  18 #include <winsock2.h>
  19 #endif /* CONFIG_NATIVE_WINDOWS */
  20
  21 #include "utils/includes.h"
  22
  23 #ifndef CONFIG_NATIVE_WINDOWS
  24 #include <sys/un.h>
  25 #include <dirent.h>
  26 #include <sys/stat.h>
  27 #define DRIVER_TEST_UNIX
  28 #endif /* CONFIG_NATIVE_WINDOWS */
  29
  30 #include "utils/common.h"
  31 #include "utils/eloop.h"
  32 #include "utils/list.h"
  33 #include "utils/trace.h"
  34 #include "common/ieee802_11_defs.h"
  35 #include "crypto/sha1.h"
  36 #include "l2_packet/l2_packet.h"
  37 #include "p2p/p2p.h"
  38 #include "wps/wps.h"
  39 #include "driver.h"
  40
  41
  42 struct test_client_socket {
  43         struct test_client_socket *next;
  44         u8 addr[ETH_ALEN];
  45         struct sockaddr_un un;
  46         socklen_t unlen;
  47         struct test_driver_bss *bss;
  48 };
  49
  50 struct test_driver_bss {
  51         struct wpa_driver_test_data *drv;
  52         struct dl_list list;
  53         void *bss_ctx;
  54         char ifname[IFNAMSIZ];
  55         u8 bssid[ETH_ALEN];
  56         u8 *ie;
  57         size_t ielen;
  58         u8 *wps_beacon_ie;
  59         size_t wps_beacon_ie_len;
  60         u8 *wps_probe_resp_ie;
  61         size_t wps_probe_resp_ie_len;
  62         u8 ssid[32];
  63         size_t ssid_len;
  64         int privacy;
  65 };
  66
  67 struct wpa_driver_test_global {
  68         int bss_add_used;
  69         u8 req_addr[ETH_ALEN];
  70 };
  71
  72 struct wpa_driver_test_data {
  73         struct wpa_driver_test_global *global;
  74         void *ctx;
  75         WPA_TRACE_REF(ctx);
  76         u8 own_addr[ETH_ALEN];
  77         int test_socket;
  78 #ifdef DRIVER_TEST_UNIX
  79         struct sockaddr_un hostapd_addr;
  80 #endif /* DRIVER_TEST_UNIX */
  81         int hostapd_addr_set;
  82         struct sockaddr_in hostapd_addr_udp;
  83         int hostapd_addr_udp_set;
  84         char *own_socket_path;
  85         char *test_dir;
  86 #define MAX_SCAN_RESULTS 30
  87         struct wpa_scan_res *scanres[MAX_SCAN_RESULTS];
  88         size_t num_scanres;
  89         int use_associnfo;
  90         u8 assoc_wpa_ie[80];
  91         size_t assoc_wpa_ie_len;
  92         int use_mlme;
  93         int associated;
  94         u8 *probe_req_ie;
  95         size_t probe_req_ie_len;
  96         u8 probe_req_ssid[32];
  97         size_t probe_req_ssid_len;
  98         int ibss;
  99         int ap;
 100
 101         struct test_client_socket *cli;
 102         struct dl_list bss;
 103         int udp_port;
 104
 105         int alloc_iface_idx;
 106
 107         int probe_req_report;
 108         unsigned int remain_on_channel_freq;
 109         unsigned int remain_on_channel_duration;
 110
 111         int current_freq;
 112
 113         struct p2p_data *p2p;
 114         unsigned int off_channel_freq;
 115         struct wpabuf *pending_action_tx;
 116         u8 pending_action_src[ETH_ALEN];
 117         u8 pending_action_dst[ETH_ALEN];
 118         u8 pending_action_bssid[ETH_ALEN];
 119         unsigned int pending_action_freq;
 120         unsigned int pending_listen_freq;
 121         unsigned int pending_listen_duration;
 122         int pending_p2p_scan;
 123         struct sockaddr *probe_from;
 124         socklen_t probe_from_len;
 125 };
 126
 127
 128 static void wpa_driver_test_deinit(void *priv);
 129 static int wpa_driver_test_attach(struct wpa_driver_test_data *drv,
 130                                   const char *dir, int ap);
 131 static void wpa_driver_test_close_test_socket(
 132         struct wpa_driver_test_data *drv);
 133 static void test_remain_on_channel_timeout(void *eloop_ctx, void *timeout_ctx);
 134 static int wpa_driver_test_init_p2p(struct wpa_driver_test_data *drv);
 135
 136
 137 static void test_driver_free_bss(struct test_driver_bss *bss)
 138 {
 139         os_free(bss->ie);
 140         os_free(bss->wps_beacon_ie);
 141         os_free(bss->wps_probe_resp_ie);
 142         os_free(bss);
 143 }
 144
 145
 146 static void test_driver_free_bsses(struct wpa_driver_test_data *drv)
 147 {
 148         struct test_driver_bss *bss, *tmp;
 149
 150         dl_list_for_each_safe(bss, tmp, &drv->bss, struct test_driver_bss,
 151                               list) {
 152                 dl_list_del(&bss->list);
 153                 test_driver_free_bss(bss);
 154         }
 155 }
 156
 157
 158 static struct test_client_socket *
 159 test_driver_get_cli(struct wpa_driver_test_data *drv, struct sockaddr_un *from,
 160                     socklen_t fromlen)
 161 {
 162         struct test_client_socket *cli = drv->cli;
 163
 164         while (cli) {
 165                 if (cli->unlen == fromlen &&
 166                     strncmp(cli->un.sun_path, from->sun_path,
 167                             fromlen - sizeof(cli->un.sun_family)) == 0)
 168                         return cli;
 169                 cli = cli->next;
 170         }
 171
 172         return NULL;
 173 }
 174
 175
 176 static int test_driver_send_eapol(void *priv, const u8 *addr, const u8 *data,
 177                                   size_t data_len, int encrypt,
 178                                   const u8 *own_addr, u32 flags)
 179 {
 180         struct test_driver_bss *dbss = priv;
 181         struct wpa_driver_test_data *drv = dbss->drv;
 182         struct test_client_socket *cli;
 183         struct msghdr msg;
 184         struct iovec io[3];
 185         struct l2_ethhdr eth;
 186
 187         if (drv->test_socket < 0)
 188                 return -1;
 189
 190         cli = drv->cli;
 191         while (cli) {
 192                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
 193                         break;
 194                 cli = cli->next;
 195         }
 196
 197         if (!cli) {
 198                 wpa_printf(MSG_DEBUG, "%s: no destination client entry",
 199                            __func__);
 200                 return -1;
 201         }
 202
 203         memcpy(eth.h_dest, addr, ETH_ALEN);
 204         memcpy(eth.h_source, own_addr, ETH_ALEN);
 205         eth.h_proto = host_to_be16(ETH_P_EAPOL);
 206
 207         io[0].iov_base = "EAPOL ";
 208         io[0].iov_len = 6;
 209         io[1].iov_base = &eth;
 210         io[1].iov_len = sizeof(eth);
 211         io[2].iov_base = (u8 *) data;
 212         io[2].iov_len = data_len;
 213
 214         memset(&msg, 0, sizeof(msg));
 215         msg.msg_iov = io;
 216         msg.msg_iovlen = 3;
 217         msg.msg_name = &cli->un;
 218         msg.msg_namelen = cli->unlen;
 219         return sendmsg(drv->test_socket, &msg, 0);
 220 }
 221
 222
 223 static int test_driver_send_ether(void *priv, const u8 *dst, const u8 *src,
 224                                   u16 proto, const u8 *data, size_t data_len)
 225 {
 226         struct test_driver_bss *dbss = priv;
 227         struct wpa_driver_test_data *drv = dbss->drv;
 228         struct msghdr msg;
 229         struct iovec io[3];
 230         struct l2_ethhdr eth;
 231         char desttxt[30];
 232         struct sockaddr_un addr;
 233         struct dirent *dent;
 234         DIR *dir;
 235         int ret = 0, broadcast = 0, count = 0;
 236
 237         if (drv->test_socket < 0 || drv->test_dir == NULL) {
 238                 wpa_printf(MSG_DEBUG, "%s: invalid parameters (sock=%d "
 239                            "test_dir=%p)",
 240                            __func__, drv->test_socket, drv->test_dir);
 241                 return -1;
 242         }
 243
 244         broadcast = memcmp(dst, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) == 0;
 245         snprintf(desttxt, sizeof(desttxt), MACSTR, MAC2STR(dst));
 246
 247         memcpy(eth.h_dest, dst, ETH_ALEN);
 248         memcpy(eth.h_source, src, ETH_ALEN);
 249         eth.h_proto = host_to_be16(proto);
 250
 251         io[0].iov_base = "ETHER ";
 252         io[0].iov_len = 6;
 253         io[1].iov_base = &eth;
 254         io[1].iov_len = sizeof(eth);
 255         io[2].iov_base = (u8 *) data;
 256         io[2].iov_len = data_len;
 257
 258         memset(&msg, 0, sizeof(msg));
 259         msg.msg_iov = io;
 260         msg.msg_iovlen = 3;
 261
 262         dir = opendir(drv->test_dir);
 263         if (dir == NULL) {
 264                 perror("test_driver: opendir");
 265                 return -1;
 266         }
 267         while ((dent = readdir(dir))) {
 268 #ifdef _DIRENT_HAVE_D_TYPE
 269                 /* Skip the file if it is not a socket. Also accept
 270                  * DT_UNKNOWN (0) in case the C library or underlying file
 271                  * system does not support d_type. */
 272                 if (dent->d_type != DT_SOCK && dent->d_type != DT_UNKNOWN)
 273                         continue;
 274 #endif /* _DIRENT_HAVE_D_TYPE */
 275                 if (strcmp(dent->d_name, ".") == 0 ||
 276                     strcmp(dent->d_name, "..") == 0)
 277                         continue;
 278
 279                 memset(&addr, 0, sizeof(addr));
 280                 addr.sun_family = AF_UNIX;
 281                 snprintf(addr.sun_path, sizeof(addr.sun_path), "%s/%s",
 282                          drv->test_dir, dent->d_name);
 283
 284                 if (strcmp(addr.sun_path, drv->own_socket_path) == 0)
 285                         continue;
 286                 if (!broadcast && strstr(dent->d_name, desttxt) == NULL)
 287                         continue;
 288
 289                 wpa_printf(MSG_DEBUG, "%s: Send ether frame to %s",
 290                            __func__, dent->d_name);
 291
 292                 msg.msg_name = &addr;
 293                 msg.msg_namelen = sizeof(addr);
 294                 ret = sendmsg(drv->test_socket, &msg, 0);
 295                 if (ret < 0)
 296                         perror("driver_test: sendmsg");
 297                 count++;
 298         }
 299         closedir(dir);
 300
 301         if (!broadcast && count == 0) {
 302                 wpa_printf(MSG_DEBUG, "%s: Destination " MACSTR " not found",
 303                            __func__, MAC2STR(dst));
 304                 return -1;
 305         }
 306
 307         return ret;
 308 }
 309
 310
 311 static int wpa_driver_test_send_mlme(void *priv, const u8 *data,
 312                                      size_t data_len)
 313 {
 314         struct test_driver_bss *dbss = priv;
 315         struct wpa_driver_test_data *drv = dbss->drv;
 316         struct msghdr msg;
 317         struct iovec io[2];
 318         const u8 *dest;
 319         struct sockaddr_un addr;
 320         struct dirent *dent;
 321         DIR *dir;
 322         int broadcast;
 323         int ret = 0;
 324         struct ieee80211_hdr *hdr;
 325         u16 fc;
 326         char cmd[50];
 327         int freq;
 328 #ifdef HOSTAPD
 329         char desttxt[30];
 330 #endif /* HOSTAPD */
 331         union wpa_event_data event;
 332
 333         wpa_hexdump(MSG_MSGDUMP, "test_send_mlme", data, data_len);
 334         if (drv->test_socket < 0 || data_len < 10) {
 335                 wpa_printf(MSG_DEBUG, "%s: invalid parameters (sock=%d len=%lu"
 336                            " test_dir=%p)",
 337                            __func__, drv->test_socket,
 338                            (unsigned long) data_len,
 339                            drv->test_dir);
 340                 return -1;
 341         }
 342
 343         dest = data + 4;
 344         broadcast = os_memcmp(dest, "\xff\xff\xff\xff\xff\xff", ETH_ALEN) == 0;
 345
 346 #ifdef HOSTAPD
 347         snprintf(desttxt, sizeof(desttxt), MACSTR, MAC2STR(dest));
 348 #endif /* HOSTAPD */
 349
 350         if (drv->remain_on_channel_freq)
 351                 freq = drv->remain_on_channel_freq;
 352         else
 353                 freq = drv->current_freq;
 354         wpa_printf(MSG_DEBUG, "test_driver(%s): MLME TX on freq %d MHz",
 355                    dbss->ifname, freq);
 356         os_snprintf(cmd, sizeof(cmd), "MLME freq=%d ", freq);
 357         io[0].iov_base = cmd;
 358         io[0].iov_len = os_strlen(cmd);
 359         io[1].iov_base = (void *) data;
 360         io[1].iov_len = data_len;
 361
 362         os_memset(&msg, 0, sizeof(msg));
 363         msg.msg_iov = io;
 364         msg.msg_iovlen = 2;
 365
 366 #ifdef HOSTAPD
 367         if (drv->test_dir == NULL) {
 368                 wpa_printf(MSG_DEBUG, "%s: test_dir == NULL", __func__);
 369                 return -1;
 370         }
 371
 372         dir = opendir(drv->test_dir);
 373         if (dir == NULL) {
 374                 perror("test_driver: opendir");
 375                 return -1;
 376         }
 377         while ((dent = readdir(dir))) {
 378 #ifdef _DIRENT_HAVE_D_TYPE
 379                 /* Skip the file if it is not a socket. Also accept
 380                  * DT_UNKNOWN (0) in case the C library or underlying file
 381                  * system does not support d_type. */
 382                 if (dent->d_type != DT_SOCK && dent->d_type != DT_UNKNOWN)
 383                         continue;
 384 #endif /* _DIRENT_HAVE_D_TYPE */
 385                 if (os_strcmp(dent->d_name, ".") == 0 ||
 386                     os_strcmp(dent->d_name, "..") == 0)
 387                         continue;
 388
 389                 os_memset(&addr, 0, sizeof(addr));
 390                 addr.sun_family = AF_UNIX;
 391                 os_snprintf(addr.sun_path, sizeof(addr.sun_path), "%s/%s",
 392                             drv->test_dir, dent->d_name);
 393
 394                 if (os_strcmp(addr.sun_path, drv->own_socket_path) == 0)
 395                         continue;
 396                 if (!broadcast && os_strstr(dent->d_name, desttxt) == NULL)
 397                         continue;
 398
 399                 wpa_printf(MSG_DEBUG, "%s: Send management frame to %s",
 400                            __func__, dent->d_name);
 401
 402                 msg.msg_name = &addr;
 403                 msg.msg_namelen = sizeof(addr);
 404                 ret = sendmsg(drv->test_socket, &msg, 0);
 405                 if (ret < 0)
 406                         perror("driver_test: sendmsg(test_socket)");
 407         }
 408         closedir(dir);
 409 #else /* HOSTAPD */
 410
 411         if (os_memcmp(dest, dbss->bssid, ETH_ALEN) == 0 ||
 412             drv->test_dir == NULL) {
 413                 if (drv->hostapd_addr_udp_set) {
 414                         msg.msg_name = &drv->hostapd_addr_udp;
 415                         msg.msg_namelen = sizeof(drv->hostapd_addr_udp);
 416                 } else {
 417 #ifdef DRIVER_TEST_UNIX
 418                         msg.msg_name = &drv->hostapd_addr;
 419                         msg.msg_namelen = sizeof(drv->hostapd_addr);
 420 #endif /* DRIVER_TEST_UNIX */
 421                 }
 422         } else if (broadcast) {
 423                 dir = opendir(drv->test_dir);
 424                 if (dir == NULL)
 425                         return -1;
 426                 while ((dent = readdir(dir))) {
 427 #ifdef _DIRENT_HAVE_D_TYPE
 428                         /* Skip the file if it is not a socket.
 429                          * Also accept DT_UNKNOWN (0) in case
 430                          * the C library or underlying file
 431                          * system does not support d_type. */
 432                         if (dent->d_type != DT_SOCK &&
 433                             dent->d_type != DT_UNKNOWN)
 434                                 continue;
 435 #endif /* _DIRENT_HAVE_D_TYPE */
 436                         if (os_strcmp(dent->d_name, ".") == 0 ||
 437                             os_strcmp(dent->d_name, "..") == 0)
 438                                 continue;
 439                         wpa_printf(MSG_DEBUG, "%s: Send broadcast MLME to %s",
 440                                    __func__, dent->d_name);
 441                         os_memset(&addr, 0, sizeof(addr));
 442                         addr.sun_family = AF_UNIX;
 443                         os_snprintf(addr.sun_path, sizeof(addr.sun_path),
 444                                     "%s/%s", drv->test_dir, dent->d_name);
 445
 446                         msg.msg_name = &addr;
 447                         msg.msg_namelen = sizeof(addr);
 448
 449                         ret = sendmsg(drv->test_socket, &msg, 0);
 450                         if (ret < 0)
 451                                 perror("driver_test: sendmsg(test_socket)");
 452                 }
 453                 closedir(dir);
 454                 return ret;
 455         } else {
 456                 struct stat st;
 457                 os_memset(&addr, 0, sizeof(addr));
 458                 addr.sun_family = AF_UNIX;
 459                 os_snprintf(addr.sun_path, sizeof(addr.sun_path),
 460                             "%s/AP-" MACSTR, drv->test_dir, MAC2STR(dest));
 461                 if (stat(addr.sun_path, &st) < 0) {
 462                         os_snprintf(addr.sun_path, sizeof(addr.sun_path),
 463                                     "%s/STA-" MACSTR,
 464                                     drv->test_dir, MAC2STR(dest));
 465                 }
 466                 msg.msg_name = &addr;
 467                 msg.msg_namelen = sizeof(addr);
 468         }
 469
 470         if (sendmsg(drv->test_socket, &msg, 0) < 0) {
 471                 perror("sendmsg(test_socket)");
 472                 return -1;
 473         }
 474 #endif /* HOSTAPD */
 475
 476         hdr = (struct ieee80211_hdr *) data;
 477         fc = le_to_host16(hdr->frame_control);
 478
 479         os_memset(&event, 0, sizeof(event));
 480         event.tx_status.type = WLAN_FC_GET_TYPE(fc);
 481         event.tx_status.stype = WLAN_FC_GET_STYPE(fc);
 482         event.tx_status.dst = hdr->addr1;
 483         event.tx_status.data = data;
 484         event.tx_status.data_len = data_len;
 485         event.tx_status.ack = ret >= 0;
 486         wpa_supplicant_event(drv->ctx, EVENT_TX_STATUS, &event);
 487
 488 #ifdef CONFIG_P2P
 489         if (drv->p2p &&
 490             WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
 491             WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_ACTION) {
 492                 if (drv->pending_action_tx == NULL) {
 493                         wpa_printf(MSG_DEBUG, "P2P: Ignore Action TX status - "
 494                                    "no pending operation");
 495                         return ret;
 496                 }
 497
 498                 if (os_memcmp(hdr->addr1, drv->pending_action_dst, ETH_ALEN) !=
 499                     0) {
 500                         wpa_printf(MSG_DEBUG, "P2P: Ignore Action TX status - "
 501                                    "unknown destination address");
 502                         return ret;
 503                 }
 504
 505                 wpabuf_free(drv->pending_action_tx);
 506                 drv->pending_action_tx = NULL;
 507
 508                 p2p_send_action_cb(drv->p2p, drv->pending_action_freq,
 509                                    drv->pending_action_dst,
 510                                    drv->pending_action_src,
 511                                    drv->pending_action_bssid,
 512                                    ret >= 0);
 513         }
 514 #endif /* CONFIG_P2P */
 515
 516         return ret;
 517 }
 518
 519
 520 static void test_driver_scan(struct wpa_driver_test_data *drv,
 521                              struct sockaddr_un *from, socklen_t fromlen,
 522                              char *data)
 523 {
 524         char buf[512], *pos, *end;
 525         int ret;
 526         struct test_driver_bss *bss;
 527         u8 sa[ETH_ALEN];
 528         u8 ie[512];
 529         size_t ielen;
 530         union wpa_event_data event;
 531
 532         /* data: optional [ ' ' | STA-addr | ' ' | IEs(hex) ] */
 533
 534         wpa_printf(MSG_DEBUG, "test_driver: SCAN");
 535
 536         if (*data) {
 537                 if (*data != ' ' ||
 538                     hwaddr_aton(data + 1, sa)) {
 539                         wpa_printf(MSG_DEBUG, "test_driver: Unexpected SCAN "
 540                                    "command format");
 541                         return;
 542                 }
 543
 544                 data += 18;
 545                 while (*data == ' ')
 546                         data++;
 547                 ielen = os_strlen(data) / 2;
 548                 if (ielen > sizeof(ie))
 549                         ielen = sizeof(ie);
 550                 if (hexstr2bin(data, ie, ielen) < 0)
 551                         ielen = 0;
 552
 553                 wpa_printf(MSG_DEBUG, "test_driver: Scan from " MACSTR,
 554                            MAC2STR(sa));
 555                 wpa_hexdump(MSG_MSGDUMP, "test_driver: scan IEs", ie, ielen);
 556
 557                 os_memset(&event, 0, sizeof(event));
 558                 event.rx_probe_req.sa = sa;
 559                 event.rx_probe_req.ie = ie;
 560                 event.rx_probe_req.ie_len = ielen;
 561                 wpa_supplicant_event(drv->ctx, EVENT_RX_PROBE_REQ, &event);
 562 #ifdef CONFIG_P2P
 563                 if (drv->p2p)
 564                         p2p_probe_req_rx(drv->p2p, sa, ie, ielen);
 565 #endif /* CONFIG_P2P */
 566         }
 567
 568         dl_list_for_each(bss, &drv->bss, struct test_driver_bss, list) {
 569                 pos = buf;
 570                 end = buf + sizeof(buf);
 571
 572                 /* reply: SCANRESP BSSID SSID IEs */
 573                 ret = snprintf(pos, end - pos, "SCANRESP " MACSTR " ",
 574                                MAC2STR(bss->bssid));
 575                 if (ret < 0 || ret >= end - pos)
 576                         return;
 577                 pos += ret;
 578                 pos += wpa_snprintf_hex(pos, end - pos,
 579                                         bss->ssid, bss->ssid_len);
 580                 ret = snprintf(pos, end - pos, " ");
 581                 if (ret < 0 || ret >= end - pos)
 582                         return;
 583                 pos += ret;
 584                 pos += wpa_snprintf_hex(pos, end - pos, bss->ie, bss->ielen);
 585                 pos += wpa_snprintf_hex(pos, end - pos, bss->wps_probe_resp_ie,
 586                                         bss->wps_probe_resp_ie_len);
 587
 588                 if (bss->privacy) {
 589                         ret = snprintf(pos, end - pos, " PRIVACY");
 590                         if (ret < 0 || ret >= end - pos)
 591                                 return;
 592                         pos += ret;
 593                 }
 594
 595                 sendto(drv->test_socket, buf, pos - buf, 0,
 596                        (struct sockaddr *) from, fromlen);
 597         }
 598 }
 599
 600
 601 static void test_driver_assoc(struct wpa_driver_test_data *drv,
 602                               struct sockaddr_un *from, socklen_t fromlen,
 603                               char *data)
 604 {
 605         struct test_client_socket *cli;
 606         u8 ie[256], ssid[32];
 607         size_t ielen, ssid_len = 0;
 608         char *pos, *pos2, cmd[50];
 609         struct test_driver_bss *bss, *tmp;
 610
 611         /* data: STA-addr SSID(hex) IEs(hex) */
 612
 613         cli = os_zalloc(sizeof(*cli));
 614         if (cli == NULL)
 615                 return;
 616
 617         if (hwaddr_aton(data, cli->addr)) {
 618                 printf("test_socket: Invalid MAC address '%s' in ASSOC\n",
 619                        data);
 620                 os_free(cli);
 621                 return;
 622         }
 623         pos = data + 17;
 624         while (*pos == ' ')
 625                 pos++;
 626         pos2 = strchr(pos, ' ');
 627         ielen = 0;
 628         if (pos2) {
 629                 ssid_len = (pos2 - pos) / 2;
 630                 if (hexstr2bin(pos, ssid, ssid_len) < 0) {
 631                         wpa_printf(MSG_DEBUG, "%s: Invalid SSID", __func__);
 632                         os_free(cli);
 633                         return;
 634                 }
 635                 wpa_hexdump_ascii(MSG_DEBUG, "test_driver_assoc: SSID",
 636                                   ssid, ssid_len);
 637
 638                 pos = pos2 + 1;
 639                 ielen = strlen(pos) / 2;
 640                 if (ielen > sizeof(ie))
 641                         ielen = sizeof(ie);
 642                 if (hexstr2bin(pos, ie, ielen) < 0)
 643                         ielen = 0;
 644         }
 645
 646         bss = NULL;
 647         dl_list_for_each(tmp, &drv->bss, struct test_driver_bss, list) {
 648                 if (tmp->ssid_len == ssid_len &&
 649                     os_memcmp(tmp->ssid, ssid, ssid_len) == 0) {
 650                         bss = tmp;
 651                         break;
 652                 }
 653         }
 654         if (bss == NULL) {
 655                 wpa_printf(MSG_DEBUG, "%s: No matching SSID found from "
 656                            "configured BSSes", __func__);
 657                 os_free(cli);
 658                 return;
 659         }
 660
 661         cli->bss = bss;
 662         memcpy(&cli->un, from, sizeof(cli->un));
 663         cli->unlen = fromlen;
 664         cli->next = drv->cli;
 665         drv->cli = cli;
 666         wpa_hexdump_ascii(MSG_DEBUG, "test_socket: ASSOC sun_path",
 667                           (const u8 *) cli->un.sun_path,
 668                           cli->unlen - sizeof(cli->un.sun_family));
 669
 670         snprintf(cmd, sizeof(cmd), "ASSOCRESP " MACSTR " 0",
 671                  MAC2STR(bss->bssid));
 672         sendto(drv->test_socket, cmd, strlen(cmd), 0,
 673                (struct sockaddr *) from, fromlen);
 674
 675         drv_event_assoc(bss->bss_ctx, cli->addr, ie, ielen, 0);
 676 }
 677
 678
 679 static void test_driver_disassoc(struct wpa_driver_test_data *drv,
 680                                  struct sockaddr_un *from, socklen_t fromlen)
 681 {
 682         struct test_client_socket *cli;
 683
 684         cli = test_driver_get_cli(drv, from, fromlen);
 685         if (!cli)
 686                 return;
 687
 688         drv_event_disassoc(drv->ctx, cli->addr);
 689 }
 690
 691
 692 static void test_driver_eapol(struct wpa_driver_test_data *drv,
 693                               struct sockaddr_un *from, socklen_t fromlen,
 694                               u8 *data, size_t datalen)
 695 {
 696 #ifdef HOSTAPD
 697         struct test_client_socket *cli;
 698 #endif /* HOSTAPD */
 699         const u8 *src = NULL;
 700
 701         if (datalen > 14) {
 702                 /* Skip Ethernet header */
 703                 src = data + ETH_ALEN;
 704                 wpa_printf(MSG_DEBUG, "test_driver: dst=" MACSTR " src="
 705                            MACSTR " proto=%04x",
 706                            MAC2STR(data), MAC2STR(src),
 707                            WPA_GET_BE16(data + 2 * ETH_ALEN));
 708                 data += 14;
 709                 datalen -= 14;
 710         }
 711
 712 #ifdef HOSTAPD
 713         cli = test_driver_get_cli(drv, from, fromlen);
 714         if (cli) {
 715                 drv_event_eapol_rx(cli->bss->bss_ctx, cli->addr, data,
 716                                    datalen);
 717         } else {
 718                 wpa_printf(MSG_DEBUG, "test_socket: EAPOL from unknown "
 719                            "client");
 720         }
 721 #else /* HOSTAPD */
 722         if (src)
 723                 drv_event_eapol_rx(drv->ctx, src, data, datalen);
 724 #endif /* HOSTAPD */
 725 }
 726
 727
 728 static void test_driver_ether(struct wpa_driver_test_data *drv,
 729                               struct sockaddr_un *from, socklen_t fromlen,
 730                               u8 *data, size_t datalen)
 731 {
 732         struct l2_ethhdr *eth;
 733
 734         if (datalen < sizeof(*eth))
 735                 return;
 736
 737         eth = (struct l2_ethhdr *) data;
 738         wpa_printf(MSG_DEBUG, "test_driver: RX ETHER dst=" MACSTR " src="
 739                    MACSTR " proto=%04x",
 740                    MAC2STR(eth->h_dest), MAC2STR(eth->h_source),
 741                    be_to_host16(eth->h_proto));
 742
 743 #ifdef CONFIG_IEEE80211R
 744         if (be_to_host16(eth->h_proto) == ETH_P_RRB) {
 745                 union wpa_event_data ev;
 746                 os_memset(&ev, 0, sizeof(ev));
 747                 ev.ft_rrb_rx.src = eth->h_source;
 748                 ev.ft_rrb_rx.data = data + sizeof(*eth);
 749                 ev.ft_rrb_rx.data_len = datalen - sizeof(*eth);
 750         }
 751 #endif /* CONFIG_IEEE80211R */
 752 }
 753
 754
 755 static void test_driver_mlme(struct wpa_driver_test_data *drv,
 756                              struct sockaddr_un *from, socklen_t fromlen,
 757                              u8 *data, size_t datalen)
 758 {
 759         struct ieee80211_hdr *hdr;
 760         u16 fc;
 761         union wpa_event_data event;
 762         int freq = 0, own_freq;
 763         struct test_driver_bss *bss;
 764
 765         bss = dl_list_first(&drv->bss, struct test_driver_bss, list);
 766
 767         if (datalen > 6 && os_memcmp(data, "freq=", 5) == 0) {
 768                 size_t pos;
 769                 for (pos = 5; pos < datalen; pos++) {
 770                         if (data[pos] == ' ')
 771                                 break;
 772                 }
 773                 if (pos < datalen) {
 774                         freq = atoi((const char *) &data[5]);
 775                         wpa_printf(MSG_DEBUG, "test_driver(%s): MLME RX on "
 776                                    "freq %d MHz", bss->ifname, freq);
 777                         pos++;
 778                         data += pos;
 779                         datalen -= pos;
 780                 }
 781         }
 782
 783         if (drv->remain_on_channel_freq)
 784                 own_freq = drv->remain_on_channel_freq;
 785         else
 786                 own_freq = drv->current_freq;
 787
 788         if (freq && own_freq && freq != own_freq) {
 789                 wpa_printf(MSG_DEBUG, "test_driver(%s): Ignore MLME RX on "
 790                            "another frequency %d MHz (own %d MHz)",
 791                            bss->ifname, freq, own_freq);
 792                 return;
 793         }
 794
 795         hdr = (struct ieee80211_hdr *) data;
 796
 797         if (test_driver_get_cli(drv, from, fromlen) == NULL && datalen >= 16) {
 798                 struct test_client_socket *cli;
 799                 cli = os_zalloc(sizeof(*cli));
 800                 if (cli == NULL)
 801                         return;
 802                 wpa_printf(MSG_DEBUG, "Adding client entry for " MACSTR,
 803                            MAC2STR(hdr->addr2));
 804                 memcpy(cli->addr, hdr->addr2, ETH_ALEN);
 805                 memcpy(&cli->un, from, sizeof(cli->un));
 806                 cli->unlen = fromlen;
 807                 cli->next = drv->cli;
 808                 drv->cli = cli;
 809         }
 810
 811         wpa_hexdump(MSG_MSGDUMP, "test_driver_mlme: received frame",
 812                     data, datalen);
 813         fc = le_to_host16(hdr->frame_control);
 814         if (WLAN_FC_GET_TYPE(fc) != WLAN_FC_TYPE_MGMT) {
 815                 wpa_printf(MSG_ERROR, "%s: received non-mgmt frame",
 816                            __func__);
 817                 return;
 818         }
 819
 820         os_memset(&event, 0, sizeof(event));
 821         event.rx_mgmt.frame = data;
 822         event.rx_mgmt.frame_len = datalen;
 823         wpa_supplicant_event(drv->ctx, EVENT_RX_MGMT, &event);
 824 }
 825
 826
 827 static void test_driver_receive_unix(int sock, void *eloop_ctx, void *sock_ctx)
 828 {
 829         struct wpa_driver_test_data *drv = eloop_ctx;
 830         char buf[2000];
 831         int res;
 832         struct sockaddr_un from;
 833         socklen_t fromlen = sizeof(from);
 834
 835         res = recvfrom(sock, buf, sizeof(buf) - 1, 0,
 836                        (struct sockaddr *) &from, &fromlen);
 837         if (res < 0) {
 838                 perror("recvfrom(test_socket)");
 839                 return;
 840         }
 841         buf[res] = '\0';
 842
 843         wpa_printf(MSG_DEBUG, "test_driver: received %u bytes", res);
 844
 845         if (strncmp(buf, "SCAN", 4) == 0) {
 846                 test_driver_scan(drv, &from, fromlen, buf + 4);
 847         } else if (strncmp(buf, "ASSOC ", 6) == 0) {
 848                 test_driver_assoc(drv, &from, fromlen, buf + 6);
 849         } else if (strcmp(buf, "DISASSOC") == 0) {
 850                 test_driver_disassoc(drv, &from, fromlen);
 851         } else if (strncmp(buf, "EAPOL ", 6) == 0) {
 852                 test_driver_eapol(drv, &from, fromlen, (u8 *) buf + 6,
 853                                   res - 6);
 854         } else if (strncmp(buf, "ETHER ", 6) == 0) {
 855                 test_driver_ether(drv, &from, fromlen, (u8 *) buf + 6,
 856                                   res - 6);
 857         } else if (strncmp(buf, "MLME ", 5) == 0) {
 858                 test_driver_mlme(drv, &from, fromlen, (u8 *) buf + 5, res - 5);
 859         } else {
 860                 wpa_hexdump_ascii(MSG_DEBUG, "Unknown test_socket command",
 861                                   (u8 *) buf, res);
 862         }
 863 }
 864
 865
 866 static int test_driver_set_generic_elem(void *priv,
 867                                         const u8 *elem, size_t elem_len)
 868 {
 869         struct test_driver_bss *bss = priv;
 870
 871         os_free(bss->ie);
 872
 873         if (elem == NULL) {
 874                 bss->ie = NULL;
 875                 bss->ielen = 0;
 876                 return 0;
 877         }
 878
 879         bss->ie = os_malloc(elem_len);
 880         if (bss->ie == NULL) {
 881                 bss->ielen = 0;
 882                 return -1;
 883         }
 884
 885         memcpy(bss->ie, elem, elem_len);
 886         bss->ielen = elem_len;
 887         return 0;
 888 }
 889
 890
 891 static int test_driver_set_ap_wps_ie(void *priv, const struct wpabuf *beacon,
 892                                      const struct wpabuf *proberesp,
 893                                      const struct wpabuf *assocresp)
 894 {
 895         struct test_driver_bss *bss = priv;
 896
 897         if (beacon == NULL)
 898                 wpa_printf(MSG_DEBUG, "test_driver: Clear Beacon WPS IE");
 899         else
 900                 wpa_hexdump_buf(MSG_DEBUG, "test_driver: Beacon WPS IE",
 901                                 beacon);
 902
 903         os_free(bss->wps_beacon_ie);
 904
 905         if (beacon == NULL) {
 906                 bss->wps_beacon_ie = NULL;
 907                 bss->wps_beacon_ie_len = 0;
 908         } else {
 909                 bss->wps_beacon_ie = os_malloc(wpabuf_len(beacon));
 910                 if (bss->wps_beacon_ie == NULL) {
 911                         bss->wps_beacon_ie_len = 0;
 912                         return -1;
 913                 }
 914
 915                 os_memcpy(bss->wps_beacon_ie, wpabuf_head(beacon),
 916                           wpabuf_len(beacon));
 917                 bss->wps_beacon_ie_len = wpabuf_len(beacon);
 918         }
 919
 920         if (proberesp == NULL)
 921                 wpa_printf(MSG_DEBUG, "test_driver: Clear Probe Response WPS "
 922                            "IE");
 923         else
 924                 wpa_hexdump_buf(MSG_DEBUG, "test_driver: Probe Response WPS "
 925                                 "IE", proberesp);
 926
 927         os_free(bss->wps_probe_resp_ie);
 928
 929         if (proberesp == NULL) {
 930                 bss->wps_probe_resp_ie = NULL;
 931                 bss->wps_probe_resp_ie_len = 0;
 932         } else {
 933                 bss->wps_probe_resp_ie = os_malloc(wpabuf_len(proberesp));
 934                 if (bss->wps_probe_resp_ie == NULL) {
 935                         bss->wps_probe_resp_ie_len = 0;
 936                         return -1;
 937                 }
 938
 939                 os_memcpy(bss->wps_probe_resp_ie, wpabuf_head(proberesp),
 940                           wpabuf_len(proberesp));
 941                 bss->wps_probe_resp_ie_len = wpabuf_len(proberesp);
 942         }
 943
 944         return 0;
 945 }
 946
 947
 948 static int test_driver_sta_deauth(void *priv, const u8 *own_addr,
 949                                   const u8 *addr, int reason)
 950 {
 951         struct test_driver_bss *dbss = priv;
 952         struct wpa_driver_test_data *drv = dbss->drv;
 953         struct test_client_socket *cli;
 954
 955         if (drv->test_socket < 0)
 956                 return -1;
 957
 958         cli = drv->cli;
 959         while (cli) {
 960                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
 961                         break;
 962                 cli = cli->next;
 963         }
 964
 965         if (!cli)
 966                 return -1;
 967
 968         return sendto(drv->test_socket, "DEAUTH", 6, 0,
 969                       (struct sockaddr *) &cli->un, cli->unlen);
 970 }
 971
 972
 973 static int test_driver_sta_disassoc(void *priv, const u8 *own_addr,
 974                                     const u8 *addr, int reason)
 975 {
 976         struct test_driver_bss *dbss = priv;
 977         struct wpa_driver_test_data *drv = dbss->drv;
 978         struct test_client_socket *cli;
 979
 980         if (drv->test_socket < 0)
 981                 return -1;
 982
 983         cli = drv->cli;
 984         while (cli) {
 985                 if (memcmp(cli->addr, addr, ETH_ALEN) == 0)
 986                         break;
 987                 cli = cli->next;
 988         }
 989
 990         if (!cli)
 991                 return -1;
 992
 993         return sendto(drv->test_socket, "DISASSOC", 8, 0,
 994                       (struct sockaddr *) &cli->un, cli->unlen);
 995 }
 996
 997
 998 static int test_driver_bss_add(void *priv, const char *ifname, const u8 *bssid,
 999                                void *bss_ctx, void **drv_priv)
1000 {
1001         struct test_driver_bss *dbss = priv;
1002         struct wpa_driver_test_data *drv = dbss->drv;
1003         struct test_driver_bss *bss;
1004
1005         wpa_printf(MSG_DEBUG, "%s(ifname=%s bssid=" MACSTR ")",
1006                    __func__, ifname, MAC2STR(bssid));
1007
1008         bss = os_zalloc(sizeof(*bss));
1009         if (bss == NULL)
1010                 return -1;
1011
1012         bss->bss_ctx = bss_ctx;
1013         bss->drv = drv;
1014         os_strlcpy(bss->ifname, ifname, IFNAMSIZ);
1015         os_memcpy(bss->bssid, bssid, ETH_ALEN);
1016
1017         dl_list_add(&drv->bss, &bss->list);
1018         if (drv->global) {
1019                 drv->global->bss_add_used = 1;
1020                 os_memcpy(drv->global->req_addr, bssid, ETH_ALEN);
1021         }
1022
1023         if (drv_priv)
1024                 *drv_priv = bss;
1025
1026         return 0;
1027 }
1028
1029
1030 static int test_driver_bss_remove(void *priv, const char *ifname)
1031 {
1032         struct test_driver_bss *dbss = priv;
1033         struct wpa_driver_test_data *drv = dbss->drv;
1034         struct test_driver_bss *bss;
1035         struct test_client_socket *cli, *prev_c;
1036
1037         wpa_printf(MSG_DEBUG, "%s(ifname=%s)", __func__, ifname);
1038
1039         dl_list_for_each(bss, &drv->bss, struct test_driver_bss, list) {
1040                 if (strcmp(bss->ifname, ifname) != 0)
1041                         continue;
1042
1043                 for (prev_c = NULL, cli = drv->cli; cli;
1044                      prev_c = cli, cli = cli->next) {
1045                         if (cli->bss != bss)
1046                                 continue;
1047                         if (prev_c)
1048                                 prev_c->next = cli->next;
1049                         else
1050                                 drv->cli = cli->next;
1051                         os_free(cli);
1052                         break;
1053                 }
1054
1055                 dl_list_del(&bss->list);
1056                 test_driver_free_bss(bss);
1057                 return 0;
1058         }
1059
1060         return -1;
1061 }
1062
1063
1064 static int test_driver_if_add(void *priv, enum wpa_driver_if_type type,
1065                               const char *ifname, const u8 *addr,
1066                               void *bss_ctx, void **drv_priv,
1067                               char *force_ifname, u8 *if_addr,
1068                               const char *bridge)
1069 {
1070         struct test_driver_bss *dbss = priv;
1071         struct wpa_driver_test_data *drv = dbss->drv;
1072
1073         wpa_printf(MSG_DEBUG, "%s(type=%d ifname=%s bss_ctx=%p)",
1074                    __func__, type, ifname, bss_ctx);
1075         if (addr)
1076                 os_memcpy(if_addr, addr, ETH_ALEN);
1077         else {
1078                 drv->alloc_iface_idx++;
1079                 if_addr[0] = 0x02; /* locally administered */
1080                 sha1_prf(drv->own_addr, ETH_ALEN,
1081                          "hostapd test addr generation",
1082                          (const u8 *) &drv->alloc_iface_idx,
1083                          sizeof(drv->alloc_iface_idx),
1084                          if_addr + 1, ETH_ALEN - 1);
1085         }
1086         if (type == WPA_IF_AP_BSS || type == WPA_IF_P2P_GO ||
1087             type == WPA_IF_P2P_CLIENT || type == WPA_IF_P2P_GROUP)
1088                 return test_driver_bss_add(priv, ifname, if_addr, bss_ctx,
1089                                            drv_priv);
1090         return 0;
1091 }
1092
1093
1094 static int test_driver_if_remove(void *priv, enum wpa_driver_if_type type,
1095                                  const char *ifname)
1096 {
1097         wpa_printf(MSG_DEBUG, "%s(type=%d ifname=%s)", __func__, type, ifname);
1098         if (type == WPA_IF_AP_BSS || type == WPA_IF_P2P_GO ||
1099             type == WPA_IF_P2P_CLIENT || type == WPA_IF_P2P_GROUP)
1100                 return test_driver_bss_remove(priv, ifname);
1101         return 0;
1102 }
1103
1104
1105 static int test_driver_valid_bss_mask(void *priv, const u8 *addr,
1106                                       const u8 *mask)
1107 {
1108         return 0;
1109 }
1110
1111
1112 static int test_driver_set_ssid(void *priv, const u8 *buf, int len)
1113 {
1114         struct test_driver_bss *bss = priv;
1115
1116         wpa_printf(MSG_DEBUG, "%s(ifname=%s)", __func__, bss->ifname);
1117         wpa_hexdump_ascii(MSG_DEBUG, "test_driver_set_ssid: SSID", buf, len);
1118
1119         if (len < 0 || (size_t) len > sizeof(bss->ssid))
1120                 return -1;
1121
1122         os_memcpy(bss->ssid, buf, len);
1123         bss->ssid_len = len;
1124
1125         return 0;
1126 }
1127
1128
1129 static int test_driver_set_privacy(void *priv, int enabled)
1130 {
1131         struct test_driver_bss *dbss = priv;
1132
1133         wpa_printf(MSG_DEBUG, "%s(enabled=%d)",  __func__, enabled);
1134         dbss->privacy = enabled;
1135
1136         return 0;
1137 }
1138
1139
1140 static int test_driver_set_sta_vlan(void *priv, const u8 *addr,
1141                                     const char *ifname, int vlan_id)
1142 {
1143         wpa_printf(MSG_DEBUG, "%s(addr=" MACSTR " ifname=%s vlan_id=%d)",
1144                    __func__, MAC2STR(addr), ifname, vlan_id);
1145         return 0;
1146 }
1147
1148
1149 static int test_driver_sta_add(void *priv,
1150                                struct hostapd_sta_add_params *params)
1151 {
1152         struct test_driver_bss *bss = priv;
1153         struct wpa_driver_test_data *drv = bss->drv;
1154         struct test_client_socket *cli;
1155
1156         wpa_printf(MSG_DEBUG, "%s(ifname=%s addr=" MACSTR " aid=%d "
1157                    "capability=0x%x listen_interval=%d)",
1158                    __func__, bss->ifname, MAC2STR(params->addr), params->aid,
1159                    params->capability, params->listen_interval);
1160         wpa_hexdump(MSG_DEBUG, "test_driver_sta_add - supp_rates",
1161                     params->supp_rates, params->supp_rates_len);
1162
1163         cli = drv->cli;
1164         while (cli) {
1165                 if (os_memcmp(cli->addr, params->addr, ETH_ALEN) == 0)
1166                         break;
1167                 cli = cli->next;
1168         }
1169         if (!cli) {
1170                 wpa_printf(MSG_DEBUG, "%s: no matching client entry",
1171                            __func__);
1172                 return -1;
1173         }
1174
1175         cli->bss = bss;
1176
1177         return 0;
1178 }
1179
1180
1181 static struct wpa_driver_test_data * test_alloc_data(void *ctx,
1182                                                      const char *ifname)
1183 {
1184         struct wpa_driver_test_data *drv;
1185         struct test_driver_bss *bss;
1186
1187         drv = os_zalloc(sizeof(struct wpa_driver_test_data));
1188         if (drv == NULL) {
1189                 wpa_printf(MSG_ERROR, "Could not allocate memory for test "
1190                            "driver data");
1191                 return NULL;
1192         }
1193
1194         bss = os_zalloc(sizeof(struct test_driver_bss));
1195         if (bss == NULL) {
1196                 os_free(drv);
1197                 return NULL;
1198         }
1199
1200         drv->ctx = ctx;
1201         wpa_trace_add_ref(drv, ctx, ctx);
1202         dl_list_init(&drv->bss);
1203         dl_list_add(&drv->bss, &bss->list);
1204         os_strlcpy(bss->ifname, ifname, IFNAMSIZ);
1205         bss->bss_ctx = ctx;
1206         bss->drv = drv;
1207
1208         /* Generate a MAC address to help testing with multiple STAs */
1209         drv->own_addr[0] = 0x02; /* locally administered */
1210         sha1_prf((const u8 *) ifname, os_strlen(ifname),
1211                  "test mac addr generation",
1212                  NULL, 0, drv->own_addr + 1, ETH_ALEN - 1);
1213
1214         return drv;
1215 }
1216
1217
1218 static void * test_driver_init(struct hostapd_data *hapd,
1219                                struct wpa_init_params *params)
1220 {
1221         struct wpa_driver_test_data *drv;
1222         struct sockaddr_un addr_un;
1223         struct sockaddr_in addr_in;
1224         struct sockaddr *addr;
1225         socklen_t alen;
1226         struct test_driver_bss *bss;
1227
1228         drv = test_alloc_data(hapd, params->ifname);
1229         if (drv == NULL)
1230                 return NULL;
1231         drv->ap = 1;
1232         bss = dl_list_first(&drv->bss, struct test_driver_bss, list);
1233
1234         bss->bss_ctx = hapd;
1235         os_memcpy(bss->bssid, drv->own_addr, ETH_ALEN);
1236         os_memcpy(params->own_addr, drv->own_addr, ETH_ALEN);
1237
1238         if (params->test_socket) {
1239                 if (os_strlen(params->test_socket) >=
1240                     sizeof(addr_un.sun_path)) {
1241                         printf("Too long test_socket path\n");
1242                         wpa_driver_test_deinit(bss);
1243                         return NULL;
1244                 }
1245                 if (strncmp(params->test_socket, "DIR:", 4) == 0) {
1246                         size_t len = strlen(params->test_socket) + 30;
1247                         drv->test_dir = os_strdup(params->test_socket + 4);
1248                         drv->own_socket_path = os_malloc(len);
1249                         if (drv->own_socket_path) {
1250                                 snprintf(drv->own_socket_path, len,
1251                                          "%s/AP-" MACSTR,
1252                                          params->test_socket + 4,
1253                                          MAC2STR(params->own_addr));
1254                         }
1255                 } else if (strncmp(params->test_socket, "UDP:", 4) == 0) {
1256                         drv->udp_port = atoi(params->test_socket + 4);
1257                 } else {
1258                         drv->own_socket_path = os_strdup(params->test_socket);
1259                 }
1260                 if (drv->own_socket_path == NULL && drv->udp_port == 0) {
1261                         wpa_driver_test_deinit(bss);
1262                         return NULL;
1263                 }
1264
1265                 drv->test_socket = socket(drv->udp_port ? PF_INET : PF_UNIX,
1266                                           SOCK_DGRAM, 0);
1267                 if (drv->test_socket < 0) {
1268                         perror("socket");
1269                         wpa_driver_test_deinit(bss);
1270                         return NULL;
1271                 }
1272
1273                 if (drv->udp_port) {
1274                         os_memset(&addr_in, 0, sizeof(addr_in));
1275                         addr_in.sin_family = AF_INET;
1276                         addr_in.sin_port = htons(drv->udp_port);
1277                         addr = (struct sockaddr *) &addr_in;
1278                         alen = sizeof(addr_in);
1279                 } else {
1280                         os_memset(&addr_un, 0, sizeof(addr_un));
1281                         addr_un.sun_family = AF_UNIX;
1282                         os_strlcpy(addr_un.sun_path, drv->own_socket_path,
1283                                    sizeof(addr_un.sun_path));
1284                         addr = (struct sockaddr *) &addr_un;
1285                         alen = sizeof(addr_un);
1286                 }
1287                 if (bind(drv->test_socket, addr, alen) < 0) {
1288                         perror("bind(PF_UNIX)");
1289                         close(drv->test_socket);
1290                         if (drv->own_socket_path)
1291                                 unlink(drv->own_socket_path);
1292                         wpa_driver_test_deinit(bss);
1293                         return NULL;
1294                 }
1295                 eloop_register_read_sock(drv->test_socket,
1296                                          test_driver_receive_unix, drv, NULL);
1297         } else
1298                 drv->test_socket = -1;
1299
1300         return bss;
1301 }
1302
1303
1304 static void wpa_driver_test_poll(void *eloop_ctx, void *timeout_ctx)
1305 {
1306         struct wpa_driver_test_data *drv = eloop_ctx;
1307
1308 #ifdef DRIVER_TEST_UNIX
1309         if (drv->associated && drv->hostapd_addr_set) {
1310                 struct stat st;
1311                 if (stat(drv->hostapd_addr.sun_path, &st) < 0) {
1312                         wpa_printf(MSG_DEBUG, "%s: lost connection to AP: %s",
1313                                    __func__, strerror(errno));
1314                         drv->associated = 0;
1315                         wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1316                 }
1317         }
1318 #endif /* DRIVER_TEST_UNIX */
1319
1320         eloop_register_timeout(1, 0, wpa_driver_test_poll, drv, NULL);
1321 }
1322
1323
1324 static void wpa_driver_test_scan_timeout(void *eloop_ctx, void *timeout_ctx)
1325 {
1326         struct wpa_driver_test_data *drv = eloop_ctx;
1327         wpa_printf(MSG_DEBUG, "Scan timeout - try to get results");
1328         if (drv->pending_p2p_scan && drv->p2p) {
1329 #ifdef CONFIG_P2P
1330                 size_t i;
1331                 for (i = 0; i < drv->num_scanres; i++) {
1332                         struct wpa_scan_res *bss = drv->scanres[i];
1333                         if (p2p_scan_res_handler(drv->p2p, bss->bssid,
1334                                                  bss->freq, bss->level,
1335                                                  (const u8 *) (bss + 1),
1336                                                  bss->ie_len) > 0)
1337                                 return;
1338                 }
1339                 p2p_scan_res_handled(drv->p2p);
1340 #endif /* CONFIG_P2P */
1341                 return;
1342         }
1343         wpa_supplicant_event(timeout_ctx, EVENT_SCAN_RESULTS, NULL);
1344 }
1345
1346
1347 #ifdef DRIVER_TEST_UNIX
1348 static void wpa_driver_scan_dir(struct wpa_driver_test_data *drv,
1349                                 const char *path)
1350 {
1351         struct dirent *dent;
1352         DIR *dir;
1353         struct sockaddr_un addr;
1354         char cmd[512], *pos, *end;
1355         int ret;
1356
1357         dir = opendir(path);
1358         if (dir == NULL)
1359                 return;
1360
1361         end = cmd + sizeof(cmd);
1362         pos = cmd;
1363         ret = os_snprintf(pos, end - pos, "SCAN " MACSTR,
1364                           MAC2STR(drv->own_addr));
1365         if (ret >= 0 && ret < end - pos)
1366                 pos += ret;
1367         if (drv->probe_req_ie) {
1368                 ret = os_snprintf(pos, end - pos, " ");
1369                 if (ret >= 0 && ret < end - pos)
1370                         pos += ret;
1371                 pos += wpa_snprintf_hex(pos, end - pos, drv->probe_req_ie,
1372                                         drv->probe_req_ie_len);
1373         }
1374         if (drv->probe_req_ssid_len) {
1375                 /* Add SSID IE */
1376                 ret = os_snprintf(pos, end - pos, "%02x%02x",
1377                                   WLAN_EID_SSID,
1378                                   (unsigned int) drv->probe_req_ssid_len);
1379                 if (ret >= 0 && ret < end - pos)
1380                         pos += ret;
1381                 pos += wpa_snprintf_hex(pos, end - pos, drv->probe_req_ssid,
1382                                         drv->probe_req_ssid_len);
1383         }
1384         end[-1] = '\0';
1385
1386         while ((dent = readdir(dir))) {
1387                 if (os_strncmp(dent->d_name, "AP-", 3) != 0 &&
1388                     os_strncmp(dent->d_name, "STA-", 4) != 0)
1389                         continue;
1390                 if (drv->own_socket_path) {
1391                         size_t olen, dlen;
1392                         olen = os_strlen(drv->own_socket_path);
1393                         dlen = os_strlen(dent->d_name);
1394                         if (olen >= dlen &&
1395                             os_strcmp(dent->d_name,
1396                                       drv->own_socket_path + olen - dlen) == 0)
1397                                 continue;
1398                 }
1399                 wpa_printf(MSG_DEBUG, "%s: SCAN %s", __func__, dent->d_name);
1400
1401                 os_memset(&addr, 0, sizeof(addr));
1402                 addr.sun_family = AF_UNIX;
1403                 os_snprintf(addr.sun_path, sizeof(addr.sun_path), "%s/%s",
1404                             path, dent->d_name);
1405
1406                 if (sendto(drv->test_socket, cmd, os_strlen(cmd), 0,
1407                            (struct sockaddr *) &addr, sizeof(addr)) < 0) {
1408                         perror("sendto(test_socket)");
1409                 }
1410         }
1411         closedir(dir);
1412 }
1413 #endif /* DRIVER_TEST_UNIX */
1414
1415
1416 static int wpa_driver_test_scan(void *priv,
1417                                 struct wpa_driver_scan_params *params)
1418 {
1419         struct test_driver_bss *dbss = priv;
1420         struct wpa_driver_test_data *drv = dbss->drv;
1421         size_t i;
1422
1423         wpa_printf(MSG_DEBUG, "%s: priv=%p", __func__, priv);
1424
1425         os_free(drv->probe_req_ie);
1426         if (params->extra_ies) {
1427                 drv->probe_req_ie = os_malloc(params->extra_ies_len);
1428                 if (drv->probe_req_ie == NULL) {
1429                         drv->probe_req_ie_len = 0;
1430                         return -1;
1431                 }
1432                 os_memcpy(drv->probe_req_ie, params->extra_ies,
1433                           params->extra_ies_len);
1434                 drv->probe_req_ie_len = params->extra_ies_len;
1435         } else {
1436                 drv->probe_req_ie = NULL;
1437                 drv->probe_req_ie_len = 0;
1438         }
1439
1440         for (i = 0; i < params->num_ssids; i++)
1441                 wpa_hexdump(MSG_DEBUG, "Scan SSID",
1442                             params->ssids[i].ssid, params->ssids[i].ssid_len);
1443         drv->probe_req_ssid_len = 0;
1444         if (params->num_ssids) {
1445                 os_memcpy(drv->probe_req_ssid, params->ssids[0].ssid,
1446                           params->ssids[0].ssid_len);
1447                 drv->probe_req_ssid_len = params->ssids[0].ssid_len;
1448         }
1449         wpa_hexdump(MSG_DEBUG, "Scan extra IE(s)",
1450                     params->extra_ies, params->extra_ies_len);
1451
1452         drv->num_scanres = 0;
1453
1454 #ifdef DRIVER_TEST_UNIX
1455         if (drv->test_socket >= 0 && drv->test_dir)
1456                 wpa_driver_scan_dir(drv, drv->test_dir);
1457
1458         if (drv->test_socket >= 0 && drv->hostapd_addr_set &&
1459             sendto(drv->test_socket, "SCAN", 4, 0,
1460                    (struct sockaddr *) &drv->hostapd_addr,
1461                    sizeof(drv->hostapd_addr)) < 0) {
1462                 perror("sendto(test_socket)");
1463         }
1464 #endif /* DRIVER_TEST_UNIX */
1465
1466         if (drv->test_socket >= 0 && drv->hostapd_addr_udp_set &&
1467             sendto(drv->test_socket, "SCAN", 4, 0,
1468                    (struct sockaddr *) &drv->hostapd_addr_udp,
1469                    sizeof(drv->hostapd_addr_udp)) < 0) {
1470                 perror("sendto(test_socket)");
1471         }
1472
1473         eloop_cancel_timeout(wpa_driver_test_scan_timeout, drv, drv->ctx);
1474         eloop_register_timeout(1, 0, wpa_driver_test_scan_timeout, drv,
1475                                drv->ctx);
1476         return 0;
1477 }
1478
1479
1480 static struct wpa_scan_results * wpa_driver_test_get_scan_results2(void *priv)
1481 {
1482         struct test_driver_bss *dbss = priv;
1483         struct wpa_driver_test_data *drv = dbss->drv;
1484         struct wpa_scan_results *res;
1485         size_t i;
1486
1487         res = os_zalloc(sizeof(*res));
1488         if (res == NULL)
1489                 return NULL;
1490
1491         res->res = os_zalloc(drv->num_scanres * sizeof(struct wpa_scan_res *));
1492         if (res->res == NULL) {
1493                 os_free(res);
1494                 return NULL;
1495         }
1496
1497         for (i = 0; i < drv->num_scanres; i++) {
1498                 struct wpa_scan_res *r;
1499                 if (drv->scanres[i] == NULL)
1500                         continue;
1501                 r = os_malloc(sizeof(*r) + drv->scanres[i]->ie_len);
1502                 if (r == NULL)
1503                         break;
1504                 os_memcpy(r, drv->scanres[i],
1505                           sizeof(*r) + drv->scanres[i]->ie_len);
1506                 res->res[res->num++] = r;
1507         }
1508
1509         return res;
1510 }
1511
1512
1513 static int wpa_driver_test_set_key(const char *ifname, void *priv,
1514                                    enum wpa_alg alg, const u8 *addr,
1515                                    int key_idx, int set_tx,
1516                                    const u8 *seq, size_t seq_len,
1517                                    const u8 *key, size_t key_len)
1518 {
1519         wpa_printf(MSG_DEBUG, "%s: ifname=%s priv=%p alg=%d key_idx=%d "
1520                    "set_tx=%d",
1521                    __func__, ifname, priv, alg, key_idx, set_tx);
1522         if (addr)
1523                 wpa_printf(MSG_DEBUG, "   addr=" MACSTR, MAC2STR(addr));
1524         if (seq)
1525                 wpa_hexdump(MSG_DEBUG, "   seq", seq, seq_len);
1526         if (key)
1527                 wpa_hexdump_key(MSG_DEBUG, "   key", key, key_len);
1528         return 0;
1529 }
1530
1531
1532 static int wpa_driver_update_mode(struct wpa_driver_test_data *drv, int ap)
1533 {
1534         if (ap && !drv->ap) {
1535                 wpa_driver_test_close_test_socket(drv);
1536                 wpa_driver_test_attach(drv, drv->test_dir, 1);
1537                 drv->ap = 1;
1538         } else if (!ap && drv->ap) {
1539                 wpa_driver_test_close_test_socket(drv);
1540                 wpa_driver_test_attach(drv, drv->test_dir, 0);
1541                 drv->ap = 0;
1542         }
1543
1544         return 0;
1545 }
1546
1547
1548 static int wpa_driver_test_associate(
1549         void *priv, struct wpa_driver_associate_params *params)
1550 {
1551         struct test_driver_bss *dbss = priv;
1552         struct wpa_driver_test_data *drv = dbss->drv;
1553         wpa_printf(MSG_DEBUG, "%s: priv=%p freq=%d pairwise_suite=%d "
1554                    "group_suite=%d key_mgmt_suite=%d auth_alg=%d mode=%d",
1555                    __func__, priv, params->freq, params->pairwise_suite,
1556                    params->group_suite, params->key_mgmt_suite,
1557                    params->auth_alg, params->mode);
1558         wpa_driver_update_mode(drv, params->mode == IEEE80211_MODE_AP);
1559         if (params->bssid) {
1560                 wpa_printf(MSG_DEBUG, "   bssid=" MACSTR,
1561                            MAC2STR(params->bssid));
1562         }
1563         if (params->ssid) {
1564                 wpa_hexdump_ascii(MSG_DEBUG, "   ssid",
1565                                   params->ssid, params->ssid_len);
1566         }
1567         if (params->wpa_ie) {
1568                 wpa_hexdump(MSG_DEBUG, "   wpa_ie",
1569                             params->wpa_ie, params->wpa_ie_len);
1570                 drv->assoc_wpa_ie_len = params->wpa_ie_len;
1571                 if (drv->assoc_wpa_ie_len > sizeof(drv->assoc_wpa_ie))
1572                         drv->assoc_wpa_ie_len = sizeof(drv->assoc_wpa_ie);
1573                 os_memcpy(drv->assoc_wpa_ie, params->wpa_ie,
1574                           drv->assoc_wpa_ie_len);
1575         } else
1576                 drv->assoc_wpa_ie_len = 0;
1577
1578         wpa_driver_update_mode(drv, params->mode == IEEE80211_MODE_AP);
1579
1580         drv->ibss = params->mode == IEEE80211_MODE_IBSS;
1581         dbss->privacy = params->key_mgmt_suite &
1582                 (WPA_KEY_MGMT_IEEE8021X |
1583                  WPA_KEY_MGMT_PSK |
1584                  WPA_KEY_MGMT_WPA_NONE |
1585                  WPA_KEY_MGMT_FT_IEEE8021X |
1586                  WPA_KEY_MGMT_FT_PSK |
1587                  WPA_KEY_MGMT_IEEE8021X_SHA256 |
1588                  WPA_KEY_MGMT_PSK_SHA256);
1589         if (params->wep_key_len[params->wep_tx_keyidx])
1590                 dbss->privacy = 1;
1591
1592 #ifdef DRIVER_TEST_UNIX
1593         if (drv->test_dir && params->bssid &&
1594             params->mode != IEEE80211_MODE_IBSS) {
1595                 os_memset(&drv->hostapd_addr, 0, sizeof(drv->hostapd_addr));
1596                 drv->hostapd_addr.sun_family = AF_UNIX;
1597                 os_snprintf(drv->hostapd_addr.sun_path,
1598                             sizeof(drv->hostapd_addr.sun_path),
1599                             "%s/AP-" MACSTR,
1600                             drv->test_dir, MAC2STR(params->bssid));
1601                 drv->hostapd_addr_set = 1;
1602         }
1603 #endif /* DRIVER_TEST_UNIX */
1604
1605         if (params->mode == IEEE80211_MODE_AP) {
1606                 os_memcpy(dbss->ssid, params->ssid, params->ssid_len);
1607                 dbss->ssid_len = params->ssid_len;
1608                 os_memcpy(dbss->bssid, drv->own_addr, ETH_ALEN);
1609                 if (params->wpa_ie && params->wpa_ie_len) {
1610                         dbss->ie = os_malloc(params->wpa_ie_len);
1611                         if (dbss->ie) {
1612                                 os_memcpy(dbss->ie, params->wpa_ie,
1613                                           params->wpa_ie_len);
1614                                 dbss->ielen = params->wpa_ie_len;
1615                         }
1616                 }
1617         } else if (drv->test_socket >= 0 &&
1618                    (drv->hostapd_addr_set || drv->hostapd_addr_udp_set)) {
1619                 char cmd[200], *pos, *end;
1620                 int ret;
1621                 end = cmd + sizeof(cmd);
1622                 pos = cmd;
1623                 ret = os_snprintf(pos, end - pos, "ASSOC " MACSTR " ",
1624                                   MAC2STR(drv->own_addr));
1625                 if (ret >= 0 && ret < end - pos)
1626                         pos += ret;
1627                 pos += wpa_snprintf_hex(pos, end - pos, params->ssid,
1628                                         params->ssid_len);
1629                 ret = os_snprintf(pos, end - pos, " ");
1630                 if (ret >= 0 && ret < end - pos)
1631                         pos += ret;
1632                 pos += wpa_snprintf_hex(pos, end - pos, params->wpa_ie,
1633                                         params->wpa_ie_len);
1634                 end[-1] = '\0';
1635 #ifdef DRIVER_TEST_UNIX
1636                 if (drv->hostapd_addr_set &&
1637                     sendto(drv->test_socket, cmd, os_strlen(cmd), 0,
1638                            (struct sockaddr *) &drv->hostapd_addr,
1639                            sizeof(drv->hostapd_addr)) < 0) {
1640                         perror("sendto(test_socket)");
1641                         return -1;
1642                 }
1643 #endif /* DRIVER_TEST_UNIX */
1644                 if (drv->hostapd_addr_udp_set &&
1645                     sendto(drv->test_socket, cmd, os_strlen(cmd), 0,
1646                            (struct sockaddr *) &drv->hostapd_addr_udp,
1647                            sizeof(drv->hostapd_addr_udp)) < 0) {
1648                         perror("sendto(test_socket)");
1649                         return -1;
1650                 }
1651
1652                 os_memcpy(dbss->ssid, params->ssid, params->ssid_len);
1653                 dbss->ssid_len = params->ssid_len;
1654         } else {
1655                 drv->associated = 1;
1656                 if (params->mode == IEEE80211_MODE_IBSS) {
1657                         os_memcpy(dbss->ssid, params->ssid, params->ssid_len);
1658                         dbss->ssid_len = params->ssid_len;
1659                         if (params->bssid)
1660                                 os_memcpy(dbss->bssid, params->bssid,
1661                                           ETH_ALEN);
1662                         else {
1663                                 os_get_random(dbss->bssid, ETH_ALEN);
1664                                 dbss->bssid[0] &= ~0x01;
1665                                 dbss->bssid[0] |= 0x02;
1666                         }
1667                 }
1668                 wpa_supplicant_event(drv->ctx, EVENT_ASSOC, NULL);
1669         }
1670
1671         return 0;
1672 }
1673
1674
1675 static int wpa_driver_test_get_bssid(void *priv, u8 *bssid)
1676 {
1677         struct test_driver_bss *dbss = priv;
1678         os_memcpy(bssid, dbss->bssid, ETH_ALEN);
1679         return 0;
1680 }
1681
1682
1683 static int wpa_driver_test_get_ssid(void *priv, u8 *ssid)
1684 {
1685         struct test_driver_bss *dbss = priv;
1686         os_memcpy(ssid, dbss->ssid, 32);
1687         return dbss->ssid_len;
1688 }
1689
1690
1691 static int wpa_driver_test_send_disassoc(struct wpa_driver_test_data *drv)
1692 {
1693 #ifdef DRIVER_TEST_UNIX
1694         if (drv->test_socket >= 0 &&
1695             sendto(drv->test_socket, "DISASSOC", 8, 0,
1696                    (struct sockaddr *) &drv->hostapd_addr,
1697                    sizeof(drv->hostapd_addr)) < 0) {
1698                 perror("sendto(test_socket)");
1699                 return -1;
1700         }
1701 #endif /* DRIVER_TEST_UNIX */
1702         if (drv->test_socket >= 0 && drv->hostapd_addr_udp_set &&
1703             sendto(drv->test_socket, "DISASSOC", 8, 0,
1704                    (struct sockaddr *) &drv->hostapd_addr_udp,
1705                    sizeof(drv->hostapd_addr_udp)) < 0) {
1706                 perror("sendto(test_socket)");
1707                 return -1;
1708         }
1709         return 0;
1710 }
1711
1712
1713 static int wpa_driver_test_deauthenticate(void *priv, const u8 *addr,
1714                                           int reason_code)
1715 {
1716         struct test_driver_bss *dbss = priv;
1717         struct wpa_driver_test_data *drv = dbss->drv;
1718         wpa_printf(MSG_DEBUG, "%s addr=" MACSTR " reason_code=%d",
1719                    __func__, MAC2STR(addr), reason_code);
1720         os_memset(dbss->bssid, 0, ETH_ALEN);
1721         drv->associated = 0;
1722         wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1723         return wpa_driver_test_send_disassoc(drv);
1724 }
1725
1726
1727 static int wpa_driver_test_disassociate(void *priv, const u8 *addr,
1728                                         int reason_code)
1729 {
1730         struct test_driver_bss *dbss = priv;
1731         struct wpa_driver_test_data *drv = dbss->drv;
1732         wpa_printf(MSG_DEBUG, "%s addr=" MACSTR " reason_code=%d",
1733                    __func__, MAC2STR(addr), reason_code);
1734         os_memset(dbss->bssid, 0, ETH_ALEN);
1735         drv->associated = 0;
1736         wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1737         return wpa_driver_test_send_disassoc(drv);
1738 }
1739
1740
1741 static const u8 * wpa_scan_get_ie(const struct wpa_scan_res *res, u8 ie)
1742 {
1743         const u8 *end, *pos;
1744
1745         pos = (const u8 *) (res + 1);
1746         end = pos + res->ie_len;
1747
1748         while (pos + 1 < end) {
1749                 if (pos + 2 + pos[1] > end)
1750                         break;
1751                 if (pos[0] == ie)
1752                         return pos;
1753                 pos += 2 + pos[1];
1754         }
1755
1756         return NULL;
1757 }
1758
1759
1760 static void wpa_driver_test_scanresp(struct wpa_driver_test_data *drv,
1761                                      struct sockaddr *from,
1762                                      socklen_t fromlen,
1763                                      const char *data)
1764 {
1765         struct wpa_scan_res *res;
1766         const char *pos, *pos2;
1767         size_t len;
1768         u8 *ie_pos, *ie_start, *ie_end;
1769 #define MAX_IE_LEN 1000
1770         const u8 *ds_params;
1771
1772         wpa_printf(MSG_DEBUG, "test_driver: SCANRESP %s", data);
1773         if (drv->num_scanres >= MAX_SCAN_RESULTS) {
1774                 wpa_printf(MSG_DEBUG, "test_driver: No room for the new scan "
1775                            "result");
1776                 return;
1777         }
1778
1779         /* SCANRESP BSSID SSID IEs */
1780
1781         res = os_zalloc(sizeof(*res) + MAX_IE_LEN);
1782         if (res == NULL)
1783                 return;
1784         ie_start = ie_pos = (u8 *) (res + 1);
1785         ie_end = ie_pos + MAX_IE_LEN;
1786
1787         if (hwaddr_aton(data, res->bssid)) {
1788                 wpa_printf(MSG_DEBUG, "test_driver: invalid BSSID in scanres");
1789                 os_free(res);
1790                 return;
1791         }
1792
1793         pos = data + 17;
1794         while (*pos == ' ')
1795                 pos++;
1796         pos2 = os_strchr(pos, ' ');
1797         if (pos2 == NULL) {
1798                 wpa_printf(MSG_DEBUG, "test_driver: invalid SSID termination "
1799                            "in scanres");
1800                 os_free(res);
1801                 return;
1802         }
1803         len = (pos2 - pos) / 2;
1804         if (len > 32)
1805                 len = 32;
1806         /*
1807          * Generate SSID IE from the SSID field since this IE is not included
1808          * in the main IE field.
1809          */
1810         *ie_pos++ = WLAN_EID_SSID;
1811         *ie_pos++ = len;
1812         if (hexstr2bin(pos, ie_pos, len) < 0) {
1813                 wpa_printf(MSG_DEBUG, "test_driver: invalid SSID in scanres");
1814                 os_free(res);
1815                 return;
1816         }
1817         ie_pos += len;
1818
1819         pos = pos2 + 1;
1820         pos2 = os_strchr(pos, ' ');
1821         if (pos2 == NULL)
1822                 len = os_strlen(pos) / 2;
1823         else
1824                 len = (pos2 - pos) / 2;
1825         if ((int) len > ie_end - ie_pos)
1826                 len = ie_end - ie_pos;
1827         if (hexstr2bin(pos, ie_pos, len) < 0) {
1828                 wpa_printf(MSG_DEBUG, "test_driver: invalid IEs in scanres");
1829                 os_free(res);
1830                 return;
1831         }
1832         ie_pos += len;
1833         res->ie_len = ie_pos - ie_start;
1834
1835         if (pos2) {
1836                 pos = pos2 + 1;
1837                 while (*pos == ' ')
1838                         pos++;
1839                 if (os_strstr(pos, "PRIVACY"))
1840                         res->caps |= IEEE80211_CAP_PRIVACY;
1841                 if (os_strstr(pos, "IBSS"))
1842                         res->caps |= IEEE80211_CAP_IBSS;
1843         }
1844
1845         ds_params = wpa_scan_get_ie(res, WLAN_EID_DS_PARAMS);
1846         if (ds_params && ds_params[1] > 0) {
1847                 if (ds_params[2] >= 1 && ds_params[2] <= 13)
1848                         res->freq = 2407 + ds_params[2] * 5;
1849         }
1850
1851         os_free(drv->scanres[drv->num_scanres]);
1852         drv->scanres[drv->num_scanres++] = res;
1853 }
1854
1855
1856 static void wpa_driver_test_assocresp(struct wpa_driver_test_data *drv,
1857                                       struct sockaddr *from,
1858                                       socklen_t fromlen,
1859                                       const char *data)
1860 {
1861         struct test_driver_bss *bss;
1862
1863         bss = dl_list_first(&drv->bss, struct test_driver_bss, list);
1864
1865         /* ASSOCRESP BSSID <res> */
1866         if (hwaddr_aton(data, bss->bssid)) {
1867                 wpa_printf(MSG_DEBUG, "test_driver: invalid BSSID in "
1868                            "assocresp");
1869         }
1870         if (drv->use_associnfo) {
1871                 union wpa_event_data event;
1872                 os_memset(&event, 0, sizeof(event));
1873                 event.assoc_info.req_ies = drv->assoc_wpa_ie;
1874                 event.assoc_info.req_ies_len = drv->assoc_wpa_ie_len;
1875                 wpa_supplicant_event(drv->ctx, EVENT_ASSOCINFO, &event);
1876         }
1877         drv->associated = 1;
1878         wpa_supplicant_event(drv->ctx, EVENT_ASSOC, NULL);
1879 }
1880
1881
1882 static void wpa_driver_test_disassoc(struct wpa_driver_test_data *drv,
1883                                      struct sockaddr *from,
1884                                      socklen_t fromlen)
1885 {
1886         drv->associated = 0;
1887         wpa_supplicant_event(drv->ctx, EVENT_DISASSOC, NULL);
1888 }
1889
1890
1891 static void wpa_driver_test_eapol(struct wpa_driver_test_data *drv,
1892                                   struct sockaddr *from,
1893                                   socklen_t fromlen,
1894                                   const u8 *data, size_t data_len)
1895 {
1896         const u8 *src;
1897         struct test_driver_bss *bss;
1898
1899         bss = dl_list_first(&drv->bss, struct test_driver_bss, list);
1900
1901         if (data_len > 14) {
1902                 /* Skip Ethernet header */
1903                 src = data + ETH_ALEN;
1904                 data += 14;
1905                 data_len -= 14;
1906         } else
1907                 src = bss->bssid;
1908
1909         drv_event_eapol_rx(drv->ctx, src, data, data_len);
1910 }
1911
1912
1913 static void wpa_driver_test_mlme(struct wpa_driver_test_data *drv,
1914                                  struct sockaddr *from,
1915                                  socklen_t fromlen,
1916                                  const u8 *data, size_t data_len)
1917 {
1918         int freq = 0, own_freq;
1919         union wpa_event_data event;
1920         const struct ieee80211_mgmt *mgmt;
1921         u16 fc;
1922         struct test_driver_bss *bss;
1923
1924         bss = dl_list_first(&drv->bss, struct test_driver_bss, list);
1925         if (data_len > 6 && os_memcmp(data, "freq=", 5) == 0) {
1926                 size_t pos;
1927                 for (pos = 5; pos < data_len; pos++) {
1928                         if (data[pos] == ' ')
1929                                 break;
1930                 }
1931                 if (pos < data_len) {
1932                         freq = atoi((const char *) &data[5]);
1933                         wpa_printf(MSG_DEBUG, "test_driver(%s): MLME RX on "
1934                                    "freq %d MHz", bss->ifname, freq);
1935                         pos++;
1936                         data += pos;
1937                         data_len -= pos;
1938                 }
1939         }
1940
1941         if (drv->remain_on_channel_freq)
1942                 own_freq = drv->remain_on_channel_freq;
1943         else
1944                 own_freq = drv->current_freq;
1945
1946         if (freq && own_freq && freq != own_freq) {
1947                 wpa_printf(MSG_DEBUG, "test_driver(%s): Ignore MLME RX on "
1948                            "another frequency %d MHz (own %d MHz)",
1949                            bss->ifname, freq, own_freq);
1950                 return;
1951         }
1952
1953         os_memset(&event, 0, sizeof(event));
1954         event.mlme_rx.buf = data;
1955         event.mlme_rx.len = data_len;
1956         event.mlme_rx.freq = freq;
1957         wpa_supplicant_event(drv->ctx, EVENT_MLME_RX, &event);
1958
1959         mgmt = (const struct ieee80211_mgmt *) data;
1960         fc = le_to_host16(mgmt->frame_control);
1961
1962         if (drv->probe_req_report && data_len >= 24) {
1963                 if (WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1964                     WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_PROBE_REQ) {
1965                         os_memset(&event, 0, sizeof(event));
1966                         event.rx_probe_req.sa = mgmt->sa;
1967                         event.rx_probe_req.ie = mgmt->u.probe_req.variable;
1968                         event.rx_probe_req.ie_len =
1969                                 data_len - (mgmt->u.probe_req.variable - data);
1970                         wpa_supplicant_event(drv->ctx, EVENT_RX_PROBE_REQ,
1971                                              &event);
1972 #ifdef CONFIG_P2P
1973                         if (drv->p2p)
1974                                 p2p_probe_req_rx(drv->p2p, mgmt->sa,
1975                                                  event.rx_probe_req.ie,
1976                                                  event.rx_probe_req.ie_len);
1977 #endif /* CONFIG_P2P */
1978                 }
1979         }
1980
1981 #ifdef CONFIG_P2P
1982         if (drv->p2p &&
1983             WLAN_FC_GET_TYPE(fc) == WLAN_FC_TYPE_MGMT &&
1984             WLAN_FC_GET_STYPE(fc) == WLAN_FC_STYPE_ACTION) {
1985                 size_t hdr_len;
1986                 hdr_len = (const u8 *)
1987                         &mgmt->u.action.u.vs_public_action.action - data;
1988                 p2p_rx_action(drv->p2p, mgmt->da, mgmt->sa, mgmt->bssid,
1989                               mgmt->u.action.category,
1990                               &mgmt->u.action.u.vs_public_action.action,
1991                               data_len - hdr_len, freq);
1992         }
1993 #endif /* CONFIG_P2P */
1994
1995 }
1996
1997
1998 static void wpa_driver_test_scan_cmd(struct wpa_driver_test_data *drv,
1999                                      struct sockaddr *from,
2000                                      socklen_t fromlen,
2001                                      const u8 *data, size_t data_len)
2002 {
2003         char buf[512], *pos, *end;
2004         int ret;
2005         struct test_driver_bss *bss;
2006
2007         bss = dl_list_first(&drv->bss, struct test_driver_bss, list);
2008
2009         /* data: optional [ STA-addr | ' ' | IEs(hex) ] */
2010 #ifdef CONFIG_P2P
2011         if (drv->probe_req_report && drv->p2p && data_len) {
2012                 const char *d = (const char *) data;
2013                 u8 sa[ETH_ALEN];
2014                 u8 ie[512];
2015                 size_t ielen;
2016
2017                 if (hwaddr_aton(d, sa))
2018                         return;
2019                 d += 18;
2020                 while (*d == ' ')
2021                         d++;
2022                 ielen = os_strlen(d) / 2;
2023                 if (ielen > sizeof(ie))
2024                         ielen = sizeof(ie);
2025                 if (hexstr2bin(d, ie, ielen) < 0)
2026                         ielen = 0;
2027                 drv->probe_from = from;
2028                 drv->probe_from_len = fromlen;
2029                 p2p_probe_req_rx(drv->p2p, sa, ie, ielen);
2030                 drv->probe_from = NULL;
2031         }
2032 #endif /* CONFIG_P2P */
2033
2034         if (!drv->ibss)
2035                 return;
2036
2037         pos = buf;
2038         end = buf + sizeof(buf);
2039
2040         /* reply: SCANRESP BSSID SSID IEs */
2041         ret = snprintf(pos, end - pos, "SCANRESP " MACSTR " ",
2042                        MAC2STR(bss->bssid));
2043         if (ret < 0 || ret >= end - pos)
2044                 return;
2045         pos += ret;
2046         pos += wpa_snprintf_hex(pos, end - pos,
2047                                 bss->ssid, bss->ssid_len);
2048         ret = snprintf(pos, end - pos, " ");
2049         if (ret < 0 || ret >= end - pos)
2050                 return;
2051         pos += ret;
2052         pos += wpa_snprintf_hex(pos, end - pos, drv->assoc_wpa_ie,
2053                                 drv->assoc_wpa_ie_len);
2054
2055         if (bss->privacy) {
2056                 ret = snprintf(pos, end - pos, " PRIVACY");
2057                 if (ret < 0 || ret >= end - pos)
2058                         return;
2059                 pos += ret;
2060         }
2061
2062         ret = snprintf(pos, end - pos, " IBSS");
2063         if (ret < 0 || ret >= end - pos)
2064                 return;
2065         pos += ret;
2066
2067         sendto(drv->test_socket, buf, pos - buf, 0,
2068                (struct sockaddr *) from, fromlen);
2069 }
2070
2071
2072 static void wpa_driver_test_receive_unix(int sock, void *eloop_ctx,
2073                                          void *sock_ctx)
2074 {
2075         struct wpa_driver_test_data *drv = eloop_ctx;
2076         char *buf;
2077         int res;
2078         struct sockaddr_storage from;
2079         socklen_t fromlen = sizeof(from);
2080         const size_t buflen = 2000;
2081
2082         if (drv->ap) {
2083                 test_driver_receive_unix(sock, eloop_ctx, sock_ctx);
2084                 return;
2085         }
2086
2087         buf = os_malloc(buflen);
2088         if (buf == NULL)
2089                 return;
2090         res = recvfrom(sock, buf, buflen - 1, 0,
2091                        (struct sockaddr *) &from, &fromlen);
2092         if (res < 0) {
2093                 perror("recvfrom(test_socket)");
2094                 os_free(buf);
2095                 return;
2096         }
2097         buf[res] = '\0';
2098
2099         wpa_printf(MSG_DEBUG, "test_driver: received %u bytes", res);
2100
2101         if (os_strncmp(buf, "SCANRESP ", 9) == 0) {
2102                 wpa_driver_test_scanresp(drv, (struct sockaddr *) &from,
2103                                          fromlen, buf + 9);
2104         } else if (os_strncmp(buf, "ASSOCRESP ", 10) == 0) {
2105                 wpa_driver_test_assocresp(drv, (struct sockaddr *) &from,
2106                                           fromlen, buf + 10);
2107         } else if (os_strcmp(buf, "DISASSOC") == 0) {
2108                 wpa_driver_test_disassoc(drv, (struct sockaddr *) &from,
2109                                          fromlen);
2110         } else if (os_strcmp(buf, "DEAUTH") == 0) {
2111                 wpa_driver_test_disassoc(drv, (struct sockaddr *) &from,
2112                                          fromlen);
2113         } else if (os_strncmp(buf, "EAPOL ", 6) == 0) {
2114                 wpa_driver_test_eapol(drv, (struct sockaddr *) &from, fromlen,
2115                                       (const u8 *) buf + 6, res - 6);
2116         } else if (os_strncmp(buf, "MLME ", 5) == 0) {
2117                 wpa_driver_test_mlme(drv, (struct sockaddr *) &from, fromlen,
2118                                      (const u8 *) buf + 5, res - 5);
2119         } else if (os_strncmp(buf, "SCAN ", 5) == 0) {
2120                 wpa_driver_test_scan_cmd(drv, (struct sockaddr *) &from,
2121                                          fromlen,
2122                                          (const u8 *) buf + 5, res - 5);
2123         } else {
2124                 wpa_hexdump_ascii(MSG_DEBUG, "Unknown test_socket command",
2125                                   (u8 *) buf, res);
2126         }
2127         os_free(buf);
2128 }
2129
2130
2131 static void * wpa_driver_test_init2(void *ctx, const char *ifname,
2132                                     void *global_priv)
2133 {
2134         struct wpa_driver_test_data *drv;
2135         struct wpa_driver_test_global *global = global_priv;
2136         struct test_driver_bss *bss;
2137
2138         drv = test_alloc_data(ctx, ifname);
2139         if (drv == NULL)
2140                 return NULL;
2141         bss = dl_list_first(&drv->bss, struct test_driver_bss, list);
2142         drv->global = global_priv;
2143         drv->test_socket = -1;
2144
2145         /* Set dummy BSSID and SSID for testing. */
2146         bss->bssid[0] = 0x02;
2147         bss->bssid[1] = 0x00;
2148         bss->bssid[2] = 0x00;
2149         bss->bssid[3] = 0x00;
2150         bss->bssid[4] = 0x00;
2151         bss->bssid[5] = 0x01;
2152         os_memcpy(bss->ssid, "test", 5);
2153         bss->ssid_len = 4;
2154
2155         if (global->bss_add_used) {
2156                 os_memcpy(drv->own_addr, global->req_addr, ETH_ALEN);
2157                 global->bss_add_used = 0;
2158         }
2159
2160         eloop_register_timeout(1, 0, wpa_driver_test_poll, drv, NULL);
2161
2162         return bss;
2163 }
2164
2165
2166 static void wpa_driver_test_close_test_socket(struct wpa_driver_test_data *drv)
2167 {
2168         if (drv->test_socket >= 0) {
2169                 eloop_unregister_read_sock(drv->test_socket);
2170                 close(drv->test_socket);
2171                 drv->test_socket = -1;
2172         }
2173
2174         if (drv->own_socket_path) {
2175                 unlink(drv->own_socket_path);
2176                 os_free(drv->own_socket_path);
2177                 drv->own_socket_path = NULL;
2178         }
2179 }
2180
2181
2182 static void wpa_driver_test_deinit(void *priv)
2183 {
2184         struct test_driver_bss *dbss = priv;
2185         struct wpa_driver_test_data *drv = dbss->drv;
2186         struct test_client_socket *cli, *prev;
2187         int i;
2188
2189 #ifdef CONFIG_P2P
2190         if (drv->p2p)
2191                 p2p_deinit(drv->p2p);
2192         wpabuf_free(drv->pending_action_tx);
2193 #endif /* CONFIG_P2P */
2194
2195         cli = drv->cli;
2196         while (cli) {
2197                 prev = cli;
2198                 cli = cli->next;
2199                 os_free(prev);
2200         }
2201
2202 #ifdef HOSTAPD
2203         /* There should be only one BSS remaining at this point. */
2204         if (dl_list_len(&drv->bss) != 1)
2205                 wpa_printf(MSG_ERROR, "%s: %u remaining BSS entries",
2206                            __func__, dl_list_len(&drv->bss));
2207 #endif /* HOSTAPD */
2208
2209         test_driver_free_bsses(drv);
2210
2211         wpa_driver_test_close_test_socket(drv);
2212         eloop_cancel_timeout(wpa_driver_test_scan_timeout, drv, drv->ctx);
2213         eloop_cancel_timeout(wpa_driver_test_poll, drv, NULL);
2214         eloop_cancel_timeout(test_remain_on_channel_timeout, drv, NULL);
2215         os_free(drv->test_dir);
2216         for (i = 0; i < MAX_SCAN_RESULTS; i++)
2217                 os_free(drv->scanres[i]);
2218         os_free(drv->probe_req_ie);
2219         wpa_trace_remove_ref(drv, ctx, drv->ctx);
2220         os_free(drv);
2221 }
2222
2223
2224 static int wpa_driver_test_attach(struct wpa_driver_test_data *drv,
2225                                   const char *dir, int ap)
2226 {
2227 #ifdef DRIVER_TEST_UNIX
2228         static unsigned int counter = 0;
2229         struct sockaddr_un addr;
2230         size_t len;
2231
2232         os_free(drv->own_socket_path);
2233         if (dir) {
2234                 len = os_strlen(dir) + 30;
2235                 drv->own_socket_path = os_malloc(len);
2236                 if (drv->own_socket_path == NULL)
2237                         return -1;
2238                 os_snprintf(drv->own_socket_path, len, "%s/%s-" MACSTR,
2239                             dir, ap ? "AP" : "STA", MAC2STR(drv->own_addr));
2240         } else {
2241                 drv->own_socket_path = os_malloc(100);
2242                 if (drv->own_socket_path == NULL)
2243                         return -1;
2244                 os_snprintf(drv->own_socket_path, 100,
2245                             "/tmp/wpa_supplicant_test-%d-%d",
2246                             getpid(), counter++);
2247         }
2248
2249         drv->test_socket = socket(PF_UNIX, SOCK_DGRAM, 0);
2250         if (drv->test_socket < 0) {
2251                 perror("socket(PF_UNIX)");
2252                 os_free(drv->own_socket_path);
2253                 drv->own_socket_path = NULL;
2254                 return -1;
2255         }
2256
2257         os_memset(&addr, 0, sizeof(addr));
2258         addr.sun_family = AF_UNIX;
2259         os_strlcpy(addr.sun_path, drv->own_socket_path, sizeof(addr.sun_path));
2260         if (bind(drv->test_socket, (struct sockaddr *) &addr,
2261                  sizeof(addr)) < 0) {
2262                 perror("bind(PF_UNIX)");
2263                 close(drv->test_socket);
2264                 unlink(drv->own_socket_path);
2265                 os_free(drv->own_socket_path);
2266                 drv->own_socket_path = NULL;
2267                 return -1;
2268         }
2269
2270         eloop_register_read_sock(drv->test_socket,
2271                                  wpa_driver_test_receive_unix, drv, NULL);
2272
2273         return 0;
2274 #else /* DRIVER_TEST_UNIX */
2275         return -1;
2276 #endif /* DRIVER_TEST_UNIX */
2277 }
2278
2279
2280 static int wpa_driver_test_attach_udp(struct wpa_driver_test_data *drv,
2281                                       char *dst)
2282 {
2283         char *pos;
2284
2285         pos = os_strchr(dst, ':');
2286         if (pos == NULL)
2287                 return -1;
2288         *pos++ = '\0';
2289         wpa_printf(MSG_DEBUG, "%s: addr=%s port=%s", __func__, dst, pos);
2290
2291         drv->test_socket = socket(PF_INET, SOCK_DGRAM, 0);
2292         if (drv->test_socket < 0) {
2293                 perror("socket(PF_INET)");
2294                 return -1;
2295         }
2296
2297         os_memset(&drv->hostapd_addr_udp, 0, sizeof(drv->hostapd_addr_udp));
2298         drv->hostapd_addr_udp.sin_family = AF_INET;
2299 #if defined(CONFIG_NATIVE_WINDOWS) || defined(CONFIG_ANSI_C_EXTRA)
2300         {
2301                 int a[4];
2302                 u8 *pos;
2303                 sscanf(dst, "%d.%d.%d.%d", &a[0], &a[1], &a[2], &a[3]);
2304                 pos = (u8 *) &drv->hostapd_addr_udp.sin_addr;
2305                 *pos++ = a[0];
2306                 *pos++ = a[1];
2307                 *pos++ = a[2];
2308                 *pos++ = a[3];
2309         }
2310 #else /* CONFIG_NATIVE_WINDOWS or CONFIG_ANSI_C_EXTRA */
2311         inet_aton(dst, &drv->hostapd_addr_udp.sin_addr);
2312 #endif /* CONFIG_NATIVE_WINDOWS or CONFIG_ANSI_C_EXTRA */
2313         drv->hostapd_addr_udp.sin_port = htons(atoi(pos));
2314
2315         drv->hostapd_addr_udp_set = 1;
2316
2317         eloop_register_read_sock(drv->test_socket,
2318                                  wpa_driver_test_receive_unix, drv, NULL);
2319
2320         return 0;
2321 }
2322
2323
2324 static int wpa_driver_test_set_param(void *priv, const char *param)
2325 {
2326         struct test_driver_bss *dbss = priv;
2327         struct wpa_driver_test_data *drv = dbss->drv;
2328         const char *pos;
2329
2330         wpa_printf(MSG_DEBUG, "%s: param='%s'", __func__, param);
2331         if (param == NULL)
2332                 return 0;
2333
2334         wpa_driver_test_close_test_socket(drv);
2335
2336 #ifdef DRIVER_TEST_UNIX
2337         pos = os_strstr(param, "test_socket=");
2338         if (pos) {
2339                 const char *pos2;
2340                 size_t len;
2341
2342                 pos += 12;
2343                 pos2 = os_strchr(pos, ' ');
2344                 if (pos2)
2345                         len = pos2 - pos;
2346                 else
2347                         len = os_strlen(pos);
2348                 if (len > sizeof(drv->hostapd_addr.sun_path))
2349                         return -1;
2350                 os_memset(&drv->hostapd_addr, 0, sizeof(drv->hostapd_addr));
2351                 drv->hostapd_addr.sun_family = AF_UNIX;
2352                 os_memcpy(drv->hostapd_addr.sun_path, pos, len);
2353                 drv->hostapd_addr_set = 1;
2354         }
2355 #endif /* DRIVER_TEST_UNIX */
2356
2357         pos = os_strstr(param, "test_dir=");
2358         if (pos) {
2359                 char *end;
2360                 os_free(drv->test_dir);
2361                 drv->test_dir = os_strdup(pos + 9);
2362                 if (drv->test_dir == NULL)
2363                         return -1;
2364                 end = os_strchr(drv->test_dir, ' ');
2365                 if (end)
2366                         *end = '\0';
2367                 if (wpa_driver_test_attach(drv, drv->test_dir, 0))
2368                         return -1;
2369         } else {
2370                 pos = os_strstr(param, "test_udp=");
2371                 if (pos) {
2372                         char *dst, *epos;
2373                         dst = os_strdup(pos + 9);
2374                         if (dst == NULL)
2375                                 return -1;
2376                         epos = os_strchr(dst, ' ');
2377                         if (epos)
2378                                 *epos = '\0';
2379                         if (wpa_driver_test_attach_udp(drv, dst))
2380                                 return -1;
2381                         os_free(dst);
2382                 } else if (wpa_driver_test_attach(drv, NULL, 0))
2383                         return -1;
2384         }
2385
2386         if (os_strstr(param, "use_associnfo=1")) {
2387                 wpa_printf(MSG_DEBUG, "test_driver: Use AssocInfo events");
2388                 drv->use_associnfo = 1;
2389         }
2390
2391 #ifdef CONFIG_CLIENT_MLME
2392         if (os_strstr(param, "use_mlme=1")) {
2393                 wpa_printf(MSG_DEBUG, "test_driver: Use internal MLME");
2394                 drv->use_mlme = 1;
2395         }
2396 #endif /* CONFIG_CLIENT_MLME */
2397
2398         if (os_strstr(param, "p2p_mgmt=1")) {
2399                 wpa_printf(MSG_DEBUG, "test_driver: Use internal P2P "
2400                            "management");
2401                 if (wpa_driver_test_init_p2p(drv) < 0)
2402                         return -1;
2403         }
2404
2405         return 0;
2406 }
2407
2408
2409 static const u8 * wpa_driver_test_get_mac_addr(void *priv)
2410 {
2411         struct test_driver_bss *dbss = priv;
2412         struct wpa_driver_test_data *drv = dbss->drv;
2413         wpa_printf(MSG_DEBUG, "%s", __func__);
2414         return drv->own_addr;
2415 }
2416
2417
2418 static int wpa_driver_test_send_eapol(void *priv, const u8 *dest, u16 proto,
2419                                       const u8 *data, size_t data_len)
2420 {
2421         struct test_driver_bss *dbss = priv;
2422         struct wpa_driver_test_data *drv = dbss->drv;
2423         char *msg;
2424         size_t msg_len;
2425         struct l2_ethhdr eth;
2426         struct sockaddr *addr;
2427         socklen_t alen;
2428 #ifdef DRIVER_TEST_UNIX
2429         struct sockaddr_un addr_un;
2430 #endif /* DRIVER_TEST_UNIX */
2431
2432         wpa_hexdump(MSG_MSGDUMP, "test_send_eapol TX frame", data, data_len);
2433
2434         os_memset(&eth, 0, sizeof(eth));
2435         os_memcpy(eth.h_dest, dest, ETH_ALEN);
2436         os_memcpy(eth.h_source, drv->own_addr, ETH_ALEN);
2437         eth.h_proto = host_to_be16(proto);
2438
2439         msg_len = 6 + sizeof(eth) + data_len;
2440         msg = os_malloc(msg_len);
2441         if (msg == NULL)
2442                 return -1;
2443         os_memcpy(msg, "EAPOL ", 6);
2444         os_memcpy(msg + 6, &eth, sizeof(eth));
2445         os_memcpy(msg + 6 + sizeof(eth), data, data_len);
2446
2447         if (os_memcmp(dest, dbss->bssid, ETH_ALEN) == 0 ||
2448             drv->test_dir == NULL) {
2449                 if (drv->hostapd_addr_udp_set) {
2450                         addr = (struct sockaddr *) &drv->hostapd_addr_udp;
2451                         alen = sizeof(drv->hostapd_addr_udp);
2452                 } else {
2453 #ifdef DRIVER_TEST_UNIX
2454                         addr = (struct sockaddr *) &drv->hostapd_addr;
2455                         alen = sizeof(drv->hostapd_addr);
2456 #else /* DRIVER_TEST_UNIX */
2457                         os_free(msg);
2458                         return -1;
2459 #endif /* DRIVER_TEST_UNIX */
2460                 }
2461         } else {
2462 #ifdef DRIVER_TEST_UNIX
2463                 struct stat st;
2464                 os_memset(&addr_un, 0, sizeof(addr_un));
2465                 addr_un.sun_family = AF_UNIX;
2466                 os_snprintf(addr_un.sun_path, sizeof(addr_un.sun_path),
2467                             "%s/STA-" MACSTR, drv->test_dir, MAC2STR(dest));
2468                 if (stat(addr_un.sun_path, &st) < 0) {
2469                         os_snprintf(addr_un.sun_path, sizeof(addr_un.sun_path),
2470                                     "%s/AP-" MACSTR,
2471                                     drv->test_dir, MAC2STR(dest));
2472                 }
2473                 addr = (struct sockaddr *) &addr_un;
2474                 alen = sizeof(addr_un);
2475 #else /* DRIVER_TEST_UNIX */
2476                 os_free(msg);
2477                 return -1;
2478 #endif /* DRIVER_TEST_UNIX */
2479         }
2480
2481         if (sendto(drv->test_socket, msg, msg_len, 0, addr, alen) < 0) {
2482                 perror("sendmsg(test_socket)");
2483                 os_free(msg);
2484                 return -1;
2485         }
2486
2487         os_free(msg);
2488         return 0;
2489 }
2490
2491
2492 static int wpa_driver_test_get_capa(void *priv, struct wpa_driver_capa *capa)
2493 {
2494         struct test_driver_bss *dbss = priv;
2495         struct wpa_driver_test_data *drv = dbss->drv;
2496         os_memset(capa, 0, sizeof(*capa));
2497         capa->key_mgmt = WPA_DRIVER_CAPA_KEY_MGMT_WPA |
2498                 WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
2499                 WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK |
2500                 WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK |
2501                 WPA_DRIVER_CAPA_KEY_MGMT_WPA_NONE |
2502                 WPA_DRIVER_CAPA_KEY_MGMT_FT |
2503                 WPA_DRIVER_CAPA_KEY_MGMT_FT_PSK;
2504         capa->enc = WPA_DRIVER_CAPA_ENC_WEP40 |
2505                 WPA_DRIVER_CAPA_ENC_WEP104 |
2506                 WPA_DRIVER_CAPA_ENC_TKIP |
2507                 WPA_DRIVER_CAPA_ENC_CCMP;
2508         capa->auth = WPA_DRIVER_AUTH_OPEN |
2509                 WPA_DRIVER_AUTH_SHARED |
2510                 WPA_DRIVER_AUTH_LEAP;
2511         if (drv->use_mlme)
2512                 capa->flags |= WPA_DRIVER_FLAGS_USER_SPACE_MLME;
2513         if (drv->p2p)
2514                 capa->flags |= WPA_DRIVER_FLAGS_P2P_MGMT;
2515         capa->flags |= WPA_DRIVER_FLAGS_AP;
2516         capa->flags |= WPA_DRIVER_FLAGS_P2P_CONCURRENT;
2517         capa->flags |= WPA_DRIVER_FLAGS_P2P_DEDICATED_INTERFACE;
2518         capa->flags |= WPA_DRIVER_FLAGS_P2P_CAPABLE;
2519         capa->max_scan_ssids = 2;
2520         capa->max_remain_on_chan = 60000;
2521
2522         return 0;
2523 }
2524
2525
2526 static int wpa_driver_test_mlme_setprotection(void *priv, const u8 *addr,
2527                                               int protect_type,
2528                                               int key_type)
2529 {
2530         wpa_printf(MSG_DEBUG, "%s: protect_type=%d key_type=%d",
2531                    __func__, protect_type, key_type);
2532
2533         if (addr) {
2534                 wpa_printf(MSG_DEBUG, "%s: addr=" MACSTR,
2535                            __func__, MAC2STR(addr));
2536         }
2537
2538         return 0;
2539 }
2540
2541
2542 static int wpa_driver_test_set_channel(void *priv,
2543                                        enum hostapd_hw_mode phymode,
2544                                        int chan, int freq)
2545 {
2546         struct test_driver_bss *dbss = priv;
2547         struct wpa_driver_test_data *drv = dbss->drv;
2548         wpa_printf(MSG_DEBUG, "%s: phymode=%d chan=%d freq=%d",
2549                    __func__, phymode, chan, freq);
2550         drv->current_freq = freq;
2551         return 0;
2552 }
2553
2554
2555 static int wpa_driver_test_mlme_add_sta(void *priv, const u8 *addr,
2556                                         const u8 *supp_rates,
2557                                         size_t supp_rates_len)
2558 {
2559         wpa_printf(MSG_DEBUG, "%s: addr=" MACSTR, __func__, MAC2STR(addr));
2560         return 0;
2561 }
2562
2563
2564 static int wpa_driver_test_mlme_remove_sta(void *priv, const u8 *addr)
2565 {
2566         wpa_printf(MSG_DEBUG, "%s: addr=" MACSTR, __func__, MAC2STR(addr));
2567         return 0;
2568 }
2569
2570
2571 static int wpa_driver_test_set_ssid(void *priv, const u8 *ssid,
2572                                     size_t ssid_len)
2573 {
2574         wpa_printf(MSG_DEBUG, "%s", __func__);
2575         return 0;
2576 }
2577
2578
2579 static int wpa_driver_test_set_bssid(void *priv, const u8 *bssid)
2580 {
2581         wpa_printf(MSG_DEBUG, "%s: bssid=" MACSTR, __func__, MAC2STR(bssid));
2582         return 0;
2583 }
2584
2585
2586 static void * wpa_driver_test_global_init(void)
2587 {
2588         struct wpa_driver_test_global *global;
2589
2590         global = os_zalloc(sizeof(*global));
2591         return global;
2592 }
2593
2594
2595 static void wpa_driver_test_global_deinit(void *priv)
2596 {
2597         struct wpa_driver_test_global *global = priv;
2598         os_free(global);
2599 }
2600
2601
2602 static struct wpa_interface_info *
2603 wpa_driver_test_get_interfaces(void *global_priv)
2604 {
2605         /* struct wpa_driver_test_global *global = priv; */
2606         struct wpa_interface_info *iface;
2607
2608         iface = os_zalloc(sizeof(*iface));
2609         if (iface == NULL)
2610                 return iface;
2611         iface->ifname = os_strdup("sta0");
2612         iface->desc = os_strdup("test interface 0");
2613         iface->drv_name = "test";
2614         iface->next = os_zalloc(sizeof(*iface));
2615         if (iface->next) {
2616                 iface->next->ifname = os_strdup("sta1");
2617                 iface->next->desc = os_strdup("test interface 1");
2618                 iface->next->drv_name = "test";
2619         }
2620
2621         return iface;
2622 }
2623
2624
2625 static struct hostapd_hw_modes *
2626 wpa_driver_test_get_hw_feature_data(void *priv, u16 *num_modes, u16 *flags)
2627 {
2628         struct hostapd_hw_modes *modes;
2629         size_t i;
2630
2631         *num_modes = 3;
2632         *flags = 0;
2633         modes = os_zalloc(*num_modes * sizeof(struct hostapd_hw_modes));
2634         if (modes == NULL)
2635                 return NULL;
2636         modes[0].mode = HOSTAPD_MODE_IEEE80211G;
2637         modes[0].num_channels = 11;
2638         modes[0].num_rates = 12;
2639         modes[0].channels =
2640                 os_zalloc(11 * sizeof(struct hostapd_channel_data));
2641         modes[0].rates = os_zalloc(modes[0].num_rates * sizeof(int));
2642         if (modes[0].channels == NULL || modes[0].rates == NULL)
2643                 goto fail;
2644         for (i = 0; i < 11; i++) {
2645                 modes[0].channels[i].chan = i + 1;
2646                 modes[0].channels[i].freq = 2412 + 5 * i;
2647                 modes[0].channels[i].flag = 0;
2648         }
2649         modes[0].rates[0] = 10;
2650         modes[0].rates[1] = 20;
2651         modes[0].rates[2] = 55;
2652         modes[0].rates[3] = 110;
2653         modes[0].rates[4] = 60;
2654         modes[0].rates[5] = 90;
2655         modes[0].rates[6] = 120;
2656         modes[0].rates[7] = 180;
2657         modes[0].rates[8] = 240;
2658         modes[0].rates[9] = 360;
2659         modes[0].rates[10] = 480;
2660         modes[0].rates[11] = 540;
2661
2662         modes[1].mode = HOSTAPD_MODE_IEEE80211B;
2663         modes[1].num_channels = 11;
2664         modes[1].num_rates = 4;
2665         modes[1].channels =
2666                 os_zalloc(11 * sizeof(struct hostapd_channel_data));
2667         modes[1].rates = os_zalloc(modes[1].num_rates * sizeof(int));
2668         if (modes[1].channels == NULL || modes[1].rates == NULL)
2669                 goto fail;
2670         for (i = 0; i < 11; i++) {
2671                 modes[1].channels[i].chan = i + 1;
2672                 modes[1].channels[i].freq = 2412 + 5 * i;
2673                 modes[1].channels[i].flag = 0;
2674         }
2675         modes[1].rates[0] = 10;
2676         modes[1].rates[1] = 20;
2677         modes[1].rates[2] = 55;
2678         modes[1].rates[3] = 110;
2679
2680         modes[2].mode = HOSTAPD_MODE_IEEE80211A;
2681         modes[2].num_channels = 1;
2682         modes[2].num_rates = 8;
2683         modes[2].channels = os_zalloc(sizeof(struct hostapd_channel_data));
2684         modes[2].rates = os_zalloc(modes[2].num_rates * sizeof(int));
2685         if (modes[2].channels == NULL || modes[2].rates == NULL)
2686                 goto fail;
2687         modes[2].channels[0].chan = 60;
2688         modes[2].channels[0].freq = 5300;
2689         modes[2].channels[0].flag = 0;
2690         modes[2].rates[0] = 60;
2691         modes[2].rates[1] = 90;
2692         modes[2].rates[2] = 120;
2693         modes[2].rates[3] = 180;
2694         modes[2].rates[4] = 240;
2695         modes[2].rates[5] = 360;
2696         modes[2].rates[6] = 480;
2697         modes[2].rates[7] = 540;
2698
2699         return modes;
2700
2701 fail:
2702         if (modes) {
2703                 for (i = 0; i < *num_modes; i++) {
2704                         os_free(modes[i].channels);
2705                         os_free(modes[i].rates);
2706                 }
2707                 os_free(modes);
2708         }
2709         return NULL;
2710 }
2711
2712
2713 static int wpa_driver_test_set_freq(void *priv,
2714                                     struct hostapd_freq_params *freq)
2715 {
2716         struct test_driver_bss *dbss = priv;
2717         struct wpa_driver_test_data *drv = dbss->drv;
2718         wpa_printf(MSG_DEBUG, "test: set_freq %u MHz", freq->freq);
2719         drv->current_freq = freq->freq;
2720         return 0;
2721 }
2722
2723
2724 static int wpa_driver_test_send_action(void *priv, unsigned int freq,
2725                                        unsigned int wait,
2726                                        const u8 *dst, const u8 *src,
2727                                        const u8 *bssid,
2728                                        const u8 *data, size_t data_len)
2729 {
2730         struct test_driver_bss *dbss = priv;
2731         struct wpa_driver_test_data *drv = dbss->drv;
2732         int ret = -1;
2733         u8 *buf;
2734         struct ieee80211_hdr *hdr;
2735
2736         wpa_printf(MSG_DEBUG, "test: Send Action frame");
2737
2738         if ((drv->remain_on_channel_freq &&
2739              freq != drv->remain_on_channel_freq) ||
2740             (drv->remain_on_channel_freq == 0 &&
2741              freq != (unsigned int) drv->current_freq)) {
2742                 wpa_printf(MSG_DEBUG, "test: Reject Action frame TX on "
2743                            "unexpected channel: freq=%u MHz (current_freq=%u "
2744                            "MHz, remain-on-channel freq=%u MHz)",
2745                            freq, drv->current_freq,
2746                            drv->remain_on_channel_freq);
2747                 return -1;
2748         }
2749
2750         buf = os_zalloc(24 + data_len);
2751         if (buf == NULL)
2752                 return ret;
2753         os_memcpy(buf + 24, data, data_len);
2754         hdr = (struct ieee80211_hdr *) buf;
2755         hdr->frame_control =
2756                 IEEE80211_FC(WLAN_FC_TYPE_MGMT, WLAN_FC_STYPE_ACTION);
2757         os_memcpy(hdr->addr1, dst, ETH_ALEN);
2758         os_memcpy(hdr->addr2, src, ETH_ALEN);
2759         os_memcpy(hdr->addr3, bssid, ETH_ALEN);
2760
2761         ret = wpa_driver_test_send_mlme(priv, buf, 24 + data_len);
2762         os_free(buf);
2763         return ret;
2764 }
2765
2766
2767 #ifdef CONFIG_P2P
2768 static void test_send_action_cb(void *eloop_ctx, void *timeout_ctx)
2769 {
2770         struct wpa_driver_test_data *drv = eloop_ctx;
2771         int res;
2772
2773         if (drv->pending_action_tx == NULL)
2774                 return;
2775
2776         if (drv->off_channel_freq != drv->pending_action_freq) {
2777                 wpa_printf(MSG_DEBUG, "P2P: Pending Action frame TX "
2778                            "waiting for another freq=%u",
2779                            drv->pending_action_freq);
2780                 return;
2781         }
2782         wpa_printf(MSG_DEBUG, "P2P: Sending pending Action frame to "
2783                    MACSTR, MAC2STR(drv->pending_action_dst));
2784         res = wpa_driver_test_send_action(drv, drv->pending_action_freq, 0,
2785                                           drv->pending_action_dst,
2786                                           drv->pending_action_src,
2787                                           drv->pending_action_bssid,
2788                                           wpabuf_head(drv->pending_action_tx),
2789                                           wpabuf_len(drv->pending_action_tx));
2790 }
2791 #endif /* CONFIG_P2P */
2792
2793
2794 static void test_remain_on_channel_timeout(void *eloop_ctx, void *timeout_ctx)
2795 {
2796         struct wpa_driver_test_data *drv = eloop_ctx;
2797         union wpa_event_data data;
2798
2799         wpa_printf(MSG_DEBUG, "test: Remain-on-channel timeout");
2800
2801         os_memset(&data, 0, sizeof(data));
2802         data.remain_on_channel.freq = drv->remain_on_channel_freq;
2803         data.remain_on_channel.duration = drv->remain_on_channel_duration;
2804
2805         if (drv->p2p)
2806                 drv->off_channel_freq = 0;
2807
2808         drv->remain_on_channel_freq = 0;
2809
2810         wpa_supplicant_event(drv->ctx, EVENT_CANCEL_REMAIN_ON_CHANNEL, &data);
2811 }
2812
2813
2814 static int wpa_driver_test_remain_on_channel(void *priv, unsigned int freq,
2815                                              unsigned int duration)
2816 {
2817         struct test_driver_bss *dbss = priv;
2818         struct wpa_driver_test_data *drv = dbss->drv;
2819         union wpa_event_data data;
2820
2821         wpa_printf(MSG_DEBUG, "%s(freq=%u, duration=%u)",
2822                    __func__, freq, duration);
2823         if (drv->remain_on_channel_freq &&
2824             drv->remain_on_channel_freq != freq) {
2825                 wpa_printf(MSG_DEBUG, "test: Refuse concurrent "
2826                            "remain_on_channel request");
2827                 return -1;
2828         }
2829
2830         drv->remain_on_channel_freq = freq;
2831         drv->remain_on_channel_duration = duration;
2832         eloop_cancel_timeout(test_remain_on_channel_timeout, drv, NULL);
2833         eloop_register_timeout(duration / 1000, (duration % 1000) * 1000,
2834                                test_remain_on_channel_timeout, drv, NULL);
2835
2836         os_memset(&data, 0, sizeof(data));
2837         data.remain_on_channel.freq = freq;
2838         data.remain_on_channel.duration = duration;
2839         wpa_supplicant_event(drv->ctx, EVENT_REMAIN_ON_CHANNEL, &data);
2840
2841 #ifdef CONFIG_P2P
2842         if (drv->p2p) {
2843                 drv->off_channel_freq = drv->remain_on_channel_freq;
2844                 test_send_action_cb(drv, NULL);
2845                 if (drv->off_channel_freq == drv->pending_listen_freq) {
2846                         p2p_listen_cb(drv->p2p, drv->pending_listen_freq,
2847                                       drv->pending_listen_duration);
2848                         drv->pending_listen_freq = 0;
2849                 }
2850         }
2851 #endif /* CONFIG_P2P */
2852
2853         return 0;
2854 }
2855
2856
2857 static int wpa_driver_test_cancel_remain_on_channel(void *priv)
2858 {
2859         struct test_driver_bss *dbss = priv;
2860         struct wpa_driver_test_data *drv = dbss->drv;
2861         wpa_printf(MSG_DEBUG, "%s", __func__);
2862         if (!drv->remain_on_channel_freq)
2863                 return -1;
2864         drv->remain_on_channel_freq = 0;
2865         eloop_cancel_timeout(test_remain_on_channel_timeout, drv, NULL);
2866         return 0;
2867 }
2868
2869
2870 static int wpa_driver_test_probe_req_report(void *priv, int report)
2871 {
2872         struct test_driver_bss *dbss = priv;
2873         struct wpa_driver_test_data *drv = dbss->drv;
2874         wpa_printf(MSG_DEBUG, "%s(report=%d)", __func__, report);
2875         drv->probe_req_report = report;
2876         return 0;
2877 }
2878
2879
2880 #ifdef CONFIG_P2P
2881
2882 static int wpa_driver_test_p2p_find(void *priv, unsigned int timeout, int type)
2883 {
2884         struct wpa_driver_test_data *drv = priv;
2885         wpa_printf(MSG_DEBUG, "%s(timeout=%u)", __func__, timeout);
2886         if (!drv->p2p)
2887                 return -1;
2888         return p2p_find(drv->p2p, timeout, type, 0, NULL);
2889 }
2890
2891
2892 static int wpa_driver_test_p2p_stop_find(void *priv)
2893 {
2894         struct wpa_driver_test_data *drv = priv;
2895         wpa_printf(MSG_DEBUG, "%s", __func__);
2896         if (!drv->p2p)
2897                 return -1;
2898         p2p_stop_find(drv->p2p);
2899         return 0;
2900 }
2901
2902
2903 static int wpa_driver_test_p2p_listen(void *priv, unsigned int timeout)
2904 {
2905         struct wpa_driver_test_data *drv = priv;
2906         wpa_printf(MSG_DEBUG, "%s(timeout=%u)", __func__, timeout);
2907         if (!drv->p2p)
2908                 return -1;
2909         return p2p_listen(drv->p2p, timeout);
2910 }
2911
2912
2913 static int wpa_driver_test_p2p_connect(void *priv, const u8 *peer_addr,
2914                                        int wps_method, int go_intent,
2915                                        const u8 *own_interface_addr,
2916                                        unsigned int force_freq,
2917                                        int persistent_group)
2918 {
2919         struct wpa_driver_test_data *drv = priv;
2920         wpa_printf(MSG_DEBUG, "%s(peer_addr=" MACSTR " wps_method=%d "
2921                    "go_intent=%d "
2922                    "own_interface_addr=" MACSTR " force_freq=%u "
2923                    "persistent_group=%d)",
2924                    __func__, MAC2STR(peer_addr), wps_method, go_intent,
2925                    MAC2STR(own_interface_addr), force_freq, persistent_group);
2926         if (!drv->p2p)
2927                 return -1;
2928         return p2p_connect(drv->p2p, peer_addr, wps_method, go_intent,
2929                            own_interface_addr, force_freq, persistent_group);
2930 }
2931
2932
2933 static int wpa_driver_test_wps_success_cb(void *priv, const u8 *peer_addr)
2934 {
2935         struct wpa_driver_test_data *drv = priv;
2936         wpa_printf(MSG_DEBUG, "%s(peer_addr=" MACSTR ")",
2937                    __func__, MAC2STR(peer_addr));
2938         if (!drv->p2p)
2939                 return -1;
2940         p2p_wps_success_cb(drv->p2p, peer_addr);
2941         return 0;
2942 }
2943
2944
2945 static int wpa_driver_test_p2p_group_formation_failed(void *priv)
2946 {
2947         struct wpa_driver_test_data *drv = priv;
2948         wpa_printf(MSG_DEBUG, "%s", __func__);
2949         if (!drv->p2p)
2950                 return -1;
2951         p2p_group_formation_failed(drv->p2p);
2952         return 0;
2953 }
2954
2955
2956 static int wpa_driver_test_p2p_set_params(void *priv,
2957                                           const struct p2p_params *params)
2958 {
2959         struct wpa_driver_test_data *drv = priv;
2960         wpa_printf(MSG_DEBUG, "%s", __func__);
2961         if (!drv->p2p)
2962                 return -1;
2963         if (p2p_set_dev_name(drv->p2p, params->dev_name) < 0 ||
2964             p2p_set_pri_dev_type(drv->p2p, params->pri_dev_type) < 0 ||
2965             p2p_set_sec_dev_types(drv->p2p, params->sec_dev_type,
2966                                   params->num_sec_dev_types) < 0)
2967                 return -1;
2968         return 0;
2969 }
2970
2971
2972 static int test_p2p_scan(void *ctx, enum p2p_scan_type type, int freq,
2973                          unsigned int num_req_dev_types,
2974                          const u8 *req_dev_types)
2975 {
2976         struct wpa_driver_test_data *drv = ctx;
2977         struct wpa_driver_scan_params params;
2978         int ret;
2979         struct wpabuf *wps_ie, *ies;
2980         int social_channels[] = { 2412, 2437, 2462, 0, 0 };
2981
2982         wpa_printf(MSG_DEBUG, "%s(type=%d freq=%d)",
2983                    __func__, type, freq);
2984
2985         os_memset(&params, 0, sizeof(params));
2986
2987         /* P2P Wildcard SSID */
2988         params.num_ssids = 1;
2989         params.ssids[0].ssid = (u8 *) P2P_WILDCARD_SSID;
2990         params.ssids[0].ssid_len = P2P_WILDCARD_SSID_LEN;
2991
2992 #if 0 /* TODO: WPS IE */
2993         wpa_s->wps->dev.p2p = 1;
2994         wps_ie = wps_build_probe_req_ie(0, &wpa_s->wps->dev, wpa_s->wps->uuid,
2995                                         WPS_REQ_ENROLLEE);
2996 #else
2997         wps_ie = wpabuf_alloc(1);
2998 #endif
2999         if (wps_ie == NULL)
3000                 return -1;
3001
3002         ies = wpabuf_alloc(wpabuf_len(wps_ie) + 100);
3003         if (ies == NULL) {
3004                 wpabuf_free(wps_ie);
3005                 return -1;
3006         }
3007         wpabuf_put_buf(ies, wps_ie);
3008         wpabuf_free(wps_ie);
3009
3010         p2p_scan_ie(drv->p2p, ies);
3011
3012         params.extra_ies = wpabuf_head(ies);
3013         params.extra_ies_len = wpabuf_len(ies);
3014
3015         switch (type) {
3016         case P2P_SCAN_SOCIAL:
3017                 params.freqs = social_channels;
3018                 break;
3019         case P2P_SCAN_FULL:
3020                 break;
3021         case P2P_SCAN_SPECIFIC:
3022                 social_channels[0] = freq;
3023                 social_channels[1] = 0;
3024                 params.freqs = social_channels;
3025                 break;
3026         case P2P_SCAN_SOCIAL_PLUS_ONE:
3027                 social_channels[3] = freq;
3028                 params.freqs = social_channels;
3029                 break;
3030         }
3031
3032         drv->pending_p2p_scan = 1;
3033         ret = wpa_driver_test_scan(drv, &params);
3034
3035         wpabuf_free(ies);
3036
3037         return ret;
3038 }
3039
3040
3041 static int test_send_action(void *ctx, unsigned int freq, const u8 *dst,
3042                             const u8 *src, const u8 *bssid, const u8 *buf,
3043                             size_t len, unsigned int wait_time)
3044 {
3045         struct wpa_driver_test_data *drv = ctx;
3046
3047         wpa_printf(MSG_DEBUG, "%s(freq=%u dst=" MACSTR " src=" MACSTR
3048                    " bssid=" MACSTR " len=%d",
3049                    __func__, freq, MAC2STR(dst), MAC2STR(src), MAC2STR(bssid),
3050                    (int) len);
3051         if (freq <= 0) {
3052                 wpa_printf(MSG_WARNING, "P2P: No frequency specified for "
3053                            "action frame TX");
3054                 return -1;
3055         }
3056
3057         if (drv->pending_action_tx) {
3058                 wpa_printf(MSG_DEBUG, "P2P: Dropped pending Action frame TX "
3059                            "to " MACSTR, MAC2STR(drv->pending_action_dst));
3060                 wpabuf_free(drv->pending_action_tx);
3061         }
3062         drv->pending_action_tx = wpabuf_alloc(len);
3063         if (drv->pending_action_tx == NULL)
3064                 return -1;
3065         wpabuf_put_data(drv->pending_action_tx, buf, len);
3066         os_memcpy(drv->pending_action_src, src, ETH_ALEN);
3067         os_memcpy(drv->pending_action_dst, dst, ETH_ALEN);
3068         os_memcpy(drv->pending_action_bssid, bssid, ETH_ALEN);
3069         drv->pending_action_freq = freq;
3070
3071         if (drv->off_channel_freq == freq) {
3072                 /* Already on requested channel; send immediately */
3073                 /* TODO: Would there ever be need to extend the current
3074                  * duration on the channel? */
3075                 eloop_cancel_timeout(test_send_action_cb, drv, NULL);
3076                 eloop_register_timeout(0, 0, test_send_action_cb, drv, NULL);
3077                 return 0;
3078         }
3079
3080         wpa_printf(MSG_DEBUG, "P2P: Schedule Action frame to be transmitted "
3081                    "once the driver gets to the requested channel");
3082         if (wpa_driver_test_remain_on_channel(drv, freq, wait_time) < 0) {
3083                 wpa_printf(MSG_DEBUG, "P2P: Failed to request driver "
3084                            "to remain on channel (%u MHz) for Action "
3085                            "Frame TX", freq);
3086                 return -1;
3087         }
3088
3089         return 0;
3090 }
3091
3092
3093 static void test_send_action_done(void *ctx)
3094 {
3095         wpa_printf(MSG_DEBUG, "%s", __func__);
3096         /* TODO */
3097 }
3098
3099
3100 static void test_go_neg_completed(void *ctx, struct p2p_go_neg_results *res)
3101 {
3102         struct wpa_driver_test_data *drv = ctx;
3103         union wpa_event_data event;
3104         wpa_printf(MSG_DEBUG, "%s", __func__);
3105         os_memset(&event, 0, sizeof(event));
3106         event.p2p_go_neg_completed.res = res;
3107         wpa_supplicant_event(drv->ctx, EVENT_P2P_GO_NEG_COMPLETED, &event);
3108 }
3109
3110
3111 static void test_go_neg_req_rx(void *ctx, const u8 *src, u16 dev_passwd_id)
3112 {
3113         struct wpa_driver_test_data *drv = ctx;
3114         union wpa_event_data event;
3115         wpa_printf(MSG_DEBUG, "%s(src=" MACSTR ")", __func__, MAC2STR(src));
3116         os_memset(&event, 0, sizeof(event));
3117         event.p2p_go_neg_req_rx.src = src;
3118         event.p2p_go_neg_req_rx.dev_passwd_id = dev_passwd_id;
3119         wpa_supplicant_event(drv->ctx, EVENT_P2P_GO_NEG_REQ_RX, &event);
3120 }
3121
3122
3123 static void test_dev_found(void *ctx, const u8 *addr,
3124                            const struct p2p_peer_info *info, int new_device)
3125 {
3126         struct wpa_driver_test_data *drv = ctx;
3127         union wpa_event_data event;
3128         char devtype[WPS_DEV_TYPE_BUFSIZE];
3129         wpa_printf(MSG_DEBUG, "%s(" MACSTR " p2p_dev_addr=" MACSTR
3130                    " pri_dev_type=%s name='%s' config_methods=0x%x "
3131                    "dev_capab=0x%x group_capab=0x%x)",
3132                    __func__, MAC2STR(addr), MAC2STR(info->p2p_device_addr),
3133                    wps_dev_type_bin2str(info->pri_dev_type, devtype,
3134                                         sizeof(devtype)),
3135                    info->device_name, info->config_methods, info->dev_capab,
3136                    info->group_capab);
3137
3138         os_memset(&event, 0, sizeof(event));
3139         event.p2p_dev_found.addr = addr;
3140         event.p2p_dev_found.dev_addr = info->p2p_device_addr;
3141         event.p2p_dev_found.pri_dev_type = info->pri_dev_type;
3142         event.p2p_dev_found.dev_name = info->device_name;
3143         event.p2p_dev_found.config_methods = info->config_methods;
3144         event.p2p_dev_found.dev_capab = info->dev_capab;
3145         event.p2p_dev_found.group_capab = info->group_capab;
3146         wpa_supplicant_event(drv->ctx, EVENT_P2P_DEV_FOUND, &event);
3147 }
3148
3149
3150 static int test_start_listen(void *ctx, unsigned int freq,
3151                              unsigned int duration,
3152                              const struct wpabuf *probe_resp_ie)
3153 {
3154         struct wpa_driver_test_data *drv = ctx;
3155
3156         wpa_printf(MSG_DEBUG, "%s(freq=%u duration=%u)",
3157                    __func__, freq, duration);
3158
3159         if (wpa_driver_test_probe_req_report(drv, 1) < 0)
3160                 return -1;
3161
3162         drv->pending_listen_freq = freq;
3163         drv->pending_listen_duration = duration;
3164
3165         if (wpa_driver_test_remain_on_channel(drv, freq, duration) < 0) {
3166                 drv->pending_listen_freq = 0;
3167                 return -1;
3168         }
3169
3170         return 0;
3171 }
3172
3173
3174 static void test_stop_listen(void *ctx)
3175 {
3176         wpa_printf(MSG_DEBUG, "%s", __func__);
3177         /* TODO */
3178 }
3179
3180
3181 static int test_send_probe_resp(void *ctx, const struct wpabuf *buf)
3182 {
3183         struct wpa_driver_test_data *drv = ctx;
3184         char resp[512], *pos, *end;
3185         int ret;
3186         const struct ieee80211_mgmt *mgmt;
3187         const u8 *ie, *ie_end;
3188
3189         wpa_printf(MSG_DEBUG, "%s", __func__);
3190         wpa_hexdump_buf(MSG_MSGDUMP, "Probe Response", buf);
3191         if (wpabuf_len(buf) < 24)
3192                 return -1;
3193         if (!drv->probe_from) {
3194                 wpa_printf(MSG_DEBUG, "%s: probe_from not set", __func__);
3195                 return -1;
3196         }
3197
3198         pos = resp;
3199         end = resp + sizeof(resp);
3200
3201         mgmt = wpabuf_head(buf);
3202
3203         /* reply: SCANRESP BSSID SSID IEs */
3204         ret = os_snprintf(pos, end - pos, "SCANRESP " MACSTR " ",
3205                           MAC2STR(mgmt->bssid));
3206         if (ret < 0 || ret >= end - pos)
3207                 return -1;
3208         pos += ret;
3209
3210         ie = mgmt->u.probe_resp.variable;
3211         ie_end = wpabuf_head_u8(buf) + wpabuf_len(buf);
3212         if (ie_end - ie < 2 || ie[0] != WLAN_EID_SSID ||
3213             ie + 2 + ie[1] > ie_end)
3214                 return -1;
3215         pos += wpa_snprintf_hex(pos, end - pos, ie + 2, ie[1]);
3216
3217         ret = os_snprintf(pos, end - pos, " ");
3218         if (ret < 0 || ret >= end - pos)
3219                 return -1;
3220         pos += ret;
3221         pos += wpa_snprintf_hex(pos, end - pos, ie, ie_end - ie);
3222
3223         sendto(drv->test_socket, resp, pos - resp, 0,
3224                drv->probe_from, drv->probe_from_len);
3225
3226         return 0;
3227 }
3228
3229
3230 static void test_sd_request(void *ctx, int freq, const u8 *sa, u8 dialog_token,
3231                             u16 update_indic, const u8 *tlvs, size_t tlvs_len)
3232 {
3233         wpa_printf(MSG_DEBUG, "%s", __func__);
3234         /* TODO */
3235 }
3236
3237
3238 static void test_sd_response(void *ctx, const u8 *sa, u16 update_indic,
3239                              const u8 *tlvs, size_t tlvs_len)
3240 {
3241         wpa_printf(MSG_DEBUG, "%s", __func__);
3242         /* TODO */
3243 }
3244
3245
3246 static void test_prov_disc_req(void *ctx, const u8 *peer, u16 config_methods,
3247                                const u8 *dev_addr, const u8 *pri_dev_type,
3248                                const char *dev_name, u16 supp_config_methods,
3249                                u8 dev_capab, u8 group_capab)
3250 {
3251         wpa_printf(MSG_DEBUG, "%s(peer=" MACSTR " config_methods=0x%x)",
3252                    __func__, MAC2STR(peer), config_methods);
3253         /* TODO */
3254 }
3255
3256
3257 static void test_prov_disc_resp(void *ctx, const u8 *peer, u16 config_methods)
3258 {
3259         wpa_printf(MSG_DEBUG, "%s(peer=" MACSTR " config_methods=0x%x)",
3260                    __func__, MAC2STR(peer), config_methods);
3261         /* TODO */
3262 }
3263
3264 #endif /* CONFIG_P2P */
3265
3266
3267 static int wpa_driver_test_init_p2p(struct wpa_driver_test_data *drv)
3268 {
3269 #ifdef CONFIG_P2P
3270         struct p2p_config p2p;
3271         unsigned int r;
3272         int i;
3273
3274         os_memset(&p2p, 0, sizeof(p2p));
3275         p2p.msg_ctx = drv->ctx;
3276         p2p.cb_ctx = drv;
3277         p2p.p2p_scan = test_p2p_scan;
3278         p2p.send_action = test_send_action;
3279         p2p.send_action_done = test_send_action_done;
3280         p2p.go_neg_completed = test_go_neg_completed;
3281         p2p.go_neg_req_rx = test_go_neg_req_rx;
3282         p2p.dev_found = test_dev_found;
3283         p2p.start_listen = test_start_listen;
3284         p2p.stop_listen = test_stop_listen;
3285         p2p.send_probe_resp = test_send_probe_resp;
3286         p2p.sd_request = test_sd_request;
3287         p2p.sd_response = test_sd_response;
3288         p2p.prov_disc_req = test_prov_disc_req;
3289         p2p.prov_disc_resp = test_prov_disc_resp;
3290
3291         os_memcpy(p2p.dev_addr, drv->own_addr, ETH_ALEN);
3292
3293         p2p.reg_class = 12; /* TODO: change depending on location */
3294         /*
3295          * Pick one of the social channels randomly as the listen
3296          * channel.
3297          */
3298         os_get_random((u8 *) &r, sizeof(r));
3299         p2p.channel = 1 + (r % 3) * 5;
3300
3301         /* TODO: change depending on location */
3302         p2p.op_reg_class = 12;
3303         /*
3304          * For initial tests, pick the operation channel randomly.
3305          * TODO: Use scan results (etc.) to select the best channel.
3306          */
3307         p2p.op_channel = 1 + r % 11;
3308
3309         os_memcpy(p2p.country, "US ", 3);
3310
3311         /* FIX: fetch available channels from the driver */
3312         p2p.channels.reg_classes = 1;
3313         p2p.channels.reg_class[0].reg_class = 12; /* US/12 = 2.4 GHz band */
3314         p2p.channels.reg_class[0].channels = 11;
3315         for (i = 0; i < 11; i++)
3316                 p2p.channels.reg_class[0].channel[i] = i + 1;
3317
3318         p2p.max_peers = 100;
3319
3320         drv->p2p = p2p_init(&p2p);
3321         if (drv->p2p == NULL)
3322                 return -1;
3323         return 0;
3324 #else /* CONFIG_P2P */
3325         wpa_printf(MSG_INFO, "driver_test: P2P support not included");
3326         return -1;
3327 #endif /* CONFIG_P2P */
3328 }
3329
3330
3331 const struct wpa_driver_ops wpa_driver_test_ops = {
3332         "test",
3333         "wpa_supplicant test driver",
3334         .hapd_init = test_driver_init,
3335         .hapd_deinit = wpa_driver_test_deinit,
3336         .hapd_send_eapol = test_driver_send_eapol,
3337         .send_mlme = wpa_driver_test_send_mlme,
3338         .set_generic_elem = test_driver_set_generic_elem,
3339         .sta_deauth = test_driver_sta_deauth,
3340         .sta_disassoc = test_driver_sta_disassoc,
3341         .get_hw_feature_data = wpa_driver_test_get_hw_feature_data,
3342         .if_add = test_driver_if_add,
3343         .if_remove = test_driver_if_remove,
3344         .valid_bss_mask = test_driver_valid_bss_mask,
3345         .hapd_set_ssid = test_driver_set_ssid,
3346         .set_privacy = test_driver_set_privacy,
3347         .set_sta_vlan = test_driver_set_sta_vlan,
3348         .sta_add = test_driver_sta_add,
3349         .send_ether = test_driver_send_ether,
3350         .set_ap_wps_ie = test_driver_set_ap_wps_ie,
3351         .get_bssid = wpa_driver_test_get_bssid,
3352         .get_ssid = wpa_driver_test_get_ssid,
3353         .set_key = wpa_driver_test_set_key,
3354         .deinit = wpa_driver_test_deinit,
3355         .set_param = wpa_driver_test_set_param,
3356         .deauthenticate = wpa_driver_test_deauthenticate,
3357         .disassociate = wpa_driver_test_disassociate,
3358         .associate = wpa_driver_test_associate,
3359         .get_capa = wpa_driver_test_get_capa,
3360         .get_mac_addr = wpa_driver_test_get_mac_addr,
3361         .send_eapol = wpa_driver_test_send_eapol,
3362         .mlme_setprotection = wpa_driver_test_mlme_setprotection,
3363         .set_channel = wpa_driver_test_set_channel,
3364         .set_ssid = wpa_driver_test_set_ssid,
3365         .set_bssid = wpa_driver_test_set_bssid,
3366         .mlme_add_sta = wpa_driver_test_mlme_add_sta,
3367         .mlme_remove_sta = wpa_driver_test_mlme_remove_sta,
3368         .get_scan_results2 = wpa_driver_test_get_scan_results2,
3369         .global_init = wpa_driver_test_global_init,
3370         .global_deinit = wpa_driver_test_global_deinit,
3371         .init2 = wpa_driver_test_init2,
3372         .get_interfaces = wpa_driver_test_get_interfaces,
3373         .scan2 = wpa_driver_test_scan,
3374         .set_freq = wpa_driver_test_set_freq,
3375         .send_action = wpa_driver_test_send_action,
3376         .remain_on_channel = wpa_driver_test_remain_on_channel,
3377         .cancel_remain_on_channel = wpa_driver_test_cancel_remain_on_channel,
3378         .probe_req_report = wpa_driver_test_probe_req_report,
3379 #ifdef CONFIG_P2P
3380         .p2p_find = wpa_driver_test_p2p_find,
3381         .p2p_stop_find = wpa_driver_test_p2p_stop_find,
3382         .p2p_listen = wpa_driver_test_p2p_listen,
3383         .p2p_connect = wpa_driver_test_p2p_connect,
3384         .wps_success_cb = wpa_driver_test_wps_success_cb,
3385         .p2p_group_formation_failed =
3386         wpa_driver_test_p2p_group_formation_failed,
3387         .p2p_set_params = wpa_driver_test_p2p_set_params,
3388 #endif /* CONFIG_P2P */
3389 };