src/p2p/p2p.c

   1 /*
   2  * Wi-Fi Direct - P2P module
   3  * Copyright (c) 2009-2010, Atheros Communications
   4  *
   5  * This software may be distributed under the terms of the BSD license.
   6  * See README for more details.
   7  */
   8
   9 #include "includes.h"
  10
  11 #include "common.h"
  12 #include "eloop.h"
  13 #include "common/ieee802_11_defs.h"
  14 #include "common/ieee802_11_common.h"
  15 #include "common/wpa_ctrl.h"
  16 #include "wps/wps_i.h"
  17 #include "p2p_i.h"
  18 #include "p2p.h"
  19
  20
  21 static void p2p_state_timeout(void *eloop_ctx, void *timeout_ctx);
  22 static void p2p_device_free(struct p2p_data *p2p, struct p2p_device *dev);
  23 static void p2p_process_presence_req(struct p2p_data *p2p, const u8 *da,
  24                                      const u8 *sa, const u8 *data, size_t len,
  25                                      int rx_freq);
  26 static void p2p_process_presence_resp(struct p2p_data *p2p, const u8 *da,
  27                                       const u8 *sa, const u8 *data,
  28                                       size_t len);
  29 static void p2p_ext_listen_timeout(void *eloop_ctx, void *timeout_ctx);
  30 static void p2p_scan_timeout(void *eloop_ctx, void *timeout_ctx);
  31
  32
  33 /*
  34  * p2p_scan recovery timeout
  35  *
  36  * Many drivers are using 30 second timeout on scan results. Allow a bit larger
  37  * timeout for this to avoid hitting P2P timeout unnecessarily.
  38  */
  39 #define P2P_SCAN_TIMEOUT 35
  40
  41 /**
  42  * P2P_PEER_EXPIRATION_AGE - Number of seconds after which inactive peer
  43  * entries will be removed
  44  */
  45 #define P2P_PEER_EXPIRATION_AGE 300
  46
  47 #define P2P_PEER_EXPIRATION_INTERVAL (P2P_PEER_EXPIRATION_AGE / 2)
  48
  49 static void p2p_expire_peers(struct p2p_data *p2p)
  50 {
  51         struct p2p_device *dev, *n;
  52         struct os_time now;
  53         size_t i;
  54
  55         os_get_time(&now);
  56         dl_list_for_each_safe(dev, n, &p2p->devices, struct p2p_device, list) {
  57                 if (dev->last_seen.sec + P2P_PEER_EXPIRATION_AGE >= now.sec)
  58                         continue;
  59
  60                 if (p2p->cfg->go_connected &&
  61                     p2p->cfg->go_connected(p2p->cfg->cb_ctx,
  62                                            dev->info.p2p_device_addr)) {
  63                         /*
  64                          * We are connected as a client to a group in which the
  65                          * peer is the GO, so do not expire the peer entry.
  66                          */
  67                         os_get_time(&dev->last_seen);
  68                         continue;
  69                 }
  70
  71                 for (i = 0; i < p2p->num_groups; i++) {
  72                         if (p2p_group_is_client_connected(
  73                                     p2p->groups[i], dev->info.p2p_device_addr))
  74                                 break;
  75                 }
  76                 if (i < p2p->num_groups) {
  77                         /*
  78                          * The peer is connected as a client in a group where
  79                          * we are the GO, so do not expire the peer entry.
  80                          */
  81                         os_get_time(&dev->last_seen);
  82                         continue;
  83                 }
  84
  85                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Expiring old peer "
  86                         "entry " MACSTR, MAC2STR(dev->info.p2p_device_addr));
  87                 dl_list_del(&dev->list);
  88                 p2p_device_free(p2p, dev);
  89         }
  90 }
  91
  92
  93 static void p2p_expiration_timeout(void *eloop_ctx, void *timeout_ctx)
  94 {
  95         struct p2p_data *p2p = eloop_ctx;
  96         p2p_expire_peers(p2p);
  97         eloop_register_timeout(P2P_PEER_EXPIRATION_INTERVAL, 0,
  98                                p2p_expiration_timeout, p2p, NULL);
  99 }
 100
 101
 102 static const char * p2p_state_txt(int state)
 103 {
 104         switch (state) {
 105         case P2P_IDLE:
 106                 return "IDLE";
 107         case P2P_SEARCH:
 108                 return "SEARCH";
 109         case P2P_CONNECT:
 110                 return "CONNECT";
 111         case P2P_CONNECT_LISTEN:
 112                 return "CONNECT_LISTEN";
 113         case P2P_GO_NEG:
 114                 return "GO_NEG";
 115         case P2P_LISTEN_ONLY:
 116                 return "LISTEN_ONLY";
 117         case P2P_WAIT_PEER_CONNECT:
 118                 return "WAIT_PEER_CONNECT";
 119         case P2P_WAIT_PEER_IDLE:
 120                 return "WAIT_PEER_IDLE";
 121         case P2P_SD_DURING_FIND:
 122                 return "SD_DURING_FIND";
 123         case P2P_PROVISIONING:
 124                 return "PROVISIONING";
 125         case P2P_PD_DURING_FIND:
 126                 return "PD_DURING_FIND";
 127         case P2P_INVITE:
 128                 return "INVITE";
 129         case P2P_INVITE_LISTEN:
 130                 return "INVITE_LISTEN";
 131         case P2P_SEARCH_WHEN_READY:
 132                 return "SEARCH_WHEN_READY";
 133         default:
 134                 return "?";
 135         }
 136 }
 137
 138
 139 u16 p2p_get_provisioning_info(struct p2p_data *p2p, const u8 *addr)
 140 {
 141         struct p2p_device *dev = NULL;
 142
 143         if (!addr || !p2p)
 144                 return 0;
 145
 146         dev = p2p_get_device(p2p, addr);
 147         if (dev)
 148                 return dev->wps_prov_info;
 149         else
 150                 return 0;
 151 }
 152
 153
 154 void p2p_clear_provisioning_info(struct p2p_data *p2p, const u8 *addr)
 155 {
 156         struct p2p_device *dev = NULL;
 157
 158         if (!addr || !p2p)
 159                 return;
 160
 161         dev = p2p_get_device(p2p, addr);
 162         if (dev)
 163                 dev->wps_prov_info = 0;
 164 }
 165
 166
 167 void p2p_set_state(struct p2p_data *p2p, int new_state)
 168 {
 169         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: State %s -> %s",
 170                 p2p_state_txt(p2p->state), p2p_state_txt(new_state));
 171         p2p->state = new_state;
 172 }
 173
 174
 175 void p2p_set_timeout(struct p2p_data *p2p, unsigned int sec, unsigned int usec)
 176 {
 177         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 178                 "P2P: Set timeout (state=%s): %u.%06u sec",
 179                 p2p_state_txt(p2p->state), sec, usec);
 180         eloop_cancel_timeout(p2p_state_timeout, p2p, NULL);
 181         eloop_register_timeout(sec, usec, p2p_state_timeout, p2p, NULL);
 182 }
 183
 184
 185 void p2p_clear_timeout(struct p2p_data *p2p)
 186 {
 187         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Clear timeout (state=%s)",
 188                 p2p_state_txt(p2p->state));
 189         eloop_cancel_timeout(p2p_state_timeout, p2p, NULL);
 190 }
 191
 192
 193 void p2p_go_neg_failed(struct p2p_data *p2p, struct p2p_device *peer,
 194                        int status)
 195 {
 196         struct p2p_go_neg_results res;
 197         p2p_clear_timeout(p2p);
 198         p2p_set_state(p2p, P2P_IDLE);
 199         if (p2p->go_neg_peer)
 200                 p2p->go_neg_peer->wps_method = WPS_NOT_READY;
 201         p2p->go_neg_peer = NULL;
 202
 203         os_memset(&res, 0, sizeof(res));
 204         res.status = status;
 205         if (peer) {
 206                 os_memcpy(res.peer_device_addr, peer->info.p2p_device_addr,
 207                           ETH_ALEN);
 208                 os_memcpy(res.peer_interface_addr, peer->intended_addr,
 209                           ETH_ALEN);
 210         }
 211         p2p->cfg->go_neg_completed(p2p->cfg->cb_ctx, &res);
 212 }
 213
 214
 215 static void p2p_listen_in_find(struct p2p_data *p2p)
 216 {
 217         unsigned int r, tu;
 218         int freq;
 219         struct wpabuf *ies;
 220
 221         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 222                 "P2P: Starting short listen state (state=%s)",
 223                 p2p_state_txt(p2p->state));
 224
 225         freq = p2p_channel_to_freq(p2p->cfg->country, p2p->cfg->reg_class,
 226                                    p2p->cfg->channel);
 227         if (freq < 0) {
 228                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 229                         "P2P: Unknown regulatory class/channel");
 230                 return;
 231         }
 232
 233         os_get_random((u8 *) &r, sizeof(r));
 234         tu = (r % ((p2p->max_disc_int - p2p->min_disc_int) + 1) +
 235               p2p->min_disc_int) * 100;
 236
 237         p2p->pending_listen_freq = freq;
 238         p2p->pending_listen_sec = 0;
 239         p2p->pending_listen_usec = 1024 * tu;
 240
 241         ies = p2p_build_probe_resp_ies(p2p);
 242         if (ies == NULL)
 243                 return;
 244
 245         if (p2p->cfg->start_listen(p2p->cfg->cb_ctx, freq, 1024 * tu / 1000,
 246                     ies) < 0) {
 247                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 248                         "P2P: Failed to start listen mode");
 249                 p2p->pending_listen_freq = 0;
 250         }
 251         wpabuf_free(ies);
 252 }
 253
 254
 255 int p2p_listen(struct p2p_data *p2p, unsigned int timeout)
 256 {
 257         int freq;
 258         struct wpabuf *ies;
 259
 260         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 261                 "P2P: Going to listen(only) state");
 262
 263         freq = p2p_channel_to_freq(p2p->cfg->country, p2p->cfg->reg_class,
 264                                    p2p->cfg->channel);
 265         if (freq < 0) {
 266                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 267                         "P2P: Unknown regulatory class/channel");
 268                 return -1;
 269         }
 270
 271         p2p->pending_listen_freq = freq;
 272         p2p->pending_listen_sec = timeout / 1000;
 273         p2p->pending_listen_usec = (timeout % 1000) * 1000;
 274
 275         if (p2p->p2p_scan_running) {
 276                 if (p2p->start_after_scan == P2P_AFTER_SCAN_CONNECT) {
 277                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 278                                 "P2P: p2p_scan running - connect is already "
 279                                 "pending - skip listen");
 280                         return 0;
 281                 }
 282                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 283                         "P2P: p2p_scan running - delay start of listen state");
 284                 p2p->start_after_scan = P2P_AFTER_SCAN_LISTEN;
 285                 return 0;
 286         }
 287
 288         ies = p2p_build_probe_resp_ies(p2p);
 289         if (ies == NULL)
 290                 return -1;
 291
 292         if (p2p->cfg->start_listen(p2p->cfg->cb_ctx, freq, timeout, ies) < 0) {
 293                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 294                         "P2P: Failed to start listen mode");
 295                 p2p->pending_listen_freq = 0;
 296                 wpabuf_free(ies);
 297                 return -1;
 298         }
 299         wpabuf_free(ies);
 300
 301         p2p_set_state(p2p, P2P_LISTEN_ONLY);
 302
 303         return 0;
 304 }
 305
 306
 307 static void p2p_device_clear_reported(struct p2p_data *p2p)
 308 {
 309         struct p2p_device *dev;
 310         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list)
 311                 dev->flags &= ~P2P_DEV_REPORTED;
 312 }
 313
 314
 315 /**
 316  * p2p_get_device - Fetch a peer entry
 317  * @p2p: P2P module context from p2p_init()
 318  * @addr: P2P Device Address of the peer
 319  * Returns: Pointer to the device entry or %NULL if not found
 320  */
 321 struct p2p_device * p2p_get_device(struct p2p_data *p2p, const u8 *addr)
 322 {
 323         struct p2p_device *dev;
 324         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
 325                 if (os_memcmp(dev->info.p2p_device_addr, addr, ETH_ALEN) == 0)
 326                         return dev;
 327         }
 328         return NULL;
 329 }
 330
 331
 332 /**
 333  * p2p_get_device_interface - Fetch a peer entry based on P2P Interface Address
 334  * @p2p: P2P module context from p2p_init()
 335  * @addr: P2P Interface Address of the peer
 336  * Returns: Pointer to the device entry or %NULL if not found
 337  */
 338 struct p2p_device * p2p_get_device_interface(struct p2p_data *p2p,
 339                                              const u8 *addr)
 340 {
 341         struct p2p_device *dev;
 342         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
 343                 if (os_memcmp(dev->interface_addr, addr, ETH_ALEN) == 0)
 344                         return dev;
 345         }
 346         return NULL;
 347 }
 348
 349
 350 /**
 351  * p2p_create_device - Create a peer entry
 352  * @p2p: P2P module context from p2p_init()
 353  * @addr: P2P Device Address of the peer
 354  * Returns: Pointer to the device entry or %NULL on failure
 355  *
 356  * If there is already an entry for the peer, it will be returned instead of
 357  * creating a new one.
 358  */
 359 static struct p2p_device * p2p_create_device(struct p2p_data *p2p,
 360                                              const u8 *addr)
 361 {
 362         struct p2p_device *dev, *oldest = NULL;
 363         size_t count = 0;
 364
 365         dev = p2p_get_device(p2p, addr);
 366         if (dev)
 367                 return dev;
 368
 369         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
 370                 count++;
 371                 if (oldest == NULL ||
 372                     os_time_before(&dev->last_seen, &oldest->last_seen))
 373                         oldest = dev;
 374         }
 375         if (count + 1 > p2p->cfg->max_peers && oldest) {
 376                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 377                         "P2P: Remove oldest peer entry to make room for a new "
 378                         "peer");
 379                 dl_list_del(&oldest->list);
 380                 p2p_device_free(p2p, oldest);
 381         }
 382
 383         dev = os_zalloc(sizeof(*dev));
 384         if (dev == NULL)
 385                 return NULL;
 386         dl_list_add(&p2p->devices, &dev->list);
 387         os_memcpy(dev->info.p2p_device_addr, addr, ETH_ALEN);
 388
 389         return dev;
 390 }
 391
 392
 393 static void p2p_copy_client_info(struct p2p_device *dev,
 394                                  struct p2p_client_info *cli)
 395 {
 396         os_memcpy(dev->info.device_name, cli->dev_name, cli->dev_name_len);
 397         dev->info.device_name[cli->dev_name_len] = '\0';
 398         dev->info.dev_capab = cli->dev_capab;
 399         dev->info.config_methods = cli->config_methods;
 400         os_memcpy(dev->info.pri_dev_type, cli->pri_dev_type, 8);
 401         dev->info.wps_sec_dev_type_list_len = 8 * cli->num_sec_dev_types;
 402         os_memcpy(dev->info.wps_sec_dev_type_list, cli->sec_dev_types,
 403                   dev->info.wps_sec_dev_type_list_len);
 404 }
 405
 406
 407 static int p2p_add_group_clients(struct p2p_data *p2p, const u8 *go_dev_addr,
 408                                  const u8 *go_interface_addr, int freq,
 409                                  const u8 *gi, size_t gi_len)
 410 {
 411         struct p2p_group_info info;
 412         size_t c;
 413         struct p2p_device *dev;
 414
 415         if (gi == NULL)
 416                 return 0;
 417
 418         if (p2p_group_info_parse(gi, gi_len, &info) < 0)
 419                 return -1;
 420
 421         /*
 422          * Clear old data for this group; if the devices are still in the
 423          * group, the information will be restored in the loop following this.
 424          */
 425         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
 426                 if (os_memcmp(dev->member_in_go_iface, go_interface_addr,
 427                               ETH_ALEN) == 0) {
 428                         os_memset(dev->member_in_go_iface, 0, ETH_ALEN);
 429                         os_memset(dev->member_in_go_dev, 0, ETH_ALEN);
 430                 }
 431         }
 432
 433         for (c = 0; c < info.num_clients; c++) {
 434                 struct p2p_client_info *cli = &info.client[c];
 435                 if (os_memcmp(cli->p2p_device_addr, p2p->cfg->dev_addr,
 436                               ETH_ALEN) == 0)
 437                         continue; /* ignore our own entry */
 438                 dev = p2p_get_device(p2p, cli->p2p_device_addr);
 439                 if (dev) {
 440                         /*
 441                          * Update information only if we have not received this
 442                          * directly from the client.
 443                          */
 444                         if (dev->flags & (P2P_DEV_GROUP_CLIENT_ONLY |
 445                                           P2P_DEV_PROBE_REQ_ONLY))
 446                                 p2p_copy_client_info(dev, cli);
 447                         if (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
 448                                 dev->flags &= ~P2P_DEV_PROBE_REQ_ONLY;
 449                         }
 450                 } else {
 451                         dev = p2p_create_device(p2p, cli->p2p_device_addr);
 452                         if (dev == NULL)
 453                                 continue;
 454                         dev->flags |= P2P_DEV_GROUP_CLIENT_ONLY;
 455                         p2p_copy_client_info(dev, cli);
 456                         dev->oper_freq = freq;
 457                         p2p->cfg->dev_found(p2p->cfg->cb_ctx,
 458                                             dev->info.p2p_device_addr,
 459                                             &dev->info, 1);
 460                         dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
 461                 }
 462
 463                 os_memcpy(dev->interface_addr, cli->p2p_interface_addr,
 464                           ETH_ALEN);
 465                 os_get_time(&dev->last_seen);
 466                 os_memcpy(dev->member_in_go_dev, go_dev_addr, ETH_ALEN);
 467                 os_memcpy(dev->member_in_go_iface, go_interface_addr,
 468                           ETH_ALEN);
 469         }
 470
 471         return 0;
 472 }
 473
 474
 475 static void p2p_copy_wps_info(struct p2p_device *dev, int probe_req,
 476                               const struct p2p_message *msg)
 477 {
 478         os_memcpy(dev->info.device_name, msg->device_name,
 479                   sizeof(dev->info.device_name));
 480
 481         if (msg->manufacturer &&
 482             msg->manufacturer_len < sizeof(dev->info.manufacturer)) {
 483                 os_memset(dev->info.manufacturer, 0,
 484                           sizeof(dev->info.manufacturer));
 485                 os_memcpy(dev->info.manufacturer, msg->manufacturer,
 486                           msg->manufacturer_len);
 487         }
 488
 489         if (msg->model_name &&
 490             msg->model_name_len < sizeof(dev->info.model_name)) {
 491                 os_memset(dev->info.model_name, 0,
 492                           sizeof(dev->info.model_name));
 493                 os_memcpy(dev->info.model_name, msg->model_name,
 494                           msg->model_name_len);
 495         }
 496
 497         if (msg->model_number &&
 498             msg->model_number_len < sizeof(dev->info.model_number)) {
 499                 os_memset(dev->info.model_number, 0,
 500                           sizeof(dev->info.model_number));
 501                 os_memcpy(dev->info.model_number, msg->model_number,
 502                           msg->model_number_len);
 503         }
 504
 505         if (msg->serial_number &&
 506             msg->serial_number_len < sizeof(dev->info.serial_number)) {
 507                 os_memset(dev->info.serial_number, 0,
 508                           sizeof(dev->info.serial_number));
 509                 os_memcpy(dev->info.serial_number, msg->serial_number,
 510                           msg->serial_number_len);
 511         }
 512
 513         if (msg->pri_dev_type)
 514                 os_memcpy(dev->info.pri_dev_type, msg->pri_dev_type,
 515                           sizeof(dev->info.pri_dev_type));
 516         else if (msg->wps_pri_dev_type)
 517                 os_memcpy(dev->info.pri_dev_type, msg->wps_pri_dev_type,
 518                           sizeof(dev->info.pri_dev_type));
 519
 520         if (msg->wps_sec_dev_type_list) {
 521                 os_memcpy(dev->info.wps_sec_dev_type_list,
 522                           msg->wps_sec_dev_type_list,
 523                           msg->wps_sec_dev_type_list_len);
 524                 dev->info.wps_sec_dev_type_list_len =
 525                         msg->wps_sec_dev_type_list_len;
 526         }
 527
 528         if (msg->capability) {
 529                 dev->info.dev_capab = msg->capability[0];
 530                 dev->info.group_capab = msg->capability[1];
 531         }
 532
 533         if (msg->ext_listen_timing) {
 534                 dev->ext_listen_period = WPA_GET_LE16(msg->ext_listen_timing);
 535                 dev->ext_listen_interval =
 536                         WPA_GET_LE16(msg->ext_listen_timing + 2);
 537         }
 538
 539         if (!probe_req) {
 540                 dev->info.config_methods = msg->config_methods ?
 541                         msg->config_methods : msg->wps_config_methods;
 542         }
 543 }
 544
 545
 546 /**
 547  * p2p_add_device - Add peer entries based on scan results or P2P frames
 548  * @p2p: P2P module context from p2p_init()
 549  * @addr: Source address of Beacon or Probe Response frame (may be either
 550  *      P2P Device Address or P2P Interface Address)
 551  * @level: Signal level (signal strength of the received frame from the peer)
 552  * @freq: Frequency on which the Beacon or Probe Response frame was received
 553  * @ies: IEs from the Beacon or Probe Response frame
 554  * @ies_len: Length of ies buffer in octets
 555  * @scan_res: Whether this was based on scan results
 556  * Returns: 0 on success, -1 on failure
 557  *
 558  * If the scan result is for a GO, the clients in the group will also be added
 559  * to the peer table. This function can also be used with some other frames
 560  * like Provision Discovery Request that contains P2P Capability and P2P Device
 561  * Info attributes.
 562  */
 563 int p2p_add_device(struct p2p_data *p2p, const u8 *addr, int freq, int level,
 564                    const u8 *ies, size_t ies_len, int scan_res)
 565 {
 566         struct p2p_device *dev;
 567         struct p2p_message msg;
 568         const u8 *p2p_dev_addr;
 569         int i;
 570
 571         os_memset(&msg, 0, sizeof(msg));
 572         if (p2p_parse_ies(ies, ies_len, &msg)) {
 573                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 574                         "P2P: Failed to parse P2P IE for a device entry");
 575                 p2p_parse_free(&msg);
 576                 return -1;
 577         }
 578
 579         if (msg.p2p_device_addr)
 580                 p2p_dev_addr = msg.p2p_device_addr;
 581         else if (msg.device_id)
 582                 p2p_dev_addr = msg.device_id;
 583         else {
 584                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 585                         "P2P: Ignore scan data without P2P Device Info or "
 586                         "P2P Device Id");
 587                 p2p_parse_free(&msg);
 588                 return -1;
 589         }
 590
 591         if (!is_zero_ether_addr(p2p->peer_filter) &&
 592             os_memcmp(p2p_dev_addr, p2p->peer_filter, ETH_ALEN) != 0) {
 593                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Do not add peer "
 594                         "filter for " MACSTR " due to peer filter",
 595                         MAC2STR(p2p_dev_addr));
 596                 return 0;
 597         }
 598
 599         dev = p2p_create_device(p2p, p2p_dev_addr);
 600         if (dev == NULL) {
 601                 p2p_parse_free(&msg);
 602                 return -1;
 603         }
 604         os_get_time(&dev->last_seen);
 605         dev->flags &= ~(P2P_DEV_PROBE_REQ_ONLY | P2P_DEV_GROUP_CLIENT_ONLY);
 606
 607         if (os_memcmp(addr, p2p_dev_addr, ETH_ALEN) != 0)
 608                 os_memcpy(dev->interface_addr, addr, ETH_ALEN);
 609         if (msg.ssid &&
 610             (msg.ssid[1] != P2P_WILDCARD_SSID_LEN ||
 611              os_memcmp(msg.ssid + 2, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN)
 612              != 0)) {
 613                 os_memcpy(dev->oper_ssid, msg.ssid + 2, msg.ssid[1]);
 614                 dev->oper_ssid_len = msg.ssid[1];
 615         }
 616
 617         if (freq >= 2412 && freq <= 2484 && msg.ds_params &&
 618             *msg.ds_params >= 1 && *msg.ds_params <= 14) {
 619                 int ds_freq;
 620                 if (*msg.ds_params == 14)
 621                         ds_freq = 2484;
 622                 else
 623                         ds_freq = 2407 + *msg.ds_params * 5;
 624                 if (freq != ds_freq) {
 625                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 626                                 "P2P: Update Listen frequency based on DS "
 627                                 "Parameter Set IE: %d -> %d MHz",
 628                                 freq, ds_freq);
 629                         freq = ds_freq;
 630                 }
 631         }
 632
 633         if (dev->listen_freq && dev->listen_freq != freq && scan_res) {
 634                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 635                         "P2P: Update Listen frequency based on scan "
 636                         "results (" MACSTR " %d -> %d MHz (DS param %d)",
 637                         MAC2STR(dev->info.p2p_device_addr), dev->listen_freq,
 638                         freq, msg.ds_params ? *msg.ds_params : -1);
 639         }
 640         if (scan_res) {
 641                 dev->listen_freq = freq;
 642                 if (msg.group_info)
 643                         dev->oper_freq = freq;
 644         }
 645         dev->info.level = level;
 646
 647         p2p_copy_wps_info(dev, 0, &msg);
 648
 649         for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
 650                 wpabuf_free(dev->info.wps_vendor_ext[i]);
 651                 dev->info.wps_vendor_ext[i] = NULL;
 652         }
 653
 654         for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
 655                 if (msg.wps_vendor_ext[i] == NULL)
 656                         break;
 657                 dev->info.wps_vendor_ext[i] = wpabuf_alloc_copy(
 658                         msg.wps_vendor_ext[i], msg.wps_vendor_ext_len[i]);
 659                 if (dev->info.wps_vendor_ext[i] == NULL)
 660                         break;
 661         }
 662
 663         if (scan_res) {
 664                 p2p_add_group_clients(p2p, p2p_dev_addr, addr, freq,
 665                                       msg.group_info, msg.group_info_len);
 666         }
 667
 668         p2p_parse_free(&msg);
 669
 670         if (p2p_pending_sd_req(p2p, dev))
 671                 dev->flags |= P2P_DEV_SD_SCHEDULE;
 672
 673         if (dev->flags & P2P_DEV_REPORTED)
 674                 return 0;
 675
 676         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 677                 "P2P: Peer found with Listen frequency %d MHz", freq);
 678         if (dev->flags & P2P_DEV_USER_REJECTED) {
 679                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 680                         "P2P: Do not report rejected device");
 681                 return 0;
 682         }
 683
 684         p2p->cfg->dev_found(p2p->cfg->cb_ctx, addr, &dev->info,
 685                             !(dev->flags & P2P_DEV_REPORTED_ONCE));
 686         dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
 687
 688         return 0;
 689 }
 690
 691
 692 static void p2p_device_free(struct p2p_data *p2p, struct p2p_device *dev)
 693 {
 694         int i;
 695
 696         if (p2p->go_neg_peer == dev) {
 697                 /*
 698                  * If GO Negotiation is in progress, report that it has failed.
 699                  */
 700                 p2p_go_neg_failed(p2p, dev, -1);
 701                 p2p->go_neg_peer = NULL;
 702         }
 703         if (p2p->invite_peer == dev)
 704                 p2p->invite_peer = NULL;
 705         if (p2p->sd_peer == dev)
 706                 p2p->sd_peer = NULL;
 707         if (p2p->pending_client_disc_go == dev)
 708                 p2p->pending_client_disc_go = NULL;
 709
 710         /* dev_lost() device, but only if it was previously dev_found() */
 711         if (dev->flags & P2P_DEV_REPORTED_ONCE)
 712                 p2p->cfg->dev_lost(p2p->cfg->cb_ctx,
 713                                    dev->info.p2p_device_addr);
 714
 715         for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
 716                 wpabuf_free(dev->info.wps_vendor_ext[i]);
 717                 dev->info.wps_vendor_ext[i] = NULL;
 718         }
 719
 720         os_free(dev);
 721 }
 722
 723
 724 static int p2p_get_next_prog_freq(struct p2p_data *p2p)
 725 {
 726         struct p2p_channels *c;
 727         struct p2p_reg_class *cla;
 728         size_t cl, ch;
 729         int found = 0;
 730         u8 reg_class;
 731         u8 channel;
 732         int freq;
 733
 734         c = &p2p->cfg->channels;
 735         for (cl = 0; cl < c->reg_classes; cl++) {
 736                 cla = &c->reg_class[cl];
 737                 if (cla->reg_class != p2p->last_prog_scan_class)
 738                         continue;
 739                 for (ch = 0; ch < cla->channels; ch++) {
 740                         if (cla->channel[ch] == p2p->last_prog_scan_chan) {
 741                                 found = 1;
 742                                 break;
 743                         }
 744                 }
 745                 if (found)
 746                         break;
 747         }
 748
 749         if (!found) {
 750                 /* Start from beginning */
 751                 reg_class = c->reg_class[0].reg_class;
 752                 channel = c->reg_class[0].channel[0];
 753         } else {
 754                 /* Pick the next channel */
 755                 ch++;
 756                 if (ch == cla->channels) {
 757                         cl++;
 758                         if (cl == c->reg_classes)
 759                                 cl = 0;
 760                         ch = 0;
 761                 }
 762                 reg_class = c->reg_class[cl].reg_class;
 763                 channel = c->reg_class[cl].channel[ch];
 764         }
 765
 766         freq = p2p_channel_to_freq(p2p->cfg->country, reg_class, channel);
 767         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Next progressive search "
 768                 "channel: reg_class %u channel %u -> %d MHz",
 769                 reg_class, channel, freq);
 770         p2p->last_prog_scan_class = reg_class;
 771         p2p->last_prog_scan_chan = channel;
 772
 773         if (freq == 2412 || freq == 2437 || freq == 2462)
 774                 return 0; /* No need to add social channels */
 775         return freq;
 776 }
 777
 778
 779 static void p2p_search(struct p2p_data *p2p)
 780 {
 781         int freq = 0;
 782         enum p2p_scan_type type;
 783         u16 pw_id = DEV_PW_DEFAULT;
 784
 785         if (p2p->drv_in_listen) {
 786                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Driver is still "
 787                         "in Listen state - wait for it to end before "
 788                         "continuing");
 789                 return;
 790         }
 791         p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
 792
 793         if (p2p->go_neg_peer) {
 794                 /*
 795                  * Only scan the known listen frequency of the peer
 796                  * during GO Negotiation start.
 797                  */
 798                 freq = p2p->go_neg_peer->listen_freq;
 799                 if (freq <= 0)
 800                         freq = p2p->go_neg_peer->oper_freq;
 801                 type = P2P_SCAN_SPECIFIC;
 802                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Starting search "
 803                         "for freq %u (GO Neg)", freq);
 804
 805                 /* Advertise immediate availability of WPS credential */
 806                 pw_id = p2p_wps_method_pw_id(p2p->go_neg_peer->wps_method);
 807         } else if (p2p->invite_peer) {
 808                 /*
 809                  * Only scan the known listen frequency of the peer
 810                  * during Invite start.
 811                  */
 812                 freq = p2p->invite_peer->listen_freq;
 813                 if (freq <= 0)
 814                         freq = p2p->invite_peer->oper_freq;
 815                 type = P2P_SCAN_SPECIFIC;
 816                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Starting search "
 817                         "for freq %u (Invite)", freq);
 818         } else if (p2p->find_type == P2P_FIND_PROGRESSIVE &&
 819                    (freq = p2p_get_next_prog_freq(p2p)) > 0) {
 820                 type = P2P_SCAN_SOCIAL_PLUS_ONE;
 821                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Starting search "
 822                         "(+ freq %u)", freq);
 823         } else {
 824                 type = P2P_SCAN_SOCIAL;
 825                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Starting search");
 826         }
 827
 828         if (p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, type, freq,
 829                                p2p->num_req_dev_types, p2p->req_dev_types,
 830                                p2p->find_dev_id, pw_id)) {
 831                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
 832                         "P2P: Scan request failed");
 833                 p2p_continue_find(p2p);
 834         } else {
 835                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Running p2p_scan");
 836                 p2p->p2p_scan_running = 1;
 837                 eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
 838                 eloop_register_timeout(P2P_SCAN_TIMEOUT, 0, p2p_scan_timeout,
 839                                        p2p, NULL);
 840         }
 841 }
 842
 843
 844 static void p2p_find_timeout(void *eloop_ctx, void *timeout_ctx)
 845 {
 846         struct p2p_data *p2p = eloop_ctx;
 847         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Find timeout -> stop");
 848         p2p_stop_find(p2p);
 849 }
 850
 851
 852 static int p2p_run_after_scan(struct p2p_data *p2p)
 853 {
 854         struct p2p_device *dev;
 855         enum p2p_after_scan op;
 856
 857         if (p2p->after_scan_tx) {
 858                 /* TODO: schedule p2p_run_after_scan to be called from TX
 859                  * status callback(?) */
 860                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Send pending "
 861                         "Action frame at p2p_scan completion");
 862                 p2p->cfg->send_action(p2p->cfg->cb_ctx,
 863                                       p2p->after_scan_tx->freq,
 864                                       p2p->after_scan_tx->dst,
 865                                       p2p->after_scan_tx->src,
 866                                       p2p->after_scan_tx->bssid,
 867                                       (u8 *) (p2p->after_scan_tx + 1),
 868                                       p2p->after_scan_tx->len,
 869                                       p2p->after_scan_tx->wait_time);
 870                 os_free(p2p->after_scan_tx);
 871                 p2p->after_scan_tx = NULL;
 872                 return 1;
 873         }
 874
 875         op = p2p->start_after_scan;
 876         p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
 877         switch (op) {
 878         case P2P_AFTER_SCAN_NOTHING:
 879                 break;
 880         case P2P_AFTER_SCAN_LISTEN:
 881                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Start previously "
 882                         "requested Listen state");
 883                 p2p_listen(p2p, p2p->pending_listen_sec * 1000 +
 884                            p2p->pending_listen_usec / 1000);
 885                 return 1;
 886         case P2P_AFTER_SCAN_CONNECT:
 887                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Start previously "
 888                         "requested connect with " MACSTR,
 889                         MAC2STR(p2p->after_scan_peer));
 890                 dev = p2p_get_device(p2p, p2p->after_scan_peer);
 891                 if (dev == NULL) {
 892                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Peer not "
 893                                 "known anymore");
 894                         break;
 895                 }
 896                 p2p_connect_send(p2p, dev);
 897                 return 1;
 898         }
 899
 900         return 0;
 901 }
 902
 903
 904 static void p2p_scan_timeout(void *eloop_ctx, void *timeout_ctx)
 905 {
 906         struct p2p_data *p2p = eloop_ctx;
 907         int running;
 908         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: p2p_scan timeout "
 909                 "(running=%d)", p2p->p2p_scan_running);
 910         running = p2p->p2p_scan_running;
 911         /* Make sure we recover from missed scan results callback */
 912         p2p->p2p_scan_running = 0;
 913
 914         if (running)
 915                 p2p_run_after_scan(p2p);
 916 }
 917
 918
 919 static void p2p_free_req_dev_types(struct p2p_data *p2p)
 920 {
 921         p2p->num_req_dev_types = 0;
 922         os_free(p2p->req_dev_types);
 923         p2p->req_dev_types = NULL;
 924 }
 925
 926
 927 int p2p_find(struct p2p_data *p2p, unsigned int timeout,
 928              enum p2p_discovery_type type,
 929              unsigned int num_req_dev_types, const u8 *req_dev_types,
 930              const u8 *dev_id)
 931 {
 932         int res;
 933
 934         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Starting find (type=%d)",
 935                 type);
 936         if (p2p->p2p_scan_running) {
 937                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: p2p_scan is "
 938                         "already running");
 939         }
 940
 941         p2p_free_req_dev_types(p2p);
 942         if (req_dev_types && num_req_dev_types) {
 943                 p2p->req_dev_types = os_malloc(num_req_dev_types *
 944                                                WPS_DEV_TYPE_LEN);
 945                 if (p2p->req_dev_types == NULL)
 946                         return -1;
 947                 os_memcpy(p2p->req_dev_types, req_dev_types,
 948                           num_req_dev_types * WPS_DEV_TYPE_LEN);
 949                 p2p->num_req_dev_types = num_req_dev_types;
 950         }
 951
 952         if (dev_id) {
 953                 os_memcpy(p2p->find_dev_id_buf, dev_id, ETH_ALEN);
 954                 p2p->find_dev_id = p2p->find_dev_id_buf;
 955         } else
 956                 p2p->find_dev_id = NULL;
 957
 958         p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
 959         p2p_clear_timeout(p2p);
 960         p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
 961         p2p->find_type = type;
 962         p2p_device_clear_reported(p2p);
 963         p2p_set_state(p2p, P2P_SEARCH);
 964         eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
 965         p2p->last_p2p_find_timeout = timeout;
 966         if (timeout)
 967                 eloop_register_timeout(timeout, 0, p2p_find_timeout,
 968                                        p2p, NULL);
 969         switch (type) {
 970         case P2P_FIND_START_WITH_FULL:
 971         case P2P_FIND_PROGRESSIVE:
 972                 res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, P2P_SCAN_FULL, 0,
 973                                          p2p->num_req_dev_types,
 974                                          p2p->req_dev_types, dev_id,
 975                                          DEV_PW_DEFAULT);
 976                 break;
 977         case P2P_FIND_ONLY_SOCIAL:
 978                 res = p2p->cfg->p2p_scan(p2p->cfg->cb_ctx, P2P_SCAN_SOCIAL, 0,
 979                                          p2p->num_req_dev_types,
 980                                          p2p->req_dev_types, dev_id,
 981                                          DEV_PW_DEFAULT);
 982                 break;
 983         default:
 984                 return -1;
 985         }
 986
 987         if (res == 0) {
 988                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Running p2p_scan");
 989                 p2p->p2p_scan_running = 1;
 990                 eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
 991                 eloop_register_timeout(P2P_SCAN_TIMEOUT, 0, p2p_scan_timeout,
 992                                        p2p, NULL);
 993         } else if (res == 1) {
 994                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Could not start "
 995                         "p2p_scan at this point - will try again after "
 996                         "previous scan completes");
 997                 res = 0;
 998                 p2p_set_state(p2p, P2P_SEARCH_WHEN_READY);
 999                 eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1000         } else {
1001                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Failed to start "
1002                         "p2p_scan");
1003                 p2p_set_state(p2p, P2P_IDLE);
1004                 eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1005         }
1006
1007         return res;
1008 }
1009
1010
1011 int p2p_other_scan_completed(struct p2p_data *p2p)
1012 {
1013         if (p2p->state != P2P_SEARCH_WHEN_READY)
1014                 return 0;
1015         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Starting pending P2P find "
1016                 "now that previous scan was completed");
1017         if (p2p_find(p2p, p2p->last_p2p_find_timeout, p2p->find_type,
1018                      p2p->num_req_dev_types, p2p->req_dev_types,
1019                      p2p->find_dev_id) < 0)
1020                 return 0;
1021         return 1;
1022 }
1023
1024
1025 void p2p_stop_find_for_freq(struct p2p_data *p2p, int freq)
1026 {
1027         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Stopping find");
1028         eloop_cancel_timeout(p2p_find_timeout, p2p, NULL);
1029         p2p_clear_timeout(p2p);
1030         if (p2p->state == P2P_SEARCH)
1031                 wpa_msg(p2p->cfg->msg_ctx, MSG_INFO, P2P_EVENT_FIND_STOPPED);
1032         p2p_set_state(p2p, P2P_IDLE);
1033         p2p_free_req_dev_types(p2p);
1034         p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1035         p2p->go_neg_peer = NULL;
1036         p2p->sd_peer = NULL;
1037         p2p->invite_peer = NULL;
1038         p2p_stop_listen_for_freq(p2p, freq);
1039 }
1040
1041
1042 void p2p_stop_listen_for_freq(struct p2p_data *p2p, int freq)
1043 {
1044         if (freq > 0 && p2p->drv_in_listen == freq && p2p->in_listen) {
1045                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Skip stop_listen "
1046                         "since we are on correct channel for response");
1047                 return;
1048         }
1049         if (p2p->in_listen) {
1050                 p2p->in_listen = 0;
1051                 p2p_clear_timeout(p2p);
1052         }
1053         if (p2p->drv_in_listen) {
1054                 /*
1055                  * The driver may not deliver callback to p2p_listen_end()
1056                  * when the operation gets canceled, so clear the internal
1057                  * variable that is tracking driver state.
1058                  */
1059                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Clear "
1060                         "drv_in_listen (%d)", p2p->drv_in_listen);
1061                 p2p->drv_in_listen = 0;
1062         }
1063         p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1064 }
1065
1066
1067 void p2p_stop_find(struct p2p_data *p2p)
1068 {
1069         p2p_stop_find_for_freq(p2p, 0);
1070 }
1071
1072
1073 static int p2p_prepare_channel(struct p2p_data *p2p, unsigned int force_freq)
1074 {
1075         if (force_freq) {
1076                 u8 op_reg_class, op_channel;
1077                 if (p2p_freq_to_channel(p2p->cfg->country, force_freq,
1078                                         &op_reg_class, &op_channel) < 0) {
1079                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1080                                 "P2P: Unsupported frequency %u MHz",
1081                                 force_freq);
1082                         return -1;
1083                 }
1084                 if (!p2p_channels_includes(&p2p->cfg->channels, op_reg_class,
1085                                            op_channel)) {
1086                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1087                                 "P2P: Frequency %u MHz (oper_class %u "
1088                                 "channel %u) not allowed for P2P",
1089                                 force_freq, op_reg_class, op_channel);
1090                         return -1;
1091                 }
1092                 p2p->op_reg_class = op_reg_class;
1093                 p2p->op_channel = op_channel;
1094                 p2p->channels.reg_classes = 1;
1095                 p2p->channels.reg_class[0].channels = 1;
1096                 p2p->channels.reg_class[0].reg_class = p2p->op_reg_class;
1097                 p2p->channels.reg_class[0].channel[0] = p2p->op_channel;
1098         } else {
1099                 u8 op_reg_class, op_channel;
1100
1101                 if (!p2p->cfg->cfg_op_channel && p2p->best_freq_overall > 0 &&
1102                     p2p_supported_freq(p2p, p2p->best_freq_overall) &&
1103                     p2p_freq_to_channel(p2p->cfg->country,
1104                                         p2p->best_freq_overall,
1105                                         &op_reg_class, &op_channel) == 0) {
1106                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1107                                 "P2P: Select best overall channel as "
1108                                 "operating channel preference");
1109                         p2p->op_reg_class = op_reg_class;
1110                         p2p->op_channel = op_channel;
1111                 } else if (!p2p->cfg->cfg_op_channel && p2p->best_freq_5 > 0 &&
1112                            p2p_supported_freq(p2p, p2p->best_freq_5) &&
1113                            p2p_freq_to_channel(p2p->cfg->country,
1114                                                p2p->best_freq_5,
1115                                                &op_reg_class, &op_channel) ==
1116                            0) {
1117                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1118                                 "P2P: Select best 5 GHz channel as "
1119                                 "operating channel preference");
1120                         p2p->op_reg_class = op_reg_class;
1121                         p2p->op_channel = op_channel;
1122                 } else if (!p2p->cfg->cfg_op_channel &&
1123                            p2p->best_freq_24 > 0 &&
1124                            p2p_supported_freq(p2p, p2p->best_freq_24) &&
1125                            p2p_freq_to_channel(p2p->cfg->country,
1126                                                p2p->best_freq_24,
1127                                                &op_reg_class, &op_channel) ==
1128                            0) {
1129                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1130                                 "P2P: Select best 2.4 GHz channel as "
1131                                 "operating channel preference");
1132                         p2p->op_reg_class = op_reg_class;
1133                         p2p->op_channel = op_channel;
1134                 } else {
1135                         p2p->op_reg_class = p2p->cfg->op_reg_class;
1136                         p2p->op_channel = p2p->cfg->op_channel;
1137                 }
1138
1139                 os_memcpy(&p2p->channels, &p2p->cfg->channels,
1140                           sizeof(struct p2p_channels));
1141         }
1142         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1143                 "P2P: Own preference for operation channel: "
1144                 "Operating Class %u Channel %u%s",
1145                 p2p->op_reg_class, p2p->op_channel,
1146                 force_freq ? " (forced)" : "");
1147
1148         return 0;
1149 }
1150
1151
1152 static void p2p_set_dev_persistent(struct p2p_device *dev,
1153                                    int persistent_group)
1154 {
1155         switch (persistent_group) {
1156         case 0:
1157                 dev->flags &= ~(P2P_DEV_PREFER_PERSISTENT_GROUP |
1158                                 P2P_DEV_PREFER_PERSISTENT_RECONN);
1159                 break;
1160         case 1:
1161                 dev->flags |= P2P_DEV_PREFER_PERSISTENT_GROUP;
1162                 dev->flags &= ~P2P_DEV_PREFER_PERSISTENT_RECONN;
1163                 break;
1164         case 2:
1165                 dev->flags |= P2P_DEV_PREFER_PERSISTENT_GROUP |
1166                         P2P_DEV_PREFER_PERSISTENT_RECONN;
1167                 break;
1168         }
1169 }
1170
1171
1172 int p2p_connect(struct p2p_data *p2p, const u8 *peer_addr,
1173                 enum p2p_wps_method wps_method,
1174                 int go_intent, const u8 *own_interface_addr,
1175                 unsigned int force_freq, int persistent_group,
1176                 const u8 *force_ssid, size_t force_ssid_len)
1177 {
1178         struct p2p_device *dev;
1179
1180         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1181                 "P2P: Request to start group negotiation - peer=" MACSTR
1182                 "  GO Intent=%d  Intended Interface Address=" MACSTR
1183                 " wps_method=%d persistent_group=%d",
1184                 MAC2STR(peer_addr), go_intent, MAC2STR(own_interface_addr),
1185                 wps_method, persistent_group);
1186
1187         if (p2p_prepare_channel(p2p, force_freq) < 0)
1188                 return -1;
1189
1190         dev = p2p_get_device(p2p, peer_addr);
1191         if (dev == NULL || (dev->flags & P2P_DEV_PROBE_REQ_ONLY)) {
1192                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1193                         "P2P: Cannot connect to unknown P2P Device " MACSTR,
1194                         MAC2STR(peer_addr));
1195                 return -1;
1196         }
1197
1198         if (dev->flags & P2P_DEV_GROUP_CLIENT_ONLY) {
1199                 if (!(dev->info.dev_capab &
1200                       P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY)) {
1201                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1202                                 "P2P: Cannot connect to P2P Device " MACSTR
1203                                 " that is in a group and is not discoverable",
1204                                 MAC2STR(peer_addr));
1205                         return -1;
1206                 }
1207                 if (dev->oper_freq <= 0) {
1208                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1209                                 "P2P: Cannot connect to P2P Device " MACSTR
1210                                 " with incomplete information",
1211                                 MAC2STR(peer_addr));
1212                         return -1;
1213                 }
1214
1215                 /*
1216                  * First, try to connect directly. If the peer does not
1217                  * acknowledge frames, assume it is sleeping and use device
1218                  * discoverability via the GO at that point.
1219                  */
1220         }
1221
1222         p2p->ssid_set = 0;
1223         if (force_ssid) {
1224                 wpa_hexdump_ascii(MSG_DEBUG, "P2P: Forced SSID",
1225                                   force_ssid, force_ssid_len);
1226                 os_memcpy(p2p->ssid, force_ssid, force_ssid_len);
1227                 p2p->ssid_len = force_ssid_len;
1228                 p2p->ssid_set = 1;
1229         }
1230
1231         dev->flags &= ~P2P_DEV_NOT_YET_READY;
1232         dev->flags &= ~P2P_DEV_USER_REJECTED;
1233         dev->flags &= ~P2P_DEV_WAIT_GO_NEG_RESPONSE;
1234         dev->flags &= ~P2P_DEV_WAIT_GO_NEG_CONFIRM;
1235         dev->connect_reqs = 0;
1236         dev->go_neg_req_sent = 0;
1237         dev->go_state = UNKNOWN_GO;
1238         p2p_set_dev_persistent(dev, persistent_group);
1239         p2p->go_intent = go_intent;
1240         os_memcpy(p2p->intended_addr, own_interface_addr, ETH_ALEN);
1241
1242         if (p2p->state != P2P_IDLE)
1243                 p2p_stop_find(p2p);
1244
1245         if (p2p->after_scan_tx) {
1246                 /*
1247                  * We need to drop the pending frame to avoid issues with the
1248                  * new GO Negotiation, e.g., when the pending frame was from a
1249                  * previous attempt at starting a GO Negotiation.
1250                  */
1251                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Dropped "
1252                         "previous pending Action frame TX that was waiting "
1253                         "for p2p_scan completion");
1254                 os_free(p2p->after_scan_tx);
1255                 p2p->after_scan_tx = NULL;
1256         }
1257
1258         dev->wps_method = wps_method;
1259         dev->status = P2P_SC_SUCCESS;
1260
1261         if (force_freq)
1262                 dev->flags |= P2P_DEV_FORCE_FREQ;
1263         else
1264                 dev->flags &= ~P2P_DEV_FORCE_FREQ;
1265
1266         if (p2p->p2p_scan_running) {
1267                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1268                         "P2P: p2p_scan running - delay connect send");
1269                 p2p->start_after_scan = P2P_AFTER_SCAN_CONNECT;
1270                 os_memcpy(p2p->after_scan_peer, peer_addr, ETH_ALEN);
1271                 return 0;
1272         }
1273         p2p->start_after_scan = P2P_AFTER_SCAN_NOTHING;
1274
1275         return p2p_connect_send(p2p, dev);
1276 }
1277
1278
1279 int p2p_authorize(struct p2p_data *p2p, const u8 *peer_addr,
1280                   enum p2p_wps_method wps_method,
1281                   int go_intent, const u8 *own_interface_addr,
1282                   unsigned int force_freq, int persistent_group,
1283                   const u8 *force_ssid, size_t force_ssid_len)
1284 {
1285         struct p2p_device *dev;
1286
1287         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1288                 "P2P: Request to authorize group negotiation - peer=" MACSTR
1289                 "  GO Intent=%d  Intended Interface Address=" MACSTR
1290                 " wps_method=%d  persistent_group=%d",
1291                 MAC2STR(peer_addr), go_intent, MAC2STR(own_interface_addr),
1292                 wps_method, persistent_group);
1293
1294         if (p2p_prepare_channel(p2p, force_freq) < 0)
1295                 return -1;
1296
1297         dev = p2p_get_device(p2p, peer_addr);
1298         if (dev == NULL) {
1299                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1300                         "P2P: Cannot authorize unknown P2P Device " MACSTR,
1301                         MAC2STR(peer_addr));
1302                 return -1;
1303         }
1304
1305         p2p->ssid_set = 0;
1306         if (force_ssid) {
1307                 wpa_hexdump_ascii(MSG_DEBUG, "P2P: Forced SSID",
1308                                   force_ssid, force_ssid_len);
1309                 os_memcpy(p2p->ssid, force_ssid, force_ssid_len);
1310                 p2p->ssid_len = force_ssid_len;
1311                 p2p->ssid_set = 1;
1312         }
1313
1314         dev->flags &= ~P2P_DEV_NOT_YET_READY;
1315         dev->flags &= ~P2P_DEV_USER_REJECTED;
1316         dev->go_neg_req_sent = 0;
1317         dev->go_state = UNKNOWN_GO;
1318         p2p_set_dev_persistent(dev, persistent_group);
1319         p2p->go_intent = go_intent;
1320         os_memcpy(p2p->intended_addr, own_interface_addr, ETH_ALEN);
1321
1322         dev->wps_method = wps_method;
1323         dev->status = P2P_SC_SUCCESS;
1324
1325         if (force_freq)
1326                 dev->flags |= P2P_DEV_FORCE_FREQ;
1327         else
1328                 dev->flags &= ~P2P_DEV_FORCE_FREQ;
1329
1330         return 0;
1331 }
1332
1333
1334 void p2p_add_dev_info(struct p2p_data *p2p, const u8 *addr,
1335                       struct p2p_device *dev, struct p2p_message *msg)
1336 {
1337         os_get_time(&dev->last_seen);
1338
1339         p2p_copy_wps_info(dev, 0, msg);
1340
1341         if (msg->listen_channel) {
1342                 int freq;
1343                 freq = p2p_channel_to_freq((char *) msg->listen_channel,
1344                                            msg->listen_channel[3],
1345                                            msg->listen_channel[4]);
1346                 if (freq < 0) {
1347                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1348                                 "P2P: Unknown peer Listen channel: "
1349                                 "country=%c%c(0x%02x) reg_class=%u channel=%u",
1350                                 msg->listen_channel[0],
1351                                 msg->listen_channel[1],
1352                                 msg->listen_channel[2],
1353                                 msg->listen_channel[3],
1354                                 msg->listen_channel[4]);
1355                 } else {
1356                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Update "
1357                                 "peer " MACSTR " Listen channel: %u -> %u MHz",
1358                                 MAC2STR(dev->info.p2p_device_addr),
1359                                 dev->listen_freq, freq);
1360                         dev->listen_freq = freq;
1361                 }
1362         }
1363
1364         if (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
1365                 dev->flags &= ~P2P_DEV_PROBE_REQ_ONLY;
1366                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1367                         "P2P: Completed device entry based on data from "
1368                         "GO Negotiation Request");
1369         } else {
1370                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1371                         "P2P: Created device entry based on GO Neg Req: "
1372                         MACSTR " dev_capab=0x%x group_capab=0x%x name='%s' "
1373                         "listen_freq=%d",
1374                         MAC2STR(dev->info.p2p_device_addr),
1375                         dev->info.dev_capab, dev->info.group_capab,
1376                         dev->info.device_name, dev->listen_freq);
1377         }
1378
1379         dev->flags &= ~P2P_DEV_GROUP_CLIENT_ONLY;
1380
1381         if (dev->flags & P2P_DEV_USER_REJECTED) {
1382                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1383                         "P2P: Do not report rejected device");
1384                 return;
1385         }
1386
1387         p2p->cfg->dev_found(p2p->cfg->cb_ctx, addr, &dev->info,
1388                             !(dev->flags & P2P_DEV_REPORTED_ONCE));
1389         dev->flags |= P2P_DEV_REPORTED | P2P_DEV_REPORTED_ONCE;
1390 }
1391
1392
1393 void p2p_build_ssid(struct p2p_data *p2p, u8 *ssid, size_t *ssid_len)
1394 {
1395         os_memcpy(ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN);
1396         p2p_random((char *) &ssid[P2P_WILDCARD_SSID_LEN], 2);
1397         os_memcpy(&ssid[P2P_WILDCARD_SSID_LEN + 2],
1398                   p2p->cfg->ssid_postfix, p2p->cfg->ssid_postfix_len);
1399         *ssid_len = P2P_WILDCARD_SSID_LEN + 2 + p2p->cfg->ssid_postfix_len;
1400 }
1401
1402
1403 int p2p_go_params(struct p2p_data *p2p, struct p2p_go_neg_results *params)
1404 {
1405         p2p_build_ssid(p2p, params->ssid, &params->ssid_len);
1406         p2p_random(params->passphrase, 8);
1407         return 0;
1408 }
1409
1410
1411 void p2p_go_complete(struct p2p_data *p2p, struct p2p_device *peer)
1412 {
1413         struct p2p_go_neg_results res;
1414         int go = peer->go_state == LOCAL_GO;
1415         struct p2p_channels intersection;
1416         int freqs;
1417         size_t i, j;
1418
1419         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1420                 "P2P: GO Negotiation with " MACSTR " completed (%s will be "
1421                 "GO)", MAC2STR(peer->info.p2p_device_addr),
1422                 go ? "local end" : "peer");
1423
1424         os_memset(&res, 0, sizeof(res));
1425         res.role_go = go;
1426         os_memcpy(res.peer_device_addr, peer->info.p2p_device_addr, ETH_ALEN);
1427         os_memcpy(res.peer_interface_addr, peer->intended_addr, ETH_ALEN);
1428         res.wps_method = peer->wps_method;
1429         if (peer->flags & P2P_DEV_PREFER_PERSISTENT_GROUP) {
1430                 if (peer->flags & P2P_DEV_PREFER_PERSISTENT_RECONN)
1431                         res.persistent_group = 2;
1432                 else
1433                         res.persistent_group = 1;
1434         }
1435
1436         if (go) {
1437                 /* Setup AP mode for WPS provisioning */
1438                 res.freq = p2p_channel_to_freq(p2p->cfg->country,
1439                                                p2p->op_reg_class,
1440                                                p2p->op_channel);
1441                 os_memcpy(res.ssid, p2p->ssid, p2p->ssid_len);
1442                 res.ssid_len = p2p->ssid_len;
1443                 p2p_random(res.passphrase, 8);
1444         } else {
1445                 res.freq = peer->oper_freq;
1446                 if (p2p->ssid_len) {
1447                         os_memcpy(res.ssid, p2p->ssid, p2p->ssid_len);
1448                         res.ssid_len = p2p->ssid_len;
1449                 }
1450         }
1451
1452         p2p_channels_intersect(&p2p->channels, &peer->channels,
1453                                &intersection);
1454         freqs = 0;
1455         for (i = 0; i < intersection.reg_classes; i++) {
1456                 struct p2p_reg_class *c = &intersection.reg_class[i];
1457                 if (freqs + 1 == P2P_MAX_CHANNELS)
1458                         break;
1459                 for (j = 0; j < c->channels; j++) {
1460                         int freq;
1461                         if (freqs + 1 == P2P_MAX_CHANNELS)
1462                                 break;
1463                         freq = p2p_channel_to_freq(peer->country, c->reg_class,
1464                                                    c->channel[j]);
1465                         if (freq < 0)
1466                                 continue;
1467                         res.freq_list[freqs++] = freq;
1468                 }
1469         }
1470
1471         res.peer_config_timeout = go ? peer->client_timeout : peer->go_timeout;
1472
1473         p2p_clear_timeout(p2p);
1474         p2p->ssid_set = 0;
1475         peer->go_neg_req_sent = 0;
1476         peer->wps_method = WPS_NOT_READY;
1477
1478         p2p_set_state(p2p, P2P_PROVISIONING);
1479         p2p->cfg->go_neg_completed(p2p->cfg->cb_ctx, &res);
1480 }
1481
1482
1483 static void p2p_rx_p2p_action(struct p2p_data *p2p, const u8 *sa,
1484                               const u8 *data, size_t len, int rx_freq)
1485 {
1486         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1487                 "P2P: RX P2P Public Action from " MACSTR, MAC2STR(sa));
1488         wpa_hexdump(MSG_MSGDUMP, "P2P: P2P Public Action contents", data, len);
1489
1490         if (len < 1)
1491                 return;
1492
1493         switch (data[0]) {
1494         case P2P_GO_NEG_REQ:
1495                 p2p_process_go_neg_req(p2p, sa, data + 1, len - 1, rx_freq);
1496                 break;
1497         case P2P_GO_NEG_RESP:
1498                 p2p_process_go_neg_resp(p2p, sa, data + 1, len - 1, rx_freq);
1499                 break;
1500         case P2P_GO_NEG_CONF:
1501                 p2p_process_go_neg_conf(p2p, sa, data + 1, len - 1);
1502                 break;
1503         case P2P_INVITATION_REQ:
1504                 p2p_process_invitation_req(p2p, sa, data + 1, len - 1,
1505                                            rx_freq);
1506                 break;
1507         case P2P_INVITATION_RESP:
1508                 p2p_process_invitation_resp(p2p, sa, data + 1, len - 1);
1509                 break;
1510         case P2P_PROV_DISC_REQ:
1511                 p2p_process_prov_disc_req(p2p, sa, data + 1, len - 1, rx_freq);
1512                 break;
1513         case P2P_PROV_DISC_RESP:
1514                 p2p_process_prov_disc_resp(p2p, sa, data + 1, len - 1);
1515                 break;
1516         case P2P_DEV_DISC_REQ:
1517                 p2p_process_dev_disc_req(p2p, sa, data + 1, len - 1, rx_freq);
1518                 break;
1519         case P2P_DEV_DISC_RESP:
1520                 p2p_process_dev_disc_resp(p2p, sa, data + 1, len - 1);
1521                 break;
1522         default:
1523                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1524                         "P2P: Unsupported P2P Public Action frame type %d",
1525                         data[0]);
1526                 break;
1527         }
1528 }
1529
1530
1531 static void p2p_rx_action_public(struct p2p_data *p2p, const u8 *da,
1532                                  const u8 *sa, const u8 *bssid, const u8 *data,
1533                                  size_t len, int freq)
1534 {
1535         if (len < 1)
1536                 return;
1537
1538         switch (data[0]) {
1539         case WLAN_PA_VENDOR_SPECIFIC:
1540                 data++;
1541                 len--;
1542                 if (len < 3)
1543                         return;
1544                 if (WPA_GET_BE24(data) != OUI_WFA)
1545                         return;
1546
1547                 data += 3;
1548                 len -= 3;
1549                 if (len < 1)
1550                         return;
1551
1552                 if (*data != P2P_OUI_TYPE)
1553                         return;
1554
1555                 p2p_rx_p2p_action(p2p, sa, data + 1, len - 1, freq);
1556                 break;
1557         case WLAN_PA_GAS_INITIAL_REQ:
1558                 p2p_rx_gas_initial_req(p2p, sa, data + 1, len - 1, freq);
1559                 break;
1560         case WLAN_PA_GAS_INITIAL_RESP:
1561                 p2p_rx_gas_initial_resp(p2p, sa, data + 1, len - 1, freq);
1562                 break;
1563         case WLAN_PA_GAS_COMEBACK_REQ:
1564                 p2p_rx_gas_comeback_req(p2p, sa, data + 1, len - 1, freq);
1565                 break;
1566         case WLAN_PA_GAS_COMEBACK_RESP:
1567                 p2p_rx_gas_comeback_resp(p2p, sa, data + 1, len - 1, freq);
1568                 break;
1569         }
1570 }
1571
1572
1573 void p2p_rx_action(struct p2p_data *p2p, const u8 *da, const u8 *sa,
1574                    const u8 *bssid, u8 category,
1575                    const u8 *data, size_t len, int freq)
1576 {
1577         if (category == WLAN_ACTION_PUBLIC) {
1578                 p2p_rx_action_public(p2p, da, sa, bssid, data, len, freq);
1579                 return;
1580         }
1581
1582         if (category != WLAN_ACTION_VENDOR_SPECIFIC)
1583                 return;
1584
1585         if (len < 4)
1586                 return;
1587
1588         if (WPA_GET_BE24(data) != OUI_WFA)
1589                 return;
1590         data += 3;
1591         len -= 3;
1592
1593         if (*data != P2P_OUI_TYPE)
1594                 return;
1595         data++;
1596         len--;
1597
1598         /* P2P action frame */
1599         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1600                 "P2P: RX P2P Action from " MACSTR, MAC2STR(sa));
1601         wpa_hexdump(MSG_MSGDUMP, "P2P: P2P Action contents", data, len);
1602
1603         if (len < 1)
1604                 return;
1605         switch (data[0]) {
1606         case P2P_NOA:
1607                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1608                         "P2P: Received P2P Action - Notice of Absence");
1609                 /* TODO */
1610                 break;
1611         case P2P_PRESENCE_REQ:
1612                 p2p_process_presence_req(p2p, da, sa, data + 1, len - 1, freq);
1613                 break;
1614         case P2P_PRESENCE_RESP:
1615                 p2p_process_presence_resp(p2p, da, sa, data + 1, len - 1);
1616                 break;
1617         case P2P_GO_DISC_REQ:
1618                 p2p_process_go_disc_req(p2p, da, sa, data + 1, len - 1, freq);
1619                 break;
1620         default:
1621                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1622                         "P2P: Received P2P Action - unknown type %u", data[0]);
1623                 break;
1624         }
1625 }
1626
1627
1628 static void p2p_go_neg_start(void *eloop_ctx, void *timeout_ctx)
1629 {
1630         struct p2p_data *p2p = eloop_ctx;
1631         if (p2p->go_neg_peer == NULL)
1632                 return;
1633         p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1634         p2p->go_neg_peer->status = P2P_SC_SUCCESS;
1635         p2p_connect_send(p2p, p2p->go_neg_peer);
1636 }
1637
1638
1639 static void p2p_invite_start(void *eloop_ctx, void *timeout_ctx)
1640 {
1641         struct p2p_data *p2p = eloop_ctx;
1642         if (p2p->invite_peer == NULL)
1643                 return;
1644         p2p->cfg->stop_listen(p2p->cfg->cb_ctx);
1645         p2p_invite_send(p2p, p2p->invite_peer, p2p->invite_go_dev_addr);
1646 }
1647
1648
1649 static void p2p_add_dev_from_probe_req(struct p2p_data *p2p, const u8 *addr,
1650                                        const u8 *ie, size_t ie_len)
1651 {
1652         struct p2p_message msg;
1653         struct p2p_device *dev;
1654
1655         os_memset(&msg, 0, sizeof(msg));
1656         if (p2p_parse_ies(ie, ie_len, &msg) < 0 || msg.p2p_attributes == NULL)
1657         {
1658                 p2p_parse_free(&msg);
1659                 return; /* not a P2P probe */
1660         }
1661
1662         if (msg.ssid == NULL || msg.ssid[1] != P2P_WILDCARD_SSID_LEN ||
1663             os_memcmp(msg.ssid + 2, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN)
1664             != 0) {
1665                 /* The Probe Request is not part of P2P Device Discovery. It is
1666                  * not known whether the source address of the frame is the P2P
1667                  * Device Address or P2P Interface Address. Do not add a new
1668                  * peer entry based on this frames.
1669                  */
1670                 p2p_parse_free(&msg);
1671                 return;
1672         }
1673
1674         dev = p2p_get_device(p2p, addr);
1675         if (dev) {
1676                 if (dev->country[0] == 0 && msg.listen_channel)
1677                         os_memcpy(dev->country, msg.listen_channel, 3);
1678                 os_get_time(&dev->last_seen);
1679                 p2p_parse_free(&msg);
1680                 return; /* already known */
1681         }
1682
1683         dev = p2p_create_device(p2p, addr);
1684         if (dev == NULL) {
1685                 p2p_parse_free(&msg);
1686                 return;
1687         }
1688
1689         os_get_time(&dev->last_seen);
1690         dev->flags |= P2P_DEV_PROBE_REQ_ONLY;
1691
1692         if (msg.listen_channel) {
1693                 os_memcpy(dev->country, msg.listen_channel, 3);
1694                 dev->listen_freq = p2p_channel_to_freq(dev->country,
1695                                                        msg.listen_channel[3],
1696                                                        msg.listen_channel[4]);
1697         }
1698
1699         p2p_copy_wps_info(dev, 1, &msg);
1700
1701         p2p_parse_free(&msg);
1702
1703         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1704                 "P2P: Created device entry based on Probe Req: " MACSTR
1705                 " dev_capab=0x%x group_capab=0x%x name='%s' listen_freq=%d",
1706                 MAC2STR(dev->info.p2p_device_addr), dev->info.dev_capab,
1707                 dev->info.group_capab, dev->info.device_name,
1708                 dev->listen_freq);
1709 }
1710
1711
1712 struct p2p_device * p2p_add_dev_from_go_neg_req(struct p2p_data *p2p,
1713                                                 const u8 *addr,
1714                                                 struct p2p_message *msg)
1715 {
1716         struct p2p_device *dev;
1717
1718         dev = p2p_get_device(p2p, addr);
1719         if (dev) {
1720                 os_get_time(&dev->last_seen);
1721                 return dev; /* already known */
1722         }
1723
1724         dev = p2p_create_device(p2p, addr);
1725         if (dev == NULL)
1726                 return NULL;
1727
1728         p2p_add_dev_info(p2p, addr, dev, msg);
1729
1730         return dev;
1731 }
1732
1733
1734 static int dev_type_match(const u8 *dev_type, const u8 *req_dev_type)
1735 {
1736         if (os_memcmp(dev_type, req_dev_type, WPS_DEV_TYPE_LEN) == 0)
1737                 return 1;
1738         if (os_memcmp(dev_type, req_dev_type, 2) == 0 &&
1739             WPA_GET_BE32(&req_dev_type[2]) == 0 &&
1740             WPA_GET_BE16(&req_dev_type[6]) == 0)
1741                 return 1; /* Category match with wildcard OUI/sub-category */
1742         return 0;
1743 }
1744
1745
1746 int dev_type_list_match(const u8 *dev_type, const u8 *req_dev_type[],
1747                         size_t num_req_dev_type)
1748 {
1749         size_t i;
1750         for (i = 0; i < num_req_dev_type; i++) {
1751                 if (dev_type_match(dev_type, req_dev_type[i]))
1752                         return 1;
1753         }
1754         return 0;
1755 }
1756
1757
1758 /**
1759  * p2p_match_dev_type - Match local device type with requested type
1760  * @p2p: P2P module context from p2p_init()
1761  * @wps: WPS TLVs from Probe Request frame (concatenated WPS IEs)
1762  * Returns: 1 on match, 0 on mismatch
1763  *
1764  * This function can be used to match the Requested Device Type attribute in
1765  * WPS IE with the local device types for deciding whether to reply to a Probe
1766  * Request frame.
1767  */
1768 int p2p_match_dev_type(struct p2p_data *p2p, struct wpabuf *wps)
1769 {
1770         struct wps_parse_attr attr;
1771         size_t i;
1772
1773         if (wps_parse_msg(wps, &attr))
1774                 return 1; /* assume no Requested Device Type attributes */
1775
1776         if (attr.num_req_dev_type == 0)
1777                 return 1; /* no Requested Device Type attributes -> match */
1778
1779         if (dev_type_list_match(p2p->cfg->pri_dev_type, attr.req_dev_type,
1780                                 attr.num_req_dev_type))
1781                 return 1; /* Own Primary Device Type matches */
1782
1783         for (i = 0; i < p2p->cfg->num_sec_dev_types; i++)
1784                 if (dev_type_list_match(p2p->cfg->sec_dev_type[i],
1785                                         attr.req_dev_type,
1786                                         attr.num_req_dev_type))
1787                 return 1; /* Own Secondary Device Type matches */
1788
1789         /* No matching device type found */
1790         return 0;
1791 }
1792
1793
1794 struct wpabuf * p2p_build_probe_resp_ies(struct p2p_data *p2p)
1795 {
1796         struct wpabuf *buf;
1797         u8 *len;
1798         int pw_id = -1;
1799
1800         buf = wpabuf_alloc(1000);
1801         if (buf == NULL)
1802                 return NULL;
1803
1804         if (p2p->go_neg_peer) {
1805                 /* Advertise immediate availability of WPS credential */
1806                 pw_id = p2p_wps_method_pw_id(p2p->go_neg_peer->wps_method);
1807         }
1808
1809         p2p_build_wps_ie(p2p, buf, pw_id, 1);
1810
1811         /* P2P IE */
1812         len = p2p_buf_add_ie_hdr(buf);
1813         p2p_buf_add_capability(buf, p2p->dev_capab, 0);
1814         if (p2p->ext_listen_interval)
1815                 p2p_buf_add_ext_listen_timing(buf, p2p->ext_listen_period,
1816                                               p2p->ext_listen_interval);
1817         p2p_buf_add_device_info(buf, p2p, NULL);
1818         p2p_buf_update_ie_hdr(buf, len);
1819
1820         return buf;
1821 }
1822
1823
1824 static int is_11b(u8 rate)
1825 {
1826         return rate == 0x02 || rate == 0x04 || rate == 0x0b || rate == 0x16;
1827 }
1828
1829
1830 static int supp_rates_11b_only(struct ieee802_11_elems *elems)
1831 {
1832         int num_11b = 0, num_others = 0;
1833         int i;
1834
1835         if (elems->supp_rates == NULL && elems->ext_supp_rates == NULL)
1836                 return 0;
1837
1838         for (i = 0; elems->supp_rates && i < elems->supp_rates_len; i++) {
1839                 if (is_11b(elems->supp_rates[i]))
1840                         num_11b++;
1841                 else
1842                         num_others++;
1843         }
1844
1845         for (i = 0; elems->ext_supp_rates && i < elems->ext_supp_rates_len;
1846              i++) {
1847                 if (is_11b(elems->ext_supp_rates[i]))
1848                         num_11b++;
1849                 else
1850                         num_others++;
1851         }
1852
1853         return num_11b > 0 && num_others == 0;
1854 }
1855
1856
1857 static enum p2p_probe_req_status
1858 p2p_reply_probe(struct p2p_data *p2p, const u8 *addr, const u8 *dst,
1859                 const u8 *bssid, const u8 *ie, size_t ie_len)
1860 {
1861         struct ieee802_11_elems elems;
1862         struct wpabuf *buf;
1863         struct ieee80211_mgmt *resp;
1864         struct p2p_message msg;
1865         struct wpabuf *ies;
1866
1867         if (!p2p->in_listen || !p2p->drv_in_listen) {
1868                 /* not in Listen state - ignore Probe Request */
1869                 return P2P_PREQ_NOT_LISTEN;
1870         }
1871
1872         if (ieee802_11_parse_elems((u8 *) ie, ie_len, &elems, 0) ==
1873             ParseFailed) {
1874                 /* Ignore invalid Probe Request frames */
1875                 return P2P_PREQ_MALFORMED;
1876         }
1877
1878         if (elems.p2p == NULL) {
1879                 /* not a P2P probe - ignore it */
1880                 return P2P_PREQ_NOT_P2P;
1881         }
1882
1883         if (dst && !is_broadcast_ether_addr(dst) &&
1884             os_memcmp(dst, p2p->cfg->dev_addr, ETH_ALEN) != 0) {
1885                 /* Not sent to the broadcast address or our P2P Device Address
1886                  */
1887                 return P2P_PREQ_NOT_PROCESSED;
1888         }
1889
1890         if (bssid && !is_broadcast_ether_addr(bssid)) {
1891                 /* Not sent to the Wildcard BSSID */
1892                 return P2P_PREQ_NOT_PROCESSED;
1893         }
1894
1895         if (elems.ssid == NULL || elems.ssid_len != P2P_WILDCARD_SSID_LEN ||
1896             os_memcmp(elems.ssid, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN) !=
1897             0) {
1898                 /* not using P2P Wildcard SSID - ignore */
1899                 return P2P_PREQ_NOT_PROCESSED;
1900         }
1901
1902         if (supp_rates_11b_only(&elems)) {
1903                 /* Indicates support for 11b rates only */
1904                 return P2P_PREQ_NOT_P2P;
1905         }
1906
1907         os_memset(&msg, 0, sizeof(msg));
1908         if (p2p_parse_ies(ie, ie_len, &msg) < 0) {
1909                 /* Could not parse P2P attributes */
1910                 return P2P_PREQ_NOT_P2P;
1911         }
1912
1913         if (msg.device_id &&
1914             os_memcmp(msg.device_id, p2p->cfg->dev_addr, ETH_ALEN) != 0) {
1915                 /* Device ID did not match */
1916                 p2p_parse_free(&msg);
1917                 return P2P_PREQ_NOT_PROCESSED;
1918         }
1919
1920         /* Check Requested Device Type match */
1921         if (msg.wps_attributes &&
1922             !p2p_match_dev_type(p2p, msg.wps_attributes)) {
1923                 /* No match with Requested Device Type */
1924                 p2p_parse_free(&msg);
1925                 return P2P_PREQ_NOT_PROCESSED;
1926         }
1927         p2p_parse_free(&msg);
1928
1929         if (!p2p->cfg->send_probe_resp) {
1930                 /* Response generated elsewhere */
1931                 return P2P_PREQ_NOT_PROCESSED;
1932         }
1933
1934         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
1935                 "P2P: Reply to P2P Probe Request in Listen state");
1936
1937         /*
1938          * We do not really have a specific BSS that this frame is advertising,
1939          * so build a frame that has some information in valid format. This is
1940          * really only used for discovery purposes, not to learn exact BSS
1941          * parameters.
1942          */
1943         ies = p2p_build_probe_resp_ies(p2p);
1944         if (ies == NULL)
1945                 return P2P_PREQ_NOT_PROCESSED;
1946
1947         buf = wpabuf_alloc(200 + wpabuf_len(ies));
1948         if (buf == NULL) {
1949                 wpabuf_free(ies);
1950                 return P2P_PREQ_NOT_PROCESSED;
1951         }
1952
1953         resp = NULL;
1954         resp = wpabuf_put(buf, resp->u.probe_resp.variable - (u8 *) resp);
1955
1956         resp->frame_control = host_to_le16((WLAN_FC_TYPE_MGMT << 2) |
1957                                            (WLAN_FC_STYPE_PROBE_RESP << 4));
1958         os_memcpy(resp->da, addr, ETH_ALEN);
1959         os_memcpy(resp->sa, p2p->cfg->dev_addr, ETH_ALEN);
1960         os_memcpy(resp->bssid, p2p->cfg->dev_addr, ETH_ALEN);
1961         resp->u.probe_resp.beacon_int = host_to_le16(100);
1962         /* hardware or low-level driver will setup seq_ctrl and timestamp */
1963         resp->u.probe_resp.capab_info =
1964                 host_to_le16(WLAN_CAPABILITY_SHORT_PREAMBLE |
1965                              WLAN_CAPABILITY_PRIVACY |
1966                              WLAN_CAPABILITY_SHORT_SLOT_TIME);
1967
1968         wpabuf_put_u8(buf, WLAN_EID_SSID);
1969         wpabuf_put_u8(buf, P2P_WILDCARD_SSID_LEN);
1970         wpabuf_put_data(buf, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN);
1971
1972         wpabuf_put_u8(buf, WLAN_EID_SUPP_RATES);
1973         wpabuf_put_u8(buf, 8);
1974         wpabuf_put_u8(buf, (60 / 5) | 0x80);
1975         wpabuf_put_u8(buf, 90 / 5);
1976         wpabuf_put_u8(buf, (120 / 5) | 0x80);
1977         wpabuf_put_u8(buf, 180 / 5);
1978         wpabuf_put_u8(buf, (240 / 5) | 0x80);
1979         wpabuf_put_u8(buf, 360 / 5);
1980         wpabuf_put_u8(buf, 480 / 5);
1981         wpabuf_put_u8(buf, 540 / 5);
1982
1983         wpabuf_put_u8(buf, WLAN_EID_DS_PARAMS);
1984         wpabuf_put_u8(buf, 1);
1985         wpabuf_put_u8(buf, p2p->cfg->channel);
1986
1987         wpabuf_put_buf(buf, ies);
1988         wpabuf_free(ies);
1989
1990         p2p->cfg->send_probe_resp(p2p->cfg->cb_ctx, buf);
1991
1992         wpabuf_free(buf);
1993
1994         return P2P_PREQ_NOT_PROCESSED;
1995 }
1996
1997
1998 enum p2p_probe_req_status
1999 p2p_probe_req_rx(struct p2p_data *p2p, const u8 *addr, const u8 *dst,
2000                  const u8 *bssid, const u8 *ie, size_t ie_len)
2001 {
2002         enum p2p_probe_req_status res;
2003
2004         p2p_add_dev_from_probe_req(p2p, addr, ie, ie_len);
2005
2006         res = p2p_reply_probe(p2p, addr, dst, bssid, ie, ie_len);
2007
2008         if ((p2p->state == P2P_CONNECT || p2p->state == P2P_CONNECT_LISTEN) &&
2009             p2p->go_neg_peer &&
2010             os_memcmp(addr, p2p->go_neg_peer->info.p2p_device_addr, ETH_ALEN)
2011             == 0) {
2012                 /* Received a Probe Request from GO Negotiation peer */
2013                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2014                         "P2P: Found GO Negotiation peer - try to start GO "
2015                         "negotiation from timeout");
2016                 eloop_register_timeout(0, 0, p2p_go_neg_start, p2p, NULL);
2017                 return P2P_PREQ_PROCESSED;
2018         }
2019
2020         if ((p2p->state == P2P_INVITE || p2p->state == P2P_INVITE_LISTEN) &&
2021             p2p->invite_peer &&
2022             os_memcmp(addr, p2p->invite_peer->info.p2p_device_addr, ETH_ALEN)
2023             == 0) {
2024                 /* Received a Probe Request from Invite peer */
2025                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2026                         "P2P: Found Invite peer - try to start Invite from "
2027                         "timeout");
2028                 eloop_register_timeout(0, 0, p2p_invite_start, p2p, NULL);
2029                 return P2P_PREQ_PROCESSED;
2030         }
2031
2032         return res;
2033 }
2034
2035
2036 static int p2p_assoc_req_ie_wlan_ap(struct p2p_data *p2p, const u8 *bssid,
2037                                     u8 *buf, size_t len, struct wpabuf *p2p_ie)
2038 {
2039         struct wpabuf *tmp;
2040         u8 *lpos;
2041         size_t tmplen;
2042         int res;
2043         u8 group_capab;
2044
2045         if (p2p_ie == NULL)
2046                 return 0; /* WLAN AP is not a P2P manager */
2047
2048         /*
2049          * (Re)Association Request - P2P IE
2050          * P2P Capability attribute (shall be present)
2051          * P2P Interface attribute (present if concurrent device and
2052          *      P2P Management is enabled)
2053          */
2054         tmp = wpabuf_alloc(200);
2055         if (tmp == NULL)
2056                 return -1;
2057
2058         lpos = p2p_buf_add_ie_hdr(tmp);
2059         group_capab = 0;
2060         if (p2p->num_groups > 0) {
2061                 group_capab |= P2P_GROUP_CAPAB_GROUP_OWNER;
2062                 if ((p2p->dev_capab & P2P_DEV_CAPAB_CONCURRENT_OPER) &&
2063                     (p2p->dev_capab & P2P_DEV_CAPAB_INFRA_MANAGED) &&
2064                     p2p->cross_connect)
2065                         group_capab |= P2P_GROUP_CAPAB_CROSS_CONN;
2066         }
2067         p2p_buf_add_capability(tmp, p2p->dev_capab, group_capab);
2068         if ((p2p->dev_capab & P2P_DEV_CAPAB_CONCURRENT_OPER) &&
2069             (p2p->dev_capab & P2P_DEV_CAPAB_INFRA_MANAGED))
2070                 p2p_buf_add_p2p_interface(tmp, p2p);
2071         p2p_buf_update_ie_hdr(tmp, lpos);
2072
2073         tmplen = wpabuf_len(tmp);
2074         if (tmplen > len)
2075                 res = -1;
2076         else {
2077                 os_memcpy(buf, wpabuf_head(tmp), tmplen);
2078                 res = tmplen;
2079         }
2080         wpabuf_free(tmp);
2081
2082         return res;
2083 }
2084
2085
2086 int p2p_assoc_req_ie(struct p2p_data *p2p, const u8 *bssid, u8 *buf,
2087                      size_t len, int p2p_group, struct wpabuf *p2p_ie)
2088 {
2089         struct wpabuf *tmp;
2090         u8 *lpos;
2091         struct p2p_device *peer;
2092         size_t tmplen;
2093         int res;
2094
2095         if (!p2p_group)
2096                 return p2p_assoc_req_ie_wlan_ap(p2p, bssid, buf, len, p2p_ie);
2097
2098         /*
2099          * (Re)Association Request - P2P IE
2100          * P2P Capability attribute (shall be present)
2101          * Extended Listen Timing (may be present)
2102          * P2P Device Info attribute (shall be present)
2103          */
2104         tmp = wpabuf_alloc(200);
2105         if (tmp == NULL)
2106                 return -1;
2107
2108         peer = bssid ? p2p_get_device(p2p, bssid) : NULL;
2109
2110         lpos = p2p_buf_add_ie_hdr(tmp);
2111         p2p_buf_add_capability(tmp, p2p->dev_capab, 0);
2112         if (p2p->ext_listen_interval)
2113                 p2p_buf_add_ext_listen_timing(tmp, p2p->ext_listen_period,
2114                                               p2p->ext_listen_interval);
2115         p2p_buf_add_device_info(tmp, p2p, peer);
2116         p2p_buf_update_ie_hdr(tmp, lpos);
2117
2118         tmplen = wpabuf_len(tmp);
2119         if (tmplen > len)
2120                 res = -1;
2121         else {
2122                 os_memcpy(buf, wpabuf_head(tmp), tmplen);
2123                 res = tmplen;
2124         }
2125         wpabuf_free(tmp);
2126
2127         return res;
2128 }
2129
2130
2131 int p2p_scan_result_text(const u8 *ies, size_t ies_len, char *buf, char *end)
2132 {
2133         struct wpabuf *p2p_ie;
2134         int ret;
2135
2136         p2p_ie = ieee802_11_vendor_ie_concat(ies, ies_len, P2P_IE_VENDOR_TYPE);
2137         if (p2p_ie == NULL)
2138                 return 0;
2139
2140         ret = p2p_attr_text(p2p_ie, buf, end);
2141         wpabuf_free(p2p_ie);
2142         return ret;
2143 }
2144
2145
2146 int p2p_parse_dev_addr(const u8 *ies, size_t ies_len, u8 *dev_addr)
2147 {
2148         struct wpabuf *p2p_ie;
2149         struct p2p_message msg;
2150         int ret = -1;
2151
2152         p2p_ie = ieee802_11_vendor_ie_concat(ies, ies_len,
2153                                              P2P_IE_VENDOR_TYPE);
2154         if (p2p_ie == NULL)
2155                 return -1;
2156         os_memset(&msg, 0, sizeof(msg));
2157         if (p2p_parse_p2p_ie(p2p_ie, &msg)) {
2158                 wpabuf_free(p2p_ie);
2159                 return -1;
2160         }
2161
2162         if (msg.p2p_device_addr) {
2163                 os_memcpy(dev_addr, msg.p2p_device_addr, ETH_ALEN);
2164                 ret = 0;
2165         } else if (msg.device_id) {
2166                 os_memcpy(dev_addr, msg.device_id, ETH_ALEN);
2167                 ret = 0;
2168         }
2169
2170         wpabuf_free(p2p_ie);
2171         return ret;
2172 }
2173
2174
2175 static void p2p_clear_go_neg(struct p2p_data *p2p)
2176 {
2177         p2p->go_neg_peer = NULL;
2178         p2p_clear_timeout(p2p);
2179         p2p_set_state(p2p, P2P_IDLE);
2180 }
2181
2182
2183 void p2p_wps_success_cb(struct p2p_data *p2p, const u8 *mac_addr)
2184 {
2185         if (p2p->go_neg_peer == NULL) {
2186                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2187                         "P2P: No pending Group Formation - "
2188                         "ignore WPS registration success notification");
2189                 return; /* No pending Group Formation */
2190         }
2191
2192         if (os_memcmp(mac_addr, p2p->go_neg_peer->intended_addr, ETH_ALEN) !=
2193             0) {
2194                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2195                         "P2P: Ignore WPS registration success notification "
2196                         "for " MACSTR " (GO Negotiation peer " MACSTR ")",
2197                         MAC2STR(mac_addr),
2198                         MAC2STR(p2p->go_neg_peer->intended_addr));
2199                 return; /* Ignore unexpected peer address */
2200         }
2201
2202         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2203                 "P2P: Group Formation completed successfully with " MACSTR,
2204                 MAC2STR(mac_addr));
2205
2206         p2p_clear_go_neg(p2p);
2207 }
2208
2209
2210 void p2p_group_formation_failed(struct p2p_data *p2p)
2211 {
2212         if (p2p->go_neg_peer == NULL) {
2213                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2214                         "P2P: No pending Group Formation - "
2215                         "ignore group formation failure notification");
2216                 return; /* No pending Group Formation */
2217         }
2218
2219         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2220                 "P2P: Group Formation failed with " MACSTR,
2221                 MAC2STR(p2p->go_neg_peer->intended_addr));
2222
2223         p2p_clear_go_neg(p2p);
2224 }
2225
2226
2227 struct p2p_data * p2p_init(const struct p2p_config *cfg)
2228 {
2229         struct p2p_data *p2p;
2230
2231         if (cfg->max_peers < 1)
2232                 return NULL;
2233
2234         p2p = os_zalloc(sizeof(*p2p) + sizeof(*cfg));
2235         if (p2p == NULL)
2236                 return NULL;
2237         p2p->cfg = (struct p2p_config *) (p2p + 1);
2238         os_memcpy(p2p->cfg, cfg, sizeof(*cfg));
2239         if (cfg->dev_name)
2240                 p2p->cfg->dev_name = os_strdup(cfg->dev_name);
2241         if (cfg->manufacturer)
2242                 p2p->cfg->manufacturer = os_strdup(cfg->manufacturer);
2243         if (cfg->model_name)
2244                 p2p->cfg->model_name = os_strdup(cfg->model_name);
2245         if (cfg->model_number)
2246                 p2p->cfg->model_number = os_strdup(cfg->model_number);
2247         if (cfg->serial_number)
2248                 p2p->cfg->serial_number = os_strdup(cfg->serial_number);
2249         if (cfg->pref_chan) {
2250                 p2p->cfg->pref_chan = os_malloc(cfg->num_pref_chan *
2251                                                 sizeof(struct p2p_channel));
2252                 if (p2p->cfg->pref_chan) {
2253                         os_memcpy(p2p->cfg->pref_chan, cfg->pref_chan,
2254                                   cfg->num_pref_chan *
2255                                   sizeof(struct p2p_channel));
2256                 } else
2257                         p2p->cfg->num_pref_chan = 0;
2258         }
2259
2260         p2p->min_disc_int = 1;
2261         p2p->max_disc_int = 3;
2262
2263         os_get_random(&p2p->next_tie_breaker, 1);
2264         p2p->next_tie_breaker &= 0x01;
2265         if (cfg->sd_request)
2266                 p2p->dev_capab |= P2P_DEV_CAPAB_SERVICE_DISCOVERY;
2267         p2p->dev_capab |= P2P_DEV_CAPAB_INVITATION_PROCEDURE;
2268         if (cfg->concurrent_operations)
2269                 p2p->dev_capab |= P2P_DEV_CAPAB_CONCURRENT_OPER;
2270         p2p->dev_capab |= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
2271
2272         dl_list_init(&p2p->devices);
2273
2274         eloop_register_timeout(P2P_PEER_EXPIRATION_INTERVAL, 0,
2275                                p2p_expiration_timeout, p2p, NULL);
2276
2277         return p2p;
2278 }
2279
2280
2281 void p2p_deinit(struct p2p_data *p2p)
2282 {
2283         eloop_cancel_timeout(p2p_expiration_timeout, p2p, NULL);
2284         eloop_cancel_timeout(p2p_ext_listen_timeout, p2p, NULL);
2285         eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
2286         p2p_flush(p2p);
2287         p2p_free_req_dev_types(p2p);
2288         os_free(p2p->cfg->dev_name);
2289         os_free(p2p->cfg->manufacturer);
2290         os_free(p2p->cfg->model_name);
2291         os_free(p2p->cfg->model_number);
2292         os_free(p2p->cfg->serial_number);
2293         os_free(p2p->cfg->pref_chan);
2294         os_free(p2p->groups);
2295         wpabuf_free(p2p->sd_resp);
2296         os_free(p2p->after_scan_tx);
2297         p2p_remove_wps_vendor_extensions(p2p);
2298         os_free(p2p);
2299 }
2300
2301
2302 void p2p_flush(struct p2p_data *p2p)
2303 {
2304         struct p2p_device *dev, *prev;
2305         p2p_stop_find(p2p);
2306         dl_list_for_each_safe(dev, prev, &p2p->devices, struct p2p_device,
2307                               list) {
2308                 dl_list_del(&dev->list);
2309                 p2p_device_free(p2p, dev);
2310         }
2311         p2p_free_sd_queries(p2p);
2312         os_free(p2p->after_scan_tx);
2313         p2p->after_scan_tx = NULL;
2314 }
2315
2316
2317 int p2p_unauthorize(struct p2p_data *p2p, const u8 *addr)
2318 {
2319         struct p2p_device *dev;
2320
2321         dev = p2p_get_device(p2p, addr);
2322         if (dev == NULL)
2323                 return -1;
2324
2325         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Unauthorizing " MACSTR,
2326                 MAC2STR(addr));
2327
2328         if (p2p->go_neg_peer == dev)
2329                 p2p->go_neg_peer = NULL;
2330
2331         dev->wps_method = WPS_NOT_READY;
2332         dev->flags &= ~P2P_DEV_WAIT_GO_NEG_RESPONSE;
2333         dev->flags &= ~P2P_DEV_WAIT_GO_NEG_CONFIRM;
2334
2335         /* Check if after_scan_tx is for this peer. If so free it */
2336         if (p2p->after_scan_tx &&
2337             os_memcmp(addr, p2p->after_scan_tx->dst, ETH_ALEN) == 0) {
2338                 os_free(p2p->after_scan_tx);
2339                 p2p->after_scan_tx = NULL;
2340         }
2341
2342         return 0;
2343 }
2344
2345
2346 int p2p_set_dev_name(struct p2p_data *p2p, const char *dev_name)
2347 {
2348         os_free(p2p->cfg->dev_name);
2349         if (dev_name) {
2350                 p2p->cfg->dev_name = os_strdup(dev_name);
2351                 if (p2p->cfg->dev_name == NULL)
2352                         return -1;
2353         } else
2354                 p2p->cfg->dev_name = NULL;
2355         return 0;
2356 }
2357
2358
2359 int p2p_set_manufacturer(struct p2p_data *p2p, const char *manufacturer)
2360 {
2361         os_free(p2p->cfg->manufacturer);
2362         p2p->cfg->manufacturer = NULL;
2363         if (manufacturer) {
2364                 p2p->cfg->manufacturer = os_strdup(manufacturer);
2365                 if (p2p->cfg->manufacturer == NULL)
2366                         return -1;
2367         }
2368
2369         return 0;
2370 }
2371
2372
2373 int p2p_set_model_name(struct p2p_data *p2p, const char *model_name)
2374 {
2375         os_free(p2p->cfg->model_name);
2376         p2p->cfg->model_name = NULL;
2377         if (model_name) {
2378                 p2p->cfg->model_name = os_strdup(model_name);
2379                 if (p2p->cfg->model_name == NULL)
2380                         return -1;
2381         }
2382
2383         return 0;
2384 }
2385
2386
2387 int p2p_set_model_number(struct p2p_data *p2p, const char *model_number)
2388 {
2389         os_free(p2p->cfg->model_number);
2390         p2p->cfg->model_number = NULL;
2391         if (model_number) {
2392                 p2p->cfg->model_number = os_strdup(model_number);
2393                 if (p2p->cfg->model_number == NULL)
2394                         return -1;
2395         }
2396
2397         return 0;
2398 }
2399
2400
2401 int p2p_set_serial_number(struct p2p_data *p2p, const char *serial_number)
2402 {
2403         os_free(p2p->cfg->serial_number);
2404         p2p->cfg->serial_number = NULL;
2405         if (serial_number) {
2406                 p2p->cfg->serial_number = os_strdup(serial_number);
2407                 if (p2p->cfg->serial_number == NULL)
2408                         return -1;
2409         }
2410
2411         return 0;
2412 }
2413
2414
2415 void p2p_set_config_methods(struct p2p_data *p2p, u16 config_methods)
2416 {
2417         p2p->cfg->config_methods = config_methods;
2418 }
2419
2420
2421 void p2p_set_uuid(struct p2p_data *p2p, const u8 *uuid)
2422 {
2423         os_memcpy(p2p->cfg->uuid, uuid, 16);
2424 }
2425
2426
2427 int p2p_set_pri_dev_type(struct p2p_data *p2p, const u8 *pri_dev_type)
2428 {
2429         os_memcpy(p2p->cfg->pri_dev_type, pri_dev_type, 8);
2430         return 0;
2431 }
2432
2433
2434 int p2p_set_sec_dev_types(struct p2p_data *p2p, const u8 dev_types[][8],
2435                           size_t num_dev_types)
2436 {
2437         if (num_dev_types > P2P_SEC_DEVICE_TYPES)
2438                 num_dev_types = P2P_SEC_DEVICE_TYPES;
2439         p2p->cfg->num_sec_dev_types = num_dev_types;
2440         os_memcpy(p2p->cfg->sec_dev_type, dev_types, num_dev_types * 8);
2441         return 0;
2442 }
2443
2444
2445 void p2p_remove_wps_vendor_extensions(struct p2p_data *p2p)
2446 {
2447         int i;
2448
2449         for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
2450                 wpabuf_free(p2p->wps_vendor_ext[i]);
2451                 p2p->wps_vendor_ext[i] = NULL;
2452         }
2453 }
2454
2455
2456 int p2p_add_wps_vendor_extension(struct p2p_data *p2p,
2457                                  const struct wpabuf *vendor_ext)
2458 {
2459         int i;
2460
2461         if (vendor_ext == NULL)
2462                 return -1;
2463
2464         for (i = 0; i < P2P_MAX_WPS_VENDOR_EXT; i++) {
2465                 if (p2p->wps_vendor_ext[i] == NULL)
2466                         break;
2467         }
2468         if (i >= P2P_MAX_WPS_VENDOR_EXT)
2469                 return -1;
2470
2471         p2p->wps_vendor_ext[i] = wpabuf_dup(vendor_ext);
2472         if (p2p->wps_vendor_ext[i] == NULL)
2473                 return -1;
2474
2475         return 0;
2476 }
2477
2478
2479 int p2p_set_country(struct p2p_data *p2p, const char *country)
2480 {
2481         os_memcpy(p2p->cfg->country, country, 3);
2482         return 0;
2483 }
2484
2485
2486 void p2p_continue_find(struct p2p_data *p2p)
2487 {
2488         struct p2p_device *dev;
2489         p2p_set_state(p2p, P2P_SEARCH);
2490         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
2491                 if (dev->flags & P2P_DEV_SD_SCHEDULE) {
2492                         if (p2p_start_sd(p2p, dev) == 0)
2493                                 return;
2494                         else
2495                                 break;
2496                 } else if (dev->req_config_methods &&
2497                            !(dev->flags & P2P_DEV_PD_FOR_JOIN)) {
2498                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Send "
2499                                 "pending Provision Discovery Request to "
2500                                 MACSTR " (config methods 0x%x)",
2501                                 MAC2STR(dev->info.p2p_device_addr),
2502                                 dev->req_config_methods);
2503                         if (p2p_send_prov_disc_req(p2p, dev, 0, 0) == 0)
2504                                 return;
2505                 }
2506         }
2507
2508         p2p_listen_in_find(p2p);
2509 }
2510
2511
2512 static void p2p_sd_cb(struct p2p_data *p2p, int success)
2513 {
2514         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2515                 "P2P: Service Discovery Query TX callback: success=%d",
2516                 success);
2517         p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2518
2519         if (!success) {
2520                 if (p2p->sd_peer) {
2521                         p2p->sd_peer->flags &= ~P2P_DEV_SD_SCHEDULE;
2522                         p2p->sd_peer = NULL;
2523                 }
2524                 p2p_continue_find(p2p);
2525                 return;
2526         }
2527
2528         if (p2p->sd_peer == NULL) {
2529                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2530                         "P2P: No SD peer entry known");
2531                 p2p_continue_find(p2p);
2532                 return;
2533         }
2534
2535         /* Wait for response from the peer */
2536         p2p_set_state(p2p, P2P_SD_DURING_FIND);
2537         p2p_set_timeout(p2p, 0, 200000);
2538 }
2539
2540
2541 /**
2542  * p2p_retry_pd - Retry any pending provision disc requests in IDLE state
2543  * @p2p: P2P module context from p2p_init()
2544  */
2545 static void p2p_retry_pd(struct p2p_data *p2p)
2546 {
2547         struct p2p_device *dev;
2548
2549         if (p2p->state != P2P_IDLE)
2550                 return;
2551
2552         /*
2553          * Retry the prov disc req attempt only for the peer that the user had
2554          * requested for and provided a join has not been initiated on it
2555          * in the meantime.
2556          */
2557
2558         dl_list_for_each(dev, &p2p->devices, struct p2p_device, list) {
2559                 if (os_memcmp(p2p->pending_pd_devaddr,
2560                               dev->info.p2p_device_addr, ETH_ALEN) != 0)
2561                         continue;
2562                 if (!dev->req_config_methods)
2563                         continue;
2564                 if (dev->flags & P2P_DEV_PD_FOR_JOIN)
2565                         continue;
2566
2567                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Send "
2568                         "pending Provision Discovery Request to "
2569                         MACSTR " (config methods 0x%x)",
2570                         MAC2STR(dev->info.p2p_device_addr),
2571                         dev->req_config_methods);
2572                 p2p_send_prov_disc_req(p2p, dev, 0, 0);
2573                 return;
2574         }
2575 }
2576
2577
2578 static void p2p_prov_disc_cb(struct p2p_data *p2p, int success)
2579 {
2580         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2581                 "P2P: Provision Discovery Request TX callback: success=%d",
2582                 success);
2583
2584         /*
2585          * Postpone resetting the pending action state till after we actually
2586          * time out. This allows us to take some action like notifying any
2587          * interested parties about no response to the request.
2588          *
2589          * When the timer (below) goes off we check in IDLE, SEARCH, or
2590          * LISTEN_ONLY state, which are the only allowed states to issue a PD
2591          * requests in, if this was still pending and then raise notification.
2592          */
2593
2594         if (!success) {
2595                 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2596
2597                 if (p2p->state != P2P_IDLE)
2598                         p2p_continue_find(p2p);
2599                 else if (p2p->user_initiated_pd) {
2600                         p2p->pending_action_state = P2P_PENDING_PD;
2601                         p2p_set_timeout(p2p, 0, 300000);
2602                 }
2603                 return;
2604         }
2605
2606         /*
2607          * This postponing, of resetting pending_action_state, needs to be
2608          * done only for user initiated PD requests and not internal ones.
2609          */
2610         if (p2p->user_initiated_pd)
2611                 p2p->pending_action_state = P2P_PENDING_PD;
2612         else
2613                 p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2614
2615         /* Wait for response from the peer */
2616         if (p2p->state == P2P_SEARCH)
2617                 p2p_set_state(p2p, P2P_PD_DURING_FIND);
2618         p2p_set_timeout(p2p, 0, 200000);
2619 }
2620
2621
2622 int p2p_scan_res_handler(struct p2p_data *p2p, const u8 *bssid, int freq,
2623                          int level, const u8 *ies, size_t ies_len)
2624 {
2625         p2p_add_device(p2p, bssid, freq, level, ies, ies_len, 1);
2626
2627         if (p2p->go_neg_peer && p2p->state == P2P_SEARCH &&
2628             os_memcmp(p2p->go_neg_peer->info.p2p_device_addr, bssid, ETH_ALEN)
2629             == 0) {
2630                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2631                         "P2P: Found GO Negotiation peer - try to start GO "
2632                         "negotiation");
2633                 p2p_connect_send(p2p, p2p->go_neg_peer);
2634                 return 1;
2635         }
2636
2637         return 0;
2638 }
2639
2640
2641 void p2p_scan_res_handled(struct p2p_data *p2p)
2642 {
2643         if (!p2p->p2p_scan_running) {
2644                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: p2p_scan was not "
2645                         "running, but scan results received");
2646         }
2647         p2p->p2p_scan_running = 0;
2648         eloop_cancel_timeout(p2p_scan_timeout, p2p, NULL);
2649
2650         if (p2p_run_after_scan(p2p))
2651                 return;
2652         if (p2p->state == P2P_SEARCH)
2653                 p2p_continue_find(p2p);
2654 }
2655
2656
2657 void p2p_scan_ie(struct p2p_data *p2p, struct wpabuf *ies, const u8 *dev_id)
2658 {
2659         u8 *len = p2p_buf_add_ie_hdr(ies);
2660         p2p_buf_add_capability(ies, p2p->dev_capab, 0);
2661         if (dev_id)
2662                 p2p_buf_add_device_id(ies, dev_id);
2663         if (p2p->cfg->reg_class && p2p->cfg->channel)
2664                 p2p_buf_add_listen_channel(ies, p2p->cfg->country,
2665                                            p2p->cfg->reg_class,
2666                                            p2p->cfg->channel);
2667         if (p2p->ext_listen_interval)
2668                 p2p_buf_add_ext_listen_timing(ies, p2p->ext_listen_period,
2669                                               p2p->ext_listen_interval);
2670         /* TODO: p2p_buf_add_operating_channel() if GO */
2671         p2p_buf_update_ie_hdr(ies, len);
2672 }
2673
2674
2675 size_t p2p_scan_ie_buf_len(struct p2p_data *p2p)
2676 {
2677         return 100;
2678 }
2679
2680
2681 int p2p_ie_text(struct wpabuf *p2p_ie, char *buf, char *end)
2682 {
2683         return p2p_attr_text(p2p_ie, buf, end);
2684 }
2685
2686
2687 static void p2p_go_neg_req_cb(struct p2p_data *p2p, int success)
2688 {
2689         struct p2p_device *dev = p2p->go_neg_peer;
2690
2691         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2692                 "P2P: GO Negotiation Request TX callback: success=%d",
2693                 success);
2694
2695         if (dev == NULL) {
2696                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2697                         "P2P: No pending GO Negotiation");
2698                 return;
2699         }
2700
2701         if (success) {
2702                 dev->go_neg_req_sent++;
2703                 if (dev->flags & P2P_DEV_USER_REJECTED) {
2704                         p2p_set_state(p2p, P2P_IDLE);
2705                         return;
2706                 }
2707         }
2708
2709         if (!success &&
2710             (dev->info.dev_capab & P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY) &&
2711             !is_zero_ether_addr(dev->member_in_go_dev)) {
2712                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2713                         "P2P: Peer " MACSTR " did not acknowledge request - "
2714                         "try to use device discoverability through its GO",
2715                         MAC2STR(dev->info.p2p_device_addr));
2716                 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
2717                 p2p_send_dev_disc_req(p2p, dev);
2718                 return;
2719         }
2720
2721         /*
2722          * Use P2P find, if needed, to find the other device from its listen
2723          * channel.
2724          */
2725         p2p_set_state(p2p, P2P_CONNECT);
2726         p2p_set_timeout(p2p, 0, 100000);
2727 }
2728
2729
2730 static void p2p_go_neg_resp_cb(struct p2p_data *p2p, int success)
2731 {
2732         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2733                 "P2P: GO Negotiation Response TX callback: success=%d",
2734                 success);
2735         if (!p2p->go_neg_peer && p2p->state == P2P_PROVISIONING) {
2736                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2737                         "P2P: Ignore TX callback event - GO Negotiation is "
2738                         "not running anymore");
2739                 return;
2740         }
2741         p2p_set_state(p2p, P2P_CONNECT);
2742         p2p_set_timeout(p2p, 0, 100000);
2743 }
2744
2745
2746 static void p2p_go_neg_resp_failure_cb(struct p2p_data *p2p, int success)
2747 {
2748         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2749                 "P2P: GO Negotiation Response (failure) TX callback: "
2750                 "success=%d", success);
2751         if (p2p->go_neg_peer && p2p->go_neg_peer->status != P2P_SC_SUCCESS) {
2752                 p2p_go_neg_failed(p2p, p2p->go_neg_peer,
2753                                   p2p->go_neg_peer->status);
2754         }
2755 }
2756
2757
2758 static void p2p_go_neg_conf_cb(struct p2p_data *p2p,
2759                                enum p2p_send_action_result result)
2760 {
2761         struct p2p_device *dev;
2762
2763         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2764                 "P2P: GO Negotiation Confirm TX callback: result=%d",
2765                 result);
2766         p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
2767         if (result == P2P_SEND_ACTION_FAILED) {
2768                 p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
2769                 return;
2770         }
2771         if (result == P2P_SEND_ACTION_NO_ACK) {
2772                 /*
2773                  * It looks like the TX status for GO Negotiation Confirm is
2774                  * often showing failure even when the peer has actually
2775                  * received the frame. Since the peer may change channels
2776                  * immediately after having received the frame, we may not see
2777                  * an Ack for retries, so just dropping a single frame may
2778                  * trigger this. To allow the group formation to succeed if the
2779                  * peer did indeed receive the frame, continue regardless of
2780                  * the TX status.
2781                  */
2782                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2783                         "P2P: Assume GO Negotiation Confirm TX was actually "
2784                         "received by the peer even though Ack was not "
2785                         "reported");
2786         }
2787
2788         dev = p2p->go_neg_peer;
2789         if (dev == NULL)
2790                 return;
2791
2792         p2p_go_complete(p2p, dev);
2793 }
2794
2795
2796 void p2p_send_action_cb(struct p2p_data *p2p, unsigned int freq, const u8 *dst,
2797                         const u8 *src, const u8 *bssid,
2798                         enum p2p_send_action_result result)
2799 {
2800         enum p2p_pending_action_state state;
2801         int success;
2802
2803         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2804                 "P2P: Action frame TX callback (state=%d freq=%u dst=" MACSTR
2805                 " src=" MACSTR " bssid=" MACSTR " result=%d",
2806                 p2p->pending_action_state, freq, MAC2STR(dst), MAC2STR(src),
2807                 MAC2STR(bssid), result);
2808         success = result == P2P_SEND_ACTION_SUCCESS;
2809         state = p2p->pending_action_state;
2810         p2p->pending_action_state = P2P_NO_PENDING_ACTION;
2811         switch (state) {
2812         case P2P_NO_PENDING_ACTION:
2813                 break;
2814         case P2P_PENDING_GO_NEG_REQUEST:
2815                 p2p_go_neg_req_cb(p2p, success);
2816                 break;
2817         case P2P_PENDING_GO_NEG_RESPONSE:
2818                 p2p_go_neg_resp_cb(p2p, success);
2819                 break;
2820         case P2P_PENDING_GO_NEG_RESPONSE_FAILURE:
2821                 p2p_go_neg_resp_failure_cb(p2p, success);
2822                 break;
2823         case P2P_PENDING_GO_NEG_CONFIRM:
2824                 p2p_go_neg_conf_cb(p2p, result);
2825                 break;
2826         case P2P_PENDING_SD:
2827                 p2p_sd_cb(p2p, success);
2828                 break;
2829         case P2P_PENDING_PD:
2830                 p2p_prov_disc_cb(p2p, success);
2831                 break;
2832         case P2P_PENDING_INVITATION_REQUEST:
2833                 p2p_invitation_req_cb(p2p, success);
2834                 break;
2835         case P2P_PENDING_INVITATION_RESPONSE:
2836                 p2p_invitation_resp_cb(p2p, success);
2837                 break;
2838         case P2P_PENDING_DEV_DISC_REQUEST:
2839                 p2p_dev_disc_req_cb(p2p, success);
2840                 break;
2841         case P2P_PENDING_DEV_DISC_RESPONSE:
2842                 p2p_dev_disc_resp_cb(p2p, success);
2843                 break;
2844         case P2P_PENDING_GO_DISC_REQ:
2845                 p2p_go_disc_req_cb(p2p, success);
2846                 break;
2847         }
2848 }
2849
2850
2851 void p2p_listen_cb(struct p2p_data *p2p, unsigned int freq,
2852                    unsigned int duration)
2853 {
2854         if (freq == p2p->pending_client_disc_freq) {
2855                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2856                         "P2P: Client discoverability remain-awake completed");
2857                 p2p->pending_client_disc_freq = 0;
2858                 return;
2859         }
2860
2861         if (freq != p2p->pending_listen_freq) {
2862                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2863                         "P2P: Unexpected listen callback for freq=%u "
2864                         "duration=%u (pending_listen_freq=%u)",
2865                         freq, duration, p2p->pending_listen_freq);
2866                 return;
2867         }
2868
2869         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2870                 "P2P: Starting Listen timeout(%u,%u) on freq=%u based on "
2871                 "callback",
2872                 p2p->pending_listen_sec, p2p->pending_listen_usec,
2873                 p2p->pending_listen_freq);
2874         p2p->in_listen = 1;
2875         p2p->drv_in_listen = freq;
2876         if (p2p->pending_listen_sec || p2p->pending_listen_usec) {
2877                 /*
2878                  * Add 20 msec extra wait to avoid race condition with driver
2879                  * remain-on-channel end event, i.e., give driver more time to
2880                  * complete the operation before our timeout expires.
2881                  */
2882                 p2p_set_timeout(p2p, p2p->pending_listen_sec,
2883                                 p2p->pending_listen_usec + 20000);
2884         }
2885
2886         p2p->pending_listen_freq = 0;
2887 }
2888
2889
2890 int p2p_listen_end(struct p2p_data *p2p, unsigned int freq)
2891 {
2892         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Driver ended Listen "
2893                 "state (freq=%u)", freq);
2894         p2p->drv_in_listen = 0;
2895         if (p2p->in_listen)
2896                 return 0; /* Internal timeout will trigger the next step */
2897
2898         if (p2p->state == P2P_CONNECT_LISTEN && p2p->go_neg_peer) {
2899                 if (p2p->go_neg_peer->connect_reqs >= 120) {
2900                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2901                                 "P2P: Timeout on sending GO Negotiation "
2902                                 "Request without getting response");
2903                         p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
2904                         return 0;
2905                 }
2906
2907                 p2p_set_state(p2p, P2P_CONNECT);
2908                 p2p_connect_send(p2p, p2p->go_neg_peer);
2909                 return 1;
2910         } else if (p2p->state == P2P_SEARCH) {
2911                 if (p2p->p2p_scan_running) {
2912                          /*
2913                           * Search is already in progress. This can happen if
2914                           * an Action frame RX is reported immediately after
2915                           * the end of a remain-on-channel operation and the
2916                           * response frame to that is sent using an offchannel
2917                           * operation while in p2p_find. Avoid an attempt to
2918                           * restart a scan here.
2919                           */
2920                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: p2p_scan "
2921                                 "already in progress - do not try to start a "
2922                                 "new one");
2923                         return 1;
2924                 }
2925                 p2p_search(p2p);
2926                 return 1;
2927         }
2928
2929         return 0;
2930 }
2931
2932
2933 static void p2p_timeout_connect(struct p2p_data *p2p)
2934 {
2935         p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
2936         p2p_set_state(p2p, P2P_CONNECT_LISTEN);
2937         p2p_listen_in_find(p2p);
2938 }
2939
2940
2941 static void p2p_timeout_connect_listen(struct p2p_data *p2p)
2942 {
2943         if (p2p->go_neg_peer) {
2944                 if (p2p->drv_in_listen) {
2945                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Driver is "
2946                                 "still in Listen state; wait for it to "
2947                                 "complete");
2948                         return;
2949                 }
2950
2951                 if (p2p->go_neg_peer->connect_reqs >= 120) {
2952                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2953                                 "P2P: Timeout on sending GO Negotiation "
2954                                 "Request without getting response");
2955                         p2p_go_neg_failed(p2p, p2p->go_neg_peer, -1);
2956                         return;
2957                 }
2958
2959                 p2p_set_state(p2p, P2P_CONNECT);
2960                 p2p_connect_send(p2p, p2p->go_neg_peer);
2961         } else
2962                 p2p_set_state(p2p, P2P_IDLE);
2963 }
2964
2965
2966 static void p2p_timeout_wait_peer_connect(struct p2p_data *p2p)
2967 {
2968         /*
2969          * TODO: could remain constantly in Listen state for some time if there
2970          * are no other concurrent uses for the radio. For now, go to listen
2971          * state once per second to give other uses a chance to use the radio.
2972          */
2973         p2p_set_state(p2p, P2P_WAIT_PEER_IDLE);
2974         p2p_set_timeout(p2p, 0, 500000);
2975 }
2976
2977
2978 static void p2p_timeout_wait_peer_idle(struct p2p_data *p2p)
2979 {
2980         struct p2p_device *dev = p2p->go_neg_peer;
2981
2982         if (dev == NULL) {
2983                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2984                         "P2P: Unknown GO Neg peer - stop GO Neg wait");
2985                 return;
2986         }
2987
2988         dev->wait_count++;
2989         if (dev->wait_count >= 120) {
2990                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2991                         "P2P: Timeout on waiting peer to become ready for GO "
2992                         "Negotiation");
2993                 p2p_go_neg_failed(p2p, dev, -1);
2994                 return;
2995         }
2996
2997         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
2998                 "P2P: Go to Listen state while waiting for the peer to become "
2999                 "ready for GO Negotiation");
3000         p2p_set_state(p2p, P2P_WAIT_PEER_CONNECT);
3001         p2p_listen_in_find(p2p);
3002 }
3003
3004
3005 static void p2p_timeout_sd_during_find(struct p2p_data *p2p)
3006 {
3007         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3008                 "P2P: Service Discovery Query timeout");
3009         if (p2p->sd_peer) {
3010                 p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3011                 p2p->sd_peer->flags &= ~P2P_DEV_SD_SCHEDULE;
3012                 p2p->sd_peer = NULL;
3013         }
3014         p2p_continue_find(p2p);
3015 }
3016
3017
3018 static void p2p_timeout_prov_disc_during_find(struct p2p_data *p2p)
3019 {
3020         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3021                 "P2P: Provision Discovery Request timeout");
3022         p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3023         p2p_continue_find(p2p);
3024 }
3025
3026
3027 static void p2p_timeout_prov_disc_req(struct p2p_data *p2p)
3028 {
3029         p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3030
3031         /*
3032          * For user initiated PD requests that we have not gotten any responses
3033          * for while in IDLE state, we retry them a couple of times before
3034          * giving up.
3035          */
3036         if (!p2p->user_initiated_pd)
3037                 return;
3038
3039         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3040                 "P2P: User initiated Provision Discovery Request timeout");
3041
3042         if (p2p->pd_retries) {
3043                 p2p->pd_retries--;
3044                 p2p_retry_pd(p2p);
3045         } else {
3046                 if (p2p->cfg->prov_disc_fail)
3047                         p2p->cfg->prov_disc_fail(p2p->cfg->cb_ctx,
3048                                                  p2p->pending_pd_devaddr,
3049                                                  P2P_PROV_DISC_TIMEOUT);
3050                 p2p_reset_pending_pd(p2p);
3051         }
3052 }
3053
3054
3055 static void p2p_timeout_invite(struct p2p_data *p2p)
3056 {
3057         p2p->cfg->send_action_done(p2p->cfg->cb_ctx);
3058         p2p_set_state(p2p, P2P_INVITE_LISTEN);
3059         if (p2p->inv_role == P2P_INVITE_ROLE_ACTIVE_GO) {
3060                 /*
3061                  * Better remain on operating channel instead of listen channel
3062                  * when running a group.
3063                  */
3064                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Inviting in "
3065                         "active GO role - wait on operating channel");
3066                 p2p_set_timeout(p2p, 0, 100000);
3067                 return;
3068         }
3069         p2p_listen_in_find(p2p);
3070 }
3071
3072
3073 static void p2p_timeout_invite_listen(struct p2p_data *p2p)
3074 {
3075         if (p2p->invite_peer && p2p->invite_peer->invitation_reqs < 100) {
3076                 p2p_set_state(p2p, P2P_INVITE);
3077                 p2p_invite_send(p2p, p2p->invite_peer,
3078                                 p2p->invite_go_dev_addr);
3079         } else {
3080                 if (p2p->invite_peer) {
3081                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3082                                 "P2P: Invitation Request retry limit reached");
3083                         if (p2p->cfg->invitation_result)
3084                                 p2p->cfg->invitation_result(
3085                                         p2p->cfg->cb_ctx, -1, NULL);
3086                 }
3087                 p2p_set_state(p2p, P2P_IDLE);
3088         }
3089 }
3090
3091
3092 static void p2p_state_timeout(void *eloop_ctx, void *timeout_ctx)
3093 {
3094         struct p2p_data *p2p = eloop_ctx;
3095
3096         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Timeout (state=%s)",
3097                 p2p_state_txt(p2p->state));
3098
3099         p2p->in_listen = 0;
3100
3101         switch (p2p->state) {
3102         case P2P_IDLE:
3103                 /* Check if we timed out waiting for PD req */
3104                 if (p2p->pending_action_state == P2P_PENDING_PD)
3105                         p2p_timeout_prov_disc_req(p2p);
3106                 break;
3107         case P2P_SEARCH:
3108                 /* Check if we timed out waiting for PD req */
3109                 if (p2p->pending_action_state == P2P_PENDING_PD)
3110                         p2p_timeout_prov_disc_req(p2p);
3111                 p2p_search(p2p);
3112                 break;
3113         case P2P_CONNECT:
3114                 p2p_timeout_connect(p2p);
3115                 break;
3116         case P2P_CONNECT_LISTEN:
3117                 p2p_timeout_connect_listen(p2p);
3118                 break;
3119         case P2P_GO_NEG:
3120                 break;
3121         case P2P_LISTEN_ONLY:
3122                 /* Check if we timed out waiting for PD req */
3123                 if (p2p->pending_action_state == P2P_PENDING_PD)
3124                         p2p_timeout_prov_disc_req(p2p);
3125
3126                 if (p2p->ext_listen_only) {
3127                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3128                                 "P2P: Extended Listen Timing - Listen State "
3129                                 "completed");
3130                         p2p->ext_listen_only = 0;
3131                         p2p_set_state(p2p, P2P_IDLE);
3132                 }
3133                 break;
3134         case P2P_WAIT_PEER_CONNECT:
3135                 p2p_timeout_wait_peer_connect(p2p);
3136                 break;
3137         case P2P_WAIT_PEER_IDLE:
3138                 p2p_timeout_wait_peer_idle(p2p);
3139                 break;
3140         case P2P_SD_DURING_FIND:
3141                 p2p_timeout_sd_during_find(p2p);
3142                 break;
3143         case P2P_PROVISIONING:
3144                 break;
3145         case P2P_PD_DURING_FIND:
3146                 p2p_timeout_prov_disc_during_find(p2p);
3147                 break;
3148         case P2P_INVITE:
3149                 p2p_timeout_invite(p2p);
3150                 break;
3151         case P2P_INVITE_LISTEN:
3152                 p2p_timeout_invite_listen(p2p);
3153                 break;
3154         case P2P_SEARCH_WHEN_READY:
3155                 break;
3156         }
3157 }
3158
3159
3160 int p2p_reject(struct p2p_data *p2p, const u8 *peer_addr)
3161 {
3162         struct p2p_device *dev;
3163
3164         dev = p2p_get_device(p2p, peer_addr);
3165         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Local request to reject "
3166                 "connection attempts by peer " MACSTR, MAC2STR(peer_addr));
3167         if (dev == NULL) {
3168                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Peer " MACSTR
3169                         " unknown", MAC2STR(peer_addr));
3170                 return -1;
3171         }
3172         dev->status = P2P_SC_FAIL_REJECTED_BY_USER;
3173         dev->flags |= P2P_DEV_USER_REJECTED;
3174         return 0;
3175 }
3176
3177
3178 const char * p2p_wps_method_text(enum p2p_wps_method method)
3179 {
3180         switch (method) {
3181         case WPS_NOT_READY:
3182                 return "not-ready";
3183         case WPS_PIN_DISPLAY:
3184                 return "Display";
3185         case WPS_PIN_KEYPAD:
3186                 return "Keypad";
3187         case WPS_PBC:
3188                 return "PBC";
3189         }
3190
3191         return "??";
3192 }
3193
3194
3195 static const char * p2p_go_state_text(enum p2p_go_state go_state)
3196 {
3197         switch (go_state) {
3198         case UNKNOWN_GO:
3199                 return "unknown";
3200         case LOCAL_GO:
3201                 return "local";
3202         case  REMOTE_GO:
3203                 return "remote";
3204         }
3205
3206         return "??";
3207 }
3208
3209
3210 const struct p2p_peer_info * p2p_get_peer_info(struct p2p_data *p2p,
3211                                                const u8 *addr, int next)
3212 {
3213         struct p2p_device *dev;
3214
3215         if (addr)
3216                 dev = p2p_get_device(p2p, addr);
3217         else
3218                 dev = dl_list_first(&p2p->devices, struct p2p_device, list);
3219
3220         if (dev && next) {
3221                 dev = dl_list_first(&dev->list, struct p2p_device, list);
3222                 if (&dev->list == &p2p->devices)
3223                         dev = NULL;
3224         }
3225
3226         if (dev == NULL)
3227                 return NULL;
3228
3229         return &dev->info;
3230 }
3231
3232
3233 int p2p_get_peer_info_txt(const struct p2p_peer_info *info,
3234                           char *buf, size_t buflen)
3235 {
3236         struct p2p_device *dev;
3237         int res;
3238         char *pos, *end;
3239         struct os_time now;
3240
3241         if (info == NULL)
3242                 return -1;
3243
3244         dev = (struct p2p_device *) (((u8 *) info) -
3245                                      offsetof(struct p2p_device, info));
3246
3247         pos = buf;
3248         end = buf + buflen;
3249
3250         os_get_time(&now);
3251         res = os_snprintf(pos, end - pos,
3252                           "age=%d\n"
3253                           "listen_freq=%d\n"
3254                           "wps_method=%s\n"
3255                           "interface_addr=" MACSTR "\n"
3256                           "member_in_go_dev=" MACSTR "\n"
3257                           "member_in_go_iface=" MACSTR "\n"
3258                           "go_neg_req_sent=%d\n"
3259                           "go_state=%s\n"
3260                           "dialog_token=%u\n"
3261                           "intended_addr=" MACSTR "\n"
3262                           "country=%c%c\n"
3263                           "oper_freq=%d\n"
3264                           "req_config_methods=0x%x\n"
3265                           "flags=%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s\n"
3266                           "status=%d\n"
3267                           "wait_count=%u\n"
3268                           "invitation_reqs=%u\n",
3269                           (int) (now.sec - dev->last_seen.sec),
3270                           dev->listen_freq,
3271                           p2p_wps_method_text(dev->wps_method),
3272                           MAC2STR(dev->interface_addr),
3273                           MAC2STR(dev->member_in_go_dev),
3274                           MAC2STR(dev->member_in_go_iface),
3275                           dev->go_neg_req_sent,
3276                           p2p_go_state_text(dev->go_state),
3277                           dev->dialog_token,
3278                           MAC2STR(dev->intended_addr),
3279                           dev->country[0] ? dev->country[0] : '_',
3280                           dev->country[1] ? dev->country[1] : '_',
3281                           dev->oper_freq,
3282                           dev->req_config_methods,
3283                           dev->flags & P2P_DEV_PROBE_REQ_ONLY ?
3284                           "[PROBE_REQ_ONLY]" : "",
3285                           dev->flags & P2P_DEV_REPORTED ? "[REPORTED]" : "",
3286                           dev->flags & P2P_DEV_NOT_YET_READY ?
3287                           "[NOT_YET_READY]" : "",
3288                           dev->flags & P2P_DEV_SD_INFO ? "[SD_INFO]" : "",
3289                           dev->flags & P2P_DEV_SD_SCHEDULE ? "[SD_SCHEDULE]" :
3290                           "",
3291                           dev->flags & P2P_DEV_PD_PEER_DISPLAY ?
3292                           "[PD_PEER_DISPLAY]" : "",
3293                           dev->flags & P2P_DEV_PD_PEER_KEYPAD ?
3294                           "[PD_PEER_KEYPAD]" : "",
3295                           dev->flags & P2P_DEV_USER_REJECTED ?
3296                           "[USER_REJECTED]" : "",
3297                           dev->flags & P2P_DEV_PEER_WAITING_RESPONSE ?
3298                           "[PEER_WAITING_RESPONSE]" : "",
3299                           dev->flags & P2P_DEV_PREFER_PERSISTENT_GROUP ?
3300                           "[PREFER_PERSISTENT_GROUP]" : "",
3301                           dev->flags & P2P_DEV_WAIT_GO_NEG_RESPONSE ?
3302                           "[WAIT_GO_NEG_RESPONSE]" : "",
3303                           dev->flags & P2P_DEV_WAIT_GO_NEG_CONFIRM ?
3304                           "[WAIT_GO_NEG_CONFIRM]" : "",
3305                           dev->flags & P2P_DEV_GROUP_CLIENT_ONLY ?
3306                           "[GROUP_CLIENT_ONLY]" : "",
3307                           dev->flags & P2P_DEV_FORCE_FREQ ?
3308                           "[FORCE_FREQ]" : "",
3309                           dev->flags & P2P_DEV_PD_FOR_JOIN ?
3310                           "[PD_FOR_JOIN]" : "",
3311                           dev->status,
3312                           dev->wait_count,
3313                           dev->invitation_reqs);
3314         if (res < 0 || res >= end - pos)
3315                 return pos - buf;
3316         pos += res;
3317
3318         if (dev->ext_listen_period) {
3319                 res = os_snprintf(pos, end - pos,
3320                                   "ext_listen_period=%u\n"
3321                                   "ext_listen_interval=%u\n",
3322                                   dev->ext_listen_period,
3323                                   dev->ext_listen_interval);
3324                 if (res < 0 || res >= end - pos)
3325                         return pos - buf;
3326                 pos += res;
3327         }
3328
3329         if (dev->oper_ssid_len) {
3330                 res = os_snprintf(pos, end - pos,
3331                                   "oper_ssid=%s\n",
3332                                   wpa_ssid_txt(dev->oper_ssid,
3333                                                dev->oper_ssid_len));
3334                 if (res < 0 || res >= end - pos)
3335                         return pos - buf;
3336                 pos += res;
3337         }
3338
3339         return pos - buf;
3340 }
3341
3342
3343 int p2p_peer_known(struct p2p_data *p2p, const u8 *addr)
3344 {
3345         return p2p_get_device(p2p, addr) != NULL;
3346 }
3347
3348
3349 void p2p_set_client_discoverability(struct p2p_data *p2p, int enabled)
3350 {
3351         if (enabled) {
3352                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Client "
3353                         "discoverability enabled");
3354                 p2p->dev_capab |= P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
3355         } else {
3356                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Client "
3357                         "discoverability disabled");
3358                 p2p->dev_capab &= ~P2P_DEV_CAPAB_CLIENT_DISCOVERABILITY;
3359         }
3360 }
3361
3362
3363 static struct wpabuf * p2p_build_presence_req(u32 duration1, u32 interval1,
3364                                               u32 duration2, u32 interval2)
3365 {
3366         struct wpabuf *req;
3367         struct p2p_noa_desc desc1, desc2, *ptr1 = NULL, *ptr2 = NULL;
3368         u8 *len;
3369
3370         req = wpabuf_alloc(100);
3371         if (req == NULL)
3372                 return NULL;
3373
3374         if (duration1 || interval1) {
3375                 os_memset(&desc1, 0, sizeof(desc1));
3376                 desc1.count_type = 1;
3377                 desc1.duration = duration1;
3378                 desc1.interval = interval1;
3379                 ptr1 = &desc1;
3380
3381                 if (duration2 || interval2) {
3382                         os_memset(&desc2, 0, sizeof(desc2));
3383                         desc2.count_type = 2;
3384                         desc2.duration = duration2;
3385                         desc2.interval = interval2;
3386                         ptr2 = &desc2;
3387                 }
3388         }
3389
3390         p2p_buf_add_action_hdr(req, P2P_PRESENCE_REQ, 1);
3391         len = p2p_buf_add_ie_hdr(req);
3392         p2p_buf_add_noa(req, 0, 0, 0, ptr1, ptr2);
3393         p2p_buf_update_ie_hdr(req, len);
3394
3395         return req;
3396 }
3397
3398
3399 int p2p_presence_req(struct p2p_data *p2p, const u8 *go_interface_addr,
3400                      const u8 *own_interface_addr, unsigned int freq,
3401                      u32 duration1, u32 interval1, u32 duration2,
3402                      u32 interval2)
3403 {
3404         struct wpabuf *req;
3405
3406         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Send Presence Request to "
3407                 "GO " MACSTR " (own interface " MACSTR ") freq=%u dur1=%u "
3408                 "int1=%u dur2=%u int2=%u",
3409                 MAC2STR(go_interface_addr), MAC2STR(own_interface_addr),
3410                 freq, duration1, interval1, duration2, interval2);
3411
3412         req = p2p_build_presence_req(duration1, interval1, duration2,
3413                                      interval2);
3414         if (req == NULL)
3415                 return -1;
3416
3417         p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3418         if (p2p_send_action(p2p, freq, go_interface_addr, own_interface_addr,
3419                             go_interface_addr,
3420                             wpabuf_head(req), wpabuf_len(req), 200) < 0) {
3421                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3422                         "P2P: Failed to send Action frame");
3423         }
3424         wpabuf_free(req);
3425
3426         return 0;
3427 }
3428
3429
3430 static struct wpabuf * p2p_build_presence_resp(u8 status, const u8 *noa,
3431                                                size_t noa_len, u8 dialog_token)
3432 {
3433         struct wpabuf *resp;
3434         u8 *len;
3435
3436         resp = wpabuf_alloc(100 + noa_len);
3437         if (resp == NULL)
3438                 return NULL;
3439
3440         p2p_buf_add_action_hdr(resp, P2P_PRESENCE_RESP, dialog_token);
3441         len = p2p_buf_add_ie_hdr(resp);
3442         p2p_buf_add_status(resp, status);
3443         if (noa) {
3444                 wpabuf_put_u8(resp, P2P_ATTR_NOTICE_OF_ABSENCE);
3445                 wpabuf_put_le16(resp, noa_len);
3446                 wpabuf_put_data(resp, noa, noa_len);
3447         } else
3448                 p2p_buf_add_noa(resp, 0, 0, 0, NULL, NULL);
3449         p2p_buf_update_ie_hdr(resp, len);
3450
3451         return resp;
3452 }
3453
3454
3455 static void p2p_process_presence_req(struct p2p_data *p2p, const u8 *da,
3456                                      const u8 *sa, const u8 *data, size_t len,
3457                                      int rx_freq)
3458 {
3459         struct p2p_message msg;
3460         u8 status;
3461         struct wpabuf *resp;
3462         size_t g;
3463         struct p2p_group *group = NULL;
3464         int parsed = 0;
3465         u8 noa[50];
3466         int noa_len;
3467
3468         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3469                 "P2P: Received P2P Action - P2P Presence Request");
3470
3471         for (g = 0; g < p2p->num_groups; g++) {
3472                 if (os_memcmp(da, p2p_group_get_interface_addr(p2p->groups[g]),
3473                               ETH_ALEN) == 0) {
3474                         group = p2p->groups[g];
3475                         break;
3476                 }
3477         }
3478         if (group == NULL) {
3479                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3480                         "P2P: Ignore P2P Presence Request for unknown group "
3481                         MACSTR, MAC2STR(da));
3482                 return;
3483         }
3484
3485         if (p2p_parse(data, len, &msg) < 0) {
3486                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3487                         "P2P: Failed to parse P2P Presence Request");
3488                 status = P2P_SC_FAIL_INVALID_PARAMS;
3489                 goto fail;
3490         }
3491         parsed = 1;
3492
3493         if (msg.noa == NULL) {
3494                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3495                         "P2P: No NoA attribute in P2P Presence Request");
3496                 status = P2P_SC_FAIL_INVALID_PARAMS;
3497                 goto fail;
3498         }
3499
3500         status = p2p_group_presence_req(group, sa, msg.noa, msg.noa_len);
3501
3502 fail:
3503         if (p2p->cfg->get_noa)
3504                 noa_len = p2p->cfg->get_noa(p2p->cfg->cb_ctx, da, noa,
3505                                             sizeof(noa));
3506         else
3507                 noa_len = -1;
3508         resp = p2p_build_presence_resp(status, noa_len > 0 ? noa : NULL,
3509                                        noa_len > 0 ? noa_len : 0,
3510                                        msg.dialog_token);
3511         if (parsed)
3512                 p2p_parse_free(&msg);
3513         if (resp == NULL)
3514                 return;
3515
3516         p2p->pending_action_state = P2P_NO_PENDING_ACTION;
3517         if (p2p_send_action(p2p, rx_freq, sa, da, da,
3518                             wpabuf_head(resp), wpabuf_len(resp), 200) < 0) {
3519                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3520                         "P2P: Failed to send Action frame");
3521         }
3522         wpabuf_free(resp);
3523 }
3524
3525
3526 static void p2p_process_presence_resp(struct p2p_data *p2p, const u8 *da,
3527                                       const u8 *sa, const u8 *data, size_t len)
3528 {
3529         struct p2p_message msg;
3530
3531         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3532                 "P2P: Received P2P Action - P2P Presence Response");
3533
3534         if (p2p_parse(data, len, &msg) < 0) {
3535                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3536                         "P2P: Failed to parse P2P Presence Response");
3537                 return;
3538         }
3539
3540         if (msg.status == NULL || msg.noa == NULL) {
3541                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3542                         "P2P: No Status or NoA attribute in P2P Presence "
3543                         "Response");
3544                 p2p_parse_free(&msg);
3545                 return;
3546         }
3547
3548         if (*msg.status) {
3549                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3550                         "P2P: P2P Presence Request was rejected: status %u",
3551                         *msg.status);
3552                 p2p_parse_free(&msg);
3553                 return;
3554         }
3555
3556         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3557                 "P2P: P2P Presence Request was accepted");
3558         wpa_hexdump(MSG_DEBUG, "P2P: P2P Presence Response - NoA",
3559                     msg.noa, msg.noa_len);
3560         /* TODO: process NoA */
3561         p2p_parse_free(&msg);
3562 }
3563
3564
3565 static void p2p_ext_listen_timeout(void *eloop_ctx, void *timeout_ctx)
3566 {
3567         struct p2p_data *p2p = eloop_ctx;
3568
3569         if (p2p->ext_listen_interval) {
3570                 /* Schedule next extended listen timeout */
3571                 eloop_register_timeout(p2p->ext_listen_interval_sec,
3572                                        p2p->ext_listen_interval_usec,
3573                                        p2p_ext_listen_timeout, p2p, NULL);
3574         }
3575
3576         if (p2p->state == P2P_LISTEN_ONLY && p2p->ext_listen_only) {
3577                 /*
3578                  * This should not really happen, but it looks like the Listen
3579                  * command may fail is something else (e.g., a scan) was
3580                  * running at an inconvenient time. As a workaround, allow new
3581                  * Extended Listen operation to be started.
3582                  */
3583                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Previous "
3584                         "Extended Listen operation had not been completed - "
3585                         "try again");
3586                 p2p->ext_listen_only = 0;
3587                 p2p_set_state(p2p, P2P_IDLE);
3588         }
3589
3590         if (p2p->state != P2P_IDLE) {
3591                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Skip Extended "
3592                         "Listen timeout in active state (%s)",
3593                         p2p_state_txt(p2p->state));
3594                 return;
3595         }
3596
3597         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Extended Listen timeout");
3598         p2p->ext_listen_only = 1;
3599         if (p2p_listen(p2p, p2p->ext_listen_period) < 0) {
3600                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Failed to start "
3601                         "Listen state for Extended Listen Timing");
3602                 p2p->ext_listen_only = 0;
3603         }
3604 }
3605
3606
3607 int p2p_ext_listen(struct p2p_data *p2p, unsigned int period,
3608                    unsigned int interval)
3609 {
3610         if (period > 65535 || interval > 65535 || period > interval ||
3611             (period == 0 && interval > 0) || (period > 0 && interval == 0)) {
3612                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3613                         "P2P: Invalid Extended Listen Timing request: "
3614                         "period=%u interval=%u", period, interval);
3615                 return -1;
3616         }
3617
3618         eloop_cancel_timeout(p2p_ext_listen_timeout, p2p, NULL);
3619
3620         if (interval == 0) {
3621                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3622                         "P2P: Disabling Extended Listen Timing");
3623                 p2p->ext_listen_period = 0;
3624                 p2p->ext_listen_interval = 0;
3625                 return 0;
3626         }
3627
3628         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG,
3629                 "P2P: Enabling Extended Listen Timing: period %u msec, "
3630                 "interval %u msec", period, interval);
3631         p2p->ext_listen_period = period;
3632         p2p->ext_listen_interval = interval;
3633         p2p->ext_listen_interval_sec = interval / 1000;
3634         p2p->ext_listen_interval_usec = (interval % 1000) * 1000;
3635
3636         eloop_register_timeout(p2p->ext_listen_interval_sec,
3637                                p2p->ext_listen_interval_usec,
3638                                p2p_ext_listen_timeout, p2p, NULL);
3639
3640         return 0;
3641 }
3642
3643
3644 void p2p_deauth_notif(struct p2p_data *p2p, const u8 *bssid, u16 reason_code,
3645                       const u8 *ie, size_t ie_len)
3646 {
3647         struct p2p_message msg;
3648
3649         if (bssid == NULL || ie == NULL)
3650                 return;
3651
3652         os_memset(&msg, 0, sizeof(msg));
3653         if (p2p_parse_ies(ie, ie_len, &msg))
3654                 return;
3655         if (msg.minor_reason_code == NULL)
3656                 return;
3657
3658         wpa_msg(p2p->cfg->msg_ctx, MSG_INFO,
3659                 "P2P: Deauthentication notification BSSID " MACSTR
3660                 " reason_code=%u minor_reason_code=%u",
3661                 MAC2STR(bssid), reason_code, *msg.minor_reason_code);
3662
3663         p2p_parse_free(&msg);
3664 }
3665
3666
3667 void p2p_disassoc_notif(struct p2p_data *p2p, const u8 *bssid, u16 reason_code,
3668                         const u8 *ie, size_t ie_len)
3669 {
3670         struct p2p_message msg;
3671
3672         if (bssid == NULL || ie == NULL)
3673                 return;
3674
3675         os_memset(&msg, 0, sizeof(msg));
3676         if (p2p_parse_ies(ie, ie_len, &msg))
3677                 return;
3678         if (msg.minor_reason_code == NULL)
3679                 return;
3680
3681         wpa_msg(p2p->cfg->msg_ctx, MSG_INFO,
3682                 "P2P: Disassociation notification BSSID " MACSTR
3683                 " reason_code=%u minor_reason_code=%u",
3684                 MAC2STR(bssid), reason_code, *msg.minor_reason_code);
3685
3686         p2p_parse_free(&msg);
3687 }
3688
3689
3690 void p2p_set_managed_oper(struct p2p_data *p2p, int enabled)
3691 {
3692         if (enabled) {
3693                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Managed P2P "
3694                         "Device operations enabled");
3695                 p2p->dev_capab |= P2P_DEV_CAPAB_INFRA_MANAGED;
3696         } else {
3697                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Managed P2P "
3698                         "Device operations disabled");
3699                 p2p->dev_capab &= ~P2P_DEV_CAPAB_INFRA_MANAGED;
3700         }
3701 }
3702
3703
3704 int p2p_set_listen_channel(struct p2p_data *p2p, u8 reg_class, u8 channel)
3705 {
3706         if (p2p_channel_to_freq(p2p->cfg->country, reg_class, channel) < 0)
3707                 return -1;
3708
3709         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Set Listen channel: "
3710                 "reg_class %u channel %u", reg_class, channel);
3711         p2p->cfg->reg_class = reg_class;
3712         p2p->cfg->channel = channel;
3713
3714         return 0;
3715 }
3716
3717
3718 int p2p_set_ssid_postfix(struct p2p_data *p2p, const u8 *postfix, size_t len)
3719 {
3720         wpa_hexdump_ascii(MSG_DEBUG, "P2P: New SSID postfix", postfix, len);
3721         if (postfix == NULL) {
3722                 p2p->cfg->ssid_postfix_len = 0;
3723                 return 0;
3724         }
3725         if (len > sizeof(p2p->cfg->ssid_postfix))
3726                 return -1;
3727         os_memcpy(p2p->cfg->ssid_postfix, postfix, len);
3728         p2p->cfg->ssid_postfix_len = len;
3729         return 0;
3730 }
3731
3732
3733 int p2p_set_oper_channel(struct p2p_data *p2p, u8 op_reg_class, u8 op_channel,
3734                          int cfg_op_channel)
3735 {
3736         if (p2p_channel_to_freq(p2p->cfg->country, op_reg_class, op_channel)
3737             < 0)
3738                 return -1;
3739
3740         wpa_msg(p2p->cfg->msg_ctx, MSG_INFO, "P2P: Set Operating channel: "
3741                 "reg_class %u channel %u", op_reg_class, op_channel);
3742         p2p->cfg->op_reg_class = op_reg_class;
3743         p2p->cfg->op_channel = op_channel;
3744         p2p->cfg->cfg_op_channel = cfg_op_channel;
3745         return 0;
3746 }
3747
3748
3749 int p2p_set_pref_chan(struct p2p_data *p2p, unsigned int num_pref_chan,
3750                       const struct p2p_channel *pref_chan)
3751 {
3752         struct p2p_channel *n;
3753
3754         if (pref_chan) {
3755                 n = os_malloc(num_pref_chan * sizeof(struct p2p_channel));
3756                 if (n == NULL)
3757                         return -1;
3758                 os_memcpy(n, pref_chan,
3759                           num_pref_chan * sizeof(struct p2p_channel));
3760         } else
3761                 n = NULL;
3762
3763         os_free(p2p->cfg->pref_chan);
3764         p2p->cfg->pref_chan = n;
3765         p2p->cfg->num_pref_chan = num_pref_chan;
3766
3767         return 0;
3768 }
3769
3770
3771 int p2p_get_interface_addr(struct p2p_data *p2p, const u8 *dev_addr,
3772                            u8 *iface_addr)
3773 {
3774         struct p2p_device *dev = p2p_get_device(p2p, dev_addr);
3775         if (dev == NULL || is_zero_ether_addr(dev->interface_addr))
3776                 return -1;
3777         os_memcpy(iface_addr, dev->interface_addr, ETH_ALEN);
3778         return 0;
3779 }
3780
3781
3782 int p2p_get_dev_addr(struct p2p_data *p2p, const u8 *iface_addr,
3783                            u8 *dev_addr)
3784 {
3785         struct p2p_device *dev = p2p_get_device_interface(p2p, iface_addr);
3786         if (dev == NULL)
3787                 return -1;
3788         os_memcpy(dev_addr, dev->info.p2p_device_addr, ETH_ALEN);
3789         return 0;
3790 }
3791
3792
3793 void p2p_set_peer_filter(struct p2p_data *p2p, const u8 *addr)
3794 {
3795         os_memcpy(p2p->peer_filter, addr, ETH_ALEN);
3796         if (is_zero_ether_addr(p2p->peer_filter))
3797                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Disable peer "
3798                         "filter");
3799         else
3800                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Enable peer "
3801                         "filter for " MACSTR, MAC2STR(p2p->peer_filter));
3802 }
3803
3804
3805 void p2p_set_cross_connect(struct p2p_data *p2p, int enabled)
3806 {
3807         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Cross connection %s",
3808                 enabled ? "enabled" : "disabled");
3809         if (p2p->cross_connect == enabled)
3810                 return;
3811         p2p->cross_connect = enabled;
3812         /* TODO: may need to tear down any action group where we are GO(?) */
3813 }
3814
3815
3816 int p2p_get_oper_freq(struct p2p_data *p2p, const u8 *iface_addr)
3817 {
3818         struct p2p_device *dev = p2p_get_device_interface(p2p, iface_addr);
3819         if (dev == NULL)
3820                 return -1;
3821         if (dev->oper_freq <= 0)
3822                 return -1;
3823         return dev->oper_freq;
3824 }
3825
3826
3827 void p2p_set_intra_bss_dist(struct p2p_data *p2p, int enabled)
3828 {
3829         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Intra BSS distribution %s",
3830                 enabled ? "enabled" : "disabled");
3831         p2p->cfg->p2p_intra_bss = enabled;
3832 }
3833
3834
3835 void p2p_update_channel_list(struct p2p_data *p2p, struct p2p_channels *chan)
3836 {
3837         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Update channel list");
3838         os_memcpy(&p2p->cfg->channels, chan, sizeof(struct p2p_channels));
3839 }
3840
3841
3842 int p2p_send_action(struct p2p_data *p2p, unsigned int freq, const u8 *dst,
3843                     const u8 *src, const u8 *bssid, const u8 *buf,
3844                     size_t len, unsigned int wait_time)
3845 {
3846         if (p2p->p2p_scan_running) {
3847                 wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Delay Action "
3848                         "frame TX until p2p_scan completes");
3849                 if (p2p->after_scan_tx) {
3850                         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Dropped "
3851                                 "previous pending Action frame TX");
3852                         os_free(p2p->after_scan_tx);
3853                 }
3854                 p2p->after_scan_tx = os_malloc(sizeof(*p2p->after_scan_tx) +
3855                                                len);
3856                 if (p2p->after_scan_tx == NULL)
3857                         return -1;
3858                 p2p->after_scan_tx->freq = freq;
3859                 os_memcpy(p2p->after_scan_tx->dst, dst, ETH_ALEN);
3860                 os_memcpy(p2p->after_scan_tx->src, src, ETH_ALEN);
3861                 os_memcpy(p2p->after_scan_tx->bssid, bssid, ETH_ALEN);
3862                 p2p->after_scan_tx->len = len;
3863                 p2p->after_scan_tx->wait_time = wait_time;
3864                 os_memcpy(p2p->after_scan_tx + 1, buf, len);
3865                 return 0;
3866         }
3867
3868         return p2p->cfg->send_action(p2p->cfg->cb_ctx, freq, dst, src, bssid,
3869                                      buf, len, wait_time);
3870 }
3871
3872
3873 void p2p_set_best_channels(struct p2p_data *p2p, int freq_24, int freq_5,
3874                            int freq_overall)
3875 {
3876         wpa_msg(p2p->cfg->msg_ctx, MSG_DEBUG, "P2P: Best channel: 2.4 GHz: %d,"
3877                 "  5 GHz: %d,  overall: %d", freq_24, freq_5, freq_overall);
3878         p2p->best_freq_24 = freq_24;
3879         p2p->best_freq_5 = freq_5;
3880         p2p->best_freq_overall = freq_overall;
3881 }
3882
3883
3884 const u8 * p2p_get_go_neg_peer(struct p2p_data *p2p)
3885 {
3886         if (p2p == NULL || p2p->go_neg_peer == NULL)
3887                 return NULL;
3888         return p2p->go_neg_peer->info.p2p_device_addr;
3889 }
3890
3891
3892 const struct p2p_peer_info *
3893 p2p_get_peer_found(struct p2p_data *p2p, const u8 *addr, int next)
3894 {
3895         struct p2p_device *dev;
3896
3897         if (addr) {
3898                 dev = p2p_get_device(p2p, addr);
3899                 if (!dev)
3900                         return NULL;
3901
3902                 if (!next) {
3903                         if (dev->flags & P2P_DEV_PROBE_REQ_ONLY)
3904                                 return NULL;
3905
3906                         return &dev->info;
3907                 } else {
3908                         do {
3909                                 dev = dl_list_first(&dev->list,
3910                                                     struct p2p_device,
3911                                                     list);
3912                                 if (&dev->list == &p2p->devices)
3913                                         return NULL;
3914                         } while (dev->flags & P2P_DEV_PROBE_REQ_ONLY);
3915                 }
3916         } else {
3917                 dev = dl_list_first(&p2p->devices, struct p2p_device, list);
3918                 if (!dev)
3919                         return NULL;
3920                 while (dev->flags & P2P_DEV_PROBE_REQ_ONLY) {
3921                         dev = dl_list_first(&dev->list,
3922                                             struct p2p_device,
3923                                             list);
3924                         if (&dev->list == &p2p->devices)
3925                                 return NULL;
3926                 }
3927         }
3928
3929         return &dev->info;
3930 }
3931
3932
3933 int p2p_in_progress(struct p2p_data *p2p)
3934 {
3935         if (p2p == NULL)
3936                 return 0;
3937         return p2p->state != P2P_IDLE && p2p->state != P2P_PROVISIONING;
3938 }